@headless-lms/adapter-db 0.2.0 → 0.3.0

package/dist/schema/better-auth.js

@@ -1,4 +1,4 @@
-import { boolean, index, pgTable, text, timestamp } from "drizzle-orm/pg-core";
+import { boolean, index, integer, jsonb, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
 //#region src/schema/better-auth.ts
 const user = pgTable("ba_user", {
 	id: text("id").primaryKey(),
@@ -73,12 +73,16 @@ const oauthClient = pgTable("ba_oauth_client", {
 	id: text("id").primaryKey(),
 	clientId: text("client_id").notNull().unique(),
 	clientSecret: text("client_secret"),
+	clientDiscoveryId: text("client_discovery_id"),
 	disabled: boolean("disabled").default(false),
 	skipConsent: boolean("skip_consent"),
 	enableEndSession: boolean("enable_end_session"),
 	subjectType: text("subject_type"),
 	scopes: text("scopes").array(),
+	clientCredentialsScopes: text("client_credentials_scopes").array().default([]),
 	userId: text("user_id").references(() => user.id, { onDelete: "cascade" }),
+	createdAt: timestamp("created_at", { withTimezone: true }),
+	updatedAt: timestamp("updated_at", { withTimezone: true }),
 	name: text("name"),
 	uri: text("uri"),
 	icon: text("icon"),
@@ -90,67 +94,148 @@ const oauthClient = pgTable("ba_oauth_client", {
 	softwareStatement: text("software_statement"),
 	redirectUris: text("redirect_uris").array().notNull(),
 	postLogoutRedirectUris: text("post_logout_redirect_uris").array(),
+	backchannelLogoutUri: text("backchannel_logout_uri"),
+	backchannelLogoutSessionRequired: boolean("backchannel_logout_session_required"),
 	tokenEndpointAuthMethod: text("token_endpoint_auth_method"),
+	applicationType: text("application_type"),
+	jwks: text("jwks"),
+	jwksUri: text("jwks_uri"),
 	grantTypes: text("grant_types").array(),
 	responseTypes: text("response_types").array(),
-	public: boolean("public"),
-	type: text("type"),
-	requirePkce: boolean("require_pkce"),
+	requirePKCE: boolean("require_pkce"),
+	dpopBoundAccessTokens: boolean("dpop_bound_access_tokens").default(false),
 	referenceId: text("reference_id"),
-	metadata: text("metadata"),
-	createdAt: timestamp("created_at", { withTimezone: true }),
-	updatedAt: timestamp("updated_at", { withTimezone: true })
+	metadata: jsonb("metadata")
 }, (t) => [index("ba_oauth_client_user_id_idx").on(t.userId)]);
 const oauthRefreshToken = pgTable("ba_oauth_refresh_token", {
 	id: text("id").primaryKey(),
 	token: text("token").notNull().unique(),
-	clientId: text("client_id").notNull().references(() => oauthClient.clientId),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
 	sessionId: text("session_id").references(() => session.id, { onDelete: "set null" }),
 	userId: text("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
 	referenceId: text("reference_id"),
-	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	authorizationCodeId: text("authorization_code_id"),
+	resources: text("resources").array(),
+	requestedUserInfoClaims: text("requested_user_info_claims").array(),
+	expiresAt: timestamp("expires_at", { withTimezone: true }),
+	createdAt: timestamp("created_at", { withTimezone: true }),
 	revoked: timestamp("revoked", { withTimezone: true }),
+	rotatedAt: timestamp("rotated_at", { withTimezone: true }),
+	rotationReplayResponse: text("rotation_replay_response"),
+	rotationReplayExpiresAt: timestamp("rotation_replay_expires_at", { withTimezone: true }),
 	authTime: timestamp("auth_time", { withTimezone: true }),
+	confirmation: jsonb("confirmation"),
 	scopes: text("scopes").array().notNull()
 }, (t) => [
 	index("ba_oauth_refresh_token_client_id_idx").on(t.clientId),
 	index("ba_oauth_refresh_token_session_id_idx").on(t.sessionId),
-	index("ba_oauth_refresh_token_user_id_idx").on(t.userId)
+	index("ba_oauth_refresh_token_user_id_idx").on(t.userId),
+	index("ba_oauth_refresh_token_authorization_code_id_idx").on(t.authorizationCodeId)
 ]);
 const oauthAccessToken = pgTable("ba_oauth_access_token", {
 	id: text("id").primaryKey(),
-	token: text("token").notNull().unique(),
-	clientId: text("client_id").notNull().references(() => oauthClient.clientId),
+	token: text("token").unique(),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
 	sessionId: text("session_id").references(() => session.id, { onDelete: "set null" }),
 	userId: text("user_id").references(() => user.id, { onDelete: "cascade" }),
 	referenceId: text("reference_id"),
-	refreshId: text("refresh_id").references(() => oauthRefreshToken.id),
-	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	authorizationCodeId: text("authorization_code_id"),
+	resources: text("resources").array(),
+	requestedUserInfoClaims: text("requested_user_info_claims").array(),
+	refreshId: text("refresh_id").references(() => oauthRefreshToken.id, { onDelete: "cascade" }),
+	expiresAt: timestamp("expires_at", { withTimezone: true }),
+	createdAt: timestamp("created_at", { withTimezone: true }),
+	revoked: timestamp("revoked", { withTimezone: true }),
+	confirmation: jsonb("confirmation"),
 	scopes: text("scopes").array().notNull()
 }, (t) => [
 	index("ba_oauth_access_token_client_id_idx").on(t.clientId),
 	index("ba_oauth_access_token_session_id_idx").on(t.sessionId),
 	index("ba_oauth_access_token_user_id_idx").on(t.userId),
-	index("ba_oauth_access_token_refresh_id_idx").on(t.refreshId)
+	index("ba_oauth_access_token_refresh_id_idx").on(t.refreshId),
+	index("ba_oauth_access_token_authorization_code_id_idx").on(t.authorizationCodeId)
 ]);
 const oauthConsent = pgTable("ba_oauth_consent", {
 	id: text("id").primaryKey(),
-	clientId: text("client_id").notNull().references(() => oauthClient.clientId),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
 	userId: text("user_id").references(() => user.id, { onDelete: "cascade" }),
 	referenceId: text("reference_id"),
+	resources: text("resources").array(),
+	requestedUserInfoClaims: text("requested_user_info_claims").array(),
 	scopes: text("scopes").array().notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+	createdAt: timestamp("created_at", { withTimezone: true }),
+	updatedAt: timestamp("updated_at", { withTimezone: true })
 }, (t) => [index("ba_oauth_consent_client_id_idx").on(t.clientId), index("ba_oauth_consent_user_id_idx").on(t.userId)]);
+const oauthResource = pgTable("ba_oauth_resource", {
+	id: text("id").primaryKey(),
+	identifier: text("identifier").notNull().unique(),
+	name: text("name").notNull(),
+	accessTokenTtl: integer("access_token_ttl"),
+	refreshTokenTtl: integer("refresh_token_ttl"),
+	signingAlgorithm: text("signing_algorithm"),
+	signingKeyId: text("signing_key_id"),
+	allowedScopes: text("allowed_scopes").array(),
+	customClaims: jsonb("custom_claims"),
+	dpopBoundAccessTokensRequired: boolean("dpop_bound_access_tokens_required").default(false),
+	disabled: boolean("disabled").default(false),
+	createdAt: timestamp("created_at", { withTimezone: true }),
+	updatedAt: timestamp("updated_at", { withTimezone: true }),
+	policyVersion: integer("policy_version").default(1),
+	metadata: jsonb("metadata")
+});
+const oauthClientResource = pgTable("ba_oauth_client_resource", {
+	id: text("id").primaryKey(),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
+	resourceId: text("resource_id").notNull().references(() => oauthResource.identifier, { onDelete: "cascade" }),
+	metadata: jsonb("metadata"),
+	createdAt: timestamp("created_at", { withTimezone: true })
+}, (t) => [
+	index("ba_oauth_client_resource_client_id_idx").on(t.clientId),
+	index("ba_oauth_client_resource_resource_id_idx").on(t.resourceId),
+	uniqueIndex("ba_oauth_client_resource_client_resource_uidx").on(t.clientId, t.resourceId)
+]);
+const oauthClientAssertion = pgTable("ba_oauth_client_assertion", {
+	id: text("id").primaryKey(),
+	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull()
+});
 const jwks = pgTable("ba_jwks", {
 	id: text("id").primaryKey(),
 	publicKey: text("public_key").notNull(),
 	privateKey: text("private_key").notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull()
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	expiresAt: timestamp("expires_at", { withTimezone: true }),
+	alg: text("alg"),
+	crv: text("crv")
 });
+const apikey = pgTable("ba_apikey", {
+	id: text("id").primaryKey(),
+	configId: text("config_id").notNull().default("default"),
+	name: text("name"),
+	start: text("start"),
+	referenceId: text("reference_id").notNull(),
+	prefix: text("prefix"),
+	key: text("key").notNull(),
+	refillInterval: integer("refill_interval"),
+	refillAmount: integer("refill_amount"),
+	lastRefillAt: timestamp("last_refill_at", { withTimezone: true }),
+	enabled: boolean("enabled").default(true),
+	rateLimitEnabled: boolean("rate_limit_enabled").default(true),
+	rateLimitTimeWindow: integer("rate_limit_time_window").default(864e5),
+	rateLimitMax: integer("rate_limit_max").default(10),
+	requestCount: integer("request_count").default(0),
+	remaining: integer("remaining"),
+	lastRequest: timestamp("last_request", { withTimezone: true }),
+	expiresAt: timestamp("expires_at", { withTimezone: true }),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	permissions: text("permissions"),
+	metadata: text("metadata")
+}, (t) => [
+	index("ba_apikey_config_id_idx").on(t.configId),
+	index("ba_apikey_reference_id_idx").on(t.referenceId),
+	index("ba_apikey_key_idx").on(t.key)
+]);
 //#endregion
-export { account, invitation, jwks, member, oauthAccessToken, oauthClient, oauthConsent, oauthRefreshToken, organization, session, user, verification };
+export { account, apikey, invitation, jwks, member, oauthAccessToken, oauthClient, oauthClientAssertion, oauthClientResource, oauthConsent, oauthRefreshToken, oauthResource, organization, session, user, verification };
 
 //# sourceMappingURL=better-auth.js.map

package/dist/schema/better-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth.js","names":[],"sources":["../../src/schema/better-auth.ts"],"sourcesContent":["// Better Auth's own tables. Every physical table is prefixed `ba_` so the auth\n// engine's storage is visibly separate from the domain's own tables (`users`,\n// `organizations`, …) it is mirrored into. The exported identifiers stay the\n// better-auth model names — that is the key `drizzleAdapter` looks each model\n// up by, so it must not carry the prefix.\nimport { pgTable, text, timestamp, boolean, index } from \"drizzle-orm/pg-core\";\n\nexport const user = pgTable(\"ba_user\", {\n  id: text(\"id\").primaryKey(),\n  name: text(\"name\").notNull(),\n  email: text(\"email\").notNull().unique(),\n  emailVerified: boolean(\"email_verified\")\n    .$defaultFn(() => false)\n    .notNull(),\n  image: text(\"image\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true })\n    .$defaultFn(() => new Date())\n    .notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true })\n    .$defaultFn(() => new Date())\n    .notNull(),\n});\n\nexport const session = pgTable(\"ba_session\", {\n  id: text(\"id\").primaryKey(),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n  token: text(\"token\").notNull().unique(),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }).notNull(),\n  ipAddress: text(\"ip_address\"),\n  userAgent: text(\"user_agent\"),\n  userId: text(\"user_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  // organization plugin: the org the session is currently acting in.\n  activeOrganizationId: text(\"active_organization_id\"),\n});\n\nexport const account = pgTable(\"ba_account\", {\n  id: text(\"id\").primaryKey(),\n  accountId: text(\"account_id\").notNull(),\n  providerId: text(\"provider_id\").notNull(),\n  userId: text(\"user_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  accessToken: text(\"access_token\"),\n  refreshToken: text(\"refresh_token\"),\n  idToken: text(\"id_token\"),\n  accessTokenExpiresAt: timestamp(\"access_token_expires_at\", { withTimezone: true }),\n  refreshTokenExpiresAt: timestamp(\"refresh_token_expires_at\", { withTimezone: true }),\n  scope: text(\"scope\"),\n  password: text(\"password\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }).notNull(),\n});\n\nexport const verification = pgTable(\"ba_verification\", {\n  id: text(\"id\").primaryKey(),\n  identifier: text(\"identifier\").notNull(),\n  value: text(\"value\").notNull(),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).$defaultFn(() => new Date()),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }).$defaultFn(() => new Date()),\n});\n\n// --- organization plugin tables ---\n\nexport const organization = pgTable(\"ba_organization\", {\n  id: text(\"id\").primaryKey(),\n  name: text(\"name\").notNull(),\n  slug: text(\"slug\").notNull().unique(),\n  logo: text(\"logo\"),\n  metadata: text(\"metadata\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }),\n});\n\nexport const member = pgTable(\"ba_member\", {\n  id: text(\"id\").primaryKey(),\n  organizationId: text(\"organization_id\")\n    .notNull()\n    .references(() => organization.id, { onDelete: \"cascade\" }),\n  userId: text(\"user_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  role: text(\"role\").notNull().default(\"member\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n});\n\nexport const invitation = pgTable(\"ba_invitation\", {\n  id: text(\"id\").primaryKey(),\n  organizationId: text(\"organization_id\")\n    .notNull()\n    .references(() => organization.id, { onDelete: \"cascade\" }),\n  email: text(\"email\").notNull(),\n  role: text(\"role\").notNull(),\n  status: text(\"status\").notNull().default(\"pending\"),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }),\n  inviterId: text(\"inviter_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n});\n\n// --- OAuth 2.1 provider tables (MCP). Owned by @better-auth/oauth-provider. ---\n// `reference_id` is the plugin's tenant slot: the organization the person chose\n// at consent. It is the only thing that tells a token which org it acts in.\nexport const oauthClient = pgTable(\n  \"ba_oauth_client\",\n  {\n    id: text(\"id\").primaryKey(),\n    clientId: text(\"client_id\").notNull().unique(),\n    clientSecret: text(\"client_secret\"),\n    disabled: boolean(\"disabled\").default(false),\n    skipConsent: boolean(\"skip_consent\"),\n    enableEndSession: boolean(\"enable_end_session\"),\n    subjectType: text(\"subject_type\"),\n    scopes: text(\"scopes\").array(),\n    userId: text(\"user_id\").references(() => user.id, { onDelete: \"cascade\" }),\n    name: text(\"name\"),\n    uri: text(\"uri\"),\n    icon: text(\"icon\"),\n    contacts: text(\"contacts\").array(),\n    tos: text(\"tos\"),\n    policy: text(\"policy\"),\n    softwareId: text(\"software_id\"),\n    softwareVersion: text(\"software_version\"),\n    softwareStatement: text(\"software_statement\"),\n    redirectUris: text(\"redirect_uris\").array().notNull(),\n    postLogoutRedirectUris: text(\"post_logout_redirect_uris\").array(),\n    tokenEndpointAuthMethod: text(\"token_endpoint_auth_method\"),\n    grantTypes: text(\"grant_types\").array(),\n    responseTypes: text(\"response_types\").array(),\n    public: boolean(\"public\"),\n    type: text(\"type\"),\n    requirePkce: boolean(\"require_pkce\"),\n    referenceId: text(\"reference_id\"),\n    metadata: text(\"metadata\"),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }),\n    updatedAt: timestamp(\"updated_at\", { withTimezone: true }),\n  },\n  (t) => [index(\"ba_oauth_client_user_id_idx\").on(t.userId)],\n);\n\nexport const oauthRefreshToken = pgTable(\n  \"ba_oauth_refresh_token\",\n  {\n    id: text(\"id\").primaryKey(),\n    token: text(\"token\").notNull().unique(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId),\n    sessionId: text(\"session_id\").references(() => session.id, { onDelete: \"set null\" }),\n    userId: text(\"user_id\")\n      .notNull()\n      .references(() => user.id, { onDelete: \"cascade\" }),\n    referenceId: text(\"reference_id\"),\n    expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n    revoked: timestamp(\"revoked\", { withTimezone: true }),\n    authTime: timestamp(\"auth_time\", { withTimezone: true }),\n    scopes: text(\"scopes\").array().notNull(),\n  },\n  (t) => [\n    index(\"ba_oauth_refresh_token_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_refresh_token_session_id_idx\").on(t.sessionId),\n    index(\"ba_oauth_refresh_token_user_id_idx\").on(t.userId),\n  ],\n);\n\nexport const oauthAccessToken = pgTable(\n  \"ba_oauth_access_token\",\n  {\n    id: text(\"id\").primaryKey(),\n    token: text(\"token\").notNull().unique(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId),\n    sessionId: text(\"session_id\").references(() => session.id, { onDelete: \"set null\" }),\n    userId: text(\"user_id\").references(() => user.id, { onDelete: \"cascade\" }),\n    referenceId: text(\"reference_id\"),\n    refreshId: text(\"refresh_id\").references(() => oauthRefreshToken.id),\n    expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n    scopes: text(\"scopes\").array().notNull(),\n  },\n  (t) => [\n    index(\"ba_oauth_access_token_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_access_token_session_id_idx\").on(t.sessionId),\n    index(\"ba_oauth_access_token_user_id_idx\").on(t.userId),\n    index(\"ba_oauth_access_token_refresh_id_idx\").on(t.refreshId),\n  ],\n);\n\nexport const oauthConsent = pgTable(\n  \"ba_oauth_consent\",\n  {\n    id: text(\"id\").primaryKey(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId),\n    userId: text(\"user_id\").references(() => user.id, { onDelete: \"cascade\" }),\n    referenceId: text(\"reference_id\"),\n    scopes: text(\"scopes\").array().notNull(),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n    updatedAt: timestamp(\"updated_at\", { withTimezone: true }).notNull(),\n  },\n  (t) => [\n    index(\"ba_oauth_consent_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_consent_user_id_idx\").on(t.userId),\n  ],\n);\n\n// better-auth's jwt plugin: the signing keys behind JWT access tokens.\nexport const jwks = pgTable(\"ba_jwks\", {\n  id: text(\"id\").primaryKey(),\n  publicKey: text(\"public_key\").notNull(),\n  privateKey: text(\"private_key\").notNull(),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n});\n"],"mappings":";;AAOA,MAAa,OAAO,QAAQ,WAAW;CACrC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,eAAe,QAAQ,gBAAgB,CAAC,CACrC,iBAAiB,KAAK,CAAC,CACvB,QAAQ;CACX,OAAO,KAAK,OAAO;CACnB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,iCAAiB,IAAI,KAAK,CAAC,CAAC,CAC5B,QAAQ;CACX,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,iCAAiB,IAAI,KAAK,CAAC,CAAC,CAC5B,QAAQ;AACb,CAAC;AAED,MAAa,UAAU,QAAQ,cAAc;CAC3C,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,KAAK,YAAY;CAC5B,WAAW,KAAK,YAAY;CAC5B,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CAEpD,sBAAsB,KAAK,wBAAwB;AACrD,CAAC;AAED,MAAa,UAAU,QAAQ,cAAc;CAC3C,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,KAAK,YAAY,CAAC,CAAC,QAAQ;CACtC,YAAY,KAAK,aAAa,CAAC,CAAC,QAAQ;CACxC,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,aAAa,KAAK,cAAc;CAChC,cAAc,KAAK,eAAe;CAClC,SAAS,KAAK,UAAU;CACxB,sBAAsB,UAAU,2BAA2B,EAAE,cAAc,KAAK,CAAC;CACjF,uBAAuB,UAAU,4BAA4B,EAAE,cAAc,KAAK,CAAC;CACnF,OAAO,KAAK,OAAO;CACnB,UAAU,KAAK,UAAU;CACzB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAED,MAAa,eAAe,QAAQ,mBAAmB;CACrD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,YAAY,KAAK,YAAY,CAAC,CAAC,QAAQ;CACvC,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,iCAAiB,IAAI,KAAK,CAAC;CACtF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,iCAAiB,IAAI,KAAK,CAAC;AACxF,CAAC;AAID,MAAa,eAAe,QAAQ,mBAAmB;CACrD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACpC,MAAM,KAAK,MAAM;CACjB,UAAU,KAAK,UAAU;CACzB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAC3D,CAAC;AAED,MAAa,SAAS,QAAQ,aAAa;CACzC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,gBAAgB,KAAK,iBAAiB,CAAC,CACpC,QAAQ,CAAC,CACT,iBAAiB,aAAa,IAAI,EAAE,UAAU,UAAU,CAAC;CAC5D,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,QAAQ;CAC7C,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAED,MAAa,aAAa,QAAQ,iBAAiB;CACjD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,gBAAgB,KAAK,iBAAiB,CAAC,CACpC,QAAQ,CAAC,CACT,iBAAiB,aAAa,IAAI,EAAE,UAAU,UAAU,CAAC;CAC5D,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,QAAQ,KAAK,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,SAAS;CAClD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,KAAK,YAAY,CAAC,CAC1B,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAKD,MAAa,cAAc,QACzB,mBACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,UAAU,KAAK,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CAC7C,cAAc,KAAK,eAAe;CAClC,UAAU,QAAQ,UAAU,CAAC,CAAC,QAAQ,KAAK;CAC3C,aAAa,QAAQ,cAAc;CACnC,kBAAkB,QAAQ,oBAAoB;CAC9C,aAAa,KAAK,cAAc;CAChC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;CAC7B,QAAQ,KAAK,SAAS,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACzE,MAAM,KAAK,MAAM;CACjB,KAAK,KAAK,KAAK;CACf,MAAM,KAAK,MAAM;CACjB,UAAU,KAAK,UAAU,CAAC,CAAC,MAAM;CACjC,KAAK,KAAK,KAAK;CACf,QAAQ,KAAK,QAAQ;CACrB,YAAY,KAAK,aAAa;CAC9B,iBAAiB,KAAK,kBAAkB;CACxC,mBAAmB,KAAK,oBAAoB;CAC5C,cAAc,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;CACpD,wBAAwB,KAAK,2BAA2B,CAAC,CAAC,MAAM;CAChE,yBAAyB,KAAK,4BAA4B;CAC1D,YAAY,KAAK,aAAa,CAAC,CAAC,MAAM;CACtC,eAAe,KAAK,gBAAgB,CAAC,CAAC,MAAM;CAC5C,QAAQ,QAAQ,QAAQ;CACxB,MAAM,KAAK,MAAM;CACjB,aAAa,QAAQ,cAAc;CACnC,aAAa,KAAK,cAAc;CAChC,UAAU,KAAK,UAAU;CACzB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAC3D,IACC,MAAM,CAAC,MAAM,6BAA6B,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAC3D;AAEA,MAAa,oBAAoB,QAC/B,0BACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,QAAQ;CACxC,WAAW,KAAK,YAAY,CAAC,CAAC,iBAAiB,QAAQ,IAAI,EAAE,UAAU,WAAW,CAAC;CACnF,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,aAAa,KAAK,cAAc;CAChC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,SAAS,UAAU,WAAW,EAAE,cAAc,KAAK,CAAC;CACpD,UAAU,UAAU,aAAa,EAAE,cAAc,KAAK,CAAC;CACvD,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;AACzC,IACC,MAAM;CACL,MAAM,sCAAsC,CAAC,CAAC,GAAG,EAAE,QAAQ;CAC3D,MAAM,uCAAuC,CAAC,CAAC,GAAG,EAAE,SAAS;CAC7D,MAAM,oCAAoC,CAAC,CAAC,GAAG,EAAE,MAAM;AACzD,CACF;AAEA,MAAa,mBAAmB,QAC9B,yBACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,QAAQ;CACxC,WAAW,KAAK,YAAY,CAAC,CAAC,iBAAiB,QAAQ,IAAI,EAAE,UAAU,WAAW,CAAC;CACnF,QAAQ,KAAK,SAAS,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACzE,aAAa,KAAK,cAAc;CAChC,WAAW,KAAK,YAAY,CAAC,CAAC,iBAAiB,kBAAkB,EAAE;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;AACzC,IACC,MAAM;CACL,MAAM,qCAAqC,CAAC,CAAC,GAAG,EAAE,QAAQ;CAC1D,MAAM,sCAAsC,CAAC,CAAC,GAAG,EAAE,SAAS;CAC5D,MAAM,mCAAmC,CAAC,CAAC,GAAG,EAAE,MAAM;CACtD,MAAM,sCAAsC,CAAC,CAAC,GAAG,EAAE,SAAS;AAC9D,CACF;AAEA,MAAa,eAAe,QAC1B,oBACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,QAAQ;CACxC,QAAQ,KAAK,SAAS,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACzE,aAAa,KAAK,cAAc;CAChC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;CACvC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,IACC,MAAM,CACL,MAAM,gCAAgC,CAAC,CAAC,GAAG,EAAE,QAAQ,GACrD,MAAM,8BAA8B,CAAC,CAAC,GAAG,EAAE,MAAM,CACnD,CACF;AAGA,MAAa,OAAO,QAAQ,WAAW;CACrC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,KAAK,YAAY,CAAC,CAAC,QAAQ;CACtC,YAAY,KAAK,aAAa,CAAC,CAAC,QAAQ;CACxC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC"}
+{"version":3,"file":"better-auth.js","names":[],"sources":["../../src/schema/better-auth.ts"],"sourcesContent":["// Better Auth's own tables. Every physical table is prefixed `ba_` so the auth\n// engine's storage is visibly separate from the domain's own tables (`users`,\n// `organizations`, …) it is mirrored into. The exported identifiers stay the\n// better-auth model names — that is the key `drizzleAdapter` looks each model\n// up by, so it must not carry the prefix.\nimport {\n  pgTable,\n  text,\n  timestamp,\n  boolean,\n  index,\n  integer,\n  jsonb,\n  uniqueIndex,\n} from \"drizzle-orm/pg-core\";\n\nexport const user = pgTable(\"ba_user\", {\n  id: text(\"id\").primaryKey(),\n  name: text(\"name\").notNull(),\n  email: text(\"email\").notNull().unique(),\n  emailVerified: boolean(\"email_verified\")\n    .$defaultFn(() => false)\n    .notNull(),\n  image: text(\"image\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true })\n    .$defaultFn(() => new Date())\n    .notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true })\n    .$defaultFn(() => new Date())\n    .notNull(),\n});\n\nexport const session = pgTable(\"ba_session\", {\n  id: text(\"id\").primaryKey(),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n  token: text(\"token\").notNull().unique(),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }).notNull(),\n  ipAddress: text(\"ip_address\"),\n  userAgent: text(\"user_agent\"),\n  userId: text(\"user_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  // organization plugin: the org the session is currently acting in.\n  activeOrganizationId: text(\"active_organization_id\"),\n});\n\nexport const account = pgTable(\"ba_account\", {\n  id: text(\"id\").primaryKey(),\n  accountId: text(\"account_id\").notNull(),\n  providerId: text(\"provider_id\").notNull(),\n  userId: text(\"user_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  accessToken: text(\"access_token\"),\n  refreshToken: text(\"refresh_token\"),\n  idToken: text(\"id_token\"),\n  accessTokenExpiresAt: timestamp(\"access_token_expires_at\", { withTimezone: true }),\n  refreshTokenExpiresAt: timestamp(\"refresh_token_expires_at\", { withTimezone: true }),\n  scope: text(\"scope\"),\n  password: text(\"password\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }).notNull(),\n});\n\nexport const verification = pgTable(\"ba_verification\", {\n  id: text(\"id\").primaryKey(),\n  identifier: text(\"identifier\").notNull(),\n  value: text(\"value\").notNull(),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).$defaultFn(() => new Date()),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }).$defaultFn(() => new Date()),\n});\n\n// --- organization plugin tables ---\n\nexport const organization = pgTable(\"ba_organization\", {\n  id: text(\"id\").primaryKey(),\n  name: text(\"name\").notNull(),\n  slug: text(\"slug\").notNull().unique(),\n  logo: text(\"logo\"),\n  metadata: text(\"metadata\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }),\n});\n\nexport const member = pgTable(\"ba_member\", {\n  id: text(\"id\").primaryKey(),\n  organizationId: text(\"organization_id\")\n    .notNull()\n    .references(() => organization.id, { onDelete: \"cascade\" }),\n  userId: text(\"user_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  role: text(\"role\").notNull().default(\"member\"),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n});\n\nexport const invitation = pgTable(\"ba_invitation\", {\n  id: text(\"id\").primaryKey(),\n  organizationId: text(\"organization_id\")\n    .notNull()\n    .references(() => organization.id, { onDelete: \"cascade\" }),\n  email: text(\"email\").notNull(),\n  role: text(\"role\").notNull(),\n  status: text(\"status\").notNull().default(\"pending\"),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }),\n  inviterId: text(\"inviter_id\")\n    .notNull()\n    .references(() => user.id, { onDelete: \"cascade\" }),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n});\n\n// --- OAuth 2.1 provider tables (MCP). Owned by @better-auth/oauth-provider. ---\n// `reference_id` is the plugin's tenant slot: the organization the person chose\n// at consent. It is the only thing that tells a token which org it acts in.\nexport const oauthClient = pgTable(\n  \"ba_oauth_client\",\n  {\n    id: text(\"id\").primaryKey(),\n    clientId: text(\"client_id\").notNull().unique(),\n    clientSecret: text(\"client_secret\"),\n    clientDiscoveryId: text(\"client_discovery_id\"),\n    disabled: boolean(\"disabled\").default(false),\n    skipConsent: boolean(\"skip_consent\"),\n    enableEndSession: boolean(\"enable_end_session\"),\n    subjectType: text(\"subject_type\"),\n    scopes: text(\"scopes\").array(),\n    clientCredentialsScopes: text(\"client_credentials_scopes\").array().default([]),\n    userId: text(\"user_id\").references(() => user.id, { onDelete: \"cascade\" }),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }),\n    updatedAt: timestamp(\"updated_at\", { withTimezone: true }),\n    name: text(\"name\"),\n    uri: text(\"uri\"),\n    icon: text(\"icon\"),\n    contacts: text(\"contacts\").array(),\n    tos: text(\"tos\"),\n    policy: text(\"policy\"),\n    softwareId: text(\"software_id\"),\n    softwareVersion: text(\"software_version\"),\n    softwareStatement: text(\"software_statement\"),\n    redirectUris: text(\"redirect_uris\").array().notNull(),\n    postLogoutRedirectUris: text(\"post_logout_redirect_uris\").array(),\n    backchannelLogoutUri: text(\"backchannel_logout_uri\"),\n    backchannelLogoutSessionRequired: boolean(\"backchannel_logout_session_required\"),\n    tokenEndpointAuthMethod: text(\"token_endpoint_auth_method\"),\n    applicationType: text(\"application_type\"),\n    jwks: text(\"jwks\"),\n    jwksUri: text(\"jwks_uri\"),\n    grantTypes: text(\"grant_types\").array(),\n    responseTypes: text(\"response_types\").array(),\n    requirePKCE: boolean(\"require_pkce\"),\n    dpopBoundAccessTokens: boolean(\"dpop_bound_access_tokens\").default(false),\n    referenceId: text(\"reference_id\"),\n    metadata: jsonb(\"metadata\"),\n  },\n  (t) => [index(\"ba_oauth_client_user_id_idx\").on(t.userId)],\n);\n\nexport const oauthRefreshToken = pgTable(\n  \"ba_oauth_refresh_token\",\n  {\n    id: text(\"id\").primaryKey(),\n    token: text(\"token\").notNull().unique(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId, { onDelete: \"cascade\" }),\n    sessionId: text(\"session_id\").references(() => session.id, { onDelete: \"set null\" }),\n    userId: text(\"user_id\")\n      .notNull()\n      .references(() => user.id, { onDelete: \"cascade\" }),\n    referenceId: text(\"reference_id\"),\n    authorizationCodeId: text(\"authorization_code_id\"),\n    resources: text(\"resources\").array(),\n    requestedUserInfoClaims: text(\"requested_user_info_claims\").array(),\n    expiresAt: timestamp(\"expires_at\", { withTimezone: true }),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }),\n    revoked: timestamp(\"revoked\", { withTimezone: true }),\n    rotatedAt: timestamp(\"rotated_at\", { withTimezone: true }),\n    rotationReplayResponse: text(\"rotation_replay_response\"),\n    rotationReplayExpiresAt: timestamp(\"rotation_replay_expires_at\", { withTimezone: true }),\n    authTime: timestamp(\"auth_time\", { withTimezone: true }),\n    confirmation: jsonb(\"confirmation\"),\n    scopes: text(\"scopes\").array().notNull(),\n  },\n  (t) => [\n    index(\"ba_oauth_refresh_token_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_refresh_token_session_id_idx\").on(t.sessionId),\n    index(\"ba_oauth_refresh_token_user_id_idx\").on(t.userId),\n    index(\"ba_oauth_refresh_token_authorization_code_id_idx\").on(t.authorizationCodeId),\n  ],\n);\n\nexport const oauthAccessToken = pgTable(\n  \"ba_oauth_access_token\",\n  {\n    id: text(\"id\").primaryKey(),\n    token: text(\"token\").unique(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId, { onDelete: \"cascade\" }),\n    sessionId: text(\"session_id\").references(() => session.id, { onDelete: \"set null\" }),\n    userId: text(\"user_id\").references(() => user.id, { onDelete: \"cascade\" }),\n    referenceId: text(\"reference_id\"),\n    authorizationCodeId: text(\"authorization_code_id\"),\n    resources: text(\"resources\").array(),\n    requestedUserInfoClaims: text(\"requested_user_info_claims\").array(),\n    refreshId: text(\"refresh_id\").references(() => oauthRefreshToken.id, { onDelete: \"cascade\" }),\n    expiresAt: timestamp(\"expires_at\", { withTimezone: true }),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }),\n    revoked: timestamp(\"revoked\", { withTimezone: true }),\n    confirmation: jsonb(\"confirmation\"),\n    scopes: text(\"scopes\").array().notNull(),\n  },\n  (t) => [\n    index(\"ba_oauth_access_token_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_access_token_session_id_idx\").on(t.sessionId),\n    index(\"ba_oauth_access_token_user_id_idx\").on(t.userId),\n    index(\"ba_oauth_access_token_refresh_id_idx\").on(t.refreshId),\n    index(\"ba_oauth_access_token_authorization_code_id_idx\").on(t.authorizationCodeId),\n  ],\n);\n\nexport const oauthConsent = pgTable(\n  \"ba_oauth_consent\",\n  {\n    id: text(\"id\").primaryKey(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId, { onDelete: \"cascade\" }),\n    userId: text(\"user_id\").references(() => user.id, { onDelete: \"cascade\" }),\n    referenceId: text(\"reference_id\"),\n    resources: text(\"resources\").array(),\n    requestedUserInfoClaims: text(\"requested_user_info_claims\").array(),\n    scopes: text(\"scopes\").array().notNull(),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }),\n    updatedAt: timestamp(\"updated_at\", { withTimezone: true }),\n  },\n  (t) => [\n    index(\"ba_oauth_consent_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_consent_user_id_idx\").on(t.userId),\n  ],\n);\n\nexport const oauthResource = pgTable(\"ba_oauth_resource\", {\n  id: text(\"id\").primaryKey(),\n  identifier: text(\"identifier\").notNull().unique(),\n  name: text(\"name\").notNull(),\n  accessTokenTtl: integer(\"access_token_ttl\"),\n  refreshTokenTtl: integer(\"refresh_token_ttl\"),\n  signingAlgorithm: text(\"signing_algorithm\"),\n  signingKeyId: text(\"signing_key_id\"),\n  allowedScopes: text(\"allowed_scopes\").array(),\n  customClaims: jsonb(\"custom_claims\"),\n  dpopBoundAccessTokensRequired: boolean(\"dpop_bound_access_tokens_required\").default(false),\n  disabled: boolean(\"disabled\").default(false),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }),\n  updatedAt: timestamp(\"updated_at\", { withTimezone: true }),\n  policyVersion: integer(\"policy_version\").default(1),\n  metadata: jsonb(\"metadata\"),\n});\n\nexport const oauthClientResource = pgTable(\n  \"ba_oauth_client_resource\",\n  {\n    id: text(\"id\").primaryKey(),\n    clientId: text(\"client_id\")\n      .notNull()\n      .references(() => oauthClient.clientId, { onDelete: \"cascade\" }),\n    resourceId: text(\"resource_id\")\n      .notNull()\n      .references(() => oauthResource.identifier, { onDelete: \"cascade\" }),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }),\n  },\n  (t) => [\n    index(\"ba_oauth_client_resource_client_id_idx\").on(t.clientId),\n    index(\"ba_oauth_client_resource_resource_id_idx\").on(t.resourceId),\n    uniqueIndex(\"ba_oauth_client_resource_client_resource_uidx\").on(t.clientId, t.resourceId),\n  ],\n);\n\nexport const oauthClientAssertion = pgTable(\"ba_oauth_client_assertion\", {\n  id: text(\"id\").primaryKey(),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }).notNull(),\n});\n\n// better-auth's jwt plugin: the signing keys behind JWT access tokens.\nexport const jwks = pgTable(\"ba_jwks\", {\n  id: text(\"id\").primaryKey(),\n  publicKey: text(\"public_key\").notNull(),\n  privateKey: text(\"private_key\").notNull(),\n  createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n  expiresAt: timestamp(\"expires_at\", { withTimezone: true }),\n  alg: text(\"alg\"),\n  crv: text(\"crv\"),\n});\n\nexport const apikey = pgTable(\n  \"ba_apikey\",\n  {\n    id: text(\"id\").primaryKey(),\n    configId: text(\"config_id\").notNull().default(\"default\"),\n    name: text(\"name\"),\n    start: text(\"start\"),\n    referenceId: text(\"reference_id\").notNull(),\n    prefix: text(\"prefix\"),\n    key: text(\"key\").notNull(),\n    refillInterval: integer(\"refill_interval\"),\n    refillAmount: integer(\"refill_amount\"),\n    lastRefillAt: timestamp(\"last_refill_at\", { withTimezone: true }),\n    enabled: boolean(\"enabled\").default(true),\n    rateLimitEnabled: boolean(\"rate_limit_enabled\").default(true),\n    rateLimitTimeWindow: integer(\"rate_limit_time_window\").default(86400000),\n    rateLimitMax: integer(\"rate_limit_max\").default(10),\n    requestCount: integer(\"request_count\").default(0),\n    remaining: integer(\"remaining\"),\n    lastRequest: timestamp(\"last_request\", { withTimezone: true }),\n    expiresAt: timestamp(\"expires_at\", { withTimezone: true }),\n    createdAt: timestamp(\"created_at\", { withTimezone: true }).notNull(),\n    updatedAt: timestamp(\"updated_at\", { withTimezone: true }).notNull(),\n    permissions: text(\"permissions\"),\n    metadata: text(\"metadata\"),\n  },\n  (t) => [\n    index(\"ba_apikey_config_id_idx\").on(t.configId),\n    index(\"ba_apikey_reference_id_idx\").on(t.referenceId),\n    index(\"ba_apikey_key_idx\").on(t.key),\n  ],\n);\n"],"mappings":";;AAgBA,MAAa,OAAO,QAAQ,WAAW;CACrC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,eAAe,QAAQ,gBAAgB,CAAC,CACrC,iBAAiB,KAAK,CAAC,CACvB,QAAQ;CACX,OAAO,KAAK,OAAO;CACnB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,iCAAiB,IAAI,KAAK,CAAC,CAAC,CAC5B,QAAQ;CACX,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,iCAAiB,IAAI,KAAK,CAAC,CAAC,CAC5B,QAAQ;AACb,CAAC;AAED,MAAa,UAAU,QAAQ,cAAc;CAC3C,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,KAAK,YAAY;CAC5B,WAAW,KAAK,YAAY;CAC5B,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CAEpD,sBAAsB,KAAK,wBAAwB;AACrD,CAAC;AAED,MAAa,UAAU,QAAQ,cAAc;CAC3C,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,KAAK,YAAY,CAAC,CAAC,QAAQ;CACtC,YAAY,KAAK,aAAa,CAAC,CAAC,QAAQ;CACxC,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,aAAa,KAAK,cAAc;CAChC,cAAc,KAAK,eAAe;CAClC,SAAS,KAAK,UAAU;CACxB,sBAAsB,UAAU,2BAA2B,EAAE,cAAc,KAAK,CAAC;CACjF,uBAAuB,UAAU,4BAA4B,EAAE,cAAc,KAAK,CAAC;CACnF,OAAO,KAAK,OAAO;CACnB,UAAU,KAAK,UAAU;CACzB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAED,MAAa,eAAe,QAAQ,mBAAmB;CACrD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,YAAY,KAAK,YAAY,CAAC,CAAC,QAAQ;CACvC,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,iCAAiB,IAAI,KAAK,CAAC;CACtF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,iCAAiB,IAAI,KAAK,CAAC;AACxF,CAAC;AAID,MAAa,eAAe,QAAQ,mBAAmB;CACrD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACpC,MAAM,KAAK,MAAM;CACjB,UAAU,KAAK,UAAU;CACzB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAC3D,CAAC;AAED,MAAa,SAAS,QAAQ,aAAa;CACzC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,gBAAgB,KAAK,iBAAiB,CAAC,CACpC,QAAQ,CAAC,CACT,iBAAiB,aAAa,IAAI,EAAE,UAAU,UAAU,CAAC;CAC5D,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,QAAQ;CAC7C,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAED,MAAa,aAAa,QAAQ,iBAAiB;CACjD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,gBAAgB,KAAK,iBAAiB,CAAC,CACpC,QAAQ,CAAC,CACT,iBAAiB,aAAa,IAAI,EAAE,UAAU,UAAU,CAAC;CAC5D,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,QAAQ,KAAK,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,SAAS;CAClD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,KAAK,YAAY,CAAC,CAC1B,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAKD,MAAa,cAAc,QACzB,mBACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,UAAU,KAAK,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CAC7C,cAAc,KAAK,eAAe;CAClC,mBAAmB,KAAK,qBAAqB;CAC7C,UAAU,QAAQ,UAAU,CAAC,CAAC,QAAQ,KAAK;CAC3C,aAAa,QAAQ,cAAc;CACnC,kBAAkB,QAAQ,oBAAoB;CAC9C,aAAa,KAAK,cAAc;CAChC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;CAC7B,yBAAyB,KAAK,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;CAC7E,QAAQ,KAAK,SAAS,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACzE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,MAAM,KAAK,MAAM;CACjB,KAAK,KAAK,KAAK;CACf,MAAM,KAAK,MAAM;CACjB,UAAU,KAAK,UAAU,CAAC,CAAC,MAAM;CACjC,KAAK,KAAK,KAAK;CACf,QAAQ,KAAK,QAAQ;CACrB,YAAY,KAAK,aAAa;CAC9B,iBAAiB,KAAK,kBAAkB;CACxC,mBAAmB,KAAK,oBAAoB;CAC5C,cAAc,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;CACpD,wBAAwB,KAAK,2BAA2B,CAAC,CAAC,MAAM;CAChE,sBAAsB,KAAK,wBAAwB;CACnD,kCAAkC,QAAQ,qCAAqC;CAC/E,yBAAyB,KAAK,4BAA4B;CAC1D,iBAAiB,KAAK,kBAAkB;CACxC,MAAM,KAAK,MAAM;CACjB,SAAS,KAAK,UAAU;CACxB,YAAY,KAAK,aAAa,CAAC,CAAC,MAAM;CACtC,eAAe,KAAK,gBAAgB,CAAC,CAAC,MAAM;CAC5C,aAAa,QAAQ,cAAc;CACnC,uBAAuB,QAAQ,0BAA0B,CAAC,CAAC,QAAQ,KAAK;CACxE,aAAa,KAAK,cAAc;CAChC,UAAU,MAAM,UAAU;AAC5B,IACC,MAAM,CAAC,MAAM,6BAA6B,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAC3D;AAEA,MAAa,oBAAoB,QAC/B,0BACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CACtC,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,UAAU,EAAE,UAAU,UAAU,CAAC;CACjE,WAAW,KAAK,YAAY,CAAC,CAAC,iBAAiB,QAAQ,IAAI,EAAE,UAAU,WAAW,CAAC;CACnF,QAAQ,KAAK,SAAS,CAAC,CACpB,QAAQ,CAAC,CACT,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACpD,aAAa,KAAK,cAAc;CAChC,qBAAqB,KAAK,uBAAuB;CACjD,WAAW,KAAK,WAAW,CAAC,CAAC,MAAM;CACnC,yBAAyB,KAAK,4BAA4B,CAAC,CAAC,MAAM;CAClE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,SAAS,UAAU,WAAW,EAAE,cAAc,KAAK,CAAC;CACpD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,wBAAwB,KAAK,0BAA0B;CACvD,yBAAyB,UAAU,8BAA8B,EAAE,cAAc,KAAK,CAAC;CACvF,UAAU,UAAU,aAAa,EAAE,cAAc,KAAK,CAAC;CACvD,cAAc,MAAM,cAAc;CAClC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;AACzC,IACC,MAAM;CACL,MAAM,sCAAsC,CAAC,CAAC,GAAG,EAAE,QAAQ;CAC3D,MAAM,uCAAuC,CAAC,CAAC,GAAG,EAAE,SAAS;CAC7D,MAAM,oCAAoC,CAAC,CAAC,GAAG,EAAE,MAAM;CACvD,MAAM,kDAAkD,CAAC,CAAC,GAAG,EAAE,mBAAmB;AACpF,CACF;AAEA,MAAa,mBAAmB,QAC9B,yBACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,OAAO,KAAK,OAAO,CAAC,CAAC,OAAO;CAC5B,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,UAAU,EAAE,UAAU,UAAU,CAAC;CACjE,WAAW,KAAK,YAAY,CAAC,CAAC,iBAAiB,QAAQ,IAAI,EAAE,UAAU,WAAW,CAAC;CACnF,QAAQ,KAAK,SAAS,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACzE,aAAa,KAAK,cAAc;CAChC,qBAAqB,KAAK,uBAAuB;CACjD,WAAW,KAAK,WAAW,CAAC,CAAC,MAAM;CACnC,yBAAyB,KAAK,4BAA4B,CAAC,CAAC,MAAM;CAClE,WAAW,KAAK,YAAY,CAAC,CAAC,iBAAiB,kBAAkB,IAAI,EAAE,UAAU,UAAU,CAAC;CAC5F,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,SAAS,UAAU,WAAW,EAAE,cAAc,KAAK,CAAC;CACpD,cAAc,MAAM,cAAc;CAClC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;AACzC,IACC,MAAM;CACL,MAAM,qCAAqC,CAAC,CAAC,GAAG,EAAE,QAAQ;CAC1D,MAAM,sCAAsC,CAAC,CAAC,GAAG,EAAE,SAAS;CAC5D,MAAM,mCAAmC,CAAC,CAAC,GAAG,EAAE,MAAM;CACtD,MAAM,sCAAsC,CAAC,CAAC,GAAG,EAAE,SAAS;CAC5D,MAAM,iDAAiD,CAAC,CAAC,GAAG,EAAE,mBAAmB;AACnF,CACF;AAEA,MAAa,eAAe,QAC1B,oBACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,UAAU,EAAE,UAAU,UAAU,CAAC;CACjE,QAAQ,KAAK,SAAS,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;CACzE,aAAa,KAAK,cAAc;CAChC,WAAW,KAAK,WAAW,CAAC,CAAC,MAAM;CACnC,yBAAyB,KAAK,4BAA4B,CAAC,CAAC,MAAM;CAClE,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ;CACvC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAC3D,IACC,MAAM,CACL,MAAM,gCAAgC,CAAC,CAAC,GAAG,EAAE,QAAQ,GACrD,MAAM,8BAA8B,CAAC,CAAC,GAAG,EAAE,MAAM,CACnD,CACF;AAEA,MAAa,gBAAgB,QAAQ,qBAAqB;CACxD,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,YAAY,KAAK,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO;CAChD,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,gBAAgB,QAAQ,kBAAkB;CAC1C,iBAAiB,QAAQ,mBAAmB;CAC5C,kBAAkB,KAAK,mBAAmB;CAC1C,cAAc,KAAK,gBAAgB;CACnC,eAAe,KAAK,gBAAgB,CAAC,CAAC,MAAM;CAC5C,cAAc,MAAM,eAAe;CACnC,+BAA+B,QAAQ,mCAAmC,CAAC,CAAC,QAAQ,KAAK;CACzF,UAAU,QAAQ,UAAU,CAAC,CAAC,QAAQ,KAAK;CAC3C,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,eAAe,QAAQ,gBAAgB,CAAC,CAAC,QAAQ,CAAC;CAClD,UAAU,MAAM,UAAU;AAC5B,CAAC;AAED,MAAa,sBAAsB,QACjC,4BACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,UAAU,KAAK,WAAW,CAAC,CACxB,QAAQ,CAAC,CACT,iBAAiB,YAAY,UAAU,EAAE,UAAU,UAAU,CAAC;CACjE,YAAY,KAAK,aAAa,CAAC,CAC5B,QAAQ,CAAC,CACT,iBAAiB,cAAc,YAAY,EAAE,UAAU,UAAU,CAAC;CACrE,UAAU,MAAM,UAAU;CAC1B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAC3D,IACC,MAAM;CACL,MAAM,wCAAwC,CAAC,CAAC,GAAG,EAAE,QAAQ;CAC7D,MAAM,0CAA0C,CAAC,CAAC,GAAG,EAAE,UAAU;CACjE,YAAY,+CAA+C,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU;AAC1F,CACF;AAEA,MAAa,uBAAuB,QAAQ,6BAA6B;CACvE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;AACrE,CAAC;AAGD,MAAa,OAAO,QAAQ,WAAW;CACrC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,WAAW,KAAK,YAAY,CAAC,CAAC,QAAQ;CACtC,YAAY,KAAK,aAAa,CAAC,CAAC,QAAQ;CACxC,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,KAAK,KAAK,KAAK;CACf,KAAK,KAAK,KAAK;AACjB,CAAC;AAED,MAAa,SAAS,QACpB,aACA;CACE,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;CAC1B,UAAU,KAAK,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,SAAS;CACvD,MAAM,KAAK,MAAM;CACjB,OAAO,KAAK,OAAO;CACnB,aAAa,KAAK,cAAc,CAAC,CAAC,QAAQ;CAC1C,QAAQ,KAAK,QAAQ;CACrB,KAAK,KAAK,KAAK,CAAC,CAAC,QAAQ;CACzB,gBAAgB,QAAQ,iBAAiB;CACzC,cAAc,QAAQ,eAAe;CACrC,cAAc,UAAU,kBAAkB,EAAE,cAAc,KAAK,CAAC;CAChE,SAAS,QAAQ,SAAS,CAAC,CAAC,QAAQ,IAAI;CACxC,kBAAkB,QAAQ,oBAAoB,CAAC,CAAC,QAAQ,IAAI;CAC5D,qBAAqB,QAAQ,wBAAwB,CAAC,CAAC,QAAQ,KAAQ;CACvE,cAAc,QAAQ,gBAAgB,CAAC,CAAC,QAAQ,EAAE;CAClD,cAAc,QAAQ,eAAe,CAAC,CAAC,QAAQ,CAAC;CAChD,WAAW,QAAQ,WAAW;CAC9B,aAAa,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;CAC7D,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;CACzD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ;CACnE,aAAa,KAAK,aAAa;CAC/B,UAAU,KAAK,UAAU;AAC3B,IACC,MAAM;CACL,MAAM,yBAAyB,CAAC,CAAC,GAAG,EAAE,QAAQ;CAC9C,MAAM,4BAA4B,CAAC,CAAC,GAAG,EAAE,WAAW;CACpD,MAAM,mBAAmB,CAAC,CAAC,GAAG,EAAE,GAAG;AACrC,CACF"}