@authhero/kysely-adapter 12.18.2 → 12.19.1

package/dist/kysely-adapter.mjs

@@ -1377,15 +1377,15 @@ function rn(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("sessions").where("sessions.tenant_id", "=", t).where("sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
-		let { tenant_id: a, device: o, clients: s, created_at_ts: c, updated_at_ts: l, expires_at_ts: u, idle_expires_at_ts: d, authenticated_at_ts: f, last_interaction_at_ts: p, used_at_ts: m, revoked_at_ts: h, ...g } = i, _ = r({
-			created_at_ts: c,
-			updated_at_ts: l,
-			expires_at_ts: u,
-			idle_expires_at_ts: d,
-			authenticated_at_ts: f,
-			last_interaction_at_ts: p,
-			used_at_ts: m,
-			revoked_at_ts: h
+		let { tenant_id: a, device: o, clients: s, authentication: c, created_at_ts: l, updated_at_ts: u, expires_at_ts: d, idle_expires_at_ts: f, authenticated_at_ts: p, last_interaction_at_ts: m, used_at_ts: h, revoked_at_ts: g, ..._ } = i, v = r({
+			created_at_ts: l,
+			updated_at_ts: u,
+			expires_at_ts: d,
+			idle_expires_at_ts: f,
+			authenticated_at_ts: p,
+			last_interaction_at_ts: m,
+			used_at_ts: h,
+			revoked_at_ts: g
 		}, [
 			"created_at_ts",
 			"updated_at_ts",
@@ -1398,10 +1398,11 @@ function rn(e) {
 			"revoked_at_ts"
 		]);
 		return {
-			...g,
 			..._,
+			...v,
 			device: JSON.parse(o),
-			clients: JSON.parse(s)
+			clients: JSON.parse(s),
+			...c ? { authentication: JSON.parse(c) } : {}
 		};
 	};
 }
@@ -1415,25 +1416,26 @@ function an(e) {
 			updated_at: i,
 			authenticated_at: i,
 			last_interaction_at: i
-		}, { expires_at: o, idle_expires_at: l, used_at: u, revoked_at: d, device: f, clients: p, ...m } = n, h = s(o), g = s(l), _ = Math.max(h ?? 0, g ?? 0);
+		}, { expires_at: o, idle_expires_at: l, used_at: u, revoked_at: d, device: f, clients: p, authentication: m, ...h } = n, g = s(o), _ = s(l), v = Math.max(g ?? 0, _ ?? 0);
 		return await e.transaction().execute(async (e) => {
 			await e.insertInto("sessions").values({
-				...m,
+				...h,
 				tenant_id: t,
 				created_at_ts: r,
 				updated_at_ts: r,
 				authenticated_at_ts: r,
 				last_interaction_at_ts: r,
-				expires_at_ts: h,
-				idle_expires_at_ts: g,
+				expires_at_ts: g,
+				idle_expires_at_ts: _,
 				used_at_ts: s(u),
 				revoked_at_ts: s(d),
 				device: JSON.stringify(f),
-				clients: JSON.stringify(p)
-			}).execute(), _ > 0 && n.login_session_id && await e.updateTable("login_sessions").set({
-				expires_at_ts: _,
+				clients: JSON.stringify(p),
+				authentication: m ? JSON.stringify(m) : null
+			}).execute(), v > 0 && n.login_session_id && await e.updateTable("login_sessions").set({
+				expires_at_ts: v,
 				updated_at_ts: r
-			}).where("tenant_id", "=", t).where("id", "=", n.login_session_id).where("expires_at_ts", "<", _).execute();
+			}).where("tenant_id", "=", t).where("id", "=", n.login_session_id).where("expires_at_ts", "<", v).execute();
 		}), a;
 	};
 }
@@ -1449,7 +1451,8 @@ function sn(e) {
 		let i = Date.now(), a = {
 			updated_at_ts: i,
 			device: r.device ? JSON.stringify(r.device) : void 0,
-			clients: r.clients ? JSON.stringify(r.clients) : void 0
+			clients: r.clients ? JSON.stringify(r.clients) : void 0,
+			authentication: r.authentication ? JSON.stringify(r.authentication) : void 0
 		}, o, c;
 		r.expires_at !== void 0 && (o = s(r.expires_at), a.expires_at_ts = o), r.idle_expires_at !== void 0 && (c = s(r.idle_expires_at), a.idle_expires_at_ts = c), r.authenticated_at !== void 0 && (a.authenticated_at_ts = s(r.authenticated_at)), r.last_interaction_at !== void 0 && (a.last_interaction_at_ts = s(r.last_interaction_at)), r.used_at !== void 0 && (a.used_at_ts = s(r.used_at)), r.revoked_at !== void 0 && (a.revoked_at_ts = s(r.revoked_at)), r.user_id !== void 0 && (a.user_id = r.user_id), r.login_session_id !== void 0 && (a.login_session_id = r.login_session_id);
 		let l = await e.updateTable("sessions").set(a).where("tenant_id", "=", t).where("sessions.id", "=", n).executeTakeFirst(), u = Math.max(o ?? 0, c ?? 0);
@@ -1466,15 +1469,15 @@ function sn(e) {
 //#endregion
 //#region src/sessions/list.ts
 function cn(e) {
-	let { tenant_id: t, device: n, clients: i, created_at_ts: a, updated_at_ts: o, expires_at_ts: s, idle_expires_at_ts: c, authenticated_at_ts: l, last_interaction_at_ts: u, used_at_ts: d, revoked_at_ts: f, ...p } = e, m = r({
-		created_at_ts: a,
-		updated_at_ts: o,
-		expires_at_ts: s,
-		idle_expires_at_ts: c,
-		authenticated_at_ts: l,
-		last_interaction_at_ts: u,
-		used_at_ts: d,
-		revoked_at_ts: f
+	let { tenant_id: t, device: n, clients: i, authentication: a, created_at_ts: o, updated_at_ts: s, expires_at_ts: c, idle_expires_at_ts: l, authenticated_at_ts: u, last_interaction_at_ts: d, used_at_ts: f, revoked_at_ts: p, ...m } = e, h = r({
+		created_at_ts: o,
+		updated_at_ts: s,
+		expires_at_ts: c,
+		idle_expires_at_ts: l,
+		authenticated_at_ts: u,
+		last_interaction_at_ts: d,
+		used_at_ts: f,
+		revoked_at_ts: p
 	}, [
 		"created_at_ts",
 		"updated_at_ts",
@@ -1487,10 +1490,11 @@ function cn(e) {
 		"revoked_at_ts"
 	]);
 	return {
-		...p,
 		...m,
+		...h,
 		device: JSON.parse(n),
-		clients: JSON.parse(i)
+		clients: JSON.parse(i),
+		...a ? { authentication: JSON.parse(a) } : {}
 	};
 }
 function ln(e) {
@@ -5409,6 +5413,7 @@ function Eo(e) {
 			type: n.type,
 			phone_number: n.phone_number,
 			totp_secret: n.totp_secret,
+			totp_last_step: n.totp_last_step,
 			credential_id: n.credential_id,
 			public_key: n.public_key,
 			sign_count: n.sign_count,
@@ -5424,6 +5429,7 @@ function Eo(e) {
 			type: n.type,
 			phone_number: n.phone_number,
 			totp_secret: n.totp_secret,
+			totp_last_step: n.totp_last_step,
 			credential_id: n.credential_id,
 			public_key: n.public_key,
 			sign_count: n.sign_count,
@@ -5447,6 +5453,7 @@ function Do(e) {
 			type: r.type,
 			phone_number: r.phone_number ?? void 0,
 			totp_secret: r.totp_secret ?? void 0,
+			totp_last_step: r.totp_last_step ?? void 0,
 			credential_id: r.credential_id ?? void 0,
 			public_key: r.public_key ?? void 0,
 			sign_count: r.sign_count ?? void 0,
@@ -5470,6 +5477,7 @@ function Oo(e) {
 			type: r.type,
 			phone_number: r.phone_number ?? void 0,
 			totp_secret: r.totp_secret ?? void 0,
+			totp_last_step: r.totp_last_step ?? void 0,
 			credential_id: r.credential_id ?? void 0,
 			public_key: r.public_key ?? void 0,
 			sign_count: r.sign_count ?? void 0,
@@ -5491,6 +5499,7 @@ function ko(e) {
 		type: e.type,
 		phone_number: e.phone_number ?? void 0,
 		totp_secret: e.totp_secret ?? void 0,
+		totp_last_step: e.totp_last_step ?? void 0,
 		credential_id: e.credential_id ?? void 0,
 		public_key: e.public_key ?? void 0,
 		sign_count: e.sign_count ?? void 0,
@@ -5519,20 +5528,29 @@ function jo(e) {
 	return async (t, n) => (await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
-//#region src/authenticationMethods/index.ts
+//#region src/authenticationMethods/consumeTotpStep.ts
 function Mo(e) {
+	return async (t, n, r) => (await e.updateTable("authentication_methods").set({
+		totp_last_step: r,
+		updated_at_ts: Date.now()
+	}).where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).where((e) => e.or([e("authentication_methods.totp_last_step", "is", null), e("authentication_methods.totp_last_step", "<", r)])).executeTakeFirst()).numUpdatedRows > 0;
+}
+//#endregion
+//#region src/authenticationMethods/index.ts
+function No(e) {
 	return {
 		create: Eo(e),
 		get: Do(e),
 		getByCredentialId: Oo(e),
 		list: ko(e),
 		update: Ao(e),
-		remove: jo(e)
+		remove: jo(e),
+		consumeTotpStep: Mo(e)
 	};
 }
 //#endregion
 //#region src/outbox/getByIds.ts
-function No(e) {
+function Po(e) {
 	return async (t) => t.length === 0 ? [] : (await e.selectFrom("outbox_events").selectAll().where("id", "in", t).execute()).map((e) => ({
 		...JSON.parse(e.payload),
 		id: e.id,
@@ -5545,7 +5563,7 @@ function No(e) {
 }
 //#endregion
 //#region src/outbox/getUnprocessed.ts
-function Po(e) {
+function Fo(e) {
 	return async (t) => {
 		let n = (/* @__PURE__ */ new Date()).toISOString();
 		return (await e.selectFrom("outbox_events").selectAll().where("processed_at", "is", null).where((e) => e.or([e("next_retry_at", "is", null), e("next_retry_at", "<=", n)])).where((e) => e.or([e("claimed_by", "is", null), e("claim_expires_at", "<=", n)])).orderBy("created_at", "asc").orderBy("id", "asc").limit(t).execute()).map((e) => ({
@@ -5561,7 +5579,7 @@ function Po(e) {
 }
 //#endregion
 //#region src/outbox/claimEvents.ts
-function Fo(e) {
+function Io(e) {
 	return async (t, n, r) => {
 		if (t.length === 0) return [];
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = new Date(Date.now() + r).toISOString();
@@ -5573,7 +5591,7 @@ function Fo(e) {
 }
 //#endregion
 //#region src/outbox/markProcessed.ts
-function Io(e) {
+function Lo(e) {
 	return async (t) => {
 		if (t.length === 0) return;
 		let n = (/* @__PURE__ */ new Date()).toISOString();
@@ -5582,7 +5600,7 @@ function Io(e) {
 }
 //#endregion
 //#region src/outbox/markRetry.ts
-function Lo(e) {
+function Ro(e) {
 	return async (t, n, r) => {
 		await e.updateTable("outbox_events").set({
 			error: n,
@@ -5595,7 +5613,7 @@ function Lo(e) {
 }
 //#endregion
 //#region src/outbox/deadLetter.ts
-function Ro(e) {
+function zo(e) {
 	return async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString();
 		await e.updateTable("outbox_events").set({
@@ -5607,7 +5625,7 @@ function Ro(e) {
 }
 //#endregion
 //#region src/outbox/listFailed.ts
-function zo(e) {
+function Bo(e) {
 	let t;
 	try {
 		t = JSON.parse(e.payload);
@@ -5626,7 +5644,7 @@ function zo(e) {
 		final_error: e.final_error
 	}];
 }
-function Bo(e) {
+function Vo(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1 } = n;
 		if (O(n)) {
@@ -5634,7 +5652,7 @@ function Bo(e) {
 				sortColumn: "dead_lettered_at",
 				sortOrder: "desc",
 				idColumn: "id"
-			}), o = r.flatMap(zo);
+			}), o = r.flatMap(Bo);
 			return {
 				events: o,
 				start: 0,
@@ -5643,7 +5661,7 @@ function Bo(e) {
 				next: a
 			};
 		}
-		let o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap(zo), s = o.length;
+		let o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap(Bo), s = o.length;
 		if (a) {
 			let [n] = await e.selectFrom("outbox_events").select((e) => e.fn.countAll().as("total")).where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).execute();
 			s = Number(n?.total ?? o.length);
@@ -5658,7 +5676,7 @@ function Bo(e) {
 }
 //#endregion
 //#region src/outbox/replay.ts
-function Vo(e) {
+function Ho(e) {
 	return async (t, n) => {
 		let r = await e.updateTable("outbox_events").set({
 			processed_at: null,
@@ -5675,7 +5693,7 @@ function Vo(e) {
 }
 //#endregion
 //#region src/outbox/discard.ts
-function Ho(e) {
+function Uo(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("outbox_events").where("id", "=", t).where("tenant_id", "=", n).where("dead_lettered_at", "is not", null).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -5683,7 +5701,7 @@ function Ho(e) {
 }
 //#endregion
 //#region src/outbox/cleanup.ts
-function Uo(e) {
+function Wo(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5691,24 +5709,24 @@ function Uo(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function Wo(e) {
+function Go(e) {
 	return {
 		create: ut(e),
-		getByIds: No(e),
-		getUnprocessed: Po(e),
-		claimEvents: Fo(e),
-		markProcessed: Io(e),
-		markRetry: Lo(e),
-		deadLetter: Ro(e),
-		listFailed: Bo(e),
-		replay: Vo(e),
-		discard: Ho(e),
-		cleanup: Uo(e)
+		getByIds: Po(e),
+		getUnprocessed: Fo(e),
+		claimEvents: Io(e),
+		markProcessed: Lo(e),
+		markRetry: Ro(e),
+		deadLetter: zo(e),
+		listFailed: Vo(e),
+		replay: Ho(e),
+		discard: Uo(e),
+		cleanup: Wo(e)
 	};
 }
 //#endregion
 //#region src/log-streams/index.ts
-function Go(e) {
+function Ko(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5721,7 +5739,7 @@ function Go(e) {
 		updated_at: e.updated_at
 	};
 }
-function Ko(e) {
+function qo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5736,14 +5754,14 @@ function Ko(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("log_streams").values(s).execute(), Go(s);
+			return await e.insertInto("log_streams").values(s).execute(), Ko(s);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("log_streams").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? Go(r) : null;
+			return r ? Ko(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(Go);
+			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(Ko);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5756,7 +5774,7 @@ function Ko(e) {
 }
 //#endregion
 //#region src/migrationSources/index.ts
-function qo(e) {
+function Jo(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5768,7 +5786,7 @@ function qo(e) {
 		updated_at: e.updated_at
 	};
 }
-function Jo(e) {
+function Yo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5782,14 +5800,14 @@ function Jo(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("migration_sources").values(l).execute(), qo(l);
+			return await e.insertInto("migration_sources").values(l).execute(), Jo(l);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("migration_sources").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? qo(r) : null;
+			return r ? Jo(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(qo);
+			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(Jo);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5802,19 +5820,19 @@ function Jo(e) {
 }
 //#endregion
 //#region src/proxyRoutes/serialize.ts
-function Yo(e) {
+function Xo(e) {
 	return {
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: Xo(e.match),
-		handlers: Zo(e.handlers),
+		match: Zo(e.match),
+		handlers: Qo(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function Xo(e) {
+function Zo(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = fe.safeParse(t);
@@ -5822,7 +5840,7 @@ function Xo(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function Zo(e) {
+function Qo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5839,7 +5857,7 @@ function Zo(e) {
 }
 //#endregion
 //#region src/proxyRoutes/adapter.ts
-function Qo(e) {
+function $o(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5865,14 +5883,14 @@ function Qo(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("proxy_routes").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? Yo(r) : null;
+			return r ? Xo(r) : null;
 		},
 		async list(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 50, a = e.selectFrom("proxy_routes").where("tenant_id", "=", t);
 			n.custom_domain_id && (a = a.where("custom_domain_id", "=", n.custom_domain_id));
 			let o = await a.selectAll().orderBy("priority", "asc").orderBy("created_at", "asc").offset(r * i).limit(i).execute();
 			return {
-				proxy_routes: o.map(Yo),
+				proxy_routes: o.map(Xo),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5892,7 +5910,7 @@ function Qo(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function $o(e, t) {
+async function es(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5904,20 +5922,20 @@ async function $o(e, t) {
 		tenant_id: a.tenant_id,
 		custom_domain_id: a.custom_domain_id,
 		domain: a.domain,
-		routes: o.map(Yo)
+		routes: o.map(Xo)
 	};
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function es(e) {
+function ts(e) {
 	return {
-		proxyRoutes: Qo(e),
-		resolveHost: (t) => $o(e, t)
+		proxyRoutes: $o(e),
+		resolveHost: (t) => es(e, t)
 	};
 }
 //#endregion
 //#region src/tokenExchangeProfiles/serialize.ts
-function ts(e) {
+function ns(e) {
 	let t = {
 		id: e.id,
 		name: e.name,
@@ -5927,10 +5945,10 @@ function ts(e) {
 		updated_at: e.updated_at
 	};
 	e.action_id && (t.action_id = e.action_id);
-	let n = ns(e.jwt_verification);
+	let n = rs(e.jwt_verification);
 	return n && (t.jwt_verification = n), t;
 }
-function ns(e) {
+function rs(e) {
 	if (e) try {
 		let t = ke.safeParse(JSON.parse(e));
 		return t.success ? t.data : void 0;
@@ -5940,12 +5958,12 @@ function ns(e) {
 }
 //#endregion
 //#region src/tokenExchangeProfiles/adapter.ts
-var rs = e("0123456789abcdefghijklmnopqrstuvwxyz", 17);
-function is(e) {
+var is = e("0123456789abcdefghijklmnopqrstuvwxyz", 17);
+function as(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
-				id: i?.id ?? `tep_${rs()}`,
+				id: i?.id ?? `tep_${is()}`,
 				tenant_id: t,
 				name: n.name,
 				subject_token_type: n.subject_token_type,
@@ -5955,14 +5973,14 @@ function is(e) {
 				created_at: i?.created_at ?? a,
 				updated_at: i?.updated_at ?? a
 			};
-			return await e.insertInto("token_exchange_profiles").values(o).execute(), ts(o);
+			return await e.insertInto("token_exchange_profiles").values(o).execute(), ns(o);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("token_exchange_profiles").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? ts(r) : null;
+			return r ? ns(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("token_exchange_profiles").where("tenant_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").execute()).map(ts);
+			return (await e.selectFrom("token_exchange_profiles").where("tenant_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").execute()).map(ns);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5978,7 +5996,7 @@ function is(e) {
 }
 //#endregion
 //#region src/scim/adapter.ts
-function as(e) {
+function os(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5993,7 +6011,7 @@ function as(e) {
 		return [];
 	}
 }
-function os(e) {
+function ss(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -6002,16 +6020,16 @@ function os(e) {
 		return [];
 	}
 }
-function ss(e) {
+function cs(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: as(e.mapping),
+		mapping: os(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function cs(e) {
+function ls(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -6032,7 +6050,7 @@ function cs(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
-			return r ? ss(r) : null;
+			return r ? cs(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -6046,18 +6064,18 @@ function cs(e) {
 		}
 	};
 }
-function ls(e) {
+function us(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: os(e.scopes),
+		scopes: ss(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function us(e) {
+function ds(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -6081,14 +6099,14 @@ function us(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
-			return r ? ls(r) : null;
+			return r ? us(r) : null;
 		},
 		async getByHash(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-			return r ? ls(r) : null;
+			return r ? us(r) : null;
 		},
 		async listByConnection(t, n) {
-			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(ls);
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(us);
 		},
 		async markUsed(t, n, r) {
 			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
@@ -6100,7 +6118,7 @@ function us(e) {
 		}
 	};
 }
-function ds(e) {
+function fs(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -6108,7 +6126,7 @@ function ds(e) {
 		created_at: e.created_at
 	};
 }
-function fs(e) {
+function ps(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -6127,11 +6145,11 @@ function fs(e) {
 		},
 		async getByExternalId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
-			return i ? ds(i) : null;
+			return i ? fs(i) : null;
 		},
 		async getByUserId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
-			return i ? ds(i) : null;
+			return i ? fs(i) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
@@ -6141,7 +6159,7 @@ function fs(e) {
 }
 //#endregion
 //#region src/tenantOperations/index.ts
-function ps(e) {
+function ms(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -6163,8 +6181,8 @@ function G(e) {
 		target_database_version: e.target_database_version,
 		error: e.error,
 		initiated_by: e.initiated_by,
-		input: ps(e.input),
-		result: ps(e.result),
+		input: ms(e.input),
+		result: ms(e.result),
 		claimed_by: e.claimed_by,
 		claim_expires_at: e.claim_expires_at,
 		created_at: e.created_at,
@@ -6172,7 +6190,7 @@ function G(e) {
 		finished_at: e.finished_at
 	});
 }
-function ms(e) {
+function hs(e) {
 	return {
 		async create(n) {
 			let r = Te.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -6255,27 +6273,27 @@ function ms(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var hs = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", gs = 32, _s = 10, vs = 4, ys = 10;
-function bs(e, t) {
+var gs = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", _s = 32, vs = 10, ys = 4, bs = 10;
+function xs(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = hs.charAt(e % gs) + n, e = Math.floor(e / gs);
+	for (let r = t; r > 0; r--) n = gs.charAt(e % _s) + n, e = Math.floor(e / _s);
 	return n;
 }
-function xs() {
-	let e = new Uint8Array(ys);
+function Ss() {
+	let e = new Uint8Array(bs);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < ys; n++) t += hs.charAt(e[n] % gs);
+	for (let n = 0; n < bs; n++) t += gs.charAt(e[n] % _s);
 	return t;
 }
-var Ss = 0, Cs = 0;
-function ws() {
+var Cs = 0, ws = 0;
+function Ts() {
 	let e = Date.now();
-	return e === Ss ? Cs++ : (Ss = e, Cs = 0), bs(e, _s) + bs(Cs, vs) + xs();
+	return e === Cs ? ws++ : (Cs = e, ws = 0), xs(e, vs) + xs(ws, ys) + Ss();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function Ts(e) {
+function Es(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -6283,22 +6301,22 @@ function Ts(e) {
 	} catch {}
 	return null;
 }
-function Es(e) {
+function Ds(e) {
 	return we.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: Ts(e.detail),
+		detail: Es(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function Ds(e) {
+function Os(e) {
 	return {
 		async create(t) {
 			let n = Ce.parse(t), r = {
-				id: `evt_${ws()}`,
+				id: `evt_${Ts()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -6306,12 +6324,12 @@ function Ds(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), Es(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), Ds(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(Es),
+				events: a.map(Ds),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -6321,16 +6339,16 @@ function Ds(e) {
 }
 //#endregion
 //#region src/tenantOperationRows/index.ts
-var Os = 50;
-function ks(e) {
+var ks = 50;
+function As(e) {
 	let t = JSON.parse(e);
 	return t && typeof t == "object" && !Array.isArray(t) ? Object.fromEntries(Object.entries(t)) : {};
 }
-function As(e) {
+function js(e) {
 	return De.parse({
 		operation_id: e.operation_id,
 		seq: e.seq,
-		payload: ks(e.payload),
+		payload: As(e.payload),
 		status: e.status,
 		error_code: e.error_code,
 		error_message: e.error_message,
@@ -6340,7 +6358,7 @@ function As(e) {
 		updated_at: e.updated_at
 	});
 }
-function js(e) {
+function Ms(e) {
 	return {
 		async createMany(t) {
 			if (t.length === 0) return 0;
@@ -6359,11 +6377,11 @@ function js(e) {
 					updated_at: n
 				};
 			});
-			for (let t = 0; t < r.length; t += Os) await e.insertInto("tenant_operation_rows").values(r.slice(t, t + Os)).execute();
+			for (let t = 0; t < r.length; t += ks) await e.insertInto("tenant_operation_rows").values(r.slice(t, t + ks)).execute();
 			return r.length;
 		},
 		async claimPending(t, n) {
-			return (await e.selectFrom("tenant_operation_rows").where("operation_id", "=", t).where("status", "=", "pending").selectAll().orderBy("seq", "asc").limit(n).execute()).map(As);
+			return (await e.selectFrom("tenant_operation_rows").where("operation_id", "=", t).where("status", "=", "pending").selectAll().orderBy("seq", "asc").limit(n).execute()).map(js);
 		},
 		async recordOutcomes(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = 0;
@@ -6412,7 +6430,7 @@ function js(e) {
 			}
 			let o = await a.selectAll().orderBy("seq", "asc").offset(r * i).limit(i).execute();
 			return {
-				rows: o.map(As),
+				rows: o.map(js),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -6426,7 +6444,7 @@ function js(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function Ms(e) {
+function Ns(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -6434,7 +6452,7 @@ function Ms(e) {
 		return null;
 	}
 }
-function Ns(e) {
+function Ps(e) {
 	return _e.parse({
 		id: e.id,
 		kind: e.kind,
@@ -6442,17 +6460,17 @@ function Ns(e) {
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: Ms(e.canary_tenant_ids),
-		filter: Ms(e.filter),
+		canary_tenant_ids: Ns(e.canary_tenant_ids),
+		filter: Ns(e.filter),
 		initiated_by: e.initiated_by,
-		config: Ms(e.config),
+		config: Ns(e.config),
 		paused_reason: e.paused_reason,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function Ps(e) {
+function Fs(e) {
 	return {
 		async create(n) {
 			let r = ge.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -6471,11 +6489,11 @@ function Ps(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("rollouts").values(a).execute(), Ns(a);
+			return await e.insertInto("rollouts").values(a).execute(), Ps(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("rollouts").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? Ns(n) : null;
+			return n ? Ps(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = e.selectFrom("rollouts");
@@ -6485,7 +6503,7 @@ function Ps(e) {
 			}
 			let a = await i.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: a.map(Ns),
+				rollouts: a.map(Ps),
 				start: n * r,
 				limit: r,
 				length: a.length
@@ -6505,7 +6523,7 @@ function Ps(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var Fs = class {
+var Is = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -6513,10 +6531,10 @@ var Fs = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, Is = /* @__PURE__ */ w({
-	down: () => Bs,
-	up: () => zs
-}), Ls = [
+}, Ls = /* @__PURE__ */ w({
+	down: () => Vs,
+	up: () => Bs
+}), Rs = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -6782,7 +6800,7 @@ var Fs = class {
 		onDelete: "cascade"
 	}
 ];
-async function Rs(e) {
+async function zs(e) {
 	try {
 		return await p`select sqlite_version()`.execute(e), !0;
 	} catch {
@@ -6791,14 +6809,14 @@ async function Rs(e) {
 }
 function K(e, t) {
 	let n = e;
-	for (let e of Ls) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of Rs) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function zs(e) {
-	let t = await Rs(e);
+async function Bs(e) {
+	let t = await zs(e);
 	await e.schema.createTable("tenants").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("audience", p`varchar(255)`).addColumn("sender_email", p`varchar(255)`).addColumn("sender_name", p`varchar(255)`).addColumn("created_at", p`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(255)`, (e) => e.notNull()).addColumn("support_url", p`varchar(255)`).addColumn("idle_session_lifetime", p`int`).addColumn("session_lifetime", p`int`).addColumn("session_cookie", p`text`).addColumn("allowed_logout_urls", p`text`).addColumn("ephemeral_session_lifetime", p`int`).addColumn("idle_ephemeral_session_lifetime", p`int`).addColumn("default_redirection_uri", p`text`).addColumn("enabled_locales", p`text`).addColumn("default_directory", p`varchar(255)`).addColumn("error_page", p`text`).addColumn("flags", p`text`).addColumn("friendly_name", p`varchar(255)`).addColumn("picture_url", p`text`).addColumn("support_email", p`varchar(255)`).addColumn("sandbox_version", p`varchar(50)`).addColumn("sandbox_versions_available", p`text`).addColumn("legacy_sandbox_version", p`varchar(50)`).addColumn("change_password", p`text`).addColumn("guardian_mfa_page", p`text`).addColumn("device_flow", p`text`).addColumn("default_token_quota", p`text`).addColumn("default_audience", p`varchar(255)`).addColumn("default_organization", p`varchar(255)`).addColumn("sessions", p`text`).addColumn("oidc_logout", p`text`).addColumn("allow_organization_name_in_authentication_api", p`int`).addColumn("customize_mfa_in_postlogin_action", p`int`).addColumn("acr_values_supported", p`text`).addColumn("mtls", p`text`).addColumn("pushed_authorization_requests_supported", p`int`).addColumn("authorization_response_iss_parameter_supported", p`int`).addColumn("mfa", p`text`).addColumn("attack_protection", p`text`).addColumn("default_client_id", p`varchar(255)`).addColumn("deployment_type", p`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", p`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", p`varchar(2048)`).addColumn("provisioning_state_changed_at", p`varchar(35)`).addColumn("bundle_configuration", p`varchar(64)`).addColumn("worker_version", p`varchar(64)`).addColumn("worker_script_name", p`varchar(255)`).addColumn("storage_kind", p`varchar(32)`).addColumn("d1_database_id", p`varchar(64)`).addColumn("database_version", p`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", p`varchar(64)`, (e) => e.notNull()).addColumn("status", p`varchar(32)`, (e) => e.notNull()).addColumn("results", p`text`, (e) => e.notNull()).addColumn("logs", p`text`).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("action_id", p`varchar(255)`, (e) => e.notNull()).addColumn("number", p`int`, (e) => e.notNull()).addColumn("code", p`text`, (e) => e.notNull()).addColumn("runtime", p`varchar(50)`).addColumn("secrets", p`text`).addColumn("dependencies", p`text`).addColumn("supported_triggers", p`text`).addColumn("deployed", p`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("name", p`varchar(255)`, (e) => e.notNull()).addColumn("code", p`text`, (e) => e.notNull()).addColumn("runtime", p`varchar(50)`).addColumn("status", p`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", p`text`).addColumn("dependencies", p`text`).addColumn("supported_triggers", p`text`).addColumn("deployed_at_ts", p`bigint`).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addColumn("is_system", p`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", p`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", p`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("user_id", p`varchar(255)`, (e) => e.notNull()).addColumn("type", p`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", p`varchar(32)`).addColumn("totp_secret", p`varchar(255)`).addColumn("confirmed", p`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addColumn("credential_id", p`varchar(512)`).addColumn("public_key", p`text`).addColumn("sign_count", p`int`).addColumn("credential_backed_up", p`int`).addColumn("transports", p`varchar(512)`).addColumn("friendly_name", p`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
@@ -6985,40 +7003,40 @@ async function zs(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Ls) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Rs) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function Bs(e) {
+async function Vs(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var Vs = !1;
-function Hs(e) {
-	Vs = e;
+var Hs = !1;
+function Us(e) {
+	Hs = e;
 }
 function q(...e) {
-	Vs && console.log(...e);
+	Hs && console.log(...e);
 }
 function J(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var Us = /* @__PURE__ */ w({
-	down: () => ec,
-	up: () => Zs
-}), Ws = 5e4, Gs = 500;
-async function Ks(e) {
+var Ws = /* @__PURE__ */ w({
+	down: () => tc,
+	up: () => Qs
+}), Gs = 5e4, Ks = 500;
+async function qs(e) {
 	try {
 		return await p`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function qs(e, t, n) {
+async function Js(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
@@ -7029,7 +7047,7 @@ async function qs(e, t, n) {
 		throw e;
 	}
 }
-async function Js(e, t, n, r) {
+async function Ys(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -7040,21 +7058,21 @@ async function Js(e, t, n, r) {
 		throw e;
 	}
 }
-async function Ys(e, t) {
+async function Xs(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
 		r = Number(t.numDeletedRows);
 	} else {
-		let t = Ws;
-		for (; t >= Ws;) {
-			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(Ws).executeTakeFirst();
+		let t = Gs;
+		for (; t >= Gs;) {
+			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(Gs).executeTakeFirst();
 			t = Number(i.numDeletedRows), r += t, t > 0 && q(`  Pruned ${r} expired codes row(s)...`);
 		}
 	}
 	return r;
 }
-async function Xs(e) {
+async function Zs(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -7062,33 +7080,33 @@ async function Xs(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(Gs).execute();
+		]).where("expires_at_ts", "is", null).limit(Ks).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < Gs) break;
+		if (t += n.length, n.length < Ks) break;
 	}
 	return t;
 }
-async function Zs(e) {
-	let t = await Ks(e);
+async function Qs(e) {
+	let t = await qs(e);
 	try {
-		let n = await Ys(e, t);
+		let n = await Xs(e, t);
 		q(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
 		J(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await qs(e, "codes", "expires_at_ts"), await Js(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await Js(e, "codes", "expires_at_ts"), await Ys(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await Xs(e);
+		let t = await Zs(e);
 		q(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
 		J(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function Qs(e, t, n) {
+async function $s(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -7096,7 +7114,7 @@ async function Qs(e, t, n) {
 		throw e;
 	}
 }
-async function $s(e, t, n) {
+async function ec(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -7104,16 +7122,16 @@ async function $s(e, t, n) {
 		throw e;
 	}
 }
-async function ec(e) {
-	await Qs(e, "idx_codes_expires_at_ts", "codes"), await $s(e, "codes", "expires_at_ts");
+async function tc(e) {
+	await $s(e, "idx_codes_expires_at_ts", "codes"), await ec(e, "codes", "expires_at_ts");
 }
 //#endregion
 //#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
-var tc = /* @__PURE__ */ w({
-	down: () => rc,
-	up: () => nc
+var nc = /* @__PURE__ */ w({
+	down: () => ic,
+	up: () => rc
 });
-async function nc(e) {
+async function rc(e) {
 	await e.schema.createTable("scim_configurations").addColumn("connection_id", p`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", p`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", p`text`, (e) => e.notNull()).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", p`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", p`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", p`varchar(128)`, (e) => e.notNull()).addColumn("scopes", p`text`, (e) => e.notNull()).addColumn("valid_until", p`varchar(35)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", p`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", p`varchar(255)`, (e) => e.notNull()).addColumn("external_id", p`varchar(255)`, (e) => e.notNull()).addColumn("user_id", p`varchar(255)`, (e) => e.notNull()).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
 		"tenant_id",
 		"connection_id",
@@ -7124,16 +7142,16 @@ async function nc(e) {
 		"external_id"
 	]).unique().execute();
 }
-async function rc(e) {
+async function ic(e) {
 	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
-var ic = /* @__PURE__ */ w({
-	down: () => cc,
-	up: () => oc
+var ac = /* @__PURE__ */ w({
+	down: () => lc,
+	up: () => sc
 });
-async function ac(e, t, n) {
+async function oc(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, p`tinyint(1)`).execute();
 	} catch (e) {
@@ -7141,10 +7159,10 @@ async function ac(e, t, n) {
 		throw e;
 	}
 }
-async function oc(e) {
-	await ac(e, "users", "blocked");
+async function sc(e) {
+	await oc(e, "users", "blocked");
 }
-async function sc(e, t, n) {
+async function cc(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -7152,16 +7170,16 @@ async function sc(e, t, n) {
 		throw e;
 	}
 }
-async function cc(e) {
-	await sc(e, "users", "blocked");
+async function lc(e) {
+	await cc(e, "users", "blocked");
 }
 //#endregion
 //#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
-var lc = /* @__PURE__ */ w({
-	down: () => pc,
-	up: () => dc
+var uc = /* @__PURE__ */ w({
+	down: () => mc,
+	up: () => fc
 });
-async function uc(e, t, n) {
+async function dc(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, p`tinyint(1)`).execute();
 	} catch (e) {
@@ -7169,10 +7187,10 @@ async function uc(e, t, n) {
 		throw e;
 	}
 }
-async function dc(e) {
-	await uc(e, "prompt_settings", "show_last_used_connection");
+async function fc(e) {
+	await dc(e, "prompt_settings", "show_last_used_connection");
 }
-async function fc(e, t, n) {
+async function pc(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -7180,16 +7198,16 @@ async function fc(e, t, n) {
 		throw e;
 	}
 }
-async function pc(e) {
-	await fc(e, "prompt_settings", "show_last_used_connection");
+async function mc(e) {
+	await pc(e, "prompt_settings", "show_last_used_connection");
 }
 //#endregion
 //#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
-var mc = /* @__PURE__ */ w({
-	down: () => _c,
-	up: () => gc
+var hc = /* @__PURE__ */ w({
+	down: () => vc,
+	up: () => _c
 });
-async function hc(e, t, n, r) {
+async function gc(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -7200,10 +7218,10 @@ async function hc(e, t, n, r) {
 		throw e;
 	}
 }
-async function gc(e) {
-	await hc(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
-}
 async function _c(e) {
+	await gc(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+}
+async function vc(e) {
 	try {
 		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
 	} catch (e) {
@@ -7213,11 +7231,11 @@ async function _c(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-08-11T12:00:00_page_hooks.ts
-var vc = /* @__PURE__ */ w({
-	down: () => Sc,
-	up: () => bc
+var yc = /* @__PURE__ */ w({
+	down: () => Cc,
+	up: () => xc
 });
-async function yc(e, t, n, r) {
+async function bc(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -7225,10 +7243,10 @@ async function yc(e, t, n, r) {
 		throw e;
 	}
 }
-async function bc(e) {
-	await yc(e, "hooks", "page_id", p`varchar(64)`), await yc(e, "hooks", "permission_required", p`varchar(255)`);
+async function xc(e) {
+	await bc(e, "hooks", "page_id", p`varchar(64)`), await bc(e, "hooks", "permission_required", p`varchar(255)`);
 }
-async function xc(e, t, n) {
+async function Sc(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -7236,22 +7254,22 @@ async function xc(e, t, n) {
 		throw e;
 	}
 }
-async function Sc(e) {
-	await xc(e, "hooks", "permission_required"), await xc(e, "hooks", "page_id");
+async function Cc(e) {
+	await Sc(e, "hooks", "permission_required"), await Sc(e, "hooks", "page_id");
 }
 //#endregion
 //#region migrate/migrations/2026-08-20T12:00:00_refresh_token_session_id.ts
-var Cc = /* @__PURE__ */ w({
-	down: () => kc,
-	up: () => Dc
-}), wc = [
+var wc = /* @__PURE__ */ w({
+	down: () => Ac,
+	up: () => Oc
+}), Tc = [
 	["session_id", p`varchar(26)`],
 	["organization", p`varchar(191)`],
 	["auth_connection", p`varchar(255)`],
 	["auth_strategy_strategy", p`varchar(64)`],
 	["auth_strategy_strategy_type", p`varchar(64)`]
 ];
-async function Tc(e, t, n, r) {
+async function Ec(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -7259,7 +7277,7 @@ async function Tc(e, t, n, r) {
 		throw e;
 	}
 }
-async function Ec(e) {
+async function Dc(e) {
 	try {
 		await e.schema.createIndex("idx_refresh_tokens_session_id").on("refresh_tokens").columns(["tenant_id", "session_id"]).execute();
 	} catch (e) {
@@ -7267,11 +7285,11 @@ async function Ec(e) {
 		throw e;
 	}
 }
-async function Dc(e) {
-	for (let [t, n] of wc) await Tc(e, "refresh_tokens", t, n);
-	await Ec(e);
+async function Oc(e) {
+	for (let [t, n] of Tc) await Ec(e, "refresh_tokens", t, n);
+	await Dc(e);
 }
-async function Oc(e, t, n) {
+async function kc(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -7279,23 +7297,23 @@ async function Oc(e, t, n) {
 		throw e;
 	}
 }
-async function kc(e) {
+async function Ac(e) {
 	try {
 		await e.schema.dropIndex("idx_refresh_tokens_session_id").execute();
 	} catch {}
-	for (let [t] of wc) await Oc(e, "refresh_tokens", t);
+	for (let [t] of Tc) await kc(e, "refresh_tokens", t);
 }
 //#endregion
 //#region migrate/migrations/2026-08-21T12:00:00_refresh_token_session_id_backfill.ts
-var Ac = /* @__PURE__ */ w({
-	down: () => Ic,
-	up: () => Fc
-}), jc = 500, Mc = 20, Nc = 500, Pc = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
-async function Fc(e) {
+var jc = /* @__PURE__ */ w({
+	down: () => Lc,
+	up: () => Ic
+}), Mc = 500, Nc = 20, Pc = 500, Fc = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
+async function Ic(e) {
 	try {
 		let t = await e.selectFrom("refresh_tokens").innerJoin("login_sessions", "login_sessions.id", "refresh_tokens.login_id").whereRef("login_sessions.tenant_id", "=", "refresh_tokens.tenant_id").where("refresh_tokens.session_id", "is", null).where("login_sessions.session_id", "is not", null).select((e) => e.fn.countAll().as("count")).executeTakeFirst(), n = Number(t?.count ?? 0);
-		if (n > Nc) {
-			J(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${Nc}. SKIPPING — run the bulk path instead: ${Pc}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
+		if (n > Pc) {
+			J(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${Pc}. SKIPPING — run the bulk path instead: ${Fc}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
 			return;
 		}
 		if (n === 0) {
@@ -7312,10 +7330,10 @@ async function Fc(e) {
 				"login_sessions.auth_strategy_strategy as ls_strategy",
 				"login_sessions.auth_strategy_strategy_type as ls_strategy_type",
 				"login_sessions.auth_params as ls_auth_params"
-			]).limit(jc).execute();
+			]).limit(Mc).execute();
 			if (t.length === 0) break;
-			for (let n = 0; n < t.length; n += Mc) {
-				let r = t.slice(n, n + Mc);
+			for (let n = 0; n < t.length; n += Nc) {
+				let r = t.slice(n, n + Nc);
 				await Promise.all(r.map(async (t) => {
 					let n = null;
 					if (t.ls_auth_params) try {
@@ -7332,19 +7350,19 @@ async function Fc(e) {
 					}).where("tenant_id", "=", t.tenant_id).where("id", "=", t.id).execute();
 				}));
 			}
-			if (r += t.length, q(`refresh_tokens backfill: ${r} rows populated so far`), t.length < jc) break;
+			if (r += t.length, q(`refresh_tokens backfill: ${r} rows populated so far`), t.length < Mc) break;
 		}
 		q(`refresh_tokens backfill: done, ${r} rows updated`);
 	} catch (e) {
 		throw J("refresh_tokens backfill failed:", e), e;
 	}
 }
-async function Ic() {}
+async function Lc() {}
 //#endregion
 //#region migrate/migrations/2026-09-01T12:00:00_tenant_operation_rows.ts
-var Lc = /* @__PURE__ */ w({
-	down: () => Bc,
-	up: () => zc
+var Rc = /* @__PURE__ */ w({
+	down: () => Vc,
+	up: () => Bc
 });
 async function Y(e, t, n, r) {
 	try {
@@ -7354,7 +7372,7 @@ async function Y(e, t, n, r) {
 		throw e;
 	}
 }
-async function Rc(e, t, n, r) {
+async function zc(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).columns(r).execute();
 	} catch (e) {
@@ -7362,12 +7380,12 @@ async function Rc(e, t, n, r) {
 		throw e;
 	}
 }
-async function zc(e) {
-	await Y(e, "tenant_operations", "input", p`text`), await Y(e, "tenant_operations", "result", p`text`), await Y(e, "tenant_operations", "claimed_by", p`varchar(255)`), await Y(e, "tenant_operations", "claim_expires_at", p`varchar(35)`), await e.schema.createTable("tenant_operation_rows").ifNotExists().addColumn("operation_id", p`varchar(255)`, (e) => e.notNull()).addColumn("seq", p`int`, (e) => e.notNull()).addColumn("payload", p`text`, (e) => e.notNull()).addColumn("status", p`varchar(32)`, (e) => e.notNull()).addColumn("error_code", p`varchar(64)`).addColumn("error_message", p`text`).addColumn("error_path", p`varchar(255)`).addColumn("entity_id", p`varchar(255)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_rows_pk", ["operation_id", "seq"]).execute(), await Rc(e, "tenant_operation_rows_operation_status_seq_idx", "tenant_operation_rows", [
+async function Bc(e) {
+	await Y(e, "tenant_operations", "input", p`text`), await Y(e, "tenant_operations", "result", p`text`), await Y(e, "tenant_operations", "claimed_by", p`varchar(255)`), await Y(e, "tenant_operations", "claim_expires_at", p`varchar(35)`), await e.schema.createTable("tenant_operation_rows").ifNotExists().addColumn("operation_id", p`varchar(255)`, (e) => e.notNull()).addColumn("seq", p`int`, (e) => e.notNull()).addColumn("payload", p`text`, (e) => e.notNull()).addColumn("status", p`varchar(32)`, (e) => e.notNull()).addColumn("error_code", p`varchar(64)`).addColumn("error_message", p`text`).addColumn("error_path", p`varchar(255)`).addColumn("entity_id", p`varchar(255)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_rows_pk", ["operation_id", "seq"]).execute(), await zc(e, "tenant_operation_rows_operation_status_seq_idx", "tenant_operation_rows", [
 		"operation_id",
 		"status",
 		"seq"
-	]), await Rc(e, "tenant_operations_kind_status_created_at_idx", "tenant_operations", [
+	]), await zc(e, "tenant_operations_kind_status_created_at_idx", "tenant_operations", [
 		"kind",
 		"status",
 		"created_at"
@@ -7381,7 +7399,7 @@ async function X(e, t, n) {
 		throw e;
 	}
 }
-async function Bc(e) {
+async function Vc(e) {
 	try {
 		await e.schema.dropIndex("tenant_operations_kind_status_created_at_idx").on("tenant_operations").execute();
 	} catch {}
@@ -7389,11 +7407,11 @@ async function Bc(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-09-25T12:00:00_token_exchange_profiles.ts
-var Vc = /* @__PURE__ */ w({
-	down: () => Gc,
-	up: () => Wc
+var Hc = /* @__PURE__ */ w({
+	down: () => Kc,
+	up: () => Gc
 });
-async function Hc(e, t, n, r) {
+async function Uc(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -7401,7 +7419,7 @@ async function Hc(e, t, n, r) {
 		throw e;
 	}
 }
-async function Uc(e, t, n, r) {
+async function Wc(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).columns(r).unique().execute();
 	} catch (e) {
@@ -7409,10 +7427,10 @@ async function Uc(e, t, n, r) {
 		throw e;
 	}
 }
-async function Wc(e) {
-	await e.schema.createTable("token_exchange_profiles").ifNotExists().addColumn("id", p`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("name", p`varchar(255)`, (e) => e.notNull()).addColumn("subject_token_type", p`varchar(255)`, (e) => e.notNull()).addColumn("action_id", p`varchar(255)`).addColumn("type", p`varchar(64)`, (e) => e.notNull()).addColumn("jwt_verification", p`text`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("token_exchange_profiles_pk", ["id"]).execute(), await Uc(e, "token_exchange_profiles_tenant_subject_token_type_idx", "token_exchange_profiles", ["tenant_id", "subject_token_type"]), await Hc(e, "clients", "token_exchange", p`text`);
-}
 async function Gc(e) {
+	await e.schema.createTable("token_exchange_profiles").ifNotExists().addColumn("id", p`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("name", p`varchar(255)`, (e) => e.notNull()).addColumn("subject_token_type", p`varchar(255)`, (e) => e.notNull()).addColumn("action_id", p`varchar(255)`).addColumn("type", p`varchar(64)`, (e) => e.notNull()).addColumn("jwt_verification", p`text`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("token_exchange_profiles_pk", ["id"]).execute(), await Wc(e, "token_exchange_profiles_tenant_subject_token_type_idx", "token_exchange_profiles", ["tenant_id", "subject_token_type"]), await Uc(e, "clients", "token_exchange", p`text`);
+}
+async function Kc(e) {
 	await e.schema.dropTable("token_exchange_profiles").ifExists().execute();
 	try {
 		await e.schema.alterTable("clients").dropColumn("token_exchange").execute();
@@ -7423,22 +7441,22 @@ async function Gc(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-10-13T12:00:00_prompt_partials.ts
-var Kc = /* @__PURE__ */ w({
-	down: () => Jc,
-	up: () => qc
+var qc = /* @__PURE__ */ w({
+	down: () => Yc,
+	up: () => Jc
 });
-async function qc(e) {
+async function Jc(e) {
 	await e.schema.createTable("prompt_partials").ifNotExists().addColumn("tenant_id", p`varchar(191)`, (e) => e.notNull()).addColumn("prompt", p`varchar(64)`, (e) => e.notNull()).addColumn("body", p`text`, (e) => e.notNull()).addColumn("created_at_ts", p`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", p`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("prompt_partials_pk", ["tenant_id", "prompt"]).execute();
 }
-async function Jc(e) {
+async function Yc(e) {
 	await e.schema.dropTable("prompt_partials").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-10-21T12:00:00_config_inheritance.ts
-var Yc = /* @__PURE__ */ w({
-	down: () => Qc,
-	up: () => Zc
-}), Xc = [
+var Xc = /* @__PURE__ */ w({
+	down: () => $c,
+	up: () => Qc
+}), Zc = [
 	"connections",
 	"actions",
 	"hooks",
@@ -7463,9 +7481,9 @@ async function Q(e, t, n) {
 		throw e;
 	}
 }
-async function Zc(e) {
+async function Qc(e) {
 	await Z(e, "tenants", "parent_tenant_id", p`varchar(191)`);
-	for (let t of Xc) await Z(e, t, "scope", p`varchar(16)`), await Z(e, t, "override", p`varchar(16)`), await Z(e, t, "enforce", p`tinyint(1)`);
+	for (let t of Zc) await Z(e, t, "scope", p`varchar(16)`), await Z(e, t, "override", p`varchar(16)`), await Z(e, t, "enforce", p`tinyint(1)`);
 	for (let t of [
 		"connections",
 		"actions",
@@ -7473,17 +7491,17 @@ async function Zc(e) {
 	]) await p`UPDATE ${p.table(t)} SET scope = 'shared', override = 'none' WHERE is_system = 1 AND scope IS NULL`.execute(e);
 	await p`UPDATE hooks SET scope = 'shared', override = 'none' WHERE scope IS NULL AND REPLACE(REPLACE(REPLACE(REPLACE(metadata, ' ', ''), CHAR(10), ''), CHAR(13), ''), CHAR(9), '') LIKE '%"inheritable":true%'`.execute(e);
 }
-async function Qc(e) {
-	for (let t of Xc) await Q(e, t, "enforce"), await Q(e, t, "override"), await Q(e, t, "scope");
+async function $c(e) {
+	for (let t of Zc) await Q(e, t, "enforce"), await Q(e, t, "override"), await Q(e, t, "scope");
 	await Q(e, "tenants", "parent_tenant_id");
 }
 //#endregion
 //#region migrate/migrations/2026-10-26T12:00:00_config_sync_hash.ts
-var $c = /* @__PURE__ */ w({
-	down: () => rl,
-	up: () => nl
+var el = /* @__PURE__ */ w({
+	down: () => il,
+	up: () => rl
 });
-async function el(e, t, n) {
+async function tl(e, t, n) {
 	try {
 		await e.schema.alterTable("tenants").addColumn(t, n).execute();
 	} catch (e) {
@@ -7491,7 +7509,7 @@ async function el(e, t, n) {
 		throw e;
 	}
 }
-async function tl(e, t) {
+async function nl(e, t) {
 	try {
 		await e.schema.alterTable("tenants").dropColumn(t).execute();
 	} catch (e) {
@@ -7499,19 +7517,19 @@ async function tl(e, t) {
 		throw e;
 	}
 }
-async function nl(e) {
-	await el(e, "config_sync_hash", p`varchar(64)`), await el(e, "config_synced_at", p`varchar(35)`);
-}
 async function rl(e) {
-	await tl(e, "config_synced_at"), await tl(e, "config_sync_hash");
+	await tl(e, "config_sync_hash", p`varchar(64)`), await tl(e, "config_synced_at", p`varchar(35)`);
+}
+async function il(e) {
+	await nl(e, "config_synced_at"), await nl(e, "config_sync_hash");
 }
 //#endregion
 //#region migrate/migrations/2026-10-27T12:00:00_config_sync_mode.ts
-var il = /* @__PURE__ */ w({
-	down: () => cl,
-	up: () => sl
+var al = /* @__PURE__ */ w({
+	down: () => ll,
+	up: () => cl
 });
-async function al(e) {
+async function ol(e) {
 	try {
 		await e.schema.alterTable("tenants").addColumn("config_sync", p`varchar(16)`).execute();
 	} catch (e) {
@@ -7519,7 +7537,7 @@ async function al(e) {
 		throw e;
 	}
 }
-async function ol(e) {
+async function sl(e) {
 	try {
 		await e.schema.alterTable("tenants").dropColumn("config_sync").execute();
 	} catch (e) {
@@ -7527,19 +7545,19 @@ async function ol(e) {
 		throw e;
 	}
 }
-async function sl(e) {
-	await al(e);
-}
 async function cl(e) {
 	await ol(e);
 }
+async function ll(e) {
+	await sl(e);
+}
 //#endregion
 //#region migrate/migrations/2026-10-28T12:00:00_rollout_config.ts
-var ll = /* @__PURE__ */ w({
-	down: () => pl,
-	up: () => fl
+var ul = /* @__PURE__ */ w({
+	down: () => ml,
+	up: () => pl
 });
-async function ul(e, t, n) {
+async function dl(e, t, n) {
 	try {
 		await e.schema.alterTable("rollouts").addColumn(t, n).execute();
 	} catch (e) {
@@ -7547,7 +7565,7 @@ async function ul(e, t, n) {
 		throw e;
 	}
 }
-async function dl(e, t) {
+async function fl(e, t) {
 	try {
 		await e.schema.alterTable("rollouts").dropColumn(t).execute();
 	} catch (e) {
@@ -7555,79 +7573,137 @@ async function dl(e, t) {
 		throw e;
 	}
 }
-async function fl(e) {
-	await ul(e, "config", p`text`), await ul(e, "paused_reason", p`text`);
-}
 async function pl(e) {
-	await dl(e, "paused_reason"), await dl(e, "config");
+	await dl(e, "config", p`text`), await dl(e, "paused_reason", p`text`);
+}
+async function ml(e) {
+	await fl(e, "paused_reason"), await fl(e, "config");
 }
 //#endregion
 //#region migrate/migrations/2026-10-29T12:00:00_device_codes.ts
-var ml = /* @__PURE__ */ w({
-	down: () => gl,
-	up: () => hl
+var hl = /* @__PURE__ */ w({
+	down: () => _l,
+	up: () => gl
 });
-async function hl(e) {
+async function gl(e) {
 	await e.schema.createTable("device_codes").addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("device_code_hash", p`varchar(64)`, (e) => e.notNull()).addColumn("user_code_hash", p`varchar(64)`, (e) => e.notNull()).addColumn("client_id", p`varchar(255)`, (e) => e.notNull()).addColumn("scope", p`text`).addColumn("audience", p`text`).addColumn("status", p`varchar(16)`, (e) => e.notNull()).addColumn("login_id", p`varchar(255)`).addColumn("expires_at", p`varchar(35)`, (e) => e.notNull()).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("last_polled_at", p`varchar(35)`).addColumn("interval", "integer", (e) => e.notNull()).addColumn("version", "integer", (e) => e.notNull()).addPrimaryKeyConstraint("device_codes_pk", ["tenant_id", "device_code_hash"]).addUniqueConstraint("device_codes_user_code_idx", ["tenant_id", "user_code_hash"]).execute(), await e.schema.createIndex("device_codes_expiry_idx").on("device_codes").column("expires_at").execute(), await e.schema.createTable("device_flow_limits").addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("key", p`varchar(255)`, (e) => e.notNull()).addColumn("attempts", "integer", (e) => e.notNull()).addColumn("expires_at", p`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("device_flow_limits_pk", ["tenant_id", "key"]).execute(), await e.schema.createIndex("device_flow_limits_expiry_idx").on("device_flow_limits").column("expires_at").execute();
 }
-async function gl(e) {
+async function _l(e) {
 	await e.schema.dropTable("device_flow_limits").execute(), await e.schema.dropTable("device_codes").execute();
 }
 //#endregion
 //#region migrate/migrations/2026-10-30T12:00:00_tenant_member_requests.ts
-var _l = /* @__PURE__ */ w({
-	down: () => yl,
-	up: () => vl
+var vl = /* @__PURE__ */ w({
+	down: () => bl,
+	up: () => yl
 });
-async function vl(e) {
+async function yl(e) {
 	await e.schema.createTable("tenant_member_requests").addColumn("tenant_id", p`varchar(255)`, (e) => e.notNull()).addColumn("id", p`varchar(255)`, (e) => e.notNull()).addColumn("kind", p`varchar(32)`, (e) => e.notNull()).addColumn("status", p`varchar(16)`, (e) => e.notNull()).addColumn("requested_by", p`varchar(255)`, (e) => e.notNull()).addColumn("payload", p`text`, (e) => e.notNull()).addColumn("result", p`text`).addColumn("error", p`text`).addColumn("notified_at", p`varchar(35)`).addColumn("created_at", p`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", p`varchar(35)`, (e) => e.notNull()).addColumn("finished_at", p`varchar(35)`).addPrimaryKeyConstraint("tenant_member_requests_pk", ["tenant_id", "id"]).execute(), await e.schema.createIndex("tenant_member_requests_status_idx").on("tenant_member_requests").columns([
 		"tenant_id",
 		"status",
 		"created_at"
 	]).execute(), await e.schema.createIndex("tenant_member_requests_finished_idx").on("tenant_member_requests").column("finished_at").execute();
 }
-async function yl(e) {
+async function bl(e) {
 	await e.schema.dropTable("tenant_member_requests").execute();
 }
 //#endregion
+//#region migrate/migrations/2026-11-05T12:00:00_session_authentication.ts
+var xl = /* @__PURE__ */ w({
+	down: () => Tl,
+	up: () => Cl
+});
+async function Sl(e, t, n) {
+	try {
+		await e.schema.alterTable(t).addColumn(n, p`text`).execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function Cl(e) {
+	await Sl(e, "sessions", "authentication");
+}
+async function wl(e, t, n) {
+	try {
+		await e.schema.alterTable(t).dropColumn(n).execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function Tl(e) {
+	await wl(e, "sessions", "authentication");
+}
+//#endregion
+//#region migrate/migrations/2026-11-05T13:00:00_authentication_methods_totp_last_step.ts
+var El = /* @__PURE__ */ w({
+	down: () => Al,
+	up: () => kl
+});
+async function Dl(e) {
+	try {
+		await e.schema.alterTable("authentication_methods").addColumn("totp_last_step", "integer").execute();
+	} catch (e) {
+		if (e instanceof Error && (e.message.includes("1060") || e.message.toLowerCase().includes("duplicate column"))) return;
+		throw e;
+	}
+}
+async function Ol(e) {
+	try {
+		await e.schema.alterTable("authentication_methods").dropColumn("totp_last_step").execute();
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("1091")) return;
+		throw e;
+	}
+}
+async function kl(e) {
+	await Dl(e);
+}
+async function Al(e) {
+	await Ol(e);
+}
+//#endregion
 //#region migrate/migrations/index.ts
-var bl = {
-	"2026-07-16T14:00:00_baseline": Is,
-	"2026-07-16T15:00:00_codes_expires_at_ts": Us,
-	"2026-08-04T12:00:00_scim_inbound_provisioning": tc,
-	"2026-08-05T12:00:00_user_blocked": ic,
-	"2026-08-09T12:00:00_prompt_settings_last_used": lc,
-	"2026-08-10T12:00:00_action_executions_created_at_index": mc,
-	"2026-08-11T12:00:00_page_hooks": vc,
-	"2026-08-20T12:00:00_refresh_token_session_id": Cc,
-	"2026-08-21T12:00:00_refresh_token_session_id_backfill": Ac,
-	"2026-09-01T12:00:00_tenant_operation_rows": Lc,
-	"2026-09-25T12:00:00_token_exchange_profiles": Vc,
-	"2026-10-13T12:00:00_prompt_partials": Kc,
-	"2026-10-21T12:00:00_config_inheritance": Yc,
-	"2026-10-26T12:00:00_config_sync_hash": $c,
-	"2026-10-27T12:00:00_config_sync_mode": il,
-	"2026-10-28T12:00:00_rollout_config": ll,
-	"2026-10-29T12:00:00_device_codes": ml,
-	"2026-10-30T12:00:00_tenant_member_requests": _l
+var jl = {
+	"2026-07-16T14:00:00_baseline": Ls,
+	"2026-07-16T15:00:00_codes_expires_at_ts": Ws,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": nc,
+	"2026-08-05T12:00:00_user_blocked": ac,
+	"2026-08-09T12:00:00_prompt_settings_last_used": uc,
+	"2026-08-10T12:00:00_action_executions_created_at_index": hc,
+	"2026-08-11T12:00:00_page_hooks": yc,
+	"2026-08-20T12:00:00_refresh_token_session_id": wc,
+	"2026-08-21T12:00:00_refresh_token_session_id_backfill": jc,
+	"2026-09-01T12:00:00_tenant_operation_rows": Rc,
+	"2026-09-25T12:00:00_token_exchange_profiles": Hc,
+	"2026-10-13T12:00:00_prompt_partials": qc,
+	"2026-10-21T12:00:00_config_inheritance": Xc,
+	"2026-10-26T12:00:00_config_sync_hash": el,
+	"2026-10-27T12:00:00_config_sync_mode": al,
+	"2026-10-28T12:00:00_rollout_config": ul,
+	"2026-10-29T12:00:00_device_codes": hl,
+	"2026-10-30T12:00:00_tenant_member_requests": vl,
+	"2026-11-05T12:00:00_session_authentication": xl,
+	"2026-11-05T13:00:00_authentication_methods_totp_last_step": El
 };
 //#endregion
 //#region migrate/migrate.ts
-async function xl(e, t = !1) {
-	Hs(t), t && console.log("migrating...");
+async function Ml(e, t = !1) {
+	Us(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new Me({
 		db: e,
-		provider: new Fs(bl)
+		provider: new Is(jl)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function Sl(e, t = !1) {
-	Hs(t), t && console.log("migrating...");
+async function Nl(e, t = !1) {
+	Us(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new Me({
 		db: e,
-		provider: new Fs(bl)
+		provider: new Is(jl)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -7635,22 +7711,22 @@ async function Sl(e, t = !1) {
 }
 //#endregion
 //#region migrate/plan.ts
-var Cl = 5e3, wl = class extends Error {};
-function Tl(e) {
+var Pl = 5e3, Fl = class extends Error {};
+function Il(e) {
 	if (e.query.kind === "SelectQueryNode") return !0;
 	if (e.query.kind !== "RawNode") return !1;
 	let t = e.sql.trimStart();
 	return /^(select|show|explain|describe|desc)\b/i.test(t) ? !0 : /^pragma\b/i.test(t) && !t.includes("=");
 }
-var El = class {
+var Ll = class {
 	inner;
 	captured;
 	constructor(e, t) {
 		this.inner = e, this.captured = t;
 	}
 	async executeQuery(e) {
-		if (Tl(e)) return this.inner.executeQuery(e);
-		if (this.captured.length >= Cl) throw new wl(`stopped after ${Cl} statements`);
+		if (Il(e)) return this.inner.executeQuery(e);
+		if (this.captured.length >= Pl) throw new Fl(`stopped after ${Pl} statements`);
 		return this.captured.push({
 			sql: e.sql,
 			parameters: e.parameters
@@ -7666,7 +7742,7 @@ var El = class {
 function $() {
 	throw Error("not available in a migration dry run");
 }
-var Dl = {
+var Rl = {
 	init: async () => {},
 	acquireConnection: $,
 	beginTransaction: $,
@@ -7675,25 +7751,25 @@ var Dl = {
 	releaseConnection: $,
 	destroy: async () => {}
 };
-function Ol(e, t) {
-	let n = e.getExecutor(), r = n.withConnectionProvider({ provideConnection: (e) => n.provideConnection((n) => e(new El(n, t))) }), i = {
+function zl(e, t) {
+	let n = e.getExecutor(), r = n.withConnectionProvider({ provideConnection: (e) => n.provideConnection((n) => e(new Ll(n, t))) }), i = {
 		createAdapter: () => n.adapter,
-		createDriver: () => Dl,
+		createDriver: () => Rl,
 		createQueryCompiler: () => $(),
 		createIntrospector: () => $()
 	};
 	return new f({
 		config: { dialect: i },
 		dialect: i,
-		driver: Dl,
+		driver: Rl,
 		executor: r
 	});
 }
-async function kl(e) {
-	Hs(!1);
+async function Bl(e) {
+	Us(!1);
 	let t = await new Me({
 		db: e,
-		provider: new Fs(bl)
+		provider: new Is(jl)
 	}).getMigrations(), n = t.filter((e) => e.executedAt).map((e) => e.name), r = t.filter((e) => !e.executedAt), i = n[n.length - 1], a = i ? r.find((e) => e.name < i) : void 0;
 	if (a) throw Error(`pending migration "${a.name}" sorts before already-executed "${i}"; migrateToLatest would refuse to run`);
 	let o = [];
@@ -7703,9 +7779,9 @@ async function kl(e) {
 			statements: n
 		};
 		try {
-			await t.migration.up(Ol(e, n));
+			await t.migration.up(zl(e, n));
 		} catch (e) {
-			r.error = e instanceof Error ? e.message : String(e), e instanceof wl && (r.truncated = !0);
+			r.error = e instanceof Error ? e.message : String(e), e instanceof Fl && (r.truncated = !0);
 		}
 		o.push(r);
 	}
@@ -7714,7 +7790,7 @@ async function kl(e) {
 		pending: o
 	};
 }
-function Al(e) {
+function Vl(e) {
 	if (e.pending.length === 0) return `-- Database is up to date (${e.executed.length} migrations executed).`;
 	let t = [`-- ${e.pending.length} pending migration(s); ${e.executed.length} already executed.`];
 	for (let n of e.pending) {
@@ -7729,7 +7805,7 @@ function Al(e) {
 }
 //#endregion
 //#region src/index.ts
-function jl(e, t = { useTransactions: !0 }) {
+function Hl(e, t = { useTransactions: !0 }) {
 	let n = {
 		actions: et(e),
 		actionExecutions: ot(e),
@@ -7754,16 +7830,16 @@ function jl(e, t = { useTransactions: !0 }) {
 		keys: Sr(e),
 		loginSessions: ui(e),
 		logs: nn(e),
-		logStreams: Ko(e),
-		migrationSources: Jo(e),
-		authenticationMethods: Mo(e),
+		logStreams: qo(e),
+		migrationSources: Yo(e),
+		authenticationMethods: No(e),
 		passwords: hn(e),
 		promptSettings: mi(e),
 		promptPartials: hi(e),
-		proxyRoutes: Qo(e),
-		scimConfigurations: cs(e),
-		scimTokens: us(e),
-		scimExternalIds: fs(e),
+		proxyRoutes: $o(e),
+		scimConfigurations: ls(e),
+		scimTokens: ds(e),
+		scimExternalIds: ps(e),
 		refreshTokens: Ri(e),
 		resourceServers: ea(e),
 		rolePermissions: ha(e),
@@ -7774,11 +7850,11 @@ function jl(e, t = { useTransactions: !0 }) {
 		sessions: un(e),
 		sessionCleanup: Bi(e),
 		tenants: qt(e),
-		tenantOperations: ms(e),
-		tenantOperationEvents: Ds(e),
-		tenantOperationRows: js(e),
-		tokenExchangeProfiles: is(e),
-		rollouts: Ps(e),
+		tenantOperations: hs(e),
+		tenantOperationEvents: Os(e),
+		tenantOperationRows: Ms(e),
+		tokenExchangeProfiles: as(e),
+		rollouts: Fs(e),
 		themes: $r(e),
 		universalLoginTemplates: Ir(e),
 		customText: To(e),
@@ -7789,9 +7865,9 @@ function jl(e, t = { useTransactions: !0 }) {
 		userOrganizations: $a(e),
 		stats: fo(e),
 		analytics: wo(e),
-		outbox: Wo(e),
+		outbox: Go(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(jl(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(Hl(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -7800,4 +7876,4 @@ function jl(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { es as createProxyDataAdapter, Qo as createProxyRoutesAdapter, jl as default, Al as formatMigrationPlan, Sl as migrateDown, xl as migrateToLatest, kl as planMigrations };
+export { ts as createProxyDataAdapter, $o as createProxyRoutesAdapter, Hl as default, Vl as formatMigrationPlan, Nl as migrateDown, Ml as migrateToLatest, Bl as planMigrations };