@authhero/kysely-adapter 12.16.0 → 12.17.0

package/dist/kysely-adapter.mjs

@@ -248,14 +248,14 @@ function k(e, t, n, r, i = [], a = {}) {
 }
 //#endregion
 //#region src/actions/list.ts
-function A(e) {
+function qe(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function qe(e) {
+function Je(e) {
 	let { created_at_ts: t, updated_at_ts: n, deployed_at_ts: i, secrets: a, dependencies: o, supported_triggers: s, is_system: c, inherit: l, scope: u, override: d, enforce: f, tenant_id: p, ...m } = e, h = r({
 		created_at_ts: t,
 		updated_at_ts: n
@@ -267,9 +267,9 @@ function qe(e) {
 		runtime: m.runtime ?? void 0,
 		status: m.status || "built",
 		deployed_at: i ? new Date(Number(i)).toISOString() : void 0,
-		secrets: A(a),
-		dependencies: A(o),
-		supported_triggers: A(s),
+		secrets: qe(a),
+		dependencies: qe(o),
+		supported_triggers: qe(s),
 		is_system: !!c,
 		inherit: !!l,
 		scope: u ?? void 0,
@@ -277,7 +277,7 @@ function qe(e) {
 		enforce: E(f)
 	};
 }
-function Je(e) {
+function Ye(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("actions").where("actions.tenant_id", "=", t);
 		if (s && (c = k(e, c, s, ["name"])), D(n)) {
@@ -285,7 +285,7 @@ function Je(e) {
 				sortColumn: "created_at_ts",
 				sortOrder: "desc",
 				idColumn: "id"
-			}), i = e.map(qe);
+			}), i = e.map(Je);
 			return {
 				actions: i,
 				start: 0,
@@ -294,7 +294,7 @@ function Je(e) {
 				next: r
 			};
 		}
-		let l = (await c.offset(r * i).limit(i).selectAll().execute()).map(qe);
+		let l = (await c.offset(r * i).limit(i).selectAll().execute()).map(Je);
 		if (!a) return {
 			actions: l,
 			start: r * i,
@@ -312,7 +312,7 @@ function Je(e) {
 }
 //#endregion
 //#region src/actions/update.ts
-function Ye(e) {
+function Xe(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -321,11 +321,11 @@ function Ye(e) {
 		return [];
 	}
 }
-function Xe(e) {
+function Ze(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		if (r.name !== void 0 && (i.name = r.name), r.code !== void 0 && (i.code = r.code), r.runtime !== void 0 && (i.runtime = r.runtime), r.secrets !== void 0) {
-			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Ye(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
+			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Xe(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
 				name: e.name,
 				value: o.get(e.name)?.value
 			} : e);
@@ -340,23 +340,23 @@ function Xe(e) {
 }
 //#endregion
 //#region src/actions/remove.ts
-function Ze(e) {
+function Qe(e) {
 	return async (t, n) => (await e.deleteFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/actions/index.ts
-function Qe(e) {
+function $e(e) {
 	return {
 		create: He(e),
 		get: We(e),
-		list: Je(e),
-		update: Xe(e),
-		remove: Ze(e)
+		list: Ye(e),
+		update: Ze(e),
+		remove: Qe(e)
 	};
 }
 //#endregion
 //#region src/actionExecutions/create.ts
-function $e(e) {
+function et(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("action_executions").values({
@@ -382,14 +382,14 @@ function $e(e) {
 }
 //#endregion
 //#region src/actionExecutions/get.ts
-function et(e) {
+function tt(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function tt(e) {
+function nt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("action_executions").where("action_executions.tenant_id", "=", t).where("action_executions.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -397,8 +397,8 @@ function tt(e) {
 			tenant_id: r.tenant_id,
 			trigger_id: r.trigger_id,
 			status: r.status,
-			results: et(r.results) ?? [],
-			logs: et(r.logs),
+			results: tt(r.results) ?? [],
+			logs: tt(r.logs),
 			created_at: new Date(Number(r.created_at_ts)).toISOString(),
 			updated_at: new Date(Number(r.updated_at_ts)).toISOString()
 		} : null;
@@ -406,7 +406,7 @@ function tt(e) {
 }
 //#endregion
 //#region src/helpers/database-type.ts
-async function nt(e) {
+async function rt(e) {
 	try {
 		return await p`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
@@ -415,19 +415,19 @@ async function nt(e) {
 }
 //#endregion
 //#region src/actionExecutions/cleanup.ts
-var j = 5e4;
-function rt(e) {
+var it = 5e4;
+function at(e) {
 	let t;
 	return async (n) => {
 		let r = Date.parse(n);
 		if (Number.isNaN(r)) throw Error(`Invalid olderThan date: ${n}`);
-		if (t ??= await nt(e), t === "sqlite") {
+		if (t ??= await rt(e), t === "sqlite") {
 			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).executeTakeFirst();
 			return Number(t.numDeletedRows);
 		}
-		let i = 0, a = j;
-		for (; a >= j;) {
-			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).limit(j).executeTakeFirst();
+		let i = 0, a = it;
+		for (; a >= it;) {
+			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).limit(it).executeTakeFirst();
 			a = Number(t.numDeletedRows), i += a;
 		}
 		return i;
@@ -435,36 +435,36 @@ function rt(e) {
 }
 //#endregion
 //#region src/actionExecutions/index.ts
-function it(e) {
+function ot(e) {
 	return {
-		create: $e(e),
-		get: tt(e),
-		cleanup: rt(e)
+		create: et(e),
+		get: nt(e),
+		cleanup: at(e)
 	};
 }
 //#endregion
 //#region src/actionVersions/index.ts
-function at(e) {
+function A(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function ot(e) {
+function st(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, dependencies: i, supported_triggers: a, deployed: o, runtime: s, ...c } = e;
 	return {
 		...c,
 		runtime: s ?? void 0,
 		deployed: !!o,
-		secrets: at(r),
-		dependencies: at(i),
-		supported_triggers: at(a),
+		secrets: A(r),
+		dependencies: A(i),
+		supported_triggers: A(a),
 		created_at: new Date(Number(t)).toISOString(),
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function st(e) {
+function ct(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? Le(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
@@ -504,10 +504,10 @@ function st(e) {
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n).where("id", "=", r).selectAll().executeTakeFirst();
-			return i ? ot(i) : null;
+			return i ? st(i) : null;
 		},
 		async list(t, n, r = {}) {
-			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(ot);
+			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(st);
 			if (!s) return {
 				versions: l,
 				start: 0,
@@ -530,7 +530,7 @@ function st(e) {
 }
 //#endregion
 //#region src/outbox/create.ts
-async function M(e, t, n, r) {
+async function j(e, t, n, r) {
 	await e.insertInto("outbox_events").values({
 		id: n,
 		tenant_id: t,
@@ -549,15 +549,15 @@ async function M(e, t, n, r) {
 		error: null
 	}).execute();
 }
-function ct(e) {
+function lt(e) {
 	return async (n, r) => {
 		let i = t();
-		return await M(e, n, i, r), i;
+		return await j(e, n, i, r), i;
 	};
 }
 //#endregion
 //#region src/users/create.ts
-function lt(e) {
+function ut(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, { identities: o, phone_verified: s, password: c, last_login: l, last_ip: u, login_count: d, ...f } = r, p = (/* @__PURE__ */ new Date()).toISOString(), h = {
 			...f,
@@ -592,7 +592,7 @@ function lt(e) {
 				};
 				await e.insertInto("passwords").values(r).execute();
 			}
-			for (let t of i?.outboxEvents ?? []) await M(e, n, t.id, t);
+			for (let t of i?.outboxEvents ?? []) await j(e, n, t.id, t);
 		};
 		try {
 			e.isTransaction ? await g(e) : await e.transaction().execute(g);
@@ -617,16 +617,16 @@ function lt(e) {
 }
 //#endregion
 //#region src/users/createMany.ts
-var N = 500;
-function ut(e) {
+var M = 500;
+function dt(e) {
 	let t = e;
 	return t.identities !== void 0 || t.last_login !== void 0 || t.last_ip !== void 0 || t.login_count !== void 0;
 }
-function dt(e) {
+function ft(e) {
 	return async (n, r, i) => {
 		if (r.length === 0) return [];
 		if (i?.outboxEvents?.length) throw new m(400, { message: "createMany does not persist outbox events; use create for those users" });
-		if (r.find(ut)) throw new m(400, { message: "createMany does not write identities or activity counters; use create for those users" });
+		if (r.find(dt)) throw new m(400, { message: "createMany does not write identities or activity counters; use create for those users" });
 		let a = (/* @__PURE__ */ new Date()).toISOString(), o = r.map((e) => {
 			let { identities: r, phone_verified: i, password: o, last_login: s, last_ip: c, login_count: l, ...u } = e, d = {
 				...u,
@@ -657,8 +657,8 @@ function dt(e) {
 				original: e
 			};
 		}), s = o.map((e) => e.sqlUser), c = o.map((e) => e.passwordRecord).filter((e) => e !== void 0), l = async (e) => {
-			for (let t = 0; t < s.length; t += N) await e.insertInto("users").values(s.slice(t, t + N)).execute();
-			for (let t = 0; t < c.length; t += N) await e.insertInto("passwords").values(c.slice(t, t + N)).execute();
+			for (let t = 0; t < s.length; t += M) await e.insertInto("users").values(s.slice(t, t + M)).execute();
+			for (let t = 0; t < c.length; t += M) await e.insertInto("passwords").values(c.slice(t, t + M)).execute();
 		};
 		try {
 			e.isTransaction ? await l(e) : await e.transaction().execute(l);
@@ -681,21 +681,21 @@ function dt(e) {
 }
 //#endregion
 //#region src/users/user-to-identity.ts
-var ft = [
+var pt = [
 	"email",
 	"email_verified",
 	"phone_number",
 	"phone_verified",
 	"username"
 ];
-function P(e, t = !1) {
+function N(e, t = !1) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
 		user_id: pe(e.user_id).id,
 		isSocial: !!e.is_social
 	};
-	for (let t of ft) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
+	for (let t of pt) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
 	if (!t) {
 		let t = {};
 		try {
@@ -713,7 +713,7 @@ function P(e, t = !1) {
 }
 //#endregion
 //#region src/users/get.ts
-function pt(e) {
+function mt(e) {
 	return async (t, n) => {
 		let [r, i] = await Promise.all([e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t).where("users.user_id", "=", n).selectAll("users").select([
 			"user_activity.last_login",
@@ -735,13 +735,13 @@ function pt(e) {
 			app_metadata: JSON.parse(r.app_metadata),
 			user_metadata: JSON.parse(r.user_metadata),
 			address: r.address ? JSON.parse(r.address) : void 0,
-			identities: [P(r, !0), ...i.map((e) => P(e))]
+			identities: [N(r, !0), ...i.map((e) => N(e))]
 		});
 	};
 }
 //#endregion
 //#region src/users/list.ts
-var mt = [
+var ht = [
 	"user_id",
 	"email",
 	"email_verified",
@@ -764,20 +764,20 @@ var mt = [
 	"login_count",
 	"created_at",
 	"updated_at"
-], ht = new Set([
+], gt = new Set([
 	"last_login",
 	"last_ip",
 	"login_count"
-]), gt = Object.fromEntries(mt.map((e) => [e, e === "login_count" ? {
+]), _t = Object.fromEntries(ht.map((e) => [e, e === "login_count" ? {
 	column: "user_activity.login_count",
 	defaultValue: 0
-} : ht.has(e) ? `user_activity.${e}` : `users.${e}`])), _t = [
+} : gt.has(e) ? `user_activity.${e}` : `users.${e}`])), vt = [
 	"email",
 	"name",
 	"phone_number",
 	"user_id"
 ];
-async function vt(e, t, n) {
+async function yt(e, t, n) {
 	let r = n.map((e) => e.user_id), i = r.length ? await e.selectFrom("users").selectAll().where("users.tenant_id", "=", t).where("users.linked_to", "in", r).orderBy("created_at", "asc").execute() : [];
 	return n.map((e) => {
 		let t = i.filter((t) => t.linked_to === e.user_id);
@@ -791,16 +791,16 @@ async function vt(e, t, n) {
 			app_metadata: JSON.parse(e.app_metadata),
 			user_metadata: JSON.parse(e.user_metadata),
 			address: e.address ? JSON.parse(e.address) : void 0,
-			identities: [P(e, !0), ...t.map((e) => P(e))]
+			identities: [N(e, !0), ...t.map((e) => N(e))]
 		});
 	});
 }
-function yt(e) {
+function bt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t);
 		if (c) {
-			let t = S(c, mt);
-			t && (l = k(e, l, t, _t, [], gt));
+			let t = S(c, ht);
+			t && (l = k(e, l, t, vt, [], _t));
 		}
 		if (D(n)) {
 			if (s?.sort_by && s.sort_by !== "created_at") throw new m(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
@@ -813,7 +813,7 @@ function yt(e) {
 				sortOrder: r,
 				idColumn: "users.user_id",
 				sortKey: `created_at:${r}`
-			}), c = await vt(e, t, i);
+			}), c = await yt(e, t, i);
 			return {
 				users: c,
 				start: 0,
@@ -823,7 +823,7 @@ function yt(e) {
 			};
 		}
 		if (s && s.sort_by) {
-			let t = gt[s.sort_by];
+			let t = _t[s.sort_by];
 			if (t) {
 				let { ref: n } = e.dynamic;
 				l = l.orderBy(typeof t == "string" ? n(t) : Ke(t), s.sort_order);
@@ -833,7 +833,7 @@ function yt(e) {
 			"user_activity.last_login",
 			"user_activity.last_ip",
 			"user_activity.login_count"
-		]).execute(), a ? l.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow() : void 0]), p = await vt(e, t, d);
+		]).execute(), a ? l.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow() : void 0]), p = await yt(e, t, d);
 		if (!f) return {
 			users: p,
 			start: 0,
@@ -851,12 +851,12 @@ function yt(e) {
 }
 //#endregion
 //#region src/users/remove.ts
-function bt(e) {
+function xt(e) {
 	return async (t, n, r) => {
 		let i = async (e) => {
 			await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "in", (e) => e.selectFrom("users").select("users.user_id").where("users.tenant_id", "=", t).where((e) => e.or([e("users.user_id", "=", n), e("users.linked_to", "=", n)]))).execute(), await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.linked_to", "=", n).execute();
 			let i = await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
-			for (let n of r?.outboxEvents ?? []) await M(e, t, n.id, n);
+			for (let n of r?.outboxEvents ?? []) await j(e, t, n.id, n);
 			return i.length === 1;
 		};
 		return r?.outboxEvents?.length && !e.isTransaction ? e.transaction().execute(i) : i(e);
@@ -864,14 +864,14 @@ function bt(e) {
 }
 //#endregion
 //#region src/utils/flatten.ts
-function F(e, t = "", n = {}) {
+function P(e, t = "", n = {}) {
 	for (let r in e) if (Object.prototype.hasOwnProperty.call(e, r)) {
 		let i = t ? `${t}_${r}` : r, a = e[r];
-		typeof a == "object" && a && !Array.isArray(a) ? F(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
+		typeof a == "object" && a && !Array.isArray(a) ? P(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
 	}
 	return n;
 }
-function xt(e, t) {
+function St(e, t) {
 	let n = {};
 	for (let [r, i] of Object.entries(e)) {
 		let e = t.find((e) => r.startsWith(`${e}_`));
@@ -888,7 +888,7 @@ function xt(e, t) {
 }
 //#endregion
 //#region src/userActivity/index.ts
-function St(e) {
+function Ct(e) {
 	return {
 		user_id: e.user_id,
 		last_login: e.last_login ?? void 0,
@@ -898,18 +898,18 @@ function St(e) {
 		last_password_reset: e.last_password_reset ?? void 0
 	};
 }
-function Ct(e) {
+function wt(e) {
 	let t = {};
 	return e.last_login !== void 0 && (t.last_login = e.last_login), e.last_ip !== void 0 && (t.last_ip = e.last_ip), e.login_count !== void 0 && (t.login_count = e.login_count), e.failed_logins !== void 0 && (t.failed_logins = JSON.stringify(e.failed_logins)), e.last_password_reset !== void 0 && (t.last_password_reset = e.last_password_reset), t;
 }
-function wt(e) {
+function Tt(e) {
 	return {
 		async get(t, n) {
 			let r = await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).selectAll().executeTakeFirst();
-			return r ? St(r) : null;
+			return r ? Ct(r) : null;
 		},
 		async upsert(t, n, r) {
-			let i = Ct(r);
+			let i = wt(r);
 			if (await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).select("user_id").executeTakeFirst()) {
 				if (Object.keys(i).length === 0) return;
 				await e.updateTable("user_activity").set(i).where("tenant_id", "=", t).where("user_id", "=", n).execute();
@@ -931,9 +931,9 @@ function wt(e) {
 }
 //#endregion
 //#region src/users/update.ts
-function Tt(e) {
+function Et(e) {
 	return async (t, n, r, i) => {
-		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = F({
+		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = P({
 			...c,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString(),
 			app_metadata: r.app_metadata ? JSON.stringify(r.app_metadata) : void 0,
@@ -944,12 +944,12 @@ function Tt(e) {
 		}), u = async (e) => {
 			let [r] = await e.updateTable("users").set(l).where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
 			if (!r || r.numUpdatedRows === 0n) return !1;
-			(a !== void 0 || o !== void 0 || s !== void 0) && await wt(e).upsert(t, n, {
+			(a !== void 0 || o !== void 0 || s !== void 0) && await Tt(e).upsert(t, n, {
 				last_login: a,
 				last_ip: o,
 				login_count: s
 			});
-			for (let n of i?.outboxEvents ?? []) await M(e, t, n.id, n);
+			for (let n of i?.outboxEvents ?? []) await j(e, t, n.id, n);
 			return !0;
 		};
 		return e.isTransaction ? u(e) : e.transaction().execute(u);
@@ -957,27 +957,27 @@ function Tt(e) {
 }
 //#endregion
 //#region src/users/unlink.ts
-function Et(e) {
+function Dt(e) {
 	return async (t, n, r, i) => (await e.updateTable("users").set({ linked_to: null }).where("users.tenant_id", "=", t).where("users.user_id", "=", `${r}|${i}`).where("users.linked_to", "=", `${n}`).execute()).length === 1;
 }
 //#endregion
 //#region src/users/index.ts
-function Dt(e) {
-	let t = lt(e);
+function Ot(e) {
+	let t = ut(e);
 	return {
 		create: t,
 		rawCreate: t,
-		createMany: dt(e),
-		remove: bt(e),
-		get: pt(e),
-		list: yt(e),
-		update: Tt(e),
-		unlink: Et(e)
+		createMany: ft(e),
+		remove: xt(e),
+		get: mt(e),
+		list: bt(e),
+		update: Et(e),
+		unlink: Dt(e)
 	};
 }
 //#endregion
 //#region src/flows/create.ts
-function Ot(e) {
+function kt(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = b.parse({
 			id: a?.id ?? `af_${t()}`,
@@ -995,7 +995,7 @@ function Ot(e) {
 }
 //#endregion
 //#region src/helpers/parse.ts
-function I(e, t) {
+function F(e, t) {
 	if (!e) return t;
 	try {
 		return JSON.parse(e);
@@ -1003,7 +1003,7 @@ function I(e, t) {
 		return t;
 	}
 }
-function kt(e) {
+function At(e) {
 	if (e) try {
 		let t = JSON.parse(e);
 		return t && typeof t == "object" && !Array.isArray(t) ? t : void 0;
@@ -1011,33 +1011,33 @@ function kt(e) {
 		return;
 	}
 }
-function At(e, t, n = { ...e }) {
-	for (let r in t) r in e && (n[r] = I(e[r], t[r]));
+function jt(e, t, n = { ...e }) {
+	for (let r in t) r in e && (n[r] = F(e[r], t[r]));
 	return n;
 }
 //#endregion
 //#region src/flows/get.ts
-function jt(e) {
+function Mt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("flows").selectAll().where("flows.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
 		let i = {
 			...r,
-			actions: I(r.actions, [])
+			actions: F(r.actions, [])
 		};
 		return b.parse(l(i));
 	};
 }
 //#endregion
 //#region src/flows/list.ts
-function Mt(e) {
+function Nt(e) {
 	let t = {
 		...e,
-		actions: I(e.actions, [])
+		actions: F(e.actions, [])
 	};
 	return b.parse(l(t));
 }
-function Nt(e) {
+function Pt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("flows").where("tenant_id", "=", t);
 		if (s && (c = k(e, c, s, [])), D(n)) {
@@ -1045,7 +1045,7 @@ function Nt(e) {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "id"
-			}), i = e.map(Mt);
+			}), i = e.map(Nt);
 			return {
 				flows: i,
 				start: 0,
@@ -1054,7 +1054,7 @@ function Nt(e) {
 				next: r
 			};
 		}
-		let l = (await c.offset(r * i).limit(i).selectAll().execute()).map(Mt);
+		let l = (await c.offset(r * i).limit(i).selectAll().execute()).map(Nt);
 		if (!a) return {
 			flows: l,
 			start: 0,
@@ -1072,7 +1072,7 @@ function Nt(e) {
 }
 //#endregion
 //#region src/flows/update.ts
-function Pt(e) {
+function Ft(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -1090,27 +1090,27 @@ function Pt(e) {
 }
 //#endregion
 //#region src/flows/remove.ts
-function Ft(e) {
+function It(e) {
 	return async (t, n) => ((await e.deleteFrom("flows").where("id", "=", n).where("tenant_id", "=", t).execute())[0]?.numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/flows/index.ts
-function It(e) {
+function Lt(e) {
 	return {
-		create: Ot(e),
-		get: jt(e),
-		list: Nt(e),
-		update: Pt(e),
-		remove: Ft(e)
+		create: kt(e),
+		get: Mt(e),
+		list: Pt(e),
+		update: Ft(e),
+		remove: It(e)
 	};
 }
 //#endregion
 //#region src/tenants/utils.ts
-function Lt(e) {
+function Rt(e) {
 	let t = { ...e };
 	return e.session_cookie && typeof e.session_cookie == "string" && (t.session_cookie = JSON.parse(e.session_cookie)), e.enabled_locales && typeof e.enabled_locales == "string" && (t.enabled_locales = JSON.parse(e.enabled_locales)), e.error_page && typeof e.error_page == "string" && (t.error_page = JSON.parse(e.error_page)), e.flags && typeof e.flags == "string" && (t.flags = JSON.parse(e.flags)), e.sandbox_versions_available && typeof e.sandbox_versions_available == "string" && (t.sandbox_versions_available = JSON.parse(e.sandbox_versions_available)), e.change_password && typeof e.change_password == "string" && (t.change_password = JSON.parse(e.change_password)), e.guardian_mfa_page && typeof e.guardian_mfa_page == "string" && (t.guardian_mfa_page = JSON.parse(e.guardian_mfa_page)), e.sessions && typeof e.sessions == "string" && (t.sessions = JSON.parse(e.sessions)), e.oidc_logout && typeof e.oidc_logout == "string" && (t.oidc_logout = JSON.parse(e.oidc_logout)), e.device_flow && typeof e.device_flow == "string" && (t.device_flow = JSON.parse(e.device_flow)), e.default_token_quota && typeof e.default_token_quota == "string" && (t.default_token_quota = JSON.parse(e.default_token_quota)), e.allowed_logout_urls && typeof e.allowed_logout_urls == "string" && (t.allowed_logout_urls = JSON.parse(e.allowed_logout_urls)), e.acr_values_supported && typeof e.acr_values_supported == "string" && (t.acr_values_supported = JSON.parse(e.acr_values_supported)), e.mtls && typeof e.mtls == "string" && (t.mtls = JSON.parse(e.mtls)), e.mfa && typeof e.mfa == "string" && (t.mfa = JSON.parse(e.mfa)), e.attack_protection && typeof e.attack_protection == "string" && (t.attack_protection = JSON.parse(e.attack_protection)), e.allow_organization_name_in_authentication_api !== void 0 && (t.allow_organization_name_in_authentication_api = e.allow_organization_name_in_authentication_api === 1), e.customize_mfa_in_postlogin_action !== void 0 && (t.customize_mfa_in_postlogin_action = e.customize_mfa_in_postlogin_action === 1), e.pushed_authorization_requests_supported !== void 0 && (t.pushed_authorization_requests_supported = e.pushed_authorization_requests_supported === 1), e.authorization_response_iss_parameter_supported !== void 0 && (t.authorization_response_iss_parameter_supported = e.authorization_response_iss_parameter_supported === 1), l(t);
 }
-function Rt(e) {
+function zt(e) {
 	let t = { ...e };
 	return d(e, [
 		"session_cookie",
@@ -1133,14 +1133,14 @@ function Rt(e) {
 }
 //#endregion
 //#region src/tenants/create.ts
-function zt(e) {
+function Bt(e) {
 	return async (n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
 			id: i?.id ?? n.id ?? t(),
 			created_at: i?.created_at ?? a,
 			updated_at: i?.updated_at ?? a
-		}, s = Rt(o);
+		}, s = zt(o);
 		try {
 			await e.insertInto("tenants").values(s).execute();
 		} catch (e) {
@@ -1152,15 +1152,15 @@ function zt(e) {
 }
 //#endregion
 //#region src/tenants/get.ts
-function Bt(e) {
+function Vt(e) {
 	return async (t) => {
 		let n = await e.selectFrom("tenants").where("tenants.id", "=", t).selectAll().executeTakeFirst();
-		return n ? Lt(n) : null;
+		return n ? Rt(n) : null;
 	};
 }
 //#endregion
 //#region src/tenants/list.ts
-function Vt(e) {
+function Ht(e) {
 	return async (t) => {
 		let n = e.selectFrom("tenants"), { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = t || {};
 		if (s && s.sort_by) {
@@ -1168,7 +1168,7 @@ function Vt(e) {
 			n = n.orderBy(t(s.sort_by), s.sort_order);
 		}
 		c && (n = k(e, n, c, ["id", "friendly_name"]));
-		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(Lt);
+		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(Rt);
 		if (!a) return { tenants: l };
 		let { count: u } = await n.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow(), d = o(u);
 		return {
@@ -1183,10 +1183,10 @@ function Vt(e) {
 }
 //#endregion
 //#region src/tenants/update.ts
-function Ht(e) {
+function Ut(e) {
 	return async (t, n) => {
 		let r = {
-			...Rt(n),
+			...zt(n),
 			id: t,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		};
@@ -1195,29 +1195,29 @@ function Ht(e) {
 }
 //#endregion
 //#region src/tenants/remove.ts
-function Ut(e) {
+function Wt(e) {
 	return async (t) => (await e.deleteFrom("tenants").where("tenants.id", "=", t).execute()).length === 1;
 }
 //#endregion
 //#region src/tenants/index.ts
-function Wt(e) {
+function Gt(e) {
 	return {
-		create: zt(e),
-		get: Bt(e),
-		list: Vt(e),
-		update: Ht(e),
-		remove: Ut(e)
+		create: Bt(e),
+		get: Vt(e),
+		list: Ht(e),
+		update: Ut(e),
+		remove: Wt(e)
 	};
 }
 //#endregion
 //#region src/logs/create.ts
-function Gt(e) {
+function Kt(e) {
 	return e ? JSON.stringify(e) : void 0;
 }
-var Kt = 256;
-function qt(e) {
+var qt = 256;
+function Jt(e) {
 	return async (n, r) => {
-		let i = r.user_agent?.slice(0, Kt), a = r.log_id || t(), { location_info: o, ...s } = r;
+		let i = r.user_agent?.slice(0, qt), a = r.log_id || t(), { location_info: o, ...s } = r;
 		return await e.insertInto("logs").values({
 			...s,
 			log_id: a,
@@ -1226,8 +1226,8 @@ function qt(e) {
 			description: r.description?.substring(0, 256),
 			isMobile: +!!r.isMobile,
 			scope: r.scope,
-			auth0_client: Gt(r.auth0_client),
-			details: Gt(r.details)?.substring(0, 8192),
+			auth0_client: Kt(r.auth0_client),
+			details: Kt(r.details)?.substring(0, 8192),
 			country_code: o?.country_code,
 			city_name: o?.city_name,
 			latitude: o?.latitude,
@@ -1243,7 +1243,7 @@ function qt(e) {
 }
 //#endregion
 //#region src/logs/logs.ts
-function Jt(e) {
+function Yt(e) {
 	if (!e) return "";
 	try {
 		return JSON.parse(e);
@@ -1251,13 +1251,13 @@ function Jt(e) {
 		return e;
 	}
 }
-function Yt(e) {
+function Xt(e) {
 	return {
 		...e,
 		client_id: e.client_id,
 		client_name: e.client_name || "",
-		auth0_client: Jt(e.auth0_client),
-		details: Jt(e.details),
+		auth0_client: Yt(e.auth0_client),
+		details: Yt(e.details),
 		isMobile: !!e.isMobile,
 		scope: e.scope || void 0,
 		log_id: e.log_id,
@@ -1273,7 +1273,7 @@ function Yt(e) {
 }
 //#endregion
 //#region src/logs/list.ts
-var Xt = [
+var Zt = [
 	"user_id",
 	"ip",
 	"type",
@@ -1299,11 +1299,11 @@ var Xt = [
 	"time_zone",
 	"continent_code"
 ];
-function Zt(e) {
+function Qt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, from_date: l, to_date: u } = n, d = e.selectFrom("logs").where("logs.tenant_id", "=", t);
 		if (c) {
-			let t = S(c, Xt);
+			let t = S(c, Zt);
 			t && (d = k(e, d, t, [
 				"user_id",
 				"ip",
@@ -1317,7 +1317,7 @@ function Zt(e) {
 				sortOrder: e,
 				idColumn: "log_id",
 				sortKey: `date:${e}`
-			}), a = t.map(Yt);
+			}), a = t.map(Xt);
 			return {
 				logs: a,
 				start: 0,
@@ -1332,7 +1332,7 @@ function Zt(e) {
 			f = f.orderBy(t(s.sort_by), s.sort_order);
 		}
 		f = f.offset(r * i).limit(i);
-		let p = (await f.selectAll().execute()).map(Yt);
+		let p = (await f.selectAll().execute()).map(Xt);
 		if (!a) return {
 			logs: p,
 			start: 0,
@@ -1350,24 +1350,24 @@ function Zt(e) {
 }
 //#endregion
 //#region src/logs/get.ts
-function Qt(e) {
+function $t(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("logs").where("logs.tenant_id", "=", t).where("logs.log_id", "=", n).selectAll().executeTakeFirst();
-		return r ? Yt(r) : null;
+		return r ? Xt(r) : null;
 	};
 }
 //#endregion
 //#region src/logs/index.ts
-function $t(e) {
+function en(e) {
 	return {
-		create: qt(e),
-		list: Zt(e),
-		get: Qt(e)
+		create: Jt(e),
+		list: Qt(e),
+		get: $t(e)
 	};
 }
 //#endregion
 //#region src/sessions/get.ts
-function en(e) {
+function tn(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("sessions").where("sessions.tenant_id", "=", t).where("sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -1401,7 +1401,7 @@ function en(e) {
 }
 //#endregion
 //#region src/sessions/create.ts
-function tn(e) {
+function nn(e) {
 	return async (t, n) => {
 		let r = Date.now(), i = c(), a = {
 			...n,
@@ -1433,12 +1433,12 @@ function tn(e) {
 }
 //#endregion
 //#region src/sessions/remove.ts
-function nn(e) {
+function rn(e) {
 	return async (t, n) => ((await e.deleteFrom("sessions").where("tenant_id", "=", t).where("sessions.id", "=", n).executeTakeFirst()).numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/sessions/update.ts
-function rn(e) {
+function an(e) {
 	return async (t, n, r) => {
 		let i = Date.now(), a = {
 			updated_at_ts: i,
@@ -1459,7 +1459,7 @@ function rn(e) {
 }
 //#endregion
 //#region src/sessions/list.ts
-function an(e) {
+function on(e) {
 	let { tenant_id: t, device: n, clients: i, created_at_ts: a, updated_at_ts: o, expires_at_ts: s, idle_expires_at_ts: c, authenticated_at_ts: l, last_interaction_at_ts: u, used_at_ts: d, revoked_at_ts: f, ...p } = e, m = r({
 		created_at_ts: a,
 		updated_at_ts: o,
@@ -1487,14 +1487,14 @@ function an(e) {
 		clients: JSON.parse(i)
 	};
 }
-function on(e) {
+function sn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("sessions").where("sessions.tenant_id", "=", t);
 		if (c && (l = k(e, l, c, ["user_id", "session_id"])), D(n)) {
 			let { rows: e, limit: t, next: r } = await O(l.selectAll(), n, {
 				sortColumn: "created_at_ts",
 				sortOrder: "desc"
-			}), i = e.map(an);
+			}), i = e.map(on);
 			return {
 				sessions: i,
 				start: 0,
@@ -1509,7 +1509,7 @@ function on(e) {
 			u = u.orderBy(t(s.sort_by), s.sort_order);
 		}
 		u = u.offset(r * i).limit(i);
-		let d = (await u.selectAll().execute()).map(an);
+		let d = (await u.selectAll().execute()).map(on);
 		if (!a) return {
 			sessions: d,
 			start: 0,
@@ -1527,18 +1527,18 @@ function on(e) {
 }
 //#endregion
 //#region src/sessions/index.ts
-function sn(e) {
+function cn(e) {
 	return {
-		create: tn(e),
-		get: en(e),
-		list: on(e),
-		remove: nn(e),
-		update: rn(e)
+		create: nn(e),
+		get: tn(e),
+		list: sn(e),
+		remove: rn(e),
+		update: an(e)
 	};
 }
 //#endregion
 //#region src/passwords/get.ts
-function cn(e) {
+function ln(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).where("passwords.is_current", "=", 1).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1551,7 +1551,7 @@ function cn(e) {
 }
 //#endregion
 //#region src/passwords/create.ts
-function ln(e) {
+function un(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = a?.id || r.id || t(), s = r.is_current ?? !0, c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...r,
@@ -1569,7 +1569,7 @@ function ln(e) {
 }
 //#endregion
 //#region src/passwords/update.ts
-function un(e) {
+function dn(e) {
 	return async (t, n) => {
 		let r = e.updateTable("passwords").set({
 			password: n.password,
@@ -1582,7 +1582,7 @@ function un(e) {
 }
 //#endregion
 //#region src/passwords/list.ts
-function dn(e) {
+function fn(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).orderBy("created_at", "desc");
 		return r && (i = i.limit(r)), (await i.selectAll().execute()).map(({ tenant_id: e, ...t }) => ({
@@ -1593,17 +1593,17 @@ function dn(e) {
 }
 //#endregion
 //#region src/passwords/index.ts
-function fn(e) {
+function pn(e) {
 	return {
-		create: ln(e),
-		update: un(e),
-		get: cn(e),
-		list: dn(e)
+		create: un(e),
+		update: dn(e),
+		get: ln(e),
+		list: fn(e)
 	};
 }
 //#endregion
 //#region src/codes/list.ts
-function pn(e) {
+function mn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("codes").where("codes.tenant_id", "=", t);
 		s && (c = k(e, c, s, ["code", "login_id"]));
@@ -1628,13 +1628,13 @@ function pn(e) {
 }
 //#endregion
 //#region src/codes/expires-at-ts.ts
-function mn(e) {
+function hn(e) {
 	let t = new Date(e).getTime();
 	return Number.isNaN(t) ? 0 : t;
 }
 //#endregion
 //#region src/codes/create.ts
-function hn(e) {
+function gn(e) {
 	return async (t, n) => {
 		let r = {
 			...n,
@@ -1643,18 +1643,18 @@ function hn(e) {
 		return await e.insertInto("codes").values({
 			...r,
 			tenant_id: t,
-			expires_at_ts: mn(r.expires_at)
+			expires_at_ts: hn(r.expires_at)
 		}).execute(), r;
 	};
 }
 //#endregion
 //#region src/codes/remove.ts
-function gn(e) {
+function _n(e) {
 	return async (t, n) => (await e.deleteFrom("codes").where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/codes/get.ts
-function _n(e) {
+function vn(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("codes").where("codes.code_id", "=", n).where("codes.code_type", "=", r);
 		t.length && (i = i.where("codes.tenant_id", "=", t));
@@ -1664,34 +1664,34 @@ function _n(e) {
 }
 //#endregion
 //#region src/codes/used.ts
-function vn(e) {
+function yn(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/consume.ts
-function yn(e) {
+function bn(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).where("codes.used_at", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/cleanup.ts
-var bn = 5e4;
-async function xn(e, t) {
+var xn = 5e4;
+async function Sn(e, t) {
 	if (!t) return e();
-	let n = 0, r = bn;
-	for (; r >= bn;) r = await e(bn), n += r;
+	let n = 0, r = xn;
+	for (; r >= xn;) r = await e(xn), n += r;
 	return n;
 }
-function Sn(e) {
+function Cn(e) {
 	let t;
 	return async (n) => {
-		t ??= await nt(e);
+		t ??= await rt(e);
 		let r = t === "mysql";
-		return await xn(async (t) => {
-			let r = e.deleteFrom("codes").where("expires_at_ts", "<", mn(n));
+		return await Sn(async (t) => {
+			let r = e.deleteFrom("codes").where("expires_at_ts", "<", hn(n));
 			t !== void 0 && (r = r.limit(t));
 			let i = await r.executeTakeFirst();
 			return Number(i.numDeletedRows);
-		}, r) + await xn(async (t) => {
+		}, r) + await Sn(async (t) => {
 			let r = e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", n);
 			t !== void 0 && (r = r.limit(t));
 			let i = await r.executeTakeFirst();
@@ -1701,20 +1701,20 @@ function Sn(e) {
 }
 //#endregion
 //#region src/codes/index.ts
-function Cn(e) {
+function wn(e) {
 	return {
-		create: hn(e),
-		list: pn(e),
-		remove: gn(e),
-		used: vn(e),
-		consume: yn(e),
-		get: _n(e),
-		cleanup: Sn(e)
+		create: gn(e),
+		list: mn(e),
+		remove: _n(e),
+		used: yn(e),
+		consume: bn(e),
+		get: vn(e),
+		cleanup: Cn(e)
 	};
 }
 //#endregion
 //#region src/connections/create.ts
-function wn(e) {
+function Tn(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, { is_system: a, enforce: o, ...s } = n;
 		delete s.enabled_clients;
@@ -1737,7 +1737,7 @@ function wn(e) {
 }
 //#endregion
 //#region src/connections/transform.ts
-function Tn(e) {
+function En(e) {
 	let { is_system: t, enforce: n, ...r } = e;
 	return l({
 		...r,
@@ -1746,12 +1746,12 @@ function Tn(e) {
 		options: typeof e.options == "string" ? JSON.parse(e.options) : {}
 	});
 }
-function En(e) {
-	return e.map(Tn);
+function Dn(e) {
+	return e.map(En);
 }
 //#endregion
 //#region src/connections/list.ts
-function Dn(e) {
+function On(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("connections").where("connections.tenant_id", "=", t);
 		if (s && (c = k(e, c, s, ["user_id", "ip"])), D(n)) {
@@ -1759,7 +1759,7 @@ function Dn(e) {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "id"
-			}), i = En(e);
+			}), i = Dn(e);
 			return {
 				connections: i,
 				start: 0,
@@ -1768,7 +1768,7 @@ function Dn(e) {
 				next: r
 			};
 		}
-		let l = En(await c.offset(r * i).limit(i).selectAll().execute());
+		let l = Dn(await c.offset(r * i).limit(i).selectAll().execute());
 		if (!a) return {
 			connections: l,
 			start: 0,
@@ -1786,20 +1786,20 @@ function Dn(e) {
 }
 //#endregion
 //#region src/connections/remove.ts
-function On(e) {
+function kn(e) {
 	return async (t, n) => (await e.deleteFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/connections/get.ts
-function kn(e) {
+function An(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).selectAll().executeTakeFirst();
-		return r ? Tn(r) : null;
+		return r ? En(r) : null;
 	};
 }
 //#endregion
 //#region src/connections/update.ts
-function An(e) {
+function jn(e) {
 	return async (t, n, r) => {
 		let { is_system: i, enforce: a, ...o } = r;
 		delete o.enabled_clients;
@@ -1817,18 +1817,18 @@ function An(e) {
 }
 //#endregion
 //#region src/connections/index.ts
-function jn(e) {
+function Mn(e) {
 	return {
-		create: wn(e),
-		get: kn(e),
-		list: Dn(e),
-		remove: On(e),
-		update: An(e)
+		create: Tn(e),
+		get: An(e),
+		list: On(e),
+		remove: kn(e),
+		update: jn(e)
 	};
 }
 //#endregion
 //#region src/clients/create.ts
-function Mn(e) {
+function Nn(e) {
 	return async (r, i, a) => {
 		let o = a?.importMetadata, s = o?.id ?? i.client_id ?? t(), c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...i,
@@ -1894,7 +1894,7 @@ function Mn(e) {
 }
 //#endregion
 //#region src/clients/get.ts
-function Nn(e) {
+function Pn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1941,7 +1941,7 @@ function Nn(e) {
 }
 //#endregion
 //#region src/clients/getByClientId.ts
-function Pn(e) {
+function Fn(e) {
 	return async (t) => {
 		let n = await e.selectFrom("clients").where("clients.client_id", "=", t).selectAll().executeTakeFirst();
 		return n ? l({
@@ -1986,7 +1986,7 @@ function Pn(e) {
 }
 //#endregion
 //#region src/clients/list.ts
-function Fn(e) {
+function In(e) {
 	return l({
 		...e,
 		global: !!e.global,
@@ -2026,7 +2026,7 @@ function Fn(e) {
 		token_exchange: e.token_exchange ? JSON.parse(e.token_exchange) : void 0
 	});
 }
-function In(e) {
+function Ln(e) {
 	let t = De(e);
 	if (t.length !== 1) return null;
 	let n = t[0].match(/^([a-zA-Z_][a-zA-Z0-9_]*):(.+)$/);
@@ -2037,11 +2037,11 @@ function In(e) {
 		value: r
 	} : null;
 }
-function Ln(e) {
+function Rn(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("clients").where("clients.tenant_id", "=", t), i = new Set(["owner_user_id", "registration_type"]);
 		if (n?.q) {
-			let e = In(n.q);
+			let e = Ln(n.q);
 			if (e && i.has(e.field)) {
 				let t = e.field;
 				r = r.where(t, "=", e.value);
@@ -2052,7 +2052,7 @@ function Ln(e) {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "client_id"
-			}), a = e.map(Fn);
+			}), a = e.map(In);
 			return {
 				clients: a,
 				totals: {
@@ -2076,7 +2076,7 @@ function Ln(e) {
 		if (n?.include_totals) {
 			let r = e.selectFrom("clients").select(p`count(*)`.as("count")).where("clients.tenant_id", "=", t);
 			if (n?.q) {
-				let e = In(n.q);
+				let e = Ln(n.q);
 				if (e && i.has(e.field)) {
 					let t = e.field;
 					r = r.where(t, "=", e.value);
@@ -2085,7 +2085,7 @@ function Ln(e) {
 			let a = await r.executeTakeFirst();
 			c = Number(a?.count || 0);
 		}
-		let l = s.map(Fn);
+		let l = s.map(In);
 		return {
 			clients: l,
 			totals: {
@@ -2099,12 +2099,12 @@ function Ln(e) {
 }
 //#endregion
 //#region src/clients/remove.ts
-function Rn(e) {
+function zn(e) {
 	return async (t, n) => (await e.deleteFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clients/update.ts
-function zn(e) {
+function Bn(e) {
 	return async (t, r, i) => {
 		let a = {
 			...i,
@@ -2152,31 +2152,31 @@ function zn(e) {
 }
 //#endregion
 //#region src/clients/index.ts
-function Bn(e) {
+function Vn(e) {
 	return {
-		create: Mn(e),
-		get: Nn(e),
-		getByClientId: Pn(e),
-		list: Ln(e),
-		remove: Rn(e),
-		update: zn(e)
+		create: Nn(e),
+		get: Pn(e),
+		getByClientId: Fn(e),
+		list: Rn(e),
+		remove: zn(e),
+		update: Bn(e)
 	};
 }
 //#endregion
 //#region src/clientConnections/listByClient.ts
-function Vn(e) {
+function Hn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).select("connections").executeTakeFirst();
 		if (!r) return [];
 		let i = JSON.parse(r.connections || "[]");
 		if (i.length === 0) return [];
-		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, Tn(e)]));
+		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, En(e)]));
 		return i.map((e) => o.get(e)).filter((e) => e !== void 0);
 	};
 }
 //#endregion
 //#region src/clientConnections/updateByClient.ts
-function Hn(e) {
+function Un(e) {
 	return async (t, n, r) => (await e.updateTable("clients").set({
 		connections: JSON.stringify(r),
 		updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -2184,7 +2184,7 @@ function Hn(e) {
 }
 //#endregion
 //#region src/clientConnections/listByConnection.ts
-function Un(e) {
+function Wn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).select(["client_id", "connections"]).execute(), i = [];
 		for (let e of r) JSON.parse(e.connections || "[]").includes(n) && i.push(e.client_id);
@@ -2193,7 +2193,7 @@ function Un(e) {
 }
 //#endregion
 //#region src/clientConnections/addClientToConnection.ts
-function Wn(e) {
+function Gn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2206,7 +2206,7 @@ function Wn(e) {
 }
 //#endregion
 //#region src/clientConnections/removeClientFromConnection.ts
-function Gn(e) {
+function Kn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2219,18 +2219,18 @@ function Gn(e) {
 }
 //#endregion
 //#region src/clientConnections/index.ts
-function Kn(e) {
+function qn(e) {
 	return {
-		listByClient: Vn(e),
-		updateByClient: Hn(e),
-		listByConnection: Un(e),
-		addClientToConnection: Wn(e),
-		removeClientFromConnection: Gn(e)
+		listByClient: Hn(e),
+		updateByClient: Un(e),
+		listByConnection: Wn(e),
+		addClientToConnection: Gn(e),
+		removeClientFromConnection: Kn(e)
 	};
 }
 //#endregion
 //#region src/clientGrants/create.ts
-function qn(e) {
+function Jn(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? t(), c = a?.created_at ?? o, u = a?.updated_at ?? a?.created_at ?? o, { scope: d, authorization_details_types: f, ...p } = r, m = {
 			id: s,
@@ -2258,7 +2258,7 @@ function qn(e) {
 }
 //#endregion
 //#region src/clientGrants/get.ts
-function Jn(e) {
+function Yn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_grants").selectAll().where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -2278,7 +2278,7 @@ function Jn(e) {
 }
 //#endregion
 //#region src/clientGrants/list.ts
-function Yn(e) {
+function Xn(e) {
 	return te.parse(l({
 		...e,
 		scope: e.scope ? JSON.parse(e.scope) : [],
@@ -2287,7 +2287,7 @@ function Yn(e) {
 		authorization_details_types: e.authorization_details_types ? JSON.parse(e.authorization_details_types) : []
 	}));
 }
-function Xn(e) {
+function Zn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s, sort: c } = n, l = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
 		if (s) {
@@ -2304,7 +2304,7 @@ function Xn(e) {
 			let { rows: e, limit: t, next: r } = await O(l.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
-			}), i = e.map(Yn);
+			}), i = e.map(Xn);
 			return {
 				client_grants: i,
 				start: 0,
@@ -2318,7 +2318,7 @@ function Xn(e) {
 			let { ref: t } = e.dynamic;
 			u = u.orderBy(t(c.sort_by), c.sort_order);
 		} else u = u.orderBy("client_grants.created_at", "desc").orderBy("client_grants.id", "desc");
-		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(Yn);
+		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(Xn);
 		if (!a) return {
 			client_grants: d,
 			start: 0,
@@ -2336,12 +2336,12 @@ function Xn(e) {
 }
 //#endregion
 //#region src/clientGrants/remove.ts
-function Zn(e) {
+function Qn(e) {
 	return async (t, n) => ((await e.deleteFrom("client_grants").where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst()).numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/clientGrants/update.ts
-function Qn(e) {
+function $n(e) {
 	return async (t, n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), { scope: a, authorization_details_types: o, ...s } = r, c = {
 			...s,
@@ -2352,18 +2352,18 @@ function Qn(e) {
 }
 //#endregion
 //#region src/clientGrants/index.ts
-function $n(e) {
+function er(e) {
 	return {
-		create: qn(e),
-		get: Jn(e),
-		list: Xn(e),
-		remove: Zn(e),
-		update: Qn(e)
+		create: Jn(e),
+		get: Yn(e),
+		list: Zn(e),
+		remove: Qn(e),
+		update: $n(e)
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/create.ts
-function er(e) {
+function tr(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("client_registration_tokens").values({
@@ -2394,12 +2394,12 @@ function er(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/row-mapper.ts
-function tr(e) {
+function nr(e) {
 	let t = ne.safeParse(e);
 	if (!t.success) throw Error(`Unknown client_registration_tokens.type: ${e}`);
 	return t.data;
 }
-function nr(e) {
+function rr(e) {
 	if (!e) return;
 	let t;
 	try {
@@ -2409,14 +2409,14 @@ function nr(e) {
 	}
 	return le(t) ? t : void 0;
 }
-function rr(e) {
+function I(e) {
 	return {
 		id: e.id,
 		token_hash: e.token_hash,
-		type: tr(e.type),
+		type: nr(e.type),
 		client_id: e.client_id ?? void 0,
 		sub: e.sub ?? void 0,
-		constraints: nr(e.constraints),
+		constraints: rr(e.constraints),
 		single_use: !!e.single_use,
 		expires_at: i(e.expires_at_ts),
 		used_at: i(e.used_at_ts),
@@ -2429,7 +2429,7 @@ function rr(e) {
 function ir(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-		return r ? rr(r) : null;
+		return r ? I(r) : null;
 	};
 }
 //#endregion
@@ -2437,13 +2437,13 @@ function ir(e) {
 function ar(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-		return r ? rr(r) : null;
+		return r ? I(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/listByClient.ts
 function or(e) {
-	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(rr);
+	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(I);
 }
 //#endregion
 //#region src/clientRegistrationTokens/markUsed.ts
@@ -2472,7 +2472,7 @@ function ur(e) {
 //#region src/clientRegistrationTokens/index.ts
 function dr(e) {
 	return {
-		create: er(e),
+		create: tr(e),
 		get: ir(e),
 		getByHash: ar(e),
 		listByClient: or(e),
@@ -2564,8 +2564,8 @@ function _r(e) {
 	return async (t) => (await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).selectAll().execute()).map((e) => ({
 		...e,
 		primary: e.primary === 1,
-		domain_metadata: I(e.domain_metadata, void 0),
-		verification: I(e.verification, void 0)
+		domain_metadata: F(e.domain_metadata, void 0),
+		verification: F(e.verification, void 0)
 	}));
 }
 //#endregion
@@ -2581,8 +2581,8 @@ function yr(e) {
 		return r ? {
 			...r,
 			primary: r.primary === 1,
-			domain_metadata: I(r.domain_metadata, void 0),
-			verification: I(r.verification, void 0)
+			domain_metadata: F(r.domain_metadata, void 0),
+			verification: F(r.verification, void 0)
 		} : null;
 	};
 }
@@ -2608,8 +2608,8 @@ function xr(e) {
 		return n ? {
 			...n,
 			primary: n.primary === 1,
-			domain_metadata: I(n.domain_metadata, void 0),
-			verification: I(n.verification, void 0)
+			domain_metadata: F(n.domain_metadata, void 0),
+			verification: F(n.verification, void 0)
 		} : null;
 	};
 }
@@ -2745,7 +2745,7 @@ function Ar(e) {
 		enabled: !!n,
 		synchronous: !!i,
 		enforce: E(c),
-		metadata: kt(s)
+		metadata: At(s)
 	});
 }
 function jr(e) {
@@ -2806,7 +2806,7 @@ function Mr(e) {
 			enabled: !!d.enabled,
 			synchronous: !!d.synchronous,
 			enforce: E(u),
-			metadata: kt(c)
+			metadata: At(c)
 		});
 	};
 }
@@ -2950,7 +2950,7 @@ function Hr(e) {
 			...c,
 			tenant_id: n
 		};
-		return await e.insertInto("themes").values(F(l)).execute(), c;
+		return await e.insertInto("themes").values(P(l)).execute(), c;
 	};
 }
 //#endregion
@@ -2963,7 +2963,7 @@ function Ur(e) {
 function Wr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).selectAll().executeTakeFirst();
-		return r ? l(xt({
+		return r ? l(St({
 			...r,
 			borders_show_widget_shadow: !!r.borders_show_widget_shadow,
 			fonts_body_text_bold: !!r.fonts_body_text_bold,
@@ -2985,7 +2985,7 @@ function Wr(e) {
 //#region src/themes/update.ts
 function Gr(e) {
 	return async (t, n, r) => {
-		let { themeId: i, ...a } = r, o = F({
+		let { themeId: i, ...a } = r, o = P({
 			...a,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		});
@@ -3016,7 +3016,7 @@ function qr(e) {
 			"created_at_ts",
 			"updated_at_ts",
 			"expires_at_ts"
-		]), f = xt(l({
+		]), f = St(l({
 			...u,
 			...d,
 			state: i.state || h.PENDING,
@@ -3056,7 +3056,7 @@ function ti(e) {
 			state: n.state || h.PENDING,
 			state_data: n.state_data,
 			failure_reason: n.failure_reason
-		}, { authParams: a, ...o } = i, s = Date.now(), l = F(o);
+		}, { authParams: a, ...o } = i, s = Date.now(), l = P(o);
 		return delete l.created_at, delete l.updated_at, delete l.expires_at, await e.insertInto("login_sessions").values({
 			...l,
 			tenant_id: t,
@@ -3079,7 +3079,7 @@ function ni(e) {
 				...c
 			}) };
 		}
-		let d = F(l);
+		let d = P(l);
 		return delete d.created_at_ts, delete d.updated_at_ts, delete d.expires_at_ts, delete d.id, delete d.tenant_id, (await e.updateTable("login_sessions").set({
 			...d,
 			...u,
@@ -4832,7 +4832,7 @@ function Ya(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("invites").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ? l({
-			...At(r, {
+			...jt(r, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4847,7 +4847,7 @@ function Ya(e) {
 //#region src/invites/list.ts
 function Xa(e) {
 	return l({
-		...At(e, {
+		...jt(e, {
 			inviter: {},
 			invitee: {},
 			app_metadata: {},
@@ -5560,7 +5560,7 @@ function Io(e) {
 //#region src/outbox/index.ts
 function Lo(e) {
 	return {
-		create: ct(e),
+		create: lt(e),
 		getByIds: Eo(e),
 		getUnprocessed: Do(e),
 		claimEvents: Oo(e),
@@ -6312,6 +6312,8 @@ function Ts(e) {
 		canary_tenant_ids: ws(e.canary_tenant_ids),
 		filter: ws(e.filter),
 		initiated_by: e.initiated_by,
+		config: ws(e.config),
+		paused_reason: e.paused_reason,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
@@ -6330,6 +6332,8 @@ function Es(e) {
 				canary_tenant_ids: r.canary_tenant_ids ? JSON.stringify(r.canary_tenant_ids) : null,
 				filter: r.filter ? JSON.stringify(r.filter) : null,
 				initiated_by: r.initiated_by ?? null,
+				config: r.config ? JSON.stringify(r.config) : null,
+				paused_reason: null,
 				created_at: i,
 				updated_at: i,
 				finished_at: null
@@ -6341,17 +6345,22 @@ function Es(e) {
 			return n ? Ts(n) : null;
 		},
 		async list(t = {}) {
-			let n = t.page ?? 0, r = t.per_page ?? 50, i = await e.selectFrom("rollouts").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
+			let n = t.page ?? 0, r = t.per_page ?? 50, i = e.selectFrom("rollouts");
+			if (t.kind !== void 0 && (i = i.where("kind", "=", t.kind)), t.status !== void 0) {
+				let e = Array.isArray(t.status) ? t.status : [t.status];
+				i = i.where("status", "in", e);
+			}
+			let a = await i.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: i.map(Ts),
+				rollouts: a.map(Ts),
 				start: n * r,
 				limit: r,
-				length: i.length
+				length: a.length
 			};
 		},
 		async update(t, n) {
 			let r = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			n.status !== void 0 && (r.status = n.status), n.wave_size !== void 0 && (r.wave_size = n.wave_size), n.canary_tenant_ids !== void 0 && (r.canary_tenant_ids = n.canary_tenant_ids ? JSON.stringify(n.canary_tenant_ids) : null), n.filter !== void 0 && (r.filter = n.filter ? JSON.stringify(n.filter) : null), n.finished_at !== void 0 && (r.finished_at = n.finished_at);
+			n.status !== void 0 && (r.status = n.status), n.wave_size !== void 0 && (r.wave_size = n.wave_size), n.canary_tenant_ids !== void 0 && (r.canary_tenant_ids = n.canary_tenant_ids ? JSON.stringify(n.canary_tenant_ids) : null), n.filter !== void 0 && (r.filter = n.filter ? JSON.stringify(n.filter) : null), n.config !== void 0 && (r.config = n.config ? JSON.stringify(n.config) : null), n.paused_reason !== void 0 && (r.paused_reason = n.paused_reason), n.finished_at !== void 0 && (r.finished_at = n.finished_at);
 			let i = await e.updateTable("rollouts").where("id", "=", t).set(r).executeTakeFirst();
 			return Number(i.numUpdatedRows) > 0;
 		},
@@ -7336,8 +7345,92 @@ async function Wc(e) {
 	await Q(e, "tenants", "parent_tenant_id");
 }
 //#endregion
+//#region migrate/migrations/2026-10-26T12:00:00_config_sync_hash.ts
+var Gc = /* @__PURE__ */ C({
+	down: () => Yc,
+	up: () => Jc
+});
+async function Kc(e, t, n) {
+	try {
+		await e.schema.alterTable("tenants").addColumn(t, n).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function qc(e, t) {
+	try {
+		await e.schema.alterTable("tenants").dropColumn(t).execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function Jc(e) {
+	await Kc(e, "config_sync_hash", p`varchar(64)`), await Kc(e, "config_synced_at", p`varchar(35)`);
+}
+async function Yc(e) {
+	await qc(e, "config_synced_at"), await qc(e, "config_sync_hash");
+}
+//#endregion
+//#region migrate/migrations/2026-10-27T12:00:00_config_sync_mode.ts
+var Xc = /* @__PURE__ */ C({
+	down: () => el,
+	up: () => $c
+});
+async function Zc(e) {
+	try {
+		await e.schema.alterTable("tenants").addColumn("config_sync", p`varchar(16)`).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function Qc(e) {
+	try {
+		await e.schema.alterTable("tenants").dropColumn("config_sync").execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function $c(e) {
+	await Zc(e);
+}
+async function el(e) {
+	await Qc(e);
+}
+//#endregion
+//#region migrate/migrations/2026-10-28T12:00:00_rollout_config.ts
+var tl = /* @__PURE__ */ C({
+	down: () => al,
+	up: () => il
+});
+async function nl(e, t, n) {
+	try {
+		await e.schema.alterTable("rollouts").addColumn(t, n).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function rl(e, t) {
+	try {
+		await e.schema.alterTable("rollouts").dropColumn(t).execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function il(e) {
+	await nl(e, "config", p`text`), await nl(e, "paused_reason", p`text`);
+}
+async function al(e) {
+	await rl(e, "paused_reason"), await rl(e, "config");
+}
+//#endregion
 //#region migrate/migrations/index.ts
-var Gc = {
+var ol = {
 	"2026-07-16T14:00:00_baseline": Os,
 	"2026-07-16T15:00:00_codes_expires_at_ts": Fs,
 	"2026-08-04T12:00:00_scim_inbound_provisioning": qs,
@@ -7350,25 +7443,28 @@ var Gc = {
 	"2026-09-01T12:00:00_tenant_operation_rows": kc,
 	"2026-09-25T12:00:00_token_exchange_profiles": Nc,
 	"2026-10-13T12:00:00_prompt_partials": Rc,
-	"2026-10-21T12:00:00_config_inheritance": Vc
+	"2026-10-21T12:00:00_config_inheritance": Vc,
+	"2026-10-26T12:00:00_config_sync_hash": Gc,
+	"2026-10-27T12:00:00_config_sync_mode": Xc,
+	"2026-10-28T12:00:00_rollout_config": tl
 };
 //#endregion
 //#region migrate/migrate.ts
-async function Kc(e, t = !1) {
+async function sl(e, t = !1) {
 	Ps(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new Ae({
 		db: e,
-		provider: new Ds(Gc)
+		provider: new Ds(ol)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function qc(e, t = !1) {
+async function cl(e, t = !1) {
 	Ps(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new Ae({
 		db: e,
-		provider: new Ds(Gc)
+		provider: new Ds(ol)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -7376,22 +7472,22 @@ async function qc(e, t = !1) {
 }
 //#endregion
 //#region migrate/plan.ts
-var Jc = 5e3, Yc = class extends Error {};
-function Xc(e) {
+var ll = 5e3, ul = class extends Error {};
+function dl(e) {
 	if (e.query.kind === "SelectQueryNode") return !0;
 	if (e.query.kind !== "RawNode") return !1;
 	let t = e.sql.trimStart();
 	return /^(select|show|explain|describe|desc)\b/i.test(t) ? !0 : /^pragma\b/i.test(t) && !t.includes("=");
 }
-var Zc = class {
+var fl = class {
 	inner;
 	captured;
 	constructor(e, t) {
 		this.inner = e, this.captured = t;
 	}
 	async executeQuery(e) {
-		if (Xc(e)) return this.inner.executeQuery(e);
-		if (this.captured.length >= Jc) throw new Yc(`stopped after ${Jc} statements`);
+		if (dl(e)) return this.inner.executeQuery(e);
+		if (this.captured.length >= ll) throw new ul(`stopped after ${ll} statements`);
 		return this.captured.push({
 			sql: e.sql,
 			parameters: e.parameters
@@ -7407,7 +7503,7 @@ var Zc = class {
 function $() {
 	throw Error("not available in a migration dry run");
 }
-var Qc = {
+var pl = {
 	init: async () => {},
 	acquireConnection: $,
 	beginTransaction: $,
@@ -7416,25 +7512,25 @@ var Qc = {
 	releaseConnection: $,
 	destroy: async () => {}
 };
-function $c(e, t) {
-	let n = e.getExecutor(), r = n.withConnectionProvider({ provideConnection: (e) => n.provideConnection((n) => e(new Zc(n, t))) }), i = {
+function ml(e, t) {
+	let n = e.getExecutor(), r = n.withConnectionProvider({ provideConnection: (e) => n.provideConnection((n) => e(new fl(n, t))) }), i = {
 		createAdapter: () => n.adapter,
-		createDriver: () => Qc,
+		createDriver: () => pl,
 		createQueryCompiler: () => $(),
 		createIntrospector: () => $()
 	};
 	return new f({
 		config: { dialect: i },
 		dialect: i,
-		driver: Qc,
+		driver: pl,
 		executor: r
 	});
 }
-async function el(e) {
+async function hl(e) {
 	Ps(!1);
 	let t = await new Ae({
 		db: e,
-		provider: new Ds(Gc)
+		provider: new Ds(ol)
 	}).getMigrations(), n = t.filter((e) => e.executedAt).map((e) => e.name), r = t.filter((e) => !e.executedAt), i = n[n.length - 1], a = i ? r.find((e) => e.name < i) : void 0;
 	if (a) throw Error(`pending migration "${a.name}" sorts before already-executed "${i}"; migrateToLatest would refuse to run`);
 	let o = [];
@@ -7444,9 +7540,9 @@ async function el(e) {
 			statements: n
 		};
 		try {
-			await t.migration.up($c(e, n));
+			await t.migration.up(ml(e, n));
 		} catch (e) {
-			r.error = e instanceof Error ? e.message : String(e), e instanceof Yc && (r.truncated = !0);
+			r.error = e instanceof Error ? e.message : String(e), e instanceof ul && (r.truncated = !0);
 		}
 		o.push(r);
 	}
@@ -7455,7 +7551,7 @@ async function el(e) {
 		pending: o
 	};
 }
-function tl(e) {
+function gl(e) {
 	if (e.pending.length === 0) return `-- Database is up to date (${e.executed.length} migrations executed).`;
 	let t = [`-- ${e.pending.length} pending migration(s); ${e.executed.length} already executed.`];
 	for (let n of e.pending) {
@@ -7470,33 +7566,33 @@ function tl(e) {
 }
 //#endregion
 //#region src/index.ts
-function nl(e, t = { useTransactions: !0 }) {
+function _l(e, t = { useTransactions: !0 }) {
 	let n = {
-		actions: Qe(e),
-		actionExecutions: it(e),
-		actionVersions: st(e),
+		actions: $e(e),
+		actionExecutions: ot(e),
+		actionVersions: ct(e),
 		branding: Tr(e),
-		clients: Bn(e),
-		clientConnections: Kn(e),
-		clientGrants: $n(e),
+		clients: Vn(e),
+		clientConnections: qn(e),
+		clientGrants: er(e),
 		clientRegistrationTokens: dr(e),
-		codes: Cn(e),
-		connections: jn(e),
+		codes: wn(e),
+		connections: Mn(e),
 		emailProviders: mi(e),
 		emailTemplates: xi(e),
 		customDomains: Sr(e),
-		flows: It(e),
+		flows: Lt(e),
 		forms: Vi(e),
 		hookCode: Vr(e),
 		hooks: Ir(e),
 		invites: eo(e),
 		keys: hr(e),
 		loginSessions: ii(e),
-		logs: $t(e),
+		logs: en(e),
 		logStreams: Ro(e),
 		migrationSources: Bo(e),
 		authenticationMethods: To(e),
-		passwords: fn(e),
+		passwords: pn(e),
 		promptSettings: ci(e),
 		promptPartials: li(e),
 		proxyRoutes: Wo(e),
@@ -7510,9 +7606,9 @@ function nl(e, t = { useTransactions: !0 }) {
 		userPermissions: Ta(e),
 		userRoles: Ma(e),
 		roles: ta(e),
-		sessions: sn(e),
+		sessions: cn(e),
 		sessionCleanup: Pi(e),
-		tenants: Wt(e),
+		tenants: Gt(e),
 		tenantOperations: os(e),
 		tenantOperationEvents: ys(e),
 		tenantOperationRows: Cs(e),
@@ -7521,8 +7617,8 @@ function nl(e, t = { useTransactions: !0 }) {
 		themes: Kr(e),
 		universalLoginTemplates: kr(e),
 		customText: vo(e),
-		users: Dt(e),
-		userActivity: wt(e),
+		users: Ot(e),
+		userActivity: Tt(e),
 		organizations: Ra(e),
 		organizationConnections: za(e),
 		userOrganizations: qa(e),
@@ -7530,7 +7626,7 @@ function nl(e, t = { useTransactions: !0 }) {
 		analytics: _o(e),
 		outbox: Lo(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(nl(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(_l(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -7539,4 +7635,4 @@ function nl(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { Ko as createProxyDataAdapter, Wo as createProxyRoutesAdapter, nl as default, tl as formatMigrationPlan, qc as migrateDown, Kc as migrateToLatest, el as planMigrations };
+export { Ko as createProxyDataAdapter, Wo as createProxyRoutesAdapter, _l as default, gl as formatMigrationPlan, cl as migrateDown, sl as migrateToLatest, hl as planMigrations };