@authhero/kysely-adapter 12.11.1 → 12.12.0

package/dist/kysely-adapter.mjs

@@ -5237,8 +5237,16 @@ function po(e) {
 	};
 }
 //#endregion
-//#region src/outbox/cleanup.ts
+//#region src/outbox/discard.ts
 function mo(e) {
+	return async (t, n) => {
+		let r = await e.deleteFrom("outbox_events").where("id", "=", t).where("tenant_id", "=", n).where("dead_lettered_at", "is not", null).executeTakeFirst();
+		return Number(r.numDeletedRows) > 0;
+	};
+}
+//#endregion
+//#region src/outbox/cleanup.ts
+function ho(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5246,7 +5254,7 @@ function mo(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function ho(e) {
+function go(e) {
 	return {
 		create: st(e),
 		getByIds: ao(e),
@@ -5257,12 +5265,13 @@ function ho(e) {
 		deadLetter: uo(e),
 		listFailed: fo(e),
 		replay: po(e),
-		cleanup: mo(e)
+		discard: mo(e),
+		cleanup: ho(e)
 	};
 }
 //#endregion
 //#region src/log-streams/index.ts
-function go(e) {
+function _o(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5275,7 +5284,7 @@ function go(e) {
 		updated_at: e.updated_at
 	};
 }
-function _o(e) {
+function vo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5290,14 +5299,14 @@ function _o(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("log_streams").values(s).execute(), go(s);
+			return await e.insertInto("log_streams").values(s).execute(), _o(s);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("log_streams").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? go(r) : null;
+			return r ? _o(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(go);
+			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(_o);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5310,7 +5319,7 @@ function _o(e) {
 }
 //#endregion
 //#region src/migrationSources/index.ts
-function vo(e) {
+function yo(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5322,7 +5331,7 @@ function vo(e) {
 		updated_at: e.updated_at
 	};
 }
-function yo(e) {
+function bo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5336,14 +5345,14 @@ function yo(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("migration_sources").values(l).execute(), vo(l);
+			return await e.insertInto("migration_sources").values(l).execute(), yo(l);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("migration_sources").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? vo(r) : null;
+			return r ? yo(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(vo);
+			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(yo);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5356,19 +5365,19 @@ function yo(e) {
 }
 //#endregion
 //#region src/proxyRoutes/serialize.ts
-function bo(e) {
+function xo(e) {
 	return {
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: xo(e.match),
-		handlers: So(e.handlers),
+		match: So(e.match),
+		handlers: Co(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function xo(e) {
+function So(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = ue.safeParse(t);
@@ -5376,7 +5385,7 @@ function xo(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function So(e) {
+function Co(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5393,7 +5402,7 @@ function So(e) {
 }
 //#endregion
 //#region src/proxyRoutes/adapter.ts
-function Co(e) {
+function wo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5419,14 +5428,14 @@ function Co(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("proxy_routes").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? bo(r) : null;
+			return r ? xo(r) : null;
 		},
 		async list(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 50, a = e.selectFrom("proxy_routes").where("tenant_id", "=", t);
 			n.custom_domain_id && (a = a.where("custom_domain_id", "=", n.custom_domain_id));
 			let o = await a.selectAll().orderBy("priority", "asc").orderBy("created_at", "asc").offset(r * i).limit(i).execute();
 			return {
-				proxy_routes: o.map(bo),
+				proxy_routes: o.map(xo),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5446,7 +5455,7 @@ function Co(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function wo(e, t) {
+async function To(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5458,20 +5467,20 @@ async function wo(e, t) {
 		tenant_id: a.tenant_id,
 		custom_domain_id: a.custom_domain_id,
 		domain: a.domain,
-		routes: o.map(bo)
+		routes: o.map(xo)
 	};
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function To(e) {
+function Eo(e) {
 	return {
-		proxyRoutes: Co(e),
-		resolveHost: (t) => wo(e, t)
+		proxyRoutes: wo(e),
+		resolveHost: (t) => To(e, t)
 	};
 }
 //#endregion
 //#region src/tokenExchangeProfiles/serialize.ts
-function Eo(e) {
+function Do(e) {
 	let t = {
 		id: e.id,
 		name: e.name,
@@ -5481,10 +5490,10 @@ function Eo(e) {
 		updated_at: e.updated_at
 	};
 	e.action_id && (t.action_id = e.action_id);
-	let n = Do(e.jwt_verification);
+	let n = Oo(e.jwt_verification);
 	return n && (t.jwt_verification = n), t;
 }
-function Do(e) {
+function Oo(e) {
 	if (e) try {
 		let t = Te.safeParse(JSON.parse(e));
 		return t.success ? t.data : void 0;
@@ -5494,12 +5503,12 @@ function Do(e) {
 }
 //#endregion
 //#region src/tokenExchangeProfiles/adapter.ts
-var Oo = e("0123456789abcdefghijklmnopqrstuvwxyz", 17);
-function ko(e) {
+var ko = e("0123456789abcdefghijklmnopqrstuvwxyz", 17);
+function Ao(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
-				id: i?.id ?? `tep_${Oo()}`,
+				id: i?.id ?? `tep_${ko()}`,
 				tenant_id: t,
 				name: n.name,
 				subject_token_type: n.subject_token_type,
@@ -5509,14 +5518,14 @@ function ko(e) {
 				created_at: i?.created_at ?? a,
 				updated_at: i?.updated_at ?? a
 			};
-			return await e.insertInto("token_exchange_profiles").values(o).execute(), Eo(o);
+			return await e.insertInto("token_exchange_profiles").values(o).execute(), Do(o);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("token_exchange_profiles").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? Eo(r) : null;
+			return r ? Do(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("token_exchange_profiles").where("tenant_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").execute()).map(Eo);
+			return (await e.selectFrom("token_exchange_profiles").where("tenant_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").execute()).map(Do);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5532,7 +5541,7 @@ function ko(e) {
 }
 //#endregion
 //#region src/scim/adapter.ts
-function Ao(e) {
+function jo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5547,7 +5556,7 @@ function Ao(e) {
 		return [];
 	}
 }
-function jo(e) {
+function Mo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5556,16 +5565,16 @@ function jo(e) {
 		return [];
 	}
 }
-function Mo(e) {
+function No(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: Ao(e.mapping),
+		mapping: jo(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function No(e) {
+function Po(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5586,7 +5595,7 @@ function No(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
-			return r ? Mo(r) : null;
+			return r ? No(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5600,18 +5609,18 @@ function No(e) {
 		}
 	};
 }
-function Po(e) {
+function Fo(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: jo(e.scopes),
+		scopes: Mo(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function Fo(e) {
+function Io(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5635,14 +5644,14 @@ function Fo(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
-			return r ? Po(r) : null;
+			return r ? Fo(r) : null;
 		},
 		async getByHash(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-			return r ? Po(r) : null;
+			return r ? Fo(r) : null;
 		},
 		async listByConnection(t, n) {
-			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(Po);
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(Fo);
 		},
 		async markUsed(t, n, r) {
 			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
@@ -5654,7 +5663,7 @@ function Fo(e) {
 		}
 	};
 }
-function Io(e) {
+function Lo(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -5662,7 +5671,7 @@ function Io(e) {
 		created_at: e.created_at
 	};
 }
-function Lo(e) {
+function Ro(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5681,11 +5690,11 @@ function Lo(e) {
 		},
 		async getByExternalId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
-			return i ? Io(i) : null;
+			return i ? Lo(i) : null;
 		},
 		async getByUserId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
-			return i ? Io(i) : null;
+			return i ? Lo(i) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
@@ -5695,7 +5704,7 @@ function Lo(e) {
 }
 //#endregion
 //#region src/tenantOperations/index.ts
-function Ro(e) {
+function zo(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5717,8 +5726,8 @@ function G(e) {
 		target_database_version: e.target_database_version,
 		error: e.error,
 		initiated_by: e.initiated_by,
-		input: Ro(e.input),
-		result: Ro(e.result),
+		input: zo(e.input),
+		result: zo(e.result),
 		claimed_by: e.claimed_by,
 		claim_expires_at: e.claim_expires_at,
 		created_at: e.created_at,
@@ -5726,7 +5735,7 @@ function G(e) {
 		finished_at: e.finished_at
 	});
 }
-function zo(e) {
+function Bo(e) {
 	return {
 		async create(n) {
 			let r = xe.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -5809,27 +5818,27 @@ function zo(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var Bo = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Vo = 32, Ho = 10, Uo = 4, Wo = 10;
-function Go(e, t) {
+var Vo = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Ho = 32, Uo = 10, Wo = 4, Go = 10;
+function Ko(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = Bo.charAt(e % Vo) + n, e = Math.floor(e / Vo);
+	for (let r = t; r > 0; r--) n = Vo.charAt(e % Ho) + n, e = Math.floor(e / Ho);
 	return n;
 }
-function Ko() {
-	let e = new Uint8Array(Wo);
+function qo() {
+	let e = new Uint8Array(Go);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < Wo; n++) t += Bo.charAt(e[n] % Vo);
+	for (let n = 0; n < Go; n++) t += Vo.charAt(e[n] % Ho);
 	return t;
 }
-var qo = 0, Jo = 0;
-function Yo() {
+var Jo = 0, Yo = 0;
+function Xo() {
 	let e = Date.now();
-	return e === qo ? Jo++ : (qo = e, Jo = 0), Go(e, Ho) + Go(Jo, Uo) + Ko();
+	return e === Jo ? Yo++ : (Jo = e, Yo = 0), Ko(e, Uo) + Ko(Yo, Wo) + qo();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function Xo(e) {
+function Zo(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5837,22 +5846,22 @@ function Xo(e) {
 	} catch {}
 	return null;
 }
-function Zo(e) {
+function Qo(e) {
 	return be.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: Xo(e.detail),
+		detail: Zo(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function Qo(e) {
+function $o(e) {
 	return {
 		async create(t) {
 			let n = ye.parse(t), r = {
-				id: `evt_${Yo()}`,
+				id: `evt_${Xo()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5860,12 +5869,12 @@ function Qo(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), Zo(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), Qo(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(Zo),
+				events: a.map(Qo),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -5875,16 +5884,16 @@ function Qo(e) {
 }
 //#endregion
 //#region src/tenantOperationRows/index.ts
-var $o = 50;
-function es(e) {
+var es = 50;
+function ts(e) {
 	let t = JSON.parse(e);
 	return t && typeof t == "object" && !Array.isArray(t) ? Object.fromEntries(Object.entries(t)) : {};
 }
-function ts(e) {
+function ns(e) {
 	return Ce.parse({
 		operation_id: e.operation_id,
 		seq: e.seq,
-		payload: es(e.payload),
+		payload: ts(e.payload),
 		status: e.status,
 		error_code: e.error_code,
 		error_message: e.error_message,
@@ -5894,7 +5903,7 @@ function ts(e) {
 		updated_at: e.updated_at
 	});
 }
-function ns(e) {
+function rs(e) {
 	return {
 		async createMany(t) {
 			if (t.length === 0) return 0;
@@ -5913,11 +5922,11 @@ function ns(e) {
 					updated_at: n
 				};
 			});
-			for (let t = 0; t < r.length; t += $o) await e.insertInto("tenant_operation_rows").values(r.slice(t, t + $o)).execute();
+			for (let t = 0; t < r.length; t += es) await e.insertInto("tenant_operation_rows").values(r.slice(t, t + es)).execute();
 			return r.length;
 		},
 		async claimPending(t, n) {
-			return (await e.selectFrom("tenant_operation_rows").where("operation_id", "=", t).where("status", "=", "pending").selectAll().orderBy("seq", "asc").limit(n).execute()).map(ts);
+			return (await e.selectFrom("tenant_operation_rows").where("operation_id", "=", t).where("status", "=", "pending").selectAll().orderBy("seq", "asc").limit(n).execute()).map(ns);
 		},
 		async recordOutcomes(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = 0;
@@ -5966,7 +5975,7 @@ function ns(e) {
 			}
 			let o = await a.selectAll().orderBy("seq", "asc").offset(r * i).limit(i).execute();
 			return {
-				rows: o.map(ts),
+				rows: o.map(ns),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5980,7 +5989,7 @@ function ns(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function rs(e) {
+function is(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5988,7 +5997,7 @@ function rs(e) {
 		return null;
 	}
 }
-function is(e) {
+function as(e) {
 	return he.parse({
 		id: e.id,
 		kind: e.kind,
@@ -5996,15 +6005,15 @@ function is(e) {
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: rs(e.canary_tenant_ids),
-		filter: rs(e.filter),
+		canary_tenant_ids: is(e.canary_tenant_ids),
+		filter: is(e.filter),
 		initiated_by: e.initiated_by,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function as(e) {
+function os(e) {
 	return {
 		async create(n) {
 			let r = me.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -6021,16 +6030,16 @@ function as(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("rollouts").values(a).execute(), is(a);
+			return await e.insertInto("rollouts").values(a).execute(), as(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("rollouts").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? is(n) : null;
+			return n ? as(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = await e.selectFrom("rollouts").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: i.map(is),
+				rollouts: i.map(as),
 				start: n * r,
 				limit: r,
 				length: i.length
@@ -6050,7 +6059,7 @@ function as(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var os = class {
+var ss = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -6058,10 +6067,10 @@ var os = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, ss = /* @__PURE__ */ w({
-	down: () => ds,
-	up: () => us
-}), cs = [
+}, cs = /* @__PURE__ */ w({
+	down: () => fs,
+	up: () => ds
+}), ls = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -6327,7 +6336,7 @@ var os = class {
 		onDelete: "cascade"
 	}
 ];
-async function ls(e) {
+async function us(e) {
 	try {
 		return await p`select sqlite_version()`.execute(e), !0;
 	} catch {
@@ -6336,14 +6345,14 @@ async function ls(e) {
 }
 function K(e, t) {
 	let n = e;
-	for (let e of cs) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of ls) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function us(e) {
-	let t = await ls(e);
+async function ds(e) {
+	let t = await us(e);
 	await e.schema.createTable("tenants").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("audience", p`varchar(255)`).addColumn("sender_email", p`varchar(255)`).addColumn("sender_name", p`varchar(255)`).addColumn("created_at", p`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(255)`, (e) => e.notNull()).addColumn("support_url", p`varchar(255)`).addColumn("idle_session_lifetime", p`int`).addColumn("session_lifetime", p`int`).addColumn("session_cookie", p`text`).addColumn("allowed_logout_urls", p`text`).addColumn("ephemeral_session_lifetime", p`int`).addColumn("idle_ephemeral_session_lifetime", p`int`).addColumn("default_redirection_uri", p`text`).addColumn("enabled_locales", p`text`).addColumn("default_directory", p`varchar(255)`).addColumn("error_page", p`text`).addColumn("flags", p`text`).addColumn("friendly_name", p`varchar(255)`).addColumn("picture_url", p`text`).addColumn("support_email", p`varchar(255)`).addColumn("sandbox_version", p`varchar(50)`).addColumn("sandbox_versions_available", p`text`).addColumn("legacy_sandbox_version", p`varchar(50)`).addColumn("change_password", p`text`).addColumn("guardian_mfa_page", p`text`).addColumn("device_flow", p`text`).addColumn("default_token_quota", p`text`).addColumn("default_audience", p`varchar(255)`).addColumn("default_organization", p`varchar(255)`).addColumn("sessions", p`text`).addColumn("oidc_logout", p`text`).addColumn("allow_organization_name_in_authentication_api", p`int`).addColumn("customize_mfa_in_postlogin_action", p`int`).addColumn("acr_values_supported", p`text`).addColumn("mtls", p`text`).addColumn("pushed_authorization_requests_supported", p`int`).addColumn("authorization_response_iss_parameter_supported", p`int`).addColumn("mfa", p`text`).addColumn("attack_protection", p`text`).addColumn("default_client_id", p`varchar(255)`).addColumn("deployment_type", p`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", p`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", p`varchar(2048)`).addColumn("provisioning_state_changed_at", p`varchar(35)`).addColumn("bundle_configuration", p`varchar(64)`).addColumn("worker_version", p`varchar(64)`).addColumn("worker_script_name", p`varchar(255)`).addColumn("storage_kind", p`varchar(32)`).addColumn("d1_database_id", p`varchar(64)`).addColumn("database_version", p`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", p`varchar(64)`, (e) => e.notNull()).addColumn("status", p`varchar(32)`, (e) => e.notNull()).addColumn("results", p`text`, (e) => e.notNull()).addColumn("logs", p`text`).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("action_id", p`varchar(255)`, (e) => e.notNull()).addColumn("number", p`int`, (e) => e.notNull()).addColumn("code", p`text`, (e) => e.notNull()).addColumn("runtime", p`varchar(50)`).addColumn("secrets", p`text`).addColumn("dependencies", p`text`).addColumn("supported_triggers", p`text`).addColumn("deployed", p`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("name", p`varchar(255)`, (e) => e.notNull()).addColumn("code", p`text`, (e) => e.notNull()).addColumn("runtime", p`varchar(50)`).addColumn("status", p`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", p`text`).addColumn("dependencies", p`text`).addColumn("supported_triggers", p`text`).addColumn("deployed_at_ts", p`bigint`).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addColumn("is_system", p`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", p`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", p`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("user_id", p`varchar(255)`, (e) => e.notNull()).addColumn("type", p`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", p`varchar(32)`).addColumn("totp_secret", p`varchar(255)`).addColumn("confirmed", p`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addColumn("credential_id", p`varchar(512)`).addColumn("public_key", p`text`).addColumn("sign_count", p`int`).addColumn("credential_backed_up", p`int`).addColumn("transports", p`varchar(512)`).addColumn("friendly_name", p`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
@@ -6530,40 +6539,40 @@ async function us(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of cs) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of ls) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function ds(e) {
+async function fs(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var fs = !1;
+var ps = !1;
 function q(e) {
-	fs = e;
+	ps = e;
 }
 function J(...e) {
-	fs && console.log(...e);
+	ps && console.log(...e);
 }
 function Y(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var ps = /* @__PURE__ */ w({
-	down: () => ws,
-	up: () => xs
-}), ms = 5e4, hs = 500;
-async function gs(e) {
+var ms = /* @__PURE__ */ w({
+	down: () => Ts,
+	up: () => Ss
+}), hs = 5e4, gs = 500;
+async function _s(e) {
 	try {
 		return await p`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function _s(e, t, n) {
+async function vs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
@@ -6574,7 +6583,7 @@ async function _s(e, t, n) {
 		throw e;
 	}
 }
-async function vs(e, t, n, r) {
+async function ys(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6585,21 +6594,21 @@ async function vs(e, t, n, r) {
 		throw e;
 	}
 }
-async function ys(e, t) {
+async function bs(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
 		r = Number(t.numDeletedRows);
 	} else {
-		let t = ms;
-		for (; t >= ms;) {
-			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(ms).executeTakeFirst();
+		let t = hs;
+		for (; t >= hs;) {
+			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(hs).executeTakeFirst();
 			t = Number(i.numDeletedRows), r += t, t > 0 && J(`  Pruned ${r} expired codes row(s)...`);
 		}
 	}
 	return r;
 }
-async function bs(e) {
+async function xs(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -6607,33 +6616,33 @@ async function bs(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(hs).execute();
+		]).where("expires_at_ts", "is", null).limit(gs).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < hs) break;
+		if (t += n.length, n.length < gs) break;
 	}
 	return t;
 }
-async function xs(e) {
-	let t = await gs(e);
+async function Ss(e) {
+	let t = await _s(e);
 	try {
-		let n = await ys(e, t);
+		let n = await bs(e, t);
 		J(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
 		Y(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await _s(e, "codes", "expires_at_ts"), await vs(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await vs(e, "codes", "expires_at_ts"), await ys(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await bs(e);
+		let t = await xs(e);
 		J(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
 		Y(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function Ss(e, t, n) {
+async function Cs(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -6641,7 +6650,7 @@ async function Ss(e, t, n) {
 		throw e;
 	}
 }
-async function Cs(e, t, n) {
+async function ws(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6649,16 +6658,16 @@ async function Cs(e, t, n) {
 		throw e;
 	}
 }
-async function ws(e) {
-	await Ss(e, "idx_codes_expires_at_ts", "codes"), await Cs(e, "codes", "expires_at_ts");
+async function Ts(e) {
+	await Cs(e, "idx_codes_expires_at_ts", "codes"), await ws(e, "codes", "expires_at_ts");
 }
 //#endregion
 //#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
-var Ts = /* @__PURE__ */ w({
-	down: () => Ds,
-	up: () => Es
+var Es = /* @__PURE__ */ w({
+	down: () => Os,
+	up: () => Ds
 });
-async function Es(e) {
+async function Ds(e) {
 	await e.schema.createTable("scim_configurations").addColumn("connection_id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", p`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", p`text`, (e) => e.notNull()).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", p`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", p`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", p`varchar(128)`, (e) => e.notNull()).addColumn("scopes", p`text`, (e) => e.notNull()).addColumn("valid_until", p`varchar(35)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", p`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", p`varchar(255)`, (e) => e.notNull()).addColumn("external_id", p`varchar(255)`, (e) => e.notNull()).addColumn("user_id", p`varchar(255)`, (e) => e.notNull()).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
 		"tenant_id",
 		"connection_id",
@@ -6669,16 +6678,16 @@ async function Es(e) {
 		"external_id"
 	]).unique().execute();
 }
-async function Ds(e) {
+async function Os(e) {
 	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
-var Os = /* @__PURE__ */ w({
-	down: () => Ms,
-	up: () => As
+var ks = /* @__PURE__ */ w({
+	down: () => Ns,
+	up: () => js
 });
-async function ks(e, t, n) {
+async function As(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, p`tinyint(1)`).execute();
 	} catch (e) {
@@ -6686,10 +6695,10 @@ async function ks(e, t, n) {
 		throw e;
 	}
 }
-async function As(e) {
-	await ks(e, "users", "blocked");
+async function js(e) {
+	await As(e, "users", "blocked");
 }
-async function js(e, t, n) {
+async function Ms(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6697,16 +6706,16 @@ async function js(e, t, n) {
 		throw e;
 	}
 }
-async function Ms(e) {
-	await js(e, "users", "blocked");
+async function Ns(e) {
+	await Ms(e, "users", "blocked");
 }
 //#endregion
 //#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
-var Ns = /* @__PURE__ */ w({
-	down: () => Ls,
-	up: () => Fs
+var Ps = /* @__PURE__ */ w({
+	down: () => Rs,
+	up: () => Is
 });
-async function Ps(e, t, n) {
+async function Fs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, p`tinyint(1)`).execute();
 	} catch (e) {
@@ -6714,10 +6723,10 @@ async function Ps(e, t, n) {
 		throw e;
 	}
 }
-async function Fs(e) {
-	await Ps(e, "prompt_settings", "show_last_used_connection");
+async function Is(e) {
+	await Fs(e, "prompt_settings", "show_last_used_connection");
 }
-async function Is(e, t, n) {
+async function Ls(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6725,16 +6734,16 @@ async function Is(e, t, n) {
 		throw e;
 	}
 }
-async function Ls(e) {
-	await Is(e, "prompt_settings", "show_last_used_connection");
+async function Rs(e) {
+	await Ls(e, "prompt_settings", "show_last_used_connection");
 }
 //#endregion
 //#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
-var Rs = /* @__PURE__ */ w({
-	down: () => Vs,
-	up: () => Bs
+var zs = /* @__PURE__ */ w({
+	down: () => Hs,
+	up: () => Vs
 });
-async function zs(e, t, n, r) {
+async function Bs(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6745,10 +6754,10 @@ async function zs(e, t, n, r) {
 		throw e;
 	}
 }
-async function Bs(e) {
-	await zs(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
-}
 async function Vs(e) {
+	await Bs(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+}
+async function Hs(e) {
 	try {
 		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
 	} catch (e) {
@@ -6758,11 +6767,11 @@ async function Vs(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-08-11T12:00:00_page_hooks.ts
-var Hs = /* @__PURE__ */ w({
-	down: () => Ks,
-	up: () => Ws
+var Us = /* @__PURE__ */ w({
+	down: () => qs,
+	up: () => Gs
 });
-async function Us(e, t, n, r) {
+async function Ws(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6770,10 +6779,10 @@ async function Us(e, t, n, r) {
 		throw e;
 	}
 }
-async function Ws(e) {
-	await Us(e, "hooks", "page_id", p`varchar(64)`), await Us(e, "hooks", "permission_required", p`varchar(255)`);
+async function Gs(e) {
+	await Ws(e, "hooks", "page_id", p`varchar(64)`), await Ws(e, "hooks", "permission_required", p`varchar(255)`);
 }
-async function Gs(e, t, n) {
+async function Ks(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6781,22 +6790,22 @@ async function Gs(e, t, n) {
 		throw e;
 	}
 }
-async function Ks(e) {
-	await Gs(e, "hooks", "permission_required"), await Gs(e, "hooks", "page_id");
+async function qs(e) {
+	await Ks(e, "hooks", "permission_required"), await Ks(e, "hooks", "page_id");
 }
 //#endregion
 //#region migrate/migrations/2026-08-20T12:00:00_refresh_token_session_id.ts
-var qs = /* @__PURE__ */ w({
-	down: () => $s,
-	up: () => Zs
-}), Js = [
+var Js = /* @__PURE__ */ w({
+	down: () => ec,
+	up: () => Qs
+}), Ys = [
 	["session_id", p`varchar(26)`],
 	["organization", p`varchar(191)`],
 	["auth_connection", p`varchar(255)`],
 	["auth_strategy_strategy", p`varchar(64)`],
 	["auth_strategy_strategy_type", p`varchar(64)`]
 ];
-async function Ys(e, t, n, r) {
+async function Xs(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6804,7 +6813,7 @@ async function Ys(e, t, n, r) {
 		throw e;
 	}
 }
-async function Xs(e) {
+async function Zs(e) {
 	try {
 		await e.schema.createIndex("idx_refresh_tokens_session_id").on("refresh_tokens").columns(["tenant_id", "session_id"]).execute();
 	} catch (e) {
@@ -6812,11 +6821,11 @@ async function Xs(e) {
 		throw e;
 	}
 }
-async function Zs(e) {
-	for (let [t, n] of Js) await Ys(e, "refresh_tokens", t, n);
-	await Xs(e);
+async function Qs(e) {
+	for (let [t, n] of Ys) await Xs(e, "refresh_tokens", t, n);
+	await Zs(e);
 }
-async function Qs(e, t, n) {
+async function $s(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6824,23 +6833,23 @@ async function Qs(e, t, n) {
 		throw e;
 	}
 }
-async function $s(e) {
+async function ec(e) {
 	try {
 		await e.schema.dropIndex("idx_refresh_tokens_session_id").execute();
 	} catch {}
-	for (let [t] of Js) await Qs(e, "refresh_tokens", t);
+	for (let [t] of Ys) await $s(e, "refresh_tokens", t);
 }
 //#endregion
 //#region migrate/migrations/2026-08-21T12:00:00_refresh_token_session_id_backfill.ts
-var ec = /* @__PURE__ */ w({
-	down: () => oc,
-	up: () => ac
-}), tc = 500, nc = 20, rc = 500, ic = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
-async function ac(e) {
+var tc = /* @__PURE__ */ w({
+	down: () => sc,
+	up: () => oc
+}), nc = 500, rc = 20, ic = 500, ac = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
+async function oc(e) {
 	try {
 		let t = await e.selectFrom("refresh_tokens").innerJoin("login_sessions", "login_sessions.id", "refresh_tokens.login_id").whereRef("login_sessions.tenant_id", "=", "refresh_tokens.tenant_id").where("refresh_tokens.session_id", "is", null).where("login_sessions.session_id", "is not", null).select((e) => e.fn.countAll().as("count")).executeTakeFirst(), n = Number(t?.count ?? 0);
-		if (n > rc) {
-			Y(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${rc}. SKIPPING — run the bulk path instead: ${ic}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
+		if (n > ic) {
+			Y(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${ic}. SKIPPING — run the bulk path instead: ${ac}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
 			return;
 		}
 		if (n === 0) {
@@ -6857,10 +6866,10 @@ async function ac(e) {
 				"login_sessions.auth_strategy_strategy as ls_strategy",
 				"login_sessions.auth_strategy_strategy_type as ls_strategy_type",
 				"login_sessions.auth_params as ls_auth_params"
-			]).limit(tc).execute();
+			]).limit(nc).execute();
 			if (t.length === 0) break;
-			for (let n = 0; n < t.length; n += nc) {
-				let r = t.slice(n, n + nc);
+			for (let n = 0; n < t.length; n += rc) {
+				let r = t.slice(n, n + rc);
 				await Promise.all(r.map(async (t) => {
 					let n = null;
 					if (t.ls_auth_params) try {
@@ -6877,19 +6886,19 @@ async function ac(e) {
 					}).where("tenant_id", "=", t.tenant_id).where("id", "=", t.id).execute();
 				}));
 			}
-			if (r += t.length, J(`refresh_tokens backfill: ${r} rows populated so far`), t.length < tc) break;
+			if (r += t.length, J(`refresh_tokens backfill: ${r} rows populated so far`), t.length < nc) break;
 		}
 		J(`refresh_tokens backfill: done, ${r} rows updated`);
 	} catch (e) {
 		throw Y("refresh_tokens backfill failed:", e), e;
 	}
 }
-async function oc() {}
+async function sc() {}
 //#endregion
 //#region migrate/migrations/2026-09-01T12:00:00_tenant_operation_rows.ts
-var sc = /* @__PURE__ */ w({
-	down: () => uc,
-	up: () => lc
+var cc = /* @__PURE__ */ w({
+	down: () => dc,
+	up: () => uc
 });
 async function X(e, t, n, r) {
 	try {
@@ -6899,7 +6908,7 @@ async function X(e, t, n, r) {
 		throw e;
 	}
 }
-async function cc(e, t, n, r) {
+async function lc(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).columns(r).execute();
 	} catch (e) {
@@ -6907,12 +6916,12 @@ async function cc(e, t, n, r) {
 		throw e;
 	}
 }
-async function lc(e) {
-	await X(e, "tenant_operations", "input", p`text`), await X(e, "tenant_operations", "result", p`text`), await X(e, "tenant_operations", "claimed_by", p`varchar(255)`), await X(e, "tenant_operations", "claim_expires_at", p`varchar(35)`), await e.schema.createTable("tenant_operation_rows").ifNotExists().addColumn("operation_id", p`varchar(255)`, (e) => e.notNull()).addColumn("seq", p`int`, (e) => e.notNull()).addColumn("payload", p`text`, (e) => e.notNull()).addColumn("status", p`varchar(32)`, (e) => e.notNull()).addColumn("error_code", p`varchar(64)`).addColumn("error_message", p`text`).addColumn("error_path", p`varchar(255)`).addColumn("entity_id", p`varchar(255)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_rows_pk", ["operation_id", "seq"]).execute(), await cc(e, "tenant_operation_rows_operation_status_seq_idx", "tenant_operation_rows", [
+async function uc(e) {
+	await X(e, "tenant_operations", "input", p`text`), await X(e, "tenant_operations", "result", p`text`), await X(e, "tenant_operations", "claimed_by", p`varchar(255)`), await X(e, "tenant_operations", "claim_expires_at", p`varchar(35)`), await e.schema.createTable("tenant_operation_rows").ifNotExists().addColumn("operation_id", p`varchar(255)`, (e) => e.notNull()).addColumn("seq", p`int`, (e) => e.notNull()).addColumn("payload", p`text`, (e) => e.notNull()).addColumn("status", p`varchar(32)`, (e) => e.notNull()).addColumn("error_code", p`varchar(64)`).addColumn("error_message", p`text`).addColumn("error_path", p`varchar(255)`).addColumn("entity_id", p`varchar(255)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_rows_pk", ["operation_id", "seq"]).execute(), await lc(e, "tenant_operation_rows_operation_status_seq_idx", "tenant_operation_rows", [
 		"operation_id",
 		"status",
 		"seq"
-	]), await cc(e, "tenant_operations_kind_status_created_at_idx", "tenant_operations", [
+	]), await lc(e, "tenant_operations_kind_status_created_at_idx", "tenant_operations", [
 		"kind",
 		"status",
 		"created_at"
@@ -6926,7 +6935,7 @@ async function Z(e, t, n) {
 		throw e;
 	}
 }
-async function uc(e) {
+async function dc(e) {
 	try {
 		await e.schema.dropIndex("tenant_operations_kind_status_created_at_idx").on("tenant_operations").execute();
 	} catch {}
@@ -6934,11 +6943,11 @@ async function uc(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-09-25T12:00:00_token_exchange_profiles.ts
-var dc = /* @__PURE__ */ w({
-	down: () => hc,
-	up: () => mc
+var fc = /* @__PURE__ */ w({
+	down: () => gc,
+	up: () => hc
 });
-async function fc(e, t, n, r) {
+async function pc(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6946,7 +6955,7 @@ async function fc(e, t, n, r) {
 		throw e;
 	}
 }
-async function pc(e, t, n, r) {
+async function mc(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).columns(r).unique().execute();
 	} catch (e) {
@@ -6954,10 +6963,10 @@ async function pc(e, t, n, r) {
 		throw e;
 	}
 }
-async function mc(e) {
-	await e.schema.createTable("token_exchange_profiles").ifNotExists().addColumn("id", p`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("name", p`varchar(255)`, (e) => e.notNull()).addColumn("subject_token_type", p`varchar(255)`, (e) => e.notNull()).addColumn("action_id", p`varchar(255)`).addColumn("type", p`varchar(64)`, (e) => e.notNull()).addColumn("jwt_verification", p`text`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("token_exchange_profiles_pk", ["id"]).execute(), await pc(e, "token_exchange_profiles_tenant_subject_token_type_idx", "token_exchange_profiles", ["tenant_id", "subject_token_type"]), await fc(e, "clients", "token_exchange", p`text`);
-}
 async function hc(e) {
+	await e.schema.createTable("token_exchange_profiles").ifNotExists().addColumn("id", p`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("name", p`varchar(255)`, (e) => e.notNull()).addColumn("subject_token_type", p`varchar(255)`, (e) => e.notNull()).addColumn("action_id", p`varchar(255)`).addColumn("type", p`varchar(64)`, (e) => e.notNull()).addColumn("jwt_verification", p`text`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("token_exchange_profiles_pk", ["id"]).execute(), await mc(e, "token_exchange_profiles_tenant_subject_token_type_idx", "token_exchange_profiles", ["tenant_id", "subject_token_type"]), await pc(e, "clients", "token_exchange", p`text`);
+}
+async function gc(e) {
 	await e.schema.dropTable("token_exchange_profiles").ifExists().execute();
 	try {
 		await e.schema.alterTable("clients").dropColumn("token_exchange").execute();
@@ -6969,35 +6978,35 @@ async function hc(e) {
 //#endregion
 //#region migrate/migrations/index.ts
 var Q = {
-	"2026-07-16T14:00:00_baseline": ss,
-	"2026-07-16T15:00:00_codes_expires_at_ts": ps,
-	"2026-08-04T12:00:00_scim_inbound_provisioning": Ts,
-	"2026-08-05T12:00:00_user_blocked": Os,
-	"2026-08-09T12:00:00_prompt_settings_last_used": Ns,
-	"2026-08-10T12:00:00_action_executions_created_at_index": Rs,
-	"2026-08-11T12:00:00_page_hooks": Hs,
-	"2026-08-20T12:00:00_refresh_token_session_id": qs,
-	"2026-08-21T12:00:00_refresh_token_session_id_backfill": ec,
-	"2026-09-01T12:00:00_tenant_operation_rows": sc,
-	"2026-09-25T12:00:00_token_exchange_profiles": dc
+	"2026-07-16T14:00:00_baseline": cs,
+	"2026-07-16T15:00:00_codes_expires_at_ts": ms,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": Es,
+	"2026-08-05T12:00:00_user_blocked": ks,
+	"2026-08-09T12:00:00_prompt_settings_last_used": Ps,
+	"2026-08-10T12:00:00_action_executions_created_at_index": zs,
+	"2026-08-11T12:00:00_page_hooks": Us,
+	"2026-08-20T12:00:00_refresh_token_session_id": Js,
+	"2026-08-21T12:00:00_refresh_token_session_id_backfill": tc,
+	"2026-09-01T12:00:00_tenant_operation_rows": cc,
+	"2026-09-25T12:00:00_token_exchange_profiles": fc
 };
 //#endregion
 //#region migrate/migrate.ts
-async function gc(e, t = !1) {
+async function _c(e, t = !1) {
 	q(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new ke({
 		db: e,
-		provider: new os(Q)
+		provider: new ss(Q)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function _c(e, t = !1) {
+async function vc(e, t = !1) {
 	q(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new ke({
 		db: e,
-		provider: new os(Q)
+		provider: new ss(Q)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -7005,22 +7014,22 @@ async function _c(e, t = !1) {
 }
 //#endregion
 //#region migrate/plan.ts
-var vc = 5e3, yc = class extends Error {};
-function bc(e) {
+var yc = 5e3, bc = class extends Error {};
+function xc(e) {
 	if (e.query.kind === "SelectQueryNode") return !0;
 	if (e.query.kind !== "RawNode") return !1;
 	let t = e.sql.trimStart();
 	return /^(select|show|explain|describe|desc)\b/i.test(t) ? !0 : /^pragma\b/i.test(t) && !t.includes("=");
 }
-var xc = class {
+var Sc = class {
 	inner;
 	captured;
 	constructor(e, t) {
 		this.inner = e, this.captured = t;
 	}
 	async executeQuery(e) {
-		if (bc(e)) return this.inner.executeQuery(e);
-		if (this.captured.length >= vc) throw new yc(`stopped after ${vc} statements`);
+		if (xc(e)) return this.inner.executeQuery(e);
+		if (this.captured.length >= yc) throw new bc(`stopped after ${yc} statements`);
 		return this.captured.push({
 			sql: e.sql,
 			parameters: e.parameters
@@ -7036,7 +7045,7 @@ var xc = class {
 function $() {
 	throw Error("not available in a migration dry run");
 }
-var Sc = {
+var Cc = {
 	init: async () => {},
 	acquireConnection: $,
 	beginTransaction: $,
@@ -7045,25 +7054,25 @@ var Sc = {
 	releaseConnection: $,
 	destroy: async () => {}
 };
-function Cc(e, t) {
-	let n = e.getExecutor(), r = n.withConnectionProvider({ provideConnection: (e) => n.provideConnection((n) => e(new xc(n, t))) }), i = {
+function wc(e, t) {
+	let n = e.getExecutor(), r = n.withConnectionProvider({ provideConnection: (e) => n.provideConnection((n) => e(new Sc(n, t))) }), i = {
 		createAdapter: () => n.adapter,
-		createDriver: () => Sc,
+		createDriver: () => Cc,
 		createQueryCompiler: () => $(),
 		createIntrospector: () => $()
 	};
 	return new f({
 		config: { dialect: i },
 		dialect: i,
-		driver: Sc,
+		driver: Cc,
 		executor: r
 	});
 }
-async function wc(e) {
+async function Tc(e) {
 	q(!1);
 	let t = await new ke({
 		db: e,
-		provider: new os(Q)
+		provider: new ss(Q)
 	}).getMigrations(), n = t.filter((e) => e.executedAt).map((e) => e.name), r = t.filter((e) => !e.executedAt), i = n[n.length - 1], a = i ? r.find((e) => e.name < i) : void 0;
 	if (a) throw Error(`pending migration "${a.name}" sorts before already-executed "${i}"; migrateToLatest would refuse to run`);
 	let o = [];
@@ -7073,9 +7082,9 @@ async function wc(e) {
 			statements: n
 		};
 		try {
-			await t.migration.up(Cc(e, n));
+			await t.migration.up(wc(e, n));
 		} catch (e) {
-			r.error = e instanceof Error ? e.message : String(e), e instanceof yc && (r.truncated = !0);
+			r.error = e instanceof Error ? e.message : String(e), e instanceof bc && (r.truncated = !0);
 		}
 		o.push(r);
 	}
@@ -7084,7 +7093,7 @@ async function wc(e) {
 		pending: o
 	};
 }
-function Tc(e) {
+function Ec(e) {
 	if (e.pending.length === 0) return `-- Database is up to date (${e.executed.length} migrations executed).`;
 	let t = [`-- ${e.pending.length} pending migration(s); ${e.executed.length} already executed.`];
 	for (let n of e.pending) {
@@ -7099,7 +7108,7 @@ function Tc(e) {
 }
 //#endregion
 //#region src/index.ts
-function Ec(e, t = { useTransactions: !0 }) {
+function Dc(e, t = { useTransactions: !0 }) {
 	let n = {
 		actions: Xe(e),
 		actionExecutions: rt(e),
@@ -7122,15 +7131,15 @@ function Ec(e, t = { useTransactions: !0 }) {
 		keys: lr(e),
 		loginSessions: Xr(e),
 		logs: Zt(e),
-		logStreams: _o(e),
-		migrationSources: yo(e),
+		logStreams: vo(e),
+		migrationSources: bo(e),
 		authenticationMethods: io(e),
 		passwords: ln(e),
 		promptSettings: ei(e),
-		proxyRoutes: Co(e),
-		scimConfigurations: No(e),
-		scimTokens: Fo(e),
-		scimExternalIds: Lo(e),
+		proxyRoutes: wo(e),
+		scimConfigurations: Po(e),
+		scimTokens: Io(e),
+		scimExternalIds: Ro(e),
 		refreshTokens: Ci(e),
 		resourceServers: Ri(e),
 		rolePermissions: Xi(e),
@@ -7141,11 +7150,11 @@ function Ec(e, t = { useTransactions: !0 }) {
 		sessions: rn(e),
 		sessionCleanup: Ti(e),
 		tenants: Ut(e),
-		tenantOperations: zo(e),
-		tenantOperationEvents: Qo(e),
-		tenantOperationRows: ns(e),
-		tokenExchangeProfiles: ko(e),
-		rollouts: as(e),
+		tenantOperations: Bo(e),
+		tenantOperationEvents: $o(e),
+		tenantOperationRows: rs(e),
+		tokenExchangeProfiles: Ao(e),
+		rollouts: os(e),
 		themes: zr(e),
 		universalLoginTemplates: Cr(e),
 		customText: Za(e),
@@ -7156,9 +7165,9 @@ function Ec(e, t = { useTransactions: !0 }) {
 		userOrganizations: Da(e),
 		stats: Ra(e),
 		analytics: Xa(e),
-		outbox: ho(e),
+		outbox: go(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(Ec(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(Dc(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -7167,4 +7176,4 @@ function Ec(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { To as createProxyDataAdapter, Co as createProxyRoutesAdapter, Ec as default, Tc as formatMigrationPlan, _c as migrateDown, gc as migrateToLatest, wc as planMigrations };
+export { Eo as createProxyDataAdapter, wo as createProxyRoutesAdapter, Dc as default, Ec as formatMigrationPlan, vc as migrateDown, _c as migrateToLatest, Tc as planMigrations };