@authhero/kysely-adapter 12.5.0 → 12.6.0

package/dist/kysely-adapter.mjs

@@ -3181,8 +3181,16 @@ function ni(e) {
 	};
 }
 //#endregion
-//#region src/refreshTokens/revokeByUser.ts
+//#region src/refreshTokens/revokeBySession.ts
 function ri(e) {
+	return async (t, n, r) => {
+		let i = await e.updateTable("refresh_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("session_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
+		return Number(i.numUpdatedRows ?? 0);
+	};
+}
+//#endregion
+//#region src/refreshTokens/revokeByUser.ts
+function ii(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("refresh_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("user_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows ?? 0);
@@ -3190,7 +3198,7 @@ function ri(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeFamily.ts
-function ii(e) {
+function ai(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("family_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3198,7 +3206,7 @@ function ii(e) {
 }
 //#endregion
 //#region src/refreshTokens/update.ts
-function ai(e) {
+function oi(e) {
 	return async (t, n, r, i) => {
 		let { created_at: a, expires_at: o, idle_expires_at: c, last_exchanged_at: l, revoked_at: u, rotated_at: d, device: f, resource_servers: p, rotating: m, ...h } = r, g = {
 			...h,
@@ -3219,7 +3227,7 @@ function ai(e) {
 }
 //#endregion
 //#region src/refreshTokens/list.ts
-function oi(e) {
+function si(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, user_id: l } = n, u = e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t);
 		if (l !== void 0 && (u = u.where("refresh_tokens.user_id", "=", l)), c && (u = D(e, u, c, ["token", "login_id"])), M(n)) {
@@ -3259,25 +3267,26 @@ function oi(e) {
 }
 //#endregion
 //#region src/refreshTokens/index.ts
-function si(e) {
+function ci(e) {
 	return {
 		create: ei(e),
 		get: Qr(e),
 		getByLookup: $r(e),
-		list: oi(e),
+		list: si(e),
 		remove: ti(e),
 		revokeByLoginSession: ni(e),
-		revokeByUser: ri(e),
-		revokeFamily: ii(e),
-		update: ai(e)
+		revokeBySession: ri(e),
+		revokeByUser: ii(e),
+		revokeFamily: ai(e),
+		update: oi(e)
 	};
 }
 //#endregion
 //#region src/cleanup.ts
-var ci = 10080 * 60 * 1e3;
-function li(e) {
+var li = 10080 * 60 * 1e3;
+function ui(e) {
 	return async (t) => {
-		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - ci, a = 1e3;
+		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - li, a = 1e3;
 		try {
 			let t = 0;
 			for (;;) {
@@ -3308,7 +3317,7 @@ function li(e) {
 }
 //#endregion
 //#region src/forms/create.ts
-function ui(e) {
+function di(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = x.parse({
 			id: a?.id ?? t(),
@@ -3327,7 +3336,7 @@ function ui(e) {
 }
 //#endregion
 //#region src/forms/list.ts
-function di(e) {
+function fi(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("forms").where("tenant_id", "=", t);
 		s && (c = D(e, c, s, []));
@@ -3361,7 +3370,7 @@ function di(e) {
 }
 //#endregion
 //#region src/forms/remove.ts
-function fi(e) {
+function pi(e) {
 	return async (t, n) => {
 		let { numDeletedRows: r } = await e.deleteFrom("forms").where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r > 0;
@@ -3369,7 +3378,7 @@ function fi(e) {
 }
 //#endregion
 //#region src/forms/get.ts
-function pi(e) {
+function mi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("forms").selectAll().where("forms.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
@@ -3388,7 +3397,7 @@ function pi(e) {
 }
 //#endregion
 //#region src/forms/update.ts
-function mi(e) {
+function hi(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -3405,18 +3414,18 @@ function mi(e) {
 }
 //#endregion
 //#region src/forms/index.ts
-function hi(e) {
+function gi(e) {
 	return {
-		create: ui(e),
-		get: pi(e),
-		list: di(e),
-		remove: fi(e),
-		update: mi(e)
+		create: di(e),
+		get: mi(e),
+		list: fi(e),
+		remove: pi(e),
+		update: hi(e)
 	};
 }
 //#endregion
 //#region src/resourceServers/create.ts
-function gi(e) {
+function _i(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = {
 			...n,
@@ -3441,7 +3450,7 @@ function gi(e) {
 }
 //#endregion
 //#region src/resourceServers/get.ts
-function _i(e) {
+function vi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("resource_servers").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3460,7 +3469,7 @@ function _i(e) {
 }
 //#endregion
 //#region src/resourceServers/list.ts
-function vi(e) {
+function yi(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", t);
 		if (s) {
@@ -3500,7 +3509,7 @@ function vi(e) {
 }
 //#endregion
 //#region src/resourceServers/remove.ts
-function yi(e) {
+function bi(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("resource_servers").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3508,7 +3517,7 @@ function yi(e) {
 }
 //#endregion
 //#region src/resourceServers/update.ts
-function bi(e) {
+function xi(e) {
 	return async (t, n, r) => {
 		let { verificationKey: i, scopes: a, options: o, skip_consent_for_verifiable_first_party_clients: s, allow_offline_access: c, is_system: l, metadata: u, ...d } = r, f = {
 			...d,
@@ -3528,18 +3537,18 @@ function bi(e) {
 }
 //#endregion
 //#region src/resourceServers/index.ts
-function xi(e) {
+function Si(e) {
 	return {
-		create: gi(e),
-		get: _i(e),
-		list: vi(e),
-		remove: yi(e),
-		update: bi(e)
+		create: _i(e),
+		get: vi(e),
+		list: yi(e),
+		remove: bi(e),
+		update: xi(e)
 	};
 }
 //#endregion
 //#region src/roles/create.ts
-function Si(e) {
+function Ci(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.created_at ?? o, c = a?.updated_at ?? o, l = a?.id || r.id || t(), { is_system: u, id: d, metadata: f, ...p } = r, m = {
 			id: l,
@@ -3562,7 +3571,7 @@ function Si(e) {
 }
 //#endregion
 //#region src/roles/get.ts
-function Ci(e) {
+function wi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("roles").selectAll().where("roles.tenant_id", "=", t).where("roles.id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3576,7 +3585,7 @@ function Ci(e) {
 }
 //#endregion
 //#region src/roles/list.ts
-function wi(e) {
+function Ti(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("roles").where("roles.tenant_id", "=", t), { page: i = 0, per_page: a = 50, include_totals: s = !1 } = n;
 		n.q && (r = D(e, r, n.q, ["name"]));
@@ -3605,7 +3614,7 @@ function wi(e) {
 }
 //#endregion
 //#region src/roles/update.ts
-function Ti(e) {
+function Ei(e) {
 	return async (t, n, r) => {
 		let { is_system: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -3618,7 +3627,7 @@ function Ti(e) {
 }
 //#endregion
 //#region src/roles/remove.ts
-function Ei(e) {
+function Di(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("roles").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3626,23 +3635,23 @@ function Ei(e) {
 }
 //#endregion
 //#region src/roles/index.ts
-function Di(e) {
+function Oi(e) {
 	return {
-		create: Si(e),
-		get: Ci(e),
-		list: wi(e),
-		update: Ti(e),
-		remove: Ei(e)
+		create: Ci(e),
+		get: wi(e),
+		list: Ti(e),
+		update: Ei(e),
+		remove: Di(e)
 	};
 }
 //#endregion
 //#region src/role-permissions/assign.ts
-function Oi(e) {
+function ki(e) {
 	if (typeof e != "object" || !e) return !1;
 	let { code: t, message: n } = e;
 	return t === "SQLITE_CONSTRAINT" || t === "SQLITE_CONSTRAINT_PRIMARYKEY" || t === "SQLITE_CONSTRAINT_UNIQUE" || t === "ER_DUP_ENTRY" || t === "23505" ? !0 : typeof n == "string" && (n.includes("UNIQUE constraint failed") || n.includes("Duplicate entry") || n.includes("duplicate key") || n.includes("AlreadyExists"));
 }
-function ki(e) {
+function Ai(e) {
 	return async (t, n, r, i) => {
 		if (r.length === 0) return !0;
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString();
@@ -3659,7 +3668,7 @@ function ki(e) {
 				try {
 					await e.insertInto("role_permissions").values(r).execute();
 				} catch (e) {
-					if (Oi(e)) continue;
+					if (ki(e)) continue;
 					throw e;
 				}
 			}
@@ -3671,7 +3680,7 @@ function ki(e) {
 }
 //#endregion
 //#region src/role-permissions/remove.ts
-function Ai(e) {
+function ji(e) {
 	return async (t, n, r) => {
 		if (r.length === 0) return !0;
 		try {
@@ -3683,7 +3692,7 @@ function Ai(e) {
 }
 //#endregion
 //#region src/role-permissions/list.ts
-function ji(e) {
+function Mi(e) {
 	return async (t, n, r = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: o = !1 } = r, s = e.selectFrom("role_permissions").leftJoin("resource_servers", (e) => e.onRef("role_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("role_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"role_permissions.role_id",
@@ -3704,16 +3713,16 @@ function ji(e) {
 }
 //#endregion
 //#region src/role-permissions/index.ts
-function Mi(e) {
+function Ni(e) {
 	return {
-		assign: ki(e),
-		remove: Ai(e),
-		list: ji(e)
+		assign: Ai(e),
+		remove: ji(e),
+		list: Mi(e)
 	};
 }
 //#endregion
 //#region src/grants/create.ts
-function Ni(e) {
+function Pi(e) {
 	return async (n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = r.scope ?? [], o = r.audience ?? "", s = await e.selectFrom("grants").where("tenant_id", "=", n).where("user_id", "=", r.user_id).where("client_id", "=", r.clientID).where("audience", "=", o).selectAll().executeTakeFirst();
 		if (s) {
@@ -3750,7 +3759,7 @@ function Ni(e) {
 }
 //#endregion
 //#region src/grants/get.ts
-function Pi(e) {
+function Fi(e) {
 	return async (t, n, r, i) => {
 		let a = await e.selectFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).where("client_id", "=", r).where("audience", "=", i ?? "").selectAll().executeTakeFirst();
 		return a ? {
@@ -3764,7 +3773,7 @@ function Pi(e) {
 }
 //#endregion
 //#region src/grants/list.ts
-function Fi(e) {
+function Ii(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("grants").where("grants.tenant_id", "=", t);
 		c && (l = D(e, l, c, [
@@ -3802,26 +3811,26 @@ function Fi(e) {
 }
 //#endregion
 //#region src/grants/remove.ts
-function Ii(e) {
+function Li(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
-function Li(e) {
+function Ri(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/grants/index.ts
-function Ri(e) {
+function zi(e) {
 	return {
-		create: Ni(e),
-		get: Pi(e),
-		list: Fi(e),
-		remove: Ii(e),
-		removeByUser: Li(e)
+		create: Pi(e),
+		get: Fi(e),
+		list: Ii(e),
+		remove: Li(e),
+		removeByUser: Ri(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/create.ts
-function zi(e) {
+function Bi(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3841,7 +3850,7 @@ function zi(e) {
 }
 //#endregion
 //#region src/user-permissions/remove.ts
-function Bi(e) {
+function Vi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_permissions").where("tenant_id", "=", t).where("user_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name);
@@ -3853,7 +3862,7 @@ function Bi(e) {
 }
 //#endregion
 //#region src/user-permissions/list.ts
-function Vi(e) {
+function Hi(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_permissions").leftJoin("resource_servers", (e) => e.onRef("user_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("user_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"user_permissions.resource_server_identifier",
@@ -3876,17 +3885,17 @@ function Vi(e) {
 }
 //#endregion
 //#region src/user-permissions/index.ts
-function Hi(e) {
+function Ui(e) {
 	return {
-		create: zi(e),
-		remove: Bi(e),
-		list: Vi(e)
+		create: Bi(e),
+		remove: Vi(e),
+		list: Hi(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/adapter.ts
-function Ui(e) {
-	let t = Hi(e);
+function Wi(e) {
+	let t = Ui(e);
 	return {
 		create: (e, n, r, i) => t.create(e, n, r, i),
 		remove: (e, n, r, i) => t.remove(e, n, r, i),
@@ -3895,7 +3904,7 @@ function Ui(e) {
 }
 //#endregion
 //#region src/user-roles/list.ts
-function Wi(e) {
+function Gi(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_roles as ur").innerJoin("roles as r", (e) => e.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")).select([
 			"r.id",
@@ -3909,7 +3918,7 @@ function Wi(e) {
 }
 //#endregion
 //#region src/user-roles/list-users.ts
-function Gi(e) {
+function Ki(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("user_roles").select("user_id").distinct().where("tenant_id", "=", t).where("role_id", "=", n);
 		if (M(r)) {
@@ -3937,7 +3946,7 @@ function Gi(e) {
 }
 //#endregion
 //#region src/user-roles/create.ts
-function Ki(e) {
+function qi(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3955,7 +3964,7 @@ function Ki(e) {
 }
 //#endregion
 //#region src/user-roles/remove.ts
-function qi(e) {
+function Ji(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_roles").where("tenant_id", "=", t).where("user_id", "=", n).where("role_id", "=", r);
@@ -3967,18 +3976,18 @@ function qi(e) {
 }
 //#endregion
 //#region src/user-roles/index.ts
-function Ji(e) {
+function Yi(e) {
 	return {
-		list: Wi(e),
-		listUsers: Gi(e),
-		create: Ki(e),
-		remove: qi(e)
+		list: Gi(e),
+		listUsers: Ki(e),
+		create: qi(e),
+		remove: Ji(e)
 	};
 }
 //#endregion
 //#region src/user-roles/adapter.ts
-function Yi(e) {
-	let t = Ji(e);
+function Xi(e) {
+	let t = Yi(e);
 	return {
 		list: (e, n, r, i) => t.list(e, n, r, i),
 		listUsers: (e, n, r) => t.listUsers(e, n, r),
@@ -3988,7 +3997,7 @@ function Yi(e) {
 }
 //#endregion
 //#region src/organizations/create.ts
-function Xi(e) {
+function Zi(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
@@ -4016,7 +4025,7 @@ function Xi(e) {
 }
 //#endregion
 //#region src/organizations/get.ts
-function Zi(e) {
+function Qi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ||= await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("name", "=", n).executeTakeFirst(), r ? l({
@@ -4031,7 +4040,7 @@ function Zi(e) {
 //#endregion
 //#region src/organizations/list.ts
 var V = ["name", "display_name"];
-function Qi(e) {
+function $i(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 		if (n?.q) {
@@ -4096,12 +4105,12 @@ function Qi(e) {
 }
 //#endregion
 //#region src/organizations/remove.ts
-function $i(e) {
+function ea(e) {
 	return async (t, n) => (await e.deleteFrom("organizations").where("tenant_id", "=", t).where("id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/organizations/update.ts
-function ea(e) {
+function ta(e) {
 	return async (t, n, r) => {
 		let { branding: i, metadata: a, enabled_connections: o, token_quota: s, ...c } = r, l = {
 			...c,
@@ -4117,13 +4126,13 @@ function ea(e) {
 }
 //#endregion
 //#region src/organizations/index.ts
-function ta(e) {
+function na(e) {
 	return {
-		create: Xi(e),
-		get: Zi(e),
-		list: Qi(e),
-		remove: $i(e),
-		update: ea(e)
+		create: Zi(e),
+		get: Qi(e),
+		list: $i(e),
+		remove: ea(e),
+		update: ta(e)
 	};
 }
 //#endregion
@@ -4149,7 +4158,7 @@ async function U(e, t, n) {
 		strategy: typeof r.strategy == "string" ? r.strategy : void 0
 	};
 }
-function na(e) {
+function ra(e) {
 	return {
 		async create(t, n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -4192,7 +4201,7 @@ function na(e) {
 }
 //#endregion
 //#region src/user-organizations/create.ts
-function ra(e) {
+function ia(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			id: a?.id ?? t(),
@@ -4212,7 +4221,7 @@ function ra(e) {
 }
 //#endregion
 //#region src/user-organizations/get.ts
-function ia(e) {
+function aa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("user_organizations").selectAll().where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r ? {
@@ -4226,7 +4235,7 @@ function ia(e) {
 }
 //#endregion
 //#region src/user-organizations/list.ts
-function aa(e) {
+function oa(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("user_organizations").selectAll().where("tenant_id", "=", t);
 		if (n?.q) {
@@ -4279,7 +4288,7 @@ function aa(e) {
 }
 //#endregion
 //#region src/user-organizations/listUserOrganizations.ts
-function oa(e) {
+function sa(e) {
 	return async (t, n, r) => {
 		let i = r?.page || 0, a = r?.per_page || 50, o = i * a, s = e.selectFrom("user_organizations").innerJoin("organizations", (e) => e.onRef("organizations.id", "=", "user_organizations.organization_id").on("organizations.tenant_id", "=", t)).select([
 			"organizations.id",
@@ -4316,12 +4325,12 @@ function oa(e) {
 }
 //#endregion
 //#region src/user-organizations/remove.ts
-function sa(e) {
+function ca(e) {
 	return async (t, n) => (await e.deleteFrom("user_organizations").where("id", "=", n).where("tenant_id", "=", t).execute()).length > 0;
 }
 //#endregion
 //#region src/user-organizations/update.ts
-function ca(e) {
+function la(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -4332,19 +4341,19 @@ function ca(e) {
 }
 //#endregion
 //#region src/user-organizations/index.ts
-function la(e) {
+function ua(e) {
 	return {
-		create: ra(e),
-		get: ia(e),
-		list: aa(e),
-		listUserOrganizations: oa(e),
-		remove: sa(e),
-		update: ca(e)
+		create: ia(e),
+		get: aa(e),
+		list: oa(e),
+		listUserOrganizations: sa(e),
+		remove: ca(e),
+		update: la(e)
 	};
 }
 //#endregion
 //#region src/invites/create.ts
-function ua(e) {
+function da(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = i?.id ?? n.id ?? je(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
 			id: a,
@@ -4390,7 +4399,7 @@ function ua(e) {
 }
 //#endregion
 //#region src/invites/get.ts
-function da(e) {
+function fa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("invites").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -4407,7 +4416,7 @@ function da(e) {
 }
 //#endregion
 //#region src/invites/list.ts
-function fa(e) {
+function pa(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("invites").selectAll().where("tenant_id", "=", t).orderBy("created_at", "desc");
 		if (n?.per_page && (r = r.limit(n.per_page)), n?.page) {
@@ -4434,12 +4443,12 @@ function fa(e) {
 }
 //#endregion
 //#region src/invites/remove.ts
-function pa(e) {
+function ma(e) {
 	return async (t, n) => (await e.deleteFrom("invites").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0n;
 }
 //#endregion
 //#region src/invites/update.ts
-function ma(e) {
+function ha(e) {
 	return async (t, n, r) => {
 		let i = {};
 		return r.inviter !== void 0 && (i.inviter = JSON.stringify(r.inviter)), r.invitee !== void 0 && (i.invitee = JSON.stringify(r.invitee)), r.client_id !== void 0 && (i.client_id = r.client_id), r.connection_id !== void 0 && (i.connection_id = r.connection_id), r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), r.roles !== void 0 && (i.roles = JSON.stringify(r.roles)), r.ttl_sec !== void 0 && (i.ttl_sec = r.ttl_sec, i.expires_at = new Date(Date.now() + r.ttl_sec * 1e3).toISOString()), r.send_invitation_email !== void 0 && (i.send_invitation_email = +!!r.send_invitation_email), Object.keys(i).length === 0 ? !0 : (await e.updateTable("invites").set(i).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numUpdatedRows > 0n;
@@ -4447,35 +4456,35 @@ function ma(e) {
 }
 //#endregion
 //#region src/invites/index.ts
-function ha(e) {
+function ga(e) {
 	return {
-		create: ua(e),
-		get: da(e),
-		list: fa(e),
-		remove: pa(e),
-		update: ma(e)
+		create: da(e),
+		get: fa(e),
+		list: pa(e),
+		remove: ma(e),
+		update: ha(e)
 	};
 }
 //#endregion
 //#region src/stats/index.ts
-var ga = ["s"], _a = ["pwd_leak"];
-function va(e) {
+var _a = ["s"], va = ["pwd_leak"];
+function ya(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function ya(e) {
+function ba(e) {
 	return e.toISOString().split("T")[0];
 }
-function ba(e) {
+function xa(e) {
 	return {
 		async getDaily(t, n = {}) {
 			let { from: r, to: i } = n, a = /* @__PURE__ */ new Date(), o = new Date(a);
 			o.setDate(o.getDate() - 30);
-			let s = r ? va(r) : ya(o), c = i ? va(i) : ya(a), l = f`DATE(logs.date)`;
+			let s = r ? ya(r) : ba(o), c = i ? ya(i) : ba(a), l = f`DATE(logs.date)`;
 			return (await e.selectFrom("logs").where("tenant_id", "=", t).where(l, ">=", s).where(l, "<=", c).select((e) => [
 				l.as("date"),
-				e.fn.sum(e.case().when("type", "in", ga).then(1).else(0).end()).as("logins"),
+				e.fn.sum(e.case().when("type", "in", _a).then(1).else(0).end()).as("logins"),
 				e.fn.sum(e.case().when("type", "=", "ss").then(1).else(0).end()).as("signups"),
-				e.fn.sum(e.case().when("type", "in", _a).then(1).else(0).end()).as("leaked_passwords"),
+				e.fn.sum(e.case().when("type", "in", va).then(1).else(0).end()).as("leaked_passwords"),
 				e.fn.min("date").as("first_event"),
 				e.fn.max("date").as("last_event")
 			]).groupBy(l).orderBy("date", "asc").execute()).map((e) => ({
@@ -4489,13 +4498,13 @@ function ba(e) {
 		},
 		async getActiveUsers(t) {
 			let n = /* @__PURE__ */ new Date();
-			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", ga).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
+			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", _a).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
 		}
 	};
 }
 //#endregion
 //#region src/analytics/index.ts
-var xa = {
+var Sa = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -4525,7 +4534,7 @@ var xa = {
 		"fvr"
 	],
 	"codes-sent": ["cls", "cs"]
-}, Sa = {
+}, Ca = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -4582,7 +4591,7 @@ var xa = {
 		agg: "count"
 	}
 };
-async function Ca(e) {
+async function wa(e) {
 	try {
 		return await f`SELECT @@version_comment`.execute(e), "mysql";
 	} catch {
@@ -4604,7 +4613,7 @@ function W(e, t) {
 	let i = r.hour === "24" ? "00" : r.hour, a = Date.UTC(Number(r.year), Number(r.month) - 1, Number(r.day), Number(i), Number(r.minute), Number(r.second)), o = Math.round((a - t.getTime()) / 6e4), s = o >= 0 ? "+" : "-", c = Math.abs(o);
 	return `${s}${String(Math.floor(c / 60)).padStart(2, "0")}:${String(c % 60).padStart(2, "0")}`;
 }
-var wa = [
+var Ta = [
 	"January",
 	"February",
 	"March",
@@ -4618,22 +4627,22 @@ var wa = [
 	"November",
 	"December"
 ];
-function Ta(e, t) {
+function Ea(e, t) {
 	let n = t.getUTCFullYear(), r = W(e, new Date(Date.UTC(n, 0, 1)));
 	for (let t = 1; t < 12; t++) {
 		let i = W(e, new Date(Date.UTC(n, t, 1)));
-		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${wa[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
+		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${Ta[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
 	}
 }
-function Ea(e) {
+function Da(e) {
 	let t = e.startsWith("-") ? -1 : 1, [n, r] = e.slice(1).split(":");
 	return t * (Number(n) * 60 + Number(r));
 }
-function Da(e, t) {
+function Oa(e, t) {
 	let n;
 	if (t === "+00:00") n = f`${f.ref("logs.date")}`;
 	else {
-		let e = Ea(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
+		let e = Da(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
 		n = f`datetime(${f.ref("logs.date")}, ${r})`;
 	}
 	switch (e) {
@@ -4644,7 +4653,7 @@ function Da(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function Oa(e, t) {
+function ka(e, t) {
 	if (t === "+00:00") switch (e) {
 		case "hour": return f`substring(${f.ref("logs.date")}, 1, 13)`;
 		case "day": return f`substring(${f.ref("logs.date")}, 1, 10)`;
@@ -4655,7 +4664,7 @@ function Oa(e, t) {
 		}
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
-	let n = Ea(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
+	let n = Da(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
 	switch (e) {
 		case "hour": return f`date_format(${r}, '%Y-%m-%dT%H')`;
 		case "day": return f`date_format(${r}, '%Y-%m-%d')`;
@@ -4664,12 +4673,12 @@ function Oa(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function ka(e, t, n, r) {
-	Ta(t, n);
+function Aa(e, t, n, r) {
+	Ea(t, n);
 	let i = W(t, n);
-	return r === "mysql" ? Oa(e, i) : Da(e, i);
+	return r === "mysql" ? ka(e, i) : Oa(e, i);
 }
-function Aa(e) {
+function ja(e) {
 	switch (e) {
 		case "connection": return "logs.connection";
 		case "client_id": return "logs.client_id";
@@ -4678,15 +4687,15 @@ function Aa(e) {
 		case "time": throw Error("time dimension is handled separately");
 	}
 }
-function ja(e) {
-	let t = null, n = () => (t ||= Ca(e), t);
+function Ma(e) {
+	let t = null, n = () => (t ||= wa(e), t);
 	return {
 		async query(t, r, i) {
-			let a = Date.now(), o = xa[r], s = Sa[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
+			let a = Date.now(), o = Sa[r], s = Ca[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
 			u = u.where("date", ">=", i.from).where("date", "<", i.to), u = u.where("type", "in", o), i.filters.connection?.length && (u = u.where("connection", "in", i.filters.connection)), i.filters.client_id?.length && (u = u.where("client_id", "in", i.filters.client_id)), i.filters.user_type?.length && (u = u.where("strategy_type", "in", i.filters.user_type)), i.filters.user_id?.length && (u = u.where("user_id", "in", i.filters.user_id));
 			let d = [], p = [];
 			for (let e of i.group_by) if (e === "time") {
-				let e = ka(i.interval, i.tz, new Date(i.from), c);
+				let e = Aa(i.interval, i.tz, new Date(i.from), c);
 				p.push({
 					alias: "time",
 					expr: e
@@ -4695,7 +4704,7 @@ function ja(e) {
 					type: i.interval === "hour" ? "DateTime" : "Date"
 				});
 			} else {
-				let t = Aa(e);
+				let t = ja(e);
 				p.push({
 					alias: e,
 					expr: f`${f.ref(t)}`
@@ -4770,7 +4779,7 @@ function ja(e) {
 }
 //#endregion
 //#region src/customText/index.ts
-function Ma(e) {
+function Na(e) {
 	return {
 		async get(t, n, r) {
 			let i = await e.selectFrom("custom_text").selectAll().where("tenant_id", "=", t).where("prompt", "=", n).where("language", "=", r).executeTakeFirst();
@@ -4809,7 +4818,7 @@ function Ma(e) {
 }
 //#endregion
 //#region src/authenticationMethods/create.ts
-function Na(e) {
+function Pa(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? jr();
 		return await e.insertInto("authentication_methods").values({
@@ -4848,7 +4857,7 @@ function Na(e) {
 }
 //#endregion
 //#region src/authenticationMethods/get.ts
-function Pa(e) {
+function Fa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4871,7 +4880,7 @@ function Pa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/getByCredentialId.ts
-function Fa(e) {
+function Ia(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.credential_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4894,7 +4903,7 @@ function Fa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/list.ts
-function Ia(e) {
+function La(e) {
 	return async (t, n) => (await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "=", n).selectAll().execute()).map((e) => ({
 		id: e.id,
 		user_id: e.user_id,
@@ -4914,35 +4923,35 @@ function Ia(e) {
 }
 //#endregion
 //#region src/authenticationMethods/update.ts
-function La(e) {
+function Ra(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		r.phone_number !== void 0 && (i.phone_number = r.phone_number), r.totp_secret !== void 0 && (i.totp_secret = r.totp_secret), r.credential_id !== void 0 && (i.credential_id = r.credential_id), r.public_key !== void 0 && (i.public_key = r.public_key), r.sign_count !== void 0 && (i.sign_count = r.sign_count), r.credential_backed_up !== void 0 && (i.credential_backed_up = +!!r.credential_backed_up), r.transports !== void 0 && (i.transports = JSON.stringify(r.transports)), r.friendly_name !== void 0 && (i.friendly_name = r.friendly_name), r.confirmed !== void 0 && (i.confirmed = +!!r.confirmed), await e.updateTable("authentication_methods").set(i).where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).execute();
-		let a = await Pa(e)(t, n);
+		let a = await Fa(e)(t, n);
 		if (!a) throw Error(`Authentication method ${n} not found`);
 		return a;
 	};
 }
 //#endregion
 //#region src/authenticationMethods/remove.ts
-function Ra(e) {
+function za(e) {
 	return async (t, n) => (await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/authenticationMethods/index.ts
-function za(e) {
+function Ba(e) {
 	return {
-		create: Na(e),
-		get: Pa(e),
-		getByCredentialId: Fa(e),
-		list: Ia(e),
-		update: La(e),
-		remove: Ra(e)
+		create: Pa(e),
+		get: Fa(e),
+		getByCredentialId: Ia(e),
+		list: La(e),
+		update: Ra(e),
+		remove: za(e)
 	};
 }
 //#endregion
 //#region src/outbox/getByIds.ts
-function Ba(e) {
+function Va(e) {
 	return async (t) => t.length === 0 ? [] : (await e.selectFrom("outbox_events").selectAll().where("id", "in", t).execute()).map((e) => ({
 		...JSON.parse(e.payload),
 		id: e.id,
@@ -4955,7 +4964,7 @@ function Ba(e) {
 }
 //#endregion
 //#region src/outbox/getUnprocessed.ts
-function Va(e) {
+function Ha(e) {
 	return async (t) => {
 		let n = (/* @__PURE__ */ new Date()).toISOString();
 		return (await e.selectFrom("outbox_events").selectAll().where("processed_at", "is", null).where((e) => e.or([e("next_retry_at", "is", null), e("next_retry_at", "<=", n)])).where((e) => e.or([e("claimed_by", "is", null), e("claim_expires_at", "<=", n)])).orderBy("created_at", "asc").orderBy("id", "asc").limit(t).execute()).map((e) => ({
@@ -4971,7 +4980,7 @@ function Va(e) {
 }
 //#endregion
 //#region src/outbox/claimEvents.ts
-function Ha(e) {
+function Ua(e) {
 	return async (t, n, r) => {
 		if (t.length === 0) return [];
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = new Date(Date.now() + r).toISOString();
@@ -4983,7 +4992,7 @@ function Ha(e) {
 }
 //#endregion
 //#region src/outbox/markProcessed.ts
-function Ua(e) {
+function Wa(e) {
 	return async (t) => {
 		if (t.length === 0) return;
 		let n = (/* @__PURE__ */ new Date()).toISOString();
@@ -4992,7 +5001,7 @@ function Ua(e) {
 }
 //#endregion
 //#region src/outbox/markRetry.ts
-function Wa(e) {
+function Ga(e) {
 	return async (t, n, r) => {
 		await e.updateTable("outbox_events").set({
 			error: n,
@@ -5005,7 +5014,7 @@ function Wa(e) {
 }
 //#endregion
 //#region src/outbox/deadLetter.ts
-function Ga(e) {
+function Ka(e) {
 	return async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString();
 		await e.updateTable("outbox_events").set({
@@ -5017,7 +5026,7 @@ function Ga(e) {
 }
 //#endregion
 //#region src/outbox/listFailed.ts
-function Ka(e) {
+function qa(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1 } = n, o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap((e) => {
 			let t;
@@ -5052,7 +5061,7 @@ function Ka(e) {
 }
 //#endregion
 //#region src/outbox/replay.ts
-function qa(e) {
+function Ja(e) {
 	return async (t, n) => {
 		let r = await e.updateTable("outbox_events").set({
 			processed_at: null,
@@ -5067,7 +5076,7 @@ function qa(e) {
 }
 //#endregion
 //#region src/outbox/cleanup.ts
-function Ja(e) {
+function Ya(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5075,18 +5084,18 @@ function Ja(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function Ya(e) {
+function Xa(e) {
 	return {
 		create: Xe(e),
-		getByIds: Ba(e),
-		getUnprocessed: Va(e),
-		claimEvents: Ha(e),
-		markProcessed: Ua(e),
-		markRetry: Wa(e),
-		deadLetter: Ga(e),
-		listFailed: Ka(e),
-		replay: qa(e),
-		cleanup: Ja(e)
+		getByIds: Va(e),
+		getUnprocessed: Ha(e),
+		claimEvents: Ua(e),
+		markProcessed: Wa(e),
+		markRetry: Ga(e),
+		deadLetter: Ka(e),
+		listFailed: qa(e),
+		replay: Ja(e),
+		cleanup: Ya(e)
 	};
 }
 //#endregion
@@ -5104,7 +5113,7 @@ function G(e) {
 		updated_at: e.updated_at
 	};
 }
-function Xa(e) {
+function Za(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5151,7 +5160,7 @@ function K(e) {
 		updated_at: e.updated_at
 	};
 }
-function Za(e) {
+function Qa(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5191,13 +5200,13 @@ function q(e) {
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: Qa(e.match),
-		handlers: $a(e.handlers),
+		match: $a(e.match),
+		handlers: eo(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function Qa(e) {
+function $a(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = ce.safeParse(t);
@@ -5205,7 +5214,7 @@ function Qa(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function $a(e) {
+function eo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5275,7 +5284,7 @@ function J(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function eo(e, t) {
+async function to(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5292,15 +5301,15 @@ async function eo(e, t) {
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function to(e) {
+function no(e) {
 	return {
 		proxyRoutes: J(e),
-		resolveHost: (t) => eo(e, t)
+		resolveHost: (t) => to(e, t)
 	};
 }
 //#endregion
 //#region src/scim/adapter.ts
-function no(e) {
+function ro(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5315,7 +5324,7 @@ function no(e) {
 		return [];
 	}
 }
-function ro(e) {
+function io(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5324,16 +5333,16 @@ function ro(e) {
 		return [];
 	}
 }
-function io(e) {
+function ao(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: no(e.mapping),
+		mapping: ro(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function ao(e) {
+function oo(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5354,7 +5363,7 @@ function ao(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
-			return r ? io(r) : null;
+			return r ? ao(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5368,18 +5377,18 @@ function ao(e) {
 		}
 	};
 }
-function oo(e) {
+function so(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: ro(e.scopes),
+		scopes: io(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function so(e) {
+function co(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5403,14 +5412,14 @@ function so(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
-			return r ? oo(r) : null;
+			return r ? so(r) : null;
 		},
 		async getByHash(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-			return r ? oo(r) : null;
+			return r ? so(r) : null;
 		},
 		async listByConnection(t, n) {
-			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(oo);
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(so);
 		},
 		async markUsed(t, n, r) {
 			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
@@ -5422,7 +5431,7 @@ function so(e) {
 		}
 	};
 }
-function co(e) {
+function lo(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -5430,7 +5439,7 @@ function co(e) {
 		created_at: e.created_at
 	};
 }
-function lo(e) {
+function uo(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5449,11 +5458,11 @@ function lo(e) {
 		},
 		async getByExternalId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
-			return i ? co(i) : null;
+			return i ? lo(i) : null;
 		},
 		async getByUserId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
-			return i ? co(i) : null;
+			return i ? lo(i) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
@@ -5463,7 +5472,7 @@ function lo(e) {
 }
 //#endregion
 //#region src/tenantOperations/index.ts
-function uo(e) {
+function fo(e) {
 	return ye.parse({
 		id: e.id,
 		tenant_id: e.tenant_id,
@@ -5482,7 +5491,7 @@ function uo(e) {
 		finished_at: e.finished_at
 	});
 }
-function fo(e) {
+function po(e) {
 	return {
 		async create(n) {
 			let r = ve.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -5502,11 +5511,11 @@ function fo(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("tenant_operations").values(a).execute(), uo(a);
+			return await e.insertInto("tenant_operations").values(a).execute(), fo(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("tenant_operations").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? uo(n) : null;
+			return n ? fo(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = e.selectFrom("tenant_operations");
@@ -5517,7 +5526,7 @@ function fo(e) {
 			t.engine !== void 0 && (i = i.where("engine", "=", t.engine)), t.updated_before !== void 0 && (i = i.where("updated_at", "<", t.updated_before));
 			let a = await i.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				operations: a.map(uo),
+				operations: a.map(fo),
 				start: n * r,
 				limit: r,
 				length: a.length
@@ -5537,27 +5546,27 @@ function fo(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var po = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", mo = 32, ho = 10, go = 4, _o = 10;
-function vo(e, t) {
+var mo = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", ho = 32, go = 10, _o = 4, vo = 10;
+function yo(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = po.charAt(e % mo) + n, e = Math.floor(e / mo);
+	for (let r = t; r > 0; r--) n = mo.charAt(e % ho) + n, e = Math.floor(e / ho);
 	return n;
 }
-function yo() {
-	let e = new Uint8Array(_o);
+function bo() {
+	let e = new Uint8Array(vo);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < _o; n++) t += po.charAt(e[n] % mo);
+	for (let n = 0; n < vo; n++) t += mo.charAt(e[n] % ho);
 	return t;
 }
-var bo = 0, xo = 0;
-function So() {
+var xo = 0, So = 0;
+function Co() {
 	let e = Date.now();
-	return e === bo ? xo++ : (bo = e, xo = 0), vo(e, ho) + vo(xo, go) + yo();
+	return e === xo ? So++ : (xo = e, So = 0), yo(e, go) + yo(So, _o) + bo();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function Co(e) {
+function wo(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5565,22 +5574,22 @@ function Co(e) {
 	} catch {}
 	return null;
 }
-function wo(e) {
+function To(e) {
 	return _e.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: Co(e.detail),
+		detail: wo(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function To(e) {
+function Eo(e) {
 	return {
 		async create(t) {
 			let n = ge.parse(t), r = {
-				id: `evt_${So()}`,
+				id: `evt_${Co()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5588,12 +5597,12 @@ function To(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), wo(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), To(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(wo),
+				events: a.map(To),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -5603,7 +5612,7 @@ function To(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function Eo(e) {
+function Do(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5619,15 +5628,15 @@ function Y(e) {
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: Eo(e.canary_tenant_ids),
-		filter: Eo(e.filter),
+		canary_tenant_ids: Do(e.canary_tenant_ids),
+		filter: Do(e.filter),
 		initiated_by: e.initiated_by,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function Do(e) {
+function Oo(e) {
 	return {
 		async create(n) {
 			let r = fe.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -5673,7 +5682,7 @@ function Do(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var Oo = class {
+var ko = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -5681,10 +5690,10 @@ var Oo = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, ko = /* @__PURE__ */ w({
-	down: () => No,
-	up: () => Mo
-}), Ao = [
+}, Ao = /* @__PURE__ */ w({
+	down: () => Po,
+	up: () => No
+}), jo = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -5950,7 +5959,7 @@ var Oo = class {
 		onDelete: "cascade"
 	}
 ];
-async function jo(e) {
+async function Mo(e) {
 	try {
 		return await f`select sqlite_version()`.execute(e), !0;
 	} catch {
@@ -5959,14 +5968,14 @@ async function jo(e) {
 }
 function X(e, t) {
 	let n = e;
-	for (let e of Ao) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of jo) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function Mo(e) {
-	let t = await jo(e);
+async function No(e) {
+	let t = await Mo(e);
 	await e.schema.createTable("tenants").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("audience", f`varchar(255)`).addColumn("sender_email", f`varchar(255)`).addColumn("sender_name", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addColumn("support_url", f`varchar(255)`).addColumn("idle_session_lifetime", f`int`).addColumn("session_lifetime", f`int`).addColumn("session_cookie", f`text`).addColumn("allowed_logout_urls", f`text`).addColumn("ephemeral_session_lifetime", f`int`).addColumn("idle_ephemeral_session_lifetime", f`int`).addColumn("default_redirection_uri", f`text`).addColumn("enabled_locales", f`text`).addColumn("default_directory", f`varchar(255)`).addColumn("error_page", f`text`).addColumn("flags", f`text`).addColumn("friendly_name", f`varchar(255)`).addColumn("picture_url", f`text`).addColumn("support_email", f`varchar(255)`).addColumn("sandbox_version", f`varchar(50)`).addColumn("sandbox_versions_available", f`text`).addColumn("legacy_sandbox_version", f`varchar(50)`).addColumn("change_password", f`text`).addColumn("guardian_mfa_page", f`text`).addColumn("device_flow", f`text`).addColumn("default_token_quota", f`text`).addColumn("default_audience", f`varchar(255)`).addColumn("default_organization", f`varchar(255)`).addColumn("sessions", f`text`).addColumn("oidc_logout", f`text`).addColumn("allow_organization_name_in_authentication_api", f`int`).addColumn("customize_mfa_in_postlogin_action", f`int`).addColumn("acr_values_supported", f`text`).addColumn("mtls", f`text`).addColumn("pushed_authorization_requests_supported", f`int`).addColumn("authorization_response_iss_parameter_supported", f`int`).addColumn("mfa", f`text`).addColumn("attack_protection", f`text`).addColumn("default_client_id", f`varchar(255)`).addColumn("deployment_type", f`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", f`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", f`varchar(2048)`).addColumn("provisioning_state_changed_at", f`varchar(35)`).addColumn("bundle_configuration", f`varchar(64)`).addColumn("worker_version", f`varchar(64)`).addColumn("worker_script_name", f`varchar(255)`).addColumn("storage_kind", f`varchar(32)`).addColumn("d1_database_id", f`varchar(64)`).addColumn("database_version", f`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", f`varchar(64)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("results", f`text`, (e) => e.notNull()).addColumn("logs", f`text`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("action_id", f`varchar(255)`, (e) => e.notNull()).addColumn("number", f`int`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("status", f`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed_at_ts", f`bigint`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("type", f`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", f`varchar(32)`).addColumn("totp_secret", f`varchar(255)`).addColumn("confirmed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("credential_id", f`varchar(512)`).addColumn("public_key", f`text`).addColumn("sign_count", f`int`).addColumn("credential_backed_up", f`int`).addColumn("transports", f`varchar(512)`).addColumn("friendly_name", f`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
@@ -6153,40 +6162,40 @@ async function Mo(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Ao) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of jo) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function No(e) {
+async function Po(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var Po = !1;
-function Fo(e) {
-	Po = e;
+var Fo = !1;
+function Io(e) {
+	Fo = e;
 }
 function Z(...e) {
-	Po && console.log(...e);
+	Fo && console.log(...e);
 }
 function Q(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var Io = /* @__PURE__ */ w({
-	down: () => Ko,
-	up: () => Uo
-}), $ = 5e4, Lo = 500;
-async function Ro(e) {
+var Lo = /* @__PURE__ */ w({
+	down: () => qo,
+	up: () => Wo
+}), $ = 5e4, Ro = 500;
+async function zo(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function zo(e, t, n) {
+async function Bo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
@@ -6197,7 +6206,7 @@ async function zo(e, t, n) {
 		throw e;
 	}
 }
-async function Bo(e, t, n, r) {
+async function Vo(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6208,7 +6217,7 @@ async function Bo(e, t, n, r) {
 		throw e;
 	}
 }
-async function Vo(e, t) {
+async function Ho(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
@@ -6222,7 +6231,7 @@ async function Vo(e, t) {
 	}
 	return r;
 }
-async function Ho(e) {
+async function Uo(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -6230,33 +6239,33 @@ async function Ho(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(Lo).execute();
+		]).where("expires_at_ts", "is", null).limit(Ro).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < Lo) break;
+		if (t += n.length, n.length < Ro) break;
 	}
 	return t;
 }
-async function Uo(e) {
-	let t = await Ro(e);
+async function Wo(e) {
+	let t = await zo(e);
 	try {
-		let n = await Vo(e, t);
+		let n = await Ho(e, t);
 		Z(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
 		Q(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await zo(e, "codes", "expires_at_ts"), await Bo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await Bo(e, "codes", "expires_at_ts"), await Vo(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await Ho(e);
+		let t = await Uo(e);
 		Z(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
 		Q(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function Wo(e, t, n) {
+async function Go(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -6264,7 +6273,7 @@ async function Wo(e, t, n) {
 		throw e;
 	}
 }
-async function Go(e, t, n) {
+async function Ko(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6272,16 +6281,16 @@ async function Go(e, t, n) {
 		throw e;
 	}
 }
-async function Ko(e) {
-	await Wo(e, "idx_codes_expires_at_ts", "codes"), await Go(e, "codes", "expires_at_ts");
+async function qo(e) {
+	await Go(e, "idx_codes_expires_at_ts", "codes"), await Ko(e, "codes", "expires_at_ts");
 }
 //#endregion
 //#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
-var qo = /* @__PURE__ */ w({
-	down: () => Yo,
-	up: () => Jo
+var Jo = /* @__PURE__ */ w({
+	down: () => Xo,
+	up: () => Yo
 });
-async function Jo(e) {
+async function Yo(e) {
 	await e.schema.createTable("scim_configurations").addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", f`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", f`varchar(128)`, (e) => e.notNull()).addColumn("scopes", f`text`, (e) => e.notNull()).addColumn("valid_until", f`varchar(35)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", f`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("external_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
 		"tenant_id",
 		"connection_id",
@@ -6292,16 +6301,16 @@ async function Jo(e) {
 		"external_id"
 	]).unique().execute();
 }
-async function Yo(e) {
+async function Xo(e) {
 	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
-var Xo = /* @__PURE__ */ w({
-	down: () => es,
-	up: () => Qo
+var Zo = /* @__PURE__ */ w({
+	down: () => ts,
+	up: () => $o
 });
-async function Zo(e, t, n) {
+async function Qo(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6309,10 +6318,10 @@ async function Zo(e, t, n) {
 		throw e;
 	}
 }
-async function Qo(e) {
-	await Zo(e, "users", "blocked");
+async function $o(e) {
+	await Qo(e, "users", "blocked");
 }
-async function $o(e, t, n) {
+async function es(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6320,16 +6329,16 @@ async function $o(e, t, n) {
 		throw e;
 	}
 }
-async function es(e) {
-	await $o(e, "users", "blocked");
+async function ts(e) {
+	await es(e, "users", "blocked");
 }
 //#endregion
 //#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
-var ts = /* @__PURE__ */ w({
-	down: () => as,
-	up: () => rs
+var ns = /* @__PURE__ */ w({
+	down: () => os,
+	up: () => is
 });
-async function ns(e, t, n) {
+async function rs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6337,10 +6346,10 @@ async function ns(e, t, n) {
 		throw e;
 	}
 }
-async function rs(e) {
-	await ns(e, "prompt_settings", "show_last_used_connection");
+async function is(e) {
+	await rs(e, "prompt_settings", "show_last_used_connection");
 }
-async function is(e, t, n) {
+async function as(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6348,16 +6357,16 @@ async function is(e, t, n) {
 		throw e;
 	}
 }
-async function as(e) {
-	await is(e, "prompt_settings", "show_last_used_connection");
+async function os(e) {
+	await as(e, "prompt_settings", "show_last_used_connection");
 }
 //#endregion
 //#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
-var os = /* @__PURE__ */ w({
-	down: () => ls,
-	up: () => cs
+var ss = /* @__PURE__ */ w({
+	down: () => us,
+	up: () => ls
 });
-async function ss(e, t, n, r) {
+async function cs(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6368,10 +6377,10 @@ async function ss(e, t, n, r) {
 		throw e;
 	}
 }
-async function cs(e) {
-	await ss(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
-}
 async function ls(e) {
+	await cs(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+}
+async function us(e) {
 	try {
 		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
 	} catch (e) {
@@ -6381,11 +6390,11 @@ async function ls(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-08-11T12:00:00_page_hooks.ts
-var us = /* @__PURE__ */ w({
-	down: () => ms,
-	up: () => fs
+var ds = /* @__PURE__ */ w({
+	down: () => hs,
+	up: () => ps
 });
-async function ds(e, t, n, r) {
+async function fs(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6393,10 +6402,10 @@ async function ds(e, t, n, r) {
 		throw e;
 	}
 }
-async function fs(e) {
-	await ds(e, "hooks", "page_id", f`varchar(64)`), await ds(e, "hooks", "permission_required", f`varchar(255)`);
+async function ps(e) {
+	await fs(e, "hooks", "page_id", f`varchar(64)`), await fs(e, "hooks", "permission_required", f`varchar(255)`);
 }
-async function ps(e, t, n) {
+async function ms(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6404,22 +6413,22 @@ async function ps(e, t, n) {
 		throw e;
 	}
 }
-async function ms(e) {
-	await ps(e, "hooks", "permission_required"), await ps(e, "hooks", "page_id");
+async function hs(e) {
+	await ms(e, "hooks", "permission_required"), await ms(e, "hooks", "page_id");
 }
 //#endregion
 //#region migrate/migrations/2026-08-20T12:00:00_refresh_token_session_id.ts
-var hs = /* @__PURE__ */ w({
-	down: () => xs,
-	up: () => ys
-}), gs = [
+var gs = /* @__PURE__ */ w({
+	down: () => Ss,
+	up: () => bs
+}), _s = [
 	["session_id", f`varchar(26)`],
 	["organization", f`varchar(191)`],
 	["auth_connection", f`varchar(255)`],
 	["auth_strategy_strategy", f`varchar(64)`],
 	["auth_strategy_strategy_type", f`varchar(64)`]
 ];
-async function _s(e, t, n, r) {
+async function vs(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6427,7 +6436,7 @@ async function _s(e, t, n, r) {
 		throw e;
 	}
 }
-async function vs(e) {
+async function ys(e) {
 	try {
 		await e.schema.createIndex("idx_refresh_tokens_session_id").on("refresh_tokens").columns(["tenant_id", "session_id"]).execute();
 	} catch (e) {
@@ -6435,11 +6444,11 @@ async function vs(e) {
 		throw e;
 	}
 }
-async function ys(e) {
-	for (let [t, n] of gs) await _s(e, "refresh_tokens", t, n);
-	await vs(e);
+async function bs(e) {
+	for (let [t, n] of _s) await vs(e, "refresh_tokens", t, n);
+	await ys(e);
 }
-async function bs(e, t, n) {
+async function xs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6447,23 +6456,32 @@ async function bs(e, t, n) {
 		throw e;
 	}
 }
-async function xs(e) {
+async function Ss(e) {
 	try {
 		await e.schema.dropIndex("idx_refresh_tokens_session_id").execute();
 	} catch {}
-	for (let [t] of gs) await bs(e, "refresh_tokens", t);
+	for (let [t] of _s) await xs(e, "refresh_tokens", t);
 }
 //#endregion
 //#region migrate/migrations/2026-08-21T12:00:00_refresh_token_session_id_backfill.ts
-var Ss = /* @__PURE__ */ w({
-	down: () => Es,
-	up: () => Ts
-}), Cs = 500, ws = 20;
-async function Ts(e) {
+var Cs = /* @__PURE__ */ w({
+	down: () => ks,
+	up: () => Os
+}), ws = 500, Ts = 20, Es = 500, Ds = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
+async function Os(e) {
 	try {
-		let t = 0;
+		let t = await e.selectFrom("refresh_tokens").innerJoin("login_sessions", "login_sessions.id", "refresh_tokens.login_id").whereRef("login_sessions.tenant_id", "=", "refresh_tokens.tenant_id").where("refresh_tokens.session_id", "is", null).where("login_sessions.session_id", "is not", null).select((e) => e.fn.countAll().as("count")).executeTakeFirst(), n = Number(t?.count ?? 0);
+		if (n > Es) {
+			Q(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${Es}. SKIPPING — run the bulk path instead: ${Ds}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
+			return;
+		}
+		if (n === 0) {
+			Z("refresh_tokens backfill: nothing to do");
+			return;
+		}
+		let r = 0;
 		for (;;) {
-			let n = await e.selectFrom("refresh_tokens").innerJoin("login_sessions", "login_sessions.id", "refresh_tokens.login_id").whereRef("login_sessions.tenant_id", "=", "refresh_tokens.tenant_id").where("refresh_tokens.session_id", "is", null).where("login_sessions.session_id", "is not", null).select([
+			let t = await e.selectFrom("refresh_tokens").innerJoin("login_sessions", "login_sessions.id", "refresh_tokens.login_id").whereRef("login_sessions.tenant_id", "=", "refresh_tokens.tenant_id").where("refresh_tokens.session_id", "is", null).where("login_sessions.session_id", "is not", null).select([
 				"refresh_tokens.id as id",
 				"refresh_tokens.tenant_id as tenant_id",
 				"login_sessions.session_id as ls_session_id",
@@ -6471,10 +6489,10 @@ async function Ts(e) {
 				"login_sessions.auth_strategy_strategy as ls_strategy",
 				"login_sessions.auth_strategy_strategy_type as ls_strategy_type",
 				"login_sessions.auth_params as ls_auth_params"
-			]).limit(Cs).execute();
-			if (n.length === 0) break;
-			for (let t = 0; t < n.length; t += ws) {
-				let r = n.slice(t, t + ws);
+			]).limit(ws).execute();
+			if (t.length === 0) break;
+			for (let n = 0; n < t.length; n += Ts) {
+				let r = t.slice(n, n + Ts);
 				await Promise.all(r.map(async (t) => {
 					let n = null;
 					if (t.ls_auth_params) try {
@@ -6491,44 +6509,44 @@ async function Ts(e) {
 					}).where("tenant_id", "=", t.tenant_id).where("id", "=", t.id).execute();
 				}));
 			}
-			if (t += n.length, Z(`refresh_tokens backfill: ${t} rows populated so far`), n.length < Cs) break;
+			if (r += t.length, Z(`refresh_tokens backfill: ${r} rows populated so far`), t.length < ws) break;
 		}
-		Z(`refresh_tokens backfill: done, ${t} rows updated`);
+		Z(`refresh_tokens backfill: done, ${r} rows updated`);
 	} catch (e) {
 		throw Q("refresh_tokens backfill failed:", e), e;
 	}
 }
-async function Es() {}
+async function ks() {}
 //#endregion
 //#region migrate/migrations/index.ts
-var Ds = {
-	"2026-07-16T14:00:00_baseline": ko,
-	"2026-07-16T15:00:00_codes_expires_at_ts": Io,
-	"2026-08-04T12:00:00_scim_inbound_provisioning": qo,
-	"2026-08-05T12:00:00_user_blocked": Xo,
-	"2026-08-09T12:00:00_prompt_settings_last_used": ts,
-	"2026-08-10T12:00:00_action_executions_created_at_index": os,
-	"2026-08-11T12:00:00_page_hooks": us,
-	"2026-08-20T12:00:00_refresh_token_session_id": hs,
-	"2026-08-21T12:00:00_refresh_token_session_id_backfill": Ss
+var As = {
+	"2026-07-16T14:00:00_baseline": Ao,
+	"2026-07-16T15:00:00_codes_expires_at_ts": Lo,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": Jo,
+	"2026-08-05T12:00:00_user_blocked": Zo,
+	"2026-08-09T12:00:00_prompt_settings_last_used": ns,
+	"2026-08-10T12:00:00_action_executions_created_at_index": ss,
+	"2026-08-11T12:00:00_page_hooks": ds,
+	"2026-08-20T12:00:00_refresh_token_session_id": gs,
+	"2026-08-21T12:00:00_refresh_token_session_id_backfill": Cs
 };
 //#endregion
 //#region migrate/migrate.ts
-async function Os(e, t = !1) {
-	Fo(t), t && console.log("migrating...");
+async function js(e, t = !1) {
+	Io(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new be({
 		db: e,
-		provider: new Oo(Ds)
+		provider: new ko(As)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function ks(e, t = !1) {
-	Fo(t), t && console.log("migrating...");
+async function Ms(e, t = !1) {
+	Io(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new be({
 		db: e,
-		provider: new Oo(Ds)
+		provider: new ko(As)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -6536,7 +6554,7 @@ async function ks(e, t = !1) {
 }
 //#endregion
 //#region src/index.ts
-function As(e, t = { useTransactions: !0 }) {
+function Ns(e, t = { useTransactions: !0 }) {
 	let n = {
 		actions: Be(e),
 		actionExecutions: Ke(e),
@@ -6552,48 +6570,48 @@ function As(e, t = { useTransactions: !0 }) {
 		emailTemplates: Zr(e),
 		customDomains: tr(e),
 		flows: St(e),
-		forms: hi(e),
+		forms: gi(e),
 		hookCode: yr(e),
 		hooks: mr(e),
-		invites: ha(e),
+		invites: ga(e),
 		keys: Jn(e),
 		loginSessions: Fr(e),
 		logs: Rt(e),
-		logStreams: Xa(e),
-		migrationSources: Za(e),
-		authenticationMethods: za(e),
+		logStreams: Za(e),
+		migrationSources: Qa(e),
+		authenticationMethods: Ba(e),
 		passwords: Yt(e),
 		promptSettings: zr(e),
 		proxyRoutes: J(e),
-		scimConfigurations: ao(e),
-		scimTokens: so(e),
-		scimExternalIds: lo(e),
-		refreshTokens: si(e),
-		resourceServers: xi(e),
-		rolePermissions: Mi(e),
-		grants: Ri(e),
-		userPermissions: Ui(e),
-		userRoles: Yi(e),
-		roles: Di(e),
+		scimConfigurations: oo(e),
+		scimTokens: co(e),
+		scimExternalIds: uo(e),
+		refreshTokens: ci(e),
+		resourceServers: Si(e),
+		rolePermissions: Ni(e),
+		grants: zi(e),
+		userPermissions: Wi(e),
+		userRoles: Xi(e),
+		roles: Oi(e),
 		sessions: Wt(e),
-		sessionCleanup: li(e),
+		sessionCleanup: ui(e),
 		tenants: At(e),
-		tenantOperations: fo(e),
-		tenantOperationEvents: To(e),
-		rollouts: Do(e),
+		tenantOperations: po(e),
+		tenantOperationEvents: Eo(e),
+		rollouts: Oo(e),
 		themes: wr(e),
 		universalLoginTemplates: cr(e),
-		customText: Ma(e),
+		customText: Na(e),
 		users: mt(e),
 		userActivity: dt(e),
-		organizations: ta(e),
-		organizationConnections: na(e),
-		userOrganizations: la(e),
-		stats: ba(e),
-		analytics: ja(e),
-		outbox: Ya(e),
+		organizations: na(e),
+		organizationConnections: ra(e),
+		userOrganizations: ua(e),
+		stats: xa(e),
+		analytics: Ma(e),
+		outbox: Xa(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(As(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(Ns(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -6602,4 +6620,4 @@ function As(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { to as createProxyDataAdapter, J as createProxyRoutesAdapter, As as default, ks as migrateDown, Os as migrateToLatest };
+export { no as createProxyDataAdapter, J as createProxyRoutesAdapter, Ns as default, Ms as migrateDown, js as migrateToLatest };