dorkos 0.124.0 → 0.124.1

package/dist/bin/cli.js

@@ -729,8 +729,8 @@ function uint8ArrayToBase64(bytes) {
   }
   return btoa(binaryString);
 }
-function base64urlToUint8Array(base64url4) {
-  const base644 = base64url4.replace(/-/g, "+").replace(/_/g, "/");
+function base64urlToUint8Array(base64url5) {
+  const base644 = base64url5.replace(/-/g, "+").replace(/_/g, "/");
   const padding = "=".repeat((4 - base644.length % 4) % 4);
   return base64ToUint8Array(base644 + padding);
 }
@@ -22045,7 +22045,19 @@ var init_claude_accounts = __esm({
        * such field, and every reader (`readProjectRootList`) treats that as "any
        * project". The `'0.93.0'` migration still writes `null` onto stored rows.
        */
-      onlyProjects: TolerantProjectRootListSchema.optional()
+      onlyProjects: TolerantProjectRootListSchema.optional(),
+      /**
+       * `true` when a person said never to move agents to this account on their
+       * own: a room seat whose account runs out skips it, though a person may
+       * still move a seat to it by naming it. Absent or `false` means it may be
+       * picked, which is how every account behaved before the flag existed.
+       *
+       * Optional rather than defaulted, for the reason `onlyProjects` is: rows are
+       * shared with flow and written by hand, so most carry no such field. A
+       * value that is not a boolean reads as absent rather than failing the
+       * config. The `'0.124.1'` migration sets it on one account.
+       */
+      noAutoMove: external_exports.boolean().optional().catch(void 0)
     });
     ClaudeCodeAccountsSchema = external_exports.preprocess(
       backfillMissingAccountIds,
@@ -26383,6 +26395,11 @@ var init_links = __esm({
       docs: "https://dorkos.ai/docs",
       /** The origin of the DorkOS Cloud `/v1` API, which the website does not serve. */
       cloudApi: "https://cloud.dorkos.ai",
+      /**
+       * The approve page: where an approvals passkey is made and used, and the
+       * relying party it belongs to. Its own origin, never the site's or Cloud's.
+       */
+      approve: "https://approve.dorkos.ai",
       /** The DorkOS app repository, as `owner/repo`. */
       repoSlug: `${GITHUB_ORG}/dorkos`,
       /** The DorkOS app repository on GitHub. */
@@ -26773,7 +26790,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.124.0";
+  if (true) return "0.124.1";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -39644,9 +39661,9 @@ function preserveWidenedLeaves(skewed, keyPath, next) {
   for (const leaf of skewed) {
     if (leaf.path !== keyPath && !leaf.path.startsWith(`${keyPath}.`)) continue;
     const rest = relativeSegments(keyPath, leaf.path);
-    const written = rest.length === 0 ? result2 : valueAt(result2, rest);
-    if (written === MISSING) continue;
-    if (!isDeepStrictEqual2(written, leaf.used)) continue;
+    const written2 = rest.length === 0 ? result2 : valueAt(result2, rest);
+    if (written2 === MISSING) continue;
+    if (!isDeepStrictEqual2(written2, leaf.used)) continue;
     result2 = rest.length === 0 ? leaf.stored : withPath(result2, rest, leaf.stored);
   }
   return result2;
@@ -40778,10 +40795,31 @@ function raiseEngagedWindowDefaults(store) {
   const posts = store.get("rooms.engagedWindowPosts");
   if (posts === 5 || posts === void 0) store.set("rooms.engagedWindowPosts", 15);
 }
+function keepAccountOutOfAutoMoves(store) {
+  const runtimes = store.get("runtimes");
+  if (!runtimes || typeof runtimes !== "object" || Array.isArray(runtimes)) return;
+  const block = runtimes.claudeCode;
+  if (!block || typeof block !== "object" || Array.isArray(block)) return;
+  const accounts = block.accounts;
+  if (!Array.isArray(accounts)) return;
+  const index2 = accounts.findIndex(
+    (row2) => !!row2 && typeof row2 === "object" && row2.id === KEPT_FROM_AUTO_MOVES_ACCOUNT_ID
+  );
+  if (index2 === -1 || "noAutoMove" in accounts[index2]) return;
+  const rows = accounts.map(
+    (row2, at) => at === index2 ? { ...row2, noAutoMove: true } : row2
+  );
+  store.set("runtimes", {
+    ...runtimes,
+    claudeCode: { ...block, accounts: rows }
+  });
+}
+var KEPT_FROM_AUTO_MOVES_ACCOUNT_ID;
 var init_v0_90_onward = __esm({
   "../../apps/server/src/services/core/config-migrations/v0-90-onward.ts"() {
     "use strict";
     init_config_schema();
+    KEPT_FROM_AUTO_MOVES_ACCOUNT_ID = "claude-ab1";
   }
 });
 
@@ -41476,7 +41514,14 @@ var init_config_migrations = __esm({
       // Writes `runtimes.claudeCode.maxWarmProcesses: null` where the stored
       // section lacks it, and touches nothing else (DOR-3012). See
       // `seedMaxWarmProcesses`.
-      "0.123.0": seedMaxWarmProcesses
+      "0.123.0": seedMaxWarmProcesses,
+      // v0.124.0 is the newest tag, and this ships in the 0.124.1 patch, so it
+      // opens 0.124.1. Frozen from merge; anything further opens `'0.125.0'`.
+      //
+      // Sets `noAutoMove: true` on one registered Claude account row that lacks
+      // the field, and touches nothing else (Re-seat P0). See
+      // `keepAccountOutOfAutoMoves`; the history line it owes is written at boot.
+      "0.124.1": keepAccountOutOfAutoMoves
     };
   }
 });
@@ -41540,6 +41585,7 @@ __export(config_manager_exports, {
   dropTunnelPasscodeAndSessionSecret: () => dropTunnelPasscodeAndSessionSecret,
   generalizeTelemetryConsent: () => generalizeTelemetryConsent,
   initConfigManager: () => initConfigManager,
+  keepAccountOutOfAutoMoves: () => keepAccountOutOfAutoMoves,
   migrateClaudeAccountRegistry: () => migrateClaudeAccountRegistry,
   migrateSidebarMembersToItemRefs: () => migrateSidebarMembersToItemRefs,
   migrateSidebarSectionPrefs: () => migrateSidebarSectionPrefs,
@@ -52075,7 +52121,10 @@ function chatModeWord(modeId) {
   if (modeId === null) return "the default";
   return CHAT_MODE_WORD[modeId] ?? modeId;
 }
-var PermissionStateSchema, PermissionAreaIdSchema, PermissionPresetSchema, PermissionActionIdSchema, PermissionOverridesSchema, PermissionStopSchema, AgentPermissionsSchema, PERMISSION_SOURCES, PermissionSourceSchema, PermissionLayerSchema, ResolvedPermissionSchema, PERMISSION_SURFACES, PermissionSurfaceSchema, PermissionAttributionSchema, PermissionChangeTargetSchema, PermissionChangeKeySchema, PermissionChangeSchema, PermissionChangedMetadataSchema, PERMISSION_ANSWERS, PermissionAnsweredMetadataSchema, PermissionSuggestionDismissedMetadataSchema, PermissionSuggestionRestoredMetadataSchema, ALWAYS_SUGGESTION_WINDOW_MS, CHAT_MODE_WORD;
+function autoMoveWord(value) {
+  return value === KEPT_FROM_AUTO_MOVES ? "Move agents here automatically turned off" : "Move agents here automatically turned on";
+}
+var PermissionStateSchema, PermissionAreaIdSchema, PermissionPresetSchema, PermissionActionIdSchema, PermissionOverridesSchema, PermissionStopSchema, AgentPermissionsSchema, PERMISSION_SOURCES, PermissionSourceSchema, PermissionLayerSchema, ResolvedPermissionSchema, PERMISSION_SURFACES, PermissionSurfaceSchema, PermissionAttributionSchema, PermissionChangeTargetSchema, PermissionChangeKeySchema, PermissionChangeSchema, PermissionChangedMetadataSchema, PERMISSION_ANSWERS, PermissionAnsweredMetadataSchema, PermissionSuggestionDismissedMetadataSchema, PermissionSuggestionRestoredMetadataSchema, ALWAYS_SUGGESTION_WINDOW_MS, CHAT_MODE_WORD, KEPT_FROM_AUTO_MOVES;
 var init_permission_schemas = __esm({
   "../shared/src/permissions/permission-schemas.ts"() {
     "use strict";
@@ -52158,7 +52207,20 @@ var init_permission_schemas = __esm({
        * `after` are mode ids). Recorded under the chat's agent; only the one-time
        * raise of existing chats writes it (DOR-3107), and its Undo sets each chat back.
        */
-      external_exports.object({ kind: external_exports.literal("chat"), sessionId: external_exports.string() })
+      external_exports.object({ kind: external_exports.literal("chat"), sessionId: external_exports.string() }),
+      /**
+       * Whether one Claude account is kept out of automatic moves (its
+       * `noAutoMove` flag): `before` and `after` are `'on'` (kept out) or `null`
+       * (may be picked). Recorded for everyone, by the upgrade that keeps an
+       * account out and by the Settings switch (`PUT /api/runtimes/claude-code/
+       * accounts/:id/no-auto-move`); its Undo flips the flag back.
+       */
+      external_exports.object({
+        kind: external_exports.literal("account"),
+        accountId: external_exports.string(),
+        /** What the person calls the account, for the history's sentence. */
+        accountName: external_exports.string()
+      })
     ]);
     PermissionChangeSchema = external_exports.object({
       target: PermissionChangeTargetSchema,
@@ -52236,6 +52298,7 @@ var init_permission_schemas = __esm({
       dontAsk: "Never ask",
       bypassPermissions: "Full autonomy"
     };
+    KEPT_FROM_AUTO_MOVES = "on";
   }
 });
 
@@ -53360,7 +53423,7 @@ var init_capabilities = __esm({
 });
 
 // ../shared/src/project-schemas.ts
-var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema;
+var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema, NoAutoMoveSchema;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
     "use strict";
@@ -53467,6 +53530,10 @@ var init_project_schemas = __esm({
       /** The projects the account is now kept to, or null for any project. */
       onlyProjects: external_exports.array(ProjectRefSchema).nullable()
     }).openapi("OnlyProjectsResponse");
+    NoAutoMoveSchema = external_exports.object({
+      /** `true` to keep agents off the account in automatic moves, `false` to allow them. */
+      noAutoMove: external_exports.boolean()
+    }).openapi("NoAutoMove");
   }
 });
 
@@ -53747,7 +53814,6 @@ var init_account_usage_codex = __esm({
 var LEDGER_RUNTIMES, LEDGER_SOURCES, RateLimitStatusSchema, ISO_TIME_PATTERN, IsoTimeSchema, LedgerSourceSchema, LedgerEntrySchema, WINDOW_KEY_PATTERN, LedgerPlanSchema, LedgerCreditsSchema, LedgerSpendSchema, UsageLedgerSchema, MINUTE_MS, HOUR_MS, FIVE_HOUR_MS, SEVEN_DAY_MS, MAX_FUTURE_SKEW_MS, AccountUsageSchema, LimitResolutionSchema, LimitHistoryEntrySchema, LimitHistoryResponseSchema, FoundClaudeFolderSchema, DismissFoundFolderRequestSchema;
 var init_account_usage = __esm({
   "../shared/src/account-usage.ts"() {
-    "use strict";
     init_zod();
     init_zod_openapi();
     init_ledger_slug();
@@ -56534,6 +56600,9 @@ var init_schemas4 = __esm({
             }),
             onlyProjects: external_exports.array(ProjectRefSchema).nullable().optional().openapi({
               description: 'The projects this account may work in ("Only for client-app"), or null for any project (spec flow-multiproject \xA78). Change it with PUT /api/runtimes/claude-code/accounts/:id/only-projects, never by writing it back through PATCH /api/config. Absent on a server too old to report it'
+            }),
+            noAutoMove: external_exports.boolean().optional().openapi({
+              description: "True when DorkOS never moves a room agent to this account on its own (a person still may). Absent otherwise, and on a server too old to report it. Change it with PUT /api/runtimes/claude-code/accounts/:id/no-auto-move"
             })
           })
         ).openapi({ description: "The Claude accounts the operator has registered" }),
@@ -62951,9 +63020,9 @@ var init_is_api_error = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/is-api-error.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/is-api-error.mjs
 var init_is_api_error2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/is-api-error.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/is-api-error.mjs"() {
     init_is_api_error();
   }
 });
@@ -63105,7 +63174,7 @@ var init_api2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/wildcard.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/wildcard.mjs
 function escapeRegExpChar(char) {
   if (char === "-" || char === "^" || char === "$" || char === "+" || char === "." || char === "(" || char === ")" || char === "|" || char === "[" || char === "]" || char === "{" || char === "}" || char === "*" || char === "?" || char === "\\") return `\\${char}`;
   else return char;
@@ -63185,7 +63254,7 @@ function wildcardMatch(pattern, options) {
   return fn;
 }
 var init_wildcard = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/wildcard.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/wildcard.mjs"() {
   }
 });
 
@@ -63464,7 +63533,7 @@ var init_env3 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/url.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/url.mjs
 function isLoopbackForDevScheme(host) {
   const hostname4 = host.replace(/:\d+$/, "").replace(/^\[|\]$/g, "").toLowerCase();
   return hostname4 === "localhost" || hostname4.endsWith(".localhost") || hostname4 === "::1" || hostname4.startsWith("127.");
@@ -63621,7 +63690,7 @@ function resolveBaseURL(config3, basePath, source, loadEnv, trustedProxyHeaders)
 }
 var SLASH_CHAR_CODE, matchesHostPattern;
 var init_url = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/url.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/url.mjs"() {
     init_wildcard();
     init_env3();
     init_error2();
@@ -63636,10 +63705,10 @@ var init_url = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/auth/trusted-origins.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/auth/trusted-origins.mjs
 var CONTROL_CHARACTER_PATTERN, RELATIVE_URL_PARSER_ORIGIN, ENCODED_PATH_SEPARATOR_PATTERN, normalizePath3, parseCustomSchemeOrigin, isSafeRelativeURL, matchesOriginPattern;
 var init_trusted_origins = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/auth/trusted-origins.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/auth/trusted-origins.mjs"() {
     init_wildcard();
     init_url();
     CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f-\u009f]/;
@@ -63761,7 +63830,7 @@ var init_deprecate = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/middlewares/origin-check.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/middlewares/origin-check.mjs
 function shouldSkipCSRFForBackwardCompat(ctx) {
   return ctx.context.skipOriginCheck === true && ctx.context.options.advanced?.disableCSRFCheck === void 0;
 }
@@ -63828,7 +63897,7 @@ async function validateFormCsrf(ctx) {
 }
 var logBackwardCompatWarning, originCheckMiddleware, originCheck, formCsrfMiddleware;
 var init_origin_check = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/middlewares/origin-check.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/middlewares/origin-check.mjs"() {
     init_url();
     init_trusted_origins();
     init_error2();
@@ -64061,7 +64130,7 @@ var init_ip = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/rate-limiter/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/rate-limiter/index.mjs
 function pruneMemoryStore() {
   const now3 = Date.now();
   for (const [key, entry] of memory) if (now3 >= entry.expiresAt) memory.delete(key);
@@ -64126,10 +64195,10 @@ function getRetryAfter(lastRequest, window2) {
 }
 function createDatabaseStorageWrapper(ctx) {
   const model = "rateLimit";
-  const db = ctx.adapter;
+  const db2 = ctx.adapter;
   let longestObservedWindow = Math.max(...getConfiguredRateLimitWindows(ctx));
   const readRow = async (key) => {
-    const data = (await db.findMany({
+    const data = (await db2.findMany({
       model,
       where: [{
         field: "key",
@@ -64145,7 +64214,7 @@ function createDatabaseStorageWrapper(ctx) {
     const data = await readRow(key);
     const now3 = Date.now();
     if (!data) try {
-      await db.create({
+      await db2.create({
         model,
         data: {
           key,
@@ -64162,7 +64231,7 @@ function createDatabaseStorageWrapper(ctx) {
       return consume(key, rule);
     }
     if (now3 - data.lastRequest >= windowInMs) {
-      if (await db.incrementOne({
+      if (await db2.incrementOne({
         model,
         where: [{
           field: "key",
@@ -64187,7 +64256,7 @@ function createDatabaseStorageWrapper(ctx) {
       return consume(key, rule);
     }
     const windowStart = now3 - windowInMs;
-    if (await db.incrementOne({
+    if (await db2.incrementOne({
       model,
       where: [
         {
@@ -64221,7 +64290,7 @@ function createDatabaseStorageWrapper(ctx) {
   };
   const deleteExpiredRows = async (now3) => {
     const cutoff = now3 - longestObservedWindow * 1e3;
-    await ctx.runInBackgroundOrAwait(db.deleteMany({
+    await ctx.runInBackgroundOrAwait(db2.deleteMany({
       model,
       where: [{
         field: "lastRequest",
@@ -64359,7 +64428,7 @@ function getDefaultSpecialRules() {
 }
 var memory, MEMORY_STORE_MAX_ENTRIES, ipWarningLogged, NO_TRUSTED_IP_KEY;
 var init_rate_limiter = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/rate-limiter/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/rate-limiter/index.mjs"() {
     init_wildcard();
     init_error2();
     init_ip();
@@ -64907,14 +64976,14 @@ function diffSchema(expected, actual) {
       });
       continue;
     }
-    const written = /* @__PURE__ */ new Set([table2.idColumn ?? "id", ...Object.keys(table2.fields)]);
-    for (const column of written) if (!actualTable.columns.some((candidate) => candidate.name === column)) findings.push({
+    const written2 = /* @__PURE__ */ new Set([table2.idColumn ?? "id", ...Object.keys(table2.fields)]);
+    for (const column of written2) if (!actualTable.columns.some((candidate) => candidate.name === column)) findings.push({
       kind: "missing-column",
       table: tableName,
       column
     });
     for (const column of actualTable.columns) {
-      if (written.has(column.name) || column.nullable || column.hasDefault) continue;
+      if (written2.has(column.name) || column.nullable || column.hasDefault) continue;
       findings.push({
         kind: "unexpected-required-column",
         table: tableName,
@@ -65192,26 +65261,26 @@ var init_context2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/state/oauth.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/state/oauth.mjs
 var getRawOAuthState, setOAuthState, getOAuthServerContext, setOAuthServerContext;
 var init_oauth = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/state/oauth.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/state/oauth.mjs"() {
     init_context2();
     ({ get: getRawOAuthState, set: setOAuthState } = defineRequestState(() => null));
     ({ get: getOAuthServerContext, set: setOAuthServerContext } = defineRequestState(() => null));
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/state/should-session-refresh.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/state/should-session-refresh.mjs
 var getShouldSkipSessionRefresh, setShouldSkipSessionRefresh;
 var init_should_session_refresh = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/state/should-session-refresh.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/state/should-session-refresh.mjs"() {
     init_context2();
     ({ get: getShouldSkipSessionRefresh, set: setShouldSkipSessionRefresh } = defineRequestState(() => false));
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/store-capabilities.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/store-capabilities.mjs
 function hasServerSessionStore(options) {
   return !!options.database || !!options.secondaryStorage;
 }
@@ -65222,7 +65291,7 @@ function shouldBindAccountCookieToSessionUser(options) {
   return hasServerAccountStore(options);
 }
 var init_store_capabilities = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/store-capabilities.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/store-capabilities.mjs"() {
   }
 });
 
@@ -65379,7 +65448,7 @@ var init_db2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/schema.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/schema.mjs
 function getFields(options, modelName, mode) {
   const cacheKey = `${modelName}:${mode}`;
   if (!cache.has(options)) cache.set(options, /* @__PURE__ */ new Map());
@@ -65524,7 +65593,7 @@ function mergeSchema(schema3, newSchema) {
 }
 var cache;
 var init_schema2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/schema.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/schema.mjs"() {
     init_db();
     init_error2();
     init_db2();
@@ -65532,10 +65601,10 @@ var init_schema2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/date.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/date.mjs
 var getDate;
 var init_date = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/date.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/date.mjs"() {
     getDate = (span, unit = "ms") => {
       return new Date(Date.now() + (unit === "sec" ? span * 1e3 : span));
     };
@@ -68069,7 +68138,7 @@ var init_webapi = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/jwt.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/jwt.mjs
 async function signJWT(payload, secret, expiresIn = 3600) {
   return await new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn).sign(new TextEncoder().encode(secret));
 }
@@ -68159,7 +68228,7 @@ async function symmetricDecodeJWT(token, secret, salt) {
 }
 var info, now, alg, enc, jwtDecryptOpts;
 var init_jwt = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/jwt.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/jwt.mjs"() {
     init_hkdf();
     init_sha2();
     init_webapi();
@@ -68214,7 +68283,7 @@ var init_jwt = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/cookie-utils.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/cookie-utils.mjs
 function tryDecode2(str2) {
   if (str2.indexOf("%") === -1) return str2;
   try {
@@ -68281,7 +68350,7 @@ function parseCookies2(cookie) {
 }
 var SECURE_COOKIE_PREFIX, cookieNameRegex, cookieValueRegex;
 var init_cookie_utils = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/cookie-utils.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/cookie-utils.mjs"() {
     SECURE_COOKIE_PREFIX = "__Secure-";
     cookieNameRegex = /^[\x21\x23-\x27\x2A\x2B\x2D\x2E\x30-\x39\x41-\x5A\x5E\x5F\x60\x61-\x7A\x7C\x7E]+$/;
     cookieValueRegex = /^[\x20\x21\x23-\x3A\x3C-\x5B\x5D-\x7E]*$/;
@@ -68328,7 +68397,7 @@ var init_json = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/session-store.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/session-store.mjs
 function getMaxCookieValueSize(name2, options) {
   return MAX_COOKIE_SIZE - serializeCookie(name2, "", { ...options }).length;
 }
@@ -68432,7 +68501,7 @@ async function getAccountCookie(c3) {
 }
 var MAX_COOKIE_SIZE, MAX_COOKIE_CHUNKS, storeFactory, createSessionStore, createAccountStore, getSessionQuerySchema;
 var init_session_store = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/session-store.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/session-store.mjs"() {
     init_jwt();
     init_cookie_utils();
     init_json();
@@ -68483,16 +68552,16 @@ var init_session_store = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/is-promise.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/is-promise.mjs
 function isPromise(obj) {
   return !!obj && (typeof obj === "object" || typeof obj === "function") && typeof obj.then === "function";
 }
 var init_is_promise = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/is-promise.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/is-promise.mjs"() {
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/time.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/time.mjs
 function parse3(value) {
   const match = REGEX2.exec(value);
   if (!match || match[4] && match[1]) throw new TypeError(`Invalid time string format: "${value}". Use formats like "7d", "30m", "1 hour", etc.`);
@@ -68554,7 +68623,7 @@ function sec(value) {
 }
 var SEC, MIN, HOUR, DAY, WEEK, MONTH, YEAR, REGEX2;
 var init_time = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/time.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/time.mjs"() {
     SEC = 1e3;
     MIN = SEC * 60;
     HOUR = MIN * 60;
@@ -68566,7 +68635,7 @@ var init_time = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/cache.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/cache.mjs
 function parseCookieCachePayload(value) {
   const parsed = safeJSONParse(value);
   if (parsed === null) return null;
@@ -68584,7 +68653,7 @@ function parseCompactCookieCache(value) {
 }
 var cookieCachePayloadSchema, compactCookieCacheSchema;
 var init_cache = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/cache.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/cache.mjs"() {
     init_db();
     init_env3();
     init_json();
@@ -68765,7 +68834,7 @@ var init_hmac2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/index.mjs
 function createCookieGetter(options) {
   const baseURLString = typeof options.baseURL === "string" ? options.baseURL : void 0;
   const dynamicProtocol = typeof options.baseURL === "object" && options.baseURL !== null ? options.baseURL.protocol : void 0;
@@ -68976,7 +69045,7 @@ function deleteSessionCookie(ctx, skipDontRememberMe) {
   if (!skipDontRememberMe) expireCookie(ctx, ctx.context.authCookies.dontRememberToken);
 }
 var init_cookies2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/cookies/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/cookies/index.mjs"() {
     init_url();
     init_store_capabilities();
     init_jwt();
@@ -68997,10 +69066,10 @@ var init_cookies2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/session.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/session.mjs
 var getSession, isStateful, getSessionFromCtx, getAuthoritativeSessionFromCtx, sessionMiddleware, sensitiveSessionMiddleware, requestOnlySessionMiddleware, freshSessionMiddleware, listSessions, revokeSession, revokeSessions, revokeOtherSessions;
 var init_session2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/session.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/session.mjs"() {
     init_is_api_error2();
     init_store_capabilities();
     init_schema2();
@@ -69420,7 +69489,7 @@ var init_session2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/validate-user-info.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/validate-user-info.mjs
 function assertValidUserInfoSource(source) {
   if (!source?.method) throw new APIError2("FORBIDDEN", {
     code: "validation_source_missing",
@@ -69455,7 +69524,7 @@ async function assertValidUserInfo(ctx, data) {
   });
 }
 var init_validate_user_info = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/validate-user-info.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/validate-user-info.mjs"() {
     init_error2();
   }
 });
@@ -69481,7 +69550,7 @@ var init_hash = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/verification-token-storage.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/verification-token-storage.mjs
 async function processIdentifier(identifier, option) {
   if (!option || option === "plain") return identifier;
   if (option === "hashed") return defaultKeyHasher(identifier);
@@ -69500,7 +69569,7 @@ function getStorageOption(identifier, config3) {
 }
 var defaultKeyHasher;
 var init_verification_token_storage = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/verification-token-storage.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/verification-token-storage.mjs"() {
     init_base64();
     init_hash();
     defaultKeyHasher = async (identifier) => {
@@ -71255,7 +71324,7 @@ var init_instrumentation = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/with-hooks.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/with-hooks.mjs
 function getWithHooks(adapter, ctx) {
   const withSpan3 = createWithSpan(ctx.options);
   const hooksEntries = ctx.hooks;
@@ -71494,7 +71563,7 @@ function getWithHooks(adapter, ctx) {
   };
 }
 var init_with_hooks = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/with-hooks.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/with-hooks.mjs"() {
     init_context2();
     init_instrumentation();
   }
@@ -71560,14 +71629,14 @@ var init_id2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/internal-adapter.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/internal-adapter.mjs
 function getTTLSeconds(expiresAt, now3 = Date.now()) {
   const expiresMs = typeof expiresAt === "number" ? expiresAt : expiresAt.getTime();
   return Math.max(Math.floor((expiresMs - now3) / 1e3), 0);
 }
 var createInternalAdapter;
 var init_internal_adapter = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/internal-adapter.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/internal-adapter.mjs"() {
     init_schema2();
     init_date();
     init_validate_user_info();
@@ -72733,7 +72802,7 @@ var init_host = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/helpers.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/helpers.mjs
 async function runPluginInit(context2) {
   let options = context2.options;
   const plugins = options.plugins || [];
@@ -72865,7 +72934,7 @@ async function getTrustedProviders(options, request) {
   return (await trustedProviders(request) ?? []).filter((v2) => Boolean(v2));
 }
 var init_helpers = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/helpers.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/helpers.mjs"() {
     init_url();
     init_is_promise();
     init_cookies2();
@@ -72877,7 +72946,7 @@ var init_helpers = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/account-key.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/account-key.mjs
 function toOAuthProfileRecord(profile) {
   return profile;
 }
@@ -72903,12 +72972,12 @@ async function resolveOAuthAccountKeyForAPI(provider, tokens, profile) {
   }
 }
 var init_account_key = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/account-key.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/account-key.mjs"() {
     init_error2();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/errors.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/errors.mjs
 function redirectOnError(ctx, errorURL, error63, description) {
   const params = new URLSearchParams({ error: error63 });
   if (description) params.set("error_description", description);
@@ -72920,7 +72989,7 @@ function missingEmailLogMessage(providerId, options) {
 }
 var OAUTH_CALLBACK_ERROR_CODES, HANDLING_DOCS_URL;
 var init_errors4 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/errors.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/errors.mjs"() {
     init_url2();
     OAUTH_CALLBACK_ERROR_CODES = {
       NO_CODE: "no_code",
@@ -72977,10 +73046,10 @@ var init_password_node = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/password.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/password.mjs
 var hashPassword$1, verifyPassword$1;
 var init_password = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/password.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/password.mjs"() {
     init_password_node();
     hashPassword$1 = hashPassword;
     verifyPassword$1 = async ({ hash: hash3, password }) => {
@@ -72989,10 +73058,10 @@ var init_password = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/random.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/random.mjs
 var generateRandomString;
 var init_random2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/random.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/random.mjs"() {
     init_random();
     generateRandomString = createRandomStringGenerator("a-z", "0-9", "A-Z", "-_");
   }
@@ -73905,7 +73974,7 @@ var init_chacha = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/index.mjs
 function parseEnvelope(data) {
   if (!data.startsWith(ENVELOPE_PREFIX)) return null;
   const firstSep = 4;
@@ -73934,7 +74003,7 @@ async function rawDecrypt(secret, hex4) {
 }
 var ENVELOPE_PREFIX, symmetricEncrypt, symmetricDecrypt;
 var init_crypto2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/crypto/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/crypto/index.mjs"() {
     init_random2();
     init_dist5();
     init_hash();
@@ -73962,7 +74031,7 @@ var init_crypto2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/utils.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/utils.mjs
 function isLikelyEncrypted(token) {
   if (token.startsWith("$ba$")) return true;
   return token.length % 2 === 0 && /^[0-9a-f]+$/i.test(token);
@@ -73990,12 +74059,12 @@ function getOAuthCallbackPath(provider) {
   return provider.callbackPath.startsWith("/") ? provider.callbackPath : `/${provider.callbackPath}`;
 }
 var init_utils6 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/utils.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/utils.mjs"() {
     init_crypto2();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/request.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/request.mjs
 function safeCloneRequest(request) {
   if (!request) return;
   try {
@@ -74017,11 +74086,11 @@ function safeCloneRequest(request) {
   }
 }
 var init_request = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/request.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/request.mjs"() {
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/email-verification.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/email-verification.mjs
 async function createEmailVerificationToken(secret, email3, updateTo, expiresIn = 3600, extraPayload) {
   return await signJWT({
     email: email3.toLowerCase(),
@@ -74045,7 +74114,7 @@ async function sendVerificationEmailFn(ctx, user2) {
 }
 var sendVerificationEmail, verifyEmail;
 var init_email_verification = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/email-verification.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/email-verification.mjs"() {
     init_origin_check();
     init_jwt();
     init_schema2();
@@ -75282,7 +75351,7 @@ var init_oauth2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/link-account.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/link-account.mjs
 function linkOAuthAccountFailure(code, message2) {
   return {
     linked: false,
@@ -75642,7 +75711,7 @@ async function applyUpdateUserInfoOnLink(c3, userId, userInfo) {
   }
 }
 var init_link_account = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/link-account.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/link-account.mjs"() {
     init_is_api_error2();
     init_schema2();
     init_session_store();
@@ -75657,7 +75726,7 @@ var init_link_account = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/state.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/state.mjs
 async function generateGenericState(c3, stateData, settings) {
   const state = generateRandomString(32);
   if (c3.context.oauthConfig.storeStateStrategy === "cookie") {
@@ -75754,7 +75823,7 @@ async function parseGenericState(c3, state, settings) {
 }
 var stateDataSchema, INTERNAL_STATE_KEYS, StateError;
 var init_state = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/state.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/state.mjs"() {
     init_random2();
     init_crypto2();
     init_cookies2();
@@ -75810,7 +75879,7 @@ var init_state = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/state.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/state.mjs
 function generateIdTokenNonce(provider) {
   return provider.requiresIdTokenNonce ? generateRandomString(32) : void 0;
 }
@@ -75864,7 +75933,7 @@ async function parseState(c3) {
   return parsedData;
 }
 var init_state2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/oauth2/state.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/oauth2/state.mjs"() {
     init_random2();
     init_errors4();
     init_oauth();
@@ -79205,7 +79274,7 @@ var init_social_providers = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/account.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/account.mjs
 function parseStoredScopes(scope3) {
   if (!scope3) return [];
   return scope3.split(",").map((s2) => s2.trim()).filter(Boolean);
@@ -79301,7 +79370,7 @@ async function getValidAccessToken(ctx, { resolvedUserId, selection, account: re
 }
 var listUserAccounts, linkSocialAccount, unlinkAccount, accountSelectionSchema, getAccessToken, refreshToken, accountInfo;
 var init_account2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/account.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/account.mjs"() {
     init_store_capabilities();
     init_schema2();
     init_session_store();
@@ -79794,18 +79863,18 @@ var init_account2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/hide-metadata.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/hide-metadata.mjs
 var HIDE_METADATA;
 var init_hide_metadata = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/hide-metadata.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/hide-metadata.mjs"() {
     HIDE_METADATA = { scope: "server" };
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/callback.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/callback.mjs
 var schema2, callbackOAuth;
 var init_callback = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/callback.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/callback.mjs"() {
     init_is_api_error2();
     init_cookies2();
     init_helpers();
@@ -80019,13 +80088,13 @@ var init_callback = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/error.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/error.mjs
 function sanitize(input4) {
   return input4.replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/&(?!amp;|lt;|gt;|quot;|#39;|#x[0-9a-fA-F]+;|#[0-9]+;)/g, "&amp;");
 }
 var html, error62;
 var init_error3 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/error.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/error.mjs"() {
     init_hide_metadata();
     init_env3();
     init_url2();
@@ -80410,10 +80479,10 @@ ${custom2?.disableBackgroundGrid ? "" : `
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/ok.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/ok.mjs
 var ok;
 var init_ok = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/ok.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/ok.mjs"() {
     init_hide_metadata();
     init_api2();
     ok = createAuthEndpoint("/ok", {
@@ -80441,7 +80510,7 @@ var init_ok = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/password.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/password.mjs
 function assertPasswordNotTooShort(ctx, password) {
   if (password.length < ctx.context.password.config.minPasswordLength) {
     ctx.context.logger.warn("Password is too short");
@@ -80480,12 +80549,12 @@ async function checkPassword(userId, c3) {
   return true;
 }
 var init_password2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/password.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/password.mjs"() {
     init_error2();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/password.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/password.mjs
 function redirectError(ctx, callbackURL, query) {
   const url2 = callbackURL ? new URL(callbackURL, ctx.baseURL) : new URL(`${ctx.baseURL}/error`);
   if (query) Object.entries(query).forEach(([k2, v2]) => url2.searchParams.set(k2, v2));
@@ -80498,7 +80567,7 @@ function redirectCallback(ctx, callbackURL, query) {
 }
 var requestPasswordReset, requestPasswordResetCallback, resetPassword, verifyPassword2;
 var init_password3 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/password.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/password.mjs"() {
     init_origin_check();
     init_date();
     init_session2();
@@ -80690,10 +80759,10 @@ var init_password3 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/sign-in.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/sign-in.mjs
 var socialSignInBodySchema, signInSocial, signInEmail;
 var init_sign_in = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/sign-in.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/sign-in.mjs"() {
     init_origin_check();
     init_schema2();
     init_cookies2();
@@ -81064,10 +81133,10 @@ var init_sign_in = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/sign-out.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/sign-out.mjs
 var signOutBodySchema, signOutResponse, signOut;
 var init_sign_out = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/sign-out.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/sign-out.mjs"() {
     init_cookies2();
     init_api2();
     init_zod();
@@ -81164,10 +81233,10 @@ var init_sign_out = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/sign-up.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/sign-up.mjs
 var signUpEmailBodySchema, signUpEmail;
 var init_sign_up = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/sign-up.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/sign-up.mjs"() {
     init_is_api_error2();
     init_origin_check();
     init_schema2();
@@ -81424,10 +81493,10 @@ var init_sign_up = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/update-session.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/update-session.mjs
 var updateSessionBodySchema, updateSession;
 var init_update_session = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/update-session.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/update-session.mjs"() {
     init_schema2();
     init_cookies2();
     init_session2();
@@ -81485,10 +81554,10 @@ var init_update_session = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/update-user.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/update-user.mjs
 var updateUserBodySchema, updateUser, changePassword, setPassword, deleteUser, deleteUserCallback, changeEmail;
 var init_update_user = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/routes/update-user.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/routes/update-user.mjs"() {
     init_origin_check();
     init_schema2();
     init_random2();
@@ -81984,7 +82053,7 @@ var init_update_user = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/dispatch.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/dispatch.mjs
 function getOperationId(endpoint, fallback) {
   const opts = endpoint.options;
   return opts?.operationId ?? opts?.metadata?.openapi?.operationId ?? fallback ?? endpoint.path ?? "/:virtual";
@@ -82209,7 +82278,7 @@ async function dispatchAuthEndpoint(endpoint, input4) {
 }
 var defuReplaceArrays, hooksSourceWeakMap;
 var init_dispatch = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/dispatch.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/dispatch.mjs"() {
     init_is_api_error2();
     init_url();
     init_context2();
@@ -82228,7 +82297,7 @@ var init_dispatch = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/to-auth-endpoints.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/to-auth-endpoints.mjs
 async function resolveDynamicContext(rawCtx, input4) {
   if (rawCtx.baseURL) return rawCtx;
   const source = pickSource(input4);
@@ -82268,7 +82337,7 @@ function toAuthEndpoints(endpoints, ctx) {
   return api;
 }
 var init_to_auth_endpoints = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/to-auth-endpoints.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/to-auth-endpoints.mjs"() {
     init_url();
     init_helpers();
     init_dispatch();
@@ -82277,7 +82346,7 @@ var init_to_auth_endpoints = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/index.mjs
 function checkEndpointConflicts(options, logger3) {
   const endpointRegistry = /* @__PURE__ */ new Map();
   options.plugins?.forEach((plugin) => {
@@ -82402,7 +82471,7 @@ function getEndpoints(ctx, options) {
 }
 var router;
 var init_api4 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/api/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/api/index.mjs"() {
     init_is_api_error2();
     init_origin_check();
     init_rate_limiter();
@@ -83950,7 +84019,7 @@ var init_dist9 = __esm({
   "../../node_modules/.pnpm/@better-auth+memory-adapter@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@bet_1600a9e00f6d9d30808485fc05650e7d/node_modules/@better-auth/memory-adapter/dist/index.mjs"() {
     init_adapter();
     init_env3();
-    memoryAdapter = (db, config3) => {
+    memoryAdapter = (db2, config3) => {
       let lazyOptions = null;
       const buildAdapterFactory = (activeDb2) => createAdapterFactory({
         config: {
@@ -84184,7 +84253,7 @@ var init_dist9 = __esm({
           };
         }
       });
-      const adapterCreator = buildAdapterFactory(db);
+      const adapterCreator = buildAdapterFactory(db2);
       return (options) => {
         lazyOptions = options;
         return adapterCreator(options);
@@ -84193,7 +84262,7 @@ var init_dist9 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/adapter-base.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/adapter-base.mjs
 async function getBaseAdapter(options, handleDirectDatabase) {
   let adapter;
   if (!options.database) {
@@ -84215,7 +84284,7 @@ async function getBaseAdapter(options, handleDirectDatabase) {
   return adapter;
 }
 var init_adapter_base = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/adapter-base.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/adapter-base.mjs"() {
     init_db();
     init_env3();
   }
@@ -99240,8 +99309,8 @@ var init_kysely = __esm({
       async execute(callback, options) {
         return this.#props.executor.provideConnection(async (connection) => {
           const executor = this.#props.executor.withConnectionProvider(new SingleConnectionProvider(connection));
-          const db = new Kysely({ ...this.#props, executor });
-          return await callback(db);
+          const db2 = new Kysely({ ...this.#props, executor });
+          return await callback(db2);
         }, freeze({ signal: options?.signal }));
       }
     };
@@ -101437,8 +101506,8 @@ var init_sqlite_driver = __esm({
     };
     SqliteConnection = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       async executeQuery(compiledQuery) {
         const { sql: sql3, parameters } = compiledQuery;
@@ -101534,8 +101603,8 @@ var init_sqlite_introspector = __esm({
     init_sql();
     SqliteIntrospector = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       async getSchemas() {
         return [];
@@ -101643,8 +101712,8 @@ var init_sqlite_dialect = __esm({
       createAdapter() {
         return new SqliteAdapter();
       }
-      createIntrospector(db) {
-        return new SqliteIntrospector(db);
+      createIntrospector(db2) {
+        return new SqliteIntrospector(db2);
       }
     };
   }
@@ -101985,8 +102054,8 @@ var init_mysql_introspector = __esm({
     init_sql();
     MysqlIntrospector = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       async getSchemas() {
         let rawSchemas = await this.#db.selectFrom("information_schema.schemata").select("schema_name").$castTo().execute();
@@ -102054,11 +102123,11 @@ var init_mysql_adapter = __esm({
       get supportsReturning() {
         return false;
       }
-      async acquireMigrationLock(db, _opt) {
-        await sql`select get_lock(${sql.lit(LOCK_ID)}, ${sql.lit(LOCK_TIMEOUT_SECONDS)})`.execute(db);
+      async acquireMigrationLock(db2, _opt) {
+        await sql`select get_lock(${sql.lit(LOCK_ID)}, ${sql.lit(LOCK_TIMEOUT_SECONDS)})`.execute(db2);
       }
-      async releaseMigrationLock(db, _opt) {
-        await sql`select release_lock(${sql.lit(LOCK_ID)})`.execute(db);
+      async releaseMigrationLock(db2, _opt) {
+        await sql`select release_lock(${sql.lit(LOCK_ID)})`.execute(db2);
       }
     };
   }
@@ -102086,8 +102155,8 @@ var init_mysql_dialect = __esm({
       createAdapter() {
         return new MysqlAdapter();
       }
-      createIntrospector(db) {
-        return new MysqlIntrospector(db);
+      createIntrospector(db2) {
+        return new MysqlIntrospector(db2);
       }
     };
   }
@@ -102274,8 +102343,8 @@ var init_postgres_introspector = __esm({
     init_sql();
     PostgresIntrospector = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       async getSchemas() {
         let rawSchemas = await this.#db.selectFrom("pg_catalog.pg_namespace").select("nspname").$castTo().execute();
@@ -102370,8 +102439,8 @@ var init_postgres_adapter = __esm({
       get supportsReturning() {
         return true;
       }
-      async acquireMigrationLock(db, _opt) {
-        await sql`select pg_advisory_xact_lock(${sql.lit(LOCK_ID2)})`.execute(db);
+      async acquireMigrationLock(db2, _opt) {
+        await sql`select pg_advisory_xact_lock(${sql.lit(LOCK_ID2)})`.execute(db2);
       }
       async releaseMigrationLock(_db, _opt) {
       }
@@ -102401,8 +102470,8 @@ var init_postgres_dialect = __esm({
       createAdapter() {
         return new PostgresAdapter();
       }
-      createIntrospector(db) {
-        return new PostgresIntrospector(db);
+      createIntrospector(db2) {
+        return new PostgresIntrospector(db2);
       }
     };
   }
@@ -102425,8 +102494,8 @@ var init_mssql_adapter = __esm({
       get supportsOutput() {
         return true;
       }
-      async acquireMigrationLock(db) {
-        await sql`exec sp_getapplock @DbPrincipal = ${sql.lit("dbo")}, @Resource = ${sql.lit(DEFAULT_MIGRATION_TABLE)}, @LockMode = ${sql.lit("Exclusive")}`.execute(db);
+      async acquireMigrationLock(db2) {
+        await sql`exec sp_getapplock @DbPrincipal = ${sql.lit("dbo")}, @Resource = ${sql.lit(DEFAULT_MIGRATION_TABLE)}, @LockMode = ${sql.lit("Exclusive")}`.execute(db2);
       }
       async releaseMigrationLock() {
       }
@@ -102793,8 +102862,8 @@ var init_mssql_introspector = __esm({
     init_object_utils();
     MssqlIntrospector = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       async getSchemas() {
         return await this.#db.selectFrom("sys.schemas").select("name").execute();
@@ -102970,8 +103039,8 @@ var init_mssql_dialect = __esm({
       createAdapter() {
         return new MssqlAdapter();
       }
-      createIntrospector(db) {
-        return new MssqlIntrospector(db);
+      createIntrospector(db2) {
+        return new MssqlIntrospector(db2);
       }
     };
   }
@@ -103308,12 +103377,12 @@ function sqliteIntegerPrimaryKeyColumn(columns) {
   const primaryKey2 = primaryKeys.length === 1 ? primaryKeys[0] : void 0;
   return primaryKey2?.type.toLowerCase() === "integer" ? primaryKey2.name : void 0;
 }
-async function sqliteGeneratedPrimaryKeyColumn(db, name2, columns) {
+async function sqliteGeneratedPrimaryKeyColumn(db2, name2, columns) {
   const column = sqliteIntegerPrimaryKeyColumn(columns);
   if (!column) return;
   const { rows } = await sql`
 		PRAGMA index_list(${sql.id(name2)})
-	`.execute(db.withoutPlugins());
+	`.execute(db2.withoutPlugins());
   return rows.some((index2) => index2.origin === "pk") ? void 0 : column;
 }
 function toSqliteTableMetadata(table2, columns, autoIncrementColumn) {
@@ -103329,24 +103398,24 @@ function toSqliteTableMetadata(table2, columns, autoIncrementColumn) {
     }))
   };
 }
-async function readTableMetadata(db, name2) {
+async function readTableMetadata(db2, name2) {
   const { rows: columns } = await sql`
 		PRAGMA table_info(${sql.id(name2)})
-	`.execute(db.withoutPlugins());
+	`.execute(db2.withoutPlugins());
   if (columns.length === 0) return;
-  const generatedColumn = await sqliteGeneratedPrimaryKeyColumn(db, name2, columns);
+  const generatedColumn = await sqliteGeneratedPrimaryKeyColumn(db2, name2, columns);
   return toSqliteTableMetadata({ name: name2 }, columns, generatedColumn);
 }
-async function introspectSqliteTables(db, tableNames) {
+async function introspectSqliteTables(db2, tableNames) {
   if (tableNames.length === 0) return [];
   try {
-    return await db.introspection.getTables();
+    return await db2.introspection.getTables();
   } catch {
-    return (await Promise.all(tableNames.map((name2) => readTableMetadata(db, name2)))).filter((table2) => table2 !== void 0);
+    return (await Promise.all(tableNames.map((name2) => readTableMetadata(db2, name2)))).filter((table2) => table2 !== void 0);
   }
 }
-function createSqliteIntrospector(db) {
-  const systemDb = db;
+function createSqliteIntrospector(db2) {
+  const systemDb = db2;
   async function getSchemas() {
     return [];
   }
@@ -103355,7 +103424,7 @@ function createSqliteIntrospector(db) {
     if (!options.withInternalKyselyTables) query = query.where("name", "!=", DEFAULT_MIGRATION_TABLE2).where("name", "!=", DEFAULT_MIGRATION_LOCK_TABLE2);
     const tables = await query.execute();
     return Promise.all(tables.map(async ({ name: name2 }) => {
-      const columns = await db.selectFrom(sql`pragma_table_info(${name2})`.as("table_info")).select([
+      const columns = await db2.selectFrom(sql`pragma_table_info(${name2})`.as("table_info")).select([
         "cid",
         "name",
         "type",
@@ -103363,7 +103432,7 @@ function createSqliteIntrospector(db) {
         "dflt_value",
         "pk"
       ]).execute();
-      const generatedColumn = await sqliteGeneratedPrimaryKeyColumn(db, name2, columns);
+      const generatedColumn = await sqliteGeneratedPrimaryKeyColumn(db2, name2, columns);
       return toSqliteTableMetadata({ name: name2 }, columns, generatedColumn);
     }));
   }
@@ -103466,8 +103535,8 @@ var init_bun_sqlite_dialect_DoOVo4ja = __esm({
     };
     BunSqliteConnection = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       executeQuery(compiledQuery) {
         const { sql: sql3, parameters } = compiledQuery;
@@ -103529,8 +103598,8 @@ var init_bun_sqlite_dialect_DoOVo4ja = __esm({
       createAdapter() {
         return new BunSqliteAdapter();
       }
-      createIntrospector(db) {
-        return createSqliteIntrospector(db);
+      createIntrospector(db2) {
+        return createSqliteIntrospector(db2);
       }
     };
   }
@@ -103599,8 +103668,8 @@ var init_node_sqlite_dialect = __esm({
     };
     NodeSqliteConnection = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       executeQuery(compiledQuery) {
         const { sql: sql3, parameters } = compiledQuery;
@@ -103662,8 +103731,8 @@ var init_node_sqlite_dialect = __esm({
       createAdapter() {
         return new NodeSqliteAdapter();
       }
-      createIntrospector(db) {
-        return createSqliteIntrospector(db);
+      createIntrospector(db2) {
+        return createSqliteIntrospector(db2);
       }
     };
   }
@@ -103741,8 +103810,8 @@ var init_d1_sqlite_dialect_Cru74LbR = __esm({
     };
     D1SqliteConnection = class {
       #db;
-      constructor(db) {
-        this.#db = db;
+      constructor(db2) {
+        this.#db = db2;
       }
       async executeQuery(compiledQuery) {
         const results = await this.#db.prepare(compiledQuery.sql).bind(...compiledQuery.parameters).all();
@@ -103760,8 +103829,8 @@ var init_d1_sqlite_dialect_Cru74LbR = __esm({
     D1SqliteIntrospector = class {
       #db;
       #d1;
-      constructor(db, d1) {
-        this.#db = db;
+      constructor(db2, d1) {
+        this.#db = db2;
         this.#d1 = d1;
       }
       async getSchemas() {
@@ -103808,29 +103877,29 @@ var init_d1_sqlite_dialect_Cru74LbR = __esm({
       createAdapter() {
         return new D1SqliteAdapter();
       }
-      createIntrospector(db) {
-        return new D1SqliteIntrospector(db, this.#config.database);
+      createIntrospector(db2) {
+        return new D1SqliteIntrospector(db2, this.#config.database);
       }
     };
   }
 });
 
 // ../../node_modules/.pnpm/@better-auth+kysely-adapter@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@bet_1bca8a93d6e8826074e1b2b5eef24c2d/node_modules/@better-auth/kysely-adapter/dist/index.mjs
-function getKyselyDatabaseType(db) {
-  if (!db) return null;
-  if ("dialect" in db) return getKyselyDatabaseType(db.dialect);
-  if ("createDriver" in db) {
-    if (db instanceof SqliteDialect) return "sqlite";
-    if (db instanceof MysqlDialect) return "mysql";
-    if (db instanceof PostgresDialect) return "postgres";
-    if (db instanceof MssqlDialect) return "mssql";
-  }
-  if ("aggregate" in db) return "sqlite";
-  if ("getConnection" in db) return "mysql";
-  if ("connect" in db) return "postgres";
-  if ("fileControl" in db) return "sqlite";
-  if ("open" in db && "close" in db && "prepare" in db) return "sqlite";
-  if ("batch" in db && "exec" in db && "prepare" in db) return "sqlite";
+function getKyselyDatabaseType(db2) {
+  if (!db2) return null;
+  if ("dialect" in db2) return getKyselyDatabaseType(db2.dialect);
+  if ("createDriver" in db2) {
+    if (db2 instanceof SqliteDialect) return "sqlite";
+    if (db2 instanceof MysqlDialect) return "mysql";
+    if (db2 instanceof PostgresDialect) return "postgres";
+    if (db2 instanceof MssqlDialect) return "mssql";
+  }
+  if ("aggregate" in db2) return "sqlite";
+  if ("getConnection" in db2) return "mysql";
+  if ("connect" in db2) return "postgres";
+  if ("fileControl" in db2) return "sqlite";
+  if ("open" in db2 && "close" in db2 && "prepare" in db2) return "sqlite";
+  if ("batch" in db2 && "exec" in db2 && "prepare" in db2) return "sqlite";
   return null;
 }
 function checkSchemaName(schemaName, databaseType) {
@@ -103876,11 +103945,11 @@ function toIntrospectedTables(tables) {
     }))
   }));
 }
-function toPhysicalSchema(db, expected) {
+function toPhysicalSchema(db2, expected) {
   const physical = {};
   for (const [table2, definition] of Object.entries(expected)) {
     const entries = Object.entries(definition.fields);
-    const sent = sentIdentifiers(db, table2, [definition.idColumn ?? "id", ...entries.map(([column]) => column)]);
+    const sent = sentIdentifiers(db2, table2, [definition.idColumn ?? "id", ...entries.map(([column]) => column)]);
     const fields = {};
     entries.forEach(([column, attribute], index2) => {
       fields[sent.columns[index2 + 1] ?? column] = attribute;
@@ -103894,8 +103963,8 @@ function toPhysicalSchema(db, expected) {
   }
   return physical;
 }
-function sentIdentifiers(db, table2, columns) {
-  const { query } = db.selectFrom(table2).select(columns).compile();
+function sentIdentifiers(db2, table2, columns) {
+  const { query } = db2.selectFrom(table2).select(columns).compile();
   if (!SelectQueryNode.is(query)) return {
     table: table2,
     columns: []
@@ -103908,26 +103977,26 @@ function sentIdentifiers(db, table2, columns) {
     columns: (query.selections ?? []).map(({ selection }) => ReferenceNode.is(selection) && ColumnNode.is(selection.column) ? selection.column.column.name : void 0)
   };
 }
-async function getPostgresSchema(db) {
+async function getPostgresSchema(db2) {
   return (await sql`
 		SELECT pg_catalog.current_schema() AS schema
-	`.execute(db.withoutPlugins())).rows[0]?.schema ?? "public";
+	`.execute(db2.withoutPlugins())).rows[0]?.schema ?? "public";
 }
-async function getMssqlSchema(db) {
+async function getMssqlSchema(db2) {
   return (await sql`
 		SELECT SCHEMA_NAME() AS "schemaName"
-	`.execute(db.withoutPlugins())).rows[0]?.schemaName || "dbo";
+	`.execute(db2.withoutPlugins())).rows[0]?.schemaName || "dbo";
 }
-async function schemaSearchPath(db, dbType) {
+async function schemaSearchPath(db2, dbType) {
   if (dbType === "postgres") return (await sql`
 			SELECT pg_catalog.current_schemas(true)::text[] AS schemas
-		`.execute(db.withoutPlugins())).rows[0]?.schemas ?? [];
-  if (dbType === "mssql") return [await getMssqlSchema(db), "dbo"];
+		`.execute(db2.withoutPlugins())).rows[0]?.schemas ?? [];
+  if (dbType === "mssql") return [await getMssqlSchema(db2), "dbo"];
 }
-async function findSchemaProblems(db, dbType, expected) {
-  const physical = toPhysicalSchema(db, expected);
-  if (dbType === "sqlite") return diffSchema(physical, toIntrospectedTables(await introspectSqliteTables(db, Object.entries(physical).flatMap(([name2, table2]) => table2.disableMigrations ? [] : [name2]))));
-  return db.connection().execute(async (connection) => {
+async function findSchemaProblems(db2, dbType, expected) {
+  const physical = toPhysicalSchema(db2, expected);
+  if (dbType === "sqlite") return diffSchema(physical, toIntrospectedTables(await introspectSqliteTables(db2, Object.entries(physical).flatMap(([name2, table2]) => table2.disableMigrations ? [] : [name2]))));
+  return db2.connection().execute(async (connection) => {
     const searchPath = await schemaSearchPath(connection, dbType);
     const tables = toIntrospectedTables(await connection.introspection.getTables());
     for (const [name2, table2] of Object.entries(physical)) {
@@ -103948,60 +104017,60 @@ var init_dist11 = __esm({
     init_env3();
     init_string();
     createKyselyAdapter = async (config3) => {
-      const db = config3.database;
-      if (!db) return {
+      const db2 = config3.database;
+      if (!db2) return {
         kysely: null,
         databaseType: null,
         introspectIndexes: void 0,
         schemaName: void 0,
         transaction: void 0
       };
-      if ("db" in db) {
-        const schemaName = db.schemaName;
-        checkSchemaName(schemaName, db.type);
+      if ("db" in db2) {
+        const schemaName = db2.schemaName;
+        checkSchemaName(schemaName, db2.type);
         return {
-          kysely: schemaName ? db.db.withSchema(schemaName) : db.db,
-          databaseType: db.type,
+          kysely: schemaName ? db2.db.withSchema(schemaName) : db2.db,
+          databaseType: db2.type,
           introspectIndexes: void 0,
           schemaName,
-          transaction: db.transaction
+          transaction: db2.transaction
         };
       }
-      if ("dialect" in db) {
-        const schemaName = db.schemaName;
-        checkSchemaName(schemaName, db.type);
-        const kysely = new Kysely({ dialect: db.dialect });
+      if ("dialect" in db2) {
+        const schemaName = db2.schemaName;
+        checkSchemaName(schemaName, db2.type);
+        const kysely = new Kysely({ dialect: db2.dialect });
         return {
           kysely: schemaName ? kysely.withSchema(schemaName) : kysely,
-          databaseType: db.type,
+          databaseType: db2.type,
           introspectIndexes: void 0,
           schemaName,
-          transaction: db.transaction
+          transaction: db2.transaction
         };
       }
       let dialect = void 0;
       let introspectIndexes = void 0;
       let transaction = void 0;
-      const databaseType = getKyselyDatabaseType(db);
-      if ("createDriver" in db) dialect = db;
-      if ("aggregate" in db && !("createSession" in db)) {
-        dialect = new SqliteDialect({ database: db });
+      const databaseType = getKyselyDatabaseType(db2);
+      if ("createDriver" in db2) dialect = db2;
+      if ("aggregate" in db2 && !("createSession" in db2)) {
+        dialect = new SqliteDialect({ database: db2 });
         transaction = true;
       }
-      if ("getConnection" in db) {
-        dialect = new MysqlDialect(db);
+      if ("getConnection" in db2) {
+        dialect = new MysqlDialect(db2);
         transaction = true;
       }
-      if ("connect" in db) {
-        dialect = new PostgresDialect({ pool: db });
+      if ("connect" in db2) {
+        dialect = new PostgresDialect({ pool: db2 });
         transaction = true;
       }
-      if ("fileControl" in db) {
+      if ("fileControl" in db2) {
         const { BunSqliteDialect: BunSqliteDialect2 } = await Promise.resolve().then(() => (init_bun_sqlite_dialect_DoOVo4ja(), bun_sqlite_dialect_DoOVo4ja_exports));
-        dialect = new BunSqliteDialect2({ database: db });
+        dialect = new BunSqliteDialect2({ database: db2 });
         transaction = true;
       }
-      if ("createSession" in db) {
+      if ("createSession" in db2) {
         let DatabaseSync = void 0;
         try {
           const nodeSqlite = "node:sqlite";
@@ -104013,16 +104082,16 @@ var init_dist11 = __esm({
         } catch (error63) {
           if (error63 !== null && typeof error63 === "object" && "code" in error63 && error63.code !== "ERR_UNKNOWN_BUILTIN_MODULE") throw error63;
         }
-        if (DatabaseSync && db instanceof DatabaseSync) {
+        if (DatabaseSync && db2 instanceof DatabaseSync) {
           const { NodeSqliteDialect: NodeSqliteDialect2 } = await Promise.resolve().then(() => (init_node_sqlite_dialect(), node_sqlite_dialect_exports));
-          dialect = new NodeSqliteDialect2({ database: db });
+          dialect = new NodeSqliteDialect2({ database: db2 });
           transaction = true;
         }
       }
-      if ("batch" in db && "exec" in db && "prepare" in db) {
+      if ("batch" in db2 && "exec" in db2 && "prepare" in db2) {
         const { createD1IndexIntrospector: createD1IndexIntrospector2, D1SqliteDialect: D1SqliteDialect2 } = await Promise.resolve().then(() => (init_d1_sqlite_dialect_Cru74LbR(), d1_sqlite_dialect_Cru74LbR_exports));
-        dialect = new D1SqliteDialect2({ database: db });
-        introspectIndexes = createD1IndexIntrospector2(db);
+        dialect = new D1SqliteDialect2({ database: db2 });
+        introspectIndexes = createD1IndexIntrospector2(db2);
         transaction = false;
       }
       return {
@@ -104033,10 +104102,10 @@ var init_dist11 = __esm({
         transaction
       };
     };
-    kyselyAdapter = (db, config3) => {
+    kyselyAdapter = (db2, config3) => {
       let lazyOptions = null;
       let mysqlNoIdWarned = false;
-      const createCustomAdapter = (db2, inTransaction = false) => {
+      const createCustomAdapter = (db3, inTransaction = false) => {
         return ({ getFieldName, schema: schema3, getDefaultFieldName, getDefaultModelName, getFieldAttributes, getModelName, options }) => {
           if (config3?.type === "mysql" && options.advanced?.database?.generateId === false && !mysqlNoIdWarned) {
             mysqlNoIdWarned = true;
@@ -104082,7 +104151,7 @@ var init_dist11 = __esm({
                   reselectField = where[0].field;
                   reselectValue = values2[reselectField] !== void 0 ? values2[reselectField] : where[0].value;
                 } else return null;
-                return await db2.selectFrom(model).selectAll().where(getFieldName({
+                return await db3.selectFrom(model).selectAll().where(getFieldName({
                   model: modelKey,
                   field: reselectField
                 }), reselectValue === null ? "is" : "=", reselectValue).limit(1).executeTakeFirst();
@@ -104126,7 +104195,7 @@ var init_dist11 = __esm({
                 logger2.warn(`[Kysely Adapter] Unable to safely identify the inserted "${model}" row on MySQL. Enable Better Auth ID generation or use generateId: "serial" for reliable behavior.`);
                 return null;
               };
-              return inTransaction ? fetchInserted(db2) : db2.transaction().execute(fetchInserted);
+              return inTransaction ? fetchInserted(db3) : db3.transaction().execute(fetchInserted);
             }
             if (config3?.type === "mssql") return await builder.outputAll("inserted").executeTakeFirst();
             return await builder.returningAll().executeTakeFirst();
@@ -104268,11 +104337,11 @@ var init_dist11 = __esm({
           }
           return {
             async create({ data, model, modelKey = model }) {
-              return await withReturning(data, db2.insertInto(model).values(data), model, modelKey, []);
+              return await withReturning(data, db3.insertInto(model).values(data), model, modelKey, []);
             },
             async findOne({ model, modelKey = model, where, select: select2, join: join62 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.selectFrom((eb) => {
+              let query = db3.selectFrom((eb) => {
                 let b2 = eb.selectFrom(model);
                 if (and2) b2 = b2.where((eb2) => eb2.and(and2.map((expr) => expr(eb2))));
                 if (or2) b2 = b2.where((eb2) => eb2.or(or2.map((expr) => expr(eb2))));
@@ -104297,7 +104366,7 @@ var init_dist11 = __esm({
             },
             async findMany({ model, modelKey = model, where, limit, select: select2, offset, sortBy, join: join62 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.selectFrom((eb) => {
+              let query = db3.selectFrom((eb) => {
                 let b2 = eb.selectFrom(model);
                 if (config3?.type === "mssql") {
                   if (offset !== void 0) {
@@ -104342,14 +104411,14 @@ var init_dist11 = __esm({
             async update({ model, modelKey = model, where, update: values2 }) {
               if (where.length === 0) return null;
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.updateTable(model).set(values2);
+              let query = db3.updateTable(model).set(values2);
               if (and2) query = query.where((eb) => eb.and(and2.map((expr) => expr(eb))));
               if (or2) query = query.where((eb) => eb.or(or2.map((expr) => expr(eb))));
               return await withReturning(values2, query, model, modelKey, where);
             },
             async updateMany({ model, modelKey = model, where, update: values2 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.updateTable(model).set(values2);
+              let query = db3.updateTable(model).set(values2);
               if (and2) query = query.where((eb) => eb.and(and2.map((expr) => expr(eb))));
               if (or2) query = query.where((eb) => eb.or(or2.map((expr) => expr(eb))));
               const res = (await query.executeTakeFirst()).numUpdatedRows;
@@ -104357,7 +104426,7 @@ var init_dist11 = __esm({
             },
             async count({ model, modelKey = model, where }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.selectFrom(model).select(db2.fn.count("id").as("count"));
+              let query = db3.selectFrom(model).select(db3.fn.count("id").as("count"));
               if (and2) query = query.where((eb) => eb.and(and2.map((expr) => expr(eb))));
               if (or2) query = query.where((eb) => eb.or(or2.map((expr) => expr(eb))));
               const res = await query.execute();
@@ -104367,14 +104436,14 @@ var init_dist11 = __esm({
             },
             async delete({ model, modelKey = model, where }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.deleteFrom(model);
+              let query = db3.deleteFrom(model);
               if (and2) query = query.where((eb) => eb.and(and2.map((expr) => expr(eb))));
               if (or2) query = query.where((eb) => eb.or(or2.map((expr) => expr(eb))));
               await query.execute();
             },
             async deleteMany({ model, modelKey = model, where }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
-              let query = db2.deleteFrom(model);
+              let query = db3.deleteFrom(model);
               if (and2) query = query.where((eb) => eb.and(and2.map((expr) => expr(eb))));
               if (or2) query = query.where((eb) => eb.or(or2.map((expr) => expr(eb))));
               const res = (await query.executeTakeFirst()).numDeletedRows;
@@ -104391,10 +104460,10 @@ var init_dist11 = __esm({
                 model: modelKey,
                 field: "id"
               });
-              const deleteSelectedRow = async (db3, row2) => {
+              const deleteSelectedRow = async (db4, row2) => {
                 const targetId = row2[idField] ?? row2.id;
                 if (targetId === void 0 || targetId === null) return null;
-                const query = db3.deleteFrom(model).where(`${model}.${idField}`, "=", targetId);
+                const query = db4.deleteFrom(model).where(`${model}.${idField}`, "=", targetId);
                 if (config3?.type === "mysql") {
                   const result2 = await query.executeTakeFirst();
                   return Number(result2.numDeletedRows) > 0 ? row2 : null;
@@ -104412,11 +104481,11 @@ var init_dist11 = __esm({
                   if (!row2) return null;
                   return deleteSelectedRow(trx, row2);
                 };
-                return inTransaction ? claimFromTransaction(db2) : db2.transaction().execute(claimFromTransaction);
+                return inTransaction ? claimFromTransaction(db3) : db3.transaction().execute(claimFromTransaction);
               }
-              const selectIds = applyWhere(db2.selectFrom(model).select(`${model}.${idField}`));
+              const selectIds = applyWhere(db3.selectFrom(model).select(`${model}.${idField}`));
               const targetIds = config3?.type === "mssql" ? selectIds.top(1) : selectIds.limit(1);
-              return deleteWithReturning(db2.deleteFrom(model).where(`${model}.${idField}`, "in", targetIds));
+              return deleteWithReturning(db3.deleteFrom(model).where(`${model}.${idField}`, "in", targetIds));
             },
             async incrementOne({ model, modelKey = model, where, increment, set: set3 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
@@ -104441,11 +104510,11 @@ var init_dist11 = __esm({
                   if (Number(updated.numUpdatedRows) === 0) return null;
                   return await trx.selectFrom(model).selectAll().where(`${model}.${idField}`, "=", targetId).limit(1).executeTakeFirst() ?? null;
                 };
-                return inTransaction ? incrementInTransaction(db2) : db2.transaction().execute(incrementInTransaction);
+                return inTransaction ? incrementInTransaction(db3) : db3.transaction().execute(incrementInTransaction);
               }
-              const selectIds = applyWhere(db2.selectFrom(model).select(`${model}.${idField}`));
+              const selectIds = applyWhere(db3.selectFrom(model).select(`${model}.${idField}`));
               const targetIds = config3?.type === "mssql" ? selectIds.top(1) : selectIds.limit(1);
-              const updateQuery = applyWhere(db2.updateTable(model).set(assignments)).where(`${model}.${idField}`, "in", targetIds);
+              const updateQuery = applyWhere(db3.updateTable(model).set(assignments)).where(`${model}.${idField}`, "in", targetIds);
               if (config3?.type === "mssql") return await updateQuery.outputAll("inserted").executeTakeFirst() ?? null;
               return await updateQuery.returningAll().executeTakeFirst() ?? null;
             },
@@ -104465,7 +104534,7 @@ var init_dist11 = __esm({
           supportsJSON: config3?.type === "postgres" ? true : false,
           supportsArrays: false,
           supportsUUIDs: config3?.type === "postgres" ? true : false,
-          transaction: config3?.transaction ? (cb) => db.transaction().execute((trx) => {
+          transaction: config3?.transaction ? (cb) => db2.transaction().execute((trx) => {
             return cb(createAdapterFactory({
               config: {
                 ...adapterOptions.config,
@@ -104475,20 +104544,20 @@ var init_dist11 = __esm({
             })(lazyOptions));
           }) : false
         },
-        adapter: createCustomAdapter(db)
+        adapter: createCustomAdapter(db2)
       };
       const adapter = createAdapterFactory(adapterOptions);
       return (options) => {
         lazyOptions = options;
         const instance = adapter(options);
-        registerSchemaCheck(instance, createSchemaCheck(() => findSchemaProblems(db, config3?.type, getExpectedSchema(options, { usePlural: config3?.usePlural })), "database", options.database), { runtimeEnabled: checksSchema(options) });
+        registerSchemaCheck(instance, createSchemaCheck(() => findSchemaProblems(db2, config3?.type, getExpectedSchema(options, { usePlural: config3?.usePlural })), "database", options.database), { runtimeEnabled: checksSchema(options) });
         return instance;
       };
     };
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/adapters/kysely-adapter/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/adapters/kysely-adapter/index.mjs
 var kysely_adapter_exports = {};
 __export(kysely_adapter_exports, {
   createKyselyAdapter: () => createKyselyAdapter,
@@ -104500,12 +104569,12 @@ __export(kysely_adapter_exports, {
   toPhysicalSchema: () => toPhysicalSchema
 });
 var init_kysely_adapter = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/adapters/kysely-adapter/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/adapters/kysely-adapter/index.mjs"() {
     init_dist11();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/adapter-kysely.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/adapter-kysely.mjs
 async function getAdapter(options) {
   return getBaseAdapter(options, async (opts) => {
     const { createKyselyAdapter: createKyselyAdapter2, kyselyAdapter: kyselyAdapter2 } = await Promise.resolve().then(() => (init_kysely_adapter(), kysely_adapter_exports));
@@ -104519,13 +104588,13 @@ async function getAdapter(options) {
   });
 }
 var init_adapter_kysely = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/adapter-kysely.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/adapter-kysely.mjs"() {
     init_adapter_base();
     init_error2();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/get-schema.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/get-schema.mjs
 function getSchema(config3) {
   const { indexesByTable, tables } = getAuthTablesWithResolvedIndexes(config3);
   const schema3 = {};
@@ -104562,12 +104631,12 @@ function getSchema(config3) {
   return schema3;
 }
 var init_get_schema = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/get-schema.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/get-schema.mjs"() {
     init_internal();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/get-migration.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/get-migration.mjs
 function createDatabaseIndexKey(tableName, indexName) {
   return `${getPortableDatabaseIdentifierKey(tableName)}\0${getPortableDatabaseIdentifierKey(indexName)}`;
 }
@@ -104594,7 +104663,7 @@ function toDatabaseIndexMap(indexes) {
     }];
   }));
 }
-async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
+async function getDatabaseIndexMap(db2, target, tableNames, introspectIndexes) {
   if (introspectIndexes) return toDatabaseIndexMap(await introspectIndexes(tableNames));
   let rows;
   switch (target.type) {
@@ -104611,7 +104680,7 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
 				INNER JOIN pragma_index_list(tables.name) AS index_list
 				INNER JOIN pragma_index_info(index_list.name) AS index_info
 				WHERE tables.type = 'table'
-			`.execute(db)).rows;
+			`.execute(db2)).rows;
       break;
     case "postgres":
       rows = (await sql`
@@ -104639,7 +104708,7 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
 				WHERE table_namespace.nspname = ${target.schema}
 					AND table_class.relkind = 'r'
 					AND index_column.ordinality <= index_data.indnkeyatts
-			`.execute(db)).rows;
+			`.execute(db2)).rows;
       break;
     case "mysql":
       rows = (await sql`
@@ -104653,7 +104722,7 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
 					COALESCE(LOWER(comment) = 'disabled', FALSE) AS isDisabled
 				FROM information_schema.statistics
 				WHERE table_schema = DATABASE()
-			`.execute(db)).rows;
+			`.execute(db2)).rows;
       break;
     case "mssql":
       rows = (await sql`
@@ -104680,7 +104749,7 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
 				WHERE table_schemas.name = ${target.schema}
 					AND indexes.name IS NOT NULL
 					AND index_columns.key_ordinal > 0
-			`.execute(db)).rows;
+			`.execute(db2)).rows;
       break;
   }
   const indexMetadata = /* @__PURE__ */ new Map();
@@ -104717,7 +104786,7 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
   }
   return toDatabaseIndexMap([...indexMetadata.values()]);
 }
-async function getDatabaseColumnBounds(db, target) {
+async function getDatabaseColumnBounds(db2, target) {
   let rows;
   switch (target.type) {
     case "postgres":
@@ -104731,7 +104800,7 @@ async function getDatabaseColumnBounds(db, target) {
 					character_octet_length AS maxIndexBytes
 				FROM information_schema.columns
 				WHERE table_schema = DATABASE()
-			`.execute(db)).rows;
+			`.execute(db2)).rows;
       break;
     case "mssql":
       rows = (await sql`
@@ -104745,7 +104814,7 @@ async function getDatabaseColumnBounds(db, target) {
 				INNER JOIN sys.schemas AS table_schemas
 					ON table_schemas.schema_id = tables.schema_id
 				WHERE table_schemas.name = ${target.schema}
-			`.execute(db)).rows;
+			`.execute(db2)).rows;
       break;
   }
   const bounds = /* @__PURE__ */ new Map();
@@ -104788,8 +104857,8 @@ function hasTimestampColumnDefault(field, dbType) {
 function hasStaticColumnDefault(field) {
   return !(field.unique && field.required === false) && (field.type === "string" || field.type === "number" || field.type === "boolean") && field.defaultValue !== void 0 && field.defaultValue !== null && typeof field.defaultValue !== "function";
 }
-async function tableHasRows(db, dbType, table2) {
-  const probe2 = db.selectFrom(table2).select(sql`1`.as("present"));
+async function tableHasRows(db2, dbType, table2) {
+  const probe2 = db2.selectFrom(table2).select(sql`1`.as("present"));
   return (await (dbType === "mssql" ? probe2.top(1) : probe2.limit(1)).execute()).length > 0;
 }
 function matchType(columnDataType, fieldType, dbType) {
@@ -104809,28 +104878,28 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
     if (throwOnUnsafe) throw new UnsafeMigrationError(message2);
     unsafeChanges.push(message2);
   };
-  let { kysely: db, databaseType: dbType, introspectIndexes, schemaName } = await createKyselyAdapter(config3);
+  let { kysely: db2, databaseType: dbType, introspectIndexes, schemaName } = await createKyselyAdapter(config3);
   if (!dbType) {
     logger3.warn("Could not determine database type, defaulting to sqlite. Please provide a type in the database options to avoid this.");
     dbType = "sqlite";
   }
-  if (!db) {
+  if (!db2) {
     logger3.error("Only kysely adapter is supported for migrations. You can use `generate` command to generate the schema, if you're using a different adapter.");
     process.exit(1);
   }
-  const allTableMetadata = await db.introspection.getTables();
+  const allTableMetadata = await db2.introspection.getTables();
   let target;
   let tableMetadata = allTableMetadata;
   switch (dbType) {
     case "postgres": {
-      const schema3 = schemaName ?? await getPostgresSchema(db);
+      const schema3 = schemaName ?? await getPostgresSchema(db2);
       target = {
         type: "postgres",
         schema: schema3
       };
       logger3.debug(`PostgreSQL migration: Using schema '${schema3}' (${schemaName ? "from database.schemaName" : "from search_path"})`);
       try {
-        if (!(await db.introspection.getSchemas()).some(({ name: name2 }) => name2 === schema3)) if (schemaName) logger3.debug(`Schema '${schema3}' does not exist yet. The migration creates it before creating tables.`);
+        if (!(await db2.introspection.getSchemas()).some(({ name: name2 }) => name2 === schema3)) if (schemaName) logger3.debug(`Schema '${schema3}' does not exist yet. The migration creates it before creating tables.`);
         else logger3.warn(`Schema '${schema3}' does not exist. Create it before running migrations or check your database configuration.`);
       } catch (error63) {
         logger3.debug(`Could not verify schema existence: ${error63 instanceof Error ? error63.message : String(error63)}`);
@@ -104840,7 +104909,7 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
       break;
     }
     case "mssql": {
-      const schema3 = await getMssqlSchema(db);
+      const schema3 = await getMssqlSchema(db2);
       target = {
         type: "mssql",
         schema: schema3
@@ -104856,9 +104925,9 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
       target = { type: "sqlite" };
       break;
   }
-  const databaseIndexMap = await getDatabaseIndexMap(db, target, allTableMetadata.map((table2) => table2.name), introspectIndexes);
-  const databaseColumnBounds = await getDatabaseColumnBounds(db, target);
-  const schemaProblems = diffSchema(toPhysicalSchema(db, betterAuthSchema), toIntrospectedTables(tableMetadata)).filter((finding) => finding.kind === "unexpected-required-column").map((finding) => formatSchemaFinding(finding, "database"));
+  const databaseIndexMap = await getDatabaseIndexMap(db2, target, allTableMetadata.map((table2) => table2.name), introspectIndexes);
+  const databaseColumnBounds = await getDatabaseColumnBounds(db2, target);
+  const schemaProblems = diffSchema(toPhysicalSchema(db2, betterAuthSchema), toIntrospectedTables(tableMetadata)).filter((finding) => finding.kind === "unexpected-required-column").map((finding) => formatSchemaFinding(finding, "database"));
   const toBeCreated = [];
   const toBeAdded = [];
   const toBeAddedIndexes = [];
@@ -104939,7 +105008,7 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
     });
   }
   const migrations = [];
-  if (schemaName && toBeCreated.length > 0) migrations.push(db.schema.createSchema(schemaName).ifNotExists());
+  if (schemaName && toBeCreated.length > 0) migrations.push(db2.schema.createSchema(schemaName).ifNotExists());
   const useUUIDs = config3.advanced?.database?.generateId === "uuid";
   const useNumberId = config3.advanced?.database?.generateId === "serial";
   function getType(field, fieldName, tableIndexStringLength) {
@@ -105047,7 +105116,7 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
       if (field.required !== false && !timestampDefault && !staticDefault) {
         let populated = populatedTables.get(table2.table);
         if (populated === void 0) {
-          populated = await tableHasRows(db, dbType, table2.table);
+          populated = await tableHasRows(db2, dbType, table2.table);
           populatedTables.set(table2.table, populated);
         }
         if (populated) {
@@ -105056,10 +105125,10 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
         }
       }
       const type2 = getType(field, fieldName, getTableIndexStringLength(table2.table, fieldName));
-      const builder = db.schema.alterTable(table2.table);
+      const builder = db2.schema.alterTable(table2.table);
       if (field.index || field.unique) {
         const indexName = getDatabaseFieldIndexName(table2.table, fieldName, field.unique ?? false);
-        let indexBuilder = db.schema.createIndex(indexName).on(table2.table).columns([fieldName]);
+        let indexBuilder = db2.schema.createIndex(indexName).on(table2.table).columns([fieldName]);
         if (field.unique) {
           indexBuilder = indexBuilder.unique();
           if (field.required === false && dbType === "mssql") indexBuilder = indexBuilder.where(fieldName, "is not", null);
@@ -105080,7 +105149,7 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
   }
   if (toBeCreated.length) for (const table2 of toBeCreated) {
     const idType = getType({ type: useNumberId ? "number" : "string" }, "id");
-    let dbT = db.schema.createTable(table2.table).addColumn("id", idType, (col) => {
+    let dbT = db2.schema.createTable(table2.table).addColumn("id", idType, (col) => {
       if (useNumberId) {
         if (dbType === "postgres") return col.primaryKey().notNull();
         else if (dbType === "sqlite") return col.primaryKey().notNull();
@@ -105104,14 +105173,14 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
         return col;
       });
       if (field.index && !field.unique) {
-        const builder = db.schema.createIndex(getDatabaseFieldIndexName(table2.table, fieldName, false)).on(table2.table).columns([fieldName]);
+        const builder = db2.schema.createIndex(getDatabaseFieldIndexName(table2.table, fieldName, false)).on(table2.table).columns([fieldName]);
         deferredIndexes.push(builder);
       }
     }
     migrations.push(dbT);
   }
   for (const { table: table2, index: index2, name: name2 } of toBeAddedIndexes) {
-    let builder = db.schema.createIndex(name2).on(table2).columns([...index2.columns]);
+    let builder = db2.schema.createIndex(name2).on(table2).columns([...index2.columns]);
     if (index2.unique) builder = builder.unique();
     deferredIndexes.push(builder);
   }
@@ -105138,7 +105207,7 @@ async function getMigrations(config3, { throwOnUnsafe = true } = {}) {
 }
 var map3, UnsafeMigrationError;
 var init_get_migration = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/get-migration.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/get-migration.mjs"() {
     init_get_schema();
     init_db();
     init_env3();
@@ -105234,15 +105303,15 @@ var init_get_migration = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/constants.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/constants.mjs
 var DEFAULT_SECRET;
 var init_constants8 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/constants.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/constants.mjs"() {
     DEFAULT_SECRET = "better-auth-secret-12345678901234567890";
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/secret-utils.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/secret-utils.mjs
 function estimateEntropy(str2) {
   const unique = new Set(str2).size;
   if (unique === 0) return 0;
@@ -105288,7 +105357,7 @@ function buildSecretConfig(secrets, legacySecret) {
   };
 }
 var init_secret_utils = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/secret-utils.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/secret-utils.mjs"() {
     init_error2();
   }
 });
@@ -105765,7 +105834,7 @@ var init_node2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/create-context.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/create-context.mjs
 function estimateEntropy2(str2) {
   const unique = new Set(str2).size;
   if (unique === 0) return 0;
@@ -105969,7 +106038,7 @@ Most of the features of Better Auth will not work correctly.`);
   return ctx;
 }
 var init_create_context = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/create-context.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/create-context.mjs"() {
     init_url();
     init_trusted_origins();
     init_store_capabilities();
@@ -105995,10 +106064,10 @@ var init_create_context = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/init.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/init.mjs
 var init2;
 var init_init = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/context/init.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/context/init.mjs"() {
     init_adapter_kysely();
     init_get_migration();
     init_create_context();
@@ -106018,10 +106087,10 @@ var init_init = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/auth/base.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/auth/base.mjs
 var createBetterAuth;
 var init_base = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/auth/base.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/auth/base.mjs"() {
     init_url();
     init_helpers();
     init_api4();
@@ -106088,10 +106157,10 @@ var init_base = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/auth/full.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/auth/full.mjs
 var betterAuth;
 var init_full = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/auth/full.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/auth/full.mjs"() {
     init_init();
     init_base();
     betterAuth = (options) => {
@@ -106106,9 +106175,9 @@ var init_dist12 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/index.mjs
 var init_dist13 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/index.mjs"() {
     init_full();
     init_dist12();
     init_db();
@@ -108375,18 +108444,18 @@ var init_dist14 = __esm({
     init_env3();
     init_error2();
     init_drizzle_orm();
-    drizzleAdapter = (db, config3) => {
+    drizzleAdapter = (db2, config3) => {
       let lazyOptions = null;
       let mysqlNoIdWarned = false;
       let relationKeysByModel;
-      const getRelationKeysByModel = () => relationKeysByModel ??= buildRelationKeysByModel(db._?.schema);
-      const createCustomAdapter = (db2, inTransaction = false) => ({ getFieldName, getDefaultFieldName, getDefaultModelName, options, schema: baSchema }) => {
+      const getRelationKeysByModel = () => relationKeysByModel ??= buildRelationKeysByModel(db2._?.schema);
+      const createCustomAdapter = (db3, inTransaction = false) => ({ getFieldName, getDefaultFieldName, getDefaultModelName, options, schema: baSchema }) => {
         if (config3.provider === "mysql" && options.advanced?.database?.generateId === false && !mysqlNoIdWarned) {
           mysqlNoIdWarned = true;
           logger2.warn(`[Drizzle Adapter] MySQL does not support INSERT...RETURNING. With generateId set to false, the adapter uses best-effort fallback strategies (unique columns, full-field match) to retrieve inserted rows. For reliable behavior, use Better Auth's default ID generation, a custom generateId function, or generateId: "serial" for auto-increment.`);
         }
         function getSchema2(model) {
-          const schema3 = config3.schema || db2._.fullSchema;
+          const schema3 = config3.schema || db3._.fullSchema;
           if (!schema3) throw new BetterAuthError("Drizzle adapter failed to initialize. Schema not found. Please provide a schema object in the adapter options object.");
           const schemaModel = schema3[model];
           if (!schemaModel) throw new BetterAuthError(`[# Drizzle Adapter]: The model "${model}" was not found in the schema object. Please pass the schema directly to the adapter options.`);
@@ -108405,7 +108474,7 @@ var init_dist14 = __esm({
               };
               return w2;
             }), model, modelKey);
-            return (await db2.select().from(table2).where(...clause))[0];
+            return (await db3.select().from(table2).where(...clause))[0];
           }
           const fetchInserted = async (tx) => {
             const builderId = builderVal?.[0]?.id?.value;
@@ -108443,7 +108512,7 @@ var init_dist14 = __esm({
             logger2.warn(`[Drizzle Adapter] Unable to safely identify the inserted "${model}" row on MySQL. Enable Better Auth ID generation or use generateId: "serial" for reliable behavior.`);
             return null;
           };
-          return inTransaction ? fetchInserted(db2) : db2.transaction(fetchInserted);
+          return inTransaction ? fetchInserted(db3) : db3.transaction(fetchInserted);
         };
         function convertWhereClause(where, model, modelKey) {
           const schemaModel = getSchema2(model);
@@ -108595,18 +108664,18 @@ var init_dist14 = __esm({
           }
         }
         function getQueryModel(model) {
-          if (!db2.query) return null;
-          if (db2.query[model]) return model;
+          if (!db3.query) return null;
+          if (db3.query[model]) return model;
           if (config3.usePlural) {
             const plural3 = `${model}s`;
-            if (db2.query[plural3]) return plural3;
+            if (db3.query[plural3]) return plural3;
           }
           if (config3.schema) {
             const targetTable = config3.schema[model];
             if (targetTable) {
-              const fullSchema = db2._.fullSchema;
+              const fullSchema = db3._.fullSchema;
               if (fullSchema) {
-                for (const key of Object.keys(db2.query)) if (fullSchema[key] === targetTable) return key;
+                for (const key of Object.keys(db3.query)) if (fullSchema[key] === targetTable) return key;
               }
             }
           }
@@ -108628,14 +108697,14 @@ var init_dist14 = __esm({
           async create({ model, modelKey = model, data: values2 }) {
             const table2 = getSchema2(model);
             checkMissingFields(table2, modelKey, values2);
-            return await withReturning(model, modelKey, db2.insert(table2).values(values2), values2);
+            return await withReturning(model, modelKey, db3.insert(table2).values(values2), values2);
           },
           async findOne({ model, modelKey = model, where, select: select2, join: join62 }) {
             const table2 = getSchema2(model);
             const clause = convertWhereClause(where, model, modelKey);
             if (join62) {
               const queryModel = getQueryModel(model);
-              if (!db2.query || !queryModel) {
+              if (!db3.query || !queryModel) {
                 logger2.error(`[# Drizzle Adapter]: The model "${model}" was not found in the query object. Please update your Drizzle schema to include relations or re-generate using "npx auth@latest generate".`);
                 logger2.info("Falling back to regular query");
               } else {
@@ -108654,7 +108723,7 @@ var init_dist14 = __esm({
                     target: joinModel
                   });
                 }
-                const res2 = await db2.query[queryModel].findFirst({
+                const res2 = await db3.query[queryModel].findFirst({
                   where: clause[0],
                   columns: select2?.length && select2.length > 0 ? select2.reduce((acc, field) => {
                     acc[getFieldName({
@@ -108672,7 +108741,7 @@ var init_dist14 = __esm({
                 return res2;
               }
             }
-            const res = await db2.select(select2?.length && select2.length > 0 ? select2.reduce((acc, field) => {
+            const res = await db3.select(select2?.length && select2.length > 0 ? select2.reduce((acc, field) => {
               const fieldName = getFieldName({
                 model: modelKey,
                 field
@@ -108691,7 +108760,7 @@ var init_dist14 = __esm({
             const sortFn = sortBy?.direction === "desc" ? desc : asc;
             if (join62) {
               const queryModel = getQueryModel(model);
-              if (!db2.query || !queryModel) {
+              if (!db3.query || !queryModel) {
                 logger2.error(`[# Drizzle Adapter]: The model "${model}" was not found in the query object. Please update your Drizzle schema to include relations or re-generate using "npx auth@latest generate".`);
                 logger2.info("Falling back to regular query");
               } else {
@@ -108715,7 +108784,7 @@ var init_dist14 = __esm({
                   model: modelKey,
                   field: sortBy?.field
                 })])];
-                const res = await db2.query[queryModel].findMany({
+                const res = await db3.query[queryModel].findMany({
                   where: clause[0],
                   with: includes,
                   columns: select2?.length && select2.length > 0 ? select2.reduce((acc, field) => {
@@ -108736,7 +108805,7 @@ var init_dist14 = __esm({
                 return res;
               }
             }
-            let builder = db2.select(select2?.length && select2.length > 0 ? select2.reduce((acc, field) => {
+            let builder = db3.select(select2?.length && select2.length > 0 ? select2.reduce((acc, field) => {
               const fieldName = getFieldName({
                 model: modelKey,
                 field
@@ -108759,17 +108828,17 @@ var init_dist14 = __esm({
           async count({ model, modelKey = model, where }) {
             const table2 = getSchema2(model);
             const clause = where ? convertWhereClause(where, model, modelKey) : [];
-            return (await db2.select({ count: count() }).from(table2).where(...clause))[0].count;
+            return (await db3.select({ count: count() }).from(table2).where(...clause))[0].count;
           },
           async update({ model, modelKey = model, where, update: values2 }) {
             const table2 = getSchema2(model);
             const clause = convertWhereClause(where, model, modelKey);
-            return await withReturning(model, modelKey, db2.update(table2).set(values2).where(...clause), values2, where);
+            return await withReturning(model, modelKey, db3.update(table2).set(values2).where(...clause), values2, where);
           },
           async updateMany({ model, modelKey = model, where, update: values2 }) {
             const table2 = getSchema2(model);
             const clause = convertWhereClause(where, model, modelKey);
-            return getAffectedRowCount(await db2.update(table2).set(values2).where(...clause), "updateMany", {
+            return getAffectedRowCount(await db3.update(table2).set(values2).where(...clause), "updateMany", {
               model,
               where
             });
@@ -108777,12 +108846,12 @@ var init_dist14 = __esm({
           async delete({ model, modelKey = model, where }) {
             const table2 = getSchema2(model);
             const clause = convertWhereClause(where, model, modelKey);
-            return await db2.delete(table2).where(...clause);
+            return await db3.delete(table2).where(...clause);
           },
           async deleteMany({ model, modelKey = model, where }) {
             const table2 = getSchema2(model);
             const clause = convertWhereClause(where, model, modelKey);
-            return getAffectedRowCount(await db2.delete(table2).where(...clause), "deleteMany", {
+            return getAffectedRowCount(await db3.delete(table2).where(...clause), "deleteMany", {
               model,
               where
             });
@@ -108806,11 +108875,11 @@ var init_dist14 = __esm({
                   where
                 }) > 0 ? target : null;
               };
-              return inTransaction ? claimFromTransaction(db2) : db2.transaction(claimFromTransaction);
+              return inTransaction ? claimFromTransaction(db3) : db3.transaction(claimFromTransaction);
             }
             if (!idColumn) return null;
-            const targetIds = db2.select({ id: idColumn }).from(table2).where(...clause).limit(1);
-            return (await db2.delete(table2).where(inArray(idColumn, targetIds)).returning())[0] ?? null;
+            const targetIds = db3.select({ id: idColumn }).from(table2).where(...clause).limit(1);
+            return (await db3.delete(table2).where(inArray(idColumn, targetIds)).returning())[0] ?? null;
           },
           async incrementOne({ model, modelKey = model, where, increment, set: set3 }) {
             const table2 = getSchema2(model);
@@ -108847,11 +108916,11 @@ var init_dist14 = __esm({
                 await tx.update(table2).set(assignments).where(eq(idColumn, targetId)).execute();
                 return (await tx.select().from(table2).where(eq(idColumn, targetId)).limit(1).execute())[0] ?? null;
               };
-              return inTransaction ? mutateInTransaction(db2) : db2.transaction(mutateInTransaction);
+              return inTransaction ? mutateInTransaction(db3) : db3.transaction(mutateInTransaction);
             }
             if (!idColumn) return null;
-            const targetIds = db2.select({ id: idColumn }).from(table2).where(...clause).limit(1);
-            return (await db2.update(table2).set(assignments).where(inArray(idColumn, targetIds)).returning())[0] ?? null;
+            const targetIds = db3.select({ id: idColumn }).from(table2).where(...clause).limit(1);
+            return (await db3.update(table2).set(assignments).where(inArray(idColumn, targetIds)).returning())[0] ?? null;
           },
           options: config3
         };
@@ -108873,7 +108942,7 @@ var init_dist14 = __esm({
             }
             return data;
           },
-          transaction: config3.transaction ?? false ? (cb) => db.transaction((tx) => {
+          transaction: config3.transaction ?? false ? (cb) => db2.transaction((tx) => {
             return cb(createAdapterFactory({
               config: {
                 ...adapterOptions.config,
@@ -108883,38 +108952,38 @@ var init_dist14 = __esm({
             })(lazyOptions));
           }) : false
         },
-        adapter: createCustomAdapter(db)
+        adapter: createCustomAdapter(db2)
       };
       const adapter = createAdapterFactory(adapterOptions);
       return (options) => {
         lazyOptions = options;
         const instance = adapter(options);
-        registerSchemaCheck(instance, createSchemaCheck(() => findDrizzleSchemaProblems(config3.schema ?? db._?.fullSchema ?? {}, options, config3.usePlural), "drizzle"), { runtimeEnabled: checksSchema(options) });
+        registerSchemaCheck(instance, createSchemaCheck(() => findDrizzleSchemaProblems(config3.schema ?? db2._?.fullSchema ?? {}, options, config3.usePlural), "drizzle"), { runtimeEnabled: checksSchema(options) });
         return instance;
       };
     };
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/adapters/drizzle-adapter/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/adapters/drizzle-adapter/index.mjs
 var init_drizzle_adapter = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/adapters/drizzle-adapter/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/adapters/drizzle-adapter/index.mjs"() {
     init_dist14();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/package.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/package.mjs
 var version3;
 var init_package = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/package.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/package.mjs"() {
     version3 = "1.7.6";
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/version.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/version.mjs
 var PACKAGE_VERSION;
 var init_version4 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/version.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/version.mjs"() {
     init_package();
     PACKAGE_VERSION = version3;
   }
@@ -110435,6 +110504,113 @@ var init_directory = __esm({
   }
 });
 
+// ../cloud-api/dist/step-up.js
+function originMatchesRpId(statement) {
+  return new URL(statement.origin).hostname === statement.rpId;
+}
+function expiresAfterIssue(statement) {
+  return Date.parse(statement.expiresAt) > Date.parse(statement.issuedAt);
+}
+var STEP_UP_STATEMENT_MAX_BYTES, STEP_UP_STATEMENT_MAX_BASE64URL_LENGTH, STEP_UP_MAX_CREDENTIALS, base64url3, StepUpChallengeIdSchema, ComputerIdSchema, NO_CONTROL, INVISIBLE, displayText, SessionIdSchema, ToolCallIdSchema, Sha256HexSchema, NonceSchema, InstantSchema, CredentialIdSchema, RpIdSchema, OriginSchema, StepUpLoopbackReturnToSchema, STEP_UP_APPROVAL_STATEMENT_TYPE, STEP_UP_ENROL_STATEMENT_TYPE, StepUpStatementV1Schema, PasskeyEnrolStatementV1Schema, StepUpAnyStatementSchema, StepUpAssertionSchema, StepUpMessageSchema, LONE_SURROGATE;
+var init_step_up = __esm({
+  "../cloud-api/dist/step-up.js"() {
+    "use strict";
+    init_zod();
+    init_hubs();
+    STEP_UP_STATEMENT_MAX_BYTES = 262144;
+    STEP_UP_STATEMENT_MAX_BASE64URL_LENGTH = Math.ceil(STEP_UP_STATEMENT_MAX_BYTES * 4 / 3);
+    STEP_UP_MAX_CREDENTIALS = 16;
+    base64url3 = (max2) => external_exports.string().min(1).max(max2).regex(/^[A-Za-z0-9_-]+$/);
+    StepUpChallengeIdSchema = external_exports.string().min(1).max(64).regex(/^[\w.:-]+$/).describe("The id of one challenge the computer issued. Letters, digits and _ . : - only.");
+    ComputerIdSchema = StepUpChallengeIdSchema;
+    NO_CONTROL = /^[^\u0000-\u001f\u007f]*$/;
+    INVISIBLE = /[\p{Cf}\u2028\u2029]/u;
+    displayText = (max2) => external_exports.string().min(1).max(max2).regex(NO_CONTROL).refine((text3) => text3.trim() === text3, "no leading or trailing whitespace").refine((text3) => !INVISIBLE.test(text3), "no invisible characters");
+    SessionIdSchema = external_exports.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
+    ToolCallIdSchema = external_exports.string().min(1).max(256).regex(/^[\w.:-]+$/);
+    Sha256HexSchema = external_exports.string().regex(/^[0-9a-f]{64}$/);
+    NonceSchema = external_exports.string().length(43).regex(/^[A-Za-z0-9_-]+$/);
+    InstantSchema = external_exports.iso.datetime({ precision: 3 });
+    CredentialIdSchema = base64url3(1400);
+    RpIdSchema = external_exports.string().max(253).regex(/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/);
+    OriginSchema = HttpsOriginSchema.max(256);
+    StepUpLoopbackReturnToSchema = external_exports.string().max(2048).regex(/^http:\/\/(127\.0\.0\.1|localhost):[1-9][0-9]{0,4}\//, "must be a loopback http page").refine((value) => {
+      try {
+        const url2 = new URL(value);
+        return url2.protocol === "http:" && (url2.hostname === "127.0.0.1" || url2.hostname === "localhost") && url2.port !== "" && url2.username === "" && url2.password === "" && url2.hash === "" && url2.href === value;
+      } catch {
+        return false;
+      }
+    }, "must be a loopback http page with an explicit port, written canonically").describe("A page on the computer itself: plain http to its loopback address, explicit port.");
+    STEP_UP_APPROVAL_STATEMENT_TYPE = "dorkos.relay.approval.v1";
+    STEP_UP_ENROL_STATEMENT_TYPE = "dorkos.relay.passkey-enrol.v1";
+    StepUpStatementV1Schema = external_exports.strictObject({
+      t: external_exports.literal(STEP_UP_APPROVAL_STATEMENT_TYPE),
+      challengeId: StepUpChallengeIdSchema,
+      computerId: ComputerIdSchema,
+      computerName: displayText(64),
+      hubOrigin: OriginSchema,
+      sessionId: SessionIdSchema,
+      toolCallId: ToolCallIdSchema,
+      decision: external_exports.enum(["approve", "deny"]),
+      toolName: displayText(256),
+      displayName: displayText(256).optional(),
+      input: external_exports.json(),
+      inputSha256: Sha256HexSchema,
+      nonce: NonceSchema,
+      issuedAt: InstantSchema,
+      expiresAt: InstantSchema,
+      rpId: RpIdSchema,
+      origin: OriginSchema,
+      credentialIds: external_exports.array(CredentialIdSchema).min(1).max(STEP_UP_MAX_CREDENTIALS)
+    }).refine(originMatchesRpId, "the origin`s host must be the relying party id").refine(expiresAfterIssue, "a statement must expire after it was issued").describe("What the owner signs to approve or deny one tool call from the web.");
+    PasskeyEnrolStatementV1Schema = external_exports.strictObject({
+      t: external_exports.literal(STEP_UP_ENROL_STATEMENT_TYPE),
+      challengeId: StepUpChallengeIdSchema,
+      computerId: ComputerIdSchema,
+      computerName: displayText(64),
+      accountId: StepUpChallengeIdSchema,
+      userHandle: base64url3(128),
+      nonce: NonceSchema,
+      issuedAt: InstantSchema,
+      expiresAt: InstantSchema,
+      rpId: RpIdSchema,
+      origin: OriginSchema,
+      returnTo: StepUpLoopbackReturnToSchema,
+      excludeCredentialIds: external_exports.array(CredentialIdSchema).max(STEP_UP_MAX_CREDENTIALS)
+    }).refine(originMatchesRpId, "the origin`s host must be the relying party id").refine(expiresAfterIssue, "a statement must expire after it was issued").describe("What the owner signs, at the computer, to add an approvals passkey.");
+    StepUpAnyStatementSchema = external_exports.discriminatedUnion("t", [StepUpStatementV1Schema, PasskeyEnrolStatementV1Schema]).describe("An approval statement or a passkey enrol statement, told apart by `t`.");
+    StepUpAssertionSchema = external_exports.strictObject({
+      /** The challenge the computer issued, by its id. */
+      challengeId: StepUpChallengeIdSchema,
+      credentialId: CredentialIdSchema,
+      clientDataJSON: base64url3(4096),
+      authenticatorData: base64url3(1024),
+      signature: base64url3(512),
+      userHandle: base64url3(128).optional()
+    }).describe("A WebAuthn assertion over a challenge the computer issued, binary fields base64url.");
+    StepUpMessageSchema = external_exports.discriminatedUnion("type", [
+      external_exports.strictObject({ type: external_exports.literal("dorkos.stepup.ready") }),
+      external_exports.strictObject({
+        type: external_exports.literal("dorkos.stepup.request"),
+        v: external_exports.literal(1),
+        statement: base64url3(STEP_UP_STATEMENT_MAX_BASE64URL_LENGTH)
+      }),
+      external_exports.strictObject({
+        type: external_exports.literal("dorkos.stepup.result"),
+        challengeId: StepUpChallengeIdSchema,
+        assertion: StepUpAssertionSchema
+      }).refine((message2) => message2.assertion.challengeId === message2.challengeId, "the assertion must be for the same challenge"),
+      external_exports.strictObject({
+        type: external_exports.literal("dorkos.stepup.cancel"),
+        challengeId: StepUpChallengeIdSchema,
+        reason: external_exports.enum(["dismissed", "expired", "not-allowed"])
+      })
+    ]).describe("A message between the hub`s page and the approve page, told apart by `type`.");
+    LONE_SURROGATE = new RegExp("\\p{Cs}", "u");
+  }
+});
+
 // ../cloud-api/dist/index.js
 var init_dist15 = __esm({
   "../cloud-api/dist/index.js"() {
@@ -110453,6 +110629,7 @@ var init_dist15 = __esm({
     init_communities();
     init_hubs();
     init_directory();
+    init_step_up();
   }
 });
 
@@ -110505,10 +110682,10 @@ var init_desktop_sign_in = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_614509f08999547ecfbbff9e687b5da6/node_modules/@better-auth/api-key/dist/version-BjgKH8I0.mjs
+// ../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_9f33cd4e6a3de2100016969b8e81afec/node_modules/@better-auth/api-key/dist/version-BjgKH8I0.mjs
 var API_KEY_ERROR_CODES, PACKAGE_VERSION2;
 var init_version_BjgKH8I0 = __esm({
-  "../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_614509f08999547ecfbbff9e687b5da6/node_modules/@better-auth/api-key/dist/version-BjgKH8I0.mjs"() {
+  "../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_9f33cd4e6a3de2100016969b8e81afec/node_modules/@better-auth/api-key/dist/version-BjgKH8I0.mjs"() {
     init_error_codes();
     API_KEY_ERROR_CODES = defineErrorCodes({
       INVALID_METADATA_TYPE: "metadata must be an object or undefined",
@@ -110547,10 +110724,10 @@ var init_version_BjgKH8I0 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/_virtual/_rolldown/runtime.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/_virtual/_rolldown/runtime.mjs
 var __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __exportAll, __copyProps2, __reExport;
 var init_runtime = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/_virtual/_rolldown/runtime.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/_virtual/_rolldown/runtime.mjs"() {
     __defProp2 = Object.defineProperty;
     __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
     __getOwnPropNames2 = Object.getOwnPropertyNames;
@@ -110578,7 +110755,7 @@ var init_runtime = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/field-converter.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/field-converter.mjs
 function convertToDB(fields, values2) {
   const result2 = values2.id ? { id: values2.id } : {};
   for (const key in fields) {
@@ -110596,11 +110773,11 @@ function convertFromDB(fields, values2) {
   return result2;
 }
 var init_field_converter = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/field-converter.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/field-converter.mjs"() {
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/revoke-unproven-account-access.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/revoke-unproven-account-access.mjs
 async function waitForCleanupLock(ctx, identifier) {
   const deadline = Date.now() + cleanupLockWaitMs;
   while (Date.now() < deadline) {
@@ -110640,7 +110817,7 @@ async function revokeUnprovenAccountAccess(ctx, userId) {
 }
 var cleanupLockExpiresInMs, cleanupLockWaitMs, cleanupLockPollMs, cleanupLockIdentifier;
 var init_revoke_unproven_account_access = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/revoke-unproven-account-access.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/revoke-unproven-account-access.mjs"() {
     init_error2();
     cleanupLockExpiresInMs = 5e3;
     cleanupLockWaitMs = 2e3;
@@ -110649,7 +110826,7 @@ var init_revoke_unproven_account_access = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/to-zod.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/to-zod.mjs
 function toZodSchema({ fields, isClientSide }) {
   const zodFields = Object.keys(fields).reduce((acc, key) => {
     const field = fields[key];
@@ -110670,15 +110847,15 @@ function toZodSchema({ fields, isClientSide }) {
   return object(zodFields);
 }
 var init_to_zod = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/to-zod.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/to-zod.mjs"() {
     init_zod();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/index.mjs
 var db_exports2;
 var init_db3 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/db/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/db/index.mjs"() {
     init_runtime();
     init_get_schema();
     init_schema2();
@@ -110745,7 +110922,7 @@ var init_async = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/access/access.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/access/access.mjs
 function unknownResourceResponse(requestedResource) {
   return {
     success: false,
@@ -110821,19 +110998,19 @@ function createAccessControl(s2) {
   };
 }
 var init_access = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/access/access.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/access/access.mjs"() {
     init_error2();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/access/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/access/index.mjs
 var init_access2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/access/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/access/index.mjs"() {
     init_access();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/client/parser.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/client/parser.mjs
 function isValidDate(date5) {
   return date5 instanceof Date && !isNaN(date5.getTime());
 }
@@ -110886,7 +111063,7 @@ function parseJSON(value, options = { strict: true }) {
 }
 var PROTO_POLLUTION_PATTERNS, JSON_SIGNATURE, SPECIAL_VALUES, ISO_DATE_REGEX;
 var init_parser2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/client/parser.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/client/parser.mjs"() {
     PROTO_POLLUTION_PATTERNS = {
       proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
       constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -110907,14 +111084,14 @@ var init_parser2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/client/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/client/index.mjs
 var init_client = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/client/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/client/index.mjs"() {
     init_parser2();
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/adapter.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/adapter.mjs
 async function computeTeamMembershipKey(data) {
   const digest2 = await createHash("SHA-256").digest(new TextEncoder().encode(JSON.stringify([data.teamId, data.userId])));
   return base64Url.encode(new Uint8Array(digest2), { padding: false });
@@ -111033,7 +111210,7 @@ function stripTeamMembershipKeys(members2) {
 }
 var getOrgAdapter;
 var init_adapter2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/adapter.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/adapter.mjs"() {
     init_date();
     init_parser2();
     init_context2();
@@ -111731,10 +111908,10 @@ var init_adapter2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
 var defaultStatements, defaultAc, adminAc, ownerAc, memberAc, defaultRoles;
 var init_statement = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/access/statement.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/access/statement.mjs"() {
     init_access();
     defaultStatements = {
       organization: ["update", "delete"],
@@ -111812,10 +111989,10 @@ var init_statement = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/permission.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/permission.mjs
 var hasPermissionFn, cacheAllRoles;
 var init_permission = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/permission.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/permission.mjs"() {
     hasPermissionFn = (input4, acRoles) => {
       if (!input4.permissions) return false;
       const roles = input4.role.split(",");
@@ -111830,10 +112007,10 @@ var init_permission = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/has-permission.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/has-permission.mjs
 var rolePermissionsSchema, hasPermission;
 var init_has_permission = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/has-permission.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/has-permission.mjs"() {
     init_api4();
     init_statement();
     init_permission();
@@ -111868,10 +112045,10 @@ var init_has_permission = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
 var ORGANIZATION_ERROR_CODES;
 var init_error_codes2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/error-codes.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/error-codes.mjs"() {
     init_error_codes();
     ORGANIZATION_ERROR_CODES = defineErrorCodes({
       YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
@@ -111937,10 +112114,10 @@ var init_error_codes2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/shim.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/shim.mjs
 var shimContext;
 var init_shim = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/utils/shim.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/utils/shim.mjs"() {
     shimContext = (originalObject, newContext) => {
       const shimmedObj = {};
       for (const [key, value] of Object.entries(originalObject)) {
@@ -111963,10 +112140,10 @@ var init_shim = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/call.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/call.mjs
 var orgMiddleware, orgSessionMiddleware;
 var init_call = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/call.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/call.mjs"() {
     init_session2();
     init_api2();
     orgMiddleware = createAuthMiddleware(async () => {
@@ -111978,7 +112155,7 @@ var init_call = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-access-control.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-access-control.mjs
 async function checkForInvalidResources({ ac, ctx, permission }) {
   const validResources = Object.keys(ac.statements);
   const providedResources = Object.keys(permission);
@@ -112068,7 +112245,7 @@ async function checkIfRoleNameIsTakenByRoleInDB({ organizationId, role: role2, c
 }
 var normalizeRoleName, DEFAULT_MAXIMUM_ROLES_PER_ORGANIZATION, getAdditionalFields, baseCreateOrgRoleSchema, createOrgRole, deleteOrgRoleBodySchema, deleteOrgRole, listOrgRolesQuerySchema, listOrgRoles, getOrgRoleQuerySchema, getOrgRole, roleNameOrIdSchema, updateOrgRole;
 var init_crud_access_control = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-access-control.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-access-control.mjs"() {
     init_to_zod();
     init_error_codes2();
     init_call();
@@ -112659,10 +112836,10 @@ Please refer to the documentation here: https://better-auth.com/docs/plugins/org
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-invites.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-invites.mjs
 var baseInvitationSchema, getAdvancedGenerateId, hasBuiltInOpaqueInvitationIdGeneration, shouldRequireVerifiedEmailForInvitationIdAction, createInvitation, acceptInvitationBodySchema, acceptInvitation, rejectInvitationBodySchema, rejectInvitation, cancelInvitationBodySchema, cancelInvitation, getInvitationQuerySchema, getInvitation, listInvitationQuerySchema, listInvitations, listUserInvitations;
 var init_crud_invites = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-invites.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-invites.mjs"() {
     init_date();
     init_cookies2();
     init_to_zod();
@@ -113262,10 +113439,10 @@ var init_crud_invites = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-members.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-members.mjs
 var baseMemberSchema, addMember, removeMemberBodySchema, removeMember, updateMemberRoleBodySchema, updateMemberRole, getActiveMember, leaveOrganizationBodySchema, leaveOrganization, listMembers, getActiveMemberRoleQuerySchema, getActiveMemberRole;
 var init_crud_members = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-members.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-members.mjs"() {
     init_to_zod();
     init_session2();
     init_statement();
@@ -113784,10 +113961,10 @@ var init_crud_members = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-org.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-org.mjs
 var baseOrganizationSchema, createOrganization, checkOrganizationSlugBodySchema, checkOrganizationSlug, baseUpdateOrganizationSchema, updateOrganization, deleteOrganizationBodySchema, deleteOrganization, getOrganizationQuerySchema, getOrganization, getFullOrganizationQuerySchema, getFullOrganization, setActiveOrganizationBodySchema, setActiveOrganization, listOrganizations;
 var init_crud_org = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-org.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-org.mjs"() {
     init_cookies2();
     init_to_zod();
     init_session2();
@@ -114240,10 +114417,10 @@ var init_crud_org = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/schema.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/schema.mjs
 var roleSchema, invitationStatus, teamSchema, defaultRoles2;
 var init_schema3 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/schema.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/schema.mjs"() {
     init_id2();
     init_zod();
     roleSchema = string2();
@@ -114309,10 +114486,10 @@ var init_schema3 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-team.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-team.mjs
 var teamBaseSchema, createTeam, removeTeamBodySchema, removeTeam, updateTeam, listOrganizationTeamsQuerySchema, listOrganizationTeams, setActiveTeamBodySchema, setActiveTeam, listUserTeams, listTeamMembersQuerySchema, listTeamMembers, addTeamMemberBodySchema, addTeamMember, removeTeamMemberBodySchema, removeTeamMember;
 var init_crud_team = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/routes/crud-team.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/routes/crud-team.mjs"() {
     init_cookies2();
     init_to_zod();
     init_session2();
@@ -115080,7 +115257,7 @@ var init_crud_team = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/organization.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/organization.mjs
 function parseRoles(roles) {
   return Array.isArray(roles) ? roles.join(",") : roles;
 }
@@ -115891,7 +116068,7 @@ function organization(options) {
 }
 var createHasPermissionBodySchema, createHasPermission;
 var init_organization = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/organization.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/organization.mjs"() {
     init_session2();
     init_version4();
     init_statement();
@@ -115970,7 +116147,7 @@ var init_organization = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/index.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/index.mjs
 var organization_exports = {};
 __export(organization_exports, {
   getOrgAdapter: () => getOrgAdapter,
@@ -115979,14 +116156,14 @@ __export(organization_exports, {
   parseRoles: () => parseRoles
 });
 var init_organization2 = __esm({
-  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_9e8f90c40614849e7a32e3ab5b745f3a/node_modules/better-auth/dist/plugins/organization/index.mjs"() {
+  "../../node_modules/.pnpm/better-auth@1.7.6_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_drizzle-kit@0.31.11_dr_22713e62280c548d1e4e1f724a123319/node_modules/better-auth/dist/plugins/organization/index.mjs"() {
     init_adapter2();
     init_has_permission();
     init_organization();
   }
 });
 
-// ../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_614509f08999547ecfbbff9e687b5da6/node_modules/@better-auth/api-key/dist/index.mjs
+// ../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_9f33cd4e6a3de2100016969b8e81afec/node_modules/@better-auth/api-key/dist/index.mjs
 function parseDoubleStringifiedMetadata(metadata) {
   if (metadata == null) return null;
   if (typeof metadata === "object") return metadata;
@@ -118085,7 +118262,7 @@ function apiKey(_configurations, _options) {
 }
 var STORAGE_CONCURRENCY, refListLocks, getDate2, createApiKeyBodySchema, deleteApiKeyBodySchema, getApiKeyQuerySchema, listApiKeysQuerySchema, updateApiKeyBodySchema, verifyApiKeyBodySchema, lastChecked, apiKeySchema, defaultKeyHasher2, API_KEY_TABLE_NAME;
 var init_dist16 = __esm({
-  "../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_614509f08999547ecfbbff9e687b5da6/node_modules/@better-auth/api-key/dist/index.mjs"() {
+  "../../node_modules/.pnpm/@better-auth+api-key@1.7.6_@better-auth+core@1.7.6_@better-auth+utils@0.5.0_@better-fet_9f33cd4e6a3de2100016969b8e81afec/node_modules/@better-auth/api-key/dist/index.mjs"() {
     init_version_BjgKH8I0();
     init_api2();
     init_ip();
@@ -122434,9 +122611,9 @@ function construct(client2, config3 = {}) {
     };
   }
   const session2 = new BetterSQLiteSession(client2, dialect, schema3, { logger: logger3 });
-  const db = new BetterSQLite3Database("sync", dialect, session2, schema3);
-  db.$client = client2;
-  return db;
+  const db2 = new BetterSQLite3Database("sync", dialect, session2, schema3);
+  db2.$client = client2;
+  return db2;
 }
 function drizzle(...params) {
   if (params[0] === void 0 || typeof params[0] === "string") {
@@ -122523,9 +122700,9 @@ var init_migrator2 = __esm({
 });
 
 // ../../node_modules/.pnpm/drizzle-orm@0.45.3_@electric-sql+pglite@0.5.8_@neondatabase+serverless@1.1.0_@opentelem_30a1d0dbd5a797b7a9423103d631b055/node_modules/drizzle-orm/better-sqlite3/migrator.js
-function migrate(db, config3) {
+function migrate(db2, config3) {
   const migrations = readMigrationFiles(config3);
-  db.dialect.migrate(migrations, db.session, config3);
+  db2.dialect.migrate(migrations, db2.session, config3);
 }
 var init_migrator3 = __esm({
   "../../node_modules/.pnpm/drizzle-orm@0.45.3_@electric-sql+pglite@0.5.8_@neondatabase+serverless@1.1.0_@opentelem_30a1d0dbd5a797b7a9423103d631b055/node_modules/drizzle-orm/better-sqlite3/migrator.js"() {
@@ -122859,6 +123036,13 @@ var init_approvals = __esm({
          * restart.
          */
         blockedRequest: integer2("blocked_request", { mode: "boolean" }).notNull().default(false),
+        /**
+         * Whether granting it could raise what agents may do: the call reaches the
+         * Permissions, Safety limits or Reach & secrets areas (DOR-3037). Set when
+         * the card is made, from the call's input, which the row does not keep. A
+         * Wi-Fi sign-in may not grant such a card, even once.
+         */
+        raisesPermissions: integer2("raises_permissions", { mode: "boolean" }).notNull().default(false),
         /**
          * The reason the agent gave with a blocked request, capped and swept for
          * secrets like the summary. Null on every other approval.
@@ -123545,6 +123729,12 @@ var init_sessions = __esm({
         // here, not on the `session_limits` row, because the resumed turn's own
         // `turn_start` deletes that row. NULL = never resumed automatically.
         lastAutoResumeFor: text("last_auto_resume_for"),
+        // Whether this chat's latest turn read words DorkOS cannot vouch for, such
+        // as a Wi-Fi sign-in's, so it ran at the runtime's default at most
+        // (DOR-3037). Every turn that picks the chat up on its own (an approval's
+        // answer, a resume, a wake) is held the same way, after a restart too.
+        // NULL = no turn recorded since this column existed: read as held.
+        lastTurnHeld: integer2("last_turn_held", { mode: "boolean" }),
         createdAt: text("created_at").notNull(),
         // --- Mutable per-session settings (last-write-wins; ADR-0260) ---
         // NULL = "no explicit preference; use the runtime's default."
@@ -123575,7 +123765,12 @@ var init_sessions = __esm({
         clientId: text("client_id").notNull(),
         enqueuedAt: integer2("enqueued_at").notNull(),
         // The `ClientContext` captured at enqueue time, JSON. NULL = none was sent.
-        contextJson: text("context_json")
+        contextJson: text("context_json"),
+        // Whether the turn this row starts is held to the runtime's default level,
+        // because the words came from somewhere DorkOS cannot vouch for (a Wi-Fi
+        // sign-in, DOR-3037). Kept on the row so the hold survives a restart and an
+        // edit, when no in-memory plan carries the turn's ceiling.
+        heldToDefault: integer2("held_to_default", { mode: "boolean" }).notNull().default(false)
       },
       (t2) => ({
         // (session_id, position) rather than session_id alone: every read of this
@@ -125448,6 +125643,12 @@ var init_rooms2 = __esm({
          * restart does not read a teammate-marked agent post as merely an outsider's. Off the wire.
          */
         turnMarks: text("turn_marks"),
+        /**
+         * Whether the turns this post starts, and the beats that read it, are held
+         * to the runtime's default: a person wrote it from Wi-Fi (DOR-3037). Kept on
+         * the row so the hold outlives a restart. Off the wire, like `dispatchId`.
+         */
+        heldToDefault: integer2("held_to_default", { mode: "boolean" }).notNull().default(false),
         /** The entry this one answers, in this same room. Null for a top-level entry. */
         parentEntryId: text("parent_entry_id"),
         /**
@@ -127957,8 +128158,8 @@ function configureAndWrap(sqlite) {
   sqlite.pragma("secure_delete = ON");
   return drizzle(sqlite, { schema: schema_exports });
 }
-function runMigrations(db) {
-  migrate(db, { migrationsFolder: migrationsFolder() });
+function runMigrations(db2) {
+  migrate(db2, { migrationsFolder: migrationsFolder() });
 }
 var DatabaseOpenError;
 var init_src2 = __esm({
@@ -128886,8 +129087,8 @@ var init_trusted_origins2 = __esm({
 });
 
 // ../../apps/server/src/services/core/auth/accounts.ts
-function findOwnerAccount(db) {
-  return db.select({ id: user.id, name: user.name }).from(user).orderBy(asc(user.createdAt)).limit(1).get() ?? null;
+function findOwnerAccount(db2) {
+  return db2.select({ id: user.id, name: user.name }).from(user).orderBy(asc(user.createdAt)).limit(1).get() ?? null;
 }
 var init_accounts = __esm({
   "../../apps/server/src/services/core/auth/accounts.ts"() {
@@ -129116,10 +129317,11 @@ var init_cookie_security = __esm({
 });
 
 // ../shared/src/session-relay.ts
-var SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_INNER_FRAME_BYTES, SESSION_RELAY_MAX_MESSAGE_LENGTH, RelayMessageContentSchema, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, RelayAdvertisedFeaturesSchema, RelayRequestIdSchema, StreamIdSchema, RelaySessionIdSchema, RelayAgentIdSchema, ToolCallIdSchema, ResumeCursorSchema, NO_CONTROL, INVISIBLE, RelayDisplayNameSchema, RelayDeviceSchema, base64url3, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema;
+var SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_INNER_FRAME_BYTES, SESSION_RELAY_MAX_MESSAGE_LENGTH, RelayMessageContentSchema, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, RelayAdvertisedFeaturesSchema, RelayRequestIdSchema, StreamIdSchema, RelaySessionIdSchema, RelayAgentIdSchema, ToolCallIdSchema2, ResumeCursorSchema, NO_CONTROL2, INVISIBLE2, RelayDisplayNameSchema, RelayDeviceSchema, base64url4, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema;
 var init_session_relay = __esm({
   "../shared/src/session-relay.ts"() {
     "use strict";
+    init_dist15();
     init_zod();
     init_schemas4();
     SESSION_RELAY_MAX_FRAME_LENGTH = 1048576;
@@ -129135,16 +129337,16 @@ var init_session_relay = __esm({
     StreamIdSchema = RelayRequestIdSchema;
     RelaySessionIdSchema = external_exports.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
     RelayAgentIdSchema = external_exports.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/);
-    ToolCallIdSchema = external_exports.string().min(1).max(256).regex(/^[\w.:-]+$/);
+    ToolCallIdSchema2 = external_exports.string().min(1).max(256).regex(/^[\w.:-]+$/);
     ResumeCursorSchema = external_exports.string().max(256).regex(/^[0-9a-f-]+-\d+-g\d+-\d+$/);
-    NO_CONTROL = /^[^\u0000-\u001f\u007f]*$/;
-    INVISIBLE = /[\p{Cf}\u2028\u2029]/u;
-    RelayDisplayNameSchema = external_exports.string().min(1).max(64).regex(NO_CONTROL).refine((name2) => name2.trim() === name2, "no leading or trailing whitespace").refine((name2) => !INVISIBLE.test(name2), "no invisible characters");
+    NO_CONTROL2 = /^[^\u0000-\u001f\u007f]*$/;
+    INVISIBLE2 = /[\p{Cf}\u2028\u2029]/u;
+    RelayDisplayNameSchema = external_exports.string().min(1).max(64).regex(NO_CONTROL2).refine((name2) => name2.trim() === name2, "no leading or trailing whitespace").refine((name2) => !INVISIBLE2.test(name2), "no invisible characters");
     RelayDeviceSchema = external_exports.strictObject({
       id: external_exports.string().min(8).max(64).regex(/^[A-Za-z0-9_-]+$/),
       label: RelayDisplayNameSchema
     });
-    base64url3 = (max2) => external_exports.string().min(1).max(max2).regex(/^[A-Za-z0-9_-]+$/);
+    base64url4 = (max2) => external_exports.string().min(1).max(max2).regex(/^[A-Za-z0-9_-]+$/);
     ChatsListRequestSchema = external_exports.strictObject({
       op: external_exports.literal("chats.list"),
       agentId: RelayAgentIdSchema
@@ -129171,33 +129373,25 @@ var init_session_relay = __esm({
     InteractionChallengeRequestSchema = external_exports.strictObject({
       op: external_exports.literal("interaction.challenge"),
       sessionId: RelaySessionIdSchema,
-      toolCallId: ToolCallIdSchema,
+      toolCallId: ToolCallIdSchema2,
       decision: ApprovalDecisionSchema
     });
-    RelayApprovalProofSchema = external_exports.strictObject({
-      /** The `challengeId` the computer answered `interaction.challenge` with. */
-      challengeId: RelayRequestIdSchema,
-      credentialId: base64url3(1400),
-      clientDataJSON: base64url3(4096),
-      authenticatorData: base64url3(1024),
-      signature: base64url3(512),
-      userHandle: base64url3(128).optional()
-    });
+    RelayApprovalProofSchema = StepUpAssertionSchema;
     InteractionAnswerSchema = external_exports.discriminatedUnion("kind", [
       external_exports.strictObject({
         kind: external_exports.literal("approve"),
-        toolCallId: ToolCallIdSchema,
+        toolCallId: ToolCallIdSchema2,
         proof: RelayApprovalProofSchema
       }),
       external_exports.strictObject({
         kind: external_exports.literal("deny"),
-        toolCallId: ToolCallIdSchema,
+        toolCallId: ToolCallIdSchema2,
         reason: external_exports.string().max(DENY_REASON_MAX_LENGTH).optional(),
         proof: RelayApprovalProofSchema
       }),
       external_exports.strictObject({
         kind: external_exports.literal("answer"),
-        toolCallId: ToolCallIdSchema,
+        toolCallId: ToolCallIdSchema2,
         answers: external_exports.record(external_exports.string().regex(/^\d{1,3}$/), external_exports.string().max(1e4))
       })
     ]);
@@ -129229,10 +129423,20 @@ var init_session_relay = __esm({
         receipt: InterruptReceiptSchema,
         cancelledQueued: external_exports.array(QueuedMessageSchema)
       }),
+      /**
+       * The statement to sign. There is no separate challenge: the passkey signs
+       * `stepUpChallenge(bytes)` (`@dork-labs/cloud-api`) over the decoded
+       * statement bytes, never a value the hub hands over. `challengeId` and
+       * `expiresAt` repeat the statement's own, so a hub must check they match
+       * before using them ({@link assertChallengeResultMatches}). Changed without a
+       * version bump: no build has ever answered `interaction.challenge` (the
+       * computer refuses it, `refuseApproval`), so no peer has ever parsed this
+       * result.
+       */
       "interaction.challenge": external_exports.strictObject({
         challengeId: RelayRequestIdSchema,
-        /** The bytes to sign, base64url. Opaque to the web side. */
-        challenge: base64url3(256),
+        /** The `dorkos.relay.approval.v1` statement bytes, base64url. */
+        statement: base64url4(STEP_UP_STATEMENT_MAX_BASE64URL_LENGTH),
         /** When the computer stops accepting a proof over it. */
         expiresAt: external_exports.string().datetime()
       }),
@@ -129340,7 +129544,7 @@ var init_session_relay = __esm({
 });
 
 // ../shared/src/session-relay-link.ts
-var RELAY_LINK_CODE_TTL_MS, RelayLinkComputerIdSchema, Sha256Base64urlSchema, NO_CONTROL2, RelayLinkComputerNameSchema, RelayLinkRequestSchema, RelayLinkResponseSchema, HubComputerSummarySchema, HubComputerListSchema, HubLinkCodeSchema, SessionRelayLevelSchema, SessionRelayStatusSchema, StepUpPasswordSchema, SessionRelayLinkBodySchema, SessionRelayLevelBodySchema, SessionRelayResumeBodySchema, SessionRelayLinkRefusalSchema, SessionRelayDeviceSchema, SessionRelayPresenceSchema, SessionRelayDeviceListSchema;
+var RELAY_LINK_CODE_TTL_MS, RelayLinkComputerIdSchema, Sha256Base64urlSchema, NO_CONTROL3, RelayLinkComputerNameSchema, RelayLinkRequestSchema, RelayLinkResponseSchema, HubComputerSummarySchema, HubComputerListSchema, HubLinkCodeSchema, SessionRelayLevelSchema, SessionRelayStatusSchema, StepUpPasswordSchema, SessionRelayLinkBodySchema, SessionRelayLevelBodySchema, SessionRelayResumeBodySchema, SessionRelayLinkRefusalSchema, SessionRelayDeviceSchema, SessionRelayPresenceSchema, SessionRelayDeviceListSchema, SessionRelayPasskeyLabelSchema, SessionRelayPasskeyStartBodySchema, SessionRelayPasskeyStartSchema, base64urlText, SessionRelayPasskeyAttestationSchema, SessionRelayPasskeyFinishBodySchema, SessionRelayPasskeySchema, SessionRelayPasskeyListSchema, SessionRelayPasskeyRemoveBodySchema;
 var init_session_relay_link = __esm({
   "../shared/src/session-relay-link.ts"() {
     init_zod();
@@ -129348,7 +129552,7 @@ var init_session_relay_link = __esm({
     RELAY_LINK_CODE_TTL_MS = 10 * 60 * 1e3;
     RelayLinkComputerIdSchema = external_exports.string().min(1).max(64).regex(/^[\w.:-]+$/);
     Sha256Base64urlSchema = external_exports.string().length(43).regex(/^[A-Za-z0-9_-]+$/);
-    NO_CONTROL2 = /^[^\u0000-\u001f\u007f]*$/;
+    NO_CONTROL3 = /^[^\u0000-\u001f\u007f]*$/;
     RelayLinkComputerNameSchema = RelayDisplayNameSchema;
     RelayLinkRequestSchema = external_exports.strictObject({
       v: external_exports.literal(1),
@@ -129367,9 +129571,9 @@ var init_session_relay_link = __esm({
       /** The hub's Ed25519 public key, raw 32 bytes base64url. Pin this one. */
       hubKey: RelayPinnedHubKeySchema,
       /** The hub owner's account id at `issuer`. */
-      ownerAccountId: external_exports.string().min(1).max(128).regex(NO_CONTROL2).optional(),
+      ownerAccountId: external_exports.string().min(1).max(128).regex(NO_CONTROL3).optional(),
       /** The issuer that account id belongs to. */
-      issuer: external_exports.string().min(1).max(512).startsWith("https://").regex(NO_CONTROL2).optional(),
+      issuer: external_exports.string().min(1).max(512).startsWith("https://").regex(NO_CONTROL3).optional(),
       signature: RelaySignatureSchema
     });
     HubComputerSummarySchema = external_exports.object({
@@ -129457,6 +129661,63 @@ var init_session_relay_link = __esm({
     SessionRelayDeviceListSchema = external_exports.object({
       devices: external_exports.array(SessionRelayDeviceSchema)
     });
+    SessionRelayPasskeyLabelSchema = external_exports.string().trim().min(1).max(64).regex(/^[^\u0000-\u001f\u007f]*$/);
+    SessionRelayPasskeyStartBodySchema = external_exports.object({
+      /** The owner's password; see `StepUpPasswordSchema`. */
+      password: StepUpPasswordSchema.optional(),
+      label: SessionRelayPasskeyLabelSchema,
+      /** The relying party: the approve page's host. Derived from `origin` when left out. */
+      rpId: external_exports.string().min(1).max(253).optional(),
+      /** The approve page's https origin. */
+      origin: external_exports.string().min(1).max(256).optional()
+    });
+    SessionRelayPasskeyStartSchema = external_exports.object({
+      /** The enrol statement, base64url of its canonical bytes. */
+      statement: external_exports.string(),
+      /** The WebAuthn challenge: base64url `SHA-256` of the statement bytes. */
+      challenge: external_exports.string(),
+      /** The approve page's enrol page, the statement in its fragment. Open it in a browser. */
+      approveUrl: external_exports.string(),
+      /** When the statement stops being accepted (ISO 8601). */
+      expiresAt: external_exports.string()
+    });
+    base64urlText = (max2) => external_exports.string().min(1).max(max2).regex(/^[A-Za-z0-9_-]+$/);
+    SessionRelayPasskeyAttestationSchema = external_exports.object({
+      id: base64urlText(1400),
+      rawId: base64urlText(1400),
+      type: external_exports.literal("public-key"),
+      response: external_exports.object({
+        clientDataJSON: base64urlText(4096),
+        attestationObject: base64urlText(16384),
+        transports: external_exports.array(external_exports.string().max(32)).max(8).optional()
+      }),
+      clientExtensionResults: external_exports.record(external_exports.string(), external_exports.unknown()).default({}),
+      authenticatorAttachment: external_exports.enum(["platform", "cross-platform"]).optional()
+    });
+    SessionRelayPasskeyFinishBodySchema = external_exports.object({
+      statement: base64urlText(8192),
+      attestation: SessionRelayPasskeyAttestationSchema
+    });
+    SessionRelayPasskeySchema = external_exports.object({
+      credentialId: external_exports.string(),
+      label: external_exports.string(),
+      /** When it was added (ISO 8601). */
+      addedAt: external_exports.string(),
+      /** The COSE algorithm it signs with. */
+      alg: external_exports.number().int()
+    });
+    SessionRelayPasskeyListSchema = external_exports.object({
+      /** Present when the keys file is damaged: remove it (`DELETE /passkeys`) to start again. */
+      damaged: external_exports.boolean().optional(),
+      /** The pinned relying party; `null` until a passkey is added. */
+      rpId: external_exports.string().nullable(),
+      /** The pinned approve page; `null` until a passkey is added. */
+      origin: external_exports.string().nullable(),
+      keys: external_exports.array(SessionRelayPasskeySchema)
+    });
+    SessionRelayPasskeyRemoveBodySchema = external_exports.object({
+      password: StepUpPasswordSchema.optional()
+    });
   }
 });
 
@@ -129564,7 +129825,6 @@ function defuseSystemTags(text3, tagNames) {
 var IDENTITY_MAX_LENGTH, INVISIBLE_FORMAT, CONTROL_CHARS, PATTERN_CACHE;
 var init_untrusted_text = __esm({
   "../shared/src/untrusted-text.ts"() {
-    "use strict";
     IDENTITY_MAX_LENGTH = 80;
     INVISIBLE_FORMAT = /[\u00ad\u200b-\u200f\u202a-\u202e\u2060-\u2064\ufeff\ufff9-\ufffb]/g;
     CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
@@ -129958,6 +130218,10 @@ var init_config_disclosure = __esm({
       // nothing an agent needs. A launch it asks for that the rules refuse is
       // answered with a sentence naming the project, which is all it can act on.
       "runtimes.claudeCode.accounts[].onlyProjects": "withhold",
+      // Whether a person kept an account out of automatic moves (Re-seat P0). A
+      // boolean preference that names no folder and no secret; an agent knowing
+      // its seat will not move there on its own is harmless.
+      "runtimes.claudeCode.accounts[].noAutoMove": "expose",
       "runtimes.claudeCode.defaultAccountOnlyProjects": "withhold",
       "runtimes.claudeCode.projectAccounts": "withhold",
       // The execution defaults a new session on each runtime starts with. A model id
@@ -130703,6 +130967,10 @@ var init_config_write_policy = __esm({
       // account the person kept out of that project. Written by a person through
       // the two `PUT /api/runtimes/claude-code/...` routes behind the person bar.
       "runtimes.claudeCode.accounts[].onlyProjects": "operator-only",
+      // An account a person kept out of automatic moves (Re-seat P0). Clearing it
+      // would let an agent's seat move onto an account the person reserved, which
+      // is moving spend, so only a person changes it.
+      "runtimes.claudeCode.accounts[].noAutoMove": "operator-only",
       "runtimes.claudeCode.defaultAccountOnlyProjects": "operator-only",
       "runtimes.claudeCode.projectAccounts": "operator-only",
       // The execution defaults for new sessions on each runtime. Writable, and the
@@ -130914,6 +131182,10 @@ var init_config_write_policy = __esm({
           "runtimes.claudeCode.defaultAccountColor",
           "runtimes.claudeCode.dismissedFolders",
           "runtimes.claudeCode.accounts[].onlyProjects",
+          // Whether a room agent whose account ran out may be moved to this one on
+          // its own (re-seat). Which account the work runs on: an agent clearing it
+          // would move itself onto an account a person kept it off.
+          "runtimes.claudeCode.accounts[].noAutoMove",
           "runtimes.claudeCode.defaultAccountOnlyProjects",
           "runtimes.claudeCode.projectAccounts"
         ]
@@ -135063,6 +135335,40 @@ var init_turn_marks = __esm({
   }
 });
 
+// ../../apps/server/src/services/core/turn-power/continuation-hold.ts
+function noteTurnHold(sessionId, held2) {
+  if (!db) return;
+  const key = primaryOf(sessionId);
+  if (written.get(key) === held2) return;
+  try {
+    db.insert(sessionMetadata).values({
+      sessionId: key,
+      runtime: null,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      lastTurnHeld: held2
+    }).onConflictDoUpdate({ target: sessionMetadata.sessionId, set: { lastTurnHeld: held2 } }).run();
+    written.delete(key);
+    written.set(key, held2);
+    if (written.size > WRITTEN_MAX) written.delete(written.keys().next().value);
+  } catch (err) {
+    logger.warn("[continuation-hold] could not record the turn hold", {
+      sessionId: key,
+      err: err instanceof Error ? err.message : String(err)
+    });
+  }
+}
+var db, written, WRITTEN_MAX;
+var init_continuation_hold = __esm({
+  "../../apps/server/src/services/core/turn-power/continuation-hold.ts"() {
+    "use strict";
+    init_src2();
+    init_session_key_registry();
+    init_logger();
+    written = /* @__PURE__ */ new Map();
+    WRITTEN_MAX = 1e4;
+  }
+});
+
 // ../../apps/server/src/services/core/turn-power/turn-levels.ts
 function remember(map4, key, level) {
   map4.delete(key);
@@ -135119,7 +135425,9 @@ function recordLevels(runtime, storedModeOf) {
           } catch {
             stored = void 0;
           }
-          remember(turnLevels, sessionId, levelForTurn(target, stored, opts));
+          const level = levelForTurn(target, stored, opts);
+          remember(turnLevels, sessionId, level);
+          noteTurnHold(sessionId, level.outsider === true);
           const serial = ++nextTurnSerial;
           for (const id of /* @__PURE__ */ new Set([sessionId, primaryOf(sessionId)])) {
             turnSerials.delete(id);
@@ -135143,6 +135451,7 @@ var init_turn_levels = __esm({
     init_turn_marks();
     init_session_key_registry();
     init_outsider_turns();
+    init_continuation_hold();
     init_permission_semantics();
     TURN_LEVEL_MEMORY = 1e4;
     AUTO_MODE_ID2 = "auto";
@@ -137163,8 +137472,8 @@ function renderEnvironment(report2) {
   return redactSecrets(lines.join("\n"));
 }
 function renderWritten(report2) {
-  const written = report2.body?.trim();
-  if (written) return [sanitizeWritten(written)];
+  const written2 = report2.body?.trim();
+  if (written2) return [sanitizeWritten(written2)];
   return report2.kind === "feature" ? ["## What do you want DorkOS to do?", "", "", "## Why would it help?", "", ""] : [
     "## What happened?",
     "",
@@ -137195,9 +137504,9 @@ function renderBody(report2) {
   ].join("\n");
 }
 function renderUrl(report2) {
-  const written = report2.title?.trim();
+  const written2 = report2.title?.trim();
   const params = new URLSearchParams({
-    title: sanitizeWritten(written || TITLE_BY_KIND[report2.kind]),
+    title: sanitizeWritten(written2 || TITLE_BY_KIND[report2.kind]),
     body: renderBody(report2),
     labels: LABELS_BY_KIND[report2.kind].join(",")
   });
@@ -137212,22 +137521,22 @@ function codePointPrefix(text3, count2) {
 function buildIssueDraft(report2, maxBytes = FEEDBACK_URL_MAX_BYTES) {
   const url2 = renderUrl(report2);
   if (byteLength(url2) <= maxBytes) return { url: url2, truncated: false };
-  const written = report2.body?.trim() ?? "";
-  if (!written) return { url: url2, truncated: false };
-  const points = Array.from(written).length;
+  const written2 = report2.body?.trim() ?? "";
+  if (!written2) return { url: url2, truncated: false };
+  const points = Array.from(written2).length;
   let low = 0;
   let high = points;
   while (low < high) {
     const mid = Math.ceil((low + high) / 2);
-    const candidate = { ...report2, body: codePointPrefix(written, mid) + TRUNCATION_MARKER };
+    const candidate = { ...report2, body: codePointPrefix(written2, mid) + TRUNCATION_MARKER };
     if (byteLength(renderUrl(candidate)) <= maxBytes) low = mid;
     else high = mid - 1;
   }
-  const shortened = { ...report2, body: codePointPrefix(written, low) + TRUNCATION_MARKER };
+  const shortened = { ...report2, body: codePointPrefix(written2, low) + TRUNCATION_MARKER };
   return {
     url: renderUrl(shortened),
     truncated: true,
-    fullBody: sanitizeWritten(written)
+    fullBody: sanitizeWritten(written2)
   };
 }
 function buildIssueUrl(report2) {
@@ -137924,11 +138233,11 @@ function fillNullsWith(seed) {
   }
   return update;
 }
-function moveSessionContext(db, fromId, toId) {
-  const source = db.select().from(sessionContext).where(eq(sessionContext.sessionId, fromId)).get();
+function moveSessionContext(db2, fromId, toId) {
+  const source = db2.select().from(sessionContext).where(eq(sessionContext.sessionId, fromId)).get();
   if (!source) return;
-  const destination = db.select().from(sessionContext).where(eq(sessionContext.sessionId, toId)).get();
-  db.transaction((tx) => {
+  const destination = db2.select().from(sessionContext).where(eq(sessionContext.sessionId, toId)).get();
+  db2.transaction((tx) => {
     tx.delete(sessionContext).where(eq(sessionContext.sessionId, fromId)).run();
     if (destination && destination.observedAt >= source.observedAt) return;
     tx.insert(sessionContext).values({ ...source, sessionId: toId }).onConflictDoUpdate({
@@ -137995,8 +138304,8 @@ var init_runtime_registry = __esm({
        * this once after `createDb()` — before any route or service uses a
        * session-scoped method. Session-scoped methods throw if called before this.
        */
-      setDb(db) {
-        this.db = db;
+      setDb(db2) {
+        this.db = db2;
       }
       /**
        * Get a runtime by type.
@@ -138076,11 +138385,11 @@ var init_runtime_registry = __esm({
        *   settings change belongs to a session nobody has started yet.
        */
       async persistSessionRuntime(sessionId, runtime, origin, agentPath) {
-        const db = this.requireDb("persistSessionRuntime");
+        const db2 = this.requireDb("persistSessionRuntime");
         const agent = await readAgentExecutionDefaults(agentPath);
         const seedPolicy = seedForTurn(sessionId, origin);
         const seed = this.seedForNewRow(runtime, { agent, seedPolicy });
-        const result2 = await db.insert(sessionMetadata).values({
+        const result2 = await db2.insert(sessionMetadata).values({
           sessionId,
           runtime,
           agentPath: agentPath ?? null,
@@ -138132,8 +138441,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - The minted session id whose launch never produced a turn
        */
       async forgetUnstartedSession(sessionId) {
-        const db = this.requireDb("forgetUnstartedSession");
-        db.delete(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).run();
+        const db2 = this.requireDb("forgetUnstartedSession");
+        db2.delete(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).run();
         return Promise.resolve();
       }
       /**
@@ -138181,8 +138490,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - Session identifier
        */
       async resolveSessionRuntime(sessionId, options = {}) {
-        const db = this.requireDb("resolveSessionRuntime");
-        const row2 = db.select({ runtime: sessionMetadata.runtime }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        const db2 = this.requireDb("resolveSessionRuntime");
+        const row2 = db2.select({ runtime: sessionMetadata.runtime }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
         if (row2?.runtime) {
           const source = this.getNativeSessionAccount(sessionId);
           if (row2.runtime === "codex" && source && source !== resolveCodexHome())
@@ -138254,8 +138563,8 @@ var init_runtime_registry = __esm({
         if (caller.kind !== "operator" && caller.kind !== "program") return;
         if (!session2.cwd) return;
         await validateBoundaryOrDorkHome(session2.cwd);
-        const db = this.requireDb("rememberNativeSession");
-        db.transaction((tx) => {
+        const db2 = this.requireDb("rememberNativeSession");
+        db2.transaction((tx) => {
           const existing = tx.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, session2.id)).get();
           if (existing?.runtime && existing.runtime !== session2.runtime)
             throw new AmbiguousSessionError();
@@ -138287,9 +138596,9 @@ var init_runtime_registry = __esm({
       }
       /** Actual native directory, distinct from the agent's ownership provenance. */
       getNativeSessionCwd(sessionId) {
-        const db = this.db;
-        if (!db) return null;
-        return db.select({ cwd: sessionNativeBindings.cwd }).from(sessionNativeBindings).where(eq(sessionNativeBindings.sessionId, sessionId)).get()?.cwd ?? null;
+        const db2 = this.db;
+        if (!db2) return null;
+        return db2.select({ cwd: sessionNativeBindings.cwd }).from(sessionNativeBindings).where(eq(sessionNativeBindings.sessionId, sessionId)).get()?.cwd ?? null;
       }
       // ---------------------------------------------------------------------------
       // Per-session settings store (SessionSettingsPort; ADR-0260)
@@ -138316,9 +138625,9 @@ var init_runtime_registry = __esm({
        * @param agentPath - The agent's directory, exactly as it was bound.
        */
       listSessionIdsForAgentPath(agentPath) {
-        const db = this.db;
-        if (!db) return /* @__PURE__ */ new Set();
-        const rows = db.select({ sessionId: sessionMetadata.sessionId }).from(sessionMetadata).where(eq(sessionMetadata.agentPath, agentPath)).all();
+        const db2 = this.db;
+        if (!db2) return /* @__PURE__ */ new Set();
+        const rows = db2.select({ sessionId: sessionMetadata.sessionId }).from(sessionMetadata).where(eq(sessionMetadata.agentPath, agentPath)).all();
         return new Set(rows.map((row2) => row2.sessionId));
       }
       /**
@@ -138332,8 +138641,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - Session identifier
        */
       async getSessionAgentPath(sessionId) {
-        const db = this.requireDb("getSessionAgentPath");
-        const row2 = db.select({ agentPath: sessionMetadata.agentPath }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        const db2 = this.requireDb("getSessionAgentPath");
+        const row2 = db2.select({ agentPath: sessionMetadata.agentPath }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
         return row2?.agentPath ?? null;
       }
       /**
@@ -138345,8 +138654,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - Session identifier
        */
       getSessionLaunchOrigin(sessionId) {
-        const db = this.requireDb("getSessionLaunchOrigin");
-        const row2 = db.select({ launchOrigin: sessionMetadata.launchOrigin }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        const db2 = this.requireDb("getSessionLaunchOrigin");
+        const row2 = db2.select({ launchOrigin: sessionMetadata.launchOrigin }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
         return row2?.launchOrigin ?? null;
       }
       /**
@@ -138359,8 +138668,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - Session identifier
        */
       getLastAutoResumeFor(sessionId) {
-        const db = this.requireDb("getLastAutoResumeFor");
-        const row2 = db.select({ lastAutoResumeFor: sessionMetadata.lastAutoResumeFor }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        const db2 = this.requireDb("getLastAutoResumeFor");
+        const row2 = db2.select({ lastAutoResumeFor: sessionMetadata.lastAutoResumeFor }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
         return row2?.lastAutoResumeFor ?? null;
       }
       /**
@@ -138374,8 +138683,8 @@ var init_runtime_registry = __esm({
        *   `null` to put back "never" when the resume could not be sent
        */
       markAutoResumed(sessionId, episode) {
-        const db = this.requireDb("markAutoResumed");
-        db.insert(sessionMetadata).values({
+        const db2 = this.requireDb("markAutoResumed");
+        db2.insert(sessionMetadata).values({
           sessionId,
           runtime: null,
           createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -138393,8 +138702,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - Session identifier
        */
       storedPermissionModeOf(sessionId) {
-        const db = this.requireDb("storedPermissionModeOf");
-        const row2 = db.select({ permissionMode: sessionMetadata.permissionMode }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        const db2 = this.requireDb("storedPermissionModeOf");
+        const row2 = db2.select({ permissionMode: sessionMetadata.permissionMode }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
         return row2?.permissionMode ?? null;
       }
       /**
@@ -138404,8 +138713,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - Session identifier
        */
       async getSessionSettings(sessionId) {
-        const db = this.requireDb("getSessionSettings");
-        const row2 = db.select({
+        const db2 = this.requireDb("getSessionSettings");
+        const row2 = db2.select({
           permissionMode: sessionMetadata.permissionMode,
           model: sessionMetadata.model,
           effort: sessionMetadata.effort,
@@ -138439,10 +138748,10 @@ var init_runtime_registry = __esm({
        * @param settings - Partial settings to persist (omitted keys are untouched)
        */
       async saveSessionSettings(sessionId, settings) {
-        const db = this.requireDb("saveSessionSettings");
+        const db2 = this.requireDb("saveSessionSettings");
         const patch = pickSettings(settings);
         if (Object.keys(patch).length === 0) return;
-        db.insert(sessionMetadata).values({
+        db2.insert(sessionMetadata).values({
           sessionId,
           // No owner: a preference chosen in a picker is not a binding.
           runtime: null,
@@ -138462,8 +138771,8 @@ var init_runtime_registry = __esm({
        * @param sessionId - The id the caller minted.
        */
       async discardSessionSettings(sessionId) {
-        const db = this.requireDb("discardSessionSettings");
-        db.delete(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).run();
+        const db2 = this.requireDb("discardSessionSettings");
+        db2.delete(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).run();
       }
       /**
        * The `permission_mode` a CLAIM should write: the stored one if the runtime
@@ -138636,10 +138945,10 @@ var init_runtime_registry = __esm({
        */
       async rekeySessionSettings(fromId, toId) {
         if (fromId === toId) return;
-        const db = this.requireDb("rekeySessionSettings");
+        const db2 = this.requireDb("rekeySessionSettings");
         withSessionLimitStore("rekey", (store) => store.rekeySession(fromId, toId));
         try {
-          moveSessionContext(db, fromId, toId);
+          moveSessionContext(db2, fromId, toId);
         } catch (err) {
           logger.warn("[RuntimeRegistry] could not move a session context reading", {
             fromId,
@@ -138665,10 +138974,10 @@ var init_runtime_registry = __esm({
             err: err instanceof Error ? err.message : String(err)
           });
         }
-        const source = db.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, fromId)).get();
+        const source = db2.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, fromId)).get();
         if (!source) return;
-        const destination = db.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, toId)).get();
-        db.transaction((tx) => {
+        const destination = db2.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, toId)).get();
+        db2.transaction((tx) => {
           const nativeSource = tx.select().from(sessionNativeBindings).where(eq(sessionNativeBindings.sessionId, fromId)).get();
           if (nativeSource) {
             tx.insert(sessionNativeBindings).values({ ...nativeSource, sessionId: toId }).onConflictDoNothing({ target: sessionNativeBindings.sessionId }).run();
@@ -138719,9 +139028,9 @@ var init_runtime_registry = __esm({
       getSessionBindings(ids) {
         const result2 = /* @__PURE__ */ new Map();
         if (ids.length === 0) return result2;
-        const db = this.requireDb("getSessionBindings");
+        const db2 = this.requireDb("getSessionBindings");
         for (let i2 = 0; i2 < ids.length; i2 += BOUND_RUNTIME_CHUNK_SIZE) {
-          const rows = db.select({
+          const rows = db2.select({
             sessionId: sessionMetadata.sessionId,
             runtime: sessionMetadata.runtime,
             createdAt: sessionMetadata.createdAt
@@ -138747,8 +139056,8 @@ var init_runtime_registry = __esm({
       getSessionSettingsMany(ids) {
         const result2 = /* @__PURE__ */ new Map();
         if (ids.length === 0) return result2;
-        const db = this.requireDb("getSessionSettingsMany");
-        const rows = db.select({
+        const db2 = this.requireDb("getSessionSettingsMany");
+        const rows = db2.select({
           sessionId: sessionMetadata.sessionId,
           permissionMode: sessionMetadata.permissionMode,
           model: sessionMetadata.model,
@@ -147623,7 +147932,7 @@ ${TOOL_NAME_NOTE}
 You are running inside DorkOS, a workspace for people and agents, as a co-worker
 on the team. You can do what a person can do in the app: make agents, schedule work,
 install packages, read activity, change settings. Siblings: managing-agents, scheduling-tasks,
-using-the-marketplace, reading-activity, answering-dorkos-questions, working-in-room-repos, working-with-spin-off-chats, working-on-a-heartbeat.
+using-the-marketplace, reading-activity, answering-dorkos-questions, working-in-room-repos, working-with-spin-off-chats, working-on-a-heartbeat, continuing-on-another-account.
 
 ## Two ways to act, pick one
 
@@ -147770,6 +148079,69 @@ one section, where a patch of \`ui.sidebar.groups\` rewrites every section at on
   }
 });
 
+// ../operating-skills/src/skills/continuing-on-another-account.ts
+var continuingOnAnotherAccount;
+var init_continuing_on_another_account = __esm({
+  "../operating-skills/src/skills/continuing-on-another-account.ts"() {
+    "use strict";
+    init_tool_name_note();
+    continuingOnAnotherAccount = {
+      name: "continuing-on-another-account",
+      description: "Use when your room or DM seat was moved to another Claude account: a room line says you ran out of usage and are continuing on another account, switched accounts, or started a fresh chat because your earlier one expired, or your background opens with a summary of a previous session. Covers what moved and what did not, finishing an answer without repeating it, and who can move you.",
+      body: `# Continuing on another account
+
+${TOOL_NAME_NOTE}
+
+Each agent in a room or DM has one **seat** there: the chat it answers in. When the
+Claude account that chat runs on runs out of usage, DorkOS moves the seat to the
+account with the most usage left, and you carry on. Nobody had to step in.
+
+## How you can tell
+
+- A quiet line in the room, about you: "\u2026 ran out of usage on Claude4, so it's
+  continuing on Claude3.", "\u2026 is continuing on Claude3, because Claude4 is almost
+  out of usage.", or, in a room with people from outside, "\u2026 switched accounts to
+  keep answering."
+- "\u2026 started a fresh chat here. Its earlier one had expired." means Claude Code
+  removed your old transcript. Same seat, nothing to recover.
+- Your background opens with a summary of the previous session: where it stopped,
+  the files it touched, its last messages, and the path to its transcript.
+
+## What moved, and what did not
+
+- **New:** this session, and the account it bills. Your memory of the old session
+  is the summary, plus the room history in your context.
+- **The same:** your power. The new session copies the old one's permission mode,
+  model and effort, never more. Any mark the old session carried (words from
+  outside your owner's circle) carries too, so what you pass on is capped exactly as
+  before.
+- **Unchanged:** your "Runs on" setting. Only this seat moved.
+
+## Finish, don't repeat
+
+The turn you wake up in is usually the message the old session was answering.
+
+1. Read the summary and the room history first.
+2. If the old session **already posted** an answer, do not answer again. Finish
+   only what is left, if anything. Saying nothing more is fine.
+3. If it was partway through work (files edited, a command run), check where that
+   work stands and finish it rather than starting over.
+4. Do not apologise for the move or explain it. The room already has its line.
+
+## Who can move you
+
+DorkOS moves you on its own when your account runs out or is almost out, at most
+once per message. A person can also move you from your menu in the room
+("Continue on another account\u2026"). You cannot move yourself: the move tool is
+for people only for now. If you think you need another account, say so to the
+person in the room and they can move you.
+
+DorkOS credits are never picked for you. Only a person chooses those, in a chat.
+`
+    };
+  }
+});
+
 // ../operating-skills/src/skills/managing-agents.ts
 var managingAgents;
 var init_managing_agents = __esm({
@@ -148358,7 +148730,7 @@ is running. The documentation exists for exactly this.
 Three places, and only the last one costs a request.
 
 **Your sibling skills.** operating-dorkos, managing-agents, scheduling-tasks,
-using-the-marketplace, reading-activity, working-in-room-repos, using-the-agent-browser, working-with-spin-off-chats and working-on-a-heartbeat are seeded beside this one and give
+using-the-marketplace, reading-activity, working-in-room-repos, using-the-agent-browser, working-with-spin-off-chats, working-on-a-heartbeat and continuing-on-another-account are seeded beside this one and give
 exact tool names, tiers and gates. When one of them covers the question, answer
 from it: more precise than the docs, and free.
 
@@ -148971,6 +149343,7 @@ var init_pack = __esm({
   "../operating-skills/src/pack.ts"() {
     "use strict";
     init_operating_dorkos();
+    init_continuing_on_another_account();
     init_managing_agents();
     init_scheduling_tasks();
     init_using_the_marketplace();
@@ -148990,7 +149363,8 @@ var init_pack = __esm({
       workingInRoomRepos,
       usingTheAgentBrowser,
       workingWithSpinOffChats,
-      workingOnAHeartbeat
+      workingOnAHeartbeat,
+      continuingOnAnotherAccount
     ];
   }
 });
@@ -150734,13 +151108,13 @@ function somethingIsAt(abs) {
   }
 }
 function applyDeclaration(repoRoot, declaration) {
-  const written = declareClaudeOnlySkill(repoRoot, declaration);
-  if (written.outcome !== "unwritable") return void 0;
+  const written2 = declareClaudeOnlySkill(repoRoot, declaration);
+  if (written2.outcome !== "unwritable") return void 0;
   return {
     name: declaration.name,
     source: declaration.path,
     rule: "manifest-unwritable",
-    reason: `DorkOS did not change ${written.path}: ${written.reason}. Add "${declaration.name}" to its "claudeOnlySkills" list yourself.`
+    reason: `DorkOS did not change ${written2.path}: ${written2.reason}. Add "${declaration.name}" to its "claudeOnlySkills" list yourself.`
   };
 }
 var init_apply2 = __esm({
@@ -156811,11 +157185,11 @@ var init_filesystem = __esm({
         await this.closeAfter([duty], async () => {
           const stat5 = await handle.stat({ bigint: true });
           requireFact(stat5.isFile() && Number(stat5.uid) === process.getuid?.(), "OWNERSHIP_UNCERTAIN");
-          let written = 0;
-          while (written < bytes.length) {
-            const value = await handle.write(bytes, written, bytes.length - written, written);
+          let written2 = 0;
+          while (written2 < bytes.length) {
+            const value = await handle.write(bytes, written2, bytes.length - written2, written2);
             requireFact(value.bytesWritten > 0, "IO_FAILED");
-            written += value.bytesWritten;
+            written2 += value.bytesWritten;
           }
           await handle.sync();
           requireFact(
@@ -157375,19 +157749,19 @@ var init_filesystem = __esm({
                 );
                 if (reservation) await this.checkReservation(reservation);
                 await observe(bytes);
-                let written = 0;
-                while (written < copy2.byteLength) {
+                let written2 = 0;
+                while (written2 < copy2.byteLength) {
                   const value = await original.write(
                     copy2,
-                    written,
-                    copy2.byteLength - written,
-                    bytes + written
+                    written2,
+                    copy2.byteLength - written2,
+                    bytes + written2
                   );
                   requireFact(value.bytesWritten > 0, "IO_FAILED");
-                  written += value.bytesWritten;
+                  written2 += value.bytesWritten;
                 }
-                bytes += written;
-                diagnosticBudget.bytes += written;
+                bytes += written2;
+                diagnosticBudget.bytes += written2;
                 hash3.update(copy2);
                 expected = await observe(bytes, true);
               })
@@ -158741,11 +159115,11 @@ function createInstallationTransaction(configuration, dependencies, generation3)
         });
         recordBytes(journal, INSTALLATION_LIMITS.journalBytes);
         check4(bounds, options.signal);
-        const written = await fs40.writeReuseJournal(reservation, attempt, journal);
-        require2(written.path === join56(attempt.attemptRoot, "reuse.json") && written.sha256 === sha2562(recordBytes(journal, INSTALLATION_LIMITS.journalBytes)), "OWNERSHIP_UNCERTAIN");
+        const written2 = await fs40.writeReuseJournal(reservation, attempt, journal);
+        require2(written2.path === join56(attempt.attemptRoot, "reuse.json") && written2.sha256 === sha2562(recordBytes(journal, INSTALLATION_LIMITS.journalBytes)), "OWNERSHIP_UNCERTAIN");
         const unchanged = await fs40.inspectExisting({ signal: options.signal });
         require2(canonicalDigest(unchanged.current) === canonicalDigest(reserved.current) && canonicalDigest(unchanged.installation) === canonicalDigest(reserved.installation), "ROOT_CHANGED");
-        journalDigest = written.sha256;
+        journalDigest = written2.sha256;
         currentManifestDigest = reserved.installation.current.pointer.manifestDigest;
       } else {
         await owner("publishing");
@@ -166798,7 +167172,7 @@ var init_default_owner = __esm({
     init_tigris_session();
     init_provider_process();
     init_health();
-    FLY_GUIDE_URL = repoUrl("/blob/main/apps/community/FLY.md");
+    FLY_GUIDE_URL = repoUrl("/blob/main/apps/space/FLY.md");
   }
 });
 
@@ -170441,18 +170815,18 @@ function createStdinPrompt(raw) {
     password: async () => next()
   };
 }
-function findOwnerUser(db) {
-  const owner = db.select({ id: user.id, email: user.email }).from(user).where(eq(user.role, "owner")).limit(1).get();
+function findOwnerUser(db2) {
+  const owner = db2.select({ id: user.id, email: user.email }).from(user).where(eq(user.role, "owner")).limit(1).get();
   if (owner) return owner;
-  const all = db.select({ id: user.id, email: user.email }).from(user).limit(2).all();
+  const all = db2.select({ id: user.id, email: user.email }).from(user).limit(2).all();
   return all.length === 1 ? all[0] : void 0;
 }
 function errorMessage(err) {
   return err instanceof Error ? err.message : String(err);
 }
 async function runAuthEnable(deps) {
-  const { db, auth, configStore, prompt: prompt2, io, options } = deps;
-  const existing = db.select({ id: user.id }).from(user).limit(1).get();
+  const { db: db2, auth, configStore, prompt: prompt2, io, options } = deps;
+  const existing = db2.select({ id: user.id }).from(user).limit(1).get();
   if (existing) {
     io.error("An owner account already exists for this DorkOS instance.");
     io.error("To reset its password, run: dorkos auth reset-password");
@@ -170477,16 +170851,23 @@ async function runAuthEnable(deps) {
     io.error(`Could not create the owner account: ${errorMessage(err)}`);
     return 1;
   }
-  if (signUpToken) await (await auth.$context).internalAdapter.deleteSession(signUpToken);
   configStore.setDot("auth.enabled", true);
+  if (signUpToken) {
+    try {
+      await (await auth.$context).internalAdapter.deleteSession(signUpToken);
+    } catch (err) {
+      io.error(`Could not end the sign-in made during setup: ${errorMessage(err)}`);
+      io.error("It ends the next time DorkOS starts.");
+    }
+  }
   io.log(`Owner account created for ${email3}.`);
   io.log("This computer now asks for a password too. Other devices always do.");
   io.log("Restart any running DorkOS server for the change to take effect.");
   return 0;
 }
 async function runAuthResetPassword(deps) {
-  const { db, auth, prompt: prompt2, io, options } = deps;
-  const owner = findOwnerUser(db);
+  const { db: db2, auth, prompt: prompt2, io, options } = deps;
+  const owner = findOwnerUser(db2);
   if (!owner) {
     io.error("No owner account found. Run `dorkos auth enable` first.");
     return 1;
@@ -170520,7 +170901,7 @@ async function runAuthResetPassword(deps) {
       password: hashedPassword
     });
   }
-  const signedOut = db.delete(session).where(eq(session.userId, owner.id)).run().changes;
+  const signedOut = db2.delete(session).where(eq(session.userId, owner.id)).run().changes;
   io.log(`Password reset for ${owner.email}.`);
   io.log(
     `Signed out everywhere (${signedOut} ${signedOut === 1 ? "sign-in" : "sign-ins"} ended). Sign in again with the new password.`
@@ -170539,7 +170920,7 @@ var init_auth_commands = __esm({
 });
 
 // src/commands/auth-instance.ts
-function createOwnerAuth(db, secret) {
+function createOwnerAuth(db2, secret) {
   return betterAuth({
     appName: "DorkOS",
     // The signing secret is the one identity-relevant option beyond the hash +
@@ -170551,7 +170932,7 @@ function createOwnerAuth(db, secret) {
     // `auth.api.*` / `auth.$context` in-process, so there is no request origin
     // to check and no cookie to sign. Better Auth logs a one-time "Base URL is
     // not set" advisory here — expected and harmless.
-    database: drizzleAdapter(db, {
+    database: drizzleAdapter(db2, {
       provider: "sqlite",
       schema: { user, session, account, verification, apikey }
     }),
@@ -170572,7 +170953,7 @@ function createOwnerAuth(db, secret) {
       user: {
         create: {
           before: async (userData) => {
-            const existing = db.select({ id: user.id }).from(user).limit(1).get();
+            const existing = db2.select({ id: user.id }).from(user).limit(1).get();
             if (existing) {
               throw new APIError2("FORBIDDEN", {
                 code: "REGISTRATION_CLOSED",
@@ -170658,15 +171039,15 @@ function toGrant(value) {
   }
   return { id, agentPath, capabilityId, expiresAt };
 }
-function captureLiveStandingGrants(db, dorkHome, logger3, licence, now3 = /* @__PURE__ */ new Date()) {
+function captureLiveStandingGrants(db2, dorkHome, logger3, licence, now3 = /* @__PURE__ */ new Date()) {
   try {
     if (!licence.honored) return 0;
-    const table2 = db.get(
+    const table2 = db2.get(
       sql2`SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'approval_grants'`
     );
     if (!table2) return 0;
     const floor = licence.voidBefore ?? "";
-    const rows = db.all(
+    const rows = db2.all(
       sql2`SELECT id, agent_path, capability_id, expires_at FROM approval_grants
           WHERE revoked_at IS NULL AND expires_at > ${now3.toISOString()}
             AND granted_at > ${floor}`
@@ -170767,15 +171148,15 @@ import { mkdirSync as mkdirSync8, readFileSync as readFileSync23 } from "node:fs
 import { input as input2, password as passwordPrompt } from "@inquirer/prompts";
 async function buildAuthRuntime(dorkHome) {
   mkdirSync8(dorkHome, { recursive: true });
-  const db = createDb(path58.join(dorkHome, "dork.db"));
+  const db2 = createDb(path58.join(dorkHome, "dork.db"));
   const { captureLiveStandingGrants: captureLiveStandingGrants2, readStandingGrantLicence: readStandingGrantLicence2 } = await Promise.resolve().then(() => (init_ended_standing_grants(), ended_standing_grants_exports));
-  captureLiveStandingGrants2(db, dorkHome, console, readStandingGrantLicence2(dorkHome));
-  runMigrations(db);
+  captureLiveStandingGrants2(db2, dorkHome, console, readStandingGrantLicence2(dorkHome));
+  runMigrations(db2);
   const { resolveBetterAuthSecret: resolveBetterAuthSecret2 } = await Promise.resolve().then(() => (init_secret(), secret_exports));
-  const auth = createOwnerAuth(db, resolveBetterAuthSecret2(dorkHome));
+  const auth = createOwnerAuth(db2, resolveBetterAuthSecret2(dorkHome));
   const { initConfigManager: initConfigManager2 } = await Promise.resolve().then(() => (init_config_manager(), config_manager_exports));
   const configStore = initConfigManager2(dorkHome);
-  return { auth, db, configStore };
+  return { auth, db: db2, configStore };
 }
 function createInteractivePrompt() {
   return {
@@ -170847,11 +171228,11 @@ async function runAuthDispatcher(dorkHome, subcommand2, subArgs) {
         console.log(ENABLE_HELP);
         return 0;
       }
-      const { auth, db, configStore } = await buildAuthRuntime(dorkHome);
+      const { auth, db: db2, configStore } = await buildAuthRuntime(dorkHome);
       return await runAuthEnable({
         options,
         auth,
-        db,
+        db: db2,
         configStore,
         prompt: resolveCredentialPrompt(),
         io: consoleIo
@@ -170863,11 +171244,11 @@ async function runAuthDispatcher(dorkHome, subcommand2, subArgs) {
         console.log(RESET_HELP);
         return 0;
       }
-      const { auth, db } = await buildAuthRuntime(dorkHome);
+      const { auth, db: db2 } = await buildAuthRuntime(dorkHome);
       return await runAuthResetPassword({
         options,
         auth,
-        db,
+        db: db2,
         prompt: resolveCredentialPrompt(),
         io: consoleIo
       });
@@ -173113,6 +173494,7 @@ Examples:
 // src/commands/permission-undo-rows.ts
 function valueText(value, key, labels) {
   if (key.kind === "chat") return chatModeWord(value);
+  if (key.kind === "account") return autoMoveWord(value);
   if (value === null) return "not set";
   const words = key.kind === "files" ? labels.stop : key.kind === "preset" ? labels.preset : labels.state;
   return words[value] ?? value;
@@ -173127,6 +173509,8 @@ function settingText(key) {
       return `files${key.runtime ? ` (${key.runtime})` : ""}`;
     case "chat":
       return `chat ${key.sessionId.slice(0, 8)}`;
+    case "account":
+      return `account ${key.accountName}`;
     case "preset":
       return "preset";
   }
@@ -175911,12 +176295,12 @@ function isServerRunning(port2) {
 async function findProjectPaths(dbPath) {
   try {
     const { default: Database3 } = await import("better-sqlite3");
-    const db = new Database3(dbPath, { readonly: true });
+    const db2 = new Database3(dbPath, { readonly: true });
     try {
-      const rows = db.prepare("SELECT DISTINCT project_path FROM agents").all();
+      const rows = db2.prepare("SELECT DISTINCT project_path FROM agents").all();
       return rows.map((r3) => r3.project_path).filter((p) => fs37.existsSync(path62.join(p, ".dork")));
     } finally {
-      db.close();
+      db2.close();
     }
   } catch {
     return [];
@@ -177303,7 +177687,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.124.0",
+      cliVersion: "0.124.1",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -177321,7 +177705,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.124.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.124.1" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -177331,7 +177715,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.124.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.124.1", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -177430,7 +177814,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.124.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.124.1", DORK_HOME, subArgs));
 }
 var { values, positionals } = parseCliArgs();
 if (positionals[0] && !knownCommands.has(positionals[0])) {
@@ -177524,14 +177908,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.124.0");
+  console.log("0.124.1");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.124.0"}`);
+  console.log(`dorkos ${"0.124.1"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -177679,7 +178063,7 @@ if (fs39.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath7(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.124.0";
+process.env.DORKOS_CLI_VERSION = "0.124.1";
 var server;
 try {
   server = await import("../server/index.js");
@@ -177704,7 +178088,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.124.0"}`);
+console.log(`  DorkOS v${"0.124.1"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -177730,9 +178114,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.124.0").then((latestVersion) => {
+checkForUpdate("0.124.1").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.124.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.124.1"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;