@authhero/kysely-adapter 12.3.0 → 12.4.0

package/dist/kysely-adapter.mjs

@@ -1,19 +1,19 @@
 import { customAlphabet as e, nanoid as t } from "nanoid";
 import { booleanToInt as n, convertDatesToAdapter as r, dbDateToIso as i, dbDateToIsoRequired as a, getCountAsInt as o, isoToDbDate as s, nowIso as c, removeNullProperties as l, removeUndefinedAndNull as u, stringifyProperties as d } from "@authhero/adapter-interfaces/sql";
 import { sql as f } from "kysely";
-import { LoginSessionState as p, MONDAY_EPOCH_SHIFT_MS as m, WEEK_MS as h, buildSessionRetention as g, clientGrantSchema as _, clientRegistrationTokenTypeSchema as v, codeSchema as y, decodeCursor as ee, emailTemplateSchema as te, encodeCursor as ne, flowSchema as b, formSchema as x, handlerConfigSchema as re, isPlainObject as ie, loginSessionSchema as ae, matchSchema as oe, migrationProviderTypeSchema as se, parseUserId as ce, resourceServerSchema as le, rolloutInsertSchema as ue, rolloutSchema as de, sanitizeLuceneQuery as S, scimMappingEntrySchema as fe, sessionRetentionWindow as pe, tenantOperationEventInsertSchema as me, tenantOperationEventSchema as he, tenantOperationInsertSchema as ge, tenantOperationSchema as _e } from "@authhero/adapter-interfaces";
+import { LoginSessionState as p, MONDAY_EPOCH_SHIFT_MS as m, WEEK_MS as h, buildRefreshTokenRetention as g, buildSessionRetention as _, clientGrantSchema as v, clientRegistrationTokenTypeSchema as y, codeSchema as ee, decodeCursor as te, emailTemplateSchema as ne, encodeCursor as re, flowSchema as b, formSchema as x, handlerConfigSchema as ie, isPlainObject as ae, loginSessionSchema as oe, matchSchema as se, migrationProviderTypeSchema as ce, parseUserId as le, resourceServerSchema as ue, rolloutInsertSchema as de, rolloutSchema as fe, sanitizeLuceneQuery as S, scimMappingEntrySchema as pe, sessionRetentionWindow as me, tenantOperationEventInsertSchema as he, tenantOperationEventSchema as ge, tenantOperationInsertSchema as _e, tenantOperationSchema as ve } from "@authhero/adapter-interfaces";
 import { HTTPException as C } from "hono/http-exception";
 import "@hono/zod-openapi";
-import { Migrator as ve } from "kysely/migration";
+import { Migrator as ye } from "kysely/migration";
 //#region \0rolldown/runtime.js
-var ye = Object.defineProperty, w = (e, t) => {
+var be = Object.defineProperty, w = (e, t) => {
 	let n = {};
-	for (var r in e) ye(n, r, {
+	for (var r in e) be(n, r, {
 		get: e[r],
 		enumerable: !0
 	});
-	return t || ye(n, Symbol.toStringTag, { value: "Module" }), n;
-}, be = 17, xe = {
+	return t || be(n, Symbol.toStringTag, { value: "Module" }), n;
+}, xe = 17, Se = {
 	organization: "org_",
 	connection: "con_",
 	action: "act_",
@@ -26,38 +26,38 @@ var ye = Object.defineProperty, w = (e, t) => {
 	invite: "inv_"
 };
 function T(t) {
-	let n = e("0123456789abcdefghijklmnopqrstuvwxyz", be)();
-	return `${xe[t]}${n}`;
+	let n = e("0123456789abcdefghijklmnopqrstuvwxyz", xe)();
+	return `${Se[t]}${n}`;
 }
-function Se() {
+function Ce() {
 	return T("organization");
 }
-function Ce() {
+function we() {
 	return T("connection");
 }
-function we() {
+function Te() {
 	return T("action");
 }
-function Te() {
+function Ee() {
 	return T("action_version");
 }
-function Ee() {
+function De() {
 	return T("hook");
 }
-function De() {
+function Oe() {
 	return T("resource_server");
 }
-function Oe() {
+function ke() {
 	return T("hook_code");
 }
-function ke() {
+function Ae() {
 	return T("invite");
 }
 //#endregion
 //#region src/actions/create.ts
-function Ae(e) {
+function je(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : o, c = i?.id ?? we();
+		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : o, c = i?.id ?? Te();
 		return await e.insertInto("actions").values({
 			id: c,
 			tenant_id: t,
@@ -98,7 +98,7 @@ function E(e) {
 		return;
 	}
 }
-function je(e) {
+function Me(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("actions").where("actions.tenant_id", "=", t).where("actions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -123,7 +123,7 @@ function je(e) {
 }
 //#endregion
 //#region src/helpers/filter.ts
-function Me(e) {
+function Ne(e) {
 	return f`coalesce(${f.ref(e.column)}, ${f.lit(e.defaultValue)})`;
 }
 function D(e) {
@@ -135,7 +135,7 @@ function O(e, t, n, r, i = [], a = {}) {
 		return t === void 0 ? e : typeof t == "string" ? t : t.column;
 	}, l = (e) => {
 		let t = a[e];
-		return t === void 0 || typeof t == "string" ? s(t ?? e) : Me(t);
+		return t === void 0 || typeof t == "string" ? s(t ?? e) : Ne(t);
 	}, u = (e, t) => {
 		let n = a[e];
 		if (n === void 0 || typeof n == "string") return t;
@@ -208,7 +208,7 @@ function k(e) {
 		return;
 	}
 }
-function Ne(e) {
+function Pe(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, q: c } = n, l = e.selectFrom("actions").where("actions.tenant_id", "=", t);
 		c && (l = O(e, l, c, ["name"]));
@@ -248,7 +248,7 @@ function Ne(e) {
 }
 //#endregion
 //#region src/actions/update.ts
-function Pe(e) {
+function Fe(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -257,11 +257,11 @@ function Pe(e) {
 		return [];
 	}
 }
-function Fe(e) {
+function Ie(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		if (r.name !== void 0 && (i.name = r.name), r.code !== void 0 && (i.code = r.code), r.runtime !== void 0 && (i.runtime = r.runtime), r.secrets !== void 0) {
-			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Pe(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
+			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Fe(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
 				name: e.name,
 				value: o.get(e.name)?.value
 			} : e);
@@ -276,23 +276,23 @@ function Fe(e) {
 }
 //#endregion
 //#region src/actions/remove.ts
-function Ie(e) {
+function Le(e) {
 	return async (t, n) => (await e.deleteFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/actions/index.ts
-function Le(e) {
+function Re(e) {
 	return {
-		create: Ae(e),
-		get: je(e),
-		list: Ne(e),
-		update: Fe(e),
-		remove: Ie(e)
+		create: je(e),
+		get: Me(e),
+		list: Pe(e),
+		update: Ie(e),
+		remove: Le(e)
 	};
 }
 //#endregion
 //#region src/actionExecutions/create.ts
-function Re(e) {
+function ze(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("action_executions").values({
@@ -318,14 +318,14 @@ function Re(e) {
 }
 //#endregion
 //#region src/actionExecutions/get.ts
-function ze(e) {
+function Be(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function Be(e) {
+function Ve(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("action_executions").where("action_executions.tenant_id", "=", t).where("action_executions.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -333,8 +333,8 @@ function Be(e) {
 			tenant_id: r.tenant_id,
 			trigger_id: r.trigger_id,
 			status: r.status,
-			results: ze(r.results) ?? [],
-			logs: ze(r.logs),
+			results: Be(r.results) ?? [],
+			logs: Be(r.logs),
 			created_at: new Date(Number(r.created_at_ts)).toISOString(),
 			updated_at: new Date(Number(r.updated_at_ts)).toISOString()
 		} : null;
@@ -343,19 +343,19 @@ function Be(e) {
 //#endregion
 //#region src/actionExecutions/cleanup.ts
 var A = 5e4;
-async function Ve(e) {
+async function He(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-function He(e) {
+function Ue(e) {
 	let t;
 	return async (n) => {
 		let r = Date.parse(n);
 		if (Number.isNaN(r)) throw Error(`Invalid olderThan date: ${n}`);
-		if (t ??= await Ve(e), t === "sqlite") {
+		if (t ??= await He(e), t === "sqlite") {
 			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).executeTakeFirst();
 			return Number(t.numDeletedRows);
 		}
@@ -369,39 +369,39 @@ function He(e) {
 }
 //#endregion
 //#region src/actionExecutions/index.ts
-function Ue(e) {
+function We(e) {
 	return {
-		create: Re(e),
-		get: Be(e),
-		cleanup: He(e)
+		create: ze(e),
+		get: Ve(e),
+		cleanup: Ue(e)
 	};
 }
 //#endregion
 //#region src/actionVersions/index.ts
-function We(e) {
+function Ge(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function Ge(e) {
+function Ke(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, dependencies: i, supported_triggers: a, deployed: o, runtime: s, ...c } = e;
 	return {
 		...c,
 		runtime: s ?? void 0,
 		deployed: !!o,
-		secrets: We(r),
-		dependencies: We(i),
-		supported_triggers: We(a),
+		secrets: Ge(r),
+		dependencies: Ge(i),
+		supported_triggers: Ge(a),
 		created_at: new Date(Number(t)).toISOString(),
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function Ke(e) {
+function qe(e) {
 	return {
 		async create(t, n, r) {
-			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? Te(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
+			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? Ee(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
 				let r = ((await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n.action_id).select("number").orderBy("number", "desc").limit(1).executeTakeFirst())?.number ?? 0) + 1;
 				return l && await e.updateTable("action_versions").set(i ? { deployed: 0 } : {
 					deployed: 0,
@@ -438,10 +438,10 @@ function Ke(e) {
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n).where("id", "=", r).selectAll().executeTakeFirst();
-			return i ? Ge(i) : null;
+			return i ? Ke(i) : null;
 		},
 		async list(t, n, r = {}) {
-			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(Ge);
+			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(Ke);
 			if (!s) return {
 				versions: l,
 				start: 0,
@@ -483,7 +483,7 @@ async function j(e, t, n, r) {
 		error: null
 	}).execute();
 }
-function qe(e) {
+function Je(e) {
 	return async (n, r) => {
 		let i = t();
 		return await j(e, n, i, r), i;
@@ -491,7 +491,7 @@ function qe(e) {
 }
 //#endregion
 //#region src/users/create.ts
-function Je(e) {
+function Ye(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, { identities: o, phone_verified: s, password: c, last_login: l, last_ip: u, login_count: d, ...f } = r, p = (/* @__PURE__ */ new Date()).toISOString(), m = {
 			...f,
@@ -551,7 +551,7 @@ function Je(e) {
 }
 //#endregion
 //#region src/users/user-to-identity.ts
-var Ye = [
+var Xe = [
 	"email",
 	"email_verified",
 	"phone_number",
@@ -562,10 +562,10 @@ function M(e, t = !1) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
-		user_id: ce(e.user_id).id,
+		user_id: le(e.user_id).id,
 		isSocial: !!e.is_social
 	};
-	for (let t of Ye) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
+	for (let t of Xe) e[t] !== void 0 && e[t] !== null && (n[t] = t.endsWith("_verified") ? !!e[t] : e[t]);
 	if (!t) {
 		let t = {};
 		try {
@@ -583,7 +583,7 @@ function M(e, t = !1) {
 }
 //#endregion
 //#region src/users/get.ts
-function Xe(e) {
+function Ze(e) {
 	return async (t, n) => {
 		let [r, i] = await Promise.all([e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t).where("users.user_id", "=", n).selectAll("users").select([
 			"user_activity.last_login",
@@ -614,12 +614,12 @@ function Xe(e) {
 function N(e) {
 	return e?.from !== void 0 || e?.take !== void 0;
 }
-function Ze(e, t) {
+function Qe(e, t) {
 	let n = typeof e == "number" && Number.isFinite(e) ? Math.floor(e) : NaN;
 	return n >= 1 ? n : t;
 }
 async function P(e, t, n) {
-	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = Ze(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? ee(t.from) : null;
+	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = Qe(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? te(t.from) : null;
 	if (c && c.k !== n.sortKey) throw new C(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
 	if (c) if (c.s === void 0 || c.s === null) s = s.where(f.ref(a), i === "asc" ? ">" : "<", c.i);
 	else {
@@ -629,7 +629,7 @@ async function P(e, t, n) {
 	let l = await s.limit(o + 1).execute(), u = l.length > o, d = u ? l.slice(0, o) : l, p;
 	if (u && d.length > 0) {
 		let e = d[d.length - 1], t = r.split(".").pop(), i = a.split(".").pop(), o = e[t];
-		p = ne({
+		p = re({
 			s: typeof o == "string" || typeof o == "number" || o === null ? o : String(o),
 			i: String(e[i]),
 			...n.sortKey !== void 0 && { k: n.sortKey }
@@ -643,7 +643,7 @@ async function P(e, t, n) {
 }
 //#endregion
 //#region src/users/list.ts
-var Qe = [
+var $e = [
 	"user_id",
 	"email",
 	"email_verified",
@@ -666,20 +666,20 @@ var Qe = [
 	"login_count",
 	"created_at",
 	"updated_at"
-], $e = new Set([
+], et = new Set([
 	"last_login",
 	"last_ip",
 	"login_count"
-]), et = Object.fromEntries(Qe.map((e) => [e, e === "login_count" ? {
+]), tt = Object.fromEntries($e.map((e) => [e, e === "login_count" ? {
 	column: "user_activity.login_count",
 	defaultValue: 0
-} : $e.has(e) ? `user_activity.${e}` : `users.${e}`])), tt = [
+} : et.has(e) ? `user_activity.${e}` : `users.${e}`])), nt = [
 	"email",
 	"name",
 	"phone_number",
 	"user_id"
 ];
-async function nt(e, t, n) {
+async function rt(e, t, n) {
 	let r = n.map((e) => e.user_id), i = r.length ? await e.selectFrom("users").selectAll().where("users.tenant_id", "=", t).where("users.linked_to", "in", r).orderBy("created_at", "asc").execute() : [];
 	return n.map((e) => {
 		let t = i.filter((t) => t.linked_to === e.user_id);
@@ -697,12 +697,12 @@ async function nt(e, t, n) {
 		});
 	});
 }
-function rt(e) {
+function it(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t);
 		if (c) {
-			let t = S(c, Qe);
-			t && (l = O(e, l, t, tt, [], et));
+			let t = S(c, $e);
+			t && (l = O(e, l, t, nt, [], tt));
 		}
 		if (N(n)) {
 			if (s?.sort_by && s.sort_by !== "created_at") throw new C(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
@@ -715,7 +715,7 @@ function rt(e) {
 				sortOrder: r,
 				idColumn: "users.user_id",
 				sortKey: `created_at:${r}`
-			}), c = await nt(e, t, i);
+			}), c = await rt(e, t, i);
 			return {
 				users: c,
 				start: 0,
@@ -725,13 +725,13 @@ function rt(e) {
 			};
 		}
 		if (s && s.sort_by) {
-			let t = et[s.sort_by];
+			let t = tt[s.sort_by];
 			if (t) {
 				let { ref: n } = e.dynamic;
-				l = l.orderBy(typeof t == "string" ? n(t) : Me(t), s.sort_order);
+				l = l.orderBy(typeof t == "string" ? n(t) : Ne(t), s.sort_order);
 			}
 		}
-		let u = await nt(e, t, await l.offset(r * i).limit(i).selectAll("users").select([
+		let u = await rt(e, t, await l.offset(r * i).limit(i).selectAll("users").select([
 			"user_activity.last_login",
 			"user_activity.last_ip",
 			"user_activity.login_count"
@@ -753,7 +753,7 @@ function rt(e) {
 }
 //#endregion
 //#region src/users/remove.ts
-function it(e) {
+function at(e) {
 	return async (t, n, r) => {
 		let i = async (e) => {
 			await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "in", (e) => e.selectFrom("users").select("users.user_id").where("users.tenant_id", "=", t).where((e) => e.or([e("users.user_id", "=", n), e("users.linked_to", "=", n)]))).execute(), await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.linked_to", "=", n).execute();
@@ -773,7 +773,7 @@ function F(e, t = "", n = {}) {
 	}
 	return n;
 }
-function at(e, t) {
+function ot(e, t) {
 	let n = {};
 	for (let [r, i] of Object.entries(e)) {
 		let e = t.find((e) => r.startsWith(`${e}_`));
@@ -790,7 +790,7 @@ function at(e, t) {
 }
 //#endregion
 //#region src/userActivity/index.ts
-function ot(e) {
+function st(e) {
 	return {
 		user_id: e.user_id,
 		last_login: e.last_login ?? void 0,
@@ -800,18 +800,18 @@ function ot(e) {
 		last_password_reset: e.last_password_reset ?? void 0
 	};
 }
-function st(e) {
+function ct(e) {
 	let t = {};
 	return e.last_login !== void 0 && (t.last_login = e.last_login), e.last_ip !== void 0 && (t.last_ip = e.last_ip), e.login_count !== void 0 && (t.login_count = e.login_count), e.failed_logins !== void 0 && (t.failed_logins = JSON.stringify(e.failed_logins)), e.last_password_reset !== void 0 && (t.last_password_reset = e.last_password_reset), t;
 }
-function ct(e) {
+function lt(e) {
 	return {
 		async get(t, n) {
 			let r = await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).selectAll().executeTakeFirst();
-			return r ? ot(r) : null;
+			return r ? st(r) : null;
 		},
 		async upsert(t, n, r) {
-			let i = st(r);
+			let i = ct(r);
 			if (await e.selectFrom("user_activity").where("tenant_id", "=", t).where("user_id", "=", n).select("user_id").executeTakeFirst()) {
 				if (Object.keys(i).length === 0) return;
 				await e.updateTable("user_activity").set(i).where("tenant_id", "=", t).where("user_id", "=", n).execute();
@@ -833,7 +833,7 @@ function ct(e) {
 }
 //#endregion
 //#region src/users/update.ts
-function lt(e) {
+function ut(e) {
 	return async (t, n, r, i) => {
 		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = F({
 			...c,
@@ -846,7 +846,7 @@ function lt(e) {
 		}), u = async (e) => {
 			let [r] = await e.updateTable("users").set(l).where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
 			if (!r || r.numUpdatedRows === 0n) return !1;
-			(a !== void 0 || o !== void 0 || s !== void 0) && await ct(e).upsert(t, n, {
+			(a !== void 0 || o !== void 0 || s !== void 0) && await lt(e).upsert(t, n, {
 				last_login: a,
 				last_ip: o,
 				login_count: s
@@ -859,26 +859,26 @@ function lt(e) {
 }
 //#endregion
 //#region src/users/unlink.ts
-function ut(e) {
+function dt(e) {
 	return async (t, n, r, i) => (await e.updateTable("users").set({ linked_to: null }).where("users.tenant_id", "=", t).where("users.user_id", "=", `${r}|${i}`).where("users.linked_to", "=", `${n}`).execute()).length === 1;
 }
 //#endregion
 //#region src/users/index.ts
-function dt(e) {
-	let t = Je(e);
+function ft(e) {
+	let t = Ye(e);
 	return {
 		create: t,
 		rawCreate: t,
-		remove: it(e),
-		get: Xe(e),
-		list: rt(e),
-		update: lt(e),
-		unlink: ut(e)
+		remove: at(e),
+		get: Ze(e),
+		list: it(e),
+		update: ut(e),
+		unlink: dt(e)
 	};
 }
 //#endregion
 //#region src/flows/create.ts
-function ft(e) {
+function pt(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = b.parse({
 			id: a?.id ?? `af_${t()}`,
@@ -904,7 +904,7 @@ function I(e, t) {
 		return t;
 	}
 }
-function pt(e) {
+function mt(e) {
 	if (e) try {
 		let t = JSON.parse(e);
 		return t && typeof t == "object" && !Array.isArray(t) ? t : void 0;
@@ -912,13 +912,13 @@ function pt(e) {
 		return;
 	}
 }
-function mt(e, t, n = { ...e }) {
+function ht(e, t, n = { ...e }) {
 	for (let r in t) r in e && (n[r] = I(e[r], t[r]));
 	return n;
 }
 //#endregion
 //#region src/flows/get.ts
-function ht(e) {
+function gt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("flows").selectAll().where("flows.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
@@ -931,7 +931,7 @@ function ht(e) {
 }
 //#endregion
 //#region src/flows/list.ts
-function gt(e) {
+function _t(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("flows").where("tenant_id", "=", t);
 		s && (c = O(e, c, s, []));
@@ -959,7 +959,7 @@ function gt(e) {
 }
 //#endregion
 //#region src/flows/update.ts
-function _t(e) {
+function vt(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -977,27 +977,27 @@ function _t(e) {
 }
 //#endregion
 //#region src/flows/remove.ts
-function vt(e) {
+function yt(e) {
 	return async (t, n) => ((await e.deleteFrom("flows").where("id", "=", n).where("tenant_id", "=", t).execute())[0]?.numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/flows/index.ts
-function yt(e) {
+function bt(e) {
 	return {
-		create: ft(e),
-		get: ht(e),
-		list: gt(e),
-		update: _t(e),
-		remove: vt(e)
+		create: pt(e),
+		get: gt(e),
+		list: _t(e),
+		update: vt(e),
+		remove: yt(e)
 	};
 }
 //#endregion
 //#region src/tenants/utils.ts
-function bt(e) {
+function xt(e) {
 	let t = { ...e };
 	return e.session_cookie && typeof e.session_cookie == "string" && (t.session_cookie = JSON.parse(e.session_cookie)), e.enabled_locales && typeof e.enabled_locales == "string" && (t.enabled_locales = JSON.parse(e.enabled_locales)), e.error_page && typeof e.error_page == "string" && (t.error_page = JSON.parse(e.error_page)), e.flags && typeof e.flags == "string" && (t.flags = JSON.parse(e.flags)), e.sandbox_versions_available && typeof e.sandbox_versions_available == "string" && (t.sandbox_versions_available = JSON.parse(e.sandbox_versions_available)), e.change_password && typeof e.change_password == "string" && (t.change_password = JSON.parse(e.change_password)), e.guardian_mfa_page && typeof e.guardian_mfa_page == "string" && (t.guardian_mfa_page = JSON.parse(e.guardian_mfa_page)), e.sessions && typeof e.sessions == "string" && (t.sessions = JSON.parse(e.sessions)), e.oidc_logout && typeof e.oidc_logout == "string" && (t.oidc_logout = JSON.parse(e.oidc_logout)), e.device_flow && typeof e.device_flow == "string" && (t.device_flow = JSON.parse(e.device_flow)), e.default_token_quota && typeof e.default_token_quota == "string" && (t.default_token_quota = JSON.parse(e.default_token_quota)), e.allowed_logout_urls && typeof e.allowed_logout_urls == "string" && (t.allowed_logout_urls = JSON.parse(e.allowed_logout_urls)), e.acr_values_supported && typeof e.acr_values_supported == "string" && (t.acr_values_supported = JSON.parse(e.acr_values_supported)), e.mtls && typeof e.mtls == "string" && (t.mtls = JSON.parse(e.mtls)), e.mfa && typeof e.mfa == "string" && (t.mfa = JSON.parse(e.mfa)), e.attack_protection && typeof e.attack_protection == "string" && (t.attack_protection = JSON.parse(e.attack_protection)), e.allow_organization_name_in_authentication_api !== void 0 && (t.allow_organization_name_in_authentication_api = e.allow_organization_name_in_authentication_api === 1), e.customize_mfa_in_postlogin_action !== void 0 && (t.customize_mfa_in_postlogin_action = e.customize_mfa_in_postlogin_action === 1), e.pushed_authorization_requests_supported !== void 0 && (t.pushed_authorization_requests_supported = e.pushed_authorization_requests_supported === 1), e.authorization_response_iss_parameter_supported !== void 0 && (t.authorization_response_iss_parameter_supported = e.authorization_response_iss_parameter_supported === 1), l(t);
 }
-function xt(e) {
+function St(e) {
 	let t = { ...e };
 	return d(e, [
 		"session_cookie",
@@ -1020,14 +1020,14 @@ function xt(e) {
 }
 //#endregion
 //#region src/tenants/create.ts
-function St(e) {
+function Ct(e) {
 	return async (n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
 			id: i?.id ?? n.id ?? t(),
 			created_at: i?.created_at ?? a,
 			updated_at: i?.updated_at ?? a
-		}, s = xt(o);
+		}, s = St(o);
 		try {
 			await e.insertInto("tenants").values(s).execute();
 		} catch (e) {
@@ -1039,15 +1039,15 @@ function St(e) {
 }
 //#endregion
 //#region src/tenants/get.ts
-function Ct(e) {
+function wt(e) {
 	return async (t) => {
 		let n = await e.selectFrom("tenants").where("tenants.id", "=", t).selectAll().executeTakeFirst();
-		return n ? bt(n) : null;
+		return n ? xt(n) : null;
 	};
 }
 //#endregion
 //#region src/tenants/list.ts
-function wt(e) {
+function Tt(e) {
 	return async (t) => {
 		let n = e.selectFrom("tenants"), { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = t || {};
 		if (s && s.sort_by) {
@@ -1055,7 +1055,7 @@ function wt(e) {
 			n = n.orderBy(t(s.sort_by), s.sort_order);
 		}
 		c && (n = O(e, n, c, ["friendly_name"]));
-		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(bt);
+		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(xt);
 		if (!a) return { tenants: l };
 		let { count: u } = await n.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow(), d = o(u);
 		return {
@@ -1068,10 +1068,10 @@ function wt(e) {
 }
 //#endregion
 //#region src/tenants/update.ts
-function Tt(e) {
+function Et(e) {
 	return async (t, n) => {
 		let r = {
-			...xt(n),
+			...St(n),
 			id: t,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		};
@@ -1080,29 +1080,29 @@ function Tt(e) {
 }
 //#endregion
 //#region src/tenants/remove.ts
-function Et(e) {
+function Dt(e) {
 	return async (t) => (await e.deleteFrom("tenants").where("tenants.id", "=", t).execute()).length === 1;
 }
 //#endregion
 //#region src/tenants/index.ts
-function Dt(e) {
+function Ot(e) {
 	return {
-		create: St(e),
-		get: Ct(e),
-		list: wt(e),
-		update: Tt(e),
-		remove: Et(e)
+		create: Ct(e),
+		get: wt(e),
+		list: Tt(e),
+		update: Et(e),
+		remove: Dt(e)
 	};
 }
 //#endregion
 //#region src/logs/create.ts
-function Ot(e) {
+function kt(e) {
 	return e ? JSON.stringify(e) : void 0;
 }
-var kt = 256;
-function At(e) {
+var At = 256;
+function jt(e) {
 	return async (n, r) => {
-		let i = r.user_agent?.slice(0, kt), a = r.log_id || t(), { location_info: o, ...s } = r;
+		let i = r.user_agent?.slice(0, At), a = r.log_id || t(), { location_info: o, ...s } = r;
 		return await e.insertInto("logs").values({
 			...s,
 			log_id: a,
@@ -1111,8 +1111,8 @@ function At(e) {
 			description: r.description?.substring(0, 256),
 			isMobile: +!!r.isMobile,
 			scope: r.scope,
-			auth0_client: Ot(r.auth0_client),
-			details: Ot(r.details)?.substring(0, 8192),
+			auth0_client: kt(r.auth0_client),
+			details: kt(r.details)?.substring(0, 8192),
 			country_code: o?.country_code,
 			city_name: o?.city_name,
 			latitude: o?.latitude,
@@ -1128,7 +1128,7 @@ function At(e) {
 }
 //#endregion
 //#region src/logs/logs.ts
-function jt(e) {
+function Mt(e) {
 	if (!e) return "";
 	try {
 		return JSON.parse(e);
@@ -1136,13 +1136,13 @@ function jt(e) {
 		return e;
 	}
 }
-function L(e) {
+function Nt(e) {
 	return {
 		...e,
 		client_id: e.client_id,
 		client_name: e.client_name || "",
-		auth0_client: jt(e.auth0_client),
-		details: jt(e.details),
+		auth0_client: Mt(e.auth0_client),
+		details: Mt(e.details),
 		isMobile: !!e.isMobile,
 		scope: e.scope || void 0,
 		log_id: e.log_id,
@@ -1158,7 +1158,7 @@ function L(e) {
 }
 //#endregion
 //#region src/logs/list.ts
-var Mt = [
+var Pt = [
 	"user_id",
 	"ip",
 	"type",
@@ -1184,11 +1184,11 @@ var Mt = [
 	"time_zone",
 	"continent_code"
 ];
-function Nt(e) {
+function Ft(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, from_date: l, to_date: u } = n, d = e.selectFrom("logs").where("logs.tenant_id", "=", t);
 		if (c) {
-			let t = S(c, Mt);
+			let t = S(c, Pt);
 			t && (d = O(e, d, t, [
 				"user_id",
 				"ip",
@@ -1202,7 +1202,7 @@ function Nt(e) {
 				sortOrder: e,
 				idColumn: "log_id",
 				sortKey: `date:${e}`
-			}), a = t.map(L);
+			}), a = t.map(Nt);
 			return {
 				logs: a,
 				start: 0,
@@ -1217,7 +1217,7 @@ function Nt(e) {
 			f = f.orderBy(t(s.sort_by), s.sort_order);
 		}
 		f = f.offset(r * i).limit(i);
-		let p = (await f.selectAll().execute()).map(L);
+		let p = (await f.selectAll().execute()).map(Nt);
 		if (!a) return {
 			logs: p,
 			start: 0,
@@ -1235,24 +1235,24 @@ function Nt(e) {
 }
 //#endregion
 //#region src/logs/get.ts
-function Pt(e) {
+function It(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("logs").where("logs.tenant_id", "=", t).where("logs.log_id", "=", n).selectAll().executeTakeFirst();
-		return r ? L(r) : null;
+		return r ? Nt(r) : null;
 	};
 }
 //#endregion
 //#region src/logs/index.ts
-function Ft(e) {
+function Lt(e) {
 	return {
-		create: At(e),
-		list: Nt(e),
-		get: Pt(e)
+		create: jt(e),
+		list: Ft(e),
+		get: It(e)
 	};
 }
 //#endregion
 //#region src/sessions/get.ts
-function It(e) {
+function Rt(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("sessions").where("sessions.tenant_id", "=", t).where("sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -1286,7 +1286,7 @@ function It(e) {
 }
 //#endregion
 //#region src/sessions/create.ts
-function Lt(e) {
+function zt(e) {
 	return async (t, n) => {
 		let r = Date.now(), i = c(), a = {
 			...n,
@@ -1318,12 +1318,12 @@ function Lt(e) {
 }
 //#endregion
 //#region src/sessions/remove.ts
-function Rt(e) {
+function Bt(e) {
 	return async (t, n) => !!(await e.deleteFrom("sessions").where("tenant_id", "=", t).where("sessions.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/sessions/update.ts
-function zt(e) {
+function Vt(e) {
 	return async (t, n, r) => {
 		let i = Date.now(), a = {
 			updated_at_ts: i,
@@ -1344,7 +1344,7 @@ function zt(e) {
 }
 //#endregion
 //#region src/sessions/list.ts
-function Bt(e) {
+function Ht(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("sessions").where("sessions.tenant_id", "=", t);
 		l && (u = O(e, u, l, ["user_id", "session_id"]));
@@ -1399,18 +1399,18 @@ function Bt(e) {
 }
 //#endregion
 //#region src/sessions/index.ts
-function Vt(e) {
+function Ut(e) {
 	return {
-		create: Lt(e),
-		get: It(e),
-		list: Bt(e),
-		remove: Rt(e),
-		update: zt(e)
+		create: zt(e),
+		get: Rt(e),
+		list: Ht(e),
+		remove: Bt(e),
+		update: Vt(e)
 	};
 }
 //#endregion
 //#region src/passwords/get.ts
-function Ht(e) {
+function Wt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).where("passwords.is_current", "=", 1).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1423,7 +1423,7 @@ function Ht(e) {
 }
 //#endregion
 //#region src/passwords/create.ts
-function Ut(e) {
+function Gt(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = a?.id || r.id || t(), s = r.is_current ?? !0, c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...r,
@@ -1441,7 +1441,7 @@ function Ut(e) {
 }
 //#endregion
 //#region src/passwords/update.ts
-function Wt(e) {
+function Kt(e) {
 	return async (t, n) => {
 		let r = e.updateTable("passwords").set({
 			password: n.password,
@@ -1454,7 +1454,7 @@ function Wt(e) {
 }
 //#endregion
 //#region src/passwords/list.ts
-function Gt(e) {
+function qt(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("passwords").where("passwords.tenant_id", "=", t).where("passwords.user_id", "=", n).orderBy("created_at", "desc");
 		return r && (i = i.limit(r)), (await i.selectAll().execute()).map(({ tenant_id: e, ...t }) => ({
@@ -1465,23 +1465,23 @@ function Gt(e) {
 }
 //#endregion
 //#region src/passwords/index.ts
-function Kt(e) {
+function Jt(e) {
 	return {
-		create: Ut(e),
-		update: Wt(e),
-		get: Ht(e),
-		list: Gt(e)
+		create: Gt(e),
+		update: Kt(e),
+		get: Wt(e),
+		list: qt(e)
 	};
 }
 //#endregion
 //#region src/codes/list.ts
-function qt(e) {
+function Yt(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("codes").where("codes.tenant_id", "=", t);
 		s && (c = O(e, c, s, ["code", "login_id"]));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let { tenant_id: t, ...n } = e;
-			return y.parse(l(n));
+			return ee.parse(l(n));
 		});
 		if (!a) return {
 			codes: u,
@@ -1500,13 +1500,13 @@ function qt(e) {
 }
 //#endregion
 //#region src/codes/expires-at-ts.ts
-function Jt(e) {
+function Xt(e) {
 	let t = new Date(e).getTime();
 	return Number.isNaN(t) ? 0 : t;
 }
 //#endregion
 //#region src/codes/create.ts
-function Yt(e) {
+function Zt(e) {
 	return async (t, n) => {
 		let r = {
 			...n,
@@ -1515,18 +1515,18 @@ function Yt(e) {
 		return await e.insertInto("codes").values({
 			...r,
 			tenant_id: t,
-			expires_at_ts: Jt(r.expires_at)
+			expires_at_ts: Xt(r.expires_at)
 		}).execute(), r;
 	};
 }
 //#endregion
 //#region src/codes/remove.ts
-function Xt(e) {
+function Qt(e) {
 	return async (t, n) => (await e.deleteFrom("codes").where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/codes/get.ts
-function Zt(e) {
+function $t(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("codes").where("codes.code_id", "=", n).where("codes.code_type", "=", r);
 		t.length && (i = i.where("codes.tenant_id", "=", t));
@@ -1536,44 +1536,44 @@ function Zt(e) {
 }
 //#endregion
 //#region src/codes/used.ts
-function Qt(e) {
+function en(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/consume.ts
-function $t(e) {
+function tn(e) {
 	return async (t, n) => (await e.updateTable("codes").set({ used_at: (/* @__PURE__ */ new Date()).toISOString() }).where("codes.tenant_id", "=", t).where("codes.code_id", "=", n).where("codes.used_at", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/codes/cleanup.ts
-function en(e) {
+function nn(e) {
 	return async (t) => {
-		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", Jt(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
+		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", Xt(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows) + Number(r.numDeletedRows);
 	};
 }
 //#endregion
 //#region src/codes/index.ts
-function tn(e) {
+function rn(e) {
 	return {
-		create: Yt(e),
-		list: qt(e),
-		remove: Xt(e),
-		used: Qt(e),
-		consume: $t(e),
-		get: Zt(e),
-		cleanup: en(e)
+		create: Zt(e),
+		list: Yt(e),
+		remove: Qt(e),
+		used: en(e),
+		consume: tn(e),
+		get: $t(e),
+		cleanup: nn(e)
 	};
 }
 //#endregion
 //#region src/connections/create.ts
-function nn(e) {
+function an(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, { is_system: a, ...o } = n;
 		delete o.enabled_clients;
 		let s = (/* @__PURE__ */ new Date()).toISOString(), c = {
 			...o,
-			id: i?.id ?? o.id ?? Ce(),
+			id: i?.id ?? o.id ?? we(),
 			is_system: a ? !0 : void 0,
 			created_at: i?.created_at ?? s,
 			updated_at: i?.updated_at ?? s
@@ -1588,7 +1588,7 @@ function nn(e) {
 }
 //#endregion
 //#region src/connections/transform.ts
-function R(e) {
+function L(e) {
 	let { is_system: t, ...n } = e;
 	return l({
 		...n,
@@ -1596,16 +1596,16 @@ function R(e) {
 		options: typeof e.options == "string" ? JSON.parse(e.options) : {}
 	});
 }
-function rn(e) {
-	return e.map(R);
+function on(e) {
+	return e.map(L);
 }
 //#endregion
 //#region src/connections/list.ts
-function an(e) {
+function sn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("connections").where("connections.tenant_id", "=", t);
 		s && (c = O(e, c, s, ["user_id", "ip"]));
-		let l = rn(await c.offset(r * i).limit(i).selectAll().execute());
+		let l = on(await c.offset(r * i).limit(i).selectAll().execute());
 		if (!a) return {
 			connections: l,
 			start: 0,
@@ -1623,20 +1623,20 @@ function an(e) {
 }
 //#endregion
 //#region src/connections/remove.ts
-function on(e) {
+function cn(e) {
 	return async (t, n) => (await e.deleteFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/connections/get.ts
-function sn(e) {
+function ln(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).selectAll().executeTakeFirst();
-		return r ? R(r) : null;
+		return r ? L(r) : null;
 	};
 }
 //#endregion
 //#region src/connections/update.ts
-function cn(e) {
+function un(e) {
 	return async (t, n, r) => {
 		let { is_system: i, ...a } = r;
 		delete a.enabled_clients;
@@ -1653,18 +1653,18 @@ function cn(e) {
 }
 //#endregion
 //#region src/connections/index.ts
-function ln(e) {
+function dn(e) {
 	return {
-		create: nn(e),
-		get: sn(e),
-		list: an(e),
-		remove: on(e),
-		update: cn(e)
+		create: an(e),
+		get: ln(e),
+		list: sn(e),
+		remove: cn(e),
+		update: un(e)
 	};
 }
 //#endregion
 //#region src/clients/create.ts
-function un(e) {
+function fn(e) {
 	return async (r, i, a) => {
 		let o = a?.importMetadata, s = o?.id ?? i.client_id ?? t(), c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...i,
@@ -1729,7 +1729,7 @@ function un(e) {
 }
 //#endregion
 //#region src/clients/get.ts
-function dn(e) {
+function pn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1775,7 +1775,7 @@ function dn(e) {
 }
 //#endregion
 //#region src/clients/getByClientId.ts
-function fn(e) {
+function mn(e) {
 	return async (t) => {
 		let n = await e.selectFrom("clients").where("clients.client_id", "=", t).selectAll().executeTakeFirst();
 		return n ? l({
@@ -1819,7 +1819,7 @@ function fn(e) {
 }
 //#endregion
 //#region src/clients/list.ts
-function pn(e) {
+function hn(e) {
 	return l({
 		...e,
 		global: !!e.global,
@@ -1858,7 +1858,7 @@ function pn(e) {
 		registration_metadata: e.registration_metadata ? JSON.parse(e.registration_metadata) : void 0
 	});
 }
-function mn(e) {
+function gn(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("clients").where("clients.tenant_id", "=", t), i = new Set(["owner_user_id", "registration_type"]);
 		if (n?.q) {
@@ -1873,7 +1873,7 @@ function mn(e) {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "client_id"
-			}), a = e.map(pn);
+			}), a = e.map(hn);
 			return {
 				clients: a,
 				totals: {
@@ -1906,7 +1906,7 @@ function mn(e) {
 			let a = await r.executeTakeFirst();
 			c = Number(a?.count || 0);
 		}
-		let l = s.map(pn);
+		let l = s.map(hn);
 		return {
 			clients: l,
 			totals: {
@@ -1920,12 +1920,12 @@ function mn(e) {
 }
 //#endregion
 //#region src/clients/remove.ts
-function hn(e) {
+function _n(e) {
 	return async (t, n) => (await e.deleteFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clients/update.ts
-function gn(e) {
+function vn(e) {
 	return async (t, r, i) => {
 		let a = {
 			...i,
@@ -1972,31 +1972,31 @@ function gn(e) {
 }
 //#endregion
 //#region src/clients/index.ts
-function _n(e) {
+function yn(e) {
 	return {
-		create: un(e),
-		get: dn(e),
-		getByClientId: fn(e),
-		list: mn(e),
-		remove: hn(e),
-		update: gn(e)
+		create: fn(e),
+		get: pn(e),
+		getByClientId: mn(e),
+		list: gn(e),
+		remove: _n(e),
+		update: vn(e)
 	};
 }
 //#endregion
 //#region src/clientConnections/listByClient.ts
-function vn(e) {
+function bn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).select("connections").executeTakeFirst();
 		if (!r) return [];
 		let i = JSON.parse(r.connections || "[]");
 		if (i.length === 0) return [];
-		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, R(e)]));
+		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, L(e)]));
 		return i.map((e) => o.get(e)).filter((e) => e !== void 0);
 	};
 }
 //#endregion
 //#region src/clientConnections/updateByClient.ts
-function yn(e) {
+function xn(e) {
 	return async (t, n, r) => (await e.updateTable("clients").set({
 		connections: JSON.stringify(r),
 		updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -2004,7 +2004,7 @@ function yn(e) {
 }
 //#endregion
 //#region src/clientConnections/listByConnection.ts
-function bn(e) {
+function Sn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).select(["client_id", "connections"]).execute(), i = [];
 		for (let e of r) JSON.parse(e.connections || "[]").includes(n) && i.push(e.client_id);
@@ -2013,7 +2013,7 @@ function bn(e) {
 }
 //#endregion
 //#region src/clientConnections/addClientToConnection.ts
-function xn(e) {
+function Cn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2026,7 +2026,7 @@ function xn(e) {
 }
 //#endregion
 //#region src/clientConnections/removeClientFromConnection.ts
-function Sn(e) {
+function wn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2039,18 +2039,18 @@ function Sn(e) {
 }
 //#endregion
 //#region src/clientConnections/index.ts
-function Cn(e) {
+function Tn(e) {
 	return {
-		listByClient: vn(e),
-		updateByClient: yn(e),
-		listByConnection: bn(e),
-		addClientToConnection: xn(e),
-		removeClientFromConnection: Sn(e)
+		listByClient: bn(e),
+		updateByClient: xn(e),
+		listByConnection: Sn(e),
+		addClientToConnection: Cn(e),
+		removeClientFromConnection: wn(e)
 	};
 }
 //#endregion
 //#region src/clientGrants/create.ts
-function wn(e) {
+function En(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? t(), c = a?.created_at ?? o, u = a?.updated_at ?? a?.created_at ?? o, { scope: d, authorization_details_types: f, ...p } = r, m = {
 			id: s,
@@ -2078,7 +2078,7 @@ function wn(e) {
 }
 //#endregion
 //#region src/clientGrants/get.ts
-function Tn(e) {
+function Dn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_grants").selectAll().where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -2098,8 +2098,8 @@ function Tn(e) {
 }
 //#endregion
 //#region src/clientGrants/list.ts
-function En(e) {
-	return _.parse(l({
+function On(e) {
+	return v.parse(l({
 		...e,
 		scope: e.scope ? JSON.parse(e.scope) : [],
 		allow_any_organization: !!e.allow_any_organization,
@@ -2107,7 +2107,7 @@ function En(e) {
 		authorization_details_types: e.authorization_details_types ? JSON.parse(e.authorization_details_types) : []
 	}));
 }
-function Dn(e) {
+function kn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s, sort: c } = n, l = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
 		if (s) {
@@ -2124,7 +2124,7 @@ function Dn(e) {
 			let { rows: e, limit: t, next: r } = await P(l.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
-			}), i = e.map(En);
+			}), i = e.map(On);
 			return {
 				client_grants: i,
 				start: 0,
@@ -2138,7 +2138,7 @@ function Dn(e) {
 			let { ref: t } = e.dynamic;
 			u = u.orderBy(t(c.sort_by), c.sort_order);
 		} else u = u.orderBy("client_grants.created_at", "desc");
-		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(En);
+		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(On);
 		if (!a) return {
 			client_grants: d,
 			start: 0,
@@ -2156,12 +2156,12 @@ function Dn(e) {
 }
 //#endregion
 //#region src/clientGrants/remove.ts
-function On(e) {
+function An(e) {
 	return async (t, n) => ((await e.deleteFrom("client_grants").where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst()).numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/clientGrants/update.ts
-function kn(e) {
+function jn(e) {
 	return async (t, n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), { scope: a, authorization_details_types: o, ...s } = r, c = {
 			...s,
@@ -2172,18 +2172,18 @@ function kn(e) {
 }
 //#endregion
 //#region src/clientGrants/index.ts
-function An(e) {
+function Mn(e) {
 	return {
-		create: wn(e),
-		get: Tn(e),
-		list: Dn(e),
-		remove: On(e),
-		update: kn(e)
+		create: En(e),
+		get: Dn(e),
+		list: kn(e),
+		remove: An(e),
+		update: jn(e)
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/create.ts
-function jn(e) {
+function Nn(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("client_registration_tokens").values({
@@ -2214,12 +2214,12 @@ function jn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/row-mapper.ts
-function Mn(e) {
-	let t = v.safeParse(e);
+function Pn(e) {
+	let t = y.safeParse(e);
 	if (!t.success) throw Error(`Unknown client_registration_tokens.type: ${e}`);
 	return t.data;
 }
-function Nn(e) {
+function Fn(e) {
 	if (!e) return;
 	let t;
 	try {
@@ -2227,16 +2227,16 @@ function Nn(e) {
 	} catch {
 		return;
 	}
-	return ie(t) ? t : void 0;
+	return ae(t) ? t : void 0;
 }
-function z(e) {
+function R(e) {
 	return {
 		id: e.id,
 		token_hash: e.token_hash,
-		type: Mn(e.type),
+		type: Pn(e.type),
 		client_id: e.client_id ?? void 0,
 		sub: e.sub ?? void 0,
-		constraints: Nn(e.constraints),
+		constraints: Fn(e.constraints),
 		single_use: !!e.single_use,
 		expires_at: i(e.expires_at_ts),
 		used_at: i(e.used_at_ts),
@@ -2246,38 +2246,38 @@ function z(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/get.ts
-function Pn(e) {
+function In(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-		return r ? z(r) : null;
+		return r ? R(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/getByHash.ts
-function Fn(e) {
+function Ln(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-		return r ? z(r) : null;
+		return r ? R(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/listByClient.ts
-function In(e) {
-	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(z);
+function Rn(e) {
+	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(R);
 }
 //#endregion
 //#region src/clientRegistrationTokens/markUsed.ts
-function Ln(e) {
+function zn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ used_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("used_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revoke.ts
-function Rn(e) {
+function Bn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revokeByClient.ts
-function zn(e) {
+function Vn(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("client_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows);
@@ -2285,26 +2285,26 @@ function zn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/remove.ts
-function Bn(e) {
+function Hn(e) {
 	return async (t, n) => (await e.deleteFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/index.ts
-function Vn(e) {
+function Un(e) {
 	return {
-		create: jn(e),
-		get: Pn(e),
-		getByHash: Fn(e),
-		listByClient: In(e),
-		markUsed: Ln(e),
-		revoke: Rn(e),
-		revokeByClient: zn(e),
-		remove: Bn(e)
+		create: Nn(e),
+		get: In(e),
+		getByHash: Ln(e),
+		listByClient: Rn(e),
+		markUsed: zn(e),
+		revoke: Bn(e),
+		revokeByClient: Vn(e),
+		remove: Hn(e)
 	};
 }
 //#endregion
 //#region src/keys/list.ts
-function Hn(e) {
+function Wn(e) {
 	return async (t = {}) => {
 		let { page: n = 0, per_page: r = 100, include_totals: i = !1, sort: a, q: s } = t, c = e.selectFrom("keys").where((e) => e.or([e("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()), e("revoked_at", "is", null)]));
 		s && (c = O(e, c, s, [
@@ -2333,7 +2333,7 @@ function Hn(e) {
 }
 //#endregion
 //#region src/keys/create.ts
-function Un(e) {
+function Gn(e) {
 	return async (t, n) => {
 		let r = n?.importMetadata;
 		await e.insertInto("keys").values({
@@ -2345,21 +2345,21 @@ function Un(e) {
 }
 //#endregion
 //#region src/keys/update.ts
-function Wn(e) {
+function Kn(e) {
 	return async (t, n) => !!(await e.updateTable("keys").set(n).where("kid", "=", t).execute()).length;
 }
 //#endregion
 //#region src/keys/index.ts
-function Gn(e) {
+function qn(e) {
 	return {
-		create: Un(e),
-		list: Hn(e),
-		update: Wn(e)
+		create: Gn(e),
+		list: Wn(e),
+		update: Kn(e)
 	};
 }
 //#endregion
 //#region src/customDomains/create.ts
-function Kn(e) {
+function Jn(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			status: "pending",
@@ -2379,7 +2379,7 @@ function Kn(e) {
 }
 //#endregion
 //#region src/customDomains/list.ts
-function qn(e) {
+function Yn(e) {
 	return async (t) => (await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).selectAll().execute()).map((e) => ({
 		...e,
 		primary: e.primary === 1,
@@ -2389,12 +2389,12 @@ function qn(e) {
 }
 //#endregion
 //#region src/customDomains/remove.ts
-function Jn(e) {
+function Xn(e) {
 	return async (t, n) => (await e.deleteFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/customDomains/get.ts
-function Yn(e) {
+function Zn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -2407,7 +2407,7 @@ function Yn(e) {
 }
 //#endregion
 //#region src/customDomains/update.ts
-function Xn(e) {
+function Qn(e) {
 	return async (t, n, r) => {
 		let { verification: i, domain_metadata: a, primary: o, ...s } = r, c = {
 			...s,
@@ -2421,7 +2421,7 @@ function Xn(e) {
 }
 //#endregion
 //#region src/customDomains/getByDomain.ts
-function Zn(e) {
+function $n(e) {
 	return async (t) => {
 		let n = await e.selectFrom("custom_domains").where("custom_domains.domain", "=", t).selectAll().executeTakeFirst();
 		return n ? {
@@ -2433,19 +2433,19 @@ function Zn(e) {
 }
 //#endregion
 //#region src/customDomains/index.ts
-function Qn(e) {
+function er(e) {
 	return {
-		create: Kn(e),
-		get: Yn(e),
-		getByDomain: Zn(e),
-		list: qn(e),
-		remove: Jn(e),
-		update: Xn(e)
+		create: Jn(e),
+		get: Zn(e),
+		getByDomain: $n(e),
+		list: Yn(e),
+		remove: Xn(e),
+		update: Qn(e)
 	};
 }
 //#endregion
 //#region src/branding/get.ts
-function $n(e) {
+function tr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("branding").where("branding.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2467,7 +2467,7 @@ function $n(e) {
 }
 //#endregion
 //#region src/branding/set.ts
-function er(e) {
+function nr(e) {
 	return async (t, n) => {
 		let { colors: r, font: i, ...a } = n, o = r?.page_background, s = o && typeof o == "object" ? o : void 0;
 		try {
@@ -2496,15 +2496,15 @@ function er(e) {
 }
 //#endregion
 //#region src/branding/index.ts
-function tr(e) {
+function rr(e) {
 	return {
-		get: $n(e),
-		set: er(e)
+		get: tr(e),
+		set: nr(e)
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/get.ts
-function nr(e) {
+function ir(e) {
 	return async (t) => {
 		let n = await e.selectFrom("universal_login_templates").select(["body"]).where("tenant_id", "=", t).executeTakeFirst();
 		return n ? { body: n.body } : null;
@@ -2512,7 +2512,7 @@ function nr(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/set.ts
-function rr(e) {
+function ar(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : a;
 		try {
@@ -2533,23 +2533,23 @@ function rr(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/delete.ts
-function ir(e) {
+function or(e) {
 	return async (t) => {
 		await e.deleteFrom("universal_login_templates").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/index.ts
-function ar(e) {
+function sr(e) {
 	return {
-		get: nr(e),
-		set: rr(e),
-		delete: ir(e)
+		get: ir(e),
+		set: ar(e),
+		delete: or(e)
 	};
 }
 //#endregion
 //#region src/hooks/list.ts
-function or(e) {
+function cr(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: u } = n, d = e.selectFrom("hooks").where("hooks.tenant_id", "=", t);
 		if (u && (d = O(e, d, u, [
@@ -2571,7 +2571,7 @@ function or(e) {
 				...u,
 				enabled: !!n,
 				synchronous: !!i,
-				metadata: pt(s)
+				metadata: mt(s)
 			});
 		});
 		if (!s) return {
@@ -2591,7 +2591,7 @@ function or(e) {
 }
 //#endregion
 //#region src/hooks/get.ts
-function sr(e) {
+function lr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2604,20 +2604,20 @@ function sr(e) {
 			...d,
 			enabled: !!u.enabled,
 			synchronous: !!u.synchronous,
-			metadata: pt(c)
+			metadata: mt(c)
 		});
 	};
 }
 //#endregion
 //#region src/hooks/remove.ts
-function cr(e) {
+function ur(e) {
 	return async (t, n) => (await e.deleteFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hooks/create.ts
-function lr(e) {
+function dr(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? (n.hook_id || Ee()), { hook_id: l, enabled: u, synchronous: d, metadata: f, ...p } = n;
+		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? (n.hook_id || De()), { hook_id: l, enabled: u, synchronous: d, metadata: f, ...p } = n;
 		return await e.insertInto("hooks").values({
 			...p,
 			hook_id: c,
@@ -2640,7 +2640,7 @@ function lr(e) {
 }
 //#endregion
 //#region src/hooks/update.ts
-function ur(e) {
+function fr(e) {
 	return async (t, n, r) => {
 		let { hook_id: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -2654,20 +2654,20 @@ function ur(e) {
 }
 //#endregion
 //#region src/hooks/index.ts
-function dr(e) {
+function pr(e) {
 	return {
-		create: lr(e),
-		get: sr(e),
-		list: or(e),
-		update: ur(e),
-		remove: cr(e)
+		create: dr(e),
+		get: lr(e),
+		list: cr(e),
+		update: fr(e),
+		remove: ur(e)
 	};
 }
 //#endregion
 //#region src/hook-code/create.ts
-function fr(e) {
+function mr(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? Oe();
+		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? ke();
 		return await e.insertInto("hook_code").values({
 			id: c,
 			tenant_id: t,
@@ -2687,7 +2687,7 @@ function fr(e) {
 }
 //#endregion
 //#region src/hook-code/get.ts
-function pr(e) {
+function hr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2711,7 +2711,7 @@ function pr(e) {
 }
 //#endregion
 //#region src/hook-code/update.ts
-function mr(e) {
+function gr(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		return r.code !== void 0 && (i.code = r.code), r.secrets !== void 0 && (i.secrets = JSON.stringify(r.secrets)), (await e.updateTable("hook_code").set(i).where("hook_code.id", "=", n).where("hook_code.tenant_id", "=", t).executeTakeFirst()).numUpdatedRows > 0;
@@ -2719,22 +2719,22 @@ function mr(e) {
 }
 //#endregion
 //#region src/hook-code/remove.ts
-function hr(e) {
+function _r(e) {
 	return async (t, n) => (await e.deleteFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hook-code/index.ts
-function gr(e) {
+function vr(e) {
 	return {
-		create: fr(e),
-		get: pr(e),
-		update: mr(e),
-		remove: hr(e)
+		create: mr(e),
+		get: hr(e),
+		update: gr(e),
+		remove: _r(e)
 	};
 }
 //#endregion
 //#region src/themes/create.ts
-function _r(e) {
+function yr(e) {
 	return async (n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString(), c = {
 			themeId: o?.id || i || t(),
@@ -2750,15 +2750,15 @@ function _r(e) {
 }
 //#endregion
 //#region src/themes/remove.ts
-function vr(e) {
+function br(e) {
 	return async (t, n) => (await e.deleteFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/themes/get.ts
-function yr(e) {
+function xr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).selectAll().executeTakeFirst();
-		return r ? l(at({
+		return r ? l(ot({
 			...r,
 			borders_show_widget_shadow: !!r.borders_show_widget_shadow,
 			fonts_body_text_bold: !!r.fonts_body_text_bold,
@@ -2778,7 +2778,7 @@ function yr(e) {
 }
 //#endregion
 //#region src/themes/update.ts
-function br(e) {
+function Sr(e) {
 	return async (t, n, r) => {
 		let { themeId: i, ...a } = r, o = F({
 			...a,
@@ -2789,17 +2789,17 @@ function br(e) {
 }
 //#endregion
 //#region src/themes/index.ts
-function xr(e) {
+function Cr(e) {
 	return {
-		create: _r(e),
-		get: yr(e),
-		remove: vr(e),
-		update: br(e)
+		create: yr(e),
+		get: xr(e),
+		remove: br(e),
+		update: Sr(e)
 	};
 }
 //#endregion
 //#region src/loginSessions/get.ts
-function Sr(e) {
+function wr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("login_sessions").where("login_sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2811,40 +2811,40 @@ function Sr(e) {
 			"created_at_ts",
 			"updated_at_ts",
 			"expires_at_ts"
-		]), f = at(l({
+		]), f = ot(l({
 			...u,
 			...d,
 			state: i.state || p.PENDING,
 			state_data: i.state_data,
 			failure_reason: i.failure_reason
 		}), ["auth_strategy"]);
-		return f.authParams = typeof c == "string" && c.length > 0 ? JSON.parse(c) : {}, ae.parse(f);
+		return f.authParams = typeof c == "string" && c.length > 0 ? JSON.parse(c) : {}, oe.parse(f);
 	};
 }
 //#endregion
 //#region src/utils/ulid.ts
-var Cr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", B = 32, wr = 10, Tr = 16;
-function Er(e) {
+var Tr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", z = 32, Er = 10, Dr = 16;
+function Or(e) {
 	let t = "";
-	for (let n = wr; n > 0; n--) t = Cr.charAt(e % B) + t, e = Math.floor(e / B);
+	for (let n = Er; n > 0; n--) t = Tr.charAt(e % z) + t, e = Math.floor(e / z);
 	return t;
 }
-function Dr() {
-	let e = new Uint8Array(Tr);
+function kr() {
+	let e = new Uint8Array(Dr);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < Tr; n++) t += Cr.charAt(e[n] % B);
+	for (let n = 0; n < Dr; n++) t += Tr.charAt(e[n] % z);
 	return t;
 }
-function Or() {
-	return Er(Date.now()) + Dr();
+function Ar() {
+	return Or(Date.now()) + kr();
 }
 //#endregion
 //#region src/loginSessions/create.ts
-function kr(e) {
+function jr(e) {
 	return async (t, n) => {
 		let r = c(), i = {
-			id: Or(),
+			id: Ar(),
 			...n,
 			authorization_url: n.authorization_url?.slice(0, 1024),
 			created_at: r,
@@ -2865,7 +2865,7 @@ function kr(e) {
 }
 //#endregion
 //#region src/loginSessions/update.ts
-function Ar(e) {
+function Mr(e) {
 	return async (t, n, r) => {
 		let { created_at: i, updated_at: a, expires_at: o, authParams: c, ...l } = r, u = {};
 		if (c !== void 0) {
@@ -2886,22 +2886,22 @@ function Ar(e) {
 }
 //#endregion
 //#region src/loginSessions/remove.ts
-function jr(e) {
+function Nr(e) {
 	return async (t, n) => (await e.deleteFrom("login_sessions").where("login_sessions.tenant_id", "=", t).where("login_sessions.id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/loginSessions/index.ts
-function Mr(e) {
+function Pr(e) {
 	return {
-		create: kr(e),
-		get: Sr(e),
-		update: Ar(e),
-		remove: jr(e)
+		create: jr(e),
+		get: wr(e),
+		update: Mr(e),
+		remove: Nr(e)
 	};
 }
 //#endregion
 //#region src/promptSettings/get.ts
-function Nr(e) {
+function Fr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("prompt_settings").where("prompt_settings.tenant_id", "=", t).selectAll().execute();
 		return l({
@@ -2915,13 +2915,13 @@ function Nr(e) {
 }
 //#endregion
 //#region src/promptSettings/set.ts
-function Pr(e) {
+function Ir(e) {
 	let t = {};
 	return typeof e.identifier_first == "boolean" && (t.identifier_first = +!!e.identifier_first), typeof e.password_first == "boolean" && (t.password_first = +!!e.password_first), typeof e.webauthn_platform_first_factor == "boolean" && (t.webauthn_platform_first_factor = +!!e.webauthn_platform_first_factor), typeof e.show_last_used_connection == "boolean" && (t.show_last_used_connection = +!!e.show_last_used_connection), e.universal_login_experience && (t.universal_login_experience = e.universal_login_experience), t;
 }
-function Fr(e) {
+function Lr(e) {
 	return async (t, n) => {
-		let r = Pr(n);
+		let r = Ir(n);
 		try {
 			await e.insertInto("prompt_settings").values({
 				tenant_id: t,
@@ -2939,15 +2939,15 @@ function Fr(e) {
 }
 //#endregion
 //#region src/promptSettings/index.ts
-function Ir(e) {
+function Rr(e) {
 	return {
-		get: Nr(e),
-		set: Fr(e)
+		get: Fr(e),
+		set: Lr(e)
 	};
 }
 //#endregion
 //#region src/emailProvideres/get.ts
-function Lr(e) {
+function zr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("email_providers").where("email_providers.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2962,7 +2962,7 @@ function Lr(e) {
 }
 //#endregion
 //#region src/emailProvideres/update.ts
-function Rr(e) {
+function Br(e) {
 	return async (t, n) => {
 		let { credentials: r, settings: i, enabled: a, ...o } = n;
 		await e.updateTable("email_providers").set({
@@ -2975,7 +2975,7 @@ function Rr(e) {
 }
 //#endregion
 //#region src/emailProvideres/create.ts
-function zr(e) {
+function Vr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), { credentials: o, settings: s, enabled: c, ...l } = n;
 		await e.insertInto("email_providers").values({
@@ -2991,24 +2991,24 @@ function zr(e) {
 }
 //#endregion
 //#region src/emailProvideres/remove.ts
-function Br(e) {
+function Hr(e) {
 	return async (t) => {
 		await e.deleteFrom("email_providers").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/emailProvideres/index.ts
-function Vr(e) {
+function Ur(e) {
 	return {
-		get: Lr(e),
-		create: zr(e),
-		update: Rr(e),
-		remove: Br(e)
+		get: zr(e),
+		create: Vr(e),
+		update: Br(e),
+		remove: Hr(e)
 	};
 }
 //#endregion
 //#region src/emailTemplates/row.ts
-function Hr(e) {
+function Wr(e) {
 	let t = {
 		template: e.template,
 		body: e.body,
@@ -3022,20 +3022,20 @@ function Hr(e) {
 }
 //#endregion
 //#region src/emailTemplates/get.ts
-function Ur(e) {
+function Gr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).selectAll().executeTakeFirst();
-		return r ? te.parse(Hr(r)) : null;
+		return r ? ne.parse(Wr(r)) : null;
 	};
 }
 //#endregion
 //#region src/emailTemplates/list.ts
-function Wr(e) {
-	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => te.parse(Hr(e)));
+function Kr(e) {
+	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => ne.parse(Wr(e)));
 }
 //#endregion
 //#region src/emailTemplates/create.ts
-function Gr(e) {
+function qr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? i?.created_at ?? a;
 		return await e.insertInto("email_templates").values({
@@ -3056,7 +3056,7 @@ function Gr(e) {
 }
 //#endregion
 //#region src/emailTemplates/update.ts
-function Kr(e) {
+function Jr(e) {
 	return async (t, n, r) => {
 		let i = {};
 		if (r.body !== void 0 && (i.body = r.body), r.from !== void 0 && (i.from = r.from), r.subject !== void 0 && (i.subject = r.subject), r.syntax !== void 0 && (i.syntax = r.syntax), r.resultUrl !== void 0 && (i.result_url = r.resultUrl), r.urlLifetimeInSeconds !== void 0 && (i.url_lifetime_in_seconds = r.urlLifetimeInSeconds), r.includeEmailInRedirect !== void 0 && (i.include_email_in_redirect = +!!r.includeEmailInRedirect), r.enabled !== void 0 && (i.enabled = +!!r.enabled), Object.keys(i).length === 0) return await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).select("template").executeTakeFirst() !== void 0;
@@ -3067,7 +3067,7 @@ function Kr(e) {
 }
 //#endregion
 //#region src/emailTemplates/remove.ts
-function qr(e) {
+function Yr(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows ?? 0) > 0;
@@ -3075,18 +3075,18 @@ function qr(e) {
 }
 //#endregion
 //#region src/emailTemplates/index.ts
-function Jr(e) {
+function Xr(e) {
 	return {
-		get: Ur(e),
-		list: Wr(e),
-		create: Gr(e),
-		update: Kr(e),
-		remove: qr(e)
+		get: Gr(e),
+		list: Kr(e),
+		create: qr(e),
+		update: Jr(e),
+		remove: Yr(e)
 	};
 }
 //#endregion
 //#region src/refreshTokens/get.ts
-function Yr(e) {
+function Zr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -3115,7 +3115,7 @@ function Yr(e) {
 }
 //#endregion
 //#region src/refreshTokens/getByLookup.ts
-function Xr(e) {
+function Qr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.token_lookup", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -3144,7 +3144,7 @@ function Xr(e) {
 }
 //#endregion
 //#region src/refreshTokens/create.ts
-function Zr(e) {
+function $r(e) {
 	return async (t, n) => {
 		let r = c(), i = {
 			...n,
@@ -3174,12 +3174,12 @@ function Zr(e) {
 }
 //#endregion
 //#region src/refreshTokens/remove.ts
-function Qr(e) {
+function ei(e) {
 	return async (t, n) => !!(await e.deleteFrom("refresh_tokens").where("tenant_id", "=", t).where("refresh_tokens.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/refreshTokens/revokeByLoginSession.ts
-function $r(e) {
+function ti(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("login_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3187,7 +3187,7 @@ function $r(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeFamily.ts
-function ei(e) {
+function ni(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("family_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3195,7 +3195,7 @@ function ei(e) {
 }
 //#endregion
 //#region src/refreshTokens/update.ts
-function ti(e) {
+function ri(e) {
 	return async (t, n, r, i) => {
 		let { created_at: a, expires_at: o, idle_expires_at: c, last_exchanged_at: l, revoked_at: u, rotated_at: d, device: f, resource_servers: p, rotating: m, ...h } = r, g = {
 			...h,
@@ -3216,7 +3216,7 @@ function ti(e) {
 }
 //#endregion
 //#region src/refreshTokens/list.ts
-function ni(e) {
+function ii(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t);
 		l && (u = O(e, u, l, ["token", "login_id"]));
@@ -3266,24 +3266,24 @@ function ni(e) {
 }
 //#endregion
 //#region src/refreshTokens/index.ts
-function ri(e) {
+function ai(e) {
 	return {
-		create: Zr(e),
-		get: Yr(e),
-		getByLookup: Xr(e),
-		list: ni(e),
-		remove: Qr(e),
-		revokeByLoginSession: $r(e),
-		revokeFamily: ei(e),
-		update: ti(e)
+		create: $r(e),
+		get: Zr(e),
+		getByLookup: Qr(e),
+		list: ii(e),
+		remove: ei(e),
+		revokeByLoginSession: ti(e),
+		revokeFamily: ni(e),
+		update: ri(e)
 	};
 }
 //#endregion
 //#region src/cleanup.ts
-var ii = 10080 * 60 * 1e3;
-function ai(e) {
+var oi = 10080 * 60 * 1e3;
+function si(e) {
 	return async (t) => {
-		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - ii, a = 1e3;
+		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - oi, a = 1e3;
 		try {
 			let t = 0;
 			for (;;) {
@@ -3314,7 +3314,7 @@ function ai(e) {
 }
 //#endregion
 //#region src/forms/create.ts
-function oi(e) {
+function ci(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = x.parse({
 			id: a?.id ?? t(),
@@ -3333,7 +3333,7 @@ function oi(e) {
 }
 //#endregion
 //#region src/forms/list.ts
-function si(e) {
+function li(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("forms").where("tenant_id", "=", t);
 		s && (c = O(e, c, s, []));
@@ -3367,7 +3367,7 @@ function si(e) {
 }
 //#endregion
 //#region src/forms/remove.ts
-function ci(e) {
+function ui(e) {
 	return async (t, n) => {
 		let { numDeletedRows: r } = await e.deleteFrom("forms").where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r > 0;
@@ -3375,7 +3375,7 @@ function ci(e) {
 }
 //#endregion
 //#region src/forms/get.ts
-function li(e) {
+function di(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("forms").selectAll().where("forms.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
@@ -3394,7 +3394,7 @@ function li(e) {
 }
 //#endregion
 //#region src/forms/update.ts
-function ui(e) {
+function fi(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -3411,25 +3411,25 @@ function ui(e) {
 }
 //#endregion
 //#region src/forms/index.ts
-function di(e) {
+function pi(e) {
 	return {
-		create: oi(e),
-		get: li(e),
-		list: si(e),
-		remove: ci(e),
-		update: ui(e)
+		create: ci(e),
+		get: di(e),
+		list: li(e),
+		remove: ui(e),
+		update: fi(e)
 	};
 }
 //#endregion
 //#region src/resourceServers/create.ts
-function fi(e) {
+function mi(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = {
 			...n,
-			id: i?.id ?? n.id ?? De(),
+			id: i?.id ?? n.id ?? Oe(),
 			created_at: o,
 			updated_at: s
-		}, u = le.parse(c), { verificationKey: d, scopes: f, options: p, skip_consent_for_verifiable_first_party_clients: m, allow_offline_access: h, is_system: g, metadata: _, ...v } = u, y = {
+		}, u = ue.parse(c), { verificationKey: d, scopes: f, options: p, skip_consent_for_verifiable_first_party_clients: m, allow_offline_access: h, is_system: g, metadata: _, ...v } = u, y = {
 			...v,
 			tenant_id: t,
 			scopes: f ? JSON.stringify(f) : "[]",
@@ -3447,7 +3447,7 @@ function fi(e) {
 }
 //#endregion
 //#region src/resourceServers/get.ts
-function pi(e) {
+function hi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("resource_servers").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3466,7 +3466,7 @@ function pi(e) {
 }
 //#endregion
 //#region src/resourceServers/list.ts
-function mi(e) {
+function gi(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", t);
 		if (s) {
@@ -3506,7 +3506,7 @@ function mi(e) {
 }
 //#endregion
 //#region src/resourceServers/remove.ts
-function hi(e) {
+function _i(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("resource_servers").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3514,7 +3514,7 @@ function hi(e) {
 }
 //#endregion
 //#region src/resourceServers/update.ts
-function gi(e) {
+function vi(e) {
 	return async (t, n, r) => {
 		let { verificationKey: i, scopes: a, options: o, skip_consent_for_verifiable_first_party_clients: s, allow_offline_access: c, is_system: l, metadata: u, ...d } = r, f = {
 			...d,
@@ -3534,18 +3534,18 @@ function gi(e) {
 }
 //#endregion
 //#region src/resourceServers/index.ts
-function _i(e) {
+function yi(e) {
 	return {
-		create: fi(e),
-		get: pi(e),
-		list: mi(e),
-		remove: hi(e),
-		update: gi(e)
+		create: mi(e),
+		get: hi(e),
+		list: gi(e),
+		remove: _i(e),
+		update: vi(e)
 	};
 }
 //#endregion
 //#region src/roles/create.ts
-function vi(e) {
+function bi(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.created_at ?? o, c = a?.updated_at ?? o, l = a?.id || r.id || t(), { is_system: u, id: d, metadata: f, ...p } = r, m = {
 			id: l,
@@ -3568,7 +3568,7 @@ function vi(e) {
 }
 //#endregion
 //#region src/roles/get.ts
-function yi(e) {
+function xi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("roles").selectAll().where("roles.tenant_id", "=", t).where("roles.id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3582,7 +3582,7 @@ function yi(e) {
 }
 //#endregion
 //#region src/roles/list.ts
-function bi(e) {
+function Si(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("roles").where("roles.tenant_id", "=", t), { page: i = 0, per_page: a = 50, include_totals: s = !1 } = n;
 		n.q && (r = O(e, r, n.q, ["name"]));
@@ -3611,7 +3611,7 @@ function bi(e) {
 }
 //#endregion
 //#region src/roles/update.ts
-function xi(e) {
+function Ci(e) {
 	return async (t, n, r) => {
 		let { is_system: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -3624,7 +3624,7 @@ function xi(e) {
 }
 //#endregion
 //#region src/roles/remove.ts
-function Si(e) {
+function wi(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("roles").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3632,18 +3632,23 @@ function Si(e) {
 }
 //#endregion
 //#region src/roles/index.ts
-function Ci(e) {
+function Ti(e) {
 	return {
-		create: vi(e),
-		get: yi(e),
-		list: bi(e),
-		update: xi(e),
-		remove: Si(e)
+		create: bi(e),
+		get: xi(e),
+		list: Si(e),
+		update: Ci(e),
+		remove: wi(e)
 	};
 }
 //#endregion
 //#region src/role-permissions/assign.ts
-function wi(e) {
+function Ei(e) {
+	if (typeof e != "object" || !e) return !1;
+	let { code: t, message: n } = e;
+	return t === "SQLITE_CONSTRAINT" || t === "SQLITE_CONSTRAINT_PRIMARYKEY" || t === "SQLITE_CONSTRAINT_UNIQUE" || t === "ER_DUP_ENTRY" || t === "23505" ? !0 : typeof n == "string" && (n.includes("UNIQUE constraint failed") || n.includes("Duplicate entry") || n.includes("duplicate key") || n.includes("AlreadyExists"));
+}
+function Di(e) {
 	return async (t, n, r, i) => {
 		if (r.length === 0) return !0;
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString();
@@ -3660,7 +3665,7 @@ function wi(e) {
 				try {
 					await e.insertInto("role_permissions").values(r).execute();
 				} catch (e) {
-					if (e.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "ER_DUP_ENTRY") continue;
+					if (Ei(e)) continue;
 					throw e;
 				}
 			}
@@ -3672,11 +3677,11 @@ function wi(e) {
 }
 //#endregion
 //#region src/role-permissions/remove.ts
-function Ti(e) {
+function Oi(e) {
 	return async (t, n, r) => {
 		if (r.length === 0) return !0;
 		try {
-			return (await Promise.all(r.map((r) => e.deleteFrom("role_permissions").where("tenant_id", "=", t).where("role_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name).executeTakeFirst()))).some((e) => Number(e.numDeletedRows) > 0);
+			return await Promise.all(r.map((r) => e.deleteFrom("role_permissions").where("tenant_id", "=", t).where("role_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name).executeTakeFirst())), !0;
 		} catch (e) {
 			return console.error("Error removing role permissions:", e), !1;
 		}
@@ -3684,7 +3689,7 @@ function Ti(e) {
 }
 //#endregion
 //#region src/role-permissions/list.ts
-function Ei(e) {
+function ki(e) {
 	return async (t, n, r = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: o = !1 } = r, s = e.selectFrom("role_permissions").leftJoin("resource_servers", (e) => e.onRef("role_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("role_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"role_permissions.role_id",
@@ -3705,16 +3710,16 @@ function Ei(e) {
 }
 //#endregion
 //#region src/role-permissions/index.ts
-function Di(e) {
+function Ai(e) {
 	return {
-		assign: wi(e),
-		remove: Ti(e),
-		list: Ei(e)
+		assign: Di(e),
+		remove: Oi(e),
+		list: ki(e)
 	};
 }
 //#endregion
 //#region src/grants/create.ts
-function Oi(e) {
+function ji(e) {
 	return async (n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = r.scope ?? [], o = r.audience ?? "", s = await e.selectFrom("grants").where("tenant_id", "=", n).where("user_id", "=", r.user_id).where("client_id", "=", r.clientID).where("audience", "=", o).selectAll().executeTakeFirst();
 		if (s) {
@@ -3751,7 +3756,7 @@ function Oi(e) {
 }
 //#endregion
 //#region src/grants/get.ts
-function ki(e) {
+function Mi(e) {
 	return async (t, n, r, i) => {
 		let a = await e.selectFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).where("client_id", "=", r).where("audience", "=", i ?? "").selectAll().executeTakeFirst();
 		return a ? {
@@ -3765,7 +3770,7 @@ function ki(e) {
 }
 //#endregion
 //#region src/grants/list.ts
-function Ai(e) {
+function Ni(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("grants").where("grants.tenant_id", "=", t);
 		c && (l = O(e, l, c, [
@@ -3803,26 +3808,26 @@ function Ai(e) {
 }
 //#endregion
 //#region src/grants/remove.ts
-function ji(e) {
+function Pi(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
-function Mi(e) {
+function Fi(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/grants/index.ts
-function Ni(e) {
+function Ii(e) {
 	return {
-		create: Oi(e),
-		get: ki(e),
-		list: Ai(e),
-		remove: ji(e),
-		removeByUser: Mi(e)
+		create: ji(e),
+		get: Mi(e),
+		list: Ni(e),
+		remove: Pi(e),
+		removeByUser: Fi(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/create.ts
-function Pi(e) {
+function Li(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3842,7 +3847,7 @@ function Pi(e) {
 }
 //#endregion
 //#region src/user-permissions/remove.ts
-function Fi(e) {
+function Ri(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_permissions").where("tenant_id", "=", t).where("user_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name);
@@ -3854,7 +3859,7 @@ function Fi(e) {
 }
 //#endregion
 //#region src/user-permissions/list.ts
-function Ii(e) {
+function zi(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_permissions").leftJoin("resource_servers", (e) => e.onRef("user_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("user_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"user_permissions.resource_server_identifier",
@@ -3877,17 +3882,17 @@ function Ii(e) {
 }
 //#endregion
 //#region src/user-permissions/index.ts
-function Li(e) {
+function Bi(e) {
 	return {
-		create: Pi(e),
-		remove: Fi(e),
-		list: Ii(e)
+		create: Li(e),
+		remove: Ri(e),
+		list: zi(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/adapter.ts
-function Ri(e) {
-	let t = Li(e);
+function Vi(e) {
+	let t = Bi(e);
 	return {
 		create: (e, n, r, i) => t.create(e, n, r, i),
 		remove: (e, n, r, i) => t.remove(e, n, r, i),
@@ -3896,7 +3901,7 @@ function Ri(e) {
 }
 //#endregion
 //#region src/user-roles/list.ts
-function zi(e) {
+function Hi(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_roles as ur").innerJoin("roles as r", (e) => e.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")).select([
 			"r.id",
@@ -3910,7 +3915,7 @@ function zi(e) {
 }
 //#endregion
 //#region src/user-roles/list-users.ts
-function Bi(e) {
+function Ui(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("user_roles").select("user_id").distinct().where("tenant_id", "=", t).where("role_id", "=", n);
 		if (N(r)) {
@@ -3938,7 +3943,7 @@ function Bi(e) {
 }
 //#endregion
 //#region src/user-roles/create.ts
-function Vi(e) {
+function Wi(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3956,7 +3961,7 @@ function Vi(e) {
 }
 //#endregion
 //#region src/user-roles/remove.ts
-function Hi(e) {
+function Gi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_roles").where("tenant_id", "=", t).where("user_id", "=", n).where("role_id", "=", r);
@@ -3968,18 +3973,18 @@ function Hi(e) {
 }
 //#endregion
 //#region src/user-roles/index.ts
-function Ui(e) {
+function Ki(e) {
 	return {
-		list: zi(e),
-		listUsers: Bi(e),
-		create: Vi(e),
-		remove: Hi(e)
+		list: Hi(e),
+		listUsers: Ui(e),
+		create: Wi(e),
+		remove: Gi(e)
 	};
 }
 //#endregion
 //#region src/user-roles/adapter.ts
-function Wi(e) {
-	let t = Ui(e);
+function qi(e) {
+	let t = Ki(e);
 	return {
 		list: (e, n, r, i) => t.list(e, n, r, i),
 		listUsers: (e, n, r) => t.listUsers(e, n, r),
@@ -3989,11 +3994,11 @@ function Wi(e) {
 }
 //#endregion
 //#region src/organizations/create.ts
-function Gi(e) {
+function Ji(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
-			id: i?.id || n.id || Se(),
+			id: i?.id || n.id || Ce(),
 			tenant_id: t,
 			created_at: i?.created_at ?? a,
 			updated_at: i?.updated_at ?? a,
@@ -4017,7 +4022,7 @@ function Gi(e) {
 }
 //#endregion
 //#region src/organizations/get.ts
-function Ki(e) {
+function Yi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ||= await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("name", "=", n).executeTakeFirst(), r ? l({
@@ -4031,13 +4036,13 @@ function Ki(e) {
 }
 //#endregion
 //#region src/organizations/list.ts
-var V = ["name", "display_name"];
-function qi(e) {
+var B = ["name", "display_name"];
+function Xi(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 		if (n?.q) {
-			let t = S(n.q, V);
-			t && (r = O(e, r, t, V));
+			let t = S(n.q, B);
+			t && (r = O(e, r, t, B));
 		}
 		if (N(n)) {
 			let { rows: e, limit: t, next: i } = await P(r.selectAll(), n, {
@@ -4073,8 +4078,8 @@ function qi(e) {
 		if (n?.include_totals) {
 			let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 			if (n?.q) {
-				let t = S(n.q, V);
-				t && (r = O(e, r, t, V));
+				let t = S(n.q, B);
+				t && (r = O(e, r, t, B));
 			}
 			let i = await r.select(f`count(*)`.as("count")).executeTakeFirst();
 			u = Number(i?.count || 0);
@@ -4097,12 +4102,12 @@ function qi(e) {
 }
 //#endregion
 //#region src/organizations/remove.ts
-function Ji(e) {
+function Zi(e) {
 	return async (t, n) => (await e.deleteFrom("organizations").where("tenant_id", "=", t).where("id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/organizations/update.ts
-function Yi(e) {
+function Qi(e) {
 	return async (t, n, r) => {
 		let { branding: i, metadata: a, enabled_connections: o, token_quota: s, ...c } = r, l = {
 			...c,
@@ -4118,18 +4123,18 @@ function Yi(e) {
 }
 //#endregion
 //#region src/organizations/index.ts
-function Xi(e) {
+function $i(e) {
 	return {
-		create: Gi(e),
-		get: Ki(e),
-		list: qi(e),
-		remove: Ji(e),
-		update: Yi(e)
+		create: Ji(e),
+		get: Yi(e),
+		list: Xi(e),
+		remove: Zi(e),
+		update: Qi(e)
 	};
 }
 //#endregion
 //#region src/organization-connections/index.ts
-function H(e, t) {
+function V(e, t) {
 	return {
 		connection_id: e.connection_id,
 		assign_membership_on_login: !!e.assign_membership_on_login,
@@ -4143,14 +4148,14 @@ function H(e, t) {
 		updated_at: e.updated_at
 	};
 }
-async function U(e, t, n) {
+async function H(e, t, n) {
 	let r = await e.selectFrom("connections").select(["name", "strategy"]).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 	if (r) return {
 		name: r.name,
 		strategy: typeof r.strategy == "string" ? r.strategy : void 0
 	};
 }
-function Zi(e) {
+function ea(e) {
 	return {
 		async create(t, n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -4163,19 +4168,19 @@ function Zi(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("organization_connections").values(s).execute(), H(s, await U(e, t, r.connection_id));
+			return await e.insertInto("organization_connections").values(s).execute(), V(s, await H(e, t, r.connection_id));
 		},
 		async list(t, n) {
 			let r = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).execute(), i = [];
 			for (let n of r) {
-				let r = await U(e, t, n.connection_id);
-				i.push(H(n, r));
+				let r = await H(e, t, n.connection_id);
+				i.push(V(n, r));
 			}
 			return i;
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
-			return i ? H(i, await U(e, t, r)) : null;
+			return i ? V(i, await H(e, t, r)) : null;
 		},
 		async update(t, n, r, i) {
 			let a = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -4183,7 +4188,7 @@ function Zi(e) {
 			let o = await e.updateTable("organization_connections").set(a).where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
 			if (Number(o.numUpdatedRows ?? 0) === 0) return null;
 			let s = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
-			return s ? H(s, await U(e, t, r)) : null;
+			return s ? V(s, await H(e, t, r)) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("organization_connections").where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
@@ -4193,7 +4198,7 @@ function Zi(e) {
 }
 //#endregion
 //#region src/user-organizations/create.ts
-function Qi(e) {
+function ta(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			id: a?.id ?? t(),
@@ -4213,7 +4218,7 @@ function Qi(e) {
 }
 //#endregion
 //#region src/user-organizations/get.ts
-function $i(e) {
+function na(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("user_organizations").selectAll().where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r ? {
@@ -4227,7 +4232,7 @@ function $i(e) {
 }
 //#endregion
 //#region src/user-organizations/list.ts
-function ea(e) {
+function ra(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("user_organizations").selectAll().where("tenant_id", "=", t);
 		if (n?.q) {
@@ -4280,7 +4285,7 @@ function ea(e) {
 }
 //#endregion
 //#region src/user-organizations/listUserOrganizations.ts
-function ta(e) {
+function ia(e) {
 	return async (t, n, r) => {
 		let i = r?.page || 0, a = r?.per_page || 50, o = i * a, s = e.selectFrom("user_organizations").innerJoin("organizations", (e) => e.onRef("organizations.id", "=", "user_organizations.organization_id").on("organizations.tenant_id", "=", t)).select([
 			"organizations.id",
@@ -4317,12 +4322,12 @@ function ta(e) {
 }
 //#endregion
 //#region src/user-organizations/remove.ts
-function na(e) {
+function aa(e) {
 	return async (t, n) => (await e.deleteFrom("user_organizations").where("id", "=", n).where("tenant_id", "=", t).execute()).length > 0;
 }
 //#endregion
 //#region src/user-organizations/update.ts
-function ra(e) {
+function oa(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -4333,21 +4338,21 @@ function ra(e) {
 }
 //#endregion
 //#region src/user-organizations/index.ts
-function ia(e) {
+function sa(e) {
 	return {
-		create: Qi(e),
-		get: $i(e),
-		list: ea(e),
-		listUserOrganizations: ta(e),
-		remove: na(e),
-		update: ra(e)
+		create: ta(e),
+		get: na(e),
+		list: ra(e),
+		listUserOrganizations: ia(e),
+		remove: aa(e),
+		update: oa(e)
 	};
 }
 //#endregion
 //#region src/invites/create.ts
-function aa(e) {
+function ca(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = i?.id ?? n.id ?? ke(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
+		let i = r?.importMetadata, a = i?.id ?? n.id ?? Ae(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
 			id: a,
 			tenant_id: t,
 			organization_id: n.organization_id,
@@ -4391,11 +4396,11 @@ function aa(e) {
 }
 //#endregion
 //#region src/invites/get.ts
-function oa(e) {
+function la(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("invites").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ? l({
-			...mt(r, {
+			...ht(r, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4408,7 +4413,7 @@ function oa(e) {
 }
 //#endregion
 //#region src/invites/list.ts
-function sa(e) {
+function ua(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("invites").selectAll().where("tenant_id", "=", t).orderBy("created_at", "desc");
 		if (n?.per_page && (r = r.limit(n.per_page)), n?.page) {
@@ -4416,7 +4421,7 @@ function sa(e) {
 			r = r.offset(e);
 		}
 		let i = (await r.execute()).map((e) => l({
-			...mt(e, {
+			...ht(e, {
 				inviter: {},
 				invitee: {},
 				app_metadata: {},
@@ -4435,12 +4440,12 @@ function sa(e) {
 }
 //#endregion
 //#region src/invites/remove.ts
-function ca(e) {
+function da(e) {
 	return async (t, n) => (await e.deleteFrom("invites").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0n;
 }
 //#endregion
 //#region src/invites/update.ts
-function la(e) {
+function fa(e) {
 	return async (t, n, r) => {
 		let i = {};
 		return r.inviter !== void 0 && (i.inviter = JSON.stringify(r.inviter)), r.invitee !== void 0 && (i.invitee = JSON.stringify(r.invitee)), r.client_id !== void 0 && (i.client_id = r.client_id), r.connection_id !== void 0 && (i.connection_id = r.connection_id), r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), r.roles !== void 0 && (i.roles = JSON.stringify(r.roles)), r.ttl_sec !== void 0 && (i.ttl_sec = r.ttl_sec, i.expires_at = new Date(Date.now() + r.ttl_sec * 1e3).toISOString()), r.send_invitation_email !== void 0 && (i.send_invitation_email = +!!r.send_invitation_email), Object.keys(i).length === 0 ? !0 : (await e.updateTable("invites").set(i).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numUpdatedRows > 0n;
@@ -4448,35 +4453,35 @@ function la(e) {
 }
 //#endregion
 //#region src/invites/index.ts
-function ua(e) {
+function pa(e) {
 	return {
-		create: aa(e),
-		get: oa(e),
-		list: sa(e),
-		remove: ca(e),
-		update: la(e)
+		create: ca(e),
+		get: la(e),
+		list: ua(e),
+		remove: da(e),
+		update: fa(e)
 	};
 }
 //#endregion
 //#region src/stats/index.ts
-var da = ["s"], fa = ["pwd_leak"];
-function pa(e) {
+var ma = ["s"], ha = ["pwd_leak"];
+function ga(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function ma(e) {
+function _a(e) {
 	return e.toISOString().split("T")[0];
 }
-function ha(e) {
+function va(e) {
 	return {
 		async getDaily(t, n = {}) {
 			let { from: r, to: i } = n, a = /* @__PURE__ */ new Date(), o = new Date(a);
 			o.setDate(o.getDate() - 30);
-			let s = r ? pa(r) : ma(o), c = i ? pa(i) : ma(a), l = f`DATE(logs.date)`;
+			let s = r ? ga(r) : _a(o), c = i ? ga(i) : _a(a), l = f`DATE(logs.date)`;
 			return (await e.selectFrom("logs").where("tenant_id", "=", t).where(l, ">=", s).where(l, "<=", c).select((e) => [
 				l.as("date"),
-				e.fn.sum(e.case().when("type", "in", da).then(1).else(0).end()).as("logins"),
+				e.fn.sum(e.case().when("type", "in", ma).then(1).else(0).end()).as("logins"),
 				e.fn.sum(e.case().when("type", "=", "ss").then(1).else(0).end()).as("signups"),
-				e.fn.sum(e.case().when("type", "in", fa).then(1).else(0).end()).as("leaked_passwords"),
+				e.fn.sum(e.case().when("type", "in", ha).then(1).else(0).end()).as("leaked_passwords"),
 				e.fn.min("date").as("first_event"),
 				e.fn.max("date").as("last_event")
 			]).groupBy(l).orderBy("date", "asc").execute()).map((e) => ({
@@ -4490,13 +4495,13 @@ function ha(e) {
 		},
 		async getActiveUsers(t) {
 			let n = /* @__PURE__ */ new Date();
-			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", da).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
+			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", ma).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
 		}
 	};
 }
 //#endregion
 //#region src/analytics/index.ts
-var ga = {
+var ya = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -4526,7 +4531,7 @@ var ga = {
 		"fvr"
 	],
 	"codes-sent": ["cls", "cs"]
-}, _a = {
+}, ba = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -4583,14 +4588,14 @@ var ga = {
 		agg: "count"
 	}
 };
-async function va(e) {
+async function xa(e) {
 	try {
 		return await f`SELECT @@version_comment`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-function W(e, t) {
+function U(e, t) {
 	let n = new Intl.DateTimeFormat("en-US", {
 		timeZone: e,
 		year: "numeric",
@@ -4605,7 +4610,7 @@ function W(e, t) {
 	let i = r.hour === "24" ? "00" : r.hour, a = Date.UTC(Number(r.year), Number(r.month) - 1, Number(r.day), Number(i), Number(r.minute), Number(r.second)), o = Math.round((a - t.getTime()) / 6e4), s = o >= 0 ? "+" : "-", c = Math.abs(o);
 	return `${s}${String(Math.floor(c / 60)).padStart(2, "0")}:${String(c % 60).padStart(2, "0")}`;
 }
-var ya = [
+var Sa = [
 	"January",
 	"February",
 	"March",
@@ -4619,22 +4624,22 @@ var ya = [
 	"November",
 	"December"
 ];
-function ba(e, t) {
-	let n = t.getUTCFullYear(), r = W(e, new Date(Date.UTC(n, 0, 1)));
+function Ca(e, t) {
+	let n = t.getUTCFullYear(), r = U(e, new Date(Date.UTC(n, 0, 1)));
 	for (let t = 1; t < 12; t++) {
-		let i = W(e, new Date(Date.UTC(n, t, 1)));
-		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${ya[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
+		let i = U(e, new Date(Date.UTC(n, t, 1)));
+		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${Sa[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
 	}
 }
-function xa(e) {
+function wa(e) {
 	let t = e.startsWith("-") ? -1 : 1, [n, r] = e.slice(1).split(":");
 	return t * (Number(n) * 60 + Number(r));
 }
-function Sa(e, t) {
+function Ta(e, t) {
 	let n;
 	if (t === "+00:00") n = f`${f.ref("logs.date")}`;
 	else {
-		let e = xa(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
+		let e = wa(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
 		n = f`datetime(${f.ref("logs.date")}, ${r})`;
 	}
 	switch (e) {
@@ -4645,7 +4650,7 @@ function Sa(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function Ca(e, t) {
+function Ea(e, t) {
 	if (t === "+00:00") switch (e) {
 		case "hour": return f`substring(${f.ref("logs.date")}, 1, 13)`;
 		case "day": return f`substring(${f.ref("logs.date")}, 1, 10)`;
@@ -4656,7 +4661,7 @@ function Ca(e, t) {
 		}
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
-	let n = xa(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
+	let n = wa(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
 	switch (e) {
 		case "hour": return f`date_format(${r}, '%Y-%m-%dT%H')`;
 		case "day": return f`date_format(${r}, '%Y-%m-%d')`;
@@ -4665,12 +4670,12 @@ function Ca(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function wa(e, t, n, r) {
-	ba(t, n);
-	let i = W(t, n);
-	return r === "mysql" ? Ca(e, i) : Sa(e, i);
+function Da(e, t, n, r) {
+	Ca(t, n);
+	let i = U(t, n);
+	return r === "mysql" ? Ea(e, i) : Ta(e, i);
 }
-function Ta(e) {
+function Oa(e) {
 	switch (e) {
 		case "connection": return "logs.connection";
 		case "client_id": return "logs.client_id";
@@ -4679,15 +4684,15 @@ function Ta(e) {
 		case "time": throw Error("time dimension is handled separately");
 	}
 }
-function Ea(e) {
-	let t = null, n = () => (t ||= va(e), t);
+function ka(e) {
+	let t = null, n = () => (t ||= xa(e), t);
 	return {
 		async query(t, r, i) {
-			let a = Date.now(), o = ga[r], s = _a[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
+			let a = Date.now(), o = ya[r], s = ba[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
 			u = u.where("date", ">=", i.from).where("date", "<", i.to), u = u.where("type", "in", o), i.filters.connection?.length && (u = u.where("connection", "in", i.filters.connection)), i.filters.client_id?.length && (u = u.where("client_id", "in", i.filters.client_id)), i.filters.user_type?.length && (u = u.where("strategy_type", "in", i.filters.user_type)), i.filters.user_id?.length && (u = u.where("user_id", "in", i.filters.user_id));
 			let d = [], p = [];
 			for (let e of i.group_by) if (e === "time") {
-				let e = wa(i.interval, i.tz, new Date(i.from), c);
+				let e = Da(i.interval, i.tz, new Date(i.from), c);
 				p.push({
 					alias: "time",
 					expr: e
@@ -4696,7 +4701,7 @@ function Ea(e) {
 					type: i.interval === "hour" ? "DateTime" : "Date"
 				});
 			} else {
-				let t = Ta(e);
+				let t = Oa(e);
 				p.push({
 					alias: e,
 					expr: f`${f.ref(t)}`
@@ -4736,11 +4741,11 @@ function Ea(e) {
 			};
 		},
 		async sessionRetention(t, r) {
-			let i = Date.now(), { sinceMs: a } = pe(r.weeks, i), o = await n(), s = (e) => {
+			let i = Date.now(), { sinceMs: a } = me(r.weeks, i), o = await n(), s = (e) => {
 				let t = e === "used_at_ts" ? f`(COALESCE(${f.ref("used_at_ts")}, ${f.ref("created_at_ts")}) + ${f.lit(m)})` : f`(${f.ref(e)} + ${f.lit(m)})`;
 				return o === "mysql" ? f`${t} DIV ${f.lit(h)}` : f`${t} / ${f.lit(h)}`;
 			};
-			return g((await e.selectFrom("sessions").where("tenant_id", "=", t).where("created_at_ts", ">=", a).select([
+			return _((await e.selectFrom("sessions").where("tenant_id", "=", t).where("created_at_ts", ">=", a).select([
 				s("created_at_ts").as("created_week"),
 				s("used_at_ts").as("used_week"),
 				f`COUNT(*)`.as("count")
@@ -4749,12 +4754,29 @@ function Ea(e) {
 				used_week: Math.floor(Number(e.used_week)),
 				count: Number(e.count)
 			})), r.weeks, i);
+		},
+		async refreshTokenRetention(t, r) {
+			let i = Date.now(), { sinceMs: a } = me(r.weeks, i), o = await n(), s = (e) => {
+				let t = f`(${e} + ${f.lit(m)})`;
+				return o === "mysql" ? f`${t} DIV ${f.lit(h)}` : f`${t} / ${f.lit(h)}`;
+			}, c = e.selectFrom("refresh_tokens").where("tenant_id", "=", t).select([f`MIN(${f.ref("created_at_ts")})`.as("min_created"), f`MAX(COALESCE(${f.ref("last_exchanged_at_ts")}, ${f.ref("created_at_ts")}))`.as("max_used")]).groupBy(f`COALESCE(${f.ref("family_id")}, ${f.ref("id")})`);
+			r.client_id && r.client_id.length > 0 && (c = c.where("client_id", "in", r.client_id));
+			let l = s(f.ref("min_created")), u = s(f.ref("max_used"));
+			return g((await e.selectFrom(c.as("families")).where("min_created", ">=", a).select([
+				l.as("created_week"),
+				u.as("used_week"),
+				f`COUNT(*)`.as("count")
+			]).groupBy([l, u]).execute()).map((e) => ({
+				created_week: Math.floor(Number(e.created_week)),
+				used_week: Math.floor(Number(e.used_week)),
+				count: Number(e.count)
+			})), r.weeks, i);
 		}
 	};
 }
 //#endregion
 //#region src/customText/index.ts
-function Da(e) {
+function Aa(e) {
 	return {
 		async get(t, n, r) {
 			let i = await e.selectFrom("custom_text").selectAll().where("tenant_id", "=", t).where("prompt", "=", n).where("language", "=", r).executeTakeFirst();
@@ -4793,9 +4815,9 @@ function Da(e) {
 }
 //#endregion
 //#region src/authenticationMethods/create.ts
-function Oa(e) {
+function ja(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? Or();
+		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? Ar();
 		return await e.insertInto("authentication_methods").values({
 			id: s,
 			tenant_id: t,
@@ -4832,7 +4854,7 @@ function Oa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/get.ts
-function ka(e) {
+function Ma(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4855,7 +4877,7 @@ function ka(e) {
 }
 //#endregion
 //#region src/authenticationMethods/getByCredentialId.ts
-function Aa(e) {
+function Na(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.credential_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4878,7 +4900,7 @@ function Aa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/list.ts
-function ja(e) {
+function Pa(e) {
 	return async (t, n) => (await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "=", n).selectAll().execute()).map((e) => ({
 		id: e.id,
 		user_id: e.user_id,
@@ -4898,35 +4920,35 @@ function ja(e) {
 }
 //#endregion
 //#region src/authenticationMethods/update.ts
-function Ma(e) {
+function Fa(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		r.phone_number !== void 0 && (i.phone_number = r.phone_number), r.totp_secret !== void 0 && (i.totp_secret = r.totp_secret), r.credential_id !== void 0 && (i.credential_id = r.credential_id), r.public_key !== void 0 && (i.public_key = r.public_key), r.sign_count !== void 0 && (i.sign_count = r.sign_count), r.credential_backed_up !== void 0 && (i.credential_backed_up = +!!r.credential_backed_up), r.transports !== void 0 && (i.transports = JSON.stringify(r.transports)), r.friendly_name !== void 0 && (i.friendly_name = r.friendly_name), r.confirmed !== void 0 && (i.confirmed = +!!r.confirmed), await e.updateTable("authentication_methods").set(i).where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).execute();
-		let a = await ka(e)(t, n);
+		let a = await Ma(e)(t, n);
 		if (!a) throw Error(`Authentication method ${n} not found`);
 		return a;
 	};
 }
 //#endregion
 //#region src/authenticationMethods/remove.ts
-function Na(e) {
+function Ia(e) {
 	return async (t, n) => (await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/authenticationMethods/index.ts
-function Pa(e) {
+function La(e) {
 	return {
-		create: Oa(e),
-		get: ka(e),
-		getByCredentialId: Aa(e),
-		list: ja(e),
-		update: Ma(e),
-		remove: Na(e)
+		create: ja(e),
+		get: Ma(e),
+		getByCredentialId: Na(e),
+		list: Pa(e),
+		update: Fa(e),
+		remove: Ia(e)
 	};
 }
 //#endregion
 //#region src/outbox/getByIds.ts
-function Fa(e) {
+function Ra(e) {
 	return async (t) => t.length === 0 ? [] : (await e.selectFrom("outbox_events").selectAll().where("id", "in", t).execute()).map((e) => ({
 		...JSON.parse(e.payload),
 		id: e.id,
@@ -4939,7 +4961,7 @@ function Fa(e) {
 }
 //#endregion
 //#region src/outbox/getUnprocessed.ts
-function Ia(e) {
+function za(e) {
 	return async (t) => {
 		let n = (/* @__PURE__ */ new Date()).toISOString();
 		return (await e.selectFrom("outbox_events").selectAll().where("processed_at", "is", null).where((e) => e.or([e("next_retry_at", "is", null), e("next_retry_at", "<=", n)])).where((e) => e.or([e("claimed_by", "is", null), e("claim_expires_at", "<=", n)])).orderBy("created_at", "asc").orderBy("id", "asc").limit(t).execute()).map((e) => ({
@@ -4955,7 +4977,7 @@ function Ia(e) {
 }
 //#endregion
 //#region src/outbox/claimEvents.ts
-function La(e) {
+function Ba(e) {
 	return async (t, n, r) => {
 		if (t.length === 0) return [];
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = new Date(Date.now() + r).toISOString();
@@ -4967,7 +4989,7 @@ function La(e) {
 }
 //#endregion
 //#region src/outbox/markProcessed.ts
-function Ra(e) {
+function Va(e) {
 	return async (t) => {
 		if (t.length === 0) return;
 		let n = (/* @__PURE__ */ new Date()).toISOString();
@@ -4976,7 +4998,7 @@ function Ra(e) {
 }
 //#endregion
 //#region src/outbox/markRetry.ts
-function za(e) {
+function Ha(e) {
 	return async (t, n, r) => {
 		await e.updateTable("outbox_events").set({
 			error: n,
@@ -4989,7 +5011,7 @@ function za(e) {
 }
 //#endregion
 //#region src/outbox/deadLetter.ts
-function Ba(e) {
+function Ua(e) {
 	return async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString();
 		await e.updateTable("outbox_events").set({
@@ -5001,7 +5023,7 @@ function Ba(e) {
 }
 //#endregion
 //#region src/outbox/listFailed.ts
-function Va(e) {
+function Wa(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1 } = n, o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap((e) => {
 			let t;
@@ -5036,7 +5058,7 @@ function Va(e) {
 }
 //#endregion
 //#region src/outbox/replay.ts
-function Ha(e) {
+function Ga(e) {
 	return async (t, n) => {
 		let r = await e.updateTable("outbox_events").set({
 			processed_at: null,
@@ -5051,7 +5073,7 @@ function Ha(e) {
 }
 //#endregion
 //#region src/outbox/cleanup.ts
-function Ua(e) {
+function Ka(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5059,23 +5081,23 @@ function Ua(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function Wa(e) {
+function qa(e) {
 	return {
-		create: qe(e),
-		getByIds: Fa(e),
-		getUnprocessed: Ia(e),
-		claimEvents: La(e),
-		markProcessed: Ra(e),
-		markRetry: za(e),
-		deadLetter: Ba(e),
-		listFailed: Va(e),
-		replay: Ha(e),
-		cleanup: Ua(e)
+		create: Je(e),
+		getByIds: Ra(e),
+		getUnprocessed: za(e),
+		claimEvents: Ba(e),
+		markProcessed: Va(e),
+		markRetry: Ha(e),
+		deadLetter: Ua(e),
+		listFailed: Wa(e),
+		replay: Ga(e),
+		cleanup: Ka(e)
 	};
 }
 //#endregion
 //#region src/log-streams/index.ts
-function G(e) {
+function W(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5088,7 +5110,7 @@ function G(e) {
 		updated_at: e.updated_at
 	};
 }
-function Ga(e) {
+function Ja(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5103,14 +5125,14 @@ function Ga(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("log_streams").values(s).execute(), G(s);
+			return await e.insertInto("log_streams").values(s).execute(), W(s);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("log_streams").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? G(r) : null;
+			return r ? W(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(G);
+			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(W);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5123,11 +5145,11 @@ function Ga(e) {
 }
 //#endregion
 //#region src/migrationSources/index.ts
-function K(e) {
+function G(e) {
 	return {
 		id: e.id,
 		name: e.name,
-		provider: se.parse(e.provider),
+		provider: ce.parse(e.provider),
 		connection: e.connection,
 		enabled: e.enabled === 1,
 		credentials: JSON.parse(e.credentials),
@@ -5135,7 +5157,7 @@ function K(e) {
 		updated_at: e.updated_at
 	};
 }
-function Ka(e) {
+function Ya(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5149,14 +5171,14 @@ function Ka(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("migration_sources").values(l).execute(), K(l);
+			return await e.insertInto("migration_sources").values(l).execute(), G(l);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("migration_sources").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? K(r) : null;
+			return r ? G(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(K);
+			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(G);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5169,34 +5191,34 @@ function Ka(e) {
 }
 //#endregion
 //#region src/proxyRoutes/serialize.ts
-function q(e) {
+function K(e) {
 	return {
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: qa(e.match),
-		handlers: Ja(e.handlers),
+		match: Xa(e.match),
+		handlers: Za(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function qa(e) {
+function Xa(e) {
 	if (!e) return { path: "/*" };
 	try {
-		let t = JSON.parse(e), n = oe.safeParse(t);
+		let t = JSON.parse(e), n = se.safeParse(t);
 		if (n.success) return n.data;
 	} catch {}
 	return { path: "/*" };
 }
-function Ja(e) {
+function Za(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
 		if (!Array.isArray(t)) return [];
 		let n = [];
 		for (let e of t) {
-			let t = re.safeParse(e);
+			let t = ie.safeParse(e);
 			t.success && n.push(t.data);
 		}
 		return n;
@@ -5206,7 +5228,7 @@ function Ja(e) {
 }
 //#endregion
 //#region src/proxyRoutes/adapter.ts
-function J(e) {
+function q(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5232,14 +5254,14 @@ function J(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("proxy_routes").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? q(r) : null;
+			return r ? K(r) : null;
 		},
 		async list(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 50, a = e.selectFrom("proxy_routes").where("tenant_id", "=", t);
 			n.custom_domain_id && (a = a.where("custom_domain_id", "=", n.custom_domain_id));
 			let o = await a.selectAll().orderBy("priority", "asc").orderBy("created_at", "asc").offset(r * i).limit(i).execute();
 			return {
-				proxy_routes: o.map(q),
+				proxy_routes: o.map(K),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5259,7 +5281,7 @@ function J(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function Ya(e, t) {
+async function Qa(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5271,27 +5293,27 @@ async function Ya(e, t) {
 		tenant_id: a.tenant_id,
 		custom_domain_id: a.custom_domain_id,
 		domain: a.domain,
-		routes: o.map(q)
+		routes: o.map(K)
 	};
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function Xa(e) {
+function $a(e) {
 	return {
-		proxyRoutes: J(e),
-		resolveHost: (t) => Ya(e, t)
+		proxyRoutes: q(e),
+		resolveHost: (t) => Qa(e, t)
 	};
 }
 //#endregion
 //#region src/scim/adapter.ts
-function Za(e) {
+function eo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
 		if (!Array.isArray(t)) return [];
 		let n = [];
 		for (let e of t) {
-			let t = fe.safeParse(e);
+			let t = pe.safeParse(e);
 			t.success && n.push(t.data);
 		}
 		return n;
@@ -5299,7 +5321,7 @@ function Za(e) {
 		return [];
 	}
 }
-function Qa(e) {
+function to(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5308,16 +5330,16 @@ function Qa(e) {
 		return [];
 	}
 }
-function $a(e) {
+function no(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: Za(e.mapping),
+		mapping: eo(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function eo(e) {
+function ro(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5338,7 +5360,7 @@ function eo(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
-			return r ? $a(r) : null;
+			return r ? no(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5352,18 +5374,18 @@ function eo(e) {
 		}
 	};
 }
-function Y(e) {
+function J(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: Qa(e.scopes),
+		scopes: to(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function to(e) {
+function io(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5387,14 +5409,14 @@ function to(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
-			return r ? Y(r) : null;
+			return r ? J(r) : null;
 		},
 		async getByHash(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-			return r ? Y(r) : null;
+			return r ? J(r) : null;
 		},
 		async listByConnection(t, n) {
-			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(Y);
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(J);
 		},
 		async markUsed(t, n, r) {
 			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
@@ -5406,7 +5428,7 @@ function to(e) {
 		}
 	};
 }
-function no(e) {
+function ao(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -5414,7 +5436,7 @@ function no(e) {
 		created_at: e.created_at
 	};
 }
-function ro(e) {
+function oo(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5433,11 +5455,11 @@ function ro(e) {
 		},
 		async getByExternalId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
-			return i ? no(i) : null;
+			return i ? ao(i) : null;
 		},
 		async getByUserId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
-			return i ? no(i) : null;
+			return i ? ao(i) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
@@ -5447,8 +5469,8 @@ function ro(e) {
 }
 //#endregion
 //#region src/tenantOperations/index.ts
-function X(e) {
-	return _e.parse({
+function Y(e) {
+	return ve.parse({
 		id: e.id,
 		tenant_id: e.tenant_id,
 		rollout_id: e.rollout_id,
@@ -5466,10 +5488,10 @@ function X(e) {
 		finished_at: e.finished_at
 	});
 }
-function io(e) {
+function so(e) {
 	return {
 		async create(n) {
-			let r = ge.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
+			let r = _e.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
 				id: `op_${t()}`,
 				tenant_id: r.tenant_id,
 				rollout_id: r.rollout_id ?? null,
@@ -5486,11 +5508,11 @@ function io(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("tenant_operations").values(a).execute(), X(a);
+			return await e.insertInto("tenant_operations").values(a).execute(), Y(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("tenant_operations").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? X(n) : null;
+			return n ? Y(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = e.selectFrom("tenant_operations");
@@ -5501,7 +5523,7 @@ function io(e) {
 			t.engine !== void 0 && (i = i.where("engine", "=", t.engine)), t.updated_before !== void 0 && (i = i.where("updated_at", "<", t.updated_before));
 			let a = await i.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				operations: a.map(X),
+				operations: a.map(Y),
 				start: n * r,
 				limit: r,
 				length: a.length
@@ -5521,27 +5543,27 @@ function io(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var ao = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Z = 32, oo = 10, so = 4, co = 10;
-function lo(e, t) {
+var co = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", X = 32, lo = 10, uo = 4, fo = 10;
+function po(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = ao.charAt(e % Z) + n, e = Math.floor(e / Z);
+	for (let r = t; r > 0; r--) n = co.charAt(e % X) + n, e = Math.floor(e / X);
 	return n;
 }
-function uo() {
-	let e = new Uint8Array(co);
+function mo() {
+	let e = new Uint8Array(fo);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < co; n++) t += ao.charAt(e[n] % Z);
+	for (let n = 0; n < fo; n++) t += co.charAt(e[n] % X);
 	return t;
 }
-var fo = 0, po = 0;
-function mo() {
+var ho = 0, Z = 0;
+function go() {
 	let e = Date.now();
-	return e === fo ? po++ : (fo = e, po = 0), lo(e, oo) + lo(po, so) + uo();
+	return e === ho ? Z++ : (ho = e, Z = 0), po(e, lo) + po(Z, uo) + mo();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function ho(e) {
+function _o(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5549,22 +5571,22 @@ function ho(e) {
 	} catch {}
 	return null;
 }
-function go(e) {
-	return he.parse({
+function vo(e) {
+	return ge.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: ho(e.detail),
+		detail: _o(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function _o(e) {
+function yo(e) {
 	return {
 		async create(t) {
-			let n = me.parse(t), r = {
-				id: `evt_${mo()}`,
+			let n = he.parse(t), r = {
+				id: `evt_${go()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5572,12 +5594,12 @@ function _o(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), go(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), vo(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(go),
+				events: a.map(vo),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -5587,7 +5609,7 @@ function _o(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function vo(e) {
+function bo(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5595,26 +5617,26 @@ function vo(e) {
 		return null;
 	}
 }
-function yo(e) {
-	return de.parse({
+function xo(e) {
+	return fe.parse({
 		id: e.id,
 		kind: e.kind,
 		status: e.status,
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: vo(e.canary_tenant_ids),
-		filter: vo(e.filter),
+		canary_tenant_ids: bo(e.canary_tenant_ids),
+		filter: bo(e.filter),
 		initiated_by: e.initiated_by,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function bo(e) {
+function So(e) {
 	return {
 		async create(n) {
-			let r = ue.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
+			let r = de.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
 				id: `rol_${t()}`,
 				kind: r.kind,
 				status: "pending",
@@ -5628,16 +5650,16 @@ function bo(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("rollouts").values(a).execute(), yo(a);
+			return await e.insertInto("rollouts").values(a).execute(), xo(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("rollouts").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? yo(n) : null;
+			return n ? xo(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = await e.selectFrom("rollouts").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: i.map(yo),
+				rollouts: i.map(xo),
 				start: n * r,
 				limit: r,
 				length: i.length
@@ -5657,7 +5679,7 @@ function bo(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var xo = class {
+var Co = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -5665,10 +5687,10 @@ var xo = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, So = /* @__PURE__ */ w({
-	down: () => Eo,
-	up: () => To
-}), Co = [
+}, wo = /* @__PURE__ */ w({
+	down: () => Oo,
+	up: () => Do
+}), To = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -5934,7 +5956,7 @@ var xo = class {
 		onDelete: "cascade"
 	}
 ];
-async function wo(e) {
+async function Eo(e) {
 	try {
 		return await f`select sqlite_version()`.execute(e), !0;
 	} catch {
@@ -5943,14 +5965,14 @@ async function wo(e) {
 }
 function Q(e, t) {
 	let n = e;
-	for (let e of Co) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of To) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function To(e) {
-	let t = await wo(e);
+async function Do(e) {
+	let t = await Eo(e);
 	await e.schema.createTable("tenants").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("audience", f`varchar(255)`).addColumn("sender_email", f`varchar(255)`).addColumn("sender_name", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addColumn("support_url", f`varchar(255)`).addColumn("idle_session_lifetime", f`int`).addColumn("session_lifetime", f`int`).addColumn("session_cookie", f`text`).addColumn("allowed_logout_urls", f`text`).addColumn("ephemeral_session_lifetime", f`int`).addColumn("idle_ephemeral_session_lifetime", f`int`).addColumn("default_redirection_uri", f`text`).addColumn("enabled_locales", f`text`).addColumn("default_directory", f`varchar(255)`).addColumn("error_page", f`text`).addColumn("flags", f`text`).addColumn("friendly_name", f`varchar(255)`).addColumn("picture_url", f`text`).addColumn("support_email", f`varchar(255)`).addColumn("sandbox_version", f`varchar(50)`).addColumn("sandbox_versions_available", f`text`).addColumn("legacy_sandbox_version", f`varchar(50)`).addColumn("change_password", f`text`).addColumn("guardian_mfa_page", f`text`).addColumn("device_flow", f`text`).addColumn("default_token_quota", f`text`).addColumn("default_audience", f`varchar(255)`).addColumn("default_organization", f`varchar(255)`).addColumn("sessions", f`text`).addColumn("oidc_logout", f`text`).addColumn("allow_organization_name_in_authentication_api", f`int`).addColumn("customize_mfa_in_postlogin_action", f`int`).addColumn("acr_values_supported", f`text`).addColumn("mtls", f`text`).addColumn("pushed_authorization_requests_supported", f`int`).addColumn("authorization_response_iss_parameter_supported", f`int`).addColumn("mfa", f`text`).addColumn("attack_protection", f`text`).addColumn("default_client_id", f`varchar(255)`).addColumn("deployment_type", f`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", f`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", f`varchar(2048)`).addColumn("provisioning_state_changed_at", f`varchar(35)`).addColumn("bundle_configuration", f`varchar(64)`).addColumn("worker_version", f`varchar(64)`).addColumn("worker_script_name", f`varchar(255)`).addColumn("storage_kind", f`varchar(32)`).addColumn("d1_database_id", f`varchar(64)`).addColumn("database_version", f`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", f`varchar(64)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("results", f`text`, (e) => e.notNull()).addColumn("logs", f`text`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("action_id", f`varchar(255)`, (e) => e.notNull()).addColumn("number", f`int`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("status", f`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed_at_ts", f`bigint`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("type", f`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", f`varchar(32)`).addColumn("totp_secret", f`varchar(255)`).addColumn("confirmed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("credential_id", f`varchar(512)`).addColumn("public_key", f`text`).addColumn("sign_count", f`int`).addColumn("credential_backed_up", f`int`).addColumn("transports", f`varchar(512)`).addColumn("friendly_name", f`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
@@ -6137,40 +6159,40 @@ async function To(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Co) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of To) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function Eo(e) {
+async function Oo(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var Do = !1;
-function Oo(e) {
-	Do = e;
+var ko = !1;
+function Ao(e) {
+	ko = e;
 }
 function $(...e) {
-	Do && console.log(...e);
+	ko && console.log(...e);
 }
-function ko(...e) {
+function jo(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var Ao = /* @__PURE__ */ w({
-	down: () => Vo,
-	up: () => Ro
-}), jo = 5e4, Mo = 500;
-async function No(e) {
+var Mo = /* @__PURE__ */ w({
+	down: () => Uo,
+	up: () => Bo
+}), No = 5e4, Po = 500;
+async function Fo(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function Po(e, t, n) {
+async function Io(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
@@ -6181,7 +6203,7 @@ async function Po(e, t, n) {
 		throw e;
 	}
 }
-async function Fo(e, t, n, r) {
+async function Lo(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6192,21 +6214,21 @@ async function Fo(e, t, n, r) {
 		throw e;
 	}
 }
-async function Io(e, t) {
+async function Ro(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
 		r = Number(t.numDeletedRows);
 	} else {
-		let t = jo;
-		for (; t >= jo;) {
-			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(jo).executeTakeFirst();
+		let t = No;
+		for (; t >= No;) {
+			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(No).executeTakeFirst();
 			t = Number(i.numDeletedRows), r += t, t > 0 && $(`  Pruned ${r} expired codes row(s)...`);
 		}
 	}
 	return r;
 }
-async function Lo(e) {
+async function zo(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -6214,33 +6236,33 @@ async function Lo(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(Mo).execute();
+		]).where("expires_at_ts", "is", null).limit(Po).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < Mo) break;
+		if (t += n.length, n.length < Po) break;
 	}
 	return t;
 }
-async function Ro(e) {
-	let t = await No(e);
+async function Bo(e) {
+	let t = await Fo(e);
 	try {
-		let n = await Io(e, t);
+		let n = await Ro(e, t);
 		$(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
-		ko(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
+		jo(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await Po(e, "codes", "expires_at_ts"), await Fo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await Io(e, "codes", "expires_at_ts"), await Lo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await Lo(e);
+		let t = await zo(e);
 		$(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
-		ko(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
+		jo(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function zo(e, t, n) {
+async function Vo(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -6248,7 +6270,7 @@ async function zo(e, t, n) {
 		throw e;
 	}
 }
-async function Bo(e, t, n) {
+async function Ho(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6256,16 +6278,16 @@ async function Bo(e, t, n) {
 		throw e;
 	}
 }
-async function Vo(e) {
-	await zo(e, "idx_codes_expires_at_ts", "codes"), await Bo(e, "codes", "expires_at_ts");
+async function Uo(e) {
+	await Vo(e, "idx_codes_expires_at_ts", "codes"), await Ho(e, "codes", "expires_at_ts");
 }
 //#endregion
 //#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
-var Ho = /* @__PURE__ */ w({
-	down: () => Wo,
-	up: () => Uo
+var Wo = /* @__PURE__ */ w({
+	down: () => Ko,
+	up: () => Go
 });
-async function Uo(e) {
+async function Go(e) {
 	await e.schema.createTable("scim_configurations").addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", f`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", f`varchar(128)`, (e) => e.notNull()).addColumn("scopes", f`text`, (e) => e.notNull()).addColumn("valid_until", f`varchar(35)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", f`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("external_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
 		"tenant_id",
 		"connection_id",
@@ -6276,16 +6298,16 @@ async function Uo(e) {
 		"external_id"
 	]).unique().execute();
 }
-async function Wo(e) {
+async function Ko(e) {
 	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
-var Go = /* @__PURE__ */ w({
-	down: () => Yo,
-	up: () => qo
+var qo = /* @__PURE__ */ w({
+	down: () => Zo,
+	up: () => Yo
 });
-async function Ko(e, t, n) {
+async function Jo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6293,10 +6315,10 @@ async function Ko(e, t, n) {
 		throw e;
 	}
 }
-async function qo(e) {
-	await Ko(e, "users", "blocked");
+async function Yo(e) {
+	await Jo(e, "users", "blocked");
 }
-async function Jo(e, t, n) {
+async function Xo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6304,16 +6326,16 @@ async function Jo(e, t, n) {
 		throw e;
 	}
 }
-async function Yo(e) {
-	await Jo(e, "users", "blocked");
+async function Zo(e) {
+	await Xo(e, "users", "blocked");
 }
 //#endregion
 //#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
-var Xo = /* @__PURE__ */ w({
-	down: () => es,
-	up: () => Qo
+var Qo = /* @__PURE__ */ w({
+	down: () => ns,
+	up: () => es
 });
-async function Zo(e, t, n) {
+async function $o(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6321,10 +6343,10 @@ async function Zo(e, t, n) {
 		throw e;
 	}
 }
-async function Qo(e) {
-	await Zo(e, "prompt_settings", "show_last_used_connection");
+async function es(e) {
+	await $o(e, "prompt_settings", "show_last_used_connection");
 }
-async function $o(e, t, n) {
+async function ts(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6332,16 +6354,16 @@ async function $o(e, t, n) {
 		throw e;
 	}
 }
-async function es(e) {
-	await $o(e, "prompt_settings", "show_last_used_connection");
+async function ns(e) {
+	await ts(e, "prompt_settings", "show_last_used_connection");
 }
 //#endregion
 //#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
-var ts = /* @__PURE__ */ w({
-	down: () => is,
-	up: () => rs
+var rs = /* @__PURE__ */ w({
+	down: () => os,
+	up: () => as
 });
-async function ns(e, t, n, r) {
+async function is(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6352,10 +6374,10 @@ async function ns(e, t, n, r) {
 		throw e;
 	}
 }
-async function rs(e) {
-	await ns(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+async function as(e) {
+	await is(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
 }
-async function is(e) {
+async function os(e) {
 	try {
 		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
 	} catch (e) {
@@ -6365,11 +6387,11 @@ async function is(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-08-11T12:00:00_page_hooks.ts
-var as = /* @__PURE__ */ w({
-	down: () => ls,
-	up: () => ss
+var ss = /* @__PURE__ */ w({
+	down: () => ds,
+	up: () => ls
 });
-async function os(e, t, n, r) {
+async function cs(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6377,10 +6399,10 @@ async function os(e, t, n, r) {
 		throw e;
 	}
 }
-async function ss(e) {
-	await os(e, "hooks", "page_id", f`varchar(64)`), await os(e, "hooks", "permission_required", f`varchar(255)`);
+async function ls(e) {
+	await cs(e, "hooks", "page_id", f`varchar(64)`), await cs(e, "hooks", "permission_required", f`varchar(255)`);
 }
-async function cs(e, t, n) {
+async function us(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6388,37 +6410,37 @@ async function cs(e, t, n) {
 		throw e;
 	}
 }
-async function ls(e) {
-	await cs(e, "hooks", "permission_required"), await cs(e, "hooks", "page_id");
+async function ds(e) {
+	await us(e, "hooks", "permission_required"), await us(e, "hooks", "page_id");
 }
 //#endregion
 //#region migrate/migrations/index.ts
-var us = {
-	"2026-07-16T14:00:00_baseline": So,
-	"2026-07-16T15:00:00_codes_expires_at_ts": Ao,
-	"2026-08-04T12:00:00_scim_inbound_provisioning": Ho,
-	"2026-08-05T12:00:00_user_blocked": Go,
-	"2026-08-09T12:00:00_prompt_settings_last_used": Xo,
-	"2026-08-10T12:00:00_action_executions_created_at_index": ts,
-	"2026-08-11T12:00:00_page_hooks": as
+var fs = {
+	"2026-07-16T14:00:00_baseline": wo,
+	"2026-07-16T15:00:00_codes_expires_at_ts": Mo,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": Wo,
+	"2026-08-05T12:00:00_user_blocked": qo,
+	"2026-08-09T12:00:00_prompt_settings_last_used": Qo,
+	"2026-08-10T12:00:00_action_executions_created_at_index": rs,
+	"2026-08-11T12:00:00_page_hooks": ss
 };
 //#endregion
 //#region migrate/migrate.ts
-async function ds(e, t = !1) {
-	Oo(t), t && console.log("migrating...");
-	let { error: n, results: r } = await new ve({
+async function ps(e, t = !1) {
+	Ao(t), t && console.log("migrating...");
+	let { error: n, results: r } = await new ye({
 		db: e,
-		provider: new xo(us)
+		provider: new Co(fs)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function fs(e, t = !1) {
-	Oo(t), t && console.log("migrating...");
-	let { error: n, results: r } = await new ve({
+async function ms(e, t = !1) {
+	Ao(t), t && console.log("migrating...");
+	let { error: n, results: r } = await new ye({
 		db: e,
-		provider: new xo(us)
+		provider: new Co(fs)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -6426,64 +6448,64 @@ async function fs(e, t = !1) {
 }
 //#endregion
 //#region src/index.ts
-function ps(e, t = { useTransactions: !0 }) {
+function hs(e, t = { useTransactions: !0 }) {
 	let n = {
-		actions: Le(e),
-		actionExecutions: Ue(e),
-		actionVersions: Ke(e),
-		branding: tr(e),
-		clients: _n(e),
-		clientConnections: Cn(e),
-		clientGrants: An(e),
-		clientRegistrationTokens: Vn(e),
-		codes: tn(e),
-		connections: ln(e),
-		emailProviders: Vr(e),
-		emailTemplates: Jr(e),
-		customDomains: Qn(e),
-		flows: yt(e),
-		forms: di(e),
-		hookCode: gr(e),
-		hooks: dr(e),
-		invites: ua(e),
-		keys: Gn(e),
-		loginSessions: Mr(e),
-		logs: Ft(e),
-		logStreams: Ga(e),
-		migrationSources: Ka(e),
-		authenticationMethods: Pa(e),
-		passwords: Kt(e),
-		promptSettings: Ir(e),
-		proxyRoutes: J(e),
-		scimConfigurations: eo(e),
-		scimTokens: to(e),
-		scimExternalIds: ro(e),
-		refreshTokens: ri(e),
-		resourceServers: _i(e),
-		rolePermissions: Di(e),
-		grants: Ni(e),
-		userPermissions: Ri(e),
-		userRoles: Wi(e),
-		roles: Ci(e),
-		sessions: Vt(e),
-		sessionCleanup: ai(e),
-		tenants: Dt(e),
-		tenantOperations: io(e),
-		tenantOperationEvents: _o(e),
-		rollouts: bo(e),
-		themes: xr(e),
-		universalLoginTemplates: ar(e),
-		customText: Da(e),
-		users: dt(e),
-		userActivity: ct(e),
-		organizations: Xi(e),
-		organizationConnections: Zi(e),
-		userOrganizations: ia(e),
-		stats: ha(e),
-		analytics: Ea(e),
-		outbox: Wa(e),
+		actions: Re(e),
+		actionExecutions: We(e),
+		actionVersions: qe(e),
+		branding: rr(e),
+		clients: yn(e),
+		clientConnections: Tn(e),
+		clientGrants: Mn(e),
+		clientRegistrationTokens: Un(e),
+		codes: rn(e),
+		connections: dn(e),
+		emailProviders: Ur(e),
+		emailTemplates: Xr(e),
+		customDomains: er(e),
+		flows: bt(e),
+		forms: pi(e),
+		hookCode: vr(e),
+		hooks: pr(e),
+		invites: pa(e),
+		keys: qn(e),
+		loginSessions: Pr(e),
+		logs: Lt(e),
+		logStreams: Ja(e),
+		migrationSources: Ya(e),
+		authenticationMethods: La(e),
+		passwords: Jt(e),
+		promptSettings: Rr(e),
+		proxyRoutes: q(e),
+		scimConfigurations: ro(e),
+		scimTokens: io(e),
+		scimExternalIds: oo(e),
+		refreshTokens: ai(e),
+		resourceServers: yi(e),
+		rolePermissions: Ai(e),
+		grants: Ii(e),
+		userPermissions: Vi(e),
+		userRoles: qi(e),
+		roles: Ti(e),
+		sessions: Ut(e),
+		sessionCleanup: si(e),
+		tenants: Ot(e),
+		tenantOperations: so(e),
+		tenantOperationEvents: yo(e),
+		rollouts: So(e),
+		themes: Cr(e),
+		universalLoginTemplates: sr(e),
+		customText: Aa(e),
+		users: ft(e),
+		userActivity: lt(e),
+		organizations: $i(e),
+		organizationConnections: ea(e),
+		userOrganizations: sa(e),
+		stats: va(e),
+		analytics: ka(e),
+		outbox: qa(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(ps(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(hs(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -6492,4 +6514,4 @@ function ps(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { Xa as createProxyDataAdapter, J as createProxyRoutesAdapter, ps as default, fs as migrateDown, ds as migrateToLatest };
+export { $a as createProxyDataAdapter, q as createProxyRoutesAdapter, hs as default, ms as migrateDown, ps as migrateToLatest };