@authhero/kysely-adapter 12.7.0 → 12.8.1

package/dist/kysely-adapter.mjs

@@ -91,14 +91,14 @@ function Le(e) {
 }
 //#endregion
 //#region src/actions/get.ts
-function Re(e) {
+function D(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function ze(e) {
+function Re(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("actions").where("actions.tenant_id", "=", t).where("actions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -113,9 +113,9 @@ function ze(e) {
 			runtime: m.runtime ?? void 0,
 			status: m.status || "built",
 			deployed_at: s ? new Date(Number(s)).toISOString() : void 0,
-			secrets: Re(c),
-			dependencies: Re(l),
-			supported_triggers: Re(u),
+			secrets: D(c),
+			dependencies: D(l),
+			supported_triggers: D(u),
 			is_system: !!d,
 			inherit: !!f
 		};
@@ -123,16 +123,16 @@ function ze(e) {
 }
 //#endregion
 //#region src/helpers/filter.ts
-function Be(e) {
+function ze(e) {
 	return f`coalesce(${f.ref(e.column)}, ${f.lit(e.defaultValue)})`;
 }
-function D(e, t, n, r, i = [], a = {}) {
+function O(e, t, n, r, i = [], a = {}) {
 	let o = new Set(i), { ref: s } = e.dynamic, c = (e) => {
 		let t = a[e];
 		return t === void 0 ? e : typeof t == "string" ? t : t.column;
 	}, l = (e) => {
 		let t = a[e];
-		return t === void 0 || typeof t == "string" ? s(t ?? e) : Be(t);
+		return t === void 0 || typeof t == "string" ? s(t ?? e) : ze(t);
 	}, u = (e, t) => {
 		let n = a[e];
 		if (n === void 0 || typeof n == "string") return t;
@@ -199,17 +199,17 @@ function D(e, t, n, r, i = [], a = {}) {
 }
 //#endregion
 //#region src/actions/list.ts
-function Ve(e) {
+function k(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function He(e) {
+function Be(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, q: c } = n, l = e.selectFrom("actions").where("actions.tenant_id", "=", t);
-		c && (l = D(e, l, c, ["name"]));
+		c && (l = O(e, l, c, ["name"]));
 		let u = (await l.offset(i * a).limit(a).selectAll().execute()).map((e) => {
 			let { created_at_ts: n, updated_at_ts: i, deployed_at_ts: a, secrets: o, dependencies: s, supported_triggers: c, is_system: l, inherit: u, tenant_id: d, ...f } = e, p = r({
 				created_at_ts: n,
@@ -222,9 +222,9 @@ function He(e) {
 				runtime: f.runtime ?? void 0,
 				status: f.status || "built",
 				deployed_at: a ? new Date(Number(a)).toISOString() : void 0,
-				secrets: Ve(o),
-				dependencies: Ve(s),
-				supported_triggers: Ve(c),
+				secrets: k(o),
+				dependencies: k(s),
+				supported_triggers: k(c),
 				is_system: !!l,
 				inherit: !!u
 			};
@@ -246,7 +246,7 @@ function He(e) {
 }
 //#endregion
 //#region src/actions/update.ts
-function Ue(e) {
+function Ve(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -255,11 +255,11 @@ function Ue(e) {
 		return [];
 	}
 }
-function We(e) {
+function He(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		if (r.name !== void 0 && (i.name = r.name), r.code !== void 0 && (i.code = r.code), r.runtime !== void 0 && (i.runtime = r.runtime), r.secrets !== void 0) {
-			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Ue(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
+			let a = await e.selectFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).select("secrets").executeTakeFirst(), o = new Map(Ve(a?.secrets).map((e) => [e.name, e])), s = r.secrets.map((e) => e.value === void 0 ? {
 				name: e.name,
 				value: o.get(e.name)?.value
 			} : e);
@@ -274,23 +274,23 @@ function We(e) {
 }
 //#endregion
 //#region src/actions/remove.ts
-function Ge(e) {
+function Ue(e) {
 	return async (t, n) => (await e.deleteFrom("actions").where("actions.id", "=", n).where("actions.tenant_id", "=", t).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/actions/index.ts
-function Ke(e) {
+function We(e) {
 	return {
 		create: Le(e),
-		get: ze(e),
-		list: He(e),
-		update: We(e),
-		remove: Ge(e)
+		get: Re(e),
+		list: Be(e),
+		update: He(e),
+		remove: Ue(e)
 	};
 }
 //#endregion
 //#region src/actionExecutions/create.ts
-function qe(e) {
+function Ge(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("action_executions").values({
@@ -316,14 +316,14 @@ function qe(e) {
 }
 //#endregion
 //#region src/actionExecutions/get.ts
-function Je(e) {
+function Ke(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function Ye(e) {
+function qe(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("action_executions").where("action_executions.tenant_id", "=", t).where("action_executions.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -331,35 +331,37 @@ function Ye(e) {
 			tenant_id: r.tenant_id,
 			trigger_id: r.trigger_id,
 			status: r.status,
-			results: Je(r.results) ?? [],
-			logs: Je(r.logs),
+			results: Ke(r.results) ?? [],
+			logs: Ke(r.logs),
 			created_at: new Date(Number(r.created_at_ts)).toISOString(),
 			updated_at: new Date(Number(r.updated_at_ts)).toISOString()
 		} : null;
 	};
 }
 //#endregion
-//#region src/actionExecutions/cleanup.ts
-var Xe = 5e4;
-async function Ze(e) {
+//#region src/helpers/database-type.ts
+async function Je(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-function Qe(e) {
+//#endregion
+//#region src/actionExecutions/cleanup.ts
+var Ye = 5e4;
+function Xe(e) {
 	let t;
 	return async (n) => {
 		let r = Date.parse(n);
 		if (Number.isNaN(r)) throw Error(`Invalid olderThan date: ${n}`);
-		if (t ??= await Ze(e), t === "sqlite") {
+		if (t ??= await Je(e), t === "sqlite") {
 			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).executeTakeFirst();
 			return Number(t.numDeletedRows);
 		}
-		let i = 0, a = Xe;
-		for (; a >= Xe;) {
-			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).limit(Xe).executeTakeFirst();
+		let i = 0, a = Ye;
+		for (; a >= Ye;) {
+			let t = await e.deleteFrom("action_executions").where("created_at_ts", "<", r).limit(Ye).executeTakeFirst();
 			a = Number(t.numDeletedRows), i += a;
 		}
 		return i;
@@ -367,36 +369,36 @@ function Qe(e) {
 }
 //#endregion
 //#region src/actionExecutions/index.ts
-function $e(e) {
+function Ze(e) {
 	return {
-		create: qe(e),
-		get: Ye(e),
-		cleanup: Qe(e)
+		create: Ge(e),
+		get: qe(e),
+		cleanup: Xe(e)
 	};
 }
 //#endregion
 //#region src/actionVersions/index.ts
-function et(e) {
+function Qe(e) {
 	if (e) try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
 }
-function tt(e) {
+function $e(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, dependencies: i, supported_triggers: a, deployed: o, runtime: s, ...c } = e;
 	return {
 		...c,
 		runtime: s ?? void 0,
 		deployed: !!o,
-		secrets: et(r),
-		dependencies: et(i),
-		supported_triggers: et(a),
+		secrets: Qe(r),
+		dependencies: Qe(i),
+		supported_triggers: Qe(a),
 		created_at: new Date(Number(t)).toISOString(),
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function nt(e) {
+function et(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : i ? o : a, c = i?.id ?? Me(), l = n.deployed !== !1, u = await e.transaction().execute(async (e) => {
@@ -436,10 +438,10 @@ function nt(e) {
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n).where("id", "=", r).selectAll().executeTakeFirst();
-			return i ? tt(i) : null;
+			return i ? $e(i) : null;
 		},
 		async list(t, n, r = {}) {
-			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map(tt);
+			let { page: i = 0, per_page: a = 50, include_totals: s = !1 } = r, c = e.selectFrom("action_versions").where("tenant_id", "=", t).where("action_id", "=", n), l = (await c.orderBy("number", "desc").offset(i * a).limit(a).selectAll().execute()).map($e);
 			if (!s) return {
 				versions: l,
 				start: 0,
@@ -462,7 +464,7 @@ function nt(e) {
 }
 //#endregion
 //#region src/outbox/create.ts
-async function O(e, t, n, r) {
+async function A(e, t, n, r) {
 	await e.insertInto("outbox_events").values({
 		id: n,
 		tenant_id: t,
@@ -481,15 +483,15 @@ async function O(e, t, n, r) {
 		error: null
 	}).execute();
 }
-function rt(e) {
+function tt(e) {
 	return async (n, r) => {
 		let i = t();
-		return await O(e, n, i, r), i;
+		return await A(e, n, i, r), i;
 	};
 }
 //#endregion
 //#region src/users/create.ts
-function it(e) {
+function nt(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, { identities: o, phone_verified: s, password: c, last_login: l, last_ip: u, login_count: d, ...f } = r, p = (/* @__PURE__ */ new Date()).toISOString(), m = {
 			...f,
@@ -524,7 +526,7 @@ function it(e) {
 				};
 				await e.insertInto("passwords").values(r).execute();
 			}
-			for (let t of i?.outboxEvents ?? []) await O(e, n, t.id, t);
+			for (let t of i?.outboxEvents ?? []) await A(e, n, t.id, t);
 		};
 		try {
 			e.isTransaction ? await h(e) : await e.transaction().execute(h);
@@ -548,6 +550,70 @@ function it(e) {
 	};
 }
 //#endregion
+//#region src/users/createMany.ts
+var j = 500;
+function rt(e) {
+	let t = e;
+	return t.identities !== void 0 || t.last_login !== void 0 || t.last_ip !== void 0 || t.login_count !== void 0;
+}
+function it(e) {
+	return async (n, r, i) => {
+		if (r.length === 0) return [];
+		if (i?.outboxEvents?.length) throw new w(400, { message: "createMany does not persist outbox events; use create for those users" });
+		if (r.find(rt)) throw new w(400, { message: "createMany does not write identities or activity counters; use create for those users" });
+		let a = (/* @__PURE__ */ new Date()).toISOString(), o = r.map((e) => {
+			let { identities: r, phone_verified: i, password: o, last_login: s, last_ip: c, login_count: l, ...u } = e, d = {
+				...u,
+				created_at: u.created_at ?? a,
+				updated_at: u.updated_at ?? a,
+				user_id: u.user_id,
+				tenant_id: n,
+				email_verified: +!!e.email_verified,
+				phone_verified: i === void 0 ? null : +!!i,
+				is_social: +!!e.is_social,
+				blocked: +!!e.blocked,
+				app_metadata: JSON.stringify(e.app_metadata),
+				user_metadata: JSON.stringify(e.user_metadata),
+				address: e.address ? JSON.stringify(e.address) : null
+			};
+			return {
+				sqlUser: d,
+				passwordRecord: o && d.user_id ? {
+					id: t(),
+					user_id: d.user_id,
+					password: o.hash,
+					algorithm: o.algorithm,
+					is_current: 1,
+					created_at: a,
+					updated_at: a,
+					tenant_id: n
+				} : void 0,
+				original: e
+			};
+		}), s = o.map((e) => e.sqlUser), c = o.map((e) => e.passwordRecord).filter((e) => e !== void 0), l = async (e) => {
+			for (let t = 0; t < s.length; t += j) await e.insertInto("users").values(s.slice(t, t + j)).execute();
+			for (let t = 0; t < c.length; t += j) await e.insertInto("passwords").values(c.slice(t, t + j)).execute();
+		};
+		try {
+			e.isTransaction ? await l(e) : await e.transaction().execute(l);
+		} catch (e) {
+			let t = e?.code, n = e instanceof Error ? e.message : String(e);
+			throw t === "SQLITE_CONSTRAINT_UNIQUE" || t === "ER_DUP_ENTRY" || n.includes("AlreadyExists") ? new w(409, { message: "User already exists" }) : new w(500, { message: `${String(t)}, ${n}` });
+		}
+		return o.map(({ sqlUser: e, original: t }) => ({
+			...e,
+			login_count: 0,
+			email_verified: !!e.email_verified,
+			is_social: !!e.is_social,
+			blocked: !!e.blocked,
+			phone_verified: e.phone_verified === null ? void 0 : !!e.phone_verified,
+			app_metadata: t.app_metadata,
+			user_metadata: t.user_metadata,
+			address: t.address
+		}));
+	};
+}
+//#endregion
 //#region src/users/user-to-identity.ts
 var at = [
 	"email",
@@ -556,7 +622,7 @@ var at = [
 	"phone_verified",
 	"username"
 ];
-function k(e, t = !1) {
+function M(e, t = !1) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
@@ -603,20 +669,20 @@ function ot(e) {
 			app_metadata: JSON.parse(r.app_metadata),
 			user_metadata: JSON.parse(r.user_metadata),
 			address: r.address ? JSON.parse(r.address) : void 0,
-			identities: [k(r, !0), ...i.map((e) => k(e))]
+			identities: [M(r, !0), ...i.map((e) => M(e))]
 		});
 	};
 }
 //#endregion
 //#region src/helpers/paginate.ts
-function A(e) {
+function N(e) {
 	return e?.from !== void 0 || e?.take !== void 0;
 }
 function st(e, t) {
 	let n = typeof e == "number" && Number.isFinite(e) ? Math.floor(e) : NaN;
 	return n >= 1 ? n : t;
 }
-async function j(e, t, n) {
+async function P(e, t, n) {
 	let { sortColumn: r, sortOrder: i } = n, a = n.idColumn ?? "id", o = st(t?.take, 50), s = e.orderBy(f.ref(r), i).orderBy(f.ref(a), i), c = t?.from ? te(t.from) : null;
 	if (c && c.k !== n.sortKey) throw new w(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
 	if (c) if (c.s === void 0 || c.s === null) s = s.where(f.ref(a), i === "asc" ? ">" : "<", c.i);
@@ -691,7 +757,7 @@ async function ft(e, t, n) {
 			app_metadata: JSON.parse(e.app_metadata),
 			user_metadata: JSON.parse(e.user_metadata),
 			address: e.address ? JSON.parse(e.address) : void 0,
-			identities: [k(e, !0), ...t.map((e) => k(e))]
+			identities: [M(e, !0), ...t.map((e) => M(e))]
 		});
 	});
 }
@@ -700,11 +766,11 @@ function pt(e) {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("users").leftJoin("user_activity", (e) => e.onRef("user_activity.tenant_id", "=", "users.tenant_id").onRef("user_activity.user_id", "=", "users.user_id")).where("users.tenant_id", "=", t);
 		if (c) {
 			let t = S(c, ct);
-			t && (l = D(e, l, t, dt, [], ut));
+			t && (l = O(e, l, t, dt, [], ut));
 		}
-		if (A(n)) {
+		if (N(n)) {
 			if (s?.sort_by && s.sort_by !== "created_at") throw new w(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
-			let r = s?.sort_order === "asc" ? "asc" : "desc", { rows: i, limit: a, next: o } = await j(l.where("users.linked_to", "is", null).selectAll("users").select([
+			let r = s?.sort_order === "asc" ? "asc" : "desc", { rows: i, limit: a, next: o } = await P(l.where("users.linked_to", "is", null).selectAll("users").select([
 				"user_activity.last_login",
 				"user_activity.last_ip",
 				"user_activity.login_count"
@@ -726,7 +792,7 @@ function pt(e) {
 			let t = ut[s.sort_by];
 			if (t) {
 				let { ref: n } = e.dynamic;
-				l = l.orderBy(typeof t == "string" ? n(t) : Be(t), s.sort_order);
+				l = l.orderBy(typeof t == "string" ? n(t) : ze(t), s.sort_order);
 			}
 		}
 		let u = l.offset(r * i).limit(i), [d, f] = await Promise.all([u.selectAll("users").select([
@@ -756,7 +822,7 @@ function mt(e) {
 		let i = async (e) => {
 			await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "in", (e) => e.selectFrom("users").select("users.user_id").where("users.tenant_id", "=", t).where((e) => e.or([e("users.user_id", "=", n), e("users.linked_to", "=", n)]))).execute(), await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.linked_to", "=", n).execute();
 			let i = await e.deleteFrom("users").where("users.tenant_id", "=", t).where("users.user_id", "=", n).execute();
-			for (let n of r?.outboxEvents ?? []) await O(e, t, n.id, n);
+			for (let n of r?.outboxEvents ?? []) await A(e, t, n.id, n);
 			return i.length === 1;
 		};
 		return r?.outboxEvents?.length && !e.isTransaction ? e.transaction().execute(i) : i(e);
@@ -764,10 +830,10 @@ function mt(e) {
 }
 //#endregion
 //#region src/utils/flatten.ts
-function M(e, t = "", n = {}) {
+function F(e, t = "", n = {}) {
 	for (let r in e) if (Object.prototype.hasOwnProperty.call(e, r)) {
 		let i = t ? `${t}_${r}` : r, a = e[r];
-		typeof a == "object" && a && !Array.isArray(a) ? M(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
+		typeof a == "object" && a && !Array.isArray(a) ? F(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
 	}
 	return n;
 }
@@ -833,7 +899,7 @@ function vt(e) {
 //#region src/users/update.ts
 function yt(e) {
 	return async (t, n, r, i) => {
-		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = M({
+		let { last_login: a, last_ip: o, login_count: s, ...c } = r, l = F({
 			...c,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString(),
 			app_metadata: r.app_metadata ? JSON.stringify(r.app_metadata) : void 0,
@@ -849,7 +915,7 @@ function yt(e) {
 				last_ip: o,
 				login_count: s
 			});
-			for (let n of i?.outboxEvents ?? []) await O(e, t, n.id, n);
+			for (let n of i?.outboxEvents ?? []) await A(e, t, n.id, n);
 			return !0;
 		};
 		return e.isTransaction ? u(e) : e.transaction().execute(u);
@@ -863,10 +929,11 @@ function bt(e) {
 //#endregion
 //#region src/users/index.ts
 function xt(e) {
-	let t = it(e);
+	let t = nt(e);
 	return {
 		create: t,
 		rawCreate: t,
+		createMany: it(e),
 		remove: mt(e),
 		get: ot(e),
 		list: pt(e),
@@ -894,7 +961,7 @@ function St(e) {
 }
 //#endregion
 //#region src/helpers/parse.ts
-function N(e, t) {
+function I(e, t) {
 	if (!e) return t;
 	try {
 		return JSON.parse(e);
@@ -911,7 +978,7 @@ function Ct(e) {
 	}
 }
 function wt(e, t, n = { ...e }) {
-	for (let r in t) r in e && (n[r] = N(e[r], t[r]));
+	for (let r in t) r in e && (n[r] = I(e[r], t[r]));
 	return n;
 }
 //#endregion
@@ -922,7 +989,7 @@ function Tt(e) {
 		if (!r) return null;
 		let i = {
 			...r,
-			actions: N(r.actions, [])
+			actions: I(r.actions, [])
 		};
 		return b.parse(l(i));
 	};
@@ -932,11 +999,11 @@ function Tt(e) {
 function Et(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("flows").where("tenant_id", "=", t);
-		s && (c = D(e, c, s, []));
+		s && (c = O(e, c, s, []));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let t = {
 				...e,
-				actions: N(e.actions, [])
+				actions: I(e.actions, [])
 			};
 			return b.parse(l(t));
 		});
@@ -1052,7 +1119,7 @@ function Pt(e) {
 			let { ref: t } = e.dynamic;
 			n = n.orderBy(t(s.sort_by), s.sort_order);
 		}
-		c && (n = D(e, n, c, ["friendly_name"]));
+		c && (n = O(e, n, c, ["friendly_name"]));
 		let l = (await n.offset(r * i).limit(i).selectAll().execute()).map(At);
 		if (!a) return { tenants: l };
 		let { count: u } = await n.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow(), d = o(u);
@@ -1134,7 +1201,7 @@ function Vt(e) {
 		return e;
 	}
 }
-function P(e) {
+function L(e) {
 	return {
 		...e,
 		client_id: e.client_id,
@@ -1187,20 +1254,20 @@ function Ut(e) {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, from_date: l, to_date: u } = n, d = e.selectFrom("logs").where("logs.tenant_id", "=", t);
 		if (c) {
 			let t = S(c, Ht);
-			t && (d = D(e, d, t, [
+			t && (d = O(e, d, t, [
 				"user_id",
 				"ip",
 				"description"
 			], ["description"]));
 		}
-		if (typeof l == "number" && Number.isFinite(l) && (d = d.where("logs.date", ">=", (/* @__PURE__ */ new Date(Math.floor(l) * 1e3)).toISOString())), typeof u == "number" && Number.isFinite(u) && (d = d.where("logs.date", "<=", (/* @__PURE__ */ new Date(Math.floor(u) * 1e3 + 999)).toISOString())), A(n)) {
+		if (typeof l == "number" && Number.isFinite(l) && (d = d.where("logs.date", ">=", (/* @__PURE__ */ new Date(Math.floor(l) * 1e3)).toISOString())), typeof u == "number" && Number.isFinite(u) && (d = d.where("logs.date", "<=", (/* @__PURE__ */ new Date(Math.floor(u) * 1e3 + 999)).toISOString())), N(n)) {
 			if (s?.sort_by && s.sort_by !== "date") throw new w(400, { message: `Sorting by ${s.sort_by} is not supported with checkpoint pagination (from/take); only date is` });
-			let e = s?.sort_order === "asc" ? "asc" : "desc", { rows: t, limit: r, next: i } = await j(d.selectAll(), n, {
+			let e = s?.sort_order === "asc" ? "asc" : "desc", { rows: t, limit: r, next: i } = await P(d.selectAll(), n, {
 				sortColumn: "date",
 				sortOrder: e,
 				idColumn: "log_id",
 				sortKey: `date:${e}`
-			}), a = t.map(P);
+			}), a = t.map(L);
 			return {
 				logs: a,
 				start: 0,
@@ -1215,7 +1282,7 @@ function Ut(e) {
 			f = f.orderBy(t(s.sort_by), s.sort_order);
 		}
 		f = f.offset(r * i).limit(i);
-		let p = (await f.selectAll().execute()).map(P);
+		let p = (await f.selectAll().execute()).map(L);
 		if (!a) return {
 			logs: p,
 			start: 0,
@@ -1236,7 +1303,7 @@ function Ut(e) {
 function Wt(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("logs").where("logs.tenant_id", "=", t).where("logs.log_id", "=", n).selectAll().executeTakeFirst();
-		return r ? P(r) : null;
+		return r ? L(r) : null;
 	};
 }
 //#endregion
@@ -1345,7 +1412,7 @@ function Yt(e) {
 function Xt(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: l } = n, u = e.selectFrom("sessions").where("sessions.tenant_id", "=", t);
-		l && (u = D(e, u, l, ["user_id", "session_id"]));
+		l && (u = O(e, u, l, ["user_id", "session_id"]));
 		let d = u;
 		if (c && c.sort_by) {
 			let { ref: t } = e.dynamic;
@@ -1476,7 +1543,7 @@ function nn(e) {
 function rn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("codes").where("codes.tenant_id", "=", t);
-		s && (c = D(e, c, s, ["code", "login_id"]));
+		s && (c = O(e, c, s, ["code", "login_id"]));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let { tenant_id: t, ...n } = e;
 			return ee.parse(l(n));
@@ -1544,15 +1611,34 @@ function un(e) {
 }
 //#endregion
 //#region src/codes/cleanup.ts
-function dn(e) {
-	return async (t) => {
-		let n = await e.deleteFrom("codes").where("expires_at_ts", "<", an(t)).executeTakeFirst(), r = await e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", t).executeTakeFirst();
-		return Number(n.numDeletedRows) + Number(r.numDeletedRows);
+var R = 5e4;
+async function dn(e, t) {
+	if (!t) return e();
+	let n = 0, r = R;
+	for (; r >= R;) r = await e(R), n += r;
+	return n;
+}
+function fn(e) {
+	let t;
+	return async (n) => {
+		t ??= await Je(e);
+		let r = t === "mysql";
+		return await dn(async (t) => {
+			let r = e.deleteFrom("codes").where("expires_at_ts", "<", an(n));
+			t !== void 0 && (r = r.limit(t));
+			let i = await r.executeTakeFirst();
+			return Number(i.numDeletedRows);
+		}, r) + await dn(async (t) => {
+			let r = e.deleteFrom("codes").where("expires_at_ts", "is", null).where("expires_at", "<", n);
+			t !== void 0 && (r = r.limit(t));
+			let i = await r.executeTakeFirst();
+			return Number(i.numDeletedRows);
+		}, r);
 	};
 }
 //#endregion
 //#region src/codes/index.ts
-function fn(e) {
+function pn(e) {
 	return {
 		create: on(e),
 		list: rn(e),
@@ -1560,12 +1646,12 @@ function fn(e) {
 		used: ln(e),
 		consume: un(e),
 		get: cn(e),
-		cleanup: dn(e)
+		cleanup: fn(e)
 	};
 }
 //#endregion
 //#region src/connections/create.ts
-function pn(e) {
+function mn(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, { is_system: a, ...o } = n;
 		delete o.enabled_clients;
@@ -1586,7 +1672,7 @@ function pn(e) {
 }
 //#endregion
 //#region src/connections/transform.ts
-function F(e) {
+function z(e) {
 	let { is_system: t, ...n } = e;
 	return l({
 		...n,
@@ -1594,16 +1680,29 @@ function F(e) {
 		options: typeof e.options == "string" ? JSON.parse(e.options) : {}
 	});
 }
-function mn(e) {
-	return e.map(F);
+function hn(e) {
+	return e.map(z);
 }
 //#endregion
 //#region src/connections/list.ts
-function hn(e) {
+function gn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("connections").where("connections.tenant_id", "=", t);
-		s && (c = D(e, c, s, ["user_id", "ip"]));
-		let l = mn(await c.offset(r * i).limit(i).selectAll().execute());
+		if (s && (c = O(e, c, s, ["user_id", "ip"])), N(n)) {
+			let { rows: e, limit: t, next: r } = await P(c.selectAll(), n, {
+				sortColumn: "created_at",
+				sortOrder: "desc",
+				idColumn: "id"
+			}), i = hn(e);
+			return {
+				connections: i,
+				start: 0,
+				limit: t,
+				length: i.length,
+				next: r
+			};
+		}
+		let l = hn(await c.offset(r * i).limit(i).selectAll().execute());
 		if (!a) return {
 			connections: l,
 			start: 0,
@@ -1621,20 +1720,20 @@ function hn(e) {
 }
 //#endregion
 //#region src/connections/remove.ts
-function gn(e) {
+function _n(e) {
 	return async (t, n) => (await e.deleteFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/connections/get.ts
-function _n(e) {
+function vn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "=", n).selectAll().executeTakeFirst();
-		return r ? F(r) : null;
+		return r ? z(r) : null;
 	};
 }
 //#endregion
 //#region src/connections/update.ts
-function vn(e) {
+function yn(e) {
 	return async (t, n, r) => {
 		let { is_system: i, ...a } = r;
 		delete a.enabled_clients;
@@ -1651,18 +1750,18 @@ function vn(e) {
 }
 //#endregion
 //#region src/connections/index.ts
-function yn(e) {
+function bn(e) {
 	return {
-		create: pn(e),
-		get: _n(e),
-		list: hn(e),
-		remove: gn(e),
-		update: vn(e)
+		create: mn(e),
+		get: vn(e),
+		list: gn(e),
+		remove: _n(e),
+		update: yn(e)
 	};
 }
 //#endregion
 //#region src/clients/create.ts
-function bn(e) {
+function xn(e) {
 	return async (r, i, a) => {
 		let o = a?.importMetadata, s = o?.id ?? i.client_id ?? t(), c = (/* @__PURE__ */ new Date()).toISOString(), l = {
 			...i,
@@ -1727,7 +1826,7 @@ function bn(e) {
 }
 //#endregion
 //#region src/clients/get.ts
-function xn(e) {
+function Sn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).selectAll().executeTakeFirst();
 		if (!r) return null;
@@ -1773,7 +1872,7 @@ function xn(e) {
 }
 //#endregion
 //#region src/clients/getByClientId.ts
-function Sn(e) {
+function Cn(e) {
 	return async (t) => {
 		let n = await e.selectFrom("clients").where("clients.client_id", "=", t).selectAll().executeTakeFirst();
 		return n ? l({
@@ -1817,7 +1916,7 @@ function Sn(e) {
 }
 //#endregion
 //#region src/clients/list.ts
-function Cn(e) {
+function wn(e) {
 	return l({
 		...e,
 		global: !!e.global,
@@ -1856,7 +1955,7 @@ function Cn(e) {
 		registration_metadata: e.registration_metadata ? JSON.parse(e.registration_metadata) : void 0
 	});
 }
-function wn(e) {
+function Tn(e) {
 	let t = Ce(e);
 	if (t.length !== 1) return null;
 	let n = t[0].match(/^([a-zA-Z_][a-zA-Z0-9_]*):(.+)$/);
@@ -1867,22 +1966,22 @@ function wn(e) {
 		value: r
 	} : null;
 }
-function Tn(e) {
+function En(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("clients").where("clients.tenant_id", "=", t), i = new Set(["owner_user_id", "registration_type"]);
 		if (n?.q) {
-			let e = wn(n.q);
+			let e = Tn(n.q);
 			if (e && i.has(e.field)) {
 				let t = e.field;
 				r = r.where(t, "=", e.value);
 			} else r = r.where((e) => e.or([e("name", "like", `%${n.q}%`), e("client_id", "like", `%${n.q}%`)]));
 		}
-		if (A(n)) {
-			let { rows: e, limit: t, next: i } = await j(r.selectAll(), n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: i } = await P(r.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc",
 				idColumn: "client_id"
-			}), a = e.map(Cn);
+			}), a = e.map(wn);
 			return {
 				clients: a,
 				totals: {
@@ -1906,7 +2005,7 @@ function Tn(e) {
 		if (n?.include_totals) {
 			let r = e.selectFrom("clients").select(f`count(*)`.as("count")).where("clients.tenant_id", "=", t);
 			if (n?.q) {
-				let e = wn(n.q);
+				let e = Tn(n.q);
 				if (e && i.has(e.field)) {
 					let t = e.field;
 					r = r.where(t, "=", e.value);
@@ -1915,7 +2014,7 @@ function Tn(e) {
 			let a = await r.executeTakeFirst();
 			c = Number(a?.count || 0);
 		}
-		let l = s.map(Cn);
+		let l = s.map(wn);
 		return {
 			clients: l,
 			totals: {
@@ -1929,12 +2028,12 @@ function Tn(e) {
 }
 //#endregion
 //#region src/clients/remove.ts
-function En(e) {
+function Dn(e) {
 	return async (t, n) => (await e.deleteFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clients/update.ts
-function Dn(e) {
+function On(e) {
 	return async (t, r, i) => {
 		let a = {
 			...i,
@@ -1981,31 +2080,31 @@ function Dn(e) {
 }
 //#endregion
 //#region src/clients/index.ts
-function On(e) {
+function kn(e) {
 	return {
-		create: bn(e),
-		get: xn(e),
-		getByClientId: Sn(e),
-		list: Tn(e),
-		remove: En(e),
-		update: Dn(e)
+		create: xn(e),
+		get: Sn(e),
+		getByClientId: Cn(e),
+		list: En(e),
+		remove: Dn(e),
+		update: On(e)
 	};
 }
 //#endregion
 //#region src/clientConnections/listByClient.ts
-function kn(e) {
+function An(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", n).select("connections").executeTakeFirst();
 		if (!r) return [];
 		let i = JSON.parse(r.connections || "[]");
 		if (i.length === 0) return [];
-		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, F(e)]));
+		let a = await e.selectFrom("connections").where("connections.tenant_id", "=", t).where("connections.id", "in", i).selectAll().execute(), o = new Map(a.map((e) => [e.id, z(e)]));
 		return i.map((e) => o.get(e)).filter((e) => e !== void 0);
 	};
 }
 //#endregion
 //#region src/clientConnections/updateByClient.ts
-function An(e) {
+function jn(e) {
 	return async (t, n, r) => (await e.updateTable("clients").set({
 		connections: JSON.stringify(r),
 		updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -2013,7 +2112,7 @@ function An(e) {
 }
 //#endregion
 //#region src/clientConnections/listByConnection.ts
-function jn(e) {
+function Mn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("clients").where("clients.tenant_id", "=", t).select(["client_id", "connections"]).execute(), i = [];
 		for (let e of r) JSON.parse(e.connections || "[]").includes(n) && i.push(e.client_id);
@@ -2022,7 +2121,7 @@ function jn(e) {
 }
 //#endregion
 //#region src/clientConnections/addClientToConnection.ts
-function Mn(e) {
+function Nn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2035,7 +2134,7 @@ function Mn(e) {
 }
 //#endregion
 //#region src/clientConnections/removeClientFromConnection.ts
-function Nn(e) {
+function Pn(e) {
 	return async (t, n, r) => {
 		let i = await e.selectFrom("clients").where("clients.tenant_id", "=", t).where("clients.client_id", "=", r).select("connections").executeTakeFirst();
 		if (!i) return !1;
@@ -2048,18 +2147,18 @@ function Nn(e) {
 }
 //#endregion
 //#region src/clientConnections/index.ts
-function Pn(e) {
+function Fn(e) {
 	return {
-		listByClient: kn(e),
-		updateByClient: An(e),
-		listByConnection: jn(e),
-		addClientToConnection: Mn(e),
-		removeClientFromConnection: Nn(e)
+		listByClient: An(e),
+		updateByClient: jn(e),
+		listByConnection: Mn(e),
+		addClientToConnection: Nn(e),
+		removeClientFromConnection: Pn(e)
 	};
 }
 //#endregion
 //#region src/clientGrants/create.ts
-function Fn(e) {
+function In(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? t(), c = a?.created_at ?? o, u = a?.updated_at ?? a?.created_at ?? o, { scope: d, authorization_details_types: f, ...p } = r, m = {
 			id: s,
@@ -2087,7 +2186,7 @@ function Fn(e) {
 }
 //#endregion
 //#region src/clientGrants/get.ts
-function In(e) {
+function Ln(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_grants").selectAll().where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -2107,7 +2206,7 @@ function In(e) {
 }
 //#endregion
 //#region src/clientGrants/list.ts
-function Ln(e) {
+function Rn(e) {
 	return v.parse(l({
 		...e,
 		scope: e.scope ? JSON.parse(e.scope) : [],
@@ -2116,7 +2215,7 @@ function Ln(e) {
 		authorization_details_types: e.authorization_details_types ? JSON.parse(e.authorization_details_types) : []
 	}));
 }
-function Rn(e) {
+function zn(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s, sort: c } = n, l = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
 		if (s) {
@@ -2127,13 +2226,13 @@ function Rn(e) {
 					let e = +(a === "true");
 					l = l.where(o, t ? "!=" : "=", e);
 				} else l = l.where(o, t ? "!=" : "=", a);
-			} else l = D(e, l, t, []);
+			} else l = O(e, l, t, []);
 		}
-		if (A(n)) {
-			let { rows: e, limit: t, next: r } = await j(l.selectAll(), n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: r } = await P(l.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
-			}), i = e.map(Ln);
+			}), i = e.map(Rn);
 			return {
 				client_grants: i,
 				start: 0,
@@ -2146,8 +2245,8 @@ function Rn(e) {
 		if (c) {
 			let { ref: t } = e.dynamic;
 			u = u.orderBy(t(c.sort_by), c.sort_order);
-		} else u = u.orderBy("client_grants.created_at", "desc");
-		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(Ln);
+		} else u = u.orderBy("client_grants.created_at", "desc").orderBy("client_grants.id", "desc");
+		let d = (await u.selectAll().limit(i).offset(r * i).execute()).map(Rn);
 		if (!a) return {
 			client_grants: d,
 			start: 0,
@@ -2165,12 +2264,12 @@ function Rn(e) {
 }
 //#endregion
 //#region src/clientGrants/remove.ts
-function zn(e) {
+function Bn(e) {
 	return async (t, n) => ((await e.deleteFrom("client_grants").where("client_grants.tenant_id", "=", t).where("client_grants.id", "=", n).executeTakeFirst()).numDeletedRows ?? 0n) > 0n;
 }
 //#endregion
 //#region src/clientGrants/update.ts
-function Bn(e) {
+function Vn(e) {
 	return async (t, n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), { scope: a, authorization_details_types: o, ...s } = r, c = {
 			...s,
@@ -2181,18 +2280,18 @@ function Bn(e) {
 }
 //#endregion
 //#region src/clientGrants/index.ts
-function Vn(e) {
+function Hn(e) {
 	return {
-		create: Fn(e),
-		get: In(e),
-		list: Rn(e),
-		remove: zn(e),
-		update: Bn(e)
+		create: In(e),
+		get: Ln(e),
+		list: zn(e),
+		remove: Bn(e),
+		update: Vn(e)
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/create.ts
-function Hn(e) {
+function Un(e) {
 	return async (t, n) => {
 		let r = Date.now();
 		return await e.insertInto("client_registration_tokens").values({
@@ -2223,12 +2322,12 @@ function Hn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/row-mapper.ts
-function Un(e) {
+function Wn(e) {
 	let t = y.safeParse(e);
 	if (!t.success) throw Error(`Unknown client_registration_tokens.type: ${e}`);
 	return t.data;
 }
-function Wn(e) {
+function Gn(e) {
 	if (!e) return;
 	let t;
 	try {
@@ -2238,14 +2337,14 @@ function Wn(e) {
 	}
 	return oe(t) ? t : void 0;
 }
-function I(e) {
+function B(e) {
 	return {
 		id: e.id,
 		token_hash: e.token_hash,
-		type: Un(e.type),
+		type: Wn(e.type),
 		client_id: e.client_id ?? void 0,
 		sub: e.sub ?? void 0,
-		constraints: Wn(e.constraints),
+		constraints: Gn(e.constraints),
 		single_use: !!e.single_use,
 		expires_at: i(e.expires_at_ts),
 		used_at: i(e.used_at_ts),
@@ -2255,38 +2354,38 @@ function I(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/get.ts
-function Gn(e) {
+function Kn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-		return r ? I(r) : null;
+		return r ? B(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/getByHash.ts
-function Kn(e) {
+function qn(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-		return r ? I(r) : null;
+		return r ? B(r) : null;
 	};
 }
 //#endregion
 //#region src/clientRegistrationTokens/listByClient.ts
-function qn(e) {
-	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(I);
+function Jn(e) {
+	return async (t, n) => (await e.selectFrom("client_registration_tokens").where("tenant_id", "=", t).where("client_id", "=", n).orderBy("created_at_ts", "desc").selectAll().execute()).map(B);
 }
 //#endregion
 //#region src/clientRegistrationTokens/markUsed.ts
-function Jn(e) {
+function Yn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ used_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("used_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revoke.ts
-function Yn(e) {
+function Xn(e) {
 	return async (t, n, r) => (await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst()).numUpdatedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/revokeByClient.ts
-function Xn(e) {
+function Zn(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("client_registration_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("client_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows);
@@ -2294,29 +2393,29 @@ function Xn(e) {
 }
 //#endregion
 //#region src/clientRegistrationTokens/remove.ts
-function Zn(e) {
+function Qn(e) {
 	return async (t, n) => (await e.deleteFrom("client_registration_tokens").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/clientRegistrationTokens/index.ts
-function Qn(e) {
+function $n(e) {
 	return {
-		create: Hn(e),
-		get: Gn(e),
-		getByHash: Kn(e),
-		listByClient: qn(e),
-		markUsed: Jn(e),
-		revoke: Yn(e),
-		revokeByClient: Xn(e),
-		remove: Zn(e)
+		create: Un(e),
+		get: Kn(e),
+		getByHash: qn(e),
+		listByClient: Jn(e),
+		markUsed: Yn(e),
+		revoke: Xn(e),
+		revokeByClient: Zn(e),
+		remove: Qn(e)
 	};
 }
 //#endregion
 //#region src/keys/list.ts
-function $n(e) {
+function er(e) {
 	return async (t = {}) => {
 		let { page: n = 0, per_page: r = 100, include_totals: i = !1, sort: a, q: s } = t, c = e.selectFrom("keys").where((e) => e.or([e("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()), e("revoked_at", "is", null)]));
-		s && (c = D(e, c, s, [
+		s && (c = O(e, c, s, [
 			"kid",
 			"tenant_id",
 			"connection",
@@ -2342,7 +2441,7 @@ function $n(e) {
 }
 //#endregion
 //#region src/keys/create.ts
-function er(e) {
+function tr(e) {
 	return async (t, n) => {
 		let r = n?.importMetadata;
 		await e.insertInto("keys").values({
@@ -2354,21 +2453,21 @@ function er(e) {
 }
 //#endregion
 //#region src/keys/update.ts
-function tr(e) {
+function nr(e) {
 	return async (t, n) => !!(await e.updateTable("keys").set(n).where("kid", "=", t).execute()).length;
 }
 //#endregion
 //#region src/keys/index.ts
-function nr(e) {
+function rr(e) {
 	return {
-		create: er(e),
-		list: $n(e),
-		update: tr(e)
+		create: tr(e),
+		list: er(e),
+		update: nr(e)
 	};
 }
 //#endregion
 //#region src/customDomains/create.ts
-function rr(e) {
+function ir(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			status: "pending",
@@ -2389,35 +2488,35 @@ function rr(e) {
 }
 //#endregion
 //#region src/customDomains/list.ts
-function ir(e) {
+function ar(e) {
 	return async (t) => (await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).selectAll().execute()).map((e) => ({
 		...e,
 		primary: e.primary === 1,
-		domain_metadata: N(e.domain_metadata, void 0),
-		verification: N(e.verification, void 0)
+		domain_metadata: I(e.domain_metadata, void 0),
+		verification: I(e.verification, void 0)
 	}));
 }
 //#endregion
 //#region src/customDomains/remove.ts
-function ar(e) {
+function or(e) {
 	return async (t, n) => (await e.deleteFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/customDomains/get.ts
-function or(e) {
+function sr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("custom_domains").where("custom_domains.tenant_id", "=", t).where("custom_domains.custom_domain_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
 			...r,
 			primary: r.primary === 1,
-			domain_metadata: N(r.domain_metadata, void 0),
-			verification: N(r.verification, void 0)
+			domain_metadata: I(r.domain_metadata, void 0),
+			verification: I(r.verification, void 0)
 		} : null;
 	};
 }
 //#endregion
 //#region src/customDomains/update.ts
-function sr(e) {
+function cr(e) {
 	return async (t, n, r) => {
 		let { verification: i, domain_metadata: a, primary: o, ...s } = r, c = {
 			...s,
@@ -2431,32 +2530,32 @@ function sr(e) {
 }
 //#endregion
 //#region src/customDomains/getByDomain.ts
-function cr(e) {
+function lr(e) {
 	return async (t) => {
 		let n = await e.selectFrom("custom_domains").where("custom_domains.domain", "=", t).selectAll().executeTakeFirst();
 		return n ? {
 			...n,
 			primary: n.primary === 1,
-			domain_metadata: N(n.domain_metadata, void 0),
-			verification: N(n.verification, void 0)
+			domain_metadata: I(n.domain_metadata, void 0),
+			verification: I(n.verification, void 0)
 		} : null;
 	};
 }
 //#endregion
 //#region src/customDomains/index.ts
-function lr(e) {
+function ur(e) {
 	return {
-		create: rr(e),
-		get: or(e),
-		getByDomain: cr(e),
-		list: ir(e),
-		remove: ar(e),
-		update: sr(e)
+		create: ir(e),
+		get: sr(e),
+		getByDomain: lr(e),
+		list: ar(e),
+		remove: or(e),
+		update: cr(e)
 	};
 }
 //#endregion
 //#region src/branding/get.ts
-function ur(e) {
+function dr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("branding").where("branding.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2478,7 +2577,7 @@ function ur(e) {
 }
 //#endregion
 //#region src/branding/set.ts
-function dr(e) {
+function fr(e) {
 	return async (t, n) => {
 		let { colors: r, font: i, ...a } = n, o = r?.page_background, s = o && typeof o == "object" ? o : void 0;
 		try {
@@ -2507,15 +2606,15 @@ function dr(e) {
 }
 //#endregion
 //#region src/branding/index.ts
-function fr(e) {
+function pr(e) {
 	return {
-		get: ur(e),
-		set: dr(e)
+		get: dr(e),
+		set: fr(e)
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/get.ts
-function pr(e) {
+function mr(e) {
 	return async (t) => {
 		let n = await e.selectFrom("universal_login_templates").select(["body"]).where("tenant_id", "=", t).executeTakeFirst();
 		return n ? { body: n.body } : null;
@@ -2523,7 +2622,7 @@ function pr(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/set.ts
-function mr(e) {
+function hr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = Date.now(), o = i?.created_at ? new Date(i.created_at).getTime() : a, s = i?.updated_at ? new Date(i.updated_at).getTime() : a;
 		try {
@@ -2544,26 +2643,26 @@ function mr(e) {
 }
 //#endregion
 //#region src/universalLoginTemplates/delete.ts
-function hr(e) {
+function gr(e) {
 	return async (t) => {
 		await e.deleteFrom("universal_login_templates").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/universalLoginTemplates/index.ts
-function gr(e) {
+function _r(e) {
 	return {
-		get: pr(e),
-		set: mr(e),
-		delete: hr(e)
+		get: mr(e),
+		set: hr(e),
+		delete: gr(e)
 	};
 }
 //#endregion
 //#region src/hooks/list.ts
-function _r(e) {
+function vr(e) {
 	return async (t, n = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: s = !1, sort: c, q: u } = n, d = e.selectFrom("hooks").where("hooks.tenant_id", "=", t);
-		if (u && (d = D(e, d, u, [
+		if (u && (d = O(e, d, u, [
 			"url",
 			"form_id",
 			"template_id",
@@ -2602,7 +2701,7 @@ function _r(e) {
 }
 //#endregion
 //#region src/hooks/get.ts
-function vr(e) {
+function yr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2621,12 +2720,12 @@ function vr(e) {
 }
 //#endregion
 //#region src/hooks/remove.ts
-function yr(e) {
+function br(e) {
 	return async (t, n) => (await e.deleteFrom("hooks").where("hooks.tenant_id", "=", t).where("hooks.hook_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hooks/create.ts
-function br(e) {
+function xr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? (n.hook_id || Ne()), { hook_id: l, enabled: u, synchronous: d, metadata: f, ...p } = n;
 		return await e.insertInto("hooks").values({
@@ -2651,7 +2750,7 @@ function br(e) {
 }
 //#endregion
 //#region src/hooks/update.ts
-function xr(e) {
+function Sr(e) {
 	return async (t, n, r) => {
 		let { hook_id: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -2665,18 +2764,18 @@ function xr(e) {
 }
 //#endregion
 //#region src/hooks/index.ts
-function Sr(e) {
+function Cr(e) {
 	return {
-		create: br(e),
-		get: vr(e),
-		list: _r(e),
-		update: xr(e),
-		remove: yr(e)
+		create: xr(e),
+		get: yr(e),
+		list: vr(e),
+		update: Sr(e),
+		remove: br(e)
 	};
 }
 //#endregion
 //#region src/hook-code/create.ts
-function Cr(e) {
+function wr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = i?.id ?? Fe();
 		return await e.insertInto("hook_code").values({
@@ -2698,7 +2797,7 @@ function Cr(e) {
 }
 //#endregion
 //#region src/hook-code/get.ts
-function wr(e) {
+function Tr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2722,7 +2821,7 @@ function wr(e) {
 }
 //#endregion
 //#region src/hook-code/update.ts
-function Tr(e) {
+function Er(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		return r.code !== void 0 && (i.code = r.code), r.secrets !== void 0 && (i.secrets = JSON.stringify(r.secrets)), (await e.updateTable("hook_code").set(i).where("hook_code.id", "=", n).where("hook_code.tenant_id", "=", t).executeTakeFirst()).numUpdatedRows > 0;
@@ -2730,22 +2829,22 @@ function Tr(e) {
 }
 //#endregion
 //#region src/hook-code/remove.ts
-function Er(e) {
+function Dr(e) {
 	return async (t, n) => (await e.deleteFrom("hook_code").where("hook_code.tenant_id", "=", t).where("hook_code.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/hook-code/index.ts
-function Dr(e) {
+function Or(e) {
 	return {
-		create: Cr(e),
-		get: wr(e),
-		update: Tr(e),
-		remove: Er(e)
+		create: wr(e),
+		get: Tr(e),
+		update: Er(e),
+		remove: Dr(e)
 	};
 }
 //#endregion
 //#region src/themes/create.ts
-function Or(e) {
+function kr(e) {
 	return async (n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString(), c = {
 			themeId: o?.id || i || t(),
@@ -2756,17 +2855,17 @@ function Or(e) {
 			...c,
 			tenant_id: n
 		};
-		return await e.insertInto("themes").values(M(l)).execute(), c;
+		return await e.insertInto("themes").values(F(l)).execute(), c;
 	};
 }
 //#endregion
 //#region src/themes/remove.ts
-function kr(e) {
+function Ar(e) {
 	return async (t, n) => (await e.deleteFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/themes/get.ts
-function Ar(e) {
+function jr(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("themes").where("themes.tenant_id", "=", t).where("themes.themeId", "=", n).selectAll().executeTakeFirst();
 		return r ? l(ht({
@@ -2789,9 +2888,9 @@ function Ar(e) {
 }
 //#endregion
 //#region src/themes/update.ts
-function jr(e) {
+function Mr(e) {
 	return async (t, n, r) => {
-		let { themeId: i, ...a } = r, o = M({
+		let { themeId: i, ...a } = r, o = F({
 			...a,
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		});
@@ -2800,17 +2899,17 @@ function jr(e) {
 }
 //#endregion
 //#region src/themes/index.ts
-function Mr(e) {
+function Nr(e) {
 	return {
-		create: Or(e),
-		get: Ar(e),
-		remove: kr(e),
-		update: jr(e)
+		create: kr(e),
+		get: jr(e),
+		remove: Ar(e),
+		update: Mr(e)
 	};
 }
 //#endregion
 //#region src/loginSessions/get.ts
-function Nr(e) {
+function Pr(e) {
 	return async (t, n) => {
 		let i = await e.selectFrom("login_sessions").where("login_sessions.id", "=", n).selectAll().executeTakeFirst();
 		if (!i) return null;
@@ -2834,28 +2933,28 @@ function Nr(e) {
 }
 //#endregion
 //#region src/utils/ulid.ts
-var Pr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", L = 32, Fr = 10, Ir = 16;
-function Lr(e) {
+var Fr = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", V = 32, Ir = 10, Lr = 16;
+function Rr(e) {
 	let t = "";
-	for (let n = Fr; n > 0; n--) t = Pr.charAt(e % L) + t, e = Math.floor(e / L);
+	for (let n = Ir; n > 0; n--) t = Fr.charAt(e % V) + t, e = Math.floor(e / V);
 	return t;
 }
-function Rr() {
-	let e = new Uint8Array(Ir);
+function zr() {
+	let e = new Uint8Array(Lr);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < Ir; n++) t += Pr.charAt(e[n] % L);
+	for (let n = 0; n < Lr; n++) t += Fr.charAt(e[n] % V);
 	return t;
 }
-function zr() {
-	return Lr(Date.now()) + Rr();
+function Br() {
+	return Rr(Date.now()) + zr();
 }
 //#endregion
 //#region src/loginSessions/create.ts
-function Br(e) {
+function Vr(e) {
 	return async (t, n) => {
 		let r = c(), i = {
-			id: zr(),
+			id: Br(),
 			...n,
 			authorization_url: n.authorization_url?.slice(0, 1024),
 			created_at: r,
@@ -2863,7 +2962,7 @@ function Br(e) {
 			state: n.state || p.PENDING,
 			state_data: n.state_data,
 			failure_reason: n.failure_reason
-		}, { authParams: a, ...o } = i, s = Date.now(), l = M(o);
+		}, { authParams: a, ...o } = i, s = Date.now(), l = F(o);
 		return delete l.created_at, delete l.updated_at, delete l.expires_at, await e.insertInto("login_sessions").values({
 			...l,
 			tenant_id: t,
@@ -2876,7 +2975,7 @@ function Br(e) {
 }
 //#endregion
 //#region src/loginSessions/update.ts
-function Vr(e) {
+function Hr(e) {
 	return async (t, n, r) => {
 		let { created_at: i, updated_at: a, expires_at: o, authParams: c, ...l } = r, u = {};
 		if (c !== void 0) {
@@ -2886,7 +2985,7 @@ function Vr(e) {
 				...c
 			}) };
 		}
-		let d = M(l);
+		let d = F(l);
 		return delete d.created_at_ts, delete d.updated_at_ts, delete d.expires_at_ts, delete d.id, delete d.tenant_id, (await e.updateTable("login_sessions").set({
 			...d,
 			...u,
@@ -2897,22 +2996,22 @@ function Vr(e) {
 }
 //#endregion
 //#region src/loginSessions/remove.ts
-function Hr(e) {
+function Ur(e) {
 	return async (t, n) => (await e.deleteFrom("login_sessions").where("login_sessions.tenant_id", "=", t).where("login_sessions.id", "=", n).execute()).length > 0;
 }
 //#endregion
 //#region src/loginSessions/index.ts
-function Ur(e) {
+function Wr(e) {
 	return {
-		create: Br(e),
-		get: Nr(e),
-		update: Vr(e),
-		remove: Hr(e)
+		create: Vr(e),
+		get: Pr(e),
+		update: Hr(e),
+		remove: Ur(e)
 	};
 }
 //#endregion
 //#region src/promptSettings/get.ts
-function Wr(e) {
+function Gr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("prompt_settings").where("prompt_settings.tenant_id", "=", t).selectAll().execute();
 		return l({
@@ -2926,13 +3025,13 @@ function Wr(e) {
 }
 //#endregion
 //#region src/promptSettings/set.ts
-function Gr(e) {
+function Kr(e) {
 	let t = {};
 	return typeof e.identifier_first == "boolean" && (t.identifier_first = +!!e.identifier_first), typeof e.password_first == "boolean" && (t.password_first = +!!e.password_first), typeof e.webauthn_platform_first_factor == "boolean" && (t.webauthn_platform_first_factor = +!!e.webauthn_platform_first_factor), typeof e.show_last_used_connection == "boolean" && (t.show_last_used_connection = +!!e.show_last_used_connection), e.universal_login_experience && (t.universal_login_experience = e.universal_login_experience), t;
 }
-function Kr(e) {
+function qr(e) {
 	return async (t, n) => {
-		let r = Gr(n);
+		let r = Kr(n);
 		try {
 			await e.insertInto("prompt_settings").values({
 				tenant_id: t,
@@ -2950,15 +3049,15 @@ function Kr(e) {
 }
 //#endregion
 //#region src/promptSettings/index.ts
-function qr(e) {
+function Jr(e) {
 	return {
-		get: Wr(e),
-		set: Kr(e)
+		get: Gr(e),
+		set: qr(e)
 	};
 }
 //#endregion
 //#region src/emailProvideres/get.ts
-function Jr(e) {
+function Yr(e) {
 	return async (t) => {
 		let [n] = await e.selectFrom("email_providers").where("email_providers.tenant_id", "=", t).selectAll().execute();
 		if (!n) return null;
@@ -2973,7 +3072,7 @@ function Jr(e) {
 }
 //#endregion
 //#region src/emailProvideres/update.ts
-function Yr(e) {
+function Xr(e) {
 	return async (t, n) => {
 		let { credentials: r, settings: i, enabled: a, ...o } = n;
 		await e.updateTable("email_providers").set({
@@ -2986,7 +3085,7 @@ function Yr(e) {
 }
 //#endregion
 //#region src/emailProvideres/create.ts
-function Xr(e) {
+function Zr(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), { credentials: o, settings: s, enabled: c, ...l } = n;
 		await e.insertInto("email_providers").values({
@@ -3002,24 +3101,24 @@ function Xr(e) {
 }
 //#endregion
 //#region src/emailProvideres/remove.ts
-function Zr(e) {
+function Qr(e) {
 	return async (t) => {
 		await e.deleteFrom("email_providers").where("tenant_id", "=", t).execute();
 	};
 }
 //#endregion
 //#region src/emailProvideres/index.ts
-function Qr(e) {
+function $r(e) {
 	return {
-		get: Jr(e),
-		create: Xr(e),
-		update: Yr(e),
-		remove: Zr(e)
+		get: Yr(e),
+		create: Zr(e),
+		update: Xr(e),
+		remove: Qr(e)
 	};
 }
 //#endregion
 //#region src/emailTemplates/row.ts
-function $r(e) {
+function ei(e) {
 	let t = {
 		template: e.template,
 		body: e.body,
@@ -3033,20 +3132,20 @@ function $r(e) {
 }
 //#endregion
 //#region src/emailTemplates/get.ts
-function ei(e) {
+function ti(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).selectAll().executeTakeFirst();
-		return r ? ne.parse($r(r)) : null;
+		return r ? ne.parse(ei(r)) : null;
 	};
 }
 //#endregion
 //#region src/emailTemplates/list.ts
-function ti(e) {
-	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => ne.parse($r(e)));
+function ni(e) {
+	return async (t) => (await e.selectFrom("email_templates").where("tenant_id", "=", t).orderBy("template", "asc").selectAll().execute()).map((e) => ne.parse(ei(e)));
 }
 //#endregion
 //#region src/emailTemplates/create.ts
-function ni(e) {
+function ri(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? i?.created_at ?? a;
 		return await e.insertInto("email_templates").values({
@@ -3067,7 +3166,7 @@ function ni(e) {
 }
 //#endregion
 //#region src/emailTemplates/update.ts
-function ri(e) {
+function ii(e) {
 	return async (t, n, r) => {
 		let i = {};
 		if (r.body !== void 0 && (i.body = r.body), r.from !== void 0 && (i.from = r.from), r.subject !== void 0 && (i.subject = r.subject), r.syntax !== void 0 && (i.syntax = r.syntax), r.resultUrl !== void 0 && (i.result_url = r.resultUrl), r.urlLifetimeInSeconds !== void 0 && (i.url_lifetime_in_seconds = r.urlLifetimeInSeconds), r.includeEmailInRedirect !== void 0 && (i.include_email_in_redirect = +!!r.includeEmailInRedirect), r.enabled !== void 0 && (i.enabled = +!!r.enabled), Object.keys(i).length === 0) return await e.selectFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).select("template").executeTakeFirst() !== void 0;
@@ -3078,7 +3177,7 @@ function ri(e) {
 }
 //#endregion
 //#region src/emailTemplates/remove.ts
-function ii(e) {
+function ai(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("email_templates").where("tenant_id", "=", t).where("template", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows ?? 0) > 0;
@@ -3086,18 +3185,18 @@ function ii(e) {
 }
 //#endregion
 //#region src/emailTemplates/index.ts
-function ai(e) {
+function oi(e) {
 	return {
-		get: ei(e),
-		list: ti(e),
-		create: ni(e),
-		update: ri(e),
-		remove: ii(e)
+		get: ti(e),
+		list: ni(e),
+		create: ri(e),
+		update: ii(e),
+		remove: ai(e)
 	};
 }
 //#endregion
 //#region src/refreshTokens/to-refresh-token.ts
-function R(e) {
+function H(e) {
 	let { tenant_id: t, created_at_ts: n, expires_at_ts: i, idle_expires_at_ts: a, last_exchanged_at_ts: o, revoked_at_ts: s, rotated_at_ts: c, auth_strategy_strategy: u, auth_strategy_strategy_type: d, ...f } = e, p = r({
 		created_at_ts: n,
 		expires_at_ts: i,
@@ -3126,23 +3225,23 @@ function R(e) {
 }
 //#endregion
 //#region src/refreshTokens/get.ts
-function oi(e) {
+function si(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.id", "=", n).selectAll().executeTakeFirst();
-		return r ? R(r) : null;
+		return r ? H(r) : null;
 	};
 }
 //#endregion
 //#region src/refreshTokens/getByLookup.ts
-function si(e) {
+function ci(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t).where("refresh_tokens.token_lookup", "=", n).selectAll().executeTakeFirst();
-		return r ? R(r) : null;
+		return r ? H(r) : null;
 	};
 }
 //#endregion
 //#region src/refreshTokens/create.ts
-function ci(e) {
+function li(e) {
 	return async (t, n) => {
 		let r = c(), i = {
 			...n,
@@ -3174,12 +3273,12 @@ function ci(e) {
 }
 //#endregion
 //#region src/refreshTokens/remove.ts
-function li(e) {
+function ui(e) {
 	return async (t, n) => !!(await e.deleteFrom("refresh_tokens").where("tenant_id", "=", t).where("refresh_tokens.id", "=", n).execute()).length;
 }
 //#endregion
 //#region src/refreshTokens/revokeByLoginSession.ts
-function ui(e) {
+function di(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("login_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3187,7 +3286,7 @@ function ui(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeBySession.ts
-function di(e) {
+function fi(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("refresh_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("session_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows ?? 0);
@@ -3195,7 +3294,7 @@ function di(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeByUser.ts
-function fi(e) {
+function pi(e) {
 	return async (t, n, r) => {
 		let i = await e.updateTable("refresh_tokens").set({ revoked_at_ts: s(r) }).where("tenant_id", "=", t).where("user_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(i.numUpdatedRows ?? 0);
@@ -3203,7 +3302,7 @@ function fi(e) {
 }
 //#endregion
 //#region src/refreshTokens/revokeFamily.ts
-function pi(e) {
+function mi(e) {
 	return async (t, n, r) => {
 		let i = s(r), a = await e.updateTable("refresh_tokens").set({ revoked_at_ts: i }).where("tenant_id", "=", t).where("family_id", "=", n).where("revoked_at_ts", "is", null).executeTakeFirst();
 		return Number(a.numUpdatedRows ?? 0);
@@ -3211,7 +3310,7 @@ function pi(e) {
 }
 //#endregion
 //#region src/refreshTokens/update.ts
-function mi(e) {
+function hi(e) {
 	return async (t, n, r, i) => {
 		let { created_at: a, expires_at: o, idle_expires_at: c, last_exchanged_at: l, revoked_at: u, rotated_at: d, device: f, resource_servers: p, rotating: m, ...h } = r, g = {
 			...h,
@@ -3232,14 +3331,14 @@ function mi(e) {
 }
 //#endregion
 //#region src/refreshTokens/list.ts
-function hi(e) {
+function gi(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c, user_id: l } = n, u = e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t);
-		if (l !== void 0 && (u = u.where("refresh_tokens.user_id", "=", l)), c && (u = D(e, u, c, ["token", "login_id"])), A(n)) {
-			let { rows: e, limit: t, next: r } = await j(u.selectAll(), n, {
+		if (l !== void 0 && (u = u.where("refresh_tokens.user_id", "=", l)), c && (u = O(e, u, c, ["token", "login_id"])), N(n)) {
+			let { rows: e, limit: t, next: r } = await P(u.selectAll(), n, {
 				sortColumn: "created_at_ts",
 				sortOrder: "desc"
-			}), i = e.map(R);
+			}), i = e.map(H);
 			return {
 				refresh_tokens: i,
 				start: 0,
@@ -3254,7 +3353,7 @@ function hi(e) {
 			d = d.orderBy(t(s.sort_by), s.sort_order);
 		}
 		d = d.offset(r * i).limit(i);
-		let f = (await d.selectAll().execute()).map(R);
+		let f = (await d.selectAll().execute()).map(H);
 		if (!a) return {
 			refresh_tokens: f,
 			start: 0,
@@ -3272,57 +3371,90 @@ function hi(e) {
 }
 //#endregion
 //#region src/refreshTokens/index.ts
-function gi(e) {
+function _i(e) {
 	return {
-		create: ci(e),
-		get: oi(e),
-		getByLookup: si(e),
-		list: hi(e),
-		remove: li(e),
-		revokeByLoginSession: ui(e),
-		revokeBySession: di(e),
-		revokeByUser: fi(e),
-		revokeFamily: pi(e),
-		update: mi(e)
+		create: li(e),
+		get: si(e),
+		getByLookup: ci(e),
+		list: gi(e),
+		remove: ui(e),
+		revokeByLoginSession: di(e),
+		revokeBySession: fi(e),
+		revokeByUser: pi(e),
+		revokeFamily: mi(e),
+		update: hi(e)
 	};
 }
 //#endregion
 //#region src/cleanup.ts
-var _i = 10080 * 60 * 1e3;
-function vi(e) {
+var vi = 10080 * 60 * 1e3, U = 1e3;
+function yi(e) {
 	return async (t) => {
-		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - _i, a = 1e3;
-		try {
-			let t = 0;
-			for (;;) {
-				let o = e.deleteFrom("refresh_tokens").where((e) => e.or([e("expires_at_ts", "<", i), e("idle_expires_at_ts", "<", i)]));
-				n && (o = o.where("tenant_id", "=", n)), r && (o = o.where("user_id", "=", r));
-				let s = await o.limit(a).execute(), c = Number(s[0]?.numDeletedRows ?? 0);
-				if (t += c, c < a) break;
-			}
-			let o = 0;
-			for (;;) {
-				let t = e.deleteFrom("sessions").where((e) => e.or([e("expires_at_ts", "<", i), e("idle_expires_at_ts", "<", i)]));
-				n && (t = t.where("tenant_id", "=", n)), r && (t = t.where("user_id", "=", r));
-				let s = await t.limit(a).execute(), c = Number(s[0]?.numDeletedRows ?? 0);
-				if (o += c, c < a) break;
+		let { tenant_id: n, user_id: r } = t || {}, i = Date.now() - vi, a = (t) => async () => {
+			let a = e.deleteFrom("refresh_tokens").where(t, "<", i);
+			n && (a = a.where("tenant_id", "=", n)), r && (a = a.where("user_id", "=", r));
+			let o = await a.limit(U).execute();
+			return Number(o[0]?.numDeletedRows ?? 0);
+		}, o = (t) => async () => {
+			let a = e.deleteFrom("sessions").where(t, "<", i);
+			n && (a = a.where("tenant_id", "=", n)), r && (a = a.where("user_id", "=", r));
+			let o = await a.limit(U).execute();
+			return Number(o[0]?.numDeletedRows ?? 0);
+		}, s = [
+			{
+				table: "login_sessions",
+				label: "login_sessions.expires_at_ts",
+				deleteBatch: async () => {
+					let t = e.deleteFrom("login_sessions").where("expires_at_ts", "<", i);
+					n && (t = t.where("tenant_id", "=", n)), r && (t = t.where("user_id", "=", r));
+					let a = await t.limit(U).execute();
+					return Number(a[0]?.numDeletedRows ?? 0);
+				}
+			},
+			{
+				table: "refresh_tokens",
+				label: "refresh_tokens.expires_at_ts",
+				deleteBatch: a("expires_at_ts")
+			},
+			{
+				table: "refresh_tokens",
+				label: "refresh_tokens.idle_expires_at_ts",
+				deleteBatch: a("idle_expires_at_ts")
+			},
+			{
+				table: "sessions",
+				label: "sessions.expires_at_ts",
+				deleteBatch: o("expires_at_ts")
+			},
+			{
+				table: "sessions",
+				label: "sessions.idle_expires_at_ts",
+				deleteBatch: o("idle_expires_at_ts")
 			}
-			let s = 0;
-			for (;;) {
-				let t = e.deleteFrom("login_sessions").where("expires_at_ts", "<", i);
-				n && (t = t.where("tenant_id", "=", n)), r && (t = t.where("user_id", "=", r));
-				let o = await t.limit(a).execute(), c = Number(o[0]?.numDeletedRows ?? 0);
-				if (s += c, c < a) break;
+		].map((e) => ({
+			...e,
+			deleted: 0,
+			drained: !1,
+			failed: !1
+		})), c = 0;
+		for (; c < 300 && s.some((e) => !e.drained);) for (let e of s) if (!(e.drained || c >= 300)) {
+			c += 1;
+			try {
+				let t = await e.deleteBatch();
+				e.deleted += t, t < U && (e.drained = !0);
+			} catch (t) {
+				e.failed = !0, e.drained = !0, console.error(`Error during session cleanup (${e.label}):`, t);
 			}
-			(t > 0 || o > 0 || s > 0) && console.log(`Session cleanup: deleted ${t} refresh_tokens, ${o} sessions, ${s} login_sessions`);
-		} catch (e) {
-			console.error("Error during session cleanup:", e);
 		}
+		let l = /* @__PURE__ */ new Map();
+		for (let e of s) l.set(e.table, (l.get(e.table) ?? 0) + e.deleted);
+		let u = [...l].map(([e, t]) => `${t} ${e}`).join(", "), d = s.filter((e) => e.failed).map((e) => e.label), f = s.filter((e) => !e.drained).map((e) => e.label);
+		d.length > 0 ? console.warn(`Session cleanup: ${d.join(", ")} failed. Deleted ${u}`) : f.length > 0 ? console.warn(`Session cleanup: batch budget of 300 exhausted before ${f.join(", ")} drained. Deleted ${u}`) : s.some((e) => e.deleted > 0) && console.log(`Session cleanup: deleted ${u}`);
 	};
 }
 //#endregion
 //#region src/forms/create.ts
-function yi(e) {
+function bi(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = x.parse({
 			id: a?.id ?? t(),
@@ -3341,10 +3473,10 @@ function yi(e) {
 }
 //#endregion
 //#region src/forms/list.ts
-function bi(e) {
+function xi(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("forms").where("tenant_id", "=", t);
-		s && (c = D(e, c, s, []));
+		s && (c = O(e, c, s, []));
 		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
 			let t = { ...e };
 			if (typeof t.nodes == "string") try {
@@ -3375,7 +3507,7 @@ function bi(e) {
 }
 //#endregion
 //#region src/forms/remove.ts
-function xi(e) {
+function Si(e) {
 	return async (t, n) => {
 		let { numDeletedRows: r } = await e.deleteFrom("forms").where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r > 0;
@@ -3383,7 +3515,7 @@ function xi(e) {
 }
 //#endregion
 //#region src/forms/get.ts
-function Si(e) {
+function Ci(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("forms").selectAll().where("forms.id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		if (!r) return null;
@@ -3402,7 +3534,7 @@ function Si(e) {
 }
 //#endregion
 //#region src/forms/update.ts
-function Ci(e) {
+function wi(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -3419,18 +3551,18 @@ function Ci(e) {
 }
 //#endregion
 //#region src/forms/index.ts
-function wi(e) {
+function Ti(e) {
 	return {
-		create: yi(e),
-		get: Si(e),
-		list: bi(e),
-		remove: xi(e),
-		update: Ci(e)
+		create: bi(e),
+		get: Ci(e),
+		list: xi(e),
+		remove: Si(e),
+		update: wi(e)
 	};
 }
 //#endregion
 //#region src/resourceServers/create.ts
-function Ti(e) {
+function Ei(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.created_at ?? a, s = i?.updated_at ?? a, c = {
 			...n,
@@ -3455,7 +3587,7 @@ function Ti(e) {
 }
 //#endregion
 //#region src/resourceServers/get.ts
-function Ei(e) {
+function Di(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("resource_servers").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3474,7 +3606,20 @@ function Ei(e) {
 }
 //#endregion
 //#region src/resourceServers/list.ts
-function Di(e) {
+function Oi(e) {
+	let { verification_key: t, scopes: n, options: r, skip_consent_for_verifiable_first_party_clients: i, allow_offline_access: a, is_system: o, metadata: s, ...c } = e, u = l({
+		...c,
+		scopes: n ? JSON.parse(n) : [],
+		options: r ? JSON.parse(r) : {},
+		skip_consent_for_verifiable_first_party_clients: !!i,
+		allow_offline_access: !!a,
+		is_system: o ? !0 : void 0,
+		metadata: s ? JSON.parse(s) : void 0,
+		verificationKey: t
+	});
+	return u.token_lifetime ??= 86400, u.token_lifetime_for_web ??= 7200, u;
+}
+function ki(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, q: s } = n, c = e.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", t);
 		if (s) {
@@ -3482,39 +3627,41 @@ function Di(e) {
 			if (i && !o) {
 				let e = !!i[1], t = i[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
 				c = e ? c.where(t, "not like", `%${a}%`) : c.where(t, "like", `%${a}%`);
-			} else c = D(e, c, t, ["resource_servers.name", "resource_servers.identifier"]);
+			} else c = O(e, c, t, ["resource_servers.name", "resource_servers.identifier"]);
 		}
-		let u = (await c.offset(r * i).limit(i).selectAll().execute()).map((e) => {
-			let { verification_key: t, scopes: n, options: r, skip_consent_for_verifiable_first_party_clients: i, allow_offline_access: a, is_system: o, metadata: s, ...c } = e, u = l({
-				...c,
-				scopes: n ? JSON.parse(n) : [],
-				options: r ? JSON.parse(r) : {},
-				skip_consent_for_verifiable_first_party_clients: !!i,
-				allow_offline_access: !!a,
-				is_system: o ? !0 : void 0,
-				metadata: s ? JSON.parse(s) : void 0,
-				verificationKey: t
-			});
-			return u.token_lifetime ??= 86400, u.token_lifetime_for_web ??= 7200, u;
-		});
+		if (N(n)) {
+			let { rows: e, limit: t, next: r } = await P(c.selectAll(), n, {
+				sortColumn: "created_at",
+				sortOrder: "desc",
+				idColumn: "id"
+			}), i = e.map(Oi);
+			return {
+				resource_servers: i,
+				start: 0,
+				limit: t,
+				length: i.length,
+				next: r
+			};
+		}
+		let l = (await c.offset(r * i).limit(i).selectAll().execute()).map(Oi);
 		if (!a) return {
-			resource_servers: u,
+			resource_servers: l,
 			start: 0,
 			limit: 0,
 			length: 0
 		};
-		let { count: d } = await c.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow();
+		let { count: u } = await c.select((e) => e.fn.countAll().as("count")).executeTakeFirstOrThrow();
 		return {
-			resource_servers: u,
+			resource_servers: l,
 			start: r * i,
 			limit: i,
-			length: o(d)
+			length: o(u)
 		};
 	};
 }
 //#endregion
 //#region src/resourceServers/remove.ts
-function Oi(e) {
+function Ai(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("resource_servers").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3522,7 +3669,7 @@ function Oi(e) {
 }
 //#endregion
 //#region src/resourceServers/update.ts
-function ki(e) {
+function ji(e) {
 	return async (t, n, r) => {
 		let { verificationKey: i, scopes: a, options: o, skip_consent_for_verifiable_first_party_clients: s, allow_offline_access: c, is_system: l, metadata: u, ...d } = r, f = {
 			...d,
@@ -3542,18 +3689,18 @@ function ki(e) {
 }
 //#endregion
 //#region src/resourceServers/index.ts
-function Ai(e) {
+function Mi(e) {
 	return {
-		create: Ti(e),
-		get: Ei(e),
-		list: Di(e),
-		remove: Oi(e),
-		update: ki(e)
+		create: Ei(e),
+		get: Di(e),
+		list: ki(e),
+		remove: Ai(e),
+		update: ji(e)
 	};
 }
 //#endregion
 //#region src/roles/create.ts
-function ji(e) {
+function Ni(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.created_at ?? o, c = a?.updated_at ?? o, l = a?.id || r.id || t(), { is_system: u, id: d, metadata: f, ...p } = r, m = {
 			id: l,
@@ -3576,7 +3723,7 @@ function ji(e) {
 }
 //#endregion
 //#region src/roles/get.ts
-function Mi(e) {
+function Pi(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("roles").selectAll().where("roles.tenant_id", "=", t).where("roles.id", "=", n).executeTakeFirst();
 		if (!r) return null;
@@ -3590,10 +3737,10 @@ function Mi(e) {
 }
 //#endregion
 //#region src/roles/list.ts
-function Ni(e) {
+function Fi(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("roles").where("roles.tenant_id", "=", t), { page: i = 0, per_page: a = 50, include_totals: s = !1 } = n;
-		n.q && (r = D(e, r, n.q, ["name"]));
+		n.q && (r = O(e, r, n.q, ["name"]));
 		let c = (await r.offset(i * a).limit(a).selectAll().execute()).map((e) => {
 			let { is_system: t, tenant_id: n, metadata: r, ...i } = e;
 			return {
@@ -3619,7 +3766,7 @@ function Ni(e) {
 }
 //#endregion
 //#region src/roles/update.ts
-function Pi(e) {
+function Ii(e) {
 	return async (t, n, r) => {
 		let { is_system: i, metadata: a, ...o } = r, s = {
 			...o,
@@ -3632,7 +3779,7 @@ function Pi(e) {
 }
 //#endregion
 //#region src/roles/remove.ts
-function Fi(e) {
+function Li(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("roles").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -3640,23 +3787,23 @@ function Fi(e) {
 }
 //#endregion
 //#region src/roles/index.ts
-function Ii(e) {
+function Ri(e) {
 	return {
-		create: ji(e),
-		get: Mi(e),
-		list: Ni(e),
-		update: Pi(e),
-		remove: Fi(e)
+		create: Ni(e),
+		get: Pi(e),
+		list: Fi(e),
+		update: Ii(e),
+		remove: Li(e)
 	};
 }
 //#endregion
 //#region src/role-permissions/assign.ts
-function Li(e) {
+function zi(e) {
 	if (typeof e != "object" || !e) return !1;
 	let { code: t, message: n } = e;
 	return t === "SQLITE_CONSTRAINT" || t === "SQLITE_CONSTRAINT_PRIMARYKEY" || t === "SQLITE_CONSTRAINT_UNIQUE" || t === "ER_DUP_ENTRY" || t === "23505" ? !0 : typeof n == "string" && (n.includes("UNIQUE constraint failed") || n.includes("Duplicate entry") || n.includes("duplicate key") || n.includes("AlreadyExists"));
 }
-function Ri(e) {
+function Bi(e) {
 	return async (t, n, r, i) => {
 		if (r.length === 0) return !0;
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString();
@@ -3673,7 +3820,7 @@ function Ri(e) {
 				try {
 					await e.insertInto("role_permissions").values(r).execute();
 				} catch (e) {
-					if (Li(e)) continue;
+					if (zi(e)) continue;
 					throw e;
 				}
 			}
@@ -3685,7 +3832,7 @@ function Ri(e) {
 }
 //#endregion
 //#region src/role-permissions/remove.ts
-function zi(e) {
+function Vi(e) {
 	return async (t, n, r) => {
 		if (r.length === 0) return !0;
 		try {
@@ -3697,7 +3844,7 @@ function zi(e) {
 }
 //#endregion
 //#region src/role-permissions/list.ts
-function Bi(e) {
+function Hi(e) {
 	return async (t, n, r = {}) => {
 		let { page: i = 0, per_page: a = 50, include_totals: o = !1 } = r, s = e.selectFrom("role_permissions").leftJoin("resource_servers", (e) => e.onRef("role_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("role_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"role_permissions.role_id",
@@ -3718,16 +3865,16 @@ function Bi(e) {
 }
 //#endregion
 //#region src/role-permissions/index.ts
-function Vi(e) {
+function Ui(e) {
 	return {
-		assign: Ri(e),
-		remove: zi(e),
-		list: Bi(e)
+		assign: Bi(e),
+		remove: Vi(e),
+		list: Hi(e)
 	};
 }
 //#endregion
 //#region src/grants/create.ts
-function Hi(e) {
+function Wi(e) {
 	return async (n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = r.scope ?? [], o = r.audience ?? "", s = await e.selectFrom("grants").where("tenant_id", "=", n).where("user_id", "=", r.user_id).where("client_id", "=", r.clientID).where("audience", "=", o).selectAll().executeTakeFirst();
 		if (s) {
@@ -3764,7 +3911,7 @@ function Hi(e) {
 }
 //#endregion
 //#region src/grants/get.ts
-function Ui(e) {
+function Gi(e) {
 	return async (t, n, r, i) => {
 		let a = await e.selectFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).where("client_id", "=", r).where("audience", "=", i ?? "").selectAll().executeTakeFirst();
 		return a ? {
@@ -3778,10 +3925,10 @@ function Ui(e) {
 }
 //#endregion
 //#region src/grants/list.ts
-function Wi(e) {
+function Ki(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: s, q: c } = n, l = e.selectFrom("grants").where("grants.tenant_id", "=", t);
-		c && (l = D(e, l, c, [
+		c && (l = O(e, l, c, [
 			"user_id",
 			"client_id",
 			"audience"
@@ -3816,26 +3963,26 @@ function Wi(e) {
 }
 //#endregion
 //#region src/grants/remove.ts
-function Gi(e) {
+function qi(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
-function Ki(e) {
+function Ji(e) {
 	return async (t, n) => (await e.deleteFrom("grants").where("tenant_id", "=", t).where("user_id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/grants/index.ts
-function qi(e) {
+function Yi(e) {
 	return {
-		create: Hi(e),
-		get: Ui(e),
-		list: Wi(e),
-		remove: Gi(e),
-		removeByUser: Ki(e)
+		create: Wi(e),
+		get: Gi(e),
+		list: Ki(e),
+		remove: qi(e),
+		removeByUser: Ji(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/create.ts
-function Ji(e) {
+function Xi(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3855,7 +4002,7 @@ function Ji(e) {
 }
 //#endregion
 //#region src/user-permissions/remove.ts
-function Yi(e) {
+function Zi(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_permissions").where("tenant_id", "=", t).where("user_id", "=", n).where("resource_server_identifier", "=", r.resource_server_identifier).where("permission_name", "=", r.permission_name);
@@ -3867,7 +4014,7 @@ function Yi(e) {
 }
 //#endregion
 //#region src/user-permissions/list.ts
-function Xi(e) {
+function Qi(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_permissions").leftJoin("resource_servers", (e) => e.onRef("user_permissions.tenant_id", "=", "resource_servers.tenant_id").onRef("user_permissions.resource_server_identifier", "=", "resource_servers.id")).select([
 			"user_permissions.resource_server_identifier",
@@ -3890,17 +4037,17 @@ function Xi(e) {
 }
 //#endregion
 //#region src/user-permissions/index.ts
-function Zi(e) {
+function $i(e) {
 	return {
-		create: Ji(e),
-		remove: Yi(e),
-		list: Xi(e)
+		create: Xi(e),
+		remove: Zi(e),
+		list: Qi(e)
 	};
 }
 //#endregion
 //#region src/user-permissions/adapter.ts
-function Qi(e) {
-	let t = Zi(e);
+function ea(e) {
+	let t = $i(e);
 	return {
 		create: (e, n, r, i) => t.create(e, n, r, i),
 		remove: (e, n, r, i) => t.remove(e, n, r, i),
@@ -3909,7 +4056,7 @@ function Qi(e) {
 }
 //#endregion
 //#region src/user-roles/list.ts
-function $i(e) {
+function ta(e) {
 	return async (t, n, r, i) => {
 		let a = e.selectFrom("user_roles as ur").innerJoin("roles as r", (e) => e.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")).select([
 			"r.id",
@@ -3923,11 +4070,11 @@ function $i(e) {
 }
 //#endregion
 //#region src/user-roles/list-users.ts
-function ea(e) {
+function na(e) {
 	return async (t, n, r) => {
 		let i = e.selectFrom("user_roles").select("user_id").distinct().where("tenant_id", "=", t).where("role_id", "=", n);
-		if (A(r)) {
-			let { rows: e, limit: t, next: n } = await j(i, r, {
+		if (N(r)) {
+			let { rows: e, limit: t, next: n } = await P(i, r, {
 				sortColumn: "user_id",
 				sortOrder: "asc",
 				idColumn: "user_id"
@@ -3951,7 +4098,7 @@ function ea(e) {
 }
 //#endregion
 //#region src/user-roles/create.ts
-function ta(e) {
+function ra(e) {
 	return async (t, n, r, i, a) => {
 		let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString();
 		try {
@@ -3969,7 +4116,7 @@ function ta(e) {
 }
 //#endregion
 //#region src/user-roles/remove.ts
-function na(e) {
+function ia(e) {
 	return async (t, n, r, i) => {
 		try {
 			let a = e.deleteFrom("user_roles").where("tenant_id", "=", t).where("user_id", "=", n).where("role_id", "=", r);
@@ -3981,18 +4128,18 @@ function na(e) {
 }
 //#endregion
 //#region src/user-roles/index.ts
-function ra(e) {
+function aa(e) {
 	return {
-		list: $i(e),
-		listUsers: ea(e),
-		create: ta(e),
-		remove: na(e)
+		list: ta(e),
+		listUsers: na(e),
+		create: ra(e),
+		remove: ia(e)
 	};
 }
 //#endregion
 //#region src/user-roles/adapter.ts
-function ia(e) {
-	let t = ra(e);
+function oa(e) {
+	let t = aa(e);
 	return {
 		list: (e, n, r, i) => t.list(e, n, r, i),
 		listUsers: (e, n, r) => t.listUsers(e, n, r),
@@ -4002,7 +4149,7 @@ function ia(e) {
 }
 //#endregion
 //#region src/organizations/create.ts
-function aa(e) {
+function sa(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
 			...n,
@@ -4030,7 +4177,7 @@ function aa(e) {
 }
 //#endregion
 //#region src/organizations/get.ts
-function oa(e) {
+function ca(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ||= await e.selectFrom("organizations").selectAll().where("tenant_id", "=", t).where("name", "=", n).executeTakeFirst(), r ? l({
@@ -4044,16 +4191,16 @@ function oa(e) {
 }
 //#endregion
 //#region src/organizations/list.ts
-var z = ["name", "display_name"];
-function sa(e) {
+var W = ["name", "display_name"];
+function la(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 		if (n?.q) {
-			let t = S(n.q, z);
-			t && (r = D(e, r, t, z));
+			let t = S(n.q, W);
+			t && (r = O(e, r, t, W));
 		}
-		if (A(n)) {
-			let { rows: e, limit: t, next: i } = await j(r.selectAll(), n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: i } = await P(r.selectAll(), n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
 			}), a = e.map((e) => l({
@@ -4086,8 +4233,8 @@ function sa(e) {
 		if (n?.include_totals) {
 			let r = e.selectFrom("organizations").where("tenant_id", "=", t);
 			if (n?.q) {
-				let t = S(n.q, z);
-				t && (r = D(e, r, t, z));
+				let t = S(n.q, W);
+				t && (r = O(e, r, t, W));
 			}
 			let i = await r.select(f`count(*)`.as("count")).executeTakeFirst();
 			u = Number(i?.count || 0);
@@ -4110,7 +4257,7 @@ function sa(e) {
 }
 //#endregion
 //#region src/organizations/remove.ts
-function ca(e) {
+function ua(e) {
 	return async (t, n) => {
 		let r = await e.deleteFrom("organizations").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return Number(r.numDeletedRows) > 0;
@@ -4118,7 +4265,7 @@ function ca(e) {
 }
 //#endregion
 //#region src/organizations/update.ts
-function la(e) {
+function da(e) {
 	return async (t, n, r) => {
 		let { branding: i, metadata: a, enabled_connections: o, token_quota: s, ...c } = r, l = {
 			...c,
@@ -4134,18 +4281,18 @@ function la(e) {
 }
 //#endregion
 //#region src/organizations/index.ts
-function ua(e) {
+function fa(e) {
 	return {
-		create: aa(e),
-		get: oa(e),
-		list: sa(e),
-		remove: ca(e),
-		update: la(e)
+		create: sa(e),
+		get: ca(e),
+		list: la(e),
+		remove: ua(e),
+		update: da(e)
 	};
 }
 //#endregion
 //#region src/organization-connections/index.ts
-function B(e, t) {
+function G(e, t) {
 	return {
 		connection_id: e.connection_id,
 		assign_membership_on_login: !!e.assign_membership_on_login,
@@ -4159,14 +4306,14 @@ function B(e, t) {
 		updated_at: e.updated_at
 	};
 }
-async function V(e, t, n) {
+async function K(e, t, n) {
 	let r = await e.selectFrom("connections").select(["name", "strategy"]).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 	if (r) return {
 		name: r.name,
 		strategy: typeof r.strategy == "string" ? r.strategy : void 0
 	};
 }
-function da(e) {
+function pa(e) {
 	return {
 		async create(t, n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -4179,19 +4326,19 @@ function da(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("organization_connections").values(s).execute(), B(s, await V(e, t, r.connection_id));
+			return await e.insertInto("organization_connections").values(s).execute(), G(s, await K(e, t, r.connection_id));
 		},
 		async list(t, n) {
 			let r = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).execute(), i = [];
 			for (let n of r) {
-				let r = await V(e, t, n.connection_id);
-				i.push(B(n, r));
+				let r = await K(e, t, n.connection_id);
+				i.push(G(n, r));
 			}
 			return i;
 		},
 		async get(t, n, r) {
 			let i = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
-			return i ? B(i, await V(e, t, r)) : null;
+			return i ? G(i, await K(e, t, r)) : null;
 		},
 		async update(t, n, r, i) {
 			let a = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -4199,7 +4346,7 @@ function da(e) {
 			let o = await e.updateTable("organization_connections").set(a).where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
 			if (Number(o.numUpdatedRows ?? 0) === 0) return null;
 			let s = await e.selectFrom("organization_connections").selectAll().where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
-			return s ? B(s, await V(e, t, r)) : null;
+			return s ? G(s, await K(e, t, r)) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("organization_connections").where("tenant_id", "=", t).where("organization_id", "=", n).where("connection_id", "=", r).executeTakeFirst();
@@ -4209,7 +4356,7 @@ function da(e) {
 }
 //#endregion
 //#region src/user-organizations/create.ts
-function fa(e) {
+function ma(e) {
 	return async (n, r, i) => {
 		let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
 			id: a?.id ?? t(),
@@ -4229,7 +4376,7 @@ function fa(e) {
 }
 //#endregion
 //#region src/user-organizations/get.ts
-function pa(e) {
+function ha(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("user_organizations").selectAll().where("id", "=", n).where("tenant_id", "=", t).executeTakeFirst();
 		return r ? {
@@ -4243,13 +4390,13 @@ function pa(e) {
 }
 //#endregion
 //#region src/user-organizations/list.ts
-function H(e, t) {
+function q(e, t) {
 	return C(e.slice(t.length + 1));
 }
-function ma(e) {
+function ga(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("user_organizations").selectAll().where("tenant_id", "=", t);
-		n?.q && (n.q.startsWith("user_id:") ? r = r.where("user_id", "=", H(n.q, "user_id")) : n.q.startsWith("organization_id:") && (r = r.where("organization_id", "=", H(n.q, "organization_id"))));
+		n?.q && (n.q.startsWith("user_id:") ? r = r.where("user_id", "=", q(n.q, "user_id")) : n.q.startsWith("organization_id:") && (r = r.where("organization_id", "=", q(n.q, "organization_id"))));
 		let i = (e) => ({
 			id: e.id,
 			user_id: e.user_id,
@@ -4257,8 +4404,8 @@ function ma(e) {
 			created_at: e.created_at,
 			updated_at: e.updated_at
 		});
-		if (A(n)) {
-			let { rows: e, limit: t, next: a } = await j(r, n, {
+		if (N(n)) {
+			let { rows: e, limit: t, next: a } = await P(r, n, {
 				sortColumn: "created_at",
 				sortOrder: "desc"
 			});
@@ -4271,7 +4418,7 @@ function ma(e) {
 			};
 		}
 		let a = n?.page || 0, o = n?.per_page || 50, s = a * o, c = await r.orderBy("created_at", "desc").limit(o).offset(s).execute(), l = e.selectFrom("user_organizations").select(e.fn.count("id").as("count")).where("tenant_id", "=", t);
-		n?.q && (n.q.startsWith("user_id:") ? l = l.where("user_id", "=", H(n.q, "user_id")) : n.q.startsWith("organization_id:") && (l = l.where("organization_id", "=", H(n.q, "organization_id"))));
+		n?.q && (n.q.startsWith("user_id:") ? l = l.where("user_id", "=", q(n.q, "user_id")) : n.q.startsWith("organization_id:") && (l = l.where("organization_id", "=", q(n.q, "organization_id"))));
 		let u = await l.executeTakeFirst();
 		return {
 			userOrganizations: c.map(i),
@@ -4283,7 +4430,7 @@ function ma(e) {
 }
 //#endregion
 //#region src/user-organizations/listUserOrganizations.ts
-function ha(e) {
+function _a(e) {
 	return async (t, n, r) => {
 		let i = r?.page || 0, a = r?.per_page || 50, o = i * a, s = e.selectFrom("user_organizations").innerJoin("organizations", (e) => e.onRef("organizations.id", "=", "user_organizations.organization_id").on("organizations.tenant_id", "=", t)).select([
 			"organizations.id",
@@ -4320,12 +4467,12 @@ function ha(e) {
 }
 //#endregion
 //#region src/user-organizations/remove.ts
-function ga(e) {
+function va(e) {
 	return async (t, n) => (await e.deleteFrom("user_organizations").where("id", "=", n).where("tenant_id", "=", t).execute()).length > 0;
 }
 //#endregion
 //#region src/user-organizations/update.ts
-function _a(e) {
+function ya(e) {
 	return async (t, n, r) => {
 		let i = {
 			...r,
@@ -4336,19 +4483,19 @@ function _a(e) {
 }
 //#endregion
 //#region src/user-organizations/index.ts
-function va(e) {
+function ba(e) {
 	return {
-		create: fa(e),
-		get: pa(e),
-		list: ma(e),
-		listUserOrganizations: ha(e),
-		remove: ga(e),
-		update: _a(e)
+		create: ma(e),
+		get: ha(e),
+		list: ga(e),
+		listUserOrganizations: _a(e),
+		remove: va(e),
+		update: ya(e)
 	};
 }
 //#endregion
 //#region src/invites/create.ts
-function ya(e) {
+function xa(e) {
 	return async (t, n, r) => {
 		let i = r?.importMetadata, a = i?.id ?? n.id ?? Ie(), o = i?.created_at ?? (/* @__PURE__ */ new Date()).toISOString(), s = n.ttl_sec || 604800, c = new Date(new Date(o).getTime() + s * 1e3).toISOString(), l = {
 			id: a,
@@ -4394,7 +4541,7 @@ function ya(e) {
 }
 //#endregion
 //#region src/invites/get.ts
-function ba(e) {
+function Sa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("invites").selectAll().where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst();
 		return r ? l({
@@ -4411,7 +4558,7 @@ function ba(e) {
 }
 //#endregion
 //#region src/invites/list.ts
-function xa(e) {
+function Ca(e) {
 	return async (t, n) => {
 		let r = e.selectFrom("invites").selectAll().where("tenant_id", "=", t).orderBy("created_at", "desc");
 		if (n?.per_page && (r = r.limit(n.per_page)), n?.page) {
@@ -4438,12 +4585,12 @@ function xa(e) {
 }
 //#endregion
 //#region src/invites/remove.ts
-function Sa(e) {
+function wa(e) {
 	return async (t, n) => (await e.deleteFrom("invites").where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numDeletedRows > 0n;
 }
 //#endregion
 //#region src/invites/update.ts
-function Ca(e) {
+function Ta(e) {
 	return async (t, n, r) => {
 		let i = {};
 		return r.inviter !== void 0 && (i.inviter = JSON.stringify(r.inviter)), r.invitee !== void 0 && (i.invitee = JSON.stringify(r.invitee)), r.client_id !== void 0 && (i.client_id = r.client_id), r.connection_id !== void 0 && (i.connection_id = r.connection_id), r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), r.roles !== void 0 && (i.roles = JSON.stringify(r.roles)), r.ttl_sec !== void 0 && (i.ttl_sec = r.ttl_sec, i.expires_at = new Date(Date.now() + r.ttl_sec * 1e3).toISOString()), r.send_invitation_email !== void 0 && (i.send_invitation_email = +!!r.send_invitation_email), Object.keys(i).length === 0 ? !0 : (await e.updateTable("invites").set(i).where("tenant_id", "=", t).where("id", "=", n).executeTakeFirst()).numUpdatedRows > 0n;
@@ -4451,35 +4598,35 @@ function Ca(e) {
 }
 //#endregion
 //#region src/invites/index.ts
-function wa(e) {
+function Ea(e) {
 	return {
-		create: ya(e),
-		get: ba(e),
-		list: xa(e),
-		remove: Sa(e),
-		update: Ca(e)
+		create: xa(e),
+		get: Sa(e),
+		list: Ca(e),
+		remove: wa(e),
+		update: Ta(e)
 	};
 }
 //#endregion
 //#region src/stats/index.ts
-var Ta = ["s"], Ea = ["pwd_leak"];
-function Da(e) {
+var Da = ["s"], Oa = ["pwd_leak"];
+function ka(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function Oa(e) {
+function Aa(e) {
 	return e.toISOString().split("T")[0];
 }
-function ka(e) {
+function ja(e) {
 	return {
 		async getDaily(t, n = {}) {
 			let { from: r, to: i } = n, a = /* @__PURE__ */ new Date(), o = new Date(a);
 			o.setDate(o.getDate() - 30);
-			let s = r ? Da(r) : Oa(o), c = i ? Da(i) : Oa(a), l = f`DATE(logs.date)`;
+			let s = r ? ka(r) : Aa(o), c = i ? ka(i) : Aa(a), l = f`DATE(logs.date)`;
 			return (await e.selectFrom("logs").where("tenant_id", "=", t).where(l, ">=", s).where(l, "<=", c).select((e) => [
 				l.as("date"),
-				e.fn.sum(e.case().when("type", "in", Ta).then(1).else(0).end()).as("logins"),
+				e.fn.sum(e.case().when("type", "in", Da).then(1).else(0).end()).as("logins"),
 				e.fn.sum(e.case().when("type", "=", "ss").then(1).else(0).end()).as("signups"),
-				e.fn.sum(e.case().when("type", "in", Ea).then(1).else(0).end()).as("leaked_passwords"),
+				e.fn.sum(e.case().when("type", "in", Oa).then(1).else(0).end()).as("leaked_passwords"),
 				e.fn.min("date").as("first_event"),
 				e.fn.max("date").as("last_event")
 			]).groupBy(l).orderBy("date", "asc").execute()).map((e) => ({
@@ -4493,13 +4640,13 @@ function ka(e) {
 		},
 		async getActiveUsers(t) {
 			let n = /* @__PURE__ */ new Date();
-			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", Ta).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
+			return n.setDate(n.getDate() - 30), (await e.selectFrom("logs").where("tenant_id", "=", t).where("date", ">=", n.toISOString()).where("type", "in", Da).where("user_id", "is not", null).select((e) => e.fn.count("user_id").distinct().as("count")).executeTakeFirstOrThrow()).count || 0;
 		}
 	};
 }
 //#endregion
 //#region src/analytics/index.ts
-var Aa = {
+var Ma = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -4529,7 +4676,7 @@ var Aa = {
 		"fvr"
 	],
 	"codes-sent": ["cls", "cs"]
-}, ja = {
+}, Na = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -4586,14 +4733,14 @@ var Aa = {
 		agg: "count"
 	}
 };
-async function Ma(e) {
+async function Pa(e) {
 	try {
 		return await f`SELECT @@version_comment`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-function U(e, t) {
+function Fa(e, t) {
 	let n = new Intl.DateTimeFormat("en-US", {
 		timeZone: e,
 		year: "numeric",
@@ -4608,7 +4755,7 @@ function U(e, t) {
 	let i = r.hour === "24" ? "00" : r.hour, a = Date.UTC(Number(r.year), Number(r.month) - 1, Number(r.day), Number(i), Number(r.minute), Number(r.second)), o = Math.round((a - t.getTime()) / 6e4), s = o >= 0 ? "+" : "-", c = Math.abs(o);
 	return `${s}${String(Math.floor(c / 60)).padStart(2, "0")}:${String(c % 60).padStart(2, "0")}`;
 }
-var Na = [
+var Ia = [
 	"January",
 	"February",
 	"March",
@@ -4622,22 +4769,22 @@ var Na = [
 	"November",
 	"December"
 ];
-function Pa(e, t) {
-	let n = t.getUTCFullYear(), r = U(e, new Date(Date.UTC(n, 0, 1)));
+function La(e, t) {
+	let n = t.getUTCFullYear(), r = Fa(e, new Date(Date.UTC(n, 0, 1)));
 	for (let t = 1; t < 12; t++) {
-		let i = U(e, new Date(Date.UTC(n, t, 1)));
-		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${Na[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
+		let i = Fa(e, new Date(Date.UTC(n, t, 1)));
+		if (i !== r) throw Error(`Timezone '${e}' is DST-varying (offset ${r} in January vs ${i} in ${Ia[t]}) and cannot be bucketed with a single fixed offset by the SQL analytics adapter. Use a fixed-offset zone (e.g. 'UTC' or '+02:00').`);
 	}
 }
-function Fa(e) {
+function Ra(e) {
 	let t = e.startsWith("-") ? -1 : 1, [n, r] = e.slice(1).split(":");
 	return t * (Number(n) * 60 + Number(r));
 }
-function Ia(e, t) {
+function za(e, t) {
 	let n;
 	if (t === "+00:00") n = f`${f.ref("logs.date")}`;
 	else {
-		let e = Fa(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
+		let e = Ra(t), r = `${e >= 0 ? "+" : "-"}${Math.abs(e)} minutes`;
 		n = f`datetime(${f.ref("logs.date")}, ${r})`;
 	}
 	switch (e) {
@@ -4648,7 +4795,7 @@ function Ia(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function La(e, t) {
+function Ba(e, t) {
 	if (t === "+00:00") switch (e) {
 		case "hour": return f`substring(${f.ref("logs.date")}, 1, 13)`;
 		case "day": return f`substring(${f.ref("logs.date")}, 1, 10)`;
@@ -4659,7 +4806,7 @@ function La(e, t) {
 		}
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
-	let n = Fa(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
+	let n = Ra(t), r = f`date_add(str_to_date(substring(${f.ref("logs.date")}, 1, 19), '%Y-%m-%dT%H:%i:%s'), interval ${f.lit(n)} minute)`;
 	switch (e) {
 		case "hour": return f`date_format(${r}, '%Y-%m-%dT%H')`;
 		case "day": return f`date_format(${r}, '%Y-%m-%d')`;
@@ -4668,12 +4815,12 @@ function La(e, t) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function Ra(e, t, n, r) {
-	Pa(t, n);
-	let i = U(t, n);
-	return r === "mysql" ? La(e, i) : Ia(e, i);
+function Va(e, t, n, r) {
+	La(t, n);
+	let i = Fa(t, n);
+	return r === "mysql" ? Ba(e, i) : za(e, i);
 }
-function za(e) {
+function Ha(e) {
 	switch (e) {
 		case "connection": return "logs.connection";
 		case "client_id": return "logs.client_id";
@@ -4682,15 +4829,15 @@ function za(e) {
 		case "time": throw Error("time dimension is handled separately");
 	}
 }
-function Ba(e) {
-	let t = null, n = () => (t ||= Ma(e), t);
+function Ua(e) {
+	let t = null, n = () => (t ||= Pa(e), t);
 	return {
 		async query(t, r, i) {
-			let a = Date.now(), o = Aa[r], s = ja[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
+			let a = Date.now(), o = Ma[r], s = Na[r], c = await n(), l = [], u = e.selectFrom("logs").where("tenant_id", "=", t);
 			u = u.where("date", ">=", i.from).where("date", "<", i.to), u = u.where("type", "in", o), i.filters.connection?.length && (u = u.where("connection", "in", i.filters.connection)), i.filters.client_id?.length && (u = u.where("client_id", "in", i.filters.client_id)), i.filters.user_type?.length && (u = u.where("strategy_type", "in", i.filters.user_type)), i.filters.user_id?.length && (u = u.where("user_id", "in", i.filters.user_id));
 			let d = [], p = [];
 			for (let e of i.group_by) if (e === "time") {
-				let e = Ra(i.interval, i.tz, new Date(i.from), c);
+				let e = Va(i.interval, i.tz, new Date(i.from), c);
 				p.push({
 					alias: "time",
 					expr: e
@@ -4699,7 +4846,7 @@ function Ba(e) {
 					type: i.interval === "hour" ? "DateTime" : "Date"
 				});
 			} else {
-				let t = za(e);
+				let t = Ha(e);
 				p.push({
 					alias: e,
 					expr: f`${f.ref(t)}`
@@ -4774,7 +4921,7 @@ function Ba(e) {
 }
 //#endregion
 //#region src/customText/index.ts
-function Va(e) {
+function Wa(e) {
 	return {
 		async get(t, n, r) {
 			let i = await e.selectFrom("custom_text").selectAll().where("tenant_id", "=", t).where("prompt", "=", n).where("language", "=", r).executeTakeFirst();
@@ -4813,9 +4960,9 @@ function Va(e) {
 }
 //#endregion
 //#region src/authenticationMethods/create.ts
-function Ha(e) {
+function Ga(e) {
 	return async (t, n, r) => {
-		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? zr();
+		let i = r?.importMetadata, a = i?.created_at ? new Date(i.created_at).getTime() : Date.now(), o = i?.updated_at ? new Date(i.updated_at).getTime() : a, s = i?.id ?? Br();
 		return await e.insertInto("authentication_methods").values({
 			id: s,
 			tenant_id: t,
@@ -4852,7 +4999,7 @@ function Ha(e) {
 }
 //#endregion
 //#region src/authenticationMethods/get.ts
-function Ua(e) {
+function Ka(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4875,7 +5022,7 @@ function Ua(e) {
 }
 //#endregion
 //#region src/authenticationMethods/getByCredentialId.ts
-function Wa(e) {
+function qa(e) {
 	return async (t, n) => {
 		let r = await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.credential_id", "=", n).selectAll().executeTakeFirst();
 		return r ? {
@@ -4898,7 +5045,7 @@ function Wa(e) {
 }
 //#endregion
 //#region src/authenticationMethods/list.ts
-function Ga(e) {
+function Ja(e) {
 	return async (t, n) => (await e.selectFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.user_id", "=", n).selectAll().execute()).map((e) => ({
 		id: e.id,
 		user_id: e.user_id,
@@ -4918,35 +5065,35 @@ function Ga(e) {
 }
 //#endregion
 //#region src/authenticationMethods/update.ts
-function Ka(e) {
+function Ya(e) {
 	return async (t, n, r) => {
 		let i = { updated_at_ts: Date.now() };
 		r.phone_number !== void 0 && (i.phone_number = r.phone_number), r.totp_secret !== void 0 && (i.totp_secret = r.totp_secret), r.credential_id !== void 0 && (i.credential_id = r.credential_id), r.public_key !== void 0 && (i.public_key = r.public_key), r.sign_count !== void 0 && (i.sign_count = r.sign_count), r.credential_backed_up !== void 0 && (i.credential_backed_up = +!!r.credential_backed_up), r.transports !== void 0 && (i.transports = JSON.stringify(r.transports)), r.friendly_name !== void 0 && (i.friendly_name = r.friendly_name), r.confirmed !== void 0 && (i.confirmed = +!!r.confirmed), await e.updateTable("authentication_methods").set(i).where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).execute();
-		let a = await Ua(e)(t, n);
+		let a = await Ka(e)(t, n);
 		if (!a) throw Error(`Authentication method ${n} not found`);
 		return a;
 	};
 }
 //#endregion
 //#region src/authenticationMethods/remove.ts
-function qa(e) {
+function Xa(e) {
 	return async (t, n) => (await e.deleteFrom("authentication_methods").where("authentication_methods.tenant_id", "=", t).where("authentication_methods.id", "=", n).executeTakeFirst()).numDeletedRows > 0;
 }
 //#endregion
 //#region src/authenticationMethods/index.ts
-function Ja(e) {
+function Za(e) {
 	return {
-		create: Ha(e),
-		get: Ua(e),
-		getByCredentialId: Wa(e),
-		list: Ga(e),
-		update: Ka(e),
-		remove: qa(e)
+		create: Ga(e),
+		get: Ka(e),
+		getByCredentialId: qa(e),
+		list: Ja(e),
+		update: Ya(e),
+		remove: Xa(e)
 	};
 }
 //#endregion
 //#region src/outbox/getByIds.ts
-function Ya(e) {
+function Qa(e) {
 	return async (t) => t.length === 0 ? [] : (await e.selectFrom("outbox_events").selectAll().where("id", "in", t).execute()).map((e) => ({
 		...JSON.parse(e.payload),
 		id: e.id,
@@ -4959,7 +5106,7 @@ function Ya(e) {
 }
 //#endregion
 //#region src/outbox/getUnprocessed.ts
-function Xa(e) {
+function $a(e) {
 	return async (t) => {
 		let n = (/* @__PURE__ */ new Date()).toISOString();
 		return (await e.selectFrom("outbox_events").selectAll().where("processed_at", "is", null).where((e) => e.or([e("next_retry_at", "is", null), e("next_retry_at", "<=", n)])).where((e) => e.or([e("claimed_by", "is", null), e("claim_expires_at", "<=", n)])).orderBy("created_at", "asc").orderBy("id", "asc").limit(t).execute()).map((e) => ({
@@ -4975,7 +5122,7 @@ function Xa(e) {
 }
 //#endregion
 //#region src/outbox/claimEvents.ts
-function Za(e) {
+function eo(e) {
 	return async (t, n, r) => {
 		if (t.length === 0) return [];
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = new Date(Date.now() + r).toISOString();
@@ -4987,7 +5134,7 @@ function Za(e) {
 }
 //#endregion
 //#region src/outbox/markProcessed.ts
-function Qa(e) {
+function to(e) {
 	return async (t) => {
 		if (t.length === 0) return;
 		let n = (/* @__PURE__ */ new Date()).toISOString();
@@ -4996,7 +5143,7 @@ function Qa(e) {
 }
 //#endregion
 //#region src/outbox/markRetry.ts
-function $a(e) {
+function no(e) {
 	return async (t, n, r) => {
 		await e.updateTable("outbox_events").set({
 			error: n,
@@ -5009,7 +5156,7 @@ function $a(e) {
 }
 //#endregion
 //#region src/outbox/deadLetter.ts
-function eo(e) {
+function ro(e) {
 	return async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString();
 		await e.updateTable("outbox_events").set({
@@ -5021,7 +5168,7 @@ function eo(e) {
 }
 //#endregion
 //#region src/outbox/listFailed.ts
-function to(e) {
+function io(e) {
 	return async (t, n = {}) => {
 		let { page: r = 0, per_page: i = 50, include_totals: a = !1 } = n, o = (await e.selectFrom("outbox_events").selectAll().where("tenant_id", "=", t).where("dead_lettered_at", "is not", null).orderBy("dead_lettered_at", "desc").orderBy("id", "asc").offset(r * i).limit(i).execute()).flatMap((e) => {
 			let t;
@@ -5056,7 +5203,7 @@ function to(e) {
 }
 //#endregion
 //#region src/outbox/replay.ts
-function no(e) {
+function ao(e) {
 	return async (t, n) => {
 		let r = await e.updateTable("outbox_events").set({
 			processed_at: null,
@@ -5073,7 +5220,7 @@ function no(e) {
 }
 //#endregion
 //#region src/outbox/cleanup.ts
-function ro(e) {
+function oo(e) {
 	return async (t) => {
 		let n = await e.deleteFrom("outbox_events").where("processed_at", "is not", null).where("processed_at", "<", t).executeTakeFirst();
 		return Number(n.numDeletedRows);
@@ -5081,23 +5228,23 @@ function ro(e) {
 }
 //#endregion
 //#region src/outbox/index.ts
-function io(e) {
+function so(e) {
 	return {
-		create: rt(e),
-		getByIds: Ya(e),
-		getUnprocessed: Xa(e),
-		claimEvents: Za(e),
-		markProcessed: Qa(e),
-		markRetry: $a(e),
-		deadLetter: eo(e),
-		listFailed: to(e),
-		replay: no(e),
-		cleanup: ro(e)
+		create: tt(e),
+		getByIds: Qa(e),
+		getUnprocessed: $a(e),
+		claimEvents: eo(e),
+		markProcessed: to(e),
+		markRetry: no(e),
+		deadLetter: ro(e),
+		listFailed: io(e),
+		replay: ao(e),
+		cleanup: oo(e)
 	};
 }
 //#endregion
 //#region src/log-streams/index.ts
-function W(e) {
+function co(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5110,7 +5257,7 @@ function W(e) {
 		updated_at: e.updated_at
 	};
 }
-function ao(e) {
+function lo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5125,14 +5272,14 @@ function ao(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("log_streams").values(s).execute(), W(s);
+			return await e.insertInto("log_streams").values(s).execute(), co(s);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("log_streams").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? W(r) : null;
+			return r ? co(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(W);
+			return (await e.selectFrom("log_streams").where("tenant_id", "=", t).selectAll().execute()).map(co);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5145,7 +5292,7 @@ function ao(e) {
 }
 //#endregion
 //#region src/migrationSources/index.ts
-function G(e) {
+function uo(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -5157,7 +5304,7 @@ function G(e) {
 		updated_at: e.updated_at
 	};
 }
-function oo(e) {
+function fo(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id ?? r.id ?? `mig_${t()}`, c = r.enabled ?? !0, l = {
@@ -5171,14 +5318,14 @@ function oo(e) {
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insertInto("migration_sources").values(l).execute(), G(l);
+			return await e.insertInto("migration_sources").values(l).execute(), uo(l);
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("migration_sources").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? G(r) : null;
+			return r ? uo(r) : null;
 		},
 		async list(t) {
-			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(G);
+			return (await e.selectFrom("migration_sources").where("tenant_id", "=", t).selectAll().execute()).map(uo);
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5191,19 +5338,19 @@ function oo(e) {
 }
 //#endregion
 //#region src/proxyRoutes/serialize.ts
-function K(e) {
+function po(e) {
 	return {
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: so(e.match),
-		handlers: co(e.handlers),
+		match: mo(e.match),
+		handlers: ho(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function so(e) {
+function mo(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = ce.safeParse(t);
@@ -5211,7 +5358,7 @@ function so(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function co(e) {
+function ho(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5228,7 +5375,7 @@ function co(e) {
 }
 //#endregion
 //#region src/proxyRoutes/adapter.ts
-function q(e) {
+function go(e) {
 	return {
 		async create(n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = {
@@ -5254,14 +5401,14 @@ function q(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("proxy_routes").where("tenant_id", "=", t).where("id", "=", n).selectAll().executeTakeFirst();
-			return r ? K(r) : null;
+			return r ? po(r) : null;
 		},
 		async list(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 50, a = e.selectFrom("proxy_routes").where("tenant_id", "=", t);
 			n.custom_domain_id && (a = a.where("custom_domain_id", "=", n.custom_domain_id));
 			let o = await a.selectAll().orderBy("priority", "asc").orderBy("created_at", "asc").offset(r * i).limit(i).execute();
 			return {
-				proxy_routes: o.map(K),
+				proxy_routes: o.map(po),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5281,7 +5428,7 @@ function q(e) {
 }
 //#endregion
 //#region src/proxyRoutes/resolve-host.ts
-async function lo(e, t) {
+async function _o(e, t) {
 	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), a = await e.selectFrom("custom_domains").where("domain", "=", i).select([
 		"custom_domain_id",
 		"tenant_id",
@@ -5293,20 +5440,20 @@ async function lo(e, t) {
 		tenant_id: a.tenant_id,
 		custom_domain_id: a.custom_domain_id,
 		domain: a.domain,
-		routes: o.map(K)
+		routes: o.map(po)
 	};
 }
 //#endregion
 //#region src/proxyRoutes/index.ts
-function uo(e) {
+function vo(e) {
 	return {
-		proxyRoutes: q(e),
-		resolveHost: (t) => lo(e, t)
+		proxyRoutes: go(e),
+		resolveHost: (t) => _o(e, t)
 	};
 }
 //#endregion
 //#region src/scim/adapter.ts
-function fo(e) {
+function yo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5321,7 +5468,7 @@ function fo(e) {
 		return [];
 	}
 }
-function po(e) {
+function bo(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5330,16 +5477,16 @@ function po(e) {
 		return [];
 	}
 }
-function mo(e) {
+function xo(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: fo(e.mapping),
+		mapping: yo(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function ho(e) {
+function So(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5360,7 +5507,7 @@ function ho(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_configurations").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().executeTakeFirst();
-			return r ? mo(r) : null;
+			return r ? xo(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -5374,18 +5521,18 @@ function ho(e) {
 		}
 	};
 }
-function go(e) {
+function Co(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: po(e.scopes),
+		scopes: bo(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function _o(e) {
+function wo(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5409,14 +5556,14 @@ function _o(e) {
 		},
 		async get(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).selectAll().executeTakeFirst();
-			return r ? go(r) : null;
+			return r ? Co(r) : null;
 		},
 		async getByHash(t, n) {
 			let r = await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("token_hash", "=", n).selectAll().executeTakeFirst();
-			return r ? go(r) : null;
+			return r ? Co(r) : null;
 		},
 		async listByConnection(t, n) {
-			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(go);
+			return (await e.selectFrom("scim_tokens").where("tenant_id", "=", t).where("connection_id", "=", n).selectAll().execute()).map(Co);
 		},
 		async markUsed(t, n, r) {
 			let i = await e.updateTable("scim_tokens").where("tenant_id", "=", t).where("token_id", "=", n).set({ last_used_at: r }).executeTakeFirst();
@@ -5428,7 +5575,7 @@ function _o(e) {
 		}
 	};
 }
-function vo(e) {
+function To(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -5436,7 +5583,7 @@ function vo(e) {
 		created_at: e.created_at
 	};
 }
-function yo(e) {
+function Eo(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
@@ -5455,11 +5602,11 @@ function yo(e) {
 		},
 		async getByExternalId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("external_id", "=", r).selectAll().executeTakeFirst();
-			return i ? vo(i) : null;
+			return i ? To(i) : null;
 		},
 		async getByUserId(t, n, r) {
 			let i = await e.selectFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).selectAll().executeTakeFirst();
-			return i ? vo(i) : null;
+			return i ? To(i) : null;
 		},
 		async remove(t, n, r) {
 			let i = await e.deleteFrom("scim_external_ids").where("tenant_id", "=", t).where("connection_id", "=", n).where("user_id", "=", r).executeTakeFirst();
@@ -5469,7 +5616,7 @@ function yo(e) {
 }
 //#endregion
 //#region src/tenantOperations/index.ts
-function bo(e) {
+function Do(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5491,8 +5638,8 @@ function J(e) {
 		target_database_version: e.target_database_version,
 		error: e.error,
 		initiated_by: e.initiated_by,
-		input: bo(e.input),
-		result: bo(e.result),
+		input: Do(e.input),
+		result: Do(e.result),
 		claimed_by: e.claimed_by,
 		claim_expires_at: e.claim_expires_at,
 		created_at: e.created_at,
@@ -5500,7 +5647,7 @@ function J(e) {
 		finished_at: e.finished_at
 	});
 }
-function xo(e) {
+function Oo(e) {
 	return {
 		async create(n) {
 			let r = ye.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -5583,27 +5730,27 @@ function xo(e) {
 }
 //#endregion
 //#region src/utils/monotonic-id.ts
-var So = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Co = 32, wo = 10, To = 4, Eo = 10;
-function Do(e, t) {
+var ko = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Ao = 32, jo = 10, Mo = 4, No = 10;
+function Po(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = So.charAt(e % Co) + n, e = Math.floor(e / Co);
+	for (let r = t; r > 0; r--) n = ko.charAt(e % Ao) + n, e = Math.floor(e / Ao);
 	return n;
 }
-function Oo() {
-	let e = new Uint8Array(Eo);
+function Fo() {
+	let e = new Uint8Array(No);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < Eo; n++) t += So.charAt(e[n] % Co);
+	for (let n = 0; n < No; n++) t += ko.charAt(e[n] % Ao);
 	return t;
 }
-var ko = 0, Ao = 0;
-function jo() {
+var Io = 0, Lo = 0;
+function Ro() {
 	let e = Date.now();
-	return e === ko ? Ao++ : (ko = e, Ao = 0), Do(e, wo) + Do(Ao, To) + Oo();
+	return e === Io ? Lo++ : (Io = e, Lo = 0), Po(e, jo) + Po(Lo, Mo) + Fo();
 }
 //#endregion
 //#region src/tenantOperationEvents/index.ts
-function Mo(e) {
+function zo(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5611,22 +5758,22 @@ function Mo(e) {
 	} catch {}
 	return null;
 }
-function No(e) {
+function Bo(e) {
 	return ve.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: Mo(e.detail),
+		detail: zo(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function Po(e) {
+function Vo(e) {
 	return {
 		async create(t) {
 			let n = _e.parse(t), r = {
-				id: `evt_${jo()}`,
+				id: `evt_${Ro()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5634,12 +5781,12 @@ function Po(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insertInto("tenant_operation_events").values(r).execute(), No(r);
+			return await e.insertInto("tenant_operation_events").values(r).execute(), Bo(r);
 		},
 		async listByOperation(t, n = {}) {
 			let r = n.page ?? 0, i = n.per_page ?? 100, a = await e.selectFrom("tenant_operation_events").where("operation_id", "=", t).selectAll().orderBy("created_at", "asc").orderBy("id", "asc").offset(r * i).limit(i).execute();
 			return {
-				events: a.map(No),
+				events: a.map(Bo),
 				start: r * i,
 				limit: i,
 				length: a.length
@@ -5649,16 +5796,16 @@ function Po(e) {
 }
 //#endregion
 //#region src/tenantOperationRows/index.ts
-var Fo = 50;
-function Io(e) {
+var Ho = 50;
+function Uo(e) {
 	let t = JSON.parse(e);
 	return t && typeof t == "object" && !Array.isArray(t) ? Object.fromEntries(Object.entries(t)) : {};
 }
-function Lo(e) {
+function Wo(e) {
 	return xe.parse({
 		operation_id: e.operation_id,
 		seq: e.seq,
-		payload: Io(e.payload),
+		payload: Uo(e.payload),
 		status: e.status,
 		error_code: e.error_code,
 		error_message: e.error_message,
@@ -5668,7 +5815,7 @@ function Lo(e) {
 		updated_at: e.updated_at
 	});
 }
-function Ro(e) {
+function Go(e) {
 	return {
 		async createMany(t) {
 			if (t.length === 0) return 0;
@@ -5687,11 +5834,11 @@ function Ro(e) {
 					updated_at: n
 				};
 			});
-			for (let t = 0; t < r.length; t += Fo) await e.insertInto("tenant_operation_rows").values(r.slice(t, t + Fo)).execute();
+			for (let t = 0; t < r.length; t += Ho) await e.insertInto("tenant_operation_rows").values(r.slice(t, t + Ho)).execute();
 			return r.length;
 		},
 		async claimPending(t, n) {
-			return (await e.selectFrom("tenant_operation_rows").where("operation_id", "=", t).where("status", "=", "pending").selectAll().orderBy("seq", "asc").limit(n).execute()).map(Lo);
+			return (await e.selectFrom("tenant_operation_rows").where("operation_id", "=", t).where("status", "=", "pending").selectAll().orderBy("seq", "asc").limit(n).execute()).map(Wo);
 		},
 		async recordOutcomes(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = 0;
@@ -5740,7 +5887,7 @@ function Ro(e) {
 			}
 			let o = await a.selectAll().orderBy("seq", "asc").offset(r * i).limit(i).execute();
 			return {
-				rows: o.map(Lo),
+				rows: o.map(Wo),
 				start: r * i,
 				limit: i,
 				length: o.length
@@ -5754,7 +5901,7 @@ function Ro(e) {
 }
 //#endregion
 //#region src/rollouts/index.ts
-function zo(e) {
+function Ko(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5762,7 +5909,7 @@ function zo(e) {
 		return null;
 	}
 }
-function Bo(e) {
+function qo(e) {
 	return pe.parse({
 		id: e.id,
 		kind: e.kind,
@@ -5770,15 +5917,15 @@ function Bo(e) {
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: zo(e.canary_tenant_ids),
-		filter: zo(e.filter),
+		canary_tenant_ids: Ko(e.canary_tenant_ids),
+		filter: Ko(e.filter),
 		initiated_by: e.initiated_by,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function Vo(e) {
+function Jo(e) {
 	return {
 		async create(n) {
 			let r = fe.parse(n), i = (/* @__PURE__ */ new Date()).toISOString(), a = {
@@ -5795,16 +5942,16 @@ function Vo(e) {
 				updated_at: i,
 				finished_at: null
 			};
-			return await e.insertInto("rollouts").values(a).execute(), Bo(a);
+			return await e.insertInto("rollouts").values(a).execute(), qo(a);
 		},
 		async get(t) {
 			let n = await e.selectFrom("rollouts").where("id", "=", t).selectAll().executeTakeFirst();
-			return n ? Bo(n) : null;
+			return n ? qo(n) : null;
 		},
 		async list(t = {}) {
 			let n = t.page ?? 0, r = t.per_page ?? 50, i = await e.selectFrom("rollouts").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").offset(n * r).limit(r).execute();
 			return {
-				rollouts: i.map(Bo),
+				rollouts: i.map(qo),
 				start: n * r,
 				limit: r,
 				length: i.length
@@ -5824,7 +5971,7 @@ function Vo(e) {
 }
 //#endregion
 //#region migrate/ReferenceMigrationProvider.ts
-var Ho = class {
+var Yo = class {
 	migrations;
 	constructor(e) {
 		this.migrations = e;
@@ -5832,10 +5979,10 @@ var Ho = class {
 	async getMigrations() {
 		return this.migrations;
 	}
-}, Uo = /* @__PURE__ */ T({
-	down: () => qo,
-	up: () => Ko
-}), Wo = [
+}, Xo = /* @__PURE__ */ T({
+	down: () => es,
+	up: () => $o
+}), Zo = [
 	{
 		table: "authentication_methods",
 		name: "fk_authentication_methods_tenants",
@@ -6101,7 +6248,7 @@ var Ho = class {
 		onDelete: "cascade"
 	}
 ];
-async function Go(e) {
+async function Qo(e) {
 	try {
 		return await f`select sqlite_version()`.execute(e), !0;
 	} catch {
@@ -6110,14 +6257,14 @@ async function Go(e) {
 }
 function Y(e, t) {
 	let n = e;
-	for (let e of Wo) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
+	for (let e of Zo) e.table === t && (n = n.addForeignKeyConstraint(e.name, e.columns, e.references, e.referencedColumns, (t) => {
 		let n = t;
 		return e.onDelete && (n = n.onDelete(e.onDelete)), e.onUpdate && (n = n.onUpdate(e.onUpdate)), n;
 	}));
 	return n;
 }
-async function Ko(e) {
-	let t = await Go(e);
+async function $o(e) {
+	let t = await Qo(e);
 	await e.schema.createTable("tenants").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("audience", f`varchar(255)`).addColumn("sender_email", f`varchar(255)`).addColumn("sender_name", f`varchar(255)`).addColumn("created_at", f`varchar(255)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(255)`, (e) => e.notNull()).addColumn("support_url", f`varchar(255)`).addColumn("idle_session_lifetime", f`int`).addColumn("session_lifetime", f`int`).addColumn("session_cookie", f`text`).addColumn("allowed_logout_urls", f`text`).addColumn("ephemeral_session_lifetime", f`int`).addColumn("idle_ephemeral_session_lifetime", f`int`).addColumn("default_redirection_uri", f`text`).addColumn("enabled_locales", f`text`).addColumn("default_directory", f`varchar(255)`).addColumn("error_page", f`text`).addColumn("flags", f`text`).addColumn("friendly_name", f`varchar(255)`).addColumn("picture_url", f`text`).addColumn("support_email", f`varchar(255)`).addColumn("sandbox_version", f`varchar(50)`).addColumn("sandbox_versions_available", f`text`).addColumn("legacy_sandbox_version", f`varchar(50)`).addColumn("change_password", f`text`).addColumn("guardian_mfa_page", f`text`).addColumn("device_flow", f`text`).addColumn("default_token_quota", f`text`).addColumn("default_audience", f`varchar(255)`).addColumn("default_organization", f`varchar(255)`).addColumn("sessions", f`text`).addColumn("oidc_logout", f`text`).addColumn("allow_organization_name_in_authentication_api", f`int`).addColumn("customize_mfa_in_postlogin_action", f`int`).addColumn("acr_values_supported", f`text`).addColumn("mtls", f`text`).addColumn("pushed_authorization_requests_supported", f`int`).addColumn("authorization_response_iss_parameter_supported", f`int`).addColumn("mfa", f`text`).addColumn("attack_protection", f`text`).addColumn("default_client_id", f`varchar(255)`).addColumn("deployment_type", f`varchar(16)`, (e) => e.notNull().defaultTo("shared")).addColumn("provisioning_state", f`varchar(16)`, (e) => e.notNull().defaultTo("ready")).addColumn("provisioning_error", f`varchar(2048)`).addColumn("provisioning_state_changed_at", f`varchar(35)`).addColumn("bundle_configuration", f`varchar(64)`).addColumn("worker_version", f`varchar(64)`).addColumn("worker_script_name", f`varchar(255)`).addColumn("storage_kind", f`varchar(32)`).addColumn("d1_database_id", f`varchar(64)`).addColumn("database_version", f`varchar(64)`).addPrimaryKeyConstraint("tenants_pk", ["id"]).execute(), await e.schema.createTable("action_executions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("trigger_id", f`varchar(64)`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("results", f`text`, (e) => e.notNull()).addColumn("logs", f`text`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_executions_pk", ["id"]).execute(), await e.schema.createTable("action_versions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("action_id", f`varchar(255)`, (e) => e.notNull()).addColumn("number", f`int`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addPrimaryKeyConstraint("action_versions_pk", ["id"]).execute(), await e.schema.createTable("actions").addColumn("id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("name", f`varchar(255)`, (e) => e.notNull()).addColumn("code", f`text`, (e) => e.notNull()).addColumn("runtime", f`varchar(50)`).addColumn("status", f`varchar(50)`, (e) => e.defaultTo("built")).addColumn("secrets", f`text`).addColumn("dependencies", f`text`).addColumn("supported_triggers", f`text`).addColumn("deployed_at_ts", f`bigint`).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("is_system", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("inherit", f`int`, (e) => e.notNull().defaultTo(0)).addPrimaryKeyConstraint("actions_pk", ["id"]).execute();
 	{
 		let n = e.schema.createTable("authentication_methods").addColumn("id", f`varchar(26)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(191)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("type", f`varchar(32)`, (e) => e.notNull()).addColumn("phone_number", f`varchar(32)`).addColumn("totp_secret", f`varchar(255)`).addColumn("confirmed", f`int`, (e) => e.notNull().defaultTo(0)).addColumn("created_at_ts", f`bigint`, (e) => e.notNull()).addColumn("updated_at_ts", f`bigint`, (e) => e.notNull()).addColumn("credential_id", f`varchar(512)`).addColumn("public_key", f`text`).addColumn("sign_count", f`int`).addColumn("credential_backed_up", f`int`).addColumn("transports", f`varchar(512)`).addColumn("friendly_name", f`varchar(255)`).addPrimaryKeyConstraint("authentication_methods_pk", ["id"]);
@@ -6304,40 +6451,40 @@ async function Ko(e) {
 		"tenant_id",
 		"phone_number",
 		"provider"
-	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Wo) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
+	]).execute(), await e.schema.createIndex("users_user_id_tenant_id").on("users").columns(["user_id", "tenant_id"]).execute(), t && (await e.schema.createIndex("FK_codes_user_id_tenant_id_constraint").on("codes").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("grants_user_id_constraint").on("grants").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("login_sessions_session_fk").on("login_sessions").columns(["tenant_id", "session_id"]).execute(), await e.schema.createIndex("organization_connections_organization_fk").on("organization_connections").columns(["organization_id"]).execute(), await e.schema.createIndex("password_history_user_id_tenant_id_constraint").on("passwords").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("refresh_tokens_client_fk").on("refresh_tokens").columns(["tenant_id", "client_id"]).execute(), await e.schema.createIndex("sessions_user_fk").on("sessions").columns(["user_id", "tenant_id"]).execute(), await e.schema.createIndex("user_activity_user_id_constraint").on("user_activity").columns(["user_id", "tenant_id"]).execute()), !t) for (let t of Zo) await e.schema.alterTable(t.table).addForeignKeyConstraint(t.name, t.columns, t.references, t.referencedColumns, (e) => {
 		let n = e;
 		return t.onDelete && (n = n.onDelete(t.onDelete)), t.onUpdate && (n = n.onUpdate(t.onUpdate)), n;
 	}).execute();
 }
-async function qo(e) {
+async function es(e) {
 	await e.schema.dropTable("user_roles").ifExists().execute(), await e.schema.dropTable("user_permissions").ifExists().execute(), await e.schema.dropTable("user_organizations").ifExists().execute(), await e.schema.dropTable("user_activity").ifExists().execute(), await e.schema.dropTable("universal_login_templates").ifExists().execute(), await e.schema.dropTable("themes").ifExists().execute(), await e.schema.dropTable("tenant_operation_events").ifExists().execute(), await e.schema.dropTable("tenant_operations").ifExists().execute(), await e.schema.dropTable("rollouts").ifExists().execute(), await e.schema.dropTable("roles").ifExists().execute(), await e.schema.dropTable("role_permissions").ifExists().execute(), await e.schema.dropTable("resource_servers").ifExists().execute(), await e.schema.dropTable("refresh_tokens").ifExists().execute(), await e.schema.dropTable("proxy_routes").ifExists().execute(), await e.schema.dropTable("prompt_settings").ifExists().execute(), await e.schema.dropTable("passwords").ifExists().execute(), await e.schema.dropTable("outbox_events").ifExists().execute(), await e.schema.dropTable("organization_connections").ifExists().execute(), await e.schema.dropTable("organizations").ifExists().execute(), await e.schema.dropTable("migrations").ifExists().execute(), await e.schema.dropTable("migration_sources").ifExists().execute(), await e.schema.dropTable("logs").ifExists().execute(), await e.schema.dropTable("login_sessions").ifExists().execute(), await e.schema.dropTable("sessions").ifExists().execute(), await e.schema.dropTable("log_streams").ifExists().execute(), await e.schema.dropTable("keys").ifExists().execute(), await e.schema.dropTable("invites").ifExists().execute(), await e.schema.dropTable("hooks").ifExists().execute(), await e.schema.dropTable("hook_code").ifExists().execute(), await e.schema.dropTable("grants").ifExists().execute(), await e.schema.dropTable("forms").ifExists().execute(), await e.schema.dropTable("flows").ifExists().execute(), await e.schema.dropTable("email_templates").ifExists().execute(), await e.schema.dropTable("email_providers").ifExists().execute(), await e.schema.dropTable("custom_text").ifExists().execute(), await e.schema.dropTable("custom_domains").ifExists().execute(), await e.schema.dropTable("control_plane_comm_keys").ifExists().execute(), await e.schema.dropTable("connections").ifExists().execute(), await e.schema.dropTable("codes").ifExists().execute(), await e.schema.dropTable("users").ifExists().execute(), await e.schema.dropTable("client_registration_tokens").ifExists().execute(), await e.schema.dropTable("client_grants").ifExists().execute(), await e.schema.dropTable("clients").ifExists().execute(), await e.schema.dropTable("branding").ifExists().execute(), await e.schema.dropTable("authentication_methods").ifExists().execute(), await e.schema.dropTable("actions").ifExists().execute(), await e.schema.dropTable("action_versions").ifExists().execute(), await e.schema.dropTable("action_executions").ifExists().execute(), await e.schema.dropTable("tenants").ifExists().execute();
 }
 //#endregion
 //#region migrate/log.ts
-var Jo = !1;
-function Yo(e) {
-	Jo = e;
+var ts = !1;
+function ns(e) {
+	ts = e;
 }
 function X(...e) {
-	Jo && console.log(...e);
+	ts && console.log(...e);
 }
 function Z(...e) {
 	console.warn(...e);
 }
 //#endregion
 //#region migrate/migrations/2026-07-16T15:00:00_codes_expires_at_ts.ts
-var Xo = /* @__PURE__ */ T({
-	down: () => ss,
-	up: () => is
-}), Zo = 5e4, Qo = 500;
-async function $o(e) {
+var rs = /* @__PURE__ */ T({
+	down: () => ms,
+	up: () => ds
+}), is = 5e4, as = 500;
+async function os(e) {
 	try {
 		return await f`SELECT VERSION()`.execute(e), "mysql";
 	} catch {
 		return "sqlite";
 	}
 }
-async function es(e, t, n) {
+async function ss(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, "bigint").execute();
 	} catch (e) {
@@ -6348,7 +6495,7 @@ async function es(e, t, n) {
 		throw e;
 	}
 }
-async function ts(e, t, n, r) {
+async function cs(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6359,21 +6506,21 @@ async function ts(e, t, n, r) {
 		throw e;
 	}
 }
-async function ns(e, t) {
+async function ls(e, t) {
 	let n = (/* @__PURE__ */ new Date()).toISOString(), r = 0;
 	if (t === "sqlite") {
 		let t = await e.deleteFrom("codes").where("expires_at", "<", n).executeTakeFirst();
 		r = Number(t.numDeletedRows);
 	} else {
-		let t = Zo;
-		for (; t >= Zo;) {
-			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(Zo).executeTakeFirst();
+		let t = is;
+		for (; t >= is;) {
+			let i = await e.deleteFrom("codes").where("expires_at", "<", n).limit(is).executeTakeFirst();
 			t = Number(i.numDeletedRows), r += t, t > 0 && X(`  Pruned ${r} expired codes row(s)...`);
 		}
 	}
 	return r;
 }
-async function rs(e) {
+async function us(e) {
 	let t = 0;
 	for (;;) {
 		let n = await e.selectFrom("codes").select([
@@ -6381,33 +6528,33 @@ async function rs(e) {
 			"code_type",
 			"tenant_id",
 			"expires_at"
-		]).where("expires_at_ts", "is", null).limit(Qo).execute();
+		]).where("expires_at_ts", "is", null).limit(as).execute();
 		if (n.length === 0) break;
 		for (let t of n) {
 			let n = Date.parse(t.expires_at);
 			await e.updateTable("codes").set({ expires_at_ts: Number.isNaN(n) ? 0 : n }).where("code_id", "=", t.code_id).where("code_type", "=", t.code_type).where("tenant_id", "=", t.tenant_id).execute();
 		}
-		if (t += n.length, n.length < Qo) break;
+		if (t += n.length, n.length < as) break;
 	}
 	return t;
 }
-async function is(e) {
-	let t = await $o(e);
+async function ds(e) {
+	let t = await os(e);
 	try {
-		let n = await ns(e, t);
+		let n = await ls(e, t);
 		X(n === 0 ? "  No expired codes to prune" : `  Pruned ${n} expired codes row(s) total`);
 	} catch (e) {
 		Z(`  Warning: Could not prune expired codes: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	await es(e, "codes", "expires_at_ts"), await ts(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
+	await ss(e, "codes", "expires_at_ts"), await cs(e, "idx_codes_expires_at_ts", "codes", "expires_at_ts");
 	try {
-		let t = await rs(e);
+		let t = await us(e);
 		X(t === 0 ? "  No codes rows needed an expires_at_ts backfill" : `  Backfilled expires_at_ts for ${t} codes row(s)`);
 	} catch (e) {
 		Z(`  Warning: Could not backfill codes.expires_at_ts: ${e instanceof Error ? e.message : String(e)}`);
 	}
 }
-async function as(e, t, n) {
+async function fs(e, t, n) {
 	try {
 		await e.schema.dropIndex(t).on(n).execute();
 	} catch (e) {
@@ -6415,7 +6562,7 @@ async function as(e, t, n) {
 		throw e;
 	}
 }
-async function os(e, t, n) {
+async function ps(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6423,16 +6570,16 @@ async function os(e, t, n) {
 		throw e;
 	}
 }
-async function ss(e) {
-	await as(e, "idx_codes_expires_at_ts", "codes"), await os(e, "codes", "expires_at_ts");
+async function ms(e) {
+	await fs(e, "idx_codes_expires_at_ts", "codes"), await ps(e, "codes", "expires_at_ts");
 }
 //#endregion
 //#region migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.ts
-var cs = /* @__PURE__ */ T({
-	down: () => us,
-	up: () => ls
+var hs = /* @__PURE__ */ T({
+	down: () => _s,
+	up: () => gs
 });
-async function ls(e) {
+async function gs(e) {
 	await e.schema.createTable("scim_configurations").addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id_attribute", f`varchar(255)`, (e) => e.notNull().defaultTo("externalId")).addColumn("mapping", f`text`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_configurations_pk", ["tenant_id", "connection_id"]).execute(), await e.schema.createTable("scim_tokens").addColumn("token_id", f`varchar(64)`, (e) => e.notNull()).addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("token_hash", f`varchar(128)`, (e) => e.notNull()).addColumn("scopes", f`text`, (e) => e.notNull()).addColumn("valid_until", f`varchar(35)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("last_used_at", f`varchar(35)`).addPrimaryKeyConstraint("scim_tokens_pk", ["tenant_id", "token_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_connection_idx").on("scim_tokens").columns(["tenant_id", "connection_id"]).execute(), await e.schema.createIndex("scim_tokens_tenant_hash_idx").on("scim_tokens").columns(["tenant_id", "token_hash"]).unique().execute(), await e.schema.createTable("scim_external_ids").addColumn("tenant_id", f`varchar(255)`, (e) => e.notNull()).addColumn("connection_id", f`varchar(255)`, (e) => e.notNull()).addColumn("external_id", f`varchar(255)`, (e) => e.notNull()).addColumn("user_id", f`varchar(255)`, (e) => e.notNull()).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("scim_external_ids_pk", [
 		"tenant_id",
 		"connection_id",
@@ -6443,16 +6590,16 @@ async function ls(e) {
 		"external_id"
 	]).unique().execute();
 }
-async function us(e) {
+async function _s(e) {
 	await e.schema.dropTable("scim_external_ids").ifExists().execute(), await e.schema.dropTable("scim_tokens").ifExists().execute(), await e.schema.dropTable("scim_configurations").ifExists().execute();
 }
 //#endregion
 //#region migrate/migrations/2026-08-05T12:00:00_user_blocked.ts
-var ds = /* @__PURE__ */ T({
-	down: () => hs,
-	up: () => ps
+var vs = /* @__PURE__ */ T({
+	down: () => Ss,
+	up: () => bs
 });
-async function fs(e, t, n) {
+async function ys(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6460,10 +6607,10 @@ async function fs(e, t, n) {
 		throw e;
 	}
 }
-async function ps(e) {
-	await fs(e, "users", "blocked");
+async function bs(e) {
+	await ys(e, "users", "blocked");
 }
-async function ms(e, t, n) {
+async function xs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6471,16 +6618,16 @@ async function ms(e, t, n) {
 		throw e;
 	}
 }
-async function hs(e) {
-	await ms(e, "users", "blocked");
+async function Ss(e) {
+	await xs(e, "users", "blocked");
 }
 //#endregion
 //#region migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.ts
-var gs = /* @__PURE__ */ T({
-	down: () => bs,
-	up: () => vs
+var Cs = /* @__PURE__ */ T({
+	down: () => Ds,
+	up: () => Ts
 });
-async function _s(e, t, n) {
+async function ws(e, t, n) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, f`tinyint(1)`).execute();
 	} catch (e) {
@@ -6488,10 +6635,10 @@ async function _s(e, t, n) {
 		throw e;
 	}
 }
-async function vs(e) {
-	await _s(e, "prompt_settings", "show_last_used_connection");
+async function Ts(e) {
+	await ws(e, "prompt_settings", "show_last_used_connection");
 }
-async function ys(e, t, n) {
+async function Es(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6499,16 +6646,16 @@ async function ys(e, t, n) {
 		throw e;
 	}
 }
-async function bs(e) {
-	await ys(e, "prompt_settings", "show_last_used_connection");
+async function Ds(e) {
+	await Es(e, "prompt_settings", "show_last_used_connection");
 }
 //#endregion
 //#region migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.ts
-var xs = /* @__PURE__ */ T({
-	down: () => ws,
-	up: () => Cs
+var Os = /* @__PURE__ */ T({
+	down: () => js,
+	up: () => As
 });
-async function Ss(e, t, n, r) {
+async function ks(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).column(r).execute();
 	} catch (e) {
@@ -6519,10 +6666,10 @@ async function Ss(e, t, n, r) {
 		throw e;
 	}
 }
-async function Cs(e) {
-	await Ss(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
+async function As(e) {
+	await ks(e, "idx_action_executions_created_at_ts", "action_executions", "created_at_ts");
 }
-async function ws(e) {
+async function js(e) {
 	try {
 		await e.schema.dropIndex("idx_action_executions_created_at_ts").on("action_executions").execute();
 	} catch (e) {
@@ -6532,11 +6679,11 @@ async function ws(e) {
 }
 //#endregion
 //#region migrate/migrations/2026-08-11T12:00:00_page_hooks.ts
-var Ts = /* @__PURE__ */ T({
-	down: () => ks,
-	up: () => Ds
+var Ms = /* @__PURE__ */ T({
+	down: () => Is,
+	up: () => Ps
 });
-async function Es(e, t, n, r) {
+async function Ns(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6544,10 +6691,10 @@ async function Es(e, t, n, r) {
 		throw e;
 	}
 }
-async function Ds(e) {
-	await Es(e, "hooks", "page_id", f`varchar(64)`), await Es(e, "hooks", "permission_required", f`varchar(255)`);
+async function Ps(e) {
+	await Ns(e, "hooks", "page_id", f`varchar(64)`), await Ns(e, "hooks", "permission_required", f`varchar(255)`);
 }
-async function Os(e, t, n) {
+async function Fs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6555,22 +6702,22 @@ async function Os(e, t, n) {
 		throw e;
 	}
 }
-async function ks(e) {
-	await Os(e, "hooks", "permission_required"), await Os(e, "hooks", "page_id");
+async function Is(e) {
+	await Fs(e, "hooks", "permission_required"), await Fs(e, "hooks", "page_id");
 }
 //#endregion
 //#region migrate/migrations/2026-08-20T12:00:00_refresh_token_session_id.ts
-var As = /* @__PURE__ */ T({
-	down: () => Is,
-	up: () => Ps
-}), js = [
+var Ls = /* @__PURE__ */ T({
+	down: () => Us,
+	up: () => Vs
+}), Rs = [
 	["session_id", f`varchar(26)`],
 	["organization", f`varchar(191)`],
 	["auth_connection", f`varchar(255)`],
 	["auth_strategy_strategy", f`varchar(64)`],
 	["auth_strategy_strategy_type", f`varchar(64)`]
 ];
-async function Ms(e, t, n, r) {
+async function zs(e, t, n, r) {
 	try {
 		await e.schema.alterTable(t).addColumn(n, r).execute();
 	} catch (e) {
@@ -6578,7 +6725,7 @@ async function Ms(e, t, n, r) {
 		throw e;
 	}
 }
-async function Ns(e) {
+async function Bs(e) {
 	try {
 		await e.schema.createIndex("idx_refresh_tokens_session_id").on("refresh_tokens").columns(["tenant_id", "session_id"]).execute();
 	} catch (e) {
@@ -6586,11 +6733,11 @@ async function Ns(e) {
 		throw e;
 	}
 }
-async function Ps(e) {
-	for (let [t, n] of js) await Ms(e, "refresh_tokens", t, n);
-	await Ns(e);
+async function Vs(e) {
+	for (let [t, n] of Rs) await zs(e, "refresh_tokens", t, n);
+	await Bs(e);
 }
-async function Fs(e, t, n) {
+async function Hs(e, t, n) {
 	try {
 		await e.schema.alterTable(t).dropColumn(n).execute();
 	} catch (e) {
@@ -6598,23 +6745,23 @@ async function Fs(e, t, n) {
 		throw e;
 	}
 }
-async function Is(e) {
+async function Us(e) {
 	try {
 		await e.schema.dropIndex("idx_refresh_tokens_session_id").execute();
 	} catch {}
-	for (let [t] of js) await Fs(e, "refresh_tokens", t);
+	for (let [t] of Rs) await Hs(e, "refresh_tokens", t);
 }
 //#endregion
 //#region migrate/migrations/2026-08-21T12:00:00_refresh_token_session_id_backfill.ts
-var Ls = /* @__PURE__ */ T({
-	down: () => Us,
-	up: () => Hs
-}), Rs = 500, zs = 20, Bs = 500, Vs = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
-async function Hs(e) {
+var Ws = /* @__PURE__ */ T({
+	down: () => Xs,
+	up: () => Ys
+}), Gs = 500, Ks = 20, qs = 500, Js = "packages/kysely/migrate/data-migrations/refresh-token-session-id-backfill.sql";
+async function Ys(e) {
 	try {
 		let t = await e.selectFrom("refresh_tokens").innerJoin("login_sessions", "login_sessions.id", "refresh_tokens.login_id").whereRef("login_sessions.tenant_id", "=", "refresh_tokens.tenant_id").where("refresh_tokens.session_id", "is", null).where("login_sessions.session_id", "is not", null).select((e) => e.fn.countAll().as("count")).executeTakeFirst(), n = Number(t?.count ?? 0);
-		if (n > Bs) {
-			Z(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${Bs}. SKIPPING — run the bulk path instead: ${Vs}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
+		if (n > qs) {
+			Z(`refresh_tokens backfill: ${n} rows in scope, above the in-process limit of ${qs}. SKIPPING — run the bulk path instead: ${Js}. This must be completed before login_sessions retention is enabled, or the auth-event facts are lost for good.`);
 			return;
 		}
 		if (n === 0) {
@@ -6631,10 +6778,10 @@ async function Hs(e) {
 				"login_sessions.auth_strategy_strategy as ls_strategy",
 				"login_sessions.auth_strategy_strategy_type as ls_strategy_type",
 				"login_sessions.auth_params as ls_auth_params"
-			]).limit(Rs).execute();
+			]).limit(Gs).execute();
 			if (t.length === 0) break;
-			for (let n = 0; n < t.length; n += zs) {
-				let r = t.slice(n, n + zs);
+			for (let n = 0; n < t.length; n += Ks) {
+				let r = t.slice(n, n + Ks);
 				await Promise.all(r.map(async (t) => {
 					let n = null;
 					if (t.ls_auth_params) try {
@@ -6651,19 +6798,19 @@ async function Hs(e) {
 					}).where("tenant_id", "=", t.tenant_id).where("id", "=", t.id).execute();
 				}));
 			}
-			if (r += t.length, X(`refresh_tokens backfill: ${r} rows populated so far`), t.length < Rs) break;
+			if (r += t.length, X(`refresh_tokens backfill: ${r} rows populated so far`), t.length < Gs) break;
 		}
 		X(`refresh_tokens backfill: done, ${r} rows updated`);
 	} catch (e) {
 		throw Z("refresh_tokens backfill failed:", e), e;
 	}
 }
-async function Us() {}
+async function Xs() {}
 //#endregion
 //#region migrate/migrations/2026-09-01T12:00:00_tenant_operation_rows.ts
-var Ws = /* @__PURE__ */ T({
-	down: () => qs,
-	up: () => Ks
+var Zs = /* @__PURE__ */ T({
+	down: () => ec,
+	up: () => $s
 });
 async function Q(e, t, n, r) {
 	try {
@@ -6673,7 +6820,7 @@ async function Q(e, t, n, r) {
 		throw e;
 	}
 }
-async function Gs(e, t, n, r) {
+async function Qs(e, t, n, r) {
 	try {
 		await e.schema.createIndex(t).on(n).columns(r).execute();
 	} catch (e) {
@@ -6681,12 +6828,12 @@ async function Gs(e, t, n, r) {
 		throw e;
 	}
 }
-async function Ks(e) {
-	await Q(e, "tenant_operations", "input", f`text`), await Q(e, "tenant_operations", "result", f`text`), await Q(e, "tenant_operations", "claimed_by", f`varchar(255)`), await Q(e, "tenant_operations", "claim_expires_at", f`varchar(35)`), await e.schema.createTable("tenant_operation_rows").ifNotExists().addColumn("operation_id", f`varchar(255)`, (e) => e.notNull()).addColumn("seq", f`int`, (e) => e.notNull()).addColumn("payload", f`text`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("error_code", f`varchar(64)`).addColumn("error_message", f`text`).addColumn("error_path", f`varchar(255)`).addColumn("entity_id", f`varchar(255)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_rows_pk", ["operation_id", "seq"]).execute(), await Gs(e, "tenant_operation_rows_operation_status_seq_idx", "tenant_operation_rows", [
+async function $s(e) {
+	await Q(e, "tenant_operations", "input", f`text`), await Q(e, "tenant_operations", "result", f`text`), await Q(e, "tenant_operations", "claimed_by", f`varchar(255)`), await Q(e, "tenant_operations", "claim_expires_at", f`varchar(35)`), await e.schema.createTable("tenant_operation_rows").ifNotExists().addColumn("operation_id", f`varchar(255)`, (e) => e.notNull()).addColumn("seq", f`int`, (e) => e.notNull()).addColumn("payload", f`text`, (e) => e.notNull()).addColumn("status", f`varchar(32)`, (e) => e.notNull()).addColumn("error_code", f`varchar(64)`).addColumn("error_message", f`text`).addColumn("error_path", f`varchar(255)`).addColumn("entity_id", f`varchar(255)`).addColumn("created_at", f`varchar(35)`, (e) => e.notNull()).addColumn("updated_at", f`varchar(35)`, (e) => e.notNull()).addPrimaryKeyConstraint("tenant_operation_rows_pk", ["operation_id", "seq"]).execute(), await Qs(e, "tenant_operation_rows_operation_status_seq_idx", "tenant_operation_rows", [
 		"operation_id",
 		"status",
 		"seq"
-	]), await Gs(e, "tenant_operations_kind_status_created_at_idx", "tenant_operations", [
+	]), await Qs(e, "tenant_operations_kind_status_created_at_idx", "tenant_operations", [
 		"kind",
 		"status",
 		"created_at"
@@ -6700,7 +6847,7 @@ async function $(e, t, n) {
 		throw e;
 	}
 }
-async function qs(e) {
+async function ec(e) {
 	try {
 		await e.schema.dropIndex("tenant_operations_kind_status_created_at_idx").on("tenant_operations").execute();
 	} catch {}
@@ -6708,35 +6855,35 @@ async function qs(e) {
 }
 //#endregion
 //#region migrate/migrations/index.ts
-var Js = {
-	"2026-07-16T14:00:00_baseline": Uo,
-	"2026-07-16T15:00:00_codes_expires_at_ts": Xo,
-	"2026-08-04T12:00:00_scim_inbound_provisioning": cs,
-	"2026-08-05T12:00:00_user_blocked": ds,
-	"2026-08-09T12:00:00_prompt_settings_last_used": gs,
-	"2026-08-10T12:00:00_action_executions_created_at_index": xs,
-	"2026-08-11T12:00:00_page_hooks": Ts,
-	"2026-08-20T12:00:00_refresh_token_session_id": As,
-	"2026-08-21T12:00:00_refresh_token_session_id_backfill": Ls,
-	"2026-09-01T12:00:00_tenant_operation_rows": Ws
+var tc = {
+	"2026-07-16T14:00:00_baseline": Xo,
+	"2026-07-16T15:00:00_codes_expires_at_ts": rs,
+	"2026-08-04T12:00:00_scim_inbound_provisioning": hs,
+	"2026-08-05T12:00:00_user_blocked": vs,
+	"2026-08-09T12:00:00_prompt_settings_last_used": Cs,
+	"2026-08-10T12:00:00_action_executions_created_at_index": Os,
+	"2026-08-11T12:00:00_page_hooks": Ms,
+	"2026-08-20T12:00:00_refresh_token_session_id": Ls,
+	"2026-08-21T12:00:00_refresh_token_session_id_backfill": Ws,
+	"2026-09-01T12:00:00_tenant_operation_rows": Zs
 };
 //#endregion
 //#region migrate/migrate.ts
-async function Ys(e, t = !1) {
-	Yo(t), t && console.log("migrating...");
+async function nc(e, t = !1) {
+	ns(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new Te({
 		db: e,
-		provider: new Ho(Js)
+		provider: new Yo(tc)
 	}).migrateToLatest();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was executed successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
 	}), n) throw console.error("failed to migrate"), console.error(n), n;
 }
-async function Xs(e, t = !1) {
-	Yo(t), t && console.log("migrating...");
+async function rc(e, t = !1) {
+	ns(t), t && console.log("migrating...");
 	let { error: n, results: r } = await new Te({
 		db: e,
-		provider: new Ho(Js)
+		provider: new Yo(tc)
 	}).migrateDown();
 	if (r?.forEach((e) => {
 		e.status === "Success" ? t && console.log(`migration "${e.migrationName}" was reverted successfully`) : e.status === "Error" && console.error(`failed to execute migration "${e.migrationName}"`);
@@ -6744,65 +6891,65 @@ async function Xs(e, t = !1) {
 }
 //#endregion
 //#region src/index.ts
-function Zs(e, t = { useTransactions: !0 }) {
+function ic(e, t = { useTransactions: !0 }) {
 	let n = {
-		actions: Ke(e),
-		actionExecutions: $e(e),
-		actionVersions: nt(e),
-		branding: fr(e),
-		clients: On(e),
-		clientConnections: Pn(e),
-		clientGrants: Vn(e),
-		clientRegistrationTokens: Qn(e),
-		codes: fn(e),
-		connections: yn(e),
-		emailProviders: Qr(e),
-		emailTemplates: ai(e),
-		customDomains: lr(e),
+		actions: We(e),
+		actionExecutions: Ze(e),
+		actionVersions: et(e),
+		branding: pr(e),
+		clients: kn(e),
+		clientConnections: Fn(e),
+		clientGrants: Hn(e),
+		clientRegistrationTokens: $n(e),
+		codes: pn(e),
+		connections: bn(e),
+		emailProviders: $r(e),
+		emailTemplates: oi(e),
+		customDomains: ur(e),
 		flows: kt(e),
-		forms: wi(e),
-		hookCode: Dr(e),
-		hooks: Sr(e),
-		invites: wa(e),
-		keys: nr(e),
-		loginSessions: Ur(e),
+		forms: Ti(e),
+		hookCode: Or(e),
+		hooks: Cr(e),
+		invites: Ea(e),
+		keys: rr(e),
+		loginSessions: Wr(e),
 		logs: Gt(e),
-		logStreams: ao(e),
-		migrationSources: oo(e),
-		authenticationMethods: Ja(e),
+		logStreams: lo(e),
+		migrationSources: fo(e),
+		authenticationMethods: Za(e),
 		passwords: nn(e),
-		promptSettings: qr(e),
-		proxyRoutes: q(e),
-		scimConfigurations: ho(e),
-		scimTokens: _o(e),
-		scimExternalIds: yo(e),
-		refreshTokens: gi(e),
-		resourceServers: Ai(e),
-		rolePermissions: Vi(e),
-		grants: qi(e),
-		userPermissions: Qi(e),
-		userRoles: ia(e),
-		roles: Ii(e),
+		promptSettings: Jr(e),
+		proxyRoutes: go(e),
+		scimConfigurations: So(e),
+		scimTokens: wo(e),
+		scimExternalIds: Eo(e),
+		refreshTokens: _i(e),
+		resourceServers: Mi(e),
+		rolePermissions: Ui(e),
+		grants: Yi(e),
+		userPermissions: ea(e),
+		userRoles: oa(e),
+		roles: Ri(e),
 		sessions: Zt(e),
-		sessionCleanup: vi(e),
+		sessionCleanup: yi(e),
 		tenants: Lt(e),
-		tenantOperations: xo(e),
-		tenantOperationEvents: Po(e),
-		tenantOperationRows: Ro(e),
-		rollouts: Vo(e),
-		themes: Mr(e),
-		universalLoginTemplates: gr(e),
-		customText: Va(e),
+		tenantOperations: Oo(e),
+		tenantOperationEvents: Vo(e),
+		tenantOperationRows: Go(e),
+		rollouts: Jo(e),
+		themes: Nr(e),
+		universalLoginTemplates: _r(e),
+		customText: Wa(e),
 		users: xt(e),
 		userActivity: vt(e),
-		organizations: ua(e),
-		organizationConnections: da(e),
-		userOrganizations: va(e),
-		stats: ka(e),
-		analytics: Ba(e),
-		outbox: io(e),
+		organizations: fa(e),
+		organizationConnections: pa(e),
+		userOrganizations: ba(e),
+		stats: ja(e),
+		analytics: Ua(e),
+		outbox: so(e),
 		async transaction(r) {
-			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(Zs(e, {
+			return t.useTransactions === !1 ? r(n) : e.transaction().execute(async (e) => r(ic(e, {
 				...t,
 				useTransactions: !1
 			})));
@@ -6811,4 +6958,4 @@ function Zs(e, t = { useTransactions: !0 }) {
 	return n;
 }
 //#endregion
-export { uo as createProxyDataAdapter, q as createProxyRoutesAdapter, Zs as default, Xs as migrateDown, Ys as migrateToLatest };
+export { vo as createProxyDataAdapter, go as createProxyRoutesAdapter, ic as default, rc as migrateDown, nc as migrateToLatest };