@authhero/kysely-adapter 12.1.0 → 12.3.0

package/dist/kysely-adapter.mjs

@@ -1,19 +1,19 @@
 import { customAlphabet as e, nanoid as t } from "nanoid";
 import { booleanToInt as n, convertDatesToAdapter as r, dbDateToIso as i, dbDateToIsoRequired as a, getCountAsInt as o, isoToDbDate as s, nowIso as c, removeNullProperties as l, removeUndefinedAndNull as u, stringifyProperties as d } from "@authhero/adapter-interfaces/sql";
 import { sql as f } from "kysely";
-import { LoginSessionState as p, clientGrantSchema as m, clientRegistrationTokenTypeSchema as h, codeSchema as g, decodeCursor as _, emailTemplateSchema as v, encodeCursor as ee, flowSchema as y, formSchema as b, handlerConfigSchema as te, isPlainObject as ne, loginSessionSchema as re, matchSchema as ie, migrationProviderTypeSchema as ae, parseUserId as oe, resourceServerSchema as se, rolloutInsertSchema as ce, rolloutSchema as le, sanitizeLuceneQuery as x, scimMappingEntrySchema as ue, tenantOperationEventInsertSchema as de, tenantOperationEventSchema as fe, tenantOperationInsertSchema as pe, tenantOperationSchema as me } from "@authhero/adapter-interfaces";
-import { HTTPException as S } from "hono/http-exception";
+import { LoginSessionState as p, MONDAY_EPOCH_SHIFT_MS as m, WEEK_MS as h, buildSessionRetention as g, clientGrantSchema as _, clientRegistrationTokenTypeSchema as v, codeSchema as y, decodeCursor as ee, emailTemplateSchema as te, encodeCursor as ne, flowSchema as b, formSchema as x, handlerConfigSchema as re, isPlainObject as ie, loginSessionSchema as ae, matchSchema as oe, migrationProviderTypeSchema as se, parseUserId as ce, resourceServerSchema as le, rolloutInsertSchema as ue, rolloutSchema as de, sanitizeLuceneQuery as S, scimMappingEntrySchema as fe, sessionRetentionWindow as pe, tenantOperationEventInsertSchema as me, tenantOperationEventSchema as he, tenantOperationInsertSchema as ge, tenantOperationSchema as _e } from "@authhero/adapter-interfaces";
+import { HTTPException as C } from "hono/http-exception";
 import "@hono/zod-openapi";
-import { Migrator as he } from "kysely/migration";
+import { Migrator as ve } from "kysely/migration";
 //#region \0rolldown/runtime.js
-var ge = Object.defineProperty, C = (e, t) => {
+var ye = Object.defineProperty, w = (e, t) => {
 	let n = {};
-	for (var r in e) ge(n, r, {
+	for (var r in e) ye(n, r, {
 		get: e[r],
 		enumerable: !0
 	});
-	return t || ge(n, Symbol.toStringTag, { value: "Module" }), n;
-}, _e = 17, ve = {
+	return t || ye(n, Symbol.toStringTag, { value: "Module" }), n;
+}, be = 17, xe = {
 	organization: "org_",
 	connection: "con_",
 	action: "act_",
@@ -25,39 +25,39 @@ var ge = Object.defineProperty, C = (e, t) => {
 	guardian_factor: "gfa_",
 	invite: "inv_"
 };
-function w(t) {
-	let n = e("0123456789abcdefghijklmnopqrstuvwxyz", _e)();
-	return `${ve[t]}${n}`;
-}
-function ye() {
-	return w("organization");
-}
-function be() {
-	return w("connection");
-}
-function xe() {
-	return w("action");
+function T(t) {
+	let n = e("0123456789abcdefghijklmnopqrstuvwxyz", be)();
+	return `${xe[t]}${n}`;
 }
 function Se() {
-	return w("action_version");
+	return T("organization");
 }
 function Ce() {
-	return w("hook");
+	return T("connection");
 }
 function we() {
-	return w("resource_server");
+	return T("action");
 }
 function Te() {
-	return w("hook_code");
+	return T("action_version");
 }
 function Ee() {
-	return w("invite");
+	return T("hook");
+}
+function De() {
+	return T("resource_server");
+}
+function Oe() {
+	return T("hook_code");
+}
+function ke() {
+	return T("invite");
 }
 //#endregion
 //#region src/actions/create.ts
-function De(e) {
+function Ae(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : o, c = i?.id ?? xe();
+		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : o, c = i?.id ?? we();
 		return await e.insertInto("actions").values({
 			id: c,
 			tenant_id: t,
@@ -91,14 +91,14 @@ function De(e) {
 }
 //#endregion
 //#region src/actions/get.ts
-function Oe(e) {
+function E(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function ke(e) {
+function je(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("actions").where("actions.tenant_id", "=", t).where("actions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -113,9 +113,9 @@ function ke(e) {
 			runtime: m.runtime ?? void 0,
 			status: m.status || "built",
 			deployed_at: s ? new Date(Number(s)).toISOString() : void 0,
-			secrets: Oe(c),
-			dependencies: Oe(l),
-			supported_triggers: Oe(u),
+			secrets: E(c),
+			dependencies: E(l),
+			supported_triggers: E(u),
 			is_system: !!d,
 			inherit: !!f
 		};
@@ -123,19 +123,19 @@ function ke(e) {
 }
 //#endregion
 //#region src/helpers/filter.ts
-function Ae(e) {
+function Me(e) {
 	return f`coalesce(${f.ref(e.column)}, ${f.lit(e.defaultValue)})`;
 }
-function T(e) {
+function D(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function E(e, t, n, r, i = [], a = {}) {
+function O(e, t, n, r, i = [], a = {}) {
 	let o = new Set(i), { ref: s } = e.dynamic, c = (e) => {
 		let t = a[e];
 		return t === void 0 ? e : typeof t == "string" ? t : t.column;
 	}, l = (e) => {
 		let t = a[e];
-		return t === void 0 || typeof t == "string" ? s(t ?? e) : Ae(t);
+		return t === void 0 || typeof t == "string" ? s(t ?? e) : Me(t);
 	}, u = (e, t) => {
 		let n = a[e];
 		if (n === void 0 || typeof n == "string") return t;
@@ -148,7 +148,7 @@ function E(e, t, n, r, i = [], a = {}) {
 			if (n) {
 				let [, t, r] = n;
 				if (!t || !r) return null;
-				let i = t.trim(), a = T(r.replace(/^"(.*)"$/, "$1").trim());
+				let i = t.trim(), a = D(r.replace(/^"(.*)"$/, "$1").trim());
 				return o.has(i) ? e(s(c(i)), "like", `%${a}%`) : e(l(i), "=", u(i, a));
 			}
 			return null;
@@ -166,8 +166,8 @@ function E(e, t, n, r, i = [], a = {}) {
 		else if (e.startsWith("_exists_:")) n = e.substring(9), i = !0, t = !1;
 		else if (e.includes(":")) {
 			let o = t ? e.substring(1) : e, s = o.indexOf(":");
-			n = o.substring(0, s), r = o.substring(s + 1), i = !1, r.startsWith(">=") ? (a = ">=", r = r.substring(2)) : r.startsWith(">") ? (a = ">", r = r.substring(1)) : r.startsWith("<=") ? (a = "<=", r = r.substring(2)) : r.startsWith("<") ? (a = "<", r = r.substring(1)) : a = "=", r.startsWith("\"") && r.endsWith("\"") && r.length > 1 && (r = r.slice(1, -1)), r = T(r);
-		} else n = null, r = T(e), i = !1;
+			n = o.substring(0, s), r = o.substring(s + 1), i = !1, r.startsWith(">=") ? (a = ">=", r = r.substring(2)) : r.startsWith(">") ? (a = ">", r = r.substring(1)) : r.startsWith("<=") ? (a = "<=", r = r.substring(2)) : r.startsWith("<") ? (a = "<", r = r.substring(1)) : a = "=", r.startsWith("\"") && r.endsWith("\"") && r.length > 1 && (r = r.slice(1, -1)), r = D(r);
+		} else n = null, r = D(e), i = !1;
 		return {
 			key: n,
 			value: r,
@@ -201,17 +201,17 @@ function E(e, t, n, r, i = [], a = {}) {
 }
 //#endregion
 //#region src/actions/list.ts
-function D(e) {
+function k(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function je(e) {
+function Ne(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, q: c } = n, l = e.selectFrom("actions").where("actions.tenant_id", "=", t);
-		c && (l = E(e, l, c, ["name"]));
+		c && (l = O(e, l, c, ["name"]));
 		let u = (await l.offset(i * a).limit(a).selectAll().execute()).map((e) => {
 			let { created_at_ts: n, updated_at_ts: i, deployed_at_ts: a, secrets: o, dependencies: s, supported_triggers: c, is_system: l, inherit: u, tenant_id: d, ...f } = e, p = r({
 				created_at_ts: n,
@@ -224,9 +224,9 @@ function je(e) {
 				runtime: f.runtime ?? void 0,
 				status: f.status || "built",
 				deployed_at: a ? new Date(Number(a)).toISOString() : void 0,
-				secrets: D(o),
-				dependencies: D(s),
-				supported_triggers: D(c),
+				secrets: k(o),
+				dependencies: k(s),
+				supported_triggers: k(c),
 				is_system: !!l,
 				inherit: !!u
 			};
@@ -248,7 +248,7 @@ function je(e) {
 }
 //#endregion
 //#region src/actions/update.ts
-function Me(e) {
+function Pe(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -257,11 +257,11 @@ function Me(e) {
 		return [];
 	}
 }
-function Ne(e) {
+function Fe(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		if (r.name !== void 0 && (i.name = r.name), r.code !== void 0 && (i.code = r.code), r.runtime !== void 0 && (i.runtime = r.runtime), r.secrets !== void 0) {
-			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Me(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
+			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Pe(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
 				name: e.name,
 				value: o.get(e.name)?.value
 			} : e);
@@ -276,23 +276,23 @@ function Ne(e) {
 }
 //#endregion
 //#region src/actions/remove.ts
-function Pe(e) {
+function Ie(e) {
 	return async (t, n) => (await e.deleteFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/actions/index.ts
-function Fe(e) {
+function Le(e) {
 	return {
-		create: De(e),
-		get: ke(e),
-		list: je(e),
-		update: Ne(e),
-		remove: Pe(e)
+		create: Ae(e),
+		get: je(e),
+		list: Ne(e),
+		update: Fe(e),
+		remove: Ie(e)
 	};
 }
 //#endregion
 //#region src/actionExecutions/create.ts
-function Ie(e) {
+function Re(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("action_executions").values({
@@ -318,14 +318,14 @@ function Ie(e) {
 }
 //#endregion
 //#region src/actionExecutions/get.ts
-function Le(e) {
+function ze(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function Re(e) {
+function Be(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("action_executions").where("action_executions.tenant_id", "=", t).where("action_executions.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -333,47 +333,75 @@ function Re(e) {
 			tenant_id: r.tenant_id,
 			trigger_id: r.trigger_id,
 			status: r.status,
-			results: Le(r.results) ?? [],
-			logs: Le(r.logs),
+			results: ze(r.results) ?? [],
+			logs: ze(r.logs),
 			created_at: new Date(Number(r.created_at_ts)).toISOString(),
 			updated_at: new Date(Number(r.updated_at_ts)).toISOString()
 		} : null;
 	};
 }
 //#endregion
+//#region src/actionExecutions/cleanup.ts
+var A = 5e4;
+async function Ve(e) {
+	try {
+		return await f`SELECT VERSION()`.execute(e), "mysql";
+	} catch {
+		return "sqlite";
+	}
+}
+function He(e) {
+	let t;
+	return async (n) => {
+		let r = Date.parse(n);
+		if (Number.isNaN(r)) throw Error(`Invalid olderThan date: ${n}`);
+		if (t ??= await Ve(e), t === "sqlite") {
+			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).executeTakeFirst();
+			return Number(t.numDeletedRows);
+		}
+		let i = 0, a = A;
+		for (; a >= A;) {
+			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).limit(A).executeTakeFirst();
+			a = Number(t.numDeletedRows), i += a;
+		}
+		return i;
+	};
+}
+//#endregion
 //#region src/actionExecutions/index.ts
-function ze(e) {
+function Ue(e) {
 	return {
-		create: Ie(e),
-		get: Re(e)
+		create: Re(e),
+		get: Be(e),
+		cleanup: He(e)
 	};
 }
 //#endregion
 //#region src/actionVersions/index.ts
-function O(e) {
+function We(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function Be(e) {
+function Ge(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, dependencies: i, supported_triggers: a, deployed: o, runtime: s, ...c } = e;
 	return {
 		...c,
 		runtime: s ?? void 0,
 		deployed: !!o,
-		secrets: O(r),
-		dependencies: O(i),
-		supported_triggers: O(a),
+		secrets: We(r),
+		dependencies: We(i),
+		supported_triggers: We(a),
 		created_at: new Date(Number(t)).toISOString(),
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function Ve(e) {
+function Ke(e) {
 	return {
 		async create(t, n, r) {
-			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? Se(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
+			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? Te(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
 				let r = ((await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n.action_id).select("number").orderBy("number", "desc").limit(1).executeTakeFirst())?.number ?? 0) + 1;
 				return l && await e.updateTable("action_versions").set(i ? { deployed: 0 } : {
 					deployed: 0,
@@ -410,10 +438,10 @@ function Ve(e) {
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n).where("id", "=", r).selectAll().executeTakeFirst();
-			return i ? Be(i) : null;
+			return i ? Ge(i) : null;
 		},
 		async list(t, n, r = {}) {
-			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(Be);
+			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(Ge);
 			if (!s) return {
 				versions: l,
 				start: 0,
@@ -436,7 +464,7 @@ function Ve(e) {
 }
 //#endregion
 //#region src/outbox/create.ts
-async function k(e, t, n, r) {
+async function j(e, t, n, r) {
 	await e.insertInto("outbox_events").values({
 		id: n,
 		tenant_id: t,
@@ -455,15 +483,15 @@ async function k(e, t, n, r) {
 		error: null
 	}).execute();
 }
-function He(e) {
+function qe(e) {
 	return async (n, r) => {
 		let i = t();
-		return await k(e, n, i, r), i;
+		return await j(e, n, i, r), i;
 	};
 }
 //#endregion
 //#region src/users/create.ts
-function Ue(e) {
+function Je(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, { identities: o, phone_verified: s, password: c, last_login: l, last_ip: u, login_count: d, ...f } = r, p = (/* @__PURE__ */ new Date()).toISOString(), m = {
 			...f,
@@ -498,12 +526,12 @@ function Ue(e) {
 				};
 				await e.insertInto("passwords").values(r).execute();
 			}
-			for (let t of i?.outboxEvents ?? []) await k(e, n, t.id, t);
+			for (let t of i?.outboxEvents ?? []) await j(e, n, t.id, t);
 		};
 		try {
 			e.isTransaction ? await h(e) : await e.transaction().execute(h);
 		} catch (e) {
-			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" || e.message.includes("AlreadyExists") ? new S(409, { message: "User already exists" }) : new S(500, { message: `${e.code}, ${e.message}` });
+			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" || e.message.includes("AlreadyExists") ? new C(409, { message: "User already exists" }) : new C(500, { message: `${e.code}, ${e.message}` });
 		}
 		return {
 			...m,
@@ -523,21 +551,21 @@ function Ue(e) {
 }
 //#endregion
 //#region src/users/user-to-identity.ts
-var We = [
+var Ye = [
 	"email",
 	"email_verified",
 	"phone_number",
 	"phone_verified",
 	"username"
 ];
-function A(e, t = !1) {
+function M(e, t = !1) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
-		user_id: oe(e.user_id).id,
+		user_id: ce(e.user_id).id,
 		isSocial: !!e.is_social
 	};
-	for (let t of We) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
+	for (let t of Ye) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
 	if (!t) {
 		let t = {};
 		try {
@@ -555,7 +583,7 @@ function A(e, t = !1) {
 }
 //#endregion
 //#region src/users/get.ts
-function Ge(e) {
+function Xe(e) {
 	return async (t, n) => {
 		let [r, i] = await Promise.all([e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t).where("users.user_id", "=", n).selectAll("users").select([
 			"user_activity.last_login",
@@ -577,22 +605,22 @@ function Ge(e) {
 			app_metadata: JSON.parse(r.app_metadata),
 			user_metadata: JSON.parse(r.user_metadata),
 			address: r.address ? JSON.parse(r.address) : void 0,
-			identities: [A(r, !0), ...i.map((e) => A(e))]
+			identities: [M(r, !0), ...i.map((e) => M(e))]
 		});
 	};
 }
 //#endregion
 //#region src/helpers/paginate.ts
-function j(e) {
+function N(e) {
 	return e?.from !== void 0 || e?.take !== void 0;
 }
-function Ke(e, t) {
+function Ze(e, t) {
 	let n = typeof e == "number" && Number.isFinite(e) ? Math.floor(e) : NaN;
 	return n >= 1 ? n : t;
 }
-async function M(e, t, n) {
-	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = Ke(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? _(t.from) : null;
-	if (c && c.k !== n.sortKey) throw new S(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
+async function P(e, t, n) {
+	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = Ze(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? ee(t.from) : null;
+	if (c && c.k !== n.sortKey) throw new C(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
 	if (c) if (c.s === void 0 || c.s === null) s = s.where(f.ref(a), i === "asc" ? ">" : "<", c.i);
 	else {
 		let e = i === "asc" ? f.raw(">") : f.raw("<");
@@ -601,7 +629,7 @@ async function M(e, t, n) {
 	let l = await s.limit(o + 1).execute(), u = l.length > o, d = u ? l.slice(0, o) : l, p;
 	if (u && d.length > 0) {
 		let e = d[d.length - 1], t = r.split(".").pop(), i = a.split(".").pop(), o = e[t];
-		p = ee({
+		p = ne({
 			s: typeof o == "string" || typeof o == "number" || o === null ? o : String(o),
 			i: String(e[i]),
 			...n.sortKey !== void 0 && { k: n.sortKey }
@@ -615,7 +643,7 @@ async function M(e, t, n) {
 }
 //#endregion
 //#region src/users/list.ts
-var qe = [
+var Qe = [
 	"user_id",
 	"email",
 	"email_verified",
@@ -638,20 +666,20 @@ var qe = [
 	"login_count",
 	"created_at",
 	"updated_at"
-], Je = new Set([
+], $e = new Set([
 	"last_login",
 	"last_ip",
 	"login_count"
-]), Ye = Object.fromEntries(qe.map((e) => [e, e === "login_count" ? {
+]), et = Object.fromEntries(Qe.map((e) => [e, e === "login_count" ? {
 	column: "user_activity.login_count",
 	defaultValue: 0
-} : Je.has(e) ? `user_activity.${e}` : `users.${e}`])), Xe = [
+} : $e.has(e) ? `user_activity.${e}` : `users.${e}`])), tt = [
 	"email",
 	"name",
 	"phone_number",
 	"user_id"
 ];
-async function Ze(e, t, n) {
+async function nt(e, t, n) {
 	let r = n.map((e) => e.user_id), i = r.length ? await e.selectFrom("users").selectAll().where("users.tenant_id", "=", t).where("users.linked_to", "in", r).orderBy("created_at", "asc").execute() : [];
 	return n.map((e) => {
 		let t = i.filter((t) => t.linked_to === e.user_id);
@@ -665,20 +693,20 @@ async function Ze(e, t, n) {
 			app_metadata: JSON.parse(e.app_metadata),
 			user_metadata: JSON.parse(e.user_metadata),
 			address: e.address ? JSON.parse(e.address) : void 0,
-			identities: [A(e, !0), ...t.map((e) => A(e))]
+			identities: [M(e, !0), ...t.map((e) => M(e))]
 		});
 	});
 }
-function Qe(e) {
+function rt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t);
 		if (c) {
-			let t = x(c, qe);
-			t && (l = E(e, l, t, Xe, [], Ye));
+			let t = S(c, Qe);
+			t && (l = O(e, l, t, tt, [], et));
 		}
-		if (j(n)) {
-			if (s?.sort_by && s.sort_by !== "created_at") throw new S(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
-			let r = s?.sort_order === "asc" ? "asc" : "desc", { rows: i, limit: a, next: o } = await M(l.where("users.linked_to", "is", null).selectAll("users").select([
+		if (N(n)) {
+			if (s?.sort_by && s.sort_by !== "created_at") throw new C(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
+			let r = s?.sort_order === "asc" ? "asc" : "desc", { rows: i, limit: a, next: o } = await P(l.where("users.linked_to", "is", null).selectAll("users").select([
 				"user_activity.last_login",
 				"user_activity.last_ip",
 				"user_activity.login_count"
@@ -687,7 +715,7 @@ function Qe(e) {
 				sortOrder: r,
 				idColumn: "users.user_id",
 				sortKey: `created_at:${r}`
-			}), c = await Ze(e, t, i);
+			}), c = await nt(e, t, i);
 			return {
 				users: c,
 				start: 0,
@@ -697,13 +725,13 @@ function Qe(e) {
 			};
 		}
 		if (s && s.sort_by) {
-			let t = Ye[s.sort_by];
+			let t = et[s.sort_by];
 			if (t) {
 				let { ref: n } = e.dynamic;
-				l = l.orderBy(typeof t == "string" ? n(t) : Ae(t), s.sort_order);
+				l = l.orderBy(typeof t == "string" ? n(t) : Me(t), s.sort_order);
 			}
 		}
-		let u = await Ze(e, t, await l.offset(r * i).limit(i).selectAll("users").select([
+		let u = await nt(e, t, await l.offset(r * i).limit(i).selectAll("users").select([
 			"user_activity.last_login",
 			"user_activity.last_ip",
 			"user_activity.login_count"
@@ -725,12 +753,12 @@ function Qe(e) {
 }
 //#endregion
 //#region src/users/remove.ts
-function $e(e) {
+function it(e) {
 	return async (t, n, r) => {
 		let i = async (e) => {
 			await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "in", (e) => e.selectFrom("users").select("users.user_id").where("users.tenant_id", "=", t).where((e) => e.or([e("users.user_id", "=", n), e("users.linked_to", "=", n)]))).execute(), await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.linked_to", "=", n).execute();
 			let i = await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
-			for (let n of r?.outboxEvents ?? []) await k(e, t, n.id, n);
+			for (let n of r?.outboxEvents ?? []) await j(e, t, n.id, n);
 			return i.length === 1;
 		};
 		return r?.outboxEvents?.length && !e.isTransaction ? e.transaction().execute(i) : i(e);
@@ -738,14 +766,14 @@ function $e(e) {
 }
 //#endregion
 //#region src/utils/flatten.ts
-function N(e, t = "", n = {}) {
+function F(e, t = "", n = {}) {
 	for (let r in e) if (Object.prototype.hasOwnProperty.call(e, r)) {
 		let i = t ? `${t}_${r}` : r, a = e[r];
-		typeof a == "object" && a && !Array.isArray(a) ? N(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
+		typeof a == "object" && a && !Array.isArray(a) ? F(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
 	}
 	return n;
 }
-function et(e, t) {
+function at(e, t) {
 	let n = {};
 	for (let [r, i] of Object.entries(e)) {
 		let e = t.find((e) => r.startsWith(`${e}_`));
@@ -762,7 +790,7 @@ function et(e, t) {
 }
 //#endregion
 //#region src/userActivity/index.ts
-function tt(e) {
+function ot(e) {
 	return {
 		user_id: e.user_id,
 		last_login: e.last_login ?? void 0,
@@ -772,18 +800,18 @@ function tt(e) {
 		last_password_reset: e.last_password_reset ?? void 0
 	};
 }
-function nt(e) {
+function st(e) {
 	let t = {};
 	return e.last_login !== void 0 && (t.last_login = e.last_login), e.last_ip !== void 0 && (t.last_ip = e.last_ip), e.login_count !== void 0 && (t.login_count = e.login_count), e.failed_logins !== void 0 && (t.failed_logins = JSON.stringify(e.failed_logins)), e.last_password_reset !== void 0 && (t.last_password_reset = e.last_password_reset), t;
 }
-function rt(e) {
+function ct(e) {
 	return {
 		async get(t, n) {
 			let r = await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).selectAll().executeTakeFirst();
-			return r ? tt(r) : null;
+			return r ? ot(r) : null;
 		},
 		async upsert(t, n, r) {
-			let i = nt(r);
+			let i = st(r);
 			if (await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).select("user_id").executeTakeFirst()) {
 				if (Object.keys(i).length === 0) return;
 				await e.updateTable("user_activity").set(i).where("tenant_id", "=", t).where("user_id", "=", n).execute();
@@ -805,9 +833,9 @@ function rt(e) {
 }
 //#endregion
 //#region src/users/update.ts
-function it(e) {
+function lt(e) {
 	return async (t, n, r, i) => {
-		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = N({
+		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = F({
 			...c,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString(),
 			app_metadata: r.app_metadata ? JSON.stringify(r.app_metadata) : void 0,
@@ -818,12 +846,12 @@ function it(e) {
 		}), u = async (e) => {
 			let [r] = await e.updateTable("users").set(l).where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
 			if (!r || r.numUpdatedRows === 0n) return !1;
-			(a !== void 0 || o !== void 0 || s !== void 0) && await rt(e).upsert(t, n, {
+			(a !== void 0 || o !== void 0 || s !== void 0) && await ct(e).upsert(t, n, {
 				last_login: a,
 				last_ip: o,
 				login_count: s
 			});
-			for (let n of i?.outboxEvents ?? []) await k(e, t, n.id, n);
+			for (let n of i?.outboxEvents ?? []) await j(e, t, n.id, n);
 			return !0;
 		};
 		return e.isTransaction ? u(e) : e.transaction().execute(u);
@@ -831,28 +859,28 @@ function it(e) {
 }
 //#endregion
 //#region src/users/unlink.ts
-function at(e) {
+function ut(e) {
 	return async (t, n, r, i) => (await e.updateTable("users").set({ linked_to: null }).where("users.tenant_id", "=", t).where("users.user_id", "=", `${r}|${i}`).where("users.linked_to", "=", `${n}`).execute()).length === 1;
 }
 //#endregion
 //#region src/users/index.ts
-function ot(e) {
-	let t = Ue(e);
+function dt(e) {
+	let t = Je(e);
 	return {
 		create: t,
 		rawCreate: t,
-		remove: $e(e),
-		get: Ge(e),
-		list: Qe(e),
-		update: it(e),
-		unlink: at(e)
+		remove: it(e),
+		get: Xe(e),
+		list: rt(e),
+		update: lt(e),
+		unlink: ut(e)
 	};
 }
 //#endregion
 //#region src/flows/create.ts
-function st(e) {
+function ft(e) {
 	return async (n, r, i) => {
-		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = y.parse({
+		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = b.parse({
 			id: a?.id ?? `af_${t()}`,
 			...r,
 			actions: r.actions || [],
@@ -868,7 +896,7 @@ function st(e) {
 }
 //#endregion
 //#region src/helpers/parse.ts
-function P(e, t) {
+function I(e, t) {
 	if (!e) return t;
 	try {
 		return JSON.parse(e);
@@ -876,7 +904,7 @@ function P(e, t) {
 		return t;
 	}
 }
-function ct(e) {
+function pt(e) {
 	if (e) try {
 		let t = JSON.parse(e);
 		return t && typeof t == "object" && !Array.isArray(t) ? t : void 0;
@@ -884,35 +912,35 @@ function ct(e) {
 		return;
 	}
 }
-function lt(e, t, n = { ...e }) {
-	for (let r in t) r in e && (n[r] = P(e[r], t[r]));
+function mt(e, t, n = { ...e }) {
+	for (let r in t) r in e && (n[r] = I(e[r], t[r]));
 	return n;
 }
 //#endregion
 //#region src/flows/get.ts
-function ut(e) {
+function ht(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("flows").selectAll().where("flows.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
 		let i = {
 			...r,
-			actions: P(r.actions, [])
+			actions: I(r.actions, [])
 		};
-		return y.parse(l(i));
+		return b.parse(l(i));
 	};
 }
 //#endregion
 //#region src/flows/list.ts
-function dt(e) {
+function gt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("flows").where("tenant_id", "=", t);
-		s && (c = E(e, c, s, []));
+		s && (c = O(e, c, s, []));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let t = {
 				...e,
-				actions: P(e.actions, [])
+				actions: I(e.actions, [])
 			};
-			return y.parse(l(t));
+			return b.parse(l(t));
 		});
 		if (!a) return {
 			flows: u,
@@ -931,7 +959,7 @@ function dt(e) {
 }
 //#endregion
 //#region src/flows/update.ts
-function ft(e) {
+function _t(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -941,7 +969,7 @@ function ft(e) {
 		let { numUpdatedRows: a } = await e.updateTable("flows").set(i).where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (a === 0n) return null;
 		let o = await e.selectFrom("flows").selectAll().where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
-		return o ? y.parse({
+		return o ? b.parse({
 			...o,
 			actions: o.actions ? JSON.parse(o.actions) : []
 		}) : null;
@@ -949,27 +977,27 @@ function ft(e) {
 }
 //#endregion
 //#region src/flows/remove.ts
-function pt(e) {
+function vt(e) {
 	return async (t, n) => ((await e.deleteFrom("flows").where("id", "=", n).where("tenant_id", "=", t).execute())[0]?.numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/flows/index.ts
-function mt(e) {
+function yt(e) {
 	return {
-		create: st(e),
-		get: ut(e),
-		list: dt(e),
-		update: ft(e),
-		remove: pt(e)
+		create: ft(e),
+		get: ht(e),
+		list: gt(e),
+		update: _t(e),
+		remove: vt(e)
 	};
 }
 //#endregion
 //#region src/tenants/utils.ts
-function ht(e) {
+function bt(e) {
 	let t = { ...e };
 	return e.session_cookie && typeof e.session_cookie == "string" && (t.session_cookie = JSON.parse(e.session_cookie)), e.enabled_locales && typeof e.enabled_locales == "string" && (t.enabled_locales = JSON.parse(e.enabled_locales)), e.error_page && typeof e.error_page == "string" && (t.error_page = JSON.parse(e.error_page)), e.flags && typeof e.flags == "string" && (t.flags = JSON.parse(e.flags)), e.sandbox_versions_available && typeof e.sandbox_versions_available == "string" && (t.sandbox_versions_available = JSON.parse(e.sandbox_versions_available)), e.change_password && typeof e.change_password == "string" && (t.change_password = JSON.parse(e.change_password)), e.guardian_mfa_page && typeof e.guardian_mfa_page == "string" && (t.guardian_mfa_page = JSON.parse(e.guardian_mfa_page)), e.sessions && typeof e.sessions == "string" && (t.sessions = JSON.parse(e.sessions)), e.oidc_logout && typeof e.oidc_logout == "string" && (t.oidc_logout = JSON.parse(e.oidc_logout)), e.device_flow && typeof e.device_flow == "string" && (t.device_flow = JSON.parse(e.device_flow)), e.default_token_quota && typeof e.default_token_quota == "string" && (t.default_token_quota = JSON.parse(e.default_token_quota)), e.allowed_logout_urls && typeof e.allowed_logout_urls == "string" && (t.allowed_logout_urls = JSON.parse(e.allowed_logout_urls)), e.acr_values_supported && typeof e.acr_values_supported == "string" && (t.acr_values_supported = JSON.parse(e.acr_values_supported)), e.mtls && typeof e.mtls == "string" && (t.mtls = JSON.parse(e.mtls)), e.mfa && typeof e.mfa == "string" && (t.mfa = JSON.parse(e.mfa)), e.attack_protection && typeof e.attack_protection == "string" && (t.attack_protection = JSON.parse(e.attack_protection)), e.allow_organization_name_in_authentication_api !== void 0 && (t.allow_organization_name_in_authentication_api = e.allow_organization_name_in_authentication_api === 1), e.customize_mfa_in_postlogin_action !== void 0 && (t.customize_mfa_in_postlogin_action = e.customize_mfa_in_postlogin_action === 1), e.pushed_authorization_requests_supported !== void 0 && (t.pushed_authorization_requests_supported = e.pushed_authorization_requests_supported === 1), e.authorization_response_iss_parameter_supported !== void 0 && (t.authorization_response_iss_parameter_supported = e.authorization_response_iss_parameter_supported === 1), l(t);
 }
-function gt(e) {
+function xt(e) {
 	let t = { ...e };
 	return d(e, [
 		"session_cookie",
@@ -992,42 +1020,42 @@ function gt(e) {
 }
 //#endregion
 //#region src/tenants/create.ts
-function _t(e) {
+function St(e) {
 	return async (n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
 			id: i?.id ?? n.id ?? t(),
 			created_at: i?.created_at ?? a,
 			updated_at: i?.updated_at ?? a
-		}, s = gt(o);
+		}, s = xt(o);
 		try {
 			await e.insertInto("tenants").values(s).execute();
 		} catch (e) {
 			let t = e?.message ?? "";
-			throw t.includes("UNIQUE constraint failed") || t.includes("Duplicate entry") || t.includes("duplicate key") || t.includes("AlreadyExists") || e?.code === "SQLITE_CONSTRAINT" || e?.code === "SQLITE_CONSTRAINT_UNIQUE" || e?.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || e?.code === "ER_DUP_ENTRY" || e?.code === "23505" ? new S(409, { message: `Tenant with ID '${o.id}' already exists` }) : e;
+			throw t.includes("UNIQUE constraint failed") || t.includes("Duplicate entry") || t.includes("duplicate key") || t.includes("AlreadyExists") || e?.code === "SQLITE_CONSTRAINT" || e?.code === "SQLITE_CONSTRAINT_UNIQUE" || e?.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || e?.code === "ER_DUP_ENTRY" || e?.code === "23505" ? new C(409, { message: `Tenant with ID '${o.id}' already exists` }) : e;
 		}
 		return o;
 	};
 }
 //#endregion
 //#region src/tenants/get.ts
-function vt(e) {
+function Ct(e) {
 	return async (t) => {
 		let n = await e.selectFrom("tenants").where("tenants.id", "=", t).selectAll().executeTakeFirst();
-		return n ? ht(n) : null;
+		return n ? bt(n) : null;
 	};
 }
 //#endregion
 //#region src/tenants/list.ts
-function yt(e) {
+function wt(e) {
 	return async (t) => {
 		let n = e.selectFrom("tenants"), { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = t || {};
 		if (s && s.sort_by) {
 			let { ref: t } = e.dynamic;
 			n = n.orderBy(t(s.sort_by), s.sort_order);
 		}
-		c && (n = E(e, n, c, ["friendly_name"]));
-		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(ht);
+		c && (n = O(e, n, c, ["friendly_name"]));
+		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(bt);
 		if (!a) return { tenants: l };
 		let { count: u } = await n.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow(), d = o(u);
 		return {
@@ -1040,10 +1068,10 @@ function yt(e) {
 }
 //#endregion
 //#region src/tenants/update.ts
-function bt(e) {
+function Tt(e) {
 	return async (t, n) => {
 		let r = {
-			...gt(n),
+			...xt(n),
 			id: t,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		};
@@ -1052,29 +1080,29 @@ function bt(e) {
 }
 //#endregion
 //#region src/tenants/remove.ts
-function xt(e) {
+function Et(e) {
 	return async (t) => (await e.deleteFrom("tenants").where("tenants.id", "=", t).execute()).length === 1;
 }
 //#endregion
 //#region src/tenants/index.ts
-function St(e) {
+function Dt(e) {
 	return {
-		create: _t(e),
-		get: vt(e),
-		list: yt(e),
-		update: bt(e),
-		remove: xt(e)
+		create: St(e),
+		get: Ct(e),
+		list: wt(e),
+		update: Tt(e),
+		remove: Et(e)
 	};
 }
 //#endregion
 //#region src/logs/create.ts
-function Ct(e) {
+function Ot(e) {
 	return e ? JSON.stringify(e) : void 0;
 }
-var wt = 256;
-function Tt(e) {
+var kt = 256;
+function At(e) {
 	return async (n, r) => {
-		let i = r.user_agent?.slice(0, wt), a = r.log_id || t(), { location_info: o, ...s } = r;
+		let i = r.user_agent?.slice(0, kt), a = r.log_id || t(), { location_info: o, ...s } = r;
 		return await e.insertInto("logs").values({
 			...s,
 			log_id: a,
@@ -1083,8 +1111,8 @@ function Tt(e) {
 			description: r.description?.substring(0, 256),
 			isMobile: +!!r.isMobile,
 			scope: r.scope,
-			auth0_client: Ct(r.auth0_client),
-			details: Ct(r.details)?.substring(0, 8192),
+			auth0_client: Ot(r.auth0_client),
+			details: Ot(r.details)?.substring(0, 8192),
 			country_code: o?.country_code,
 			city_name: o?.city_name,
 			latitude: o?.latitude,
@@ -1100,7 +1128,7 @@ function Tt(e) {
 }
 //#endregion
 //#region src/logs/logs.ts
-function Et(e) {
+function jt(e) {
 	if (!e) return "";
 	try {
 		return JSON.parse(e);
@@ -1108,13 +1136,13 @@ function Et(e) {
 		return e;
 	}
 }
-function F(e) {
+function L(e) {
 	return {
 		...e,
 		client_id: e.client_id,
 		client_name: e.client_name || "",
-		auth0_client: Et(e.auth0_client),
-		details: Et(e.details),
+		auth0_client: jt(e.auth0_client),
+		details: jt(e.details),
 		isMobile: !!e.isMobile,
 		scope: e.scope || void 0,
 		log_id: e.log_id,
@@ -1130,7 +1158,7 @@ function F(e) {
 }
 //#endregion
 //#region src/logs/list.ts
-var Dt = [
+var Mt = [
 	"user_id",
 	"ip",
 	"type",
@@ -1156,25 +1184,25 @@ var Dt = [
 	"time_zone",
 	"continent_code"
 ];
-function Ot(e) {
+function Nt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, from_date: l, to_date: u } = n, d = e.selectFrom("logs").where("logs.tenant_id", "=", t);
 		if (c) {
-			let t = x(c, Dt);
-			t && (d = E(e, d, t, [
+			let t = S(c, Mt);
+			t && (d = O(e, d, t, [
 				"user_id",
 				"ip",
 				"description"
 			], ["description"]));
 		}
-		if (typeof l == "number" && Number.isFinite(l) && (d = d.where("logs.date", ">=", (/* @__PURE__ */ new Date(Math.floor(l) * 1e3)).toISOString())), typeof u == "number" && Number.isFinite(u) && (d = d.where("logs.date", "<=", (/* @__PURE__ */ new Date(Math.floor(u) * 1e3 + 999)).toISOString())), j(n)) {
-			if (s?.sort_by && s.sort_by !== "date") throw new S(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only date is` });
-			let e = s?.sort_order === "asc" ? "asc" : "desc", { rows: t, limit: r, next: i } = await M(d.selectAll(), n, {
+		if (typeof l == "number" && Number.isFinite(l) && (d = d.where("logs.date", ">=", (/* @__PURE__ */ new Date(Math.floor(l) * 1e3)).toISOString())), typeof u == "number" && Number.isFinite(u) && (d = d.where("logs.date", "<=", (/* @__PURE__ */ new Date(Math.floor(u) * 1e3 + 999)).toISOString())), N(n)) {
+			if (s?.sort_by && s.sort_by !== "date") throw new C(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only date is` });
+			let e = s?.sort_order === "asc" ? "asc" : "desc", { rows: t, limit: r, next: i } = await P(d.selectAll(), n, {
 				sortColumn: "date",
 				sortOrder: e,
 				idColumn: "log_id",
 				sortKey: `date:${e}`
-			}), a = t.map(F);
+			}), a = t.map(L);
 			return {
 				logs: a,
 				start: 0,
@@ -1189,7 +1217,7 @@ function Ot(e) {
 			f = f.orderBy(t(s.sort_by), s.sort_order);
 		}
 		f = f.offset(r * i).limit(i);
-		let p = (await f.selectAll().execute()).map(F);
+		let p = (await f.selectAll().execute()).map(L);
 		if (!a) return {
 			logs: p,
 			start: 0,
@@ -1207,24 +1235,24 @@ function Ot(e) {
 }
 //#endregion
 //#region src/logs/get.ts
-function kt(e) {
+function Pt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("logs").where("logs.tenant_id", "=", t).where("logs.log_id", "=", n).selectAll().executeTakeFirst();
-		return r ? F(r) : null;
+		return r ? L(r) : null;
 	};
 }
 //#endregion
 //#region src/logs/index.ts
-function At(e) {
+function Ft(e) {
 	return {
-		create: Tt(e),
-		list: Ot(e),
-		get: kt(e)
+		create: At(e),
+		list: Nt(e),
+		get: Pt(e)
 	};
 }
 //#endregion
 //#region src/sessions/get.ts
-function jt(e) {
+function It(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("sessions").where("sessions.tenant_id", "=", t).where("sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -1258,7 +1286,7 @@ function jt(e) {
 }
 //#endregion
 //#region src/sessions/create.ts
-function Mt(e) {
+function Lt(e) {
 	return async (t, n) => {
 		let r = Date.now(), i = c(), a = {
 			...n,
@@ -1290,12 +1318,12 @@ function Mt(e) {
 }
 //#endregion
 //#region src/sessions/remove.ts
-function Nt(e) {
+function Rt(e) {
 	return async (t, n) => !!(await e.deleteFrom("sessions").where("tenant_id", "=", t).where("sessions.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/sessions/update.ts
-function Pt(e) {
+function zt(e) {
 	return async (t, n, r) => {
 		let i = Date.now(), a = {
 			updated_at_ts: i,
@@ -1316,10 +1344,10 @@ function Pt(e) {
 }
 //#endregion
 //#region src/sessions/list.ts
-function Ft(e) {
+function Bt(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("sessions").where("sessions.tenant_id", "=", t);
-		l && (u = E(e, u, l, ["user_id", "session_id"]));
+		l && (u = O(e, u, l, ["user_id", "session_id"]));
 		let d = u;
 		if (c && c.sort_by) {
 			let { ref: t } = e.dynamic;
@@ -1371,18 +1399,18 @@ function Ft(e) {
 }
 //#endregion
 //#region src/sessions/index.ts
-function It(e) {
+function Vt(e) {
 	return {
-		create: Mt(e),
-		get: jt(e),
-		list: Ft(e),
-		remove: Nt(e),
-		update: Pt(e)
+		create: Lt(e),
+		get: It(e),
+		list: Bt(e),
+		remove: Rt(e),
+		update: zt(e)
 	};
 }
 //#endregion
 //#region src/passwords/get.ts
-function Lt(e) {
+function Ht(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).where("passwords.is_current", "=", 1).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1395,7 +1423,7 @@ function Lt(e) {
 }
 //#endregion
 //#region src/passwords/create.ts
-function Rt(e) {
+function Ut(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = a?.id || r.id || t(), s = r.is_current ?? !0, c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...r,
@@ -1413,7 +1441,7 @@ function Rt(e) {
 }
 //#endregion
 //#region src/passwords/update.ts
-function zt(e) {
+function Wt(e) {
 	return async (t, n) => {
 		let r = e.updateTable("passwords").set({
 			password: n.password,
@@ -1426,7 +1454,7 @@ function zt(e) {
 }
 //#endregion
 //#region src/passwords/list.ts
-function Bt(e) {
+function Gt(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).orderBy("created_at", "desc");
 		return r && (i = i.limit(r)), (await i.selectAll().execute()).map(({ tenant_id: e, ...t }) => ({
@@ -1437,23 +1465,23 @@ function Bt(e) {
 }
 //#endregion
 //#region src/passwords/index.ts
-function Vt(e) {
+function Kt(e) {
 	return {
-		create: Rt(e),
-		update: zt(e),
-		get: Lt(e),
-		list: Bt(e)
+		create: Ut(e),
+		update: Wt(e),
+		get: Ht(e),
+		list: Gt(e)
 	};
 }
 //#endregion
 //#region src/codes/list.ts
-function Ht(e) {
+function qt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("codes").where("codes.tenant_id", "=", t);
-		s && (c = E(e, c, s, ["code", "login_id"]));
+		s && (c = O(e, c, s, ["code", "login_id"]));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let { tenant_id: t, ...n } = e;
-			return g.parse(l(n));
+			return y.parse(l(n));
 		});
 		if (!a) return {
 			codes: u,
@@ -1472,13 +1500,13 @@ function Ht(e) {
 }
 //#endregion
 //#region src/codes/expires-at-ts.ts
-function Ut(e) {
+function Jt(e) {
 	let t = new Date(e).getTime();
 	return Number.isNaN(t) ? 0 : t;
 }
 //#endregion
 //#region src/codes/create.ts
-function Wt(e) {
+function Yt(e) {
 	return async (t, n) => {
 		let r = {
 			...n,
@@ -1487,18 +1515,18 @@ function Wt(e) {
 		return await e.insertInto("codes").values({
 			...r,
 			tenant_id: t,
-			expires_at_ts: Ut(r.expires_at)
+			expires_at_ts: Jt(r.expires_at)
 		}).execute(), r;
 	};
 }
 //#endregion
 //#region src/codes/remove.ts
-function Gt(e) {
+function Xt(e) {
 	return async (t, n) => (await e.deleteFrom("codes").where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/codes/get.ts
-function Kt(e) {
+function Zt(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("codes").where("codes.code_id", "=", n).where("codes.code_type", "=", r);
 		t.length && (i = i.where("codes.tenant_id", "=", t));
@@ -1508,44 +1536,44 @@ function Kt(e) {
 }
 //#endregion
 //#region src/codes/used.ts
-function qt(e) {
+function Qt(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/consume.ts
-function Jt(e) {
+function $t(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).where("codes.used_at", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/cleanup.ts
-function Yt(e) {
+function en(e) {
 	return async (t) => {
-		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", Ut(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
+		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", Jt(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows) + Number(r.numDeletedRows);
 	};
 }
 //#endregion
 //#region src/codes/index.ts
-function Xt(e) {
+function tn(e) {
 	return {
-		create: Wt(e),
-		list: Ht(e),
-		remove: Gt(e),
-		used: qt(e),
-		consume: Jt(e),
-		get: Kt(e),
-		cleanup: Yt(e)
+		create: Yt(e),
+		list: qt(e),
+		remove: Xt(e),
+		used: Qt(e),
+		consume: $t(e),
+		get: Zt(e),
+		cleanup: en(e)
 	};
 }
 //#endregion
 //#region src/connections/create.ts
-function Zt(e) {
+function nn(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, { is_system: a, ...o } = n;
 		delete o.enabled_clients;
 		let s = (/* @__PURE__ */ new Date()).toISOString(), c = {
 			...o,
-			id: i?.id ?? o.id ?? be(),
+			id: i?.id ?? o.id ?? Ce(),
 			is_system: a ? !0 : void 0,
 			created_at: i?.created_at ?? s,
 			updated_at: i?.updated_at ?? s
@@ -1560,7 +1588,7 @@ function Zt(e) {
 }
 //#endregion
 //#region src/connections/transform.ts
-function I(e) {
+function R(e) {
 	let { is_system: t, ...n } = e;
 	return l({
 		...n,
@@ -1568,16 +1596,16 @@ function I(e) {
 		options: typeof e.options == "string" ? JSON.parse(e.options) : {}
 	});
 }
-function Qt(e) {
-	return e.map(I);
+function rn(e) {
+	return e.map(R);
 }
 //#endregion
 //#region src/connections/list.ts
-function $t(e) {
+function an(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("connections").where("connections.tenant_id", "=", t);
-		s && (c = E(e, c, s, ["user_id", "ip"]));
-		let l = Qt(await c.offset(r * i).limit(i).selectAll().execute());
+		s && (c = O(e, c, s, ["user_id", "ip"]));
+		let l = rn(await c.offset(r * i).limit(i).selectAll().execute());
 		if (!a) return {
 			connections: l,
 			start: 0,
@@ -1595,20 +1623,20 @@ function $t(e) {
 }
 //#endregion
 //#region src/connections/remove.ts
-function en(e) {
+function on(e) {
 	return async (t, n) => (await e.deleteFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/connections/get.ts
-function tn(e) {
+function sn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).selectAll().executeTakeFirst();
-		return r ? I(r) : null;
+		return r ? R(r) : null;
 	};
 }
 //#endregion
 //#region src/connections/update.ts
-function nn(e) {
+function cn(e) {
 	return async (t, n, r) => {
 		let { is_system: i, ...a } = r;
 		delete a.enabled_clients;
@@ -1625,18 +1653,18 @@ function nn(e) {
 }
 //#endregion
 //#region src/connections/index.ts
-function rn(e) {
+function ln(e) {
 	return {
-		create: Zt(e),
-		get: tn(e),
-		list: $t(e),
-		remove: en(e),
-		update: nn(e)
+		create: nn(e),
+		get: sn(e),
+		list: an(e),
+		remove: on(e),
+		update: cn(e)
 	};
 }
 //#endregion
 //#region src/clients/create.ts
-function an(e) {
+function un(e) {
 	return async (r, i, a) => {
 		let o = a?.importMetadata, s = o?.id ?? i.client_id ?? t(), c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...i,
@@ -1701,7 +1729,7 @@ function an(e) {
 }
 //#endregion
 //#region src/clients/get.ts
-function on(e) {
+function dn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1747,7 +1775,7 @@ function on(e) {
 }
 //#endregion
 //#region src/clients/getByClientId.ts
-function sn(e) {
+function fn(e) {
 	return async (t) => {
 		let n = await e.selectFrom("clients").where("clients.client_id", "=", t).selectAll().executeTakeFirst();
 		return n ? l({
@@ -1791,7 +1819,7 @@ function sn(e) {
 }
 //#endregion
 //#region src/clients/list.ts
-function cn(e) {
+function pn(e) {
 	return l({
 		...e,
 		global: !!e.global,
@@ -1830,7 +1858,7 @@ function cn(e) {
 		registration_metadata: e.registration_metadata ? JSON.parse(e.registration_metadata) : void 0
 	});
 }
-function ln(e) {
+function mn(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("clients").where("clients.tenant_id", "=", t), i = new Set(["owner_user_id", "registration_type"]);
 		if (n?.q) {
@@ -1840,12 +1868,12 @@ function ln(e) {
 				r = r.where(t, "=", e[2]);
 			} else r = r.where((e) => e.or([e("name", "like", `%${n.q}%`), e("client_id", "like", `%${n.q}%`)]));
 		}
-		if (j(n)) {
-			let { rows: e, limit: t, next: i } = await M(r.selectAll(), n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: i } = await P(r.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "client_id"
-			}), a = e.map(cn);
+			}), a = e.map(pn);
 			return {
 				clients: a,
 				totals: {
@@ -1878,7 +1906,7 @@ function ln(e) {
 			let a = await r.executeTakeFirst();
 			c = Number(a?.count || 0);
 		}
-		let l = s.map(cn);
+		let l = s.map(pn);
 		return {
 			clients: l,
 			totals: {
@@ -1892,12 +1920,12 @@ function ln(e) {
 }
 //#endregion
 //#region src/clients/remove.ts
-function un(e) {
+function hn(e) {
 	return async (t, n) => (await e.deleteFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clients/update.ts
-function dn(e) {
+function gn(e) {
 	return async (t, r, i) => {
 		let a = {
 			...i,
@@ -1944,31 +1972,31 @@ function dn(e) {
 }
 //#endregion
 //#region src/clients/index.ts
-function fn(e) {
+function _n(e) {
 	return {
-		create: an(e),
-		get: on(e),
-		getByClientId: sn(e),
-		list: ln(e),
-		remove: un(e),
-		update: dn(e)
+		create: un(e),
+		get: dn(e),
+		getByClientId: fn(e),
+		list: mn(e),
+		remove: hn(e),
+		update: gn(e)
 	};
 }
 //#endregion
 //#region src/clientConnections/listByClient.ts
-function pn(e) {
+function vn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).select("connections").executeTakeFirst();
 		if (!r) return [];
 		let i = JSON.parse(r.connections || "[]");
 		if (i.length === 0) return [];
-		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, I(e)]));
+		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, R(e)]));
 		return i.map((e) => o.get(e)).filter((e) => e !== void 0);
 	};
 }
 //#endregion
 //#region src/clientConnections/updateByClient.ts
-function mn(e) {
+function yn(e) {
 	return async (t, n, r) => (await e.updateTable("clients").set({
 		connections: JSON.stringify(r),
 		updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -1976,7 +2004,7 @@ function mn(e) {
 }
 //#endregion
 //#region src/clientConnections/listByConnection.ts
-function hn(e) {
+function bn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).select(["client_id", "connections"]).execute(), i = [];
 		for (let e of r) JSON.parse(e.connections || "[]").includes(n) && i.push(e.client_id);
@@ -1985,7 +2013,7 @@ function hn(e) {
 }
 //#endregion
 //#region src/clientConnections/addClientToConnection.ts
-function gn(e) {
+function xn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -1998,7 +2026,7 @@ function gn(e) {
 }
 //#endregion
 //#region src/clientConnections/removeClientFromConnection.ts
-function _n(e) {
+function Sn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2011,18 +2039,18 @@ function _n(e) {
 }
 //#endregion
 //#region src/clientConnections/index.ts
-function vn(e) {
+function Cn(e) {
 	return {
-		listByClient: pn(e),
-		updateByClient: mn(e),
-		listByConnection: hn(e),
-		addClientToConnection: gn(e),
-		removeClientFromConnection: _n(e)
+		listByClient: vn(e),
+		updateByClient: yn(e),
+		listByConnection: bn(e),
+		addClientToConnection: xn(e),
+		removeClientFromConnection: Sn(e)
 	};
 }
 //#endregion
 //#region src/clientGrants/create.ts
-function yn(e) {
+function wn(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? t(), c = a?.created_at ?? o, u = a?.updated_at ?? a?.created_at ?? o, { scope: d, authorization_details_types: f, ...p } = r, m = {
 			id: s,
@@ -2050,7 +2078,7 @@ function yn(e) {
 }
 //#endregion
 //#region src/clientGrants/get.ts
-function bn(e) {
+function Tn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_grants").selectAll().where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -2070,8 +2098,8 @@ function bn(e) {
 }
 //#endregion
 //#region src/clientGrants/list.ts
-function xn(e) {
-	return m.parse(l({
+function En(e) {
+	return _.parse(l({
 		...e,
 		scope: e.scope ? JSON.parse(e.scope) : [],
 		allow_any_organization: !!e.allow_any_organization,
@@ -2079,7 +2107,7 @@ function xn(e) {
 		authorization_details_types: e.authorization_details_types ? JSON.parse(e.authorization_details_types) : []
 	}));
 }
-function Sn(e) {
+function Dn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s, sort: c } = n, l = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
 		if (s) {
@@ -2090,13 +2118,13 @@ function Sn(e) {
 					let e = +(a === "true");
 					l = l.where(o, t ? "!=" : "=", e);
 				} else l = l.where(o, t ? "!=" : "=", a);
-			} else l = E(e, l, t, []);
+			} else l = O(e, l, t, []);
 		}
-		if (j(n)) {
-			let { rows: e, limit: t, next: r } = await M(l.selectAll(), n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: r } = await P(l.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
-			}), i = e.map(xn);
+			}), i = e.map(En);
 			return {
 				client_grants: i,
 				start: 0,
@@ -2110,7 +2138,7 @@ function Sn(e) {
 			let { ref: t } = e.dynamic;
 			u = u.orderBy(t(c.sort_by), c.sort_order);
 		} else u = u.orderBy("client_grants.created_at", "desc");
-		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(xn);
+		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(En);
 		if (!a) return {
 			client_grants: d,
 			start: 0,
@@ -2128,12 +2156,12 @@ function Sn(e) {
 }
 //#endregion
 //#region src/clientGrants/remove.ts
-function Cn(e) {
+function On(e) {
 	return async (t, n) => ((await e.deleteFrom("client_grants").where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst()).numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/clientGrants/update.ts
-function wn(e) {
+function kn(e) {
 	return async (t, n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), { scope: a, authorization_details_types: o, ...s } = r, c = {
 			...s,
@@ -2144,18 +2172,18 @@ function wn(e) {
 }
 //#endregion
 //#region src/clientGrants/index.ts
-function Tn(e) {
+function An(e) {
 	return {
-		create: yn(e),
-		get: bn(e),
-		list: Sn(e),
-		remove: Cn(e),
-		update: wn(e)
+		create: wn(e),
+		get: Tn(e),
+		list: Dn(e),
+		remove: On(e),
+		update: kn(e)
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/create.ts
-function En(e) {
+function jn(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("client_registration_tokens").values({
@@ -2186,12 +2214,12 @@ function En(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/row-mapper.ts
-function Dn(e) {
-	let t = h.safeParse(e);
+function Mn(e) {
+	let t = v.safeParse(e);
 	if (!t.success) throw Error(`Unknown client_registration_tokens.type: ${e}`);
 	return t.data;
 }
-function On(e) {
+function Nn(e) {
 	if (!e) return;
 	let t;
 	try {
@@ -2199,16 +2227,16 @@ function On(e) {
 	} catch {
 		return;
 	}
-	return ne(t) ? t : void 0;
+	return ie(t) ? t : void 0;
 }
-function L(e) {
+function z(e) {
 	return {
 		id: e.id,
 		token_hash: e.token_hash,
-		type: Dn(e.type),
+		type: Mn(e.type),
 		client_id: e.client_id ?? void 0,
 		sub: e.sub ?? void 0,
-		constraints: On(e.constraints),
+		constraints: Nn(e.constraints),
 		single_use: !!e.single_use,
 		expires_at: i(e.expires_at_ts),
 		used_at: i(e.used_at_ts),
@@ -2218,38 +2246,38 @@ function L(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/get.ts
-function kn(e) {
+function Pn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-		return r ? L(r) : null;
+		return r ? z(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/getByHash.ts
-function An(e) {
+function Fn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-		return r ? L(r) : null;
+		return r ? z(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/listByClient.ts
-function jn(e) {
-	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(L);
+function In(e) {
+	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(z);
 }
 //#endregion
 //#region src/clientRegistrationTokens/markUsed.ts
-function Mn(e) {
+function Ln(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ used_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("used_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revoke.ts
-function Nn(e) {
+function Rn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revokeByClient.ts
-function Pn(e) {
+function zn(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("client_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows);
@@ -2257,29 +2285,29 @@ function Pn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/remove.ts
-function Fn(e) {
+function Bn(e) {
 	return async (t, n) => (await e.deleteFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/index.ts
-function In(e) {
+function Vn(e) {
 	return {
-		create: En(e),
-		get: kn(e),
-		getByHash: An(e),
-		listByClient: jn(e),
-		markUsed: Mn(e),
-		revoke: Nn(e),
-		revokeByClient: Pn(e),
-		remove: Fn(e)
+		create: jn(e),
+		get: Pn(e),
+		getByHash: Fn(e),
+		listByClient: In(e),
+		markUsed: Ln(e),
+		revoke: Rn(e),
+		revokeByClient: zn(e),
+		remove: Bn(e)
 	};
 }
 //#endregion
 //#region src/keys/list.ts
-function Ln(e) {
+function Hn(e) {
 	return async (t = {}) => {
 		let { page: n = 0, per_page: r = 100, include_totals: i = !1, sort: a, q: s } = t, c = e.selectFrom("keys").where((e) => e.or([e("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()), e("revoked_at", "is", null)]));
-		s && (c = E(e, c, s, [
+		s && (c = O(e, c, s, [
 			"kid",
 			"tenant_id",
 			"connection",
@@ -2305,7 +2333,7 @@ function Ln(e) {
 }
 //#endregion
 //#region src/keys/create.ts
-function Rn(e) {
+function Un(e) {
 	return async (t, n) => {
 		let r = n?.importMetadata;
 		await e.insertInto("keys").values({
@@ -2317,21 +2345,21 @@ function Rn(e) {
 }
 //#endregion
 //#region src/keys/update.ts
-function zn(e) {
+function Wn(e) {
 	return async (t, n) => !!(await e.updateTable("keys").set(n).where("kid", "=", t).execute()).length;
 }
 //#endregion
 //#region src/keys/index.ts
-function Bn(e) {
+function Gn(e) {
 	return {
-		create: Rn(e),
-		list: Ln(e),
-		update: zn(e)
+		create: Un(e),
+		list: Hn(e),
+		update: Wn(e)
 	};
 }
 //#endregion
 //#region src/customDomains/create.ts
-function Vn(e) {
+function Kn(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			status: "pending",
@@ -2351,35 +2379,35 @@ function Vn(e) {
 }
 //#endregion
 //#region src/customDomains/list.ts
-function Hn(e) {
+function qn(e) {
 	return async (t) => (await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).selectAll().execute()).map((e) => ({
 		...e,
 		primary: e.primary === 1,
-		domain_metadata: P(e.domain_metadata, void 0),
-		verification: P(e.verification, void 0)
+		domain_metadata: I(e.domain_metadata, void 0),
+		verification: I(e.verification, void 0)
 	}));
 }
 //#endregion
 //#region src/customDomains/remove.ts
-function Un(e) {
+function Jn(e) {
 	return async (t, n) => (await e.deleteFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/customDomains/get.ts
-function Wn(e) {
+function Yn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
 			...r,
 			primary: r.primary === 1,
-			domain_metadata: P(r.domain_metadata, void 0),
-			verification: P(r.verification, void 0)
+			domain_metadata: I(r.domain_metadata, void 0),
+			verification: I(r.verification, void 0)
 		} : null;
 	};
 }
 //#endregion
 //#region src/customDomains/update.ts
-function Gn(e) {
+function Xn(e) {
 	return async (t, n, r) => {
 		let { verification: i, domain_metadata: a, primary: o, ...s } = r, c = {
 			...s,
@@ -2393,31 +2421,31 @@ function Gn(e) {
 }
 //#endregion
 //#region src/customDomains/getByDomain.ts
-function Kn(e) {
+function Zn(e) {
 	return async (t) => {
 		let n = await e.selectFrom("custom_domains").where("custom_domains.domain", "=", t).selectAll().executeTakeFirst();
 		return n ? {
 			...n,
 			primary: n.primary === 1,
-			domain_metadata: P(n.domain_metadata, void 0)
+			domain_metadata: I(n.domain_metadata, void 0)
 		} : null;
 	};
 }
 //#endregion
 //#region src/customDomains/index.ts
-function qn(e) {
+function Qn(e) {
 	return {
-		create: Vn(e),
-		get: Wn(e),
-		getByDomain: Kn(e),
-		list: Hn(e),
-		remove: Un(e),
-		update: Gn(e)
+		create: Kn(e),
+		get: Yn(e),
+		getByDomain: Zn(e),
+		list: qn(e),
+		remove: Jn(e),
+		update: Xn(e)
 	};
 }
 //#endregion
 //#region src/branding/get.ts
-function Jn(e) {
+function $n(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("branding").where("branding.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2439,7 +2467,7 @@ function Jn(e) {
 }
 //#endregion
 //#region src/branding/set.ts
-function Yn(e) {
+function er(e) {
 	return async (t, n) => {
 		let { colors: r, font: i, ...a } = n, o = r?.page_background, s = o && typeof o == "object" ? o : void 0;
 		try {
@@ -2468,15 +2496,15 @@ function Yn(e) {
 }
 //#endregion
 //#region src/branding/index.ts
-function Xn(e) {
+function tr(e) {
 	return {
-		get: Jn(e),
-		set: Yn(e)
+		get: $n(e),
+		set: er(e)
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/get.ts
-function Zn(e) {
+function nr(e) {
 	return async (t) => {
 		let n = await e.selectFrom("universal_login_templates").select(["body"]).where("tenant_id", "=", t).executeTakeFirst();
 		return n ? { body: n.body } : null;
@@ -2484,7 +2512,7 @@ function Zn(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/set.ts
-function Qn(e) {
+function rr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : a;
 		try {
@@ -2505,26 +2533,26 @@ function Qn(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/delete.ts
-function $n(e) {
+function ir(e) {
 	return async (t) => {
 		await e.deleteFrom("universal_login_templates").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/index.ts
-function er(e) {
+function ar(e) {
 	return {
-		get: Zn(e),
-		set: Qn(e),
-		delete: $n(e)
+		get: nr(e),
+		set: rr(e),
+		delete: ir(e)
 	};
 }
 //#endregion
 //#region src/hooks/list.ts
-function tr(e) {
+function or(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: u } = n, d = e.selectFrom("hooks").where("hooks.tenant_id", "=", t);
-		if (u && (d = E(e, d, u, [
+		if (u && (d = O(e, d, u, [
 			"url",
 			"form_id",
 			"template_id",
@@ -2543,7 +2571,7 @@ function tr(e) {
 				...u,
 				enabled: !!n,
 				synchronous: !!i,
-				metadata: ct(s)
+				metadata: pt(s)
 			});
 		});
 		if (!s) return {
@@ -2563,7 +2591,7 @@ function tr(e) {
 }
 //#endregion
 //#region src/hooks/get.ts
-function nr(e) {
+function sr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2576,20 +2604,20 @@ function nr(e) {
 			...d,
 			enabled: !!u.enabled,
 			synchronous: !!u.synchronous,
-			metadata: ct(c)
+			metadata: pt(c)
 		});
 	};
 }
 //#endregion
 //#region src/hooks/remove.ts
-function rr(e) {
+function cr(e) {
 	return async (t, n) => (await e.deleteFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hooks/create.ts
-function ir(e) {
+function lr(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? (n.hook_id || Ce()), { hook_id: l, enabled: u, synchronous: d, metadata: f, ...p } = n;
+		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? (n.hook_id || Ee()), { hook_id: l, enabled: u, synchronous: d, metadata: f, ...p } = n;
 		return await e.insertInto("hooks").values({
 			...p,
 			hook_id: c,
@@ -2612,7 +2640,7 @@ function ir(e) {
 }
 //#endregion
 //#region src/hooks/update.ts
-function ar(e) {
+function ur(e) {
 	return async (t, n, r) => {
 		let { hook_id: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -2626,20 +2654,20 @@ function ar(e) {
 }
 //#endregion
 //#region src/hooks/index.ts
-function or(e) {
+function dr(e) {
 	return {
-		create: ir(e),
-		get: nr(e),
-		list: tr(e),
-		update: ar(e),
-		remove: rr(e)
+		create: lr(e),
+		get: sr(e),
+		list: or(e),
+		update: ur(e),
+		remove: cr(e)
 	};
 }
 //#endregion
 //#region src/hook-code/create.ts
-function sr(e) {
+function fr(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? Te();
+		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? Oe();
 		return await e.insertInto("hook_code").values({
 			id: c,
 			tenant_id: t,
@@ -2659,7 +2687,7 @@ function sr(e) {
 }
 //#endregion
 //#region src/hook-code/get.ts
-function cr(e) {
+function pr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2683,7 +2711,7 @@ function cr(e) {
 }
 //#endregion
 //#region src/hook-code/update.ts
-function lr(e) {
+function mr(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		return r.code !== void 0 && (i.code = r.code), r.secrets !== void 0 && (i.secrets = JSON.stringify(r.secrets)), (await e.updateTable("hook_code").set(i).where("hook_code.id", "=", n).where("hook_code.tenant_id", "=", t).executeTakeFirst()).numUpdatedRows > 0;
@@ -2691,22 +2719,22 @@ function lr(e) {
 }
 //#endregion
 //#region src/hook-code/remove.ts
-function ur(e) {
+function hr(e) {
 	return async (t, n) => (await e.deleteFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hook-code/index.ts
-function dr(e) {
+function gr(e) {
 	return {
-		create: sr(e),
-		get: cr(e),
-		update: lr(e),
-		remove: ur(e)
+		create: fr(e),
+		get: pr(e),
+		update: mr(e),
+		remove: hr(e)
 	};
 }
 //#endregion
 //#region src/themes/create.ts
-function fr(e) {
+function _r(e) {
 	return async (n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString(), c = {
 			themeId: o?.id || i || t(),
@@ -2717,20 +2745,20 @@ function fr(e) {
 			...c,
 			tenant_id: n
 		};
-		return await e.insertInto("themes").values(N(l)).execute(), c;
+		return await e.insertInto("themes").values(F(l)).execute(), c;
 	};
 }
 //#endregion
 //#region src/themes/remove.ts
-function pr(e) {
+function vr(e) {
 	return async (t, n) => (await e.deleteFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/themes/get.ts
-function mr(e) {
+function yr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).selectAll().executeTakeFirst();
-		return r ? l(et({
+		return r ? l(at({
 			...r,
 			borders_show_widget_shadow: !!r.borders_show_widget_shadow,
 			fonts_body_text_bold: !!r.fonts_body_text_bold,
@@ -2750,9 +2778,9 @@ function mr(e) {
 }
 //#endregion
 //#region src/themes/update.ts
-function hr(e) {
+function br(e) {
 	return async (t, n, r) => {
-		let { themeId: i, ...a } = r, o = N({
+		let { themeId: i, ...a } = r, o = F({
 			...a,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		});
@@ -2761,17 +2789,17 @@ function hr(e) {
 }
 //#endregion
 //#region src/themes/index.ts
-function gr(e) {
+function xr(e) {
 	return {
-		create: fr(e),
-		get: mr(e),
-		remove: pr(e),
-		update: hr(e)
+		create: _r(e),
+		get: yr(e),
+		remove: vr(e),
+		update: br(e)
 	};
 }
 //#endregion
 //#region src/loginSessions/get.ts
-function _r(e) {
+function Sr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("login_sessions").where("login_sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2783,40 +2811,40 @@ function _r(e) {
 			"created_at_ts",
 			"updated_at_ts",
 			"expires_at_ts"
-		]), f = et(l({
+		]), f = at(l({
 			...u,
 			...d,
 			state: i.state || p.PENDING,
 			state_data: i.state_data,
 			failure_reason: i.failure_reason
 		}), ["auth_strategy"]);
-		return f.authParams = typeof c == "string" && c.length > 0 ? JSON.parse(c) : {}, re.parse(f);
+		return f.authParams = typeof c == "string" && c.length > 0 ? JSON.parse(c) : {}, ae.parse(f);
 	};
 }
 //#endregion
 //#region src/utils/ulid.ts
-var vr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", R = 32, yr = 10, br = 16;
-function xr(e) {
+var Cr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", B = 32, wr = 10, Tr = 16;
+function Er(e) {
 	let t = "";
-	for (let n = yr; n > 0; n--) t = vr.charAt(e % R) + t, e = Math.floor(e / R);
+	for (let n = wr; n > 0; n--) t = Cr.charAt(e % B) + t, e = Math.floor(e / B);
 	return t;
 }
-function Sr() {
-	let e = new Uint8Array(br);
+function Dr() {
+	let e = new Uint8Array(Tr);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < br; n++) t += vr.charAt(e[n] % R);
+	for (let n = 0; n < Tr; n++) t += Cr.charAt(e[n] % B);
 	return t;
 }
-function Cr() {
-	return xr(Date.now()) + Sr();
+function Or() {
+	return Er(Date.now()) + Dr();
 }
 //#endregion
 //#region src/loginSessions/create.ts
-function wr(e) {
+function kr(e) {
 	return async (t, n) => {
 		let r = c(), i = {
-			id: Cr(),
+			id: Or(),
 			...n,
 			authorization_url: n.authorization_url?.slice(0, 1024),
 			created_at: r,
@@ -2824,7 +2852,7 @@ function wr(e) {
 			state: n.state || p.PENDING,
 			state_data: n.state_data,
 			failure_reason: n.failure_reason
-		}, { authParams: a, ...o } = i, s = Date.now(), l = N(o);
+		}, { authParams: a, ...o } = i, s = Date.now(), l = F(o);
 		return delete l.created_at, delete l.updated_at, delete l.expires_at, await e.insertInto("login_sessions").values({
 			...l,
 			tenant_id: t,
@@ -2837,7 +2865,7 @@ function wr(e) {
 }
 //#endregion
 //#region src/loginSessions/update.ts
-function Tr(e) {
+function Ar(e) {
 	return async (t, n, r) => {
 		let { created_at: i, updated_at: a, expires_at: o, authParams: c, ...l } = r, u = {};
 		if (c !== void 0) {
@@ -2847,7 +2875,7 @@ function Tr(e) {
 				...c
 			}) };
 		}
-		let d = N(l);
+		let d = F(l);
 		return delete d.created_at_ts, delete d.updated_at_ts, delete d.expires_at_ts, delete d.id, delete d.tenant_id, (await e.updateTable("login_sessions").set({
 			...d,
 			...u,
@@ -2858,22 +2886,22 @@ function Tr(e) {
 }
 //#endregion
 //#region src/loginSessions/remove.ts
-function Er(e) {
+function jr(e) {
 	return async (t, n) => (await e.deleteFrom("login_sessions").where("login_sessions.tenant_id", "=", t).where("login_sessions.id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/loginSessions/index.ts
-function Dr(e) {
+function Mr(e) {
 	return {
-		create: wr(e),
-		get: _r(e),
-		update: Tr(e),
-		remove: Er(e)
+		create: kr(e),
+		get: Sr(e),
+		update: Ar(e),
+		remove: jr(e)
 	};
 }
 //#endregion
 //#region src/promptSettings/get.ts
-function Or(e) {
+function Nr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("prompt_settings").where("prompt_settings.tenant_id", "=", t).selectAll().execute();
 		return l({
@@ -2887,13 +2915,13 @@ function Or(e) {
 }
 //#endregion
 //#region src/promptSettings/set.ts
-function kr(e) {
+function Pr(e) {
 	let t = {};
 	return typeof e.identifier_first == "boolean" && (t.identifier_first = +!!e.identifier_first), typeof e.password_first == "boolean" && (t.password_first = +!!e.password_first), typeof e.webauthn_platform_first_factor == "boolean" && (t.webauthn_platform_first_factor = +!!e.webauthn_platform_first_factor), typeof e.show_last_used_connection == "boolean" && (t.show_last_used_connection = +!!e.show_last_used_connection), e.universal_login_experience && (t.universal_login_experience = e.universal_login_experience), t;
 }
-function Ar(e) {
+function Fr(e) {
 	return async (t, n) => {
-		let r = kr(n);
+		let r = Pr(n);
 		try {
 			await e.insertInto("prompt_settings").values({
 				tenant_id: t,
@@ -2911,15 +2939,15 @@ function Ar(e) {
 }
 //#endregion
 //#region src/promptSettings/index.ts
-function jr(e) {
+function Ir(e) {
 	return {
-		get: Or(e),
-		set: Ar(e)
+		get: Nr(e),
+		set: Fr(e)
 	};
 }
 //#endregion
 //#region src/emailProvideres/get.ts
-function Mr(e) {
+function Lr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("email_providers").where("email_providers.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2934,7 +2962,7 @@ function Mr(e) {
 }
 //#endregion
 //#region src/emailProvideres/update.ts
-function Nr(e) {
+function Rr(e) {
 	return async (t, n) => {
 		let { credentials: r, settings: i, enabled: a, ...o } = n;
 		await e.updateTable("email_providers").set({
@@ -2947,7 +2975,7 @@ function Nr(e) {
 }
 //#endregion
 //#region src/emailProvideres/create.ts
-function Pr(e) {
+function zr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), { credentials: o, settings: s, enabled: c, ...l } = n;
 		await e.insertInto("email_providers").values({
@@ -2963,24 +2991,24 @@ function Pr(e) {
 }
 //#endregion
 //#region src/emailProvideres/remove.ts
-function Fr(e) {
+function Br(e) {
 	return async (t) => {
 		await e.deleteFrom("email_providers").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/emailProvideres/index.ts
-function Ir(e) {
+function Vr(e) {
 	return {
-		get: Mr(e),
-		create: Pr(e),
-		update: Nr(e),
-		remove: Fr(e)
+		get: Lr(e),
+		create: zr(e),
+		update: Rr(e),
+		remove: Br(e)
 	};
 }
 //#endregion
 //#region src/emailTemplates/row.ts
-function Lr(e) {
+function Hr(e) {
 	let t = {
 		template: e.template,
 		body: e.body,
@@ -2994,20 +3022,20 @@ function Lr(e) {
 }
 //#endregion
 //#region src/emailTemplates/get.ts
-function Rr(e) {
+function Ur(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).selectAll().executeTakeFirst();
-		return r ? v.parse(Lr(r)) : null;
+		return r ? te.parse(Hr(r)) : null;
 	};
 }
 //#endregion
 //#region src/emailTemplates/list.ts
-function zr(e) {
-	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => v.parse(Lr(e)));
+function Wr(e) {
+	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => te.parse(Hr(e)));
 }
 //#endregion
 //#region src/emailTemplates/create.ts
-function Br(e) {
+function Gr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? i?.created_at ?? a;
 		return await e.insertInto("email_templates").values({
@@ -3028,7 +3056,7 @@ function Br(e) {
 }
 //#endregion
 //#region src/emailTemplates/update.ts
-function Vr(e) {
+function Kr(e) {
 	return async (t, n, r) => {
 		let i = {};
 		if (r.body !== void 0 && (i.body = r.body), r.from !== void 0 && (i.from = r.from), r.subject !== void 0 && (i.subject = r.subject), r.syntax !== void 0 && (i.syntax = r.syntax), r.resultUrl !== void 0 && (i.result_url = r.resultUrl), r.urlLifetimeInSeconds !== void 0 && (i.url_lifetime_in_seconds = r.urlLifetimeInSeconds), r.includeEmailInRedirect !== void 0 && (i.include_email_in_redirect = +!!r.includeEmailInRedirect), r.enabled !== void 0 && (i.enabled = +!!r.enabled), Object.keys(i).length === 0) return await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).select("template").executeTakeFirst() !== void 0;
@@ -3039,7 +3067,7 @@ function Vr(e) {
 }
 //#endregion
 //#region src/emailTemplates/remove.ts
-function Hr(e) {
+function qr(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows ?? 0) > 0;
@@ -3047,18 +3075,18 @@ function Hr(e) {
 }
 //#endregion
 //#region src/emailTemplates/index.ts
-function Ur(e) {
+function Jr(e) {
 	return {
-		get: Rr(e),
-		list: zr(e),
-		create: Br(e),
-		update: Vr(e),
-		remove: Hr(e)
+		get: Ur(e),
+		list: Wr(e),
+		create: Gr(e),
+		update: Kr(e),
+		remove: qr(e)
 	};
 }
 //#endregion
 //#region src/refreshTokens/get.ts
-function Wr(e) {
+function Yr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -3087,7 +3115,7 @@ function Wr(e) {
 }
 //#endregion
 //#region src/refreshTokens/getByLookup.ts
-function Gr(e) {
+function Xr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.token_lookup", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -3116,7 +3144,7 @@ function Gr(e) {
 }
 //#endregion
 //#region src/refreshTokens/create.ts
-function Kr(e) {
+function Zr(e) {
 	return async (t, n) => {
 		let r = c(), i = {
 			...n,
@@ -3146,12 +3174,12 @@ function Kr(e) {
 }
 //#endregion
 //#region src/refreshTokens/remove.ts
-function qr(e) {
+function Qr(e) {
 	return async (t, n) => !!(await e.deleteFrom("refresh_tokens").where("tenant_id", "=", t).where("refresh_tokens.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/refreshTokens/revokeByLoginSession.ts
-function Jr(e) {
+function $r(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("login_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3159,7 +3187,7 @@ function Jr(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeFamily.ts
-function Yr(e) {
+function ei(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("family_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3167,7 +3195,7 @@ function Yr(e) {
 }
 //#endregion
 //#region src/refreshTokens/update.ts
-function Xr(e) {
+function ti(e) {
 	return async (t, n, r, i) => {
 		let { created_at: a, expires_at: o, idle_expires_at: c, last_exchanged_at: l, revoked_at: u, rotated_at: d, device: f, resource_servers: p, rotating: m, ...h } = r, g = {
 			...h,
@@ -3179,19 +3207,19 @@ function Xr(e) {
 			last_exchanged_at_ts: l === void 0 ? void 0 : s(l),
 			revoked_at_ts: u === void 0 ? void 0 : s(u),
 			rotated_at_ts: d === void 0 ? void 0 : s(d)
-		}, _ = i?.loginSessionBump, v = _ ? s(_.expires_at) : null, ee = await e.updateTable("refresh_tokens").set(g).where("tenant_id", "=", t).where("refresh_tokens.id", "=", n).executeTakeFirst();
+		}, _ = i?.loginSessionBump, v = _ ? s(_.expires_at) : null, y = await e.updateTable("refresh_tokens").set(g).where("tenant_id", "=", t).where("refresh_tokens.id", "=", n).executeTakeFirst();
 		return _?.login_id && v && v > 0 && await e.updateTable("login_sessions").set({
 			expires_at_ts: v,
 			updated_at_ts: Date.now()
-		}).where("tenant_id", "=", t).where("id", "=", _.login_id).where("expires_at_ts", "<", v).execute().catch(() => {}), (ee?.numUpdatedRows ?? 0n) > 0n;
+		}).where("tenant_id", "=", t).where("id", "=", _.login_id).where("expires_at_ts", "<", v).execute().catch(() => {}), (y?.numUpdatedRows ?? 0n) > 0n;
 	};
 }
 //#endregion
 //#region src/refreshTokens/list.ts
-function Zr(e) {
+function ni(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t);
-		l && (u = E(e, u, l, ["token", "login_id"]));
+		l && (u = O(e, u, l, ["token", "login_id"]));
 		let d = u;
 		if (c && c.sort_by) {
 			let { ref: t } = e.dynamic;
@@ -3238,24 +3266,24 @@ function Zr(e) {
 }
 //#endregion
 //#region src/refreshTokens/index.ts
-function Qr(e) {
+function ri(e) {
 	return {
-		create: Kr(e),
-		get: Wr(e),
-		getByLookup: Gr(e),
-		list: Zr(e),
-		remove: qr(e),
-		revokeByLoginSession: Jr(e),
-		revokeFamily: Yr(e),
-		update: Xr(e)
+		create: Zr(e),
+		get: Yr(e),
+		getByLookup: Xr(e),
+		list: ni(e),
+		remove: Qr(e),
+		revokeByLoginSession: $r(e),
+		revokeFamily: ei(e),
+		update: ti(e)
 	};
 }
 //#endregion
 //#region src/cleanup.ts
-var $r = 10080 * 60 * 1e3;
-function ei(e) {
+var ii = 10080 * 60 * 1e3;
+function ai(e) {
 	return async (t) => {
-		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - $r, a = 1e3;
+		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - ii, a = 1e3;
 		try {
 			let t = 0;
 			for (;;) {
@@ -3286,9 +3314,9 @@ function ei(e) {
 }
 //#endregion
 //#region src/forms/create.ts
-function ti(e) {
+function oi(e) {
 	return async (n, r, i) => {
-		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = b.parse({
+		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = x.parse({
 			id: a?.id ?? t(),
 			...r,
 			created_at: a?.created_at ?? o,
@@ -3300,15 +3328,15 @@ function ti(e) {
 			start: JSON.stringify(s.start || {}),
 			ending: JSON.stringify(s.ending || {}),
 			tenant_id: n
-		}).execute(), b.parse(s);
+		}).execute(), x.parse(s);
 	};
 }
 //#endregion
 //#region src/forms/list.ts
-function ni(e) {
+function si(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("forms").where("tenant_id", "=", t);
-		s && (c = E(e, c, s, []));
+		s && (c = O(e, c, s, []));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let t = { ...e };
 			if (typeof t.nodes == "string") try {
@@ -3320,7 +3348,7 @@ function ni(e) {
 			if (typeof t.ending == "string") try {
 				t.ending = JSON.parse(t.ending);
 			} catch {}
-			return b.parse(l(t));
+			return x.parse(l(t));
 		});
 		if (!a) return {
 			forms: u,
@@ -3339,7 +3367,7 @@ function ni(e) {
 }
 //#endregion
 //#region src/forms/remove.ts
-function ri(e) {
+function ci(e) {
 	return async (t, n) => {
 		let { numDeletedRows: r } = await e.deleteFrom("forms").where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r > 0;
@@ -3347,7 +3375,7 @@ function ri(e) {
 }
 //#endregion
 //#region src/forms/get.ts
-function ii(e) {
+function li(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("forms").selectAll().where("forms.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
@@ -3361,12 +3389,12 @@ function ii(e) {
 		if (typeof i.ending == "string") try {
 			i.ending = JSON.parse(i.ending);
 		} catch {}
-		return b.parse(l(i));
+		return x.parse(l(i));
 	};
 }
 //#endregion
 //#region src/forms/update.ts
-function ai(e) {
+function ui(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -3383,25 +3411,25 @@ function ai(e) {
 }
 //#endregion
 //#region src/forms/index.ts
-function oi(e) {
+function di(e) {
 	return {
-		create: ti(e),
-		get: ii(e),
-		list: ni(e),
-		remove: ri(e),
-		update: ai(e)
+		create: oi(e),
+		get: li(e),
+		list: si(e),
+		remove: ci(e),
+		update: ui(e)
 	};
 }
 //#endregion
 //#region src/resourceServers/create.ts
-function si(e) {
+function fi(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = {
 			...n,
-			id: i?.id ?? n.id ?? we(),
+			id: i?.id ?? n.id ?? De(),
 			created_at: o,
 			updated_at: s
-		}, u = se.parse(c), { verificationKey: d, scopes: f, options: p, skip_consent_for_verifiable_first_party_clients: m, allow_offline_access: h, is_system: g, metadata: _, ...v } = u, ee = {
+		}, u = le.parse(c), { verificationKey: d, scopes: f, options: p, skip_consent_for_verifiable_first_party_clients: m, allow_offline_access: h, is_system: g, metadata: _, ...v } = u, y = {
 			...v,
 			tenant_id: t,
 			scopes: f ? JSON.stringify(f) : "[]",
@@ -3414,12 +3442,12 @@ function si(e) {
 			created_at: o,
 			updated_at: s
 		};
-		return await e.insertInto("resource_servers").values(ee).execute(), l(u);
+		return await e.insertInto("resource_servers").values(y).execute(), l(u);
 	};
 }
 //#endregion
 //#region src/resourceServers/get.ts
-function ci(e) {
+function pi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("resource_servers").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3438,7 +3466,7 @@ function ci(e) {
 }
 //#endregion
 //#region src/resourceServers/list.ts
-function li(e) {
+function mi(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", t);
 		if (s) {
@@ -3446,7 +3474,7 @@ function li(e) {
 			if (i && !o) {
 				let e = !!i[1], t = i[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
 				c = e ? c.where(t, "not like", `%${a}%`) : c.where(t, "like", `%${a}%`);
-			} else c = E(e, c, t, ["resource_servers.name", "resource_servers.identifier"]);
+			} else c = O(e, c, t, ["resource_servers.name", "resource_servers.identifier"]);
 		}
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let { verification_key: t, scopes: n, options: r, skip_consent_for_verifiable_first_party_clients: i, allow_offline_access: a, is_system: o, metadata: s, ...c } = e, u = l({
@@ -3478,7 +3506,7 @@ function li(e) {
 }
 //#endregion
 //#region src/resourceServers/remove.ts
-function ui(e) {
+function hi(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("resource_servers").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3486,7 +3514,7 @@ function ui(e) {
 }
 //#endregion
 //#region src/resourceServers/update.ts
-function di(e) {
+function gi(e) {
 	return async (t, n, r) => {
 		let { verificationKey: i, scopes: a, options: o, skip_consent_for_verifiable_first_party_clients: s, allow_offline_access: c, is_system: l, metadata: u, ...d } = r, f = {
 			...d,
@@ -3506,18 +3534,18 @@ function di(e) {
 }
 //#endregion
 //#region src/resourceServers/index.ts
-function fi(e) {
+function _i(e) {
 	return {
-		create: si(e),
-		get: ci(e),
-		list: li(e),
-		remove: ui(e),
-		update: di(e)
+		create: fi(e),
+		get: pi(e),
+		list: mi(e),
+		remove: hi(e),
+		update: gi(e)
 	};
 }
 //#endregion
 //#region src/roles/create.ts
-function pi(e) {
+function vi(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.created_at ?? o, c = a?.updated_at ?? o, l = a?.id || r.id || t(), { is_system: u, id: d, metadata: f, ...p } = r, m = {
 			id: l,
@@ -3540,7 +3568,7 @@ function pi(e) {
 }
 //#endregion
 //#region src/roles/get.ts
-function mi(e) {
+function yi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("roles").selectAll().where("roles.tenant_id", "=", t).where("roles.id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3554,10 +3582,10 @@ function mi(e) {
 }
 //#endregion
 //#region src/roles/list.ts
-function hi(e) {
+function bi(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("roles").where("roles.tenant_id", "=", t), { page: i = 0, per_page: a = 50, include_totals: s = !1 } = n;
-		n.q && (r = E(e, r, n.q, ["name"]));
+		n.q && (r = O(e, r, n.q, ["name"]));
 		let c = (await r.offset(i * a).limit(a).selectAll().execute()).map((e) => {
 			let { is_system: t, tenant_id: n, metadata: r, ...i } = e;
 			return {
@@ -3583,7 +3611,7 @@ function hi(e) {
 }
 //#endregion
 //#region src/roles/update.ts
-function gi(e) {
+function xi(e) {
 	return async (t, n, r) => {
 		let { is_system: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -3596,7 +3624,7 @@ function gi(e) {
 }
 //#endregion
 //#region src/roles/remove.ts
-function _i(e) {
+function Si(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("roles").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3604,18 +3632,18 @@ function _i(e) {
 }
 //#endregion
 //#region src/roles/index.ts
-function vi(e) {
+function Ci(e) {
 	return {
-		create: pi(e),
-		get: mi(e),
-		list: hi(e),
-		update: gi(e),
-		remove: _i(e)
+		create: vi(e),
+		get: yi(e),
+		list: bi(e),
+		update: xi(e),
+		remove: Si(e)
 	};
 }
 //#endregion
 //#region src/role-permissions/assign.ts
-function yi(e) {
+function wi(e) {
 	return async (t, n, r, i) => {
 		if (r.length === 0) return !0;
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString();
@@ -3644,7 +3672,7 @@ function yi(e) {
 }
 //#endregion
 //#region src/role-permissions/remove.ts
-function bi(e) {
+function Ti(e) {
 	return async (t, n, r) => {
 		if (r.length === 0) return !0;
 		try {
@@ -3656,7 +3684,7 @@ function bi(e) {
 }
 //#endregion
 //#region src/role-permissions/list.ts
-function xi(e) {
+function Ei(e) {
 	return async (t, n, r = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: o = !1 } = r, s = e.selectFrom("role_permissions").leftJoin("resource_servers", (e) => e.onRef("role_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("role_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"role_permissions.role_id",
@@ -3677,16 +3705,16 @@ function xi(e) {
 }
 //#endregion
 //#region src/role-permissions/index.ts
-function Si(e) {
+function Di(e) {
 	return {
-		assign: yi(e),
-		remove: bi(e),
-		list: xi(e)
+		assign: wi(e),
+		remove: Ti(e),
+		list: Ei(e)
 	};
 }
 //#endregion
 //#region src/grants/create.ts
-function Ci(e) {
+function Oi(e) {
 	return async (n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = r.scope ?? [], o = r.audience ?? "", s = await e.selectFrom("grants").where("tenant_id", "=", n).where("user_id", "=", r.user_id).where("client_id", "=", r.clientID).where("audience", "=", o).selectAll().executeTakeFirst();
 		if (s) {
@@ -3723,7 +3751,7 @@ function Ci(e) {
 }
 //#endregion
 //#region src/grants/get.ts
-function wi(e) {
+function ki(e) {
 	return async (t, n, r, i) => {
 		let a = await e.selectFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).where("client_id", "=", r).where("audience", "=", i ?? "").selectAll().executeTakeFirst();
 		return a ? {
@@ -3737,10 +3765,10 @@ function wi(e) {
 }
 //#endregion
 //#region src/grants/list.ts
-function Ti(e) {
+function Ai(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("grants").where("grants.tenant_id", "=", t);
-		c && (l = E(e, l, c, [
+		c && (l = O(e, l, c, [
 			"user_id",
 			"client_id",
 			"audience"
@@ -3775,26 +3803,26 @@ function Ti(e) {
 }
 //#endregion
 //#region src/grants/remove.ts
-function Ei(e) {
+function ji(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
-function Di(e) {
+function Mi(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/grants/index.ts
-function Oi(e) {
+function Ni(e) {
 	return {
-		create: Ci(e),
-		get: wi(e),
-		list: Ti(e),
-		remove: Ei(e),
-		removeByUser: Di(e)
+		create: Oi(e),
+		get: ki(e),
+		list: Ai(e),
+		remove: ji(e),
+		removeByUser: Mi(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/create.ts
-function ki(e) {
+function Pi(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3814,7 +3842,7 @@ function ki(e) {
 }
 //#endregion
 //#region src/user-permissions/remove.ts
-function Ai(e) {
+function Fi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_permissions").where("tenant_id", "=", t).where("user_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name);
@@ -3826,7 +3854,7 @@ function Ai(e) {
 }
 //#endregion
 //#region src/user-permissions/list.ts
-function ji(e) {
+function Ii(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_permissions").leftJoin("resource_servers", (e) => e.onRef("user_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("user_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"user_permissions.resource_server_identifier",
@@ -3849,17 +3877,17 @@ function ji(e) {
 }
 //#endregion
 //#region src/user-permissions/index.ts
-function Mi(e) {
+function Li(e) {
 	return {
-		create: ki(e),
-		remove: Ai(e),
-		list: ji(e)
+		create: Pi(e),
+		remove: Fi(e),
+		list: Ii(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/adapter.ts
-function Ni(e) {
-	let t = Mi(e);
+function Ri(e) {
+	let t = Li(e);
 	return {
 		create: (e, n, r, i) => t.create(e, n, r, i),
 		remove: (e, n, r, i) => t.remove(e, n, r, i),
@@ -3868,7 +3896,7 @@ function Ni(e) {
 }
 //#endregion
 //#region src/user-roles/list.ts
-function Pi(e) {
+function zi(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_roles as ur").innerJoin("roles as r", (e) => e.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")).select([
 			"r.id",
@@ -3882,11 +3910,11 @@ function Pi(e) {
 }
 //#endregion
 //#region src/user-roles/list-users.ts
-function Fi(e) {
+function Bi(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("user_roles").select("user_id").distinct().where("tenant_id", "=", t).where("role_id", "=", n);
-		if (j(r)) {
-			let { rows: e, limit: t, next: n } = await M(i, r, {
+		if (N(r)) {
+			let { rows: e, limit: t, next: n } = await P(i, r, {
 				sortColumn: "user_id",
 				sortOrder: "asc",
 				idColumn: "user_id"
@@ -3910,7 +3938,7 @@ function Fi(e) {
 }
 //#endregion
 //#region src/user-roles/create.ts
-function Ii(e) {
+function Vi(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3928,7 +3956,7 @@ function Ii(e) {
 }
 //#endregion
 //#region src/user-roles/remove.ts
-function Li(e) {
+function Hi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_roles").where("tenant_id", "=", t).where("user_id", "=", n).where("role_id", "=", r);
@@ -3940,18 +3968,18 @@ function Li(e) {
 }
 //#endregion
 //#region src/user-roles/index.ts
-function Ri(e) {
+function Ui(e) {
 	return {
-		list: Pi(e),
-		listUsers: Fi(e),
-		create: Ii(e),
-		remove: Li(e)
+		list: zi(e),
+		listUsers: Bi(e),
+		create: Vi(e),
+		remove: Hi(e)
 	};
 }
 //#endregion
 //#region src/user-roles/adapter.ts
-function zi(e) {
-	let t = Ri(e);
+function Wi(e) {
+	let t = Ui(e);
 	return {
 		list: (e, n, r, i) => t.list(e, n, r, i),
 		listUsers: (e, n, r) => t.listUsers(e, n, r),
@@ -3961,11 +3989,11 @@ function zi(e) {
 }
 //#endregion
 //#region src/organizations/create.ts
-function Bi(e) {
+function Gi(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
-			id: i?.id || n.id || ye(),
+			id: i?.id || n.id || Se(),
 			tenant_id: t,
 			created_at: i?.created_at ?? a,
 			updated_at: i?.updated_at ?? a,
@@ -3977,7 +4005,7 @@ function Bi(e) {
 		try {
 			await e.insertInto("organizations").values(o).execute();
 		} catch (e) {
-			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" || e.message.includes("AlreadyExists") ? new S(409, { message: "Organization already exists" }) : e;
+			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" || e.message.includes("AlreadyExists") ? new C(409, { message: "Organization already exists" }) : e;
 		}
 		return {
 			...n,
@@ -3989,7 +4017,7 @@ function Bi(e) {
 }
 //#endregion
 //#region src/organizations/get.ts
-function Vi(e) {
+function Ki(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ||= await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("name", "=", n).executeTakeFirst(), r ? l({
@@ -4003,16 +4031,16 @@ function Vi(e) {
 }
 //#endregion
 //#region src/organizations/list.ts
-var z = ["name", "display_name"];
-function Hi(e) {
+var V = ["name", "display_name"];
+function qi(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 		if (n?.q) {
-			let t = x(n.q, z);
-			t && (r = E(e, r, t, z));
+			let t = S(n.q, V);
+			t && (r = O(e, r, t, V));
 		}
-		if (j(n)) {
-			let { rows: e, limit: t, next: i } = await M(r.selectAll(), n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: i } = await P(r.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
 			}), a = e.map((e) => l({
@@ -4045,8 +4073,8 @@ function Hi(e) {
 		if (n?.include_totals) {
 			let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 			if (n?.q) {
-				let t = x(n.q, z);
-				t && (r = E(e, r, t, z));
+				let t = S(n.q, V);
+				t && (r = O(e, r, t, V));
 			}
 			let i = await r.select(f`count(*)`.as("count")).executeTakeFirst();
 			u = Number(i?.count || 0);
@@ -4069,12 +4097,12 @@ function Hi(e) {
 }
 //#endregion
 //#region src/organizations/remove.ts
-function Ui(e) {
+function Ji(e) {
 	return async (t, n) => (await e.deleteFrom("organizations").where("tenant_id", "=", t).where("id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/organizations/update.ts
-function Wi(e) {
+function Yi(e) {
 	return async (t, n, r) => {
 		let { branding: i, metadata: a, enabled_connections: o, token_quota: s, ...c } = r, l = {
 			...c,
@@ -4090,18 +4118,18 @@ function Wi(e) {
 }
 //#endregion
 //#region src/organizations/index.ts
-function Gi(e) {
+function Xi(e) {
 	return {
-		create: Bi(e),
-		get: Vi(e),
-		list: Hi(e),
-		remove: Ui(e),
-		update: Wi(e)
+		create: Gi(e),
+		get: Ki(e),
+		list: qi(e),
+		remove: Ji(e),
+		update: Yi(e)
 	};
 }
 //#endregion
 //#region src/organization-connections/index.ts
-function B(e, t) {
+function H(e, t) {
 	return {
 		connection_id: e.connection_id,
 		assign_membership_on_login: !!e.assign_membership_on_login,
@@ -4115,14 +4143,14 @@ function B(e, t) {
 		updated_at: e.updated_at
 	};
 }
-async function V(e, t, n) {
+async function U(e, t, n) {
 	let r = await e.selectFrom("connections").select(["name", "strategy"]).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 	if (r) return {
 		name: r.name,
 		strategy: typeof r.strategy == "string" ? r.strategy : void 0
 	};
 }
-function Ki(e) {
+function Zi(e) {
 	return {
 		async create(t, n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -4135,19 +4163,19 @@ function Ki(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("organization_connections").values(s).execute(), B(s, await V(e, t, r.connection_id));
+			return await e.insertInto("organization_connections").values(s).execute(), H(s, await U(e, t, r.connection_id));
 		},
 		async list(t, n) {
 			let r = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).execute(), i = [];
 			for (let n of r) {
-				let r = await V(e, t, n.connection_id);
-				i.push(B(n, r));
+				let r = await U(e, t, n.connection_id);
+				i.push(H(n, r));
 			}
 			return i;
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
-			return i ? B(i, await V(e, t, r)) : null;
+			return i ? H(i, await U(e, t, r)) : null;
 		},
 		async update(t, n, r, i) {
 			let a = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -4155,7 +4183,7 @@ function Ki(e) {
 			let o = await e.updateTable("organization_connections").set(a).where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
 			if (Number(o.numUpdatedRows ?? 0) === 0) return null;
 			let s = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
-			return s ? B(s, await V(e, t, r)) : null;
+			return s ? H(s, await U(e, t, r)) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("organization_connections").where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
@@ -4165,7 +4193,7 @@ function Ki(e) {
 }
 //#endregion
 //#region src/user-organizations/create.ts
-function qi(e) {
+function Qi(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			id: a?.id ?? t(),
@@ -4178,14 +4206,14 @@ function qi(e) {
 		try {
 			await e.insertInto("user_organizations").values(s).execute();
 		} catch (e) {
-			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" ? new S(409, { message: "User is already a member of this organization" }) : e;
+			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" ? new C(409, { message: "User is already a member of this organization" }) : e;
 		}
 		return { ...s };
 	};
 }
 //#endregion
 //#region src/user-organizations/get.ts
-function Ji(e) {
+function $i(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("user_organizations").selectAll().where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r ? {
@@ -4199,7 +4227,7 @@ function Ji(e) {
 }
 //#endregion
 //#region src/user-organizations/list.ts
-function Yi(e) {
+function ea(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("user_organizations").selectAll().where("tenant_id", "=", t);
 		if (n?.q) {
@@ -4218,8 +4246,8 @@ function Yi(e) {
 			created_at: e.created_at,
 			updated_at: e.updated_at
 		});
-		if (j(n)) {
-			let { rows: e, limit: t, next: a } = await M(r, n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: a } = await P(r, n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
 			});
@@ -4252,7 +4280,7 @@ function Yi(e) {
 }
 //#endregion
 //#region src/user-organizations/listUserOrganizations.ts
-function Xi(e) {
+function ta(e) {
 	return async (t, n, r) => {
 		let i = r?.page || 0, a = r?.per_page || 50, o = i * a, s = e.selectFrom("user_organizations").innerJoin("organizations", (e) => e.onRef("organizations.id", "=", "user_organizations.organization_id").on("organizations.tenant_id", "=", t)).select([
 			"organizations.id",
@@ -4289,12 +4317,12 @@ function Xi(e) {
 }
 //#endregion
 //#region src/user-organizations/remove.ts
-function Zi(e) {
+function na(e) {
 	return async (t, n) => (await e.deleteFrom("user_organizations").where("id", "=", n).where("tenant_id", "=", t).execute()).length > 0;
 }
 //#endregion
 //#region src/user-organizations/update.ts
-function Qi(e) {
+function ra(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -4305,21 +4333,21 @@ function Qi(e) {
 }
 //#endregion
 //#region src/user-organizations/index.ts
-function $i(e) {
+function ia(e) {
 	return {
-		create: qi(e),
-		get: Ji(e),
-		list: Yi(e),
-		listUserOrganizations: Xi(e),
-		remove: Zi(e),
-		update: Qi(e)
+		create: Qi(e),
+		get: $i(e),
+		list: ea(e),
+		listUserOrganizations: ta(e),
+		remove: na(e),
+		update: ra(e)
 	};
 }
 //#endregion
 //#region src/invites/create.ts
-function ea(e) {
+function aa(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = i?.id ?? n.id ?? Ee(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
+		let i = r?.importMetadata, a = i?.id ?? n.id ?? ke(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
 			id: a,
 			tenant_id: t,
 			organization_id: n.organization_id,
@@ -4340,7 +4368,7 @@ function ea(e) {
 		try {
 			await e.insertInto("invites").values(l).execute();
 		} catch (e) {
-			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" || e.message.includes("AlreadyExists") ? new S(409, { message: "Invite already exists" }) : e;
+			throw e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY" || e.message.includes("AlreadyExists") ? new C(409, { message: "Invite already exists" }) : e;
 		}
 		return {
 			id: a,
@@ -4363,11 +4391,11 @@ function ea(e) {
 }
 //#endregion
 //#region src/invites/get.ts
-function ta(e) {
+function oa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("invites").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ? l({
-			...lt(r, {
+			...mt(r, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4380,7 +4408,7 @@ function ta(e) {
 }
 //#endregion
 //#region src/invites/list.ts
-function na(e) {
+function sa(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("invites").selectAll().where("tenant_id", "=", t).orderBy("created_at", "desc");
 		if (n?.per_page && (r = r.limit(n.per_page)), n?.page) {
@@ -4388,7 +4416,7 @@ function na(e) {
 			r = r.offset(e);
 		}
 		let i = (await r.execute()).map((e) => l({
-			...lt(e, {
+			...mt(e, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4407,12 +4435,12 @@ function na(e) {
 }
 //#endregion
 //#region src/invites/remove.ts
-function ra(e) {
+function ca(e) {
 	return async (t, n) => (await e.deleteFrom("invites").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0n;
 }
 //#endregion
 //#region src/invites/update.ts
-function ia(e) {
+function la(e) {
 	return async (t, n, r) => {
 		let i = {};
 		return r.inviter !== void 0 && (i.inviter = JSON.stringify(r.inviter)), r.invitee !== void 0 && (i.invitee = JSON.stringify(r.invitee)), r.client_id !== void 0 && (i.client_id = r.client_id), r.connection_id !== void 0 && (i.connection_id = r.connection_id), r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), r.roles !== void 0 && (i.roles = JSON.stringify(r.roles)), r.ttl_sec !== void 0 && (i.ttl_sec = r.ttl_sec, i.expires_at = new Date(Date.now() + r.ttl_sec * 1e3).toISOString()), r.send_invitation_email !== void 0 && (i.send_invitation_email = +!!r.send_invitation_email), Object.keys(i).length === 0 ? !0 : (await e.updateTable("invites").set(i).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numUpdatedRows > 0n;
@@ -4420,35 +4448,35 @@ function ia(e) {
 }
 //#endregion
 //#region src/invites/index.ts
-function aa(e) {
+function ua(e) {
 	return {
-		create: ea(e),
-		get: ta(e),
-		list: na(e),
-		remove: ra(e),
-		update: ia(e)
+		create: aa(e),
+		get: oa(e),
+		list: sa(e),
+		remove: ca(e),
+		update: la(e)
 	};
 }
 //#endregion
 //#region src/stats/index.ts
-var oa = ["s"], sa = ["pwd_leak"];
-function ca(e) {
+var da = ["s"], fa = ["pwd_leak"];
+function pa(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function la(e) {
+function ma(e) {
 	return e.toISOString().split("T")[0];
 }
-function ua(e) {
+function ha(e) {
 	return {
 		async getDaily(t, n = {}) {
 			let { from: r, to: i } = n, a = /* @__PURE__ */ new Date(), o = new Date(a);
 			o.setDate(o.getDate() - 30);
-			let s = r ? ca(r) : la(o), c = i ? ca(i) : la(a), l = f`DATE(logs.date)`;
+			let s = r ? pa(r) : ma(o), c = i ? pa(i) : ma(a), l = f`DATE(logs.date)`;
 			return (await e.selectFrom("logs").where("tenant_id", "=", t).where(l, ">=", s).where(l, "<=", c).select((e) => [
 				l.as("date"),
-				e.fn.sum(e.case().when("type", "in", oa).then(1).else(0).end()).as("logins"),
+				e.fn.sum(e.case().when("type", "in", da).then(1).else(0).end()).as("logins"),
 				e.fn.sum(e.case().when("type", "=", "ss").then(1).else(0).end()).as("signups"),
-				e.fn.sum(e.case().when("type", "in", sa).then(1).else(0).end()).as("leaked_passwords"),
+				e.fn.sum(e.case().when("type", "in", fa).then(1).else(0).end()).as("leaked_passwords"),
 				e.fn.min("date").as("first_event"),
 				e.fn.max("date").as("last_event")
 			]).groupBy(l).orderBy("date", "asc").execute()).map((e) => ({
@@ -4462,13 +4490,13 @@ function ua(e) {
 		},
 		async getActiveUsers(t) {
 			let n = /* @__PURE__ */ new Date();
-			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", oa).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
+			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", da).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
 		}
 	};
 }
 //#endregion
 //#region src/analytics/index.ts
-var da = {
+var ga = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -4498,7 +4526,7 @@ var da = {
 		"fvr"
 	],
 	"codes-sent": ["cls", "cs"]
-}, fa = {
+}, _a = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -4555,14 +4583,14 @@ var da = {
 		agg: "count"
 	}
 };
-async function pa(e) {
+async function va(e) {
 	try {
 		return await f`SELECT @@version_comment`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-function H(e, t) {
+function W(e, t) {
 	let n = new Intl.DateTimeFormat("en-US", {
 		timeZone: e,
 		year: "numeric",
@@ -4577,7 +4605,7 @@ function H(e, t) {
 	let i = r.hour === "24" ? "00" : r.hour, a = Date.UTC(Number(r.year), Number(r.month) - 1, Number(r.day), Number(i), Number(r.minute), Number(r.second)), o = Math.round((a - t.getTime()) / 6e4), s = o >= 0 ? "+" : "-", c = Math.abs(o);
 	return `${s}${String(Math.floor(c / 60)).padStart(2, "0")}:${String(c % 60).padStart(2, "0")}`;
 }
-var ma = [
+var ya = [
 	"January",
 	"February",
 	"March",
@@ -4591,22 +4619,22 @@ var ma = [
 	"November",
 	"December"
 ];
-function ha(e, t) {
-	let n = t.getUTCFullYear(), r = H(e, new Date(Date.UTC(n, 0, 1)));
+function ba(e, t) {
+	let n = t.getUTCFullYear(), r = W(e, new Date(Date.UTC(n, 0, 1)));
 	for (let t = 1; t < 12; t++) {
-		let i = H(e, new Date(Date.UTC(n, t, 1)));
-		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${ma[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
+		let i = W(e, new Date(Date.UTC(n, t, 1)));
+		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${ya[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
 	}
 }
-function ga(e) {
+function xa(e) {
 	let t = e.startsWith("-") ? -1 : 1, [n, r] = e.slice(1).split(":");
 	return t * (Number(n) * 60 + Number(r));
 }
-function _a(e, t) {
+function Sa(e, t) {
 	let n;
 	if (t === "+00:00") n = f`${f.ref("logs.date")}`;
 	else {
-		let e = ga(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
+		let e = xa(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
 		n = f`datetime(${f.ref("logs.date")}, ${r})`;
 	}
 	switch (e) {
@@ -4617,7 +4645,7 @@ function _a(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function va(e, t) {
+function Ca(e, t) {
 	if (t === "+00:00") switch (e) {
 		case "hour": return f`substring(${f.ref("logs.date")}, 1, 13)`;
 		case "day": return f`substring(${f.ref("logs.date")}, 1, 10)`;
@@ -4628,7 +4656,7 @@ function va(e, t) {
 		}
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
-	let n = ga(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
+	let n = xa(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
 	switch (e) {
 		case "hour": return f`date_format(${r}, '%Y-%m-%dT%H')`;
 		case "day": return f`date_format(${r}, '%Y-%m-%d')`;
@@ -4637,12 +4665,12 @@ function va(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function ya(e, t, n, r) {
-	ha(t, n);
-	let i = H(t, n);
-	return r === "mysql" ? va(e, i) : _a(e, i);
+function wa(e, t, n, r) {
+	ba(t, n);
+	let i = W(t, n);
+	return r === "mysql" ? Ca(e, i) : Sa(e, i);
 }
-function ba(e) {
+function Ta(e) {
 	switch (e) {
 		case "connection": return "logs.connection";
 		case "client_id": return "logs.client_id";
@@ -4651,65 +4679,82 @@ function ba(e) {
 		case "time": throw Error("time dimension is handled separately");
 	}
 }
-function xa(e) {
-	let t = null, n = () => (t ||= pa(e), t);
-	return { async query(t, r, i) {
-		let a = Date.now(), o = da[r], s = fa[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
-		u = u.where("date", ">=", i.from).where("date", "<", i.to), u = u.where("type", "in", o), i.filters.connection?.length && (u = u.where("connection", "in", i.filters.connection)), i.filters.client_id?.length && (u = u.where("client_id", "in", i.filters.client_id)), i.filters.user_type?.length && (u = u.where("strategy_type", "in", i.filters.user_type)), i.filters.user_id?.length && (u = u.where("user_id", "in", i.filters.user_id));
-		let d = [], p = [];
-		for (let e of i.group_by) if (e === "time") {
-			let e = ya(i.interval, i.tz, new Date(i.from), c);
+function Ea(e) {
+	let t = null, n = () => (t ||= va(e), t);
+	return {
+		async query(t, r, i) {
+			let a = Date.now(), o = ga[r], s = _a[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
+			u = u.where("date", ">=", i.from).where("date", "<", i.to), u = u.where("type", "in", o), i.filters.connection?.length && (u = u.where("connection", "in", i.filters.connection)), i.filters.client_id?.length && (u = u.where("client_id", "in", i.filters.client_id)), i.filters.user_type?.length && (u = u.where("strategy_type", "in", i.filters.user_type)), i.filters.user_id?.length && (u = u.where("user_id", "in", i.filters.user_id));
+			let d = [], p = [];
+			for (let e of i.group_by) if (e === "time") {
+				let e = wa(i.interval, i.tz, new Date(i.from), c);
+				p.push({
+					alias: "time",
+					expr: e
+				}), d.push(e), l.push({
+					name: "time",
+					type: i.interval === "hour" ? "DateTime" : "Date"
+				});
+			} else {
+				let t = Ta(e);
+				p.push({
+					alias: e,
+					expr: f`${f.ref(t)}`
+				}), d.push(f`${f.ref(t)}`), l.push({
+					name: e,
+					type: "String"
+				});
+			}
+			let m = s.agg === "uniq" ? f`COUNT(DISTINCT ${f.ref("logs.user_id")})` : f`COUNT(*)`;
 			p.push({
-				alias: "time",
-				expr: e
-			}), d.push(e), l.push({
-				name: "time",
-				type: i.interval === "hour" ? "DateTime" : "Date"
+				alias: s.alias,
+				expr: m
+			}), l.push({
+				name: s.alias,
+				type: s.type
 			});
-		} else {
-			let t = ba(e);
-			p.push({
-				alias: e,
-				expr: f`${f.ref(t)}`
-			}), d.push(f`${f.ref(t)}`), l.push({
-				name: e,
-				type: "String"
+			let h = u.select(p.map(({ alias: e, expr: t }) => t.as(e)));
+			if (d.length > 0 && (h = h.groupBy(d)), i.order_by) {
+				let e = i.order_by.startsWith("-"), t = e ? i.order_by.slice(1) : i.order_by;
+				h = h.orderBy(t, e ? "desc" : "asc");
+			} else h = i.group_by.length > 0 && i.group_by[0] === "time" ? h.orderBy("time", "asc") : h.orderBy(s.alias, "desc");
+			h = h.limit(i.limit).offset(i.offset);
+			let g = (await h.execute()).map((e) => {
+				let t = {};
+				for (let n of l) {
+					let r = e[n.name];
+					t[n.name] = n.type === "UInt64" ? Number(r) || 0 : r ?? "";
+				}
+				return t;
 			});
+			return {
+				meta: l,
+				data: g,
+				rows: g.length,
+				rows_before_limit_at_least: g.length,
+				statistics: { elapsed: (Date.now() - a) / 1e3 }
+			};
+		},
+		async sessionRetention(t, r) {
+			let i = Date.now(), { sinceMs: a } = pe(r.weeks, i), o = await n(), s = (e) => {
+				let t = e === "used_at_ts" ? f`(COALESCE(${f.ref("used_at_ts")}, ${f.ref("created_at_ts")}) + ${f.lit(m)})` : f`(${f.ref(e)} + ${f.lit(m)})`;
+				return o === "mysql" ? f`${t} DIV ${f.lit(h)}` : f`${t} / ${f.lit(h)}`;
+			};
+			return g((await e.selectFrom("sessions").where("tenant_id", "=", t).where("created_at_ts", ">=", a).select([
+				s("created_at_ts").as("created_week"),
+				s("used_at_ts").as("used_week"),
+				f`COUNT(*)`.as("count")
+			]).groupBy([s("created_at_ts"), s("used_at_ts")]).execute()).map((e) => ({
+				created_week: Math.floor(Number(e.created_week)),
+				used_week: Math.floor(Number(e.used_week)),
+				count: Number(e.count)
+			})), r.weeks, i);
 		}
-		let m = s.agg === "uniq" ? f`COUNT(DISTINCT ${f.ref("logs.user_id")})` : f`COUNT(*)`;
-		p.push({
-			alias: s.alias,
-			expr: m
-		}), l.push({
-			name: s.alias,
-			type: s.type
-		});
-		let h = u.select(p.map(({ alias: e, expr: t }) => t.as(e)));
-		if (d.length > 0 && (h = h.groupBy(d)), i.order_by) {
-			let e = i.order_by.startsWith("-"), t = e ? i.order_by.slice(1) : i.order_by;
-			h = h.orderBy(t, e ? "desc" : "asc");
-		} else h = i.group_by.length > 0 && i.group_by[0] === "time" ? h.orderBy("time", "asc") : h.orderBy(s.alias, "desc");
-		h = h.limit(i.limit).offset(i.offset);
-		let g = (await h.execute()).map((e) => {
-			let t = {};
-			for (let n of l) {
-				let r = e[n.name];
-				t[n.name] = n.type === "UInt64" ? Number(r) || 0 : r ?? "";
-			}
-			return t;
-		});
-		return {
-			meta: l,
-			data: g,
-			rows: g.length,
-			rows_before_limit_at_least: g.length,
-			statistics: { elapsed: (Date.now() - a) / 1e3 }
-		};
-	} };
+	};
 }
 //#endregion
 //#region src/customText/index.ts
-function Sa(e) {
+function Da(e) {
 	return {
 		async get(t, n, r) {
 			let i = await e.selectFrom("custom_text").selectAll().where("tenant_id", "=", t).where("prompt", "=", n).where("language", "=", r).executeTakeFirst();
@@ -4748,9 +4793,9 @@ function Sa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/create.ts
-function Ca(e) {
+function Oa(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? Cr();
+		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? Or();
 		return await e.insertInto("authentication_methods").values({
 			id: s,
 			tenant_id: t,
@@ -4787,7 +4832,7 @@ function Ca(e) {
 }
 //#endregion
 //#region src/authenticationMethods/get.ts
-function wa(e) {
+function ka(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4810,7 +4855,7 @@ function wa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/getByCredentialId.ts
-function Ta(e) {
+function Aa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.credential_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4833,7 +4878,7 @@ function Ta(e) {
 }
 //#endregion
 //#region src/authenticationMethods/list.ts
-function Ea(e) {
+function ja(e) {
 	return async (t, n) => (await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "=", n).selectAll().execute()).map((e) => ({
 		id: e.id,
 		user_id: e.user_id,
@@ -4853,35 +4898,35 @@ function Ea(e) {
 }
 //#endregion
 //#region src/authenticationMethods/update.ts
-function Da(e) {
+function Ma(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		r.phone_number !== void 0 && (i.phone_number = r.phone_number), r.totp_secret !== void 0 && (i.totp_secret = r.totp_secret), r.credential_id !== void 0 && (i.credential_id = r.credential_id), r.public_key !== void 0 && (i.public_key = r.public_key), r.sign_count !== void 0 && (i.sign_count = r.sign_count), r.credential_backed_up !== void 0 && (i.credential_backed_up = +!!r.credential_backed_up), r.transports !== void 0 && (i.transports = JSON.stringify(r.transports)), r.friendly_name !== void 0 && (i.friendly_name = r.friendly_name), r.confirmed !== void 0 && (i.confirmed = +!!r.confirmed), await e.updateTable("authentication_methods").set(i).where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).execute();
-		let a = await wa(e)(t, n);
+		let a = await ka(e)(t, n);
 		if (!a) throw Error(`Authentication method ${n} not found`);
 		return a;
 	};
 }
 //#endregion
 //#region src/authenticationMethods/remove.ts
-function Oa(e) {
+function Na(e) {
 	return async (t, n) => (await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/authenticationMethods/index.ts
-function ka(e) {
+function Pa(e) {
 	return {
-		create: Ca(e),
-		get: wa(e),
-		getByCredentialId: Ta(e),
-		list: Ea(e),
-		update: Da(e),
-		remove: Oa(e)
+		create: Oa(e),
+		get: ka(e),
+		getByCredentialId: Aa(e),
+		list: ja(e),
+		update: Ma(e),
+		remove: Na(e)
 	};
 }
 //#endregion
 //#region src/outbox/getByIds.ts
-function Aa(e) {
+function Fa(e) {
 	return async (t) => t.length === 0 ? [] : (await e.selectFrom("outbox_events").selectAll().where("id", "in", t).execute()).map((e) => ({
 		...JSON.parse(e.payload),
 		id: e.id,
@@ -4894,7 +4939,7 @@ function Aa(e) {
 }
 //#endregion
 //#region src/outbox/getUnprocessed.ts
-function ja(e) {
+function Ia(e) {
 	return async (t) => {
 		let n = (/* @__PURE__ */ new Date()).toISOString();
 		return (await e.selectFrom("outbox_events").selectAll().where("processed_at", "is", null).where((e) => e.or([e("next_retry_at", "is", null), e("next_retry_at", "<=", n)])).where((e) => e.or([e("claimed_by", "is", null), e("claim_expires_at", "<=", n)])).orderBy("created_at", "asc").orderBy("id", "asc").limit(t).execute()).map((e) => ({
@@ -4910,7 +4955,7 @@ function ja(e) {
 }
 //#endregion
 //#region src/outbox/claimEvents.ts
-function Ma(e) {
+function La(e) {
 	return async (t, n, r) => {
 		if (t.length === 0) return [];
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = new Date(Date.now() + r).toISOString();
@@ -4922,7 +4967,7 @@ function Ma(e) {
 }
 //#endregion
 //#region src/outbox/markProcessed.ts
-function Na(e) {
+function Ra(e) {
 	return async (t) => {
 		if (t.length === 0) return;
 		let n = (/* @__PURE__ */ new Date()).toISOString();
@@ -4931,7 +4976,7 @@ function Na(e) {
 }
 //#endregion
 //#region src/outbox/markRetry.ts
-function Pa(e) {
+function za(e) {
 	return async (t, n, r) => {
 		await e.updateTable("outbox_events").set({
 			error: n,
@@ -4944,7 +4989,7 @@ function Pa(e) {
 }
 //#endregion
 //#region src/outbox/deadLetter.ts
-function Fa(e) {
+function Ba(e) {
 	return async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString();
 		await e.updateTable("outbox_events").set({
@@ -4956,7 +5001,7 @@ function Fa(e) {
 }
 //#endregion
 //#region src/outbox/listFailed.ts
-function Ia(e) {
+function Va(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1 } = n, o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap((e) => {
 			let t;
@@ -4991,7 +5036,7 @@ function Ia(e) {
 }
 //#endregion
 //#region src/outbox/replay.ts
-function La(e) {
+function Ha(e) {
 	return async (t, n) => {
 		let r = await e.updateTable("outbox_events").set({
 			processed_at: null,
@@ -5006,7 +5051,7 @@ function La(e) {
 }
 //#endregion
 //#region src/outbox/cleanup.ts
-function Ra(e) {
+function Ua(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5014,23 +5059,23 @@ function Ra(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function za(e) {
+function Wa(e) {
 	return {
-		create: He(e),
-		getByIds: Aa(e),
-		getUnprocessed: ja(e),
-		claimEvents: Ma(e),
-		markProcessed: Na(e),
-		markRetry: Pa(e),
-		deadLetter: Fa(e),
-		listFailed: Ia(e),
-		replay: La(e),
-		cleanup: Ra(e)
+		create: qe(e),
+		getByIds: Fa(e),
+		getUnprocessed: Ia(e),
+		claimEvents: La(e),
+		markProcessed: Ra(e),
+		markRetry: za(e),
+		deadLetter: Ba(e),
+		listFailed: Va(e),
+		replay: Ha(e),
+		cleanup: Ua(e)
 	};
 }
 //#endregion
 //#region src/log-streams/index.ts
-function U(e) {
+function G(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5043,7 +5088,7 @@ function U(e) {
 		updated_at: e.updated_at
 	};
 }
-function Ba(e) {
+function Ga(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5058,14 +5103,14 @@ function Ba(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("log_streams").values(s).execute(), U(s);
+			return await e.insertInto("log_streams").values(s).execute(), G(s);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("log_streams").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? U(r) : null;
+			return r ? G(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(U);
+			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(G);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5078,11 +5123,11 @@ function Ba(e) {
 }
 //#endregion
 //#region src/migrationSources/index.ts
-function W(e) {
+function K(e) {
 	return {
 		id: e.id,
 		name: e.name,
-		provider: ae.parse(e.provider),
+		provider: se.parse(e.provider),
 		connection: e.connection,
 		enabled: e.enabled === 1,
 		credentials: JSON.parse(e.credentials),
@@ -5090,7 +5135,7 @@ function W(e) {
 		updated_at: e.updated_at
 	};
 }
-function Va(e) {
+function Ka(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5104,14 +5149,14 @@ function Va(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("migration_sources").values(l).execute(), W(l);
+			return await e.insertInto("migration_sources").values(l).execute(), K(l);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("migration_sources").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? W(r) : null;
+			return r ? K(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(W);
+			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(K);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5124,34 +5169,34 @@ function Va(e) {
 }
 //#endregion
 //#region src/proxyRoutes/serialize.ts
-function G(e) {
+function q(e) {
 	return {
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: Ha(e.match),
-		handlers: Ua(e.handlers),
+		match: qa(e.match),
+		handlers: Ja(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function Ha(e) {
+function qa(e) {
 	if (!e) return { path: "/*" };
 	try {
-		let t = JSON.parse(e), n = ie.safeParse(t);
+		let t = JSON.parse(e), n = oe.safeParse(t);
 		if (n.success) return n.data;
 	} catch {}
 	return { path: "/*" };
 }
-function Ua(e) {
+function Ja(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
 		if (!Array.isArray(t)) return [];
 		let n = [];
 		for (let e of t) {
-			let t = te.safeParse(e);
+			let t = re.safeParse(e);
 			t.success && n.push(t.data);
 		}
 		return n;
@@ -5161,7 +5206,7 @@ function Ua(e) {
 }
 //#endregion
 //#region src/proxyRoutes/adapter.ts
-function K(e) {
+function J(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5187,14 +5232,14 @@ function K(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("proxy_routes").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? G(r) : null;
+			return r ? q(r) : null;
 		},
 		async list(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 50, a = e.selectFrom("proxy_routes").where("tenant_id", "=", t);
 			n.custom_domain_id && (a = a.where("custom_domain_id", "=", n.custom_domain_id));
 			let o = await a.selectAll().orderBy("priority", "asc").orderBy("created_at", "asc").offset(r * i).limit(i).execute();
 			return {
-				proxy_routes: o.map(G),
+				proxy_routes: o.map(q),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5214,7 +5259,7 @@ function K(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function Wa(e, t) {
+async function Ya(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5226,27 +5271,27 @@ async function Wa(e, t) {
 		tenant_id: a.tenant_id,
 		custom_domain_id: a.custom_domain_id,
 		domain: a.domain,
-		routes: o.map(G)
+		routes: o.map(q)
 	};
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function Ga(e) {
+function Xa(e) {
 	return {
-		proxyRoutes: K(e),
-		resolveHost: (t) => Wa(e, t)
+		proxyRoutes: J(e),
+		resolveHost: (t) => Ya(e, t)
 	};
 }
 //#endregion
 //#region src/scim/adapter.ts
-function Ka(e) {
+function Za(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
 		if (!Array.isArray(t)) return [];
 		let n = [];
 		for (let e of t) {
-			let t = ue.safeParse(e);
+			let t = fe.safeParse(e);
 			t.success && n.push(t.data);
 		}
 		return n;
@@ -5254,7 +5299,7 @@ function Ka(e) {
 		return [];
 	}
 }
-function qa(e) {
+function Qa(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5263,16 +5308,16 @@ function qa(e) {
 		return [];
 	}
 }
-function Ja(e) {
+function $a(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: Ka(e.mapping),
+		mapping: Za(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function Ya(e) {
+function eo(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5293,7 +5338,7 @@ function Ya(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
-			return r ? Ja(r) : null;
+			return r ? $a(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5307,18 +5352,18 @@ function Ya(e) {
 		}
 	};
 }
-function q(e) {
+function Y(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: qa(e.scopes),
+		scopes: Qa(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function Xa(e) {
+function to(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5342,14 +5387,14 @@ function Xa(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
-			return r ? q(r) : null;
+			return r ? Y(r) : null;
 		},
 		async getByHash(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-			return r ? q(r) : null;
+			return r ? Y(r) : null;
 		},
 		async listByConnection(t, n) {
-			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(q);
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(Y);
 		},
 		async markUsed(t, n, r) {
 			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
@@ -5361,7 +5406,7 @@ function Xa(e) {
 		}
 	};
 }
-function Za(e) {
+function no(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -5369,7 +5414,7 @@ function Za(e) {
 		created_at: e.created_at
 	};
 }
-function Qa(e) {
+function ro(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5388,11 +5433,11 @@ function Qa(e) {
 		},
 		async getByExternalId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
-			return i ? Za(i) : null;
+			return i ? no(i) : null;
 		},
 		async getByUserId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
-			return i ? Za(i) : null;
+			return i ? no(i) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
@@ -5402,8 +5447,8 @@ function Qa(e) {
 }
 //#endregion
 //#region src/tenantOperations/index.ts
-function J(e) {
-	return me.parse({
+function X(e) {
+	return _e.parse({
 		id: e.id,
 		tenant_id: e.tenant_id,
 		rollout_id: e.rollout_id,
@@ -5421,10 +5466,10 @@ function J(e) {
 		finished_at: e.finished_at
 	});
 }
-function $a(e) {
+function io(e) {
 	return {
 		async create(n) {
-			let r = pe.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
+			let r = ge.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
 				id: `op_${t()}`,
 				tenant_id: r.tenant_id,
 				rollout_id: r.rollout_id ?? null,
@@ -5441,11 +5486,11 @@ function $a(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("tenant_operations").values(a).execute(), J(a);
+			return await e.insertInto("tenant_operations").values(a).execute(), X(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("tenant_operations").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? J(n) : null;
+			return n ? X(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = e.selectFrom("tenant_operations");
@@ -5456,7 +5501,7 @@ function $a(e) {
 			t.engine !== void 0 && (i = i.where("engine", "=", t.engine)), t.updated_before !== void 0 && (i = i.where("updated_at", "<", t.updated_before));
 			let a = await i.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				operations: a.map(J),
+				operations: a.map(X),
 				start: n * r,
 				limit: r,
 				length: a.length
@@ -5476,27 +5521,27 @@ function $a(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var eo = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Y = 32, to = 10, no = 4, ro = 10;
-function io(e, t) {
+var ao = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Z = 32, oo = 10, so = 4, co = 10;
+function lo(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = eo.charAt(e % Y) + n, e = Math.floor(e / Y);
+	for (let r = t; r > 0; r--) n = ao.charAt(e % Z) + n, e = Math.floor(e / Z);
 	return n;
 }
-function ao() {
-	let e = new Uint8Array(ro);
+function uo() {
+	let e = new Uint8Array(co);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < ro; n++) t += eo.charAt(e[n] % Y);
+	for (let n = 0; n < co; n++) t += ao.charAt(e[n] % Z);
 	return t;
 }
-var oo = 0, so = 0;
-function co() {
+var fo = 0, po = 0;
+function mo() {
 	let e = Date.now();
-	return e === oo ? so++ : (oo = e, so = 0), io(e, to) + io(so, no) + ao();
+	return e === fo ? po++ : (fo = e, po = 0), lo(e, oo) + lo(po, so) + uo();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function lo(e) {
+function ho(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5504,22 +5549,22 @@ function lo(e) {
 	} catch {}
 	return null;
 }
-function uo(e) {
-	return fe.parse({
+function go(e) {
+	return he.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: lo(e.detail),
+		detail: ho(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function fo(e) {
+function _o(e) {
 	return {
 		async create(t) {
-			let n = de.parse(t), r = {
-				id: `evt_${co()}`,
+			let n = me.parse(t), r = {
+				id: `evt_${mo()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5527,12 +5572,12 @@ function fo(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), uo(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), go(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(uo),
+				events: a.map(go),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -5542,7 +5587,7 @@ function fo(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function po(e) {
+function vo(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5550,26 +5595,26 @@ function po(e) {
 		return null;
 	}
 }
-function X(e) {
-	return le.parse({
+function yo(e) {
+	return de.parse({
 		id: e.id,
 		kind: e.kind,
 		status: e.status,
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: po(e.canary_tenant_ids),
-		filter: po(e.filter),
+		canary_tenant_ids: vo(e.canary_tenant_ids),
+		filter: vo(e.filter),
 		initiated_by: e.initiated_by,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function mo(e) {
+function bo(e) {
 	return {
 		async create(n) {
-			let r = ce.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
+			let r = ue.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
 				id: `rol_${t()}`,
 				kind: r.kind,
 				status: "pending",
@@ -5583,16 +5628,16 @@ function mo(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("rollouts").values(a).execute(), X(a);
+			return await e.insertInto("rollouts").values(a).execute(), yo(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("rollouts").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? X(n) : null;
+			return n ? yo(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = await e.selectFrom("rollouts").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: i.map(X),
+				rollouts: i.map(yo),
 				start: n * r,
 				limit: r,
 				length: i.length
@@ -5612,7 +5657,7 @@ function mo(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var ho = class {
+var xo = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -5620,10 +5665,10 @@ var ho = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, go = /* @__PURE__ */ C({
-	down: () => bo,
-	up: () => yo
-}), _o = [
+}, So = /* @__PURE__ */ w({
+	down: () => Eo,
+	up: () => To
+}), Co = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -5889,47 +5934,47 @@ var ho = class {
 		onDelete: "cascade"
 	}
 ];
-async function vo(e) {
+async function wo(e) {
 	try {
 		return await f`select sqlite_version()`.execute(e), !0;
 	} catch {
 		return !1;
 	}
 }
-function Z(e, t) {
+function Q(e, t) {
 	let n = e;
-	for (let e of _o) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of Co) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function yo(e) {
-	let t = await vo(e);
+async function To(e) {
+	let t = await wo(e);
 	await e.schema.createTable("tenants").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("audience", f`varchar(255)`).addColumn("sender_email", f`varchar(255)`).addColumn("sender_name", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addColumn("support_url", f`varchar(255)`).addColumn("idle_session_lifetime", f`int`).addColumn("session_lifetime", f`int`).addColumn("session_cookie", f`text`).addColumn("allowed_logout_urls", f`text`).addColumn("ephemeral_session_lifetime", f`int`).addColumn("idle_ephemeral_session_lifetime", f`int`).addColumn("default_redirection_uri", f`text`).addColumn("enabled_locales", f`text`).addColumn("default_directory", f`varchar(255)`).addColumn("error_page", f`text`).addColumn("flags", f`text`).addColumn("friendly_name", f`varchar(255)`).addColumn("picture_url", f`text`).addColumn("support_email", f`varchar(255)`).addColumn("sandbox_version", f`varchar(50)`).addColumn("sandbox_versions_available", f`text`).addColumn("legacy_sandbox_version", f`varchar(50)`).addColumn("change_password", f`text`).addColumn("guardian_mfa_page", f`text`).addColumn("device_flow", f`text`).addColumn("default_token_quota", f`text`).addColumn("default_audience", f`varchar(255)`).addColumn("default_organization", f`varchar(255)`).addColumn("sessions", f`text`).addColumn("oidc_logout", f`text`).addColumn("allow_organization_name_in_authentication_api", f`int`).addColumn("customize_mfa_in_postlogin_action", f`int`).addColumn("acr_values_supported", f`text`).addColumn("mtls", f`text`).addColumn("pushed_authorization_requests_supported", f`int`).addColumn("authorization_response_iss_parameter_supported", f`int`).addColumn("mfa", f`text`).addColumn("attack_protection", f`text`).addColumn("default_client_id", f`varchar(255)`).addColumn("deployment_type", f`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", f`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", f`varchar(2048)`).addColumn("provisioning_state_changed_at", f`varchar(35)`).addColumn("bundle_configuration", f`varchar(64)`).addColumn("worker_version", f`varchar(64)`).addColumn("worker_script_name", f`varchar(255)`).addColumn("storage_kind", f`varchar(32)`).addColumn("d1_database_id", f`varchar(64)`).addColumn("database_version", f`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", f`varchar(64)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("results", f`text`, (e) => e.notNull()).addColumn("logs", f`text`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("action_id", f`varchar(255)`, (e) => e.notNull()).addColumn("number", f`int`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("status", f`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed_at_ts", f`bigint`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("type", f`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", f`varchar(32)`).addColumn("totp_secret", f`varchar(255)`).addColumn("confirmed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("credential_id", f`varchar(512)`).addColumn("public_key", f`text`).addColumn("sign_count", f`int`).addColumn("credential_backed_up", f`int`).addColumn("transports", f`varchar(512)`).addColumn("friendly_name", f`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
-		t && (n = Z(n, "authentication_methods")), await n.execute();
+		t && (n = Q(n, "authentication_methods")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("branding").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("logo_url", f`varchar(512)`).addColumn("favicon_url", f`varchar(512)`).addColumn("font_url", f`varchar(512)`).addColumn("colors_primary", f`varchar(8)`).addColumn("colors_page_background_type", f`varchar(32)`).addColumn("colors_page_background_start", f`varchar(8)`).addColumn("colors_page_background_end", f`varchar(8)`).addColumn("colors_page_background_angle_dev", f`int`).addColumn("dark_mode", f`varchar(8)`).addPrimaryKeyConstraint("branding_pk", ["tenant_id"]);
-		t && (n = Z(n, "branding")), await n.execute();
+		t && (n = Q(n, "branding")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("clients").addColumn("client_id", f`varchar(191)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("description", f`varchar(140)`).addColumn("global", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("client_secret", f`varchar(255)`).addColumn("app_type", f`varchar(64)`, (e) => e.defaultTo("regular_web")).addColumn("logo_uri", f`varchar(2083)`).addColumn("is_first_party", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("oidc_conformant", f`int`, (e) => e.notNull().defaultTo(1)).addColumn("callbacks", f`text`, (e) => e.notNull()).addColumn("allowed_origins", f`text`, (e) => e.notNull()).addColumn("web_origins", f`text`, (e) => e.notNull()).addColumn("client_aliases", f`text`, (e) => e.notNull()).addColumn("allowed_clients", f`text`, (e) => e.notNull()).addColumn("allowed_logout_urls", f`text`, (e) => e.notNull()).addColumn("session_transfer", f`text`, (e) => e.notNull()).addColumn("oidc_logout", f`text`, (e) => e.notNull()).addColumn("grant_types", f`text`, (e) => e.notNull()).addColumn("jwt_configuration", f`text`, (e) => e.notNull()).addColumn("signing_keys", f`text`, (e) => e.notNull()).addColumn("encryption_key", f`text`, (e) => e.notNull()).addColumn("sso", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("sso_disabled", f`int`, (e) => e.notNull().defaultTo(1)).addColumn("cross_origin_authentication", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("cross_origin_loc", f`varchar(2083)`).addColumn("custom_login_page_on", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("custom_login_page", f`text`).addColumn("custom_login_page_preview", f`text`).addColumn("form_template", f`text`).addColumn("addons", f`text`, (e) => e.notNull()).addColumn("token_endpoint_auth_method", f`varchar(64)`, (e) => e.defaultTo("client_secret_basic")).addColumn("client_metadata", f`text`, (e) => e.notNull()).addColumn("mobile", f`text`, (e) => e.notNull()).addColumn("initiate_login_uri", f`varchar(2083)`).addColumn("native_social_login", f`text`, (e) => e.notNull()).addColumn("refresh_token", f`text`, (e) => e.notNull()).addColumn("default_organization", f`text`, (e) => e.notNull()).addColumn("organization_usage", f`varchar(32)`, (e) => e.defaultTo("deny")).addColumn("organization_require_behavior", f`varchar(32)`, (e) => e.defaultTo("no_prompt")).addColumn("client_authentication_methods", f`text`, (e) => e.notNull()).addColumn("require_pushed_authorization_requests", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("require_proof_of_possession", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("signed_request_object", f`text`, (e) => e.notNull()).addColumn("compliance_level", f`varchar(64)`).addColumn("par_request_expiry", f`int`).addColumn("token_quota", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("connections", f`text`).addColumn("auth0_conformant", f`int`, (e) => e.defaultTo(1)).addColumn("owner_user_id", f`varchar(255)`).addColumn("registration_type", f`varchar(32)`).addColumn("registration_metadata", f`text`).addColumn("user_linking_mode", f`varchar(16)`).addColumn("hide_sign_up_disabled_error", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("clients_pk", ["tenant_id", "client_id"]);
-		t && (n = Z(n, "clients")), await n.execute();
+		t && (n = Q(n, "clients")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("client_grants").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("client_id", f`varchar(191)`, (e) => e.notNull()).addColumn("audience", f`varchar(191)`, (e) => e.notNull()).addColumn("scope", f`text`).addColumn("organization_usage", f`varchar(32)`).addColumn("allow_any_organization", f`int`, (e) => e.defaultTo(0)).addColumn("is_system", f`int`, (e) => e.defaultTo(0)).addColumn("subject_type", f`varchar(32)`).addColumn("authorization_details_types", f`text`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("client_grants_pk", ["tenant_id", "id"]);
-		t && (n = Z(n, "client_grants")), await n.execute();
+		t && (n = Q(n, "client_grants")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("client_registration_tokens").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("token_hash", f`varchar(64)`, (e) => e.notNull()).addColumn("type", f`varchar(8)`, (e) => e.notNull()).addColumn("client_id", f`varchar(191)`).addColumn("sub", f`varchar(255)`).addColumn("constraints", f`text`).addColumn("single_use", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("used_at_ts", f`bigint`).addColumn("expires_at_ts", f`bigint`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("revoked_at_ts", f`bigint`).addPrimaryKeyConstraint("client_registration_tokens_pk", ["id"]);
-		t && (n = Z(n, "client_registration_tokens")), await n.execute();
+		t && (n = Q(n, "client_registration_tokens")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("users").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("email", f`varchar(255)`).addColumn("given_name", f`varchar(255)`).addColumn("family_name", f`varchar(255)`).addColumn("nickname", f`varchar(255)`).addColumn("name", f`varchar(255)`).addColumn("picture", f`text`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("linked_to", f`varchar(255)`).addColumn("provider", f`varchar(255)`, (e) => e.notNull()).addColumn("connection", f`varchar(255)`, (e) => e.notNull()).addColumn("email_verified", f`tinyint(1)`, (e) => e.notNull()).addColumn("is_social", f`tinyint(1)`, (e) => e.notNull()).addColumn("app_metadata", f`text`, (e) => e.notNull().defaultTo(f`('{}')`)).addColumn("profileData", f`text`).addColumn("locale", f`varchar(64)`).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("phone_number", f`varchar(17)`).addColumn("phone_verified", f`tinyint(1)`).addColumn("username", f`varchar(128)`).addColumn("user_metadata", f`text`).addColumn("middle_name", f`varchar(100)`).addColumn("profile", f`text`).addColumn("website", f`text`).addColumn("gender", f`varchar(50)`).addColumn("birthdate", f`varchar(10)`).addColumn("zoneinfo", f`varchar(100)`).addColumn("preferred_username", f`varchar(255)`).addColumn("address", f`text`).addColumn("registration_completed_at", f`varchar(35)`).addPrimaryKeyConstraint("users_pk", ["tenant_id", "user_id"]);
-		t && (n = Z(n, "users")), await n.execute();
+		t && (n = Q(n, "users")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("codes").addColumn("code_id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`).addColumn("login_id", f`varchar(255)`).addColumn("connection_id", f`varchar(255)`).addColumn("code_type", f`varchar(255)`, (e) => e.notNull()).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("expires_at", f`varchar(255)`, (e) => e.notNull()).addColumn("used_at", f`varchar(255)`).addColumn("code_verifier", f`varchar(128)`).addColumn("code_challenge", f`varchar(128)`).addColumn("code_challenge_method", f`varchar(5)`).addColumn("redirect_uri", f`varchar(1024)`).addColumn("nonce", f`varchar(1024)`).addColumn("state", f`varchar(2048)`).addColumn("otp", f`varchar(32)`).addPrimaryKeyConstraint("codes_pk", [
@@ -5937,16 +5982,16 @@ async function yo(e) {
 			"code_type",
 			"tenant_id"
 		]);
-		t && (n = Z(n, "codes")), await n.execute();
+		t && (n = Q(n, "codes")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("connections").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("response_type", f`varchar(255)`).addColumn("response_mode", f`varchar(255)`).addColumn("strategy", f`varchar(64)`).addColumn("options", f`varchar(8192)`, (e) => e.notNull().defaultTo("{}")).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addColumn("display_name", f`varchar(255)`).addColumn("is_domain_connection", f`int`).addColumn("show_as_button", f`int`).addColumn("metadata", f`varchar(4096)`).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("connections_pk", ["tenant_id", "id"]);
-		t && (n = Z(n, "connections")), await n.execute();
+		t && (n = Q(n, "connections")), await n.execute();
 	}
 	await e.schema.createTable("control_plane_comm_keys").addColumn("kid", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("public_jwk", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("revoked_at", f`varchar(35)`).addPrimaryKeyConstraint("control_plane_comm_keys_pk", ["kid"]).execute();
 	{
 		let n = e.schema.createTable("custom_domains").addColumn("custom_domain_id", f`varchar(256)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("domain", f`varchar(255)`, (e) => e.notNull()).addColumn("primary", f`tinyint(1)`, (e) => e.notNull()).addColumn("status", f`varchar(50)`, (e) => e.notNull()).addColumn("type", f`varchar(50)`, (e) => e.notNull()).addColumn("origin_domain_name", f`varchar(255)`).addColumn("verification", f`varchar(2048)`).addColumn("custom_client_ip_header", f`varchar(50)`).addColumn("tls_policy", f`varchar(50)`).addColumn("domain_metadata", f`varchar(2048)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("custom_domains_pk", ["custom_domain_id"]);
-		t && (n = Z(n, "custom_domains")), await n.execute();
+		t && (n = Q(n, "custom_domains")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("custom_text").addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("prompt", f`varchar(64)`, (e) => e.notNull()).addColumn("language", f`varchar(16)`, (e) => e.notNull()).addColumn("custom_text", f`text`, (e) => e.notNull()).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("custom_text_pk", [
@@ -5954,56 +5999,56 @@ async function yo(e) {
 			"prompt",
 			"language"
 		]);
-		t && (n = Z(n, "custom_text")), await n.execute();
+		t && (n = Q(n, "custom_text")), await n.execute();
 	}
 	await e.schema.createTable("email_providers").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("enabled", f`tinyint(1)`, (e) => e.notNull()).addColumn("default_from_address", f`varchar(255)`).addColumn("credentials", f`varchar(2048)`, (e) => e.notNull().defaultTo("{}")).addColumn("settings", f`varchar(2048)`, (e) => e.notNull().defaultTo("{}")).addColumn("created_at", f`varchar(29)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(29)`, (e) => e.notNull()).addPrimaryKeyConstraint("email_providers_pk", ["tenant_id"]).execute();
 	{
 		let n = e.schema.createTable("email_templates").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("template", f`varchar(64)`, (e) => e.notNull()).addColumn("body", f`text`, (e) => e.notNull()).addColumn("from", f`varchar(255)`, (e) => e.notNull()).addColumn("subject", f`varchar(255)`, (e) => e.notNull()).addColumn("syntax", f`varchar(16)`, (e) => e.notNull().defaultTo("liquid")).addColumn("result_url", f`varchar(2048)`).addColumn("url_lifetime_in_seconds", f`int`).addColumn("include_email_in_redirect", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("enabled", f`int`, (e) => e.notNull().defaultTo(1)).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("email_templates_pk", ["tenant_id", "template"]);
-		t && (n = Z(n, "email_templates")), await n.execute();
+		t && (n = Q(n, "email_templates")), await n.execute();
 	}
 	await e.schema.createTable("flows").addColumn("id", f`varchar(24)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(150)`, (e) => e.notNull()).addColumn("actions", f`text`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("flows_pk", ["id"]).execute(), await e.schema.createTable("forms").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("messages", f`varchar(255)`).addColumn("languages", f`varchar(255)`).addColumn("translations", f`varchar(4096)`).addColumn("nodes", f`varchar(4096)`).addColumn("start", f`varchar(255)`).addColumn("ending", f`varchar(255)`).addColumn("style", f`varchar(1042)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addPrimaryKeyConstraint("forms_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("grants").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(191)`, (e) => e.notNull()).addColumn("client_id", f`varchar(191)`, (e) => e.notNull()).addColumn("audience", f`varchar(100)`, (e) => e.notNull().defaultTo("")).addColumn("scope", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("grants_pk", ["id"]);
-		t && (n = Z(n, "grants")), await n.execute();
+		t && (n = Q(n, "grants")), await n.execute();
 	}
 	await e.schema.createTable("hook_code").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("secrets", f`text`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("hook_code_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("hooks").addColumn("hook_id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("trigger_id", f`varchar(255)`, (e) => e.notNull()).addColumn("enabled", f`tinyint(1)`, (e) => e.notNull()).addColumn("synchronous", f`tinyint(1)`, (e) => e.notNull().defaultTo(0)).addColumn("priority", f`int`).addColumn("form_id", f`varchar(128)`).addColumn("url", f`varchar(512)`).addColumn("template_id", f`varchar(64)`).addColumn("created_at_ts", f`bigint`).addColumn("updated_at_ts", f`bigint`).addColumn("code_id", f`varchar(21)`).addColumn("metadata", f`text`).addPrimaryKeyConstraint("hooks_pk", ["hook_id"]);
-		t && (n = Z(n, "hooks")), await n.execute();
+		t && (n = Q(n, "hooks")), await n.execute();
 	}
 	await e.schema.createTable("invites").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("organization_id", f`varchar(21)`, (e) => e.notNull()).addColumn("inviter", f`text`, (e) => e.notNull()).addColumn("invitee", f`text`, (e) => e.notNull()).addColumn("client_id", f`varchar(191)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(21)`).addColumn("invitation_url", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("expires_at", f`varchar(35)`, (e) => e.notNull()).addColumn("app_metadata", f`text`).addColumn("user_metadata", f`text`).addColumn("roles", f`text`).addColumn("ticket_id", f`varchar(191)`).addColumn("ttl_sec", f`int`).addColumn("send_invitation_email", f`int`).addPrimaryKeyConstraint("invites_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("keys").addColumn("kid", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("revoked_at", f`varchar(255)`).addColumn("cert", f`varchar(4096)`).addColumn("pkcs7", f`varchar(4096)`).addColumn("fingerprint", f`varchar(256)`).addColumn("thumbprint", f`varchar(256)`).addColumn("current_since", f`varchar(256)`).addColumn("current_until", f`varchar(256)`).addColumn("type", f`varchar(50)`, (e) => e.notNull().defaultTo("jwt_signing")).addColumn("connection", f`varchar(255)`).addPrimaryKeyConstraint("keys_pk", ["kid"]);
-		t && (n = Z(n, "keys")), await n.execute();
+		t && (n = Q(n, "keys")), await n.execute();
 	}
 	await e.schema.createTable("log_streams").addColumn("id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("type", f`varchar(64)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("sink", f`text`, (e) => e.notNull()).addColumn("filters", f`text`).addColumn("is_priority", f`tinyint(1)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("log_streams_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("sessions").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`).addColumn("device", f`text`, (e) => e.notNull()).addColumn("clients", f`text`, (e) => e.notNull()).addColumn("login_session_id", f`varchar(26)`).addColumn("created_at_ts", f`bigint`).addColumn("updated_at_ts", f`bigint`).addColumn("expires_at_ts", f`bigint`).addColumn("idle_expires_at_ts", f`bigint`).addColumn("authenticated_at_ts", f`bigint`).addColumn("last_interaction_at_ts", f`bigint`).addColumn("used_at_ts", f`bigint`).addColumn("revoked_at_ts", f`bigint`).addPrimaryKeyConstraint("sessions_pk", ["tenant_id", "id"]);
-		t && (n = Z(n, "sessions")), await n.execute();
+		t && (n = Q(n, "sessions")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("login_sessions").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("session_id", f`varchar(26)`).addColumn("csrf_token", f`varchar(26)`).addColumn("authorization_url", f`text`).addColumn("ip", f`varchar(39)`).addColumn("useragent", f`text`).addColumn("auth0Client", f`varchar(255)`).addColumn("state", f`varchar(50)`, (e) => e.defaultTo("pending")).addColumn("state_data", f`text`).addColumn("failure_reason", f`text`).addColumn("user_id", f`varchar(255)`).addColumn("created_at_ts", f`bigint`).addColumn("updated_at_ts", f`bigint`).addColumn("expires_at_ts", f`bigint`).addColumn("auth_connection", f`varchar(255)`).addColumn("auth_strategy_strategy", f`varchar(64)`).addColumn("auth_strategy_strategy_type", f`varchar(64)`).addColumn("authenticated_at", f`varchar(35)`).addColumn("auth_params", f`text`).addPrimaryKeyConstraint("login_sessions_pk", ["tenant_id", "id"]);
-		t && (n = Z(n, "login_sessions")), await n.execute();
+		t && (n = Q(n, "login_sessions")), await n.execute();
 	}
 	await e.schema.createTable("logs").addColumn("log_id", f`varchar(21)`, (e) => e.notNull()).addColumn("category", f`varchar(255)`).addColumn("tenant_id", f`varchar(64)`).addColumn("user_id", f`varchar(64)`).addColumn("ip", f`varchar(255)`).addColumn("type", f`varchar(8)`, (e) => e.notNull()).addColumn("date", f`varchar(25)`, (e) => e.notNull()).addColumn("client_id", f`varchar(255)`).addColumn("client_name", f`varchar(255)`).addColumn("user_agent", f`varchar(255)`).addColumn("description", f`varchar(255)`).addColumn("details", f`varchar(2048)`).addColumn("isMobile", f`int`).addColumn("user_name", f`varchar(255)`).addColumn("connection", f`varchar(255)`).addColumn("connection_id", f`varchar(255)`).addColumn("audience", f`varchar(255)`).addColumn("scope", f`varchar(255)`).addColumn("strategy", f`varchar(255)`).addColumn("strategy_type", f`varchar(255)`).addColumn("hostname", f`varchar(255)`).addColumn("auth0_client", f`varchar(8192)`).addColumn("session_connection", f`varchar(255)`).addColumn("country_code", f`varchar(2)`).addColumn("country_code3", f`varchar(3)`).addColumn("country_name", f`varchar(255)`).addColumn("city_name", f`varchar(255)`).addColumn("latitude", f`varchar(255)`).addColumn("longitude", f`varchar(255)`).addColumn("time_zone", f`varchar(255)`).addColumn("continent_code", f`varchar(2)`).addPrimaryKeyConstraint("logs_pk", ["log_id"]).execute(), await e.schema.createTable("migration_sources").addColumn("id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("provider", f`varchar(32)`, (e) => e.notNull()).addColumn("connection", f`varchar(255)`, (e) => e.notNull()).addColumn("enabled", f`tinyint(1)`, (e) => e.notNull()).addColumn("credentials", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("migration_sources_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("migrations").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("provider", f`varchar(255)`).addColumn("client_id", f`varchar(255)`).addColumn("origin", f`varchar(255)`).addColumn("domain", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addPrimaryKeyConstraint("migrations_pk", ["id"]);
-		t && (n = Z(n, "migrations")), await n.execute();
+		t && (n = Q(n, "migrations")), await n.execute();
 	}
 	await e.schema.createTable("organizations").addColumn("id", f`varchar(256)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(256)`, (e) => e.notNull()).addColumn("name", f`varchar(256)`, (e) => e.notNull()).addColumn("display_name", f`varchar(256)`).addColumn("branding", f`text`).addColumn("metadata", f`text`).addColumn("enabled_connections", f`text`).addColumn("token_quota", f`text`).addColumn("created_at", f`varchar(256)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(256)`, (e) => e.notNull()).addPrimaryKeyConstraint("organizations_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("organization_connections").addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("organization_id", f`varchar(21)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(191)`, (e) => e.notNull()).addColumn("assign_membership_on_login", f`tinyint(1)`, (e) => e.notNull().defaultTo(0)).addColumn("show_as_button", f`tinyint(1)`, (e) => e.notNull().defaultTo(1)).addColumn("is_signup_enabled", f`tinyint(1)`, (e) => e.notNull().defaultTo(1)).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull());
-		t && (n = Z(n, "organization_connections")), await n.execute();
+		t && (n = Q(n, "organization_connections")), await n.execute();
 	}
 	await e.schema.createTable("outbox_events").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("event_type", f`varchar(255)`, (e) => e.notNull()).addColumn("log_type", f`varchar(64)`, (e) => e.notNull()).addColumn("aggregate_type", f`varchar(64)`, (e) => e.notNull()).addColumn("aggregate_id", f`varchar(255)`, (e) => e.notNull()).addColumn("payload", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("processed_at", f`varchar(35)`).addColumn("retry_count", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("next_retry_at", f`varchar(35)`).addColumn("error", f`text`).addColumn("claimed_by", f`varchar(64)`).addColumn("claim_expires_at", f`varchar(35)`).addColumn("dead_lettered_at", f`varchar(35)`).addColumn("final_error", f`text`).addPrimaryKeyConstraint("outbox_events_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("passwords").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("user_id", f`varchar(191)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("password", f`varchar(255)`, (e) => e.notNull()).addColumn("algorithm", f`varchar(255)`, (e) => e.notNull().defaultTo("bcrypt")).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("is_current", f`int`, (e) => e.notNull().defaultTo(1)).addPrimaryKeyConstraint("passwords_pk", ["id"]);
-		t && (n = Z(n, "passwords")), await n.execute();
+		t && (n = Q(n, "passwords")), await n.execute();
 	}
 	await e.schema.createTable("prompt_settings").addColumn("tenant_id", f`varchar(64)`, (e) => e.notNull()).addColumn("universal_login_experience", f`varchar(16)`, (e) => e.notNull().defaultTo("new")).addColumn("identifier_first", f`tinyint(1)`, (e) => e.notNull().defaultTo(1)).addColumn("password_first", f`tinyint(1)`, (e) => e.notNull().defaultTo(0)).addColumn("webauthn_platform_first_factor", f`tinyint(1)`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("prompt_settings_pk", ["tenant_id"]).execute(), await e.schema.createTable("proxy_routes").addColumn("id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("custom_domain_id", f`varchar(256)`, (e) => e.notNull()).addColumn("priority", f`int`, (e) => e.notNull().defaultTo(100)).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("match", f`varchar(2048)`, (e) => e.notNull().defaultTo("{\"path\":\"/*\"}")).addColumn("handlers", f`text`, (e) => e.notNull()).addPrimaryKeyConstraint("proxy_routes_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("refresh_tokens").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("client_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`).addColumn("resource_servers", f`text`, (e) => e.notNull()).addColumn("device", f`text`, (e) => e.notNull()).addColumn("rotating", f`tinyint(1)`, (e) => e.notNull()).addColumn("created_at_ts", f`bigint`).addColumn("expires_at_ts", f`bigint`).addColumn("idle_expires_at_ts", f`bigint`).addColumn("last_exchanged_at_ts", f`bigint`).addColumn("login_id", f`varchar(26)`, (e) => e.notNull()).addColumn("revoked_at_ts", f`bigint`).addColumn("token_lookup", f`varchar(16)`).addColumn("token_hash", f`varchar(64)`).addColumn("family_id", f`varchar(26)`).addColumn("rotated_to", f`varchar(26)`).addColumn("rotated_at_ts", f`bigint`).addPrimaryKeyConstraint("refresh_tokens_pk", ["tenant_id", "id"]);
-		t && (n = Z(n, "refresh_tokens")), await n.execute();
+		t && (n = Q(n, "refresh_tokens")), await n.execute();
 	}
 	await e.schema.createTable("resource_servers").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("identifier", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("scopes", f`text`).addColumn("signing_alg", f`varchar(64)`).addColumn("signing_secret", f`varchar(2048)`).addColumn("token_lifetime", f`int`).addColumn("token_lifetime_for_web", f`int`).addColumn("skip_consent_for_verifiable_first_party_clients", f`int`).addColumn("allow_offline_access", f`int`).addColumn("verification_key", f`varchar(4096)`).addColumn("options", f`varchar(4096)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("metadata", f`varchar(4096)`).addPrimaryKeyConstraint("resource_servers_pk", ["tenant_id", "id"]).execute(), await e.schema.createTable("role_permissions").addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("role_id", f`varchar(21)`, (e) => e.notNull()).addColumn("resource_server_identifier", f`varchar(191)`, (e) => e.notNull()).addColumn("permission_name", f`varchar(191)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("role_permissions_pk", [
 		"tenant_id",
@@ -6013,23 +6058,23 @@ async function yo(e) {
 	]).execute(), await e.schema.createTable("roles").addColumn("id", f`varchar(21)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(50)`, (e) => e.notNull()).addColumn("description", f`varchar(255)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("metadata", f`varchar(4096)`).addPrimaryKeyConstraint("roles_pk", ["tenant_id", "id"]).execute(), await e.schema.createTable("rollouts").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("kind", f`varchar(32)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("target_worker_version", f`varchar(255)`).addColumn("target_database_version", f`varchar(255)`).addColumn("wave_size", f`int`, (e) => e.notNull().defaultTo(10)).addColumn("canary_tenant_ids", f`text`).addColumn("filter", f`text`).addColumn("initiated_by", f`varchar(255)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("finished_at", f`varchar(35)`).addPrimaryKeyConstraint("rollouts_pk", ["id"]).execute(), await e.schema.createTable("tenant_operations").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`).addColumn("rollout_id", f`varchar(255)`).addColumn("kind", f`varchar(32)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("current_step", f`varchar(255)`).addColumn("engine", f`varchar(64)`, (e) => e.notNull()).addColumn("engine_instance_id", f`varchar(100)`).addColumn("target_worker_version", f`varchar(255)`).addColumn("target_database_version", f`varchar(255)`).addColumn("error", f`text`).addColumn("initiated_by", f`varchar(255)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addColumn("finished_at", f`varchar(35)`).addPrimaryKeyConstraint("tenant_operations_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("tenant_operation_events").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("operation_id", f`varchar(255)`, (e) => e.notNull()).addColumn("step", f`varchar(255)`, (e) => e.notNull()).addColumn("outcome", f`varchar(32)`, (e) => e.notNull()).addColumn("detail", f`text`).addColumn("attempt", f`int`, (e) => e.notNull().defaultTo(1)).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_events_pk", ["id"]);
-		t && (n = Z(n, "tenant_operation_events")), await n.execute();
+		t && (n = Q(n, "tenant_operation_events")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("themes").addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("themeId", f`varchar(21)`, (e) => e.notNull()).addColumn("displayName", f`varchar(255)`, (e) => e.notNull()).addColumn("colors_primary_button_label", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_primary_button", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_secondary_button_border", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_secondary_button_label", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_base_focus_color", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_base_hover_color", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_body_text", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_captcha_widget_theme", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_error", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_header", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_icons", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_input_background", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_input_border", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_input_filled_text", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_input_labels_placeholders", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_links_focused_components", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_success", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_widget_background", f`varchar(24)`, (e) => e.notNull()).addColumn("colors_widget_border", f`varchar(24)`, (e) => e.notNull()).addColumn("borders_button_border_radius", f`int`, (e) => e.notNull()).addColumn("borders_button_border_weight", f`int`, (e) => e.notNull()).addColumn("borders_buttons_style", f`varchar(24)`, (e) => e.notNull()).addColumn("borders_input_border_radius", f`int`, (e) => e.notNull()).addColumn("borders_input_border_weight", f`int`, (e) => e.notNull()).addColumn("borders_inputs_style", f`varchar(24)`, (e) => e.notNull()).addColumn("borders_show_widget_shadow", f`tinyint(1)`, (e) => e.notNull()).addColumn("borders_widget_border_weight", f`int`, (e) => e.notNull()).addColumn("borders_widget_corner_radius", f`int`, (e) => e.notNull()).addColumn("fonts_body_text_bold", f`int`, (e) => e.notNull()).addColumn("fonts_body_text_size", f`int`, (e) => e.notNull()).addColumn("fonts_buttons_text_bold", f`int`, (e) => e.notNull()).addColumn("fonts_buttons_text_size", f`int`, (e) => e.notNull()).addColumn("fonts_font_url", f`varchar(255)`, (e) => e.notNull()).addColumn("fonts_input_labels_bold", f`int`, (e) => e.notNull()).addColumn("fonts_input_labels_size", f`int`, (e) => e.notNull()).addColumn("fonts_links_bold", f`tinyint(1)`, (e) => e.notNull()).addColumn("fonts_links_size", f`int`, (e) => e.notNull()).addColumn("fonts_links_style", f`varchar(24)`, (e) => e.notNull()).addColumn("fonts_reference_text_size", f`int`, (e) => e.notNull()).addColumn("fonts_subtitle_bold", f`tinyint(1)`, (e) => e.notNull()).addColumn("fonts_subtitle_size", f`int`, (e) => e.notNull()).addColumn("fonts_title_bold", f`tinyint(1)`, (e) => e.notNull()).addColumn("fonts_title_size", f`int`, (e) => e.notNull()).addColumn("page_background_background_color", f`varchar(24)`, (e) => e.notNull()).addColumn("page_background_background_image_url", f`varchar(255)`, (e) => e.notNull()).addColumn("page_background_page_layout", f`varchar(24)`, (e) => e.notNull()).addColumn("widget_header_text_alignment", f`varchar(24)`, (e) => e.notNull()).addColumn("widget_logo_height", f`int`, (e) => e.notNull()).addColumn("widget_logo_position", f`varchar(24)`, (e) => e.notNull()).addColumn("widget_logo_url", f`varchar(255)`, (e) => e.notNull()).addColumn("widget_social_buttons_layout", f`varchar(24)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("themes_pk", ["tenant_id", "themeId"]);
-		t && (n = Z(n, "themes")), await n.execute();
+		t && (n = Q(n, "themes")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("universal_login_templates").addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("body", f`text`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("universal_login_templates_pk", ["tenant_id"]);
-		t && (n = Z(n, "universal_login_templates")), await n.execute();
+		t && (n = Q(n, "universal_login_templates")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("user_activity").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("last_login", f`varchar(35)`).addColumn("last_ip", f`varchar(45)`).addColumn("login_count", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("failed_logins", f`text`).addColumn("last_password_reset", f`varchar(35)`).addPrimaryKeyConstraint("user_activity_pk", ["tenant_id", "user_id"]);
-		t && (n = Z(n, "user_activity")), await n.execute();
+		t && (n = Q(n, "user_activity")), await n.execute();
 	}
 	{
 		let n = e.schema.createTable("user_organizations").addColumn("id", f`varchar(256)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(256)`, (e) => e.notNull()).addColumn("user_id", f`varchar(256)`, (e) => e.notNull()).addColumn("organization_id", f`varchar(256)`, (e) => e.notNull()).addColumn("created_at", f`varchar(256)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(256)`, (e) => e.notNull()).addPrimaryKeyConstraint("user_organizations_pk", ["id"]);
-		t && (n = Z(n, "user_organizations")), await n.execute();
+		t && (n = Q(n, "user_organizations")), await n.execute();
 	}
 	if (await e.schema.createTable("user_permissions").addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(191)`, (e) => e.notNull()).addColumn("resource_server_identifier", f`varchar(100)`, (e) => e.notNull()).addColumn("permission_name", f`varchar(191)`, (e) => e.notNull()).addColumn("organization_id", f`varchar(21)`, (e) => e.notNull().defaultTo("")).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("user_permissions_pk", [
 		"tenant_id",
@@ -6092,76 +6137,76 @@ async function yo(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of _o) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Co) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function bo(e) {
+async function Eo(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var xo = !1;
-function So(e) {
-	xo = e;
+var Do = !1;
+function Oo(e) {
+	Do = e;
 }
-function Q(...e) {
-	xo && console.log(...e);
+function $(...e) {
+	Do && console.log(...e);
 }
-function Co(...e) {
+function ko(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var wo = /* @__PURE__ */ C({
-	down: () => Po,
-	up: () => jo
-}), $ = 5e4, To = 500;
-async function Eo(e) {
+var Ao = /* @__PURE__ */ w({
+	down: () => Vo,
+	up: () => Ro
+}), jo = 5e4, Mo = 500;
+async function No(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function Do(e, t, n) {
+async function Po(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
 		if (e instanceof Error && (e.message.includes("1060") || e.message.includes("duplicate column"))) {
-			Q(`  Column ${t}.${n} already exists, skipping`);
+			$(`  Column ${t}.${n} already exists, skipping`);
 			return;
 		}
 		throw e;
 	}
 }
-async function Oo(e, t, n, r) {
+async function Fo(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
 		if (e instanceof Error && (e.message.includes("1061") || e.message.toLowerCase().includes("already exists"))) {
-			Q(`  Index ${t} already exists, skipping`);
+			$(`  Index ${t} already exists, skipping`);
 			return;
 		}
 		throw e;
 	}
 }
-async function ko(e, t) {
+async function Io(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
 		r = Number(t.numDeletedRows);
 	} else {
-		let t = $;
-		for (; t >= $;) {
-			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit($).executeTakeFirst();
-			t = Number(i.numDeletedRows), r += t, t > 0 && Q(`  Pruned ${r} expired codes row(s)...`);
+		let t = jo;
+		for (; t >= jo;) {
+			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(jo).executeTakeFirst();
+			t = Number(i.numDeletedRows), r += t, t > 0 && $(`  Pruned ${r} expired codes row(s)...`);
 		}
 	}
 	return r;
 }
-async function Ao(e) {
+async function Lo(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -6169,33 +6214,33 @@ async function Ao(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(To).execute();
+		]).where("expires_at_ts", "is", null).limit(Mo).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < To) break;
+		if (t += n.length, n.length < Mo) break;
 	}
 	return t;
 }
-async function jo(e) {
-	let t = await Eo(e);
+async function Ro(e) {
+	let t = await No(e);
 	try {
-		let n = await ko(e, t);
-		Q(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
+		let n = await Io(e, t);
+		$(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
-		Co(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
+		ko(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await Do(e, "codes", "expires_at_ts"), await Oo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await Po(e, "codes", "expires_at_ts"), await Fo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await Ao(e);
-		Q(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
+		let t = await Lo(e);
+		$(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
-		Co(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
+		ko(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function Mo(e, t, n) {
+async function zo(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -6203,7 +6248,7 @@ async function Mo(e, t, n) {
 		throw e;
 	}
 }
-async function No(e, t, n) {
+async function Bo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6211,16 +6256,16 @@ async function No(e, t, n) {
 		throw e;
 	}
 }
-async function Po(e) {
-	await Mo(e, "idx_codes_expires_at_ts", "codes"), await No(e, "codes", "expires_at_ts");
+async function Vo(e) {
+	await zo(e, "idx_codes_expires_at_ts", "codes"), await Bo(e, "codes", "expires_at_ts");
 }
 //#endregion
 //#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
-var Fo = /* @__PURE__ */ C({
-	down: () => Lo,
-	up: () => Io
+var Ho = /* @__PURE__ */ w({
+	down: () => Wo,
+	up: () => Uo
 });
-async function Io(e) {
+async function Uo(e) {
 	await e.schema.createTable("scim_configurations").addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", f`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", f`varchar(128)`, (e) => e.notNull()).addColumn("scopes", f`text`, (e) => e.notNull()).addColumn("valid_until", f`varchar(35)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", f`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("external_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
 		"tenant_id",
 		"connection_id",
@@ -6231,16 +6276,16 @@ async function Io(e) {
 		"external_id"
 	]).unique().execute();
 }
-async function Lo(e) {
+async function Wo(e) {
 	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
-var Ro = /* @__PURE__ */ C({
-	down: () => Ho,
-	up: () => Bo
+var Go = /* @__PURE__ */ w({
+	down: () => Yo,
+	up: () => qo
 });
-async function zo(e, t, n) {
+async function Ko(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6248,10 +6293,10 @@ async function zo(e, t, n) {
 		throw e;
 	}
 }
-async function Bo(e) {
-	await zo(e, "users", "blocked");
+async function qo(e) {
+	await Ko(e, "users", "blocked");
 }
-async function Vo(e, t, n) {
+async function Jo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6259,16 +6304,16 @@ async function Vo(e, t, n) {
 		throw e;
 	}
 }
-async function Ho(e) {
-	await Vo(e, "users", "blocked");
+async function Yo(e) {
+	await Jo(e, "users", "blocked");
 }
 //#endregion
 //#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
-var Uo = /* @__PURE__ */ C({
-	down: () => qo,
-	up: () => Go
+var Xo = /* @__PURE__ */ w({
+	down: () => es,
+	up: () => Qo
 });
-async function Wo(e, t, n) {
+async function Zo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6276,10 +6321,10 @@ async function Wo(e, t, n) {
 		throw e;
 	}
 }
-async function Go(e) {
-	await Wo(e, "prompt_settings", "show_last_used_connection");
+async function Qo(e) {
+	await Zo(e, "prompt_settings", "show_last_used_connection");
 }
-async function Ko(e, t, n) {
+async function $o(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6287,35 +6332,93 @@ async function Ko(e, t, n) {
 		throw e;
 	}
 }
-async function qo(e) {
-	await Ko(e, "prompt_settings", "show_last_used_connection");
+async function es(e) {
+	await $o(e, "prompt_settings", "show_last_used_connection");
+}
+//#endregion
+//#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
+var ts = /* @__PURE__ */ w({
+	down: () => is,
+	up: () => rs
+});
+async function ns(e, t, n, r) {
+	try {
+		await e.schema.createIndex(t).on(n).column(r).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1061") || e.message.toLowerCase().includes("already exists"))) {
+			$(`  Index ${t} already exists, skipping`);
+			return;
+		}
+		throw e;
+	}
+}
+async function rs(e) {
+	await ns(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+}
+async function is(e) {
+	try {
+		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+//#endregion
+//#region migrate/migrations/2026-08-11T12:00:00_page_hooks.ts
+var as = /* @__PURE__ */ w({
+	down: () => ls,
+	up: () => ss
+});
+async function os(e, t, n, r) {
+	try {
+		await e.schema.alterTable(t).addColumn(n, r).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function ss(e) {
+	await os(e, "hooks", "page_id", f`varchar(64)`), await os(e, "hooks", "permission_required", f`varchar(255)`);
+}
+async function cs(e, t, n) {
+	try {
+		await e.schema.alterTable(t).dropColumn(n).execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function ls(e) {
+	await cs(e, "hooks", "permission_required"), await cs(e, "hooks", "page_id");
 }
 //#endregion
 //#region migrate/migrations/index.ts
-var Jo = {
-	"2026-07-16T14:00:00_baseline": go,
-	"2026-07-16T15:00:00_codes_expires_at_ts": wo,
-	"2026-08-04T12:00:00_scim_inbound_provisioning": Fo,
-	"2026-08-05T12:00:00_user_blocked": Ro,
-	"2026-08-09T12:00:00_prompt_settings_last_used": Uo
+var us = {
+	"2026-07-16T14:00:00_baseline": So,
+	"2026-07-16T15:00:00_codes_expires_at_ts": Ao,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": Ho,
+	"2026-08-05T12:00:00_user_blocked": Go,
+	"2026-08-09T12:00:00_prompt_settings_last_used": Xo,
+	"2026-08-10T12:00:00_action_executions_created_at_index": ts,
+	"2026-08-11T12:00:00_page_hooks": as
 };
 //#endregion
 //#region migrate/migrate.ts
-async function Yo(e, t = !1) {
-	So(t), t && console.log("migrating...");
-	let { error: n, results: r } = await new he({
+async function ds(e, t = !1) {
+	Oo(t), t && console.log("migrating...");
+	let { error: n, results: r } = await new ve({
 		db: e,
-		provider: new ho(Jo)
+		provider: new xo(us)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function Xo(e, t = !1) {
-	So(t), t && console.log("migrating...");
-	let { error: n, results: r } = await new he({
+async function fs(e, t = !1) {
+	Oo(t), t && console.log("migrating...");
+	let { error: n, results: r } = await new ve({
 		db: e,
-		provider: new ho(Jo)
+		provider: new xo(us)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -6323,64 +6426,64 @@ async function Xo(e, t = !1) {
 }
 //#endregion
 //#region src/index.ts
-function Zo(e, t = { useTransactions: !0 }) {
+function ps(e, t = { useTransactions: !0 }) {
 	let n = {
-		actions: Fe(e),
-		actionExecutions: ze(e),
-		actionVersions: Ve(e),
-		branding: Xn(e),
-		clients: fn(e),
-		clientConnections: vn(e),
-		clientGrants: Tn(e),
-		clientRegistrationTokens: In(e),
-		codes: Xt(e),
-		connections: rn(e),
-		emailProviders: Ir(e),
-		emailTemplates: Ur(e),
-		customDomains: qn(e),
-		flows: mt(e),
-		forms: oi(e),
-		hookCode: dr(e),
-		hooks: or(e),
-		invites: aa(e),
-		keys: Bn(e),
-		loginSessions: Dr(e),
-		logs: At(e),
-		logStreams: Ba(e),
-		migrationSources: Va(e),
-		authenticationMethods: ka(e),
-		passwords: Vt(e),
-		promptSettings: jr(e),
-		proxyRoutes: K(e),
-		scimConfigurations: Ya(e),
-		scimTokens: Xa(e),
-		scimExternalIds: Qa(e),
-		refreshTokens: Qr(e),
-		resourceServers: fi(e),
-		rolePermissions: Si(e),
-		grants: Oi(e),
-		userPermissions: Ni(e),
-		userRoles: zi(e),
-		roles: vi(e),
-		sessions: It(e),
-		sessionCleanup: ei(e),
-		tenants: St(e),
-		tenantOperations: $a(e),
-		tenantOperationEvents: fo(e),
-		rollouts: mo(e),
-		themes: gr(e),
-		universalLoginTemplates: er(e),
-		customText: Sa(e),
-		users: ot(e),
-		userActivity: rt(e),
-		organizations: Gi(e),
-		organizationConnections: Ki(e),
-		userOrganizations: $i(e),
-		stats: ua(e),
-		analytics: xa(e),
-		outbox: za(e),
+		actions: Le(e),
+		actionExecutions: Ue(e),
+		actionVersions: Ke(e),
+		branding: tr(e),
+		clients: _n(e),
+		clientConnections: Cn(e),
+		clientGrants: An(e),
+		clientRegistrationTokens: Vn(e),
+		codes: tn(e),
+		connections: ln(e),
+		emailProviders: Vr(e),
+		emailTemplates: Jr(e),
+		customDomains: Qn(e),
+		flows: yt(e),
+		forms: di(e),
+		hookCode: gr(e),
+		hooks: dr(e),
+		invites: ua(e),
+		keys: Gn(e),
+		loginSessions: Mr(e),
+		logs: Ft(e),
+		logStreams: Ga(e),
+		migrationSources: Ka(e),
+		authenticationMethods: Pa(e),
+		passwords: Kt(e),
+		promptSettings: Ir(e),
+		proxyRoutes: J(e),
+		scimConfigurations: eo(e),
+		scimTokens: to(e),
+		scimExternalIds: ro(e),
+		refreshTokens: ri(e),
+		resourceServers: _i(e),
+		rolePermissions: Di(e),
+		grants: Ni(e),
+		userPermissions: Ri(e),
+		userRoles: Wi(e),
+		roles: Ci(e),
+		sessions: Vt(e),
+		sessionCleanup: ai(e),
+		tenants: Dt(e),
+		tenantOperations: io(e),
+		tenantOperationEvents: _o(e),
+		rollouts: bo(e),
+		themes: xr(e),
+		universalLoginTemplates: ar(e),
+		customText: Da(e),
+		users: dt(e),
+		userActivity: ct(e),
+		organizations: Xi(e),
+		organizationConnections: Zi(e),
+		userOrganizations: ia(e),
+		stats: ha(e),
+		analytics: Ea(e),
+		outbox: Wa(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(Zo(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(ps(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -6389,4 +6492,4 @@ function Zo(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { Ga as createProxyDataAdapter, K as createProxyRoutesAdapter, Zo as default, Xo as migrateDown, Yo as migrateToLatest };
+export { Xa as createProxyDataAdapter, J as createProxyRoutesAdapter, ps as default, fs as migrateDown, ds as migrateToLatest };