@dv4resi/dvss-backend-module-calendar-im 0.0.2 → 0.0.4

package/dist/index.js

@@ -10,9 +10,11 @@ var rxjs = require('rxjs');
 var dotenv = require('dotenv');
 var models = require('@dv4resi/dvss-backend-module-datastore/dist/datastore/models');
 var dvssBackendModuleDatastore = require('@dv4resi/dvss-backend-module-datastore');
+var drizzleOrm = require('drizzle-orm');
 var common_enum = require('@dv4resi/dvss-backend-module-datastore/dist/datastore/commons/common.enum');
 var capabilityIntegration_model = require('@dv4resi/dvss-backend-module-datastore/dist/datastore/models/capability-integration.model');
 var capability_model = require('@dv4resi/dvss-backend-module-datastore/dist/datastore/models/capability.model');
+var crypto = require('crypto');
 
 function _interopNamespace(e) {
   if (e && e.__esModule) return e;
@@ -351,6 +353,27 @@ function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata3, "_ts_metadata");
+var REDACTED = "***REDACTED***";
+var SENSITIVE_HEADER_KEYS = /* @__PURE__ */ new Set([
+  "authorization",
+  "api-key",
+  "apikey",
+  "x-api-key",
+  "cookie"
+]);
+var SENSITIVE_BODY_KEYS = /* @__PURE__ */ new Set([
+  "access_token",
+  "refresh_token",
+  "id_token",
+  "token",
+  "client_secret",
+  "clientsecret",
+  "password",
+  "secret",
+  "api_key",
+  "apikey",
+  "authorization"
+]);
 exports.IntegrationRequestLoggerService = class _IntegrationRequestLoggerService {
   static {
     __name(this, "IntegrationRequestLoggerService");
@@ -372,7 +395,7 @@ exports.IntegrationRequestLoggerService = class _IntegrationRequestLoggerService
       method,
       url,
       headers: this.sanitizeHeaders(headers),
-      requestBody,
+      requestBody: this.sanitizePayload(requestBody),
       timestamp: logData.timestamp || /* @__PURE__ */ new Date()
     });
   }
@@ -389,7 +412,7 @@ exports.IntegrationRequestLoggerService = class _IntegrationRequestLoggerService
       url,
       statusCode,
       duration,
-      responseBody,
+      responseBody: this.sanitizePayload(responseBody),
       timestamp: logData.timestamp || /* @__PURE__ */ new Date()
     });
   }
@@ -406,8 +429,8 @@ exports.IntegrationRequestLoggerService = class _IntegrationRequestLoggerService
       url,
       statusCode,
       duration,
-      error,
-      responseBody,
+      error: this.sanitizePayload(error),
+      responseBody: this.sanitizePayload(responseBody),
       timestamp: logData.timestamp || /* @__PURE__ */ new Date()
     });
   }
@@ -439,20 +462,71 @@ exports.IntegrationRequestLoggerService = class _IntegrationRequestLoggerService
     const sanitized = {
       ...headers
     };
-    const sensitiveKeys = [
-      "authorization",
-      "api-key",
-      "apikey",
-      "x-api-key",
-      "cookie"
-    ];
     for (const key of Object.keys(sanitized)) {
-      if (sensitiveKeys.includes(key.toLowerCase())) {
-        sanitized[key] = "***REDACTED***";
+      if (SENSITIVE_HEADER_KEYS.has(key.toLowerCase())) {
+        sanitized[key] = REDACTED;
       }
     }
     return sanitized;
   }
+  /**
+   * Redact sensitive fields from request/response/error payloads before logging.
+   * Handles plain objects, arrays, and `application/x-www-form-urlencoded` strings.
+   */
+  sanitizePayload(payload, depth = 0) {
+    if (payload == null || depth > 8) {
+      return payload;
+    }
+    if (typeof payload === "string") {
+      return this.sanitizeFormEncodedString(payload);
+    }
+    if (Array.isArray(payload)) {
+      return payload.map((item) => this.sanitizePayload(item, depth + 1));
+    }
+    if (typeof payload === "object") {
+      if (payload instanceof Error) {
+        return {
+          name: payload.name,
+          message: payload.message
+        };
+      }
+      const record = payload;
+      const sanitized = {};
+      for (const [key, value] of Object.entries(record)) {
+        if (SENSITIVE_BODY_KEYS.has(key.toLowerCase())) {
+          sanitized[key] = REDACTED;
+          continue;
+        }
+        sanitized[key] = this.sanitizePayload(value, depth + 1);
+      }
+      return sanitized;
+    }
+    return payload;
+  }
+  /**
+   * Redacts known secret keys in URL-encoded form bodies (e.g. OAuth client_credentials).
+   * Non-form strings are returned unchanged.
+   */
+  sanitizeFormEncodedString(value) {
+    if (!value.includes("=")) {
+      return value;
+    }
+    try {
+      const params = new URLSearchParams(value);
+      let didMutate = false;
+      for (const key of [
+        ...params.keys()
+      ]) {
+        if (SENSITIVE_BODY_KEYS.has(key.toLowerCase())) {
+          params.set(key, REDACTED);
+          didMutate = true;
+        }
+      }
+      return didMutate ? params.toString() : value;
+    } catch {
+      return value;
+    }
+  }
 };
 exports.IntegrationRequestLoggerService = _ts_decorate4([
   common.Injectable(),
@@ -1429,1553 +1503,234 @@ var BaseAccountingMiscellaneousManagement = class {
   }
 };
 
-// ../../packages/dvss-integration-libs/src/integration-operation-skeletons/capabilities/calendar/subcapabilities/calendar-resource-management.base.ts
+// ../../packages/dvss-integration-libs/src/integration-operation-skeletons/capabilities/resource-management/resource-management.base.ts
 var BaseCalendarResourceManagement = class {
   static {
     __name(this, "BaseCalendarResourceManagement");
   }
 };
 
-// ../../packages/dvss-integration-libs/src/integration-operation-skeletons/capabilities/calendar/subcapabilities/calendar-booking-management.base.ts
+// ../../packages/dvss-integration-libs/src/integration-operation-skeletons/capabilities/booking-management/booking-management.base.ts
 var BaseCalendarBookingManagement = class {
   static {
     __name(this, "BaseCalendarBookingManagement");
   }
 };
 
-// ../../packages/dvss-integration-libs/src/integration-operation-skeletons/capabilities/calendar/subcapabilities/calendar-webhook-management.base.ts
+// ../../packages/dvss-integration-libs/src/integration-operation-skeletons/capabilities/webhook-management/webhook-management.base.ts
 var BaseCalendarWebhookManagement = class {
   static {
     __name(this, "BaseCalendarWebhookManagement");
   }
 };
-
-// ../../node_modules/drizzle-orm/entity.js
-var entityKind = /* @__PURE__ */ Symbol.for("drizzle:entityKind");
-function is(value, type) {
-  if (!value || typeof value !== "object") {
-    return false;
-  }
-  if (value instanceof type) {
-    return true;
-  }
-  if (!Object.prototype.hasOwnProperty.call(type, entityKind)) {
-    throw new Error(`Class "${type.name ?? "<unknown>"}" doesn't look like a Drizzle entity. If this is incorrect and the class is provided by Drizzle, please report this as a bug.`);
-  }
-  let cls = value.constructor;
-  if (cls) {
-    while (cls) {
-      if (entityKind in cls && cls[entityKind] === type[entityKind]) {
-        return true;
-      }
-      cls = Object.getPrototypeOf(cls);
-    }
-  }
-  return false;
+function _ts_decorate9(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(is, "is");
-
-// ../../node_modules/drizzle-orm/column.js
-var Column = class Column2 {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata6(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param3, "_ts_param");
+exports.IntegrationBookingDao = class IntegrationBookingDao {
   static {
-    __name(this, "Column");
-  }
-  constructor(table, config2) {
-    this.table = table;
-    this.config = config2;
-    this.name = config2.name;
-    this.notNull = config2.notNull;
-    this.default = config2.default;
-    this.defaultFn = config2.defaultFn;
-    this.onUpdateFn = config2.onUpdateFn;
-    this.hasDefault = config2.hasDefault;
-    this.primary = config2.primaryKey;
-    this.isUnique = config2.isUnique;
-    this.uniqueName = config2.uniqueName;
-    this.uniqueType = config2.uniqueType;
-    this.dataType = config2.dataType;
-    this.columnType = config2.columnType;
-    this.generated = config2.generated;
-    this.generatedIdentity = config2.generatedIdentity;
-  }
-  static [entityKind] = "Column";
-  name;
-  primary;
-  notNull;
-  default;
-  defaultFn;
-  onUpdateFn;
-  hasDefault;
-  isUnique;
-  uniqueName;
-  uniqueType;
-  dataType;
-  columnType;
-  enumValues = void 0;
-  generated = void 0;
-  generatedIdentity = void 0;
-  config;
-  mapFromDriverValue(value) {
-    return value;
-  }
-  mapToDriverValue(value) {
-    return value;
+    __name(this, "IntegrationBookingDao");
   }
-  // ** @internal */
-  shouldDisableInsert() {
-    return this.config.generated !== void 0 && this.config.generated.type !== "byDefault";
+  conn;
+  logger;
+  fileName = "integration-booking.dao";
+  constructor(conn, logger) {
+    this.conn = conn;
+    this.logger = logger;
   }
-};
-
-// ../../node_modules/drizzle-orm/column-builder.js
-var ColumnBuilder = class ColumnBuilder2 {
-  static {
-    __name(this, "ColumnBuilder");
-  }
-  static [entityKind] = "ColumnBuilder";
-  config;
-  constructor(name, dataType, columnType) {
-    this.config = {
-      name,
-      notNull: false,
-      default: void 0,
-      hasDefault: false,
-      primaryKey: false,
-      isUnique: false,
-      uniqueName: void 0,
-      uniqueType: void 0,
-      dataType,
-      columnType,
-      generated: void 0
+  async getOfferingBookingOccurrence(input) {
+    this.logger.debug(input.loggedInUserId, this.getOfferingBookingOccurrence.name, this.fileName, "Getting offering booking occurrence with input: ", input);
+    const conditions = [
+      drizzleOrm.isNull(dvssBackendModuleDatastore.schema.offeringBookingOccurrence.deletedAt),
+      drizzleOrm.eq(dvssBackendModuleDatastore.schema.offeringBookingOccurrence.id, input.offeringBookingOccurrenceId),
+      drizzleOrm.isNull(dvssBackendModuleDatastore.schema.offeringBooking.deletedAt),
+      drizzleOrm.isNull(dvssBackendModuleDatastore.schema.offering.deletedAt)
+    ];
+    if (input.offeringBookingId != null) {
+      conditions.push(drizzleOrm.eq(dvssBackendModuleDatastore.schema.offeringBooking.id, input.offeringBookingId));
+    }
+    const result = await this.conn.select({
+      offeringBookingOccurrence: dvssBackendModuleDatastore.schema.offeringBookingOccurrence,
+      offering: dvssBackendModuleDatastore.schema.offering,
+      offeringIntentId: dvssBackendModuleDatastore.schema.offeringBooking.offeringIntentId
+    }).from(dvssBackendModuleDatastore.schema.offeringBookingOccurrence).innerJoin(dvssBackendModuleDatastore.schema.offeringBooking, drizzleOrm.eq(dvssBackendModuleDatastore.schema.offeringBookingOccurrence.offeringBookingId, dvssBackendModuleDatastore.schema.offeringBooking.id)).innerJoin(dvssBackendModuleDatastore.schema.offering, drizzleOrm.eq(dvssBackendModuleDatastore.schema.offeringBooking.offeringId, dvssBackendModuleDatastore.schema.offering.id)).where(drizzleOrm.and(...conditions)).limit(1);
+    if (!result[0] || result[0].offeringIntentId == null) return void 0;
+    return {
+      offeringBookingOccurrence: result[0].offeringBookingOccurrence,
+      offering: result[0].offering,
+      offeringIntentId: result[0].offeringIntentId
     };
   }
   /**
-  * Changes the data type of the column. Commonly used with `json` columns. Also, useful for branded types.
-  *
-  * @example
-  * ```ts
-  * const users = pgTable('users', {
-  * 	id: integer('id').$type<UserId>().primaryKey(),
-  * 	details: json('details').$type<UserDetails>().notNull(),
-  * });
-  * ```
-  */
-  $type() {
-    return this;
-  }
-  /**
-  * Adds a `not null` clause to the column definition.
-  *
-  * Affects the `select` model of the table - columns *without* `not null` will be nullable on select.
-  */
-  notNull() {
-    this.config.notNull = true;
-    return this;
-  }
-  /**
-  * Adds a `default <value>` clause to the column definition.
-  *
-  * Affects the `insert` model of the table - columns *with* `default` are optional on insert.
-  *
-  * If you need to set a dynamic default value, use {@link $defaultFn} instead.
-  */
-  default(value) {
-    this.config.default = value;
-    this.config.hasDefault = true;
-    return this;
-  }
-  /**
-  * Adds a dynamic default value to the column.
-  * The function will be called when the row is inserted, and the returned value will be used as the column value.
-  *
-  * **Note:** This value does not affect the `drizzle-kit` behavior, it is only used at runtime in `drizzle-orm`.
-  */
-  $defaultFn(fn) {
-    this.config.defaultFn = fn;
-    this.config.hasDefault = true;
-    return this;
-  }
-  /**
-  * Alias for {@link $defaultFn}.
-  */
-  $default = this.$defaultFn;
-  /**
-  * Adds a dynamic update value to the column.
-  * The function will be called when the row is updated, and the returned value will be used as the column value if none is provided.
-  * If no `default` (or `$defaultFn`) value is provided, the function will be called when the row is inserted as well, and the returned value will be used as the column value.
-  *
-  * **Note:** This value does not affect the `drizzle-kit` behavior, it is only used at runtime in `drizzle-orm`.
-  */
-  $onUpdateFn(fn) {
-    this.config.onUpdateFn = fn;
-    this.config.hasDefault = true;
-    return this;
-  }
-  /**
-  * Alias for {@link $onUpdateFn}.
-  */
-  $onUpdate = this.$onUpdateFn;
-  /**
-  * Adds a `primary key` clause to the column definition. This implicitly makes the column `not null`.
-  *
-  * In SQLite, `integer primary key` implicitly makes the column auto-incrementing.
-  */
-  primaryKey() {
-    this.config.primaryKey = true;
-    this.config.notNull = true;
-    return this;
+   * Fetches offering intent by id.
+   */
+  async getOfferingIntent(input) {
+    const row = await this.conn.query.offeringIntent.findFirst({
+      where: drizzleOrm.and(drizzleOrm.isNull(dvssBackendModuleDatastore.schema.offeringIntent.deletedAt), drizzleOrm.eq(dvssBackendModuleDatastore.schema.offeringIntent.id, input.offeringIntentId))
+    });
+    return row ?? void 0;
   }
 };
-
-// ../../node_modules/drizzle-orm/table.js
-var TableName = /* @__PURE__ */ Symbol.for("drizzle:Name");
-var Schema = /* @__PURE__ */ Symbol.for("drizzle:Schema");
-var Columns = /* @__PURE__ */ Symbol.for("drizzle:Columns");
-var ExtraConfigColumns = /* @__PURE__ */ Symbol.for("drizzle:ExtraConfigColumns");
-var OriginalName = /* @__PURE__ */ Symbol.for("drizzle:OriginalName");
-var BaseName = /* @__PURE__ */ Symbol.for("drizzle:BaseName");
-var IsAlias = /* @__PURE__ */ Symbol.for("drizzle:IsAlias");
-var ExtraConfigBuilder = /* @__PURE__ */ Symbol.for("drizzle:ExtraConfigBuilder");
-var IsDrizzleTable = /* @__PURE__ */ Symbol.for("drizzle:IsDrizzleTable");
-var Table = class Table2 {
-  static {
-    __name(this, "Table");
-  }
-  static [entityKind] = "Table";
-  /** @internal */
-  static Symbol = {
-    Name: TableName,
-    Schema,
-    OriginalName,
-    Columns,
-    ExtraConfigColumns,
-    BaseName,
-    IsAlias,
-    ExtraConfigBuilder
+exports.IntegrationBookingDao = _ts_decorate9([
+  common.Injectable(),
+  _ts_param3(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database,
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  ])
+], exports.IntegrationBookingDao);
+function _ts_decorate10(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata7(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
   };
-  /**
-  * @internal
-  * Can be changed if the table is aliased.
-  */
-  [TableName];
-  /**
-  * @internal
-  * Used to store the original name of the table, before any aliasing.
-  */
-  [OriginalName];
-  /** @internal */
-  [Schema];
-  /** @internal */
-  [Columns];
-  /** @internal */
-  [ExtraConfigColumns];
-  /**
-  *  @internal
-  * Used to store the table name before the transformation via the `tableCreator` functions.
-  */
-  [BaseName];
-  /** @internal */
-  [IsAlias] = false;
-  /** @internal */
-  [IsDrizzleTable] = true;
-  /** @internal */
-  [ExtraConfigBuilder] = void 0;
-  constructor(name, schema9, baseName) {
-    this[TableName] = this[OriginalName] = name;
-    this[Schema] = schema9;
-    this[BaseName] = baseName;
-  }
-};
-
-// ../../node_modules/drizzle-orm/pg-core/table.js
-var InlineForeignKeys = /* @__PURE__ */ Symbol.for("drizzle:PgInlineForeignKeys");
-var PgTable = class PgTable2 extends Table {
-  static {
-    __name(this, "PgTable");
-  }
-  static [entityKind] = "PgTable";
-  /** @internal */
-  static Symbol = Object.assign({}, Table.Symbol, {
-    InlineForeignKeys
-  });
-  /**@internal */
-  [InlineForeignKeys] = [];
-  /** @internal */
-  [Table.Symbol.ExtraConfigBuilder] = void 0;
-};
-
-// ../../node_modules/drizzle-orm/pg-core/foreign-keys.js
-var ForeignKeyBuilder = class ForeignKeyBuilder2 {
+}
+__name(_ts_param4, "_ts_param");
+exports.IntegrationCommonDao = class IntegrationCommonDao {
   static {
-    __name(this, "ForeignKeyBuilder");
-  }
-  static [entityKind] = "PgForeignKeyBuilder";
-  /** @internal */
-  reference;
-  /** @internal */
-  _onUpdate = "no action";
-  /** @internal */
-  _onDelete = "no action";
-  constructor(config2, actions) {
-    this.reference = () => {
-      const { name, columns, foreignColumns } = config2();
-      return {
-        name,
-        columns,
-        foreignTable: foreignColumns[0].table,
-        foreignColumns
-      };
-    };
-    if (actions) {
-      this._onUpdate = actions.onUpdate;
-      this._onDelete = actions.onDelete;
-    }
-  }
-  onUpdate(action) {
-    this._onUpdate = action === void 0 ? "no action" : action;
-    return this;
-  }
-  onDelete(action) {
-    this._onDelete = action === void 0 ? "no action" : action;
-    return this;
+    __name(this, "IntegrationCommonDao");
   }
-  /** @internal */
-  build(table) {
-    return new ForeignKey(table, this);
+  conn;
+  logger;
+  fileName = "integration-common.dao";
+  constructor(conn, logger) {
+    this.conn = conn;
+    this.logger = logger;
   }
-};
-var ForeignKey = class ForeignKey2 {
-  static {
-    __name(this, "ForeignKey");
-  }
-  constructor(table, builder) {
-    this.table = table;
-    this.reference = builder.reference;
-    this.onUpdate = builder._onUpdate;
-    this.onDelete = builder._onDelete;
-  }
-  static [entityKind] = "PgForeignKey";
-  reference;
-  onUpdate;
-  onDelete;
-  getName() {
-    const { name, columns, foreignColumns } = this.reference();
-    const columnNames = columns.map((column) => column.name);
-    const foreignColumnNames = foreignColumns.map((column) => column.name);
-    const chunks = [
-      this.table[PgTable.Symbol.Name],
-      ...columnNames,
-      foreignColumns[0].table[PgTable.Symbol.Name],
-      ...foreignColumnNames
-    ];
-    return name ?? `${chunks.join("_")}_fk`;
+  /**
+   * Gets timezone using userContext (first propertyId) with fallback to projectId
+   * First tries to get timezone from user's first propertyId, then falls back to projectId
+   * @param input - Object containing projectId and loggedInUserId
+   * @returns Promise resolving to timezone string
+   */
+  async getTimezoneForRequest(input) {
+    const { projectId, loggedInUserId } = input;
+    try {
+      const userBehavior = await this.conn.query.userIdentityBehaviorMapping.findFirst({
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.userIdentityBehaviorMapping.userIdentityId, loggedInUserId), drizzleOrm.isNotNull(dvssBackendModuleDatastore.schema.userIdentityBehaviorMapping.propertyId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.userIdentityBehaviorMapping.deletedAt)),
+        with: {
+          property: true
+        }
+      });
+      if (userBehavior?.propertyId && userBehavior.property?.timezone) {
+        this.logger.info(loggedInUserId, this.getTimezoneForRequest.name, this.fileName, "Successfully fetched property timezone using userContext", {
+          projectId,
+          loggedInUserId,
+          propertyId: userBehavior.propertyId,
+          timezone: userBehavior.property.timezone
+        });
+        return userBehavior.property.timezone;
+      }
+      if (projectId) {
+        const properties = await this.conn.query.property.findMany({
+          where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.property.projectId, projectId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.property.deletedAt)),
+          limit: 1
+        });
+        if (properties.length > 0 && properties[0].timezone) {
+          this.logger.info(loggedInUserId, this.getTimezoneForRequest.name, this.fileName, "Successfully fetched property timezone using projectId", {
+            projectId,
+            propertyId: properties[0].id,
+            timezone: properties[0].timezone
+          });
+          return properties[0].timezone;
+        }
+      }
+    } catch (error) {
+      this.logger.warn(loggedInUserId, this.getTimezoneForRequest.name, this.fileName, "Error fetching property timezone, using default", {
+        projectId,
+        error
+      });
+    }
+    return dvssBackendModuleUtility.DEFAULT_TIMEZONE;
   }
 };
-
-// ../../node_modules/drizzle-orm/tracing-utils.js
-function iife(fn, ...args) {
-  return fn(...args);
+exports.IntegrationCommonDao = _ts_decorate10([
+  common.Injectable(),
+  _ts_param4(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database,
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  ])
+], exports.IntegrationCommonDao);
+function _ts_decorate11(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(iife, "iife");
-
-// ../../node_modules/drizzle-orm/pg-core/unique-constraint.js
-function uniqueKeyName(table, columns) {
-  return `${table[PgTable.Symbol.Name]}_${columns.join("_")}_unique`;
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
 }
-__name(uniqueKeyName, "uniqueKeyName");
-var UniqueConstraintBuilder = class UniqueConstraintBuilder2 {
+__name(_ts_param5, "_ts_param");
+exports.IntegrationSubcapabilityDao = class IntegrationSubcapabilityDao {
   static {
-    __name(this, "UniqueConstraintBuilder");
-  }
-  constructor(columns, name) {
-    this.name = name;
-    this.columns = columns;
+    __name(this, "IntegrationSubcapabilityDao");
   }
-  static [entityKind] = "PgUniqueConstraintBuilder";
-  /** @internal */
-  columns;
-  /** @internal */
-  nullsNotDistinctConfig = false;
-  nullsNotDistinct() {
-    this.nullsNotDistinctConfig = true;
-    return this;
+  conn;
+  logger;
+  fileName = "integration-subcapability.dao";
+  constructor(conn, logger) {
+    this.conn = conn;
+    this.logger = logger;
   }
-  /** @internal */
-  build(table) {
-    return new UniqueConstraint(table, this.columns, this.nullsNotDistinctConfig, this.name);
-  }
-};
-(class UniqueOnConstraintBuilder2 {
-  static {
-    __name(this, "UniqueOnConstraintBuilder");
-  }
-  static [entityKind] = "PgUniqueOnConstraintBuilder";
-  /** @internal */
-  name;
-  constructor(name) {
-    this.name = name;
-  }
-  on(...columns) {
-    return new UniqueConstraintBuilder(columns, this.name);
-  }
-});
-var UniqueConstraint = class UniqueConstraint2 {
-  static {
-    __name(this, "UniqueConstraint");
-  }
-  constructor(table, columns, nullsNotDistinct, name) {
-    this.table = table;
-    this.columns = columns;
-    this.name = name ?? uniqueKeyName(this.table, this.columns.map((column) => column.name));
-    this.nullsNotDistinct = nullsNotDistinct;
-  }
-  static [entityKind] = "PgUniqueConstraint";
-  columns;
-  name;
-  nullsNotDistinct = false;
-  getName() {
-    return this.name;
-  }
-};
-
-// ../../node_modules/drizzle-orm/pg-core/utils/array.js
-function parsePgArrayValue(arrayString, startFrom, inQuotes) {
-  for (let i = startFrom; i < arrayString.length; i++) {
-    const char = arrayString[i];
-    if (char === "\\") {
-      i++;
-      continue;
-    }
-    if (char === '"') {
-      return [
-        arrayString.slice(startFrom, i).replace(/\\/g, ""),
-        i + 1
-      ];
-    }
-    if (inQuotes) {
-      continue;
-    }
-    if (char === "," || char === "}") {
-      return [
-        arrayString.slice(startFrom, i).replace(/\\/g, ""),
-        i
-      ];
-    }
-  }
-  return [
-    arrayString.slice(startFrom).replace(/\\/g, ""),
-    arrayString.length
-  ];
-}
-__name(parsePgArrayValue, "parsePgArrayValue");
-function parsePgNestedArray(arrayString, startFrom = 0) {
-  const result = [];
-  let i = startFrom;
-  let lastCharIsComma = false;
-  while (i < arrayString.length) {
-    const char = arrayString[i];
-    if (char === ",") {
-      if (lastCharIsComma || i === startFrom) {
-        result.push("");
-      }
-      lastCharIsComma = true;
-      i++;
-      continue;
-    }
-    lastCharIsComma = false;
-    if (char === "\\") {
-      i += 2;
-      continue;
-    }
-    if (char === '"') {
-      const [value2, startFrom2] = parsePgArrayValue(arrayString, i + 1, true);
-      result.push(value2);
-      i = startFrom2;
-      continue;
-    }
-    if (char === "}") {
-      return [
-        result,
-        i + 1
-      ];
-    }
-    if (char === "{") {
-      const [value2, startFrom2] = parsePgNestedArray(arrayString, i + 1);
-      result.push(value2);
-      i = startFrom2;
-      continue;
-    }
-    const [value, newStartFrom] = parsePgArrayValue(arrayString, i, false);
-    result.push(value);
-    i = newStartFrom;
-  }
-  return [
-    result,
-    i
-  ];
-}
-__name(parsePgNestedArray, "parsePgNestedArray");
-function parsePgArray(arrayString) {
-  const [result] = parsePgNestedArray(arrayString, 1);
-  return result;
-}
-__name(parsePgArray, "parsePgArray");
-function makePgArray(array) {
-  return `{${array.map((item) => {
-    if (Array.isArray(item)) {
-      return makePgArray(item);
-    }
-    if (typeof item === "string") {
-      return `"${item.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
-    }
-    return `${item}`;
-  }).join(",")}}`;
-}
-__name(makePgArray, "makePgArray");
-
-// ../../node_modules/drizzle-orm/pg-core/columns/common.js
-var PgColumnBuilder = class PgColumnBuilder2 extends ColumnBuilder {
-  static {
-    __name(this, "PgColumnBuilder");
-  }
-  foreignKeyConfigs = [];
-  static [entityKind] = "PgColumnBuilder";
-  array(size) {
-    return new PgArrayBuilder(this.config.name, this, size);
-  }
-  references(ref, actions = {}) {
-    this.foreignKeyConfigs.push({
-      ref,
-      actions
-    });
-    return this;
-  }
-  unique(name, config2) {
-    this.config.isUnique = true;
-    this.config.uniqueName = name;
-    this.config.uniqueType = config2?.nulls;
-    return this;
-  }
-  generatedAlwaysAs(as) {
-    this.config.generated = {
-      as,
-      type: "always",
-      mode: "stored"
-    };
-    return this;
-  }
-  /** @internal */
-  buildForeignKeys(column, table) {
-    return this.foreignKeyConfigs.map(({ ref, actions }) => {
-      return iife((ref2, actions2) => {
-        const builder = new ForeignKeyBuilder(() => {
-          const foreignColumn = ref2();
-          return {
-            columns: [
-              column
-            ],
-            foreignColumns: [
-              foreignColumn
-            ]
-          };
-        });
-        if (actions2.onUpdate) {
-          builder.onUpdate(actions2.onUpdate);
-        }
-        if (actions2.onDelete) {
-          builder.onDelete(actions2.onDelete);
-        }
-        return builder.build(table);
-      }, ref, actions);
-    });
-  }
-  /** @internal */
-  buildExtraConfigColumn(table) {
-    return new ExtraConfigColumn(table, this.config);
-  }
-};
-var PgColumn = class PgColumn2 extends Column {
-  static {
-    __name(this, "PgColumn");
-  }
-  constructor(table, config2) {
-    if (!config2.uniqueName) {
-      config2.uniqueName = uniqueKeyName(table, [
-        config2.name
-      ]);
-    }
-    super(table, config2);
-    this.table = table;
-  }
-  static [entityKind] = "PgColumn";
-};
-var ExtraConfigColumn = class ExtraConfigColumn2 extends PgColumn {
-  static {
-    __name(this, "ExtraConfigColumn");
-  }
-  static [entityKind] = "ExtraConfigColumn";
-  getSQLType() {
-    return this.getSQLType();
-  }
-  indexConfig = {
-    order: this.config.order ?? "asc",
-    nulls: this.config.nulls ?? "last",
-    opClass: this.config.opClass
-  };
-  defaultConfig = {
-    order: "asc",
-    nulls: "last",
-    opClass: void 0
-  };
-  asc() {
-    this.indexConfig.order = "asc";
-    return this;
-  }
-  desc() {
-    this.indexConfig.order = "desc";
-    return this;
-  }
-  nullsFirst() {
-    this.indexConfig.nulls = "first";
-    return this;
-  }
-  nullsLast() {
-    this.indexConfig.nulls = "last";
-    return this;
-  }
-  /**
-  * ### PostgreSQL documentation quote
-  *
-  * > An operator class with optional parameters can be specified for each column of an index.
-  * The operator class identifies the operators to be used by the index for that column.
-  * For example, a B-tree index on four-byte integers would use the int4_ops class;
-  * this operator class includes comparison functions for four-byte integers.
-  * In practice the default operator class for the column's data type is usually sufficient.
-  * The main point of having operator classes is that for some data types, there could be more than one meaningful ordering.
-  * For example, we might want to sort a complex-number data type either by absolute value or by real part.
-  * We could do this by defining two operator classes for the data type and then selecting the proper class when creating an index.
-  * More information about operator classes check:
-  *
-  * ### Useful links
-  * https://www.postgresql.org/docs/current/sql-createindex.html
-  *
-  * https://www.postgresql.org/docs/current/indexes-opclass.html
-  *
-  * https://www.postgresql.org/docs/current/xindex.html
-  *
-  * ### Additional types
-  * If you have the `pg_vector` extension installed in your database, you can use the
-  * `vector_l2_ops`, `vector_ip_ops`, `vector_cosine_ops`, `vector_l1_ops`, `bit_hamming_ops`, `bit_jaccard_ops`, `halfvec_l2_ops`, `sparsevec_l2_ops` options, which are predefined types.
-  *
-  * **You can always specify any string you want in the operator class, in case Drizzle doesn't have it natively in its types**
-  *
-  * @param opClass
-  * @returns
-  */
-  op(opClass) {
-    this.indexConfig.opClass = opClass;
-    return this;
-  }
-};
-(class IndexedColumn2 {
-  static {
-    __name(this, "IndexedColumn");
-  }
-  static [entityKind] = "IndexedColumn";
-  constructor(name, type, indexConfig) {
-    this.name = name;
-    this.type = type;
-    this.indexConfig = indexConfig;
-  }
-  name;
-  type;
-  indexConfig;
-});
-var PgArrayBuilder = class PgArrayBuilder2 extends PgColumnBuilder {
-  static {
-    __name(this, "PgArrayBuilder");
-  }
-  static [entityKind] = "PgArrayBuilder";
-  constructor(name, baseBuilder, size) {
-    super(name, "array", "PgArray");
-    this.config.baseBuilder = baseBuilder;
-    this.config.size = size;
-  }
-  /** @internal */
-  build(table) {
-    const baseColumn = this.config.baseBuilder.build(table);
-    return new PgArray(table, this.config, baseColumn);
-  }
-};
-var PgArray = class PgArray2 extends PgColumn {
-  static {
-    __name(this, "PgArray");
-  }
-  constructor(table, config2, baseColumn, range) {
-    super(table, config2);
-    this.baseColumn = baseColumn;
-    this.range = range;
-    this.size = config2.size;
-  }
-  size;
-  static [entityKind] = "PgArray";
-  getSQLType() {
-    return `${this.baseColumn.getSQLType()}[${typeof this.size === "number" ? this.size : ""}]`;
-  }
-  mapFromDriverValue(value) {
-    if (typeof value === "string") {
-      value = parsePgArray(value);
-    }
-    return value.map((v) => this.baseColumn.mapFromDriverValue(v));
-  }
-  mapToDriverValue(value, isNestedArray = false) {
-    const a = value.map((v) => v === null ? null : is(this.baseColumn, PgArray2) ? this.baseColumn.mapToDriverValue(v, true) : this.baseColumn.mapToDriverValue(v));
-    if (isNestedArray) return a;
-    return makePgArray(a);
-  }
-};
-
-// ../../node_modules/drizzle-orm/pg-core/columns/enum.js
-var isPgEnumSym = /* @__PURE__ */ Symbol.for("drizzle:isPgEnum");
-function isPgEnum(obj) {
-  return !!obj && typeof obj === "function" && isPgEnumSym in obj && obj[isPgEnumSym] === true;
-}
-__name(isPgEnum, "isPgEnum");
-(class PgEnumColumnBuilder2 extends PgColumnBuilder {
-  static {
-    __name(this, "PgEnumColumnBuilder");
-  }
-  static [entityKind] = "PgEnumColumnBuilder";
-  constructor(name, enumInstance) {
-    super(name, "string", "PgEnumColumn");
-    this.config.enum = enumInstance;
-  }
-  /** @internal */
-  build(table) {
-    return new PgEnumColumn(table, this.config);
-  }
-});
-var PgEnumColumn = class PgEnumColumn2 extends PgColumn {
-  static {
-    __name(this, "PgEnumColumn");
-  }
-  static [entityKind] = "PgEnumColumn";
-  enum = this.config.enum;
-  enumValues = this.config.enum.enumValues;
-  constructor(table, config2) {
-    super(table, config2);
-    this.enum = config2.enum;
-  }
-  getSQLType() {
-    return this.enum.enumName;
-  }
-};
-
-// ../../node_modules/drizzle-orm/subquery.js
-var Subquery = class Subquery2 {
-  static {
-    __name(this, "Subquery");
-  }
-  static [entityKind] = "Subquery";
-  constructor(sql2, selection, alias, isWith = false) {
-    this._ = {
-      brand: "Subquery",
-      sql: sql2,
-      selectedFields: selection,
-      alias,
-      isWith
-    };
-  }
-};
-(class WithSubquery2 extends Subquery {
-  static {
-    __name(this, "WithSubquery");
-  }
-  static [entityKind] = "WithSubquery";
-});
-var tracer = {
-  startActiveSpan(name, fn) {
-    {
-      return fn();
-    }
-  }
-};
-
-// ../../node_modules/drizzle-orm/view-common.js
-var ViewBaseConfig = /* @__PURE__ */ Symbol.for("drizzle:ViewBaseConfig");
-
-// ../../node_modules/drizzle-orm/sql/sql.js
-(class FakePrimitiveParam2 {
-  static {
-    __name(this, "FakePrimitiveParam");
-  }
-  static [entityKind] = "FakePrimitiveParam";
-});
-function isSQLWrapper(value) {
-  return value !== null && value !== void 0 && typeof value.getSQL === "function";
-}
-__name(isSQLWrapper, "isSQLWrapper");
-function mergeQueries(queries) {
-  const result = {
-    sql: "",
-    params: []
-  };
-  for (const query of queries) {
-    result.sql += query.sql;
-    result.params.push(...query.params);
-    if (query.typings?.length) {
-      if (!result.typings) {
-        result.typings = [];
-      }
-      result.typings.push(...query.typings);
-    }
-  }
-  return result;
-}
-__name(mergeQueries, "mergeQueries");
-var StringChunk = class StringChunk2 {
-  static {
-    __name(this, "StringChunk");
-  }
-  static [entityKind] = "StringChunk";
-  value;
-  constructor(value) {
-    this.value = Array.isArray(value) ? value : [
-      value
-    ];
-  }
-  getSQL() {
-    return new SQL([
-      this
-    ]);
-  }
-};
-var SQL = class SQL2 {
-  static {
-    __name(this, "SQL");
-  }
-  constructor(queryChunks) {
-    this.queryChunks = queryChunks;
-  }
-  static [entityKind] = "SQL";
-  /** @internal */
-  decoder = noopDecoder;
-  shouldInlineParams = false;
-  append(query) {
-    this.queryChunks.push(...query.queryChunks);
-    return this;
-  }
-  toQuery(config2) {
-    return tracer.startActiveSpan("drizzle.buildSQL", (span) => {
-      const query = this.buildQueryFromSourceParams(this.queryChunks, config2);
-      span?.setAttributes({
-        "drizzle.query.text": query.sql,
-        "drizzle.query.params": JSON.stringify(query.params)
-      });
-      return query;
-    });
-  }
-  buildQueryFromSourceParams(chunks, _config) {
-    const config2 = Object.assign({}, _config, {
-      inlineParams: _config.inlineParams || this.shouldInlineParams,
-      paramStartIndex: _config.paramStartIndex || {
-        value: 0
-      }
-    });
-    const { escapeName, escapeParam, prepareTyping, inlineParams, paramStartIndex } = config2;
-    return mergeQueries(chunks.map((chunk) => {
-      if (is(chunk, StringChunk)) {
-        return {
-          sql: chunk.value.join(""),
-          params: []
-        };
-      }
-      if (is(chunk, Name)) {
-        return {
-          sql: escapeName(chunk.value),
-          params: []
-        };
-      }
-      if (chunk === void 0) {
-        return {
-          sql: "",
-          params: []
-        };
-      }
-      if (Array.isArray(chunk)) {
-        const result = [
-          new StringChunk("(")
-        ];
-        for (const [i, p] of chunk.entries()) {
-          result.push(p);
-          if (i < chunk.length - 1) {
-            result.push(new StringChunk(", "));
-          }
-        }
-        result.push(new StringChunk(")"));
-        return this.buildQueryFromSourceParams(result, config2);
-      }
-      if (is(chunk, SQL2)) {
-        return this.buildQueryFromSourceParams(chunk.queryChunks, {
-          ...config2,
-          inlineParams: inlineParams || chunk.shouldInlineParams
-        });
-      }
-      if (is(chunk, Table)) {
-        const schemaName = chunk[Table.Symbol.Schema];
-        const tableName = chunk[Table.Symbol.Name];
-        return {
-          sql: schemaName === void 0 ? escapeName(tableName) : escapeName(schemaName) + "." + escapeName(tableName),
-          params: []
-        };
-      }
-      if (is(chunk, Column)) {
-        if (_config.invokeSource === "indexes") {
-          return {
-            sql: escapeName(chunk.name),
-            params: []
-          };
-        }
-        return {
-          sql: escapeName(chunk.table[Table.Symbol.Name]) + "." + escapeName(chunk.name),
-          params: []
-        };
-      }
-      if (is(chunk, View)) {
-        const schemaName = chunk[ViewBaseConfig].schema;
-        const viewName = chunk[ViewBaseConfig].name;
-        return {
-          sql: schemaName === void 0 ? escapeName(viewName) : escapeName(schemaName) + "." + escapeName(viewName),
-          params: []
-        };
-      }
-      if (is(chunk, Param)) {
-        if (is(chunk.value, Placeholder)) {
-          return {
-            sql: escapeParam(paramStartIndex.value++, chunk),
-            params: [
-              chunk
-            ],
-            typings: [
-              "none"
-            ]
-          };
-        }
-        const mappedValue = chunk.value === null ? null : chunk.encoder.mapToDriverValue(chunk.value);
-        if (is(mappedValue, SQL2)) {
-          return this.buildQueryFromSourceParams([
-            mappedValue
-          ], config2);
-        }
-        if (inlineParams) {
-          return {
-            sql: this.mapInlineParam(mappedValue, config2),
-            params: []
-          };
-        }
-        let typings = [
-          "none"
-        ];
-        if (prepareTyping) {
-          typings = [
-            prepareTyping(chunk.encoder)
-          ];
-        }
-        return {
-          sql: escapeParam(paramStartIndex.value++, mappedValue),
-          params: [
-            mappedValue
-          ],
-          typings
-        };
-      }
-      if (is(chunk, Placeholder)) {
-        return {
-          sql: escapeParam(paramStartIndex.value++, chunk),
-          params: [
-            chunk
-          ],
-          typings: [
-            "none"
-          ]
-        };
-      }
-      if (is(chunk, SQL2.Aliased) && chunk.fieldAlias !== void 0) {
-        return {
-          sql: escapeName(chunk.fieldAlias),
-          params: []
-        };
-      }
-      if (is(chunk, Subquery)) {
-        if (chunk._.isWith) {
-          return {
-            sql: escapeName(chunk._.alias),
-            params: []
-          };
-        }
-        return this.buildQueryFromSourceParams([
-          new StringChunk("("),
-          chunk._.sql,
-          new StringChunk(") "),
-          new Name(chunk._.alias)
-        ], config2);
-      }
-      if (isPgEnum(chunk)) {
-        if (chunk.schema) {
-          return {
-            sql: escapeName(chunk.schema) + "." + escapeName(chunk.enumName),
-            params: []
-          };
-        }
-        return {
-          sql: escapeName(chunk.enumName),
-          params: []
-        };
-      }
-      if (isSQLWrapper(chunk)) {
-        if (chunk.shouldOmitSQLParens?.()) {
-          return this.buildQueryFromSourceParams([
-            chunk.getSQL()
-          ], config2);
-        }
-        return this.buildQueryFromSourceParams([
-          new StringChunk("("),
-          chunk.getSQL(),
-          new StringChunk(")")
-        ], config2);
-      }
-      if (inlineParams) {
-        return {
-          sql: this.mapInlineParam(chunk, config2),
-          params: []
-        };
-      }
-      return {
-        sql: escapeParam(paramStartIndex.value++, chunk),
-        params: [
-          chunk
-        ],
-        typings: [
-          "none"
-        ]
-      };
-    }));
-  }
-  mapInlineParam(chunk, { escapeString }) {
-    if (chunk === null) {
-      return "null";
-    }
-    if (typeof chunk === "number" || typeof chunk === "boolean") {
-      return chunk.toString();
-    }
-    if (typeof chunk === "string") {
-      return escapeString(chunk);
-    }
-    if (typeof chunk === "object") {
-      const mappedValueAsString = chunk.toString();
-      if (mappedValueAsString === "[object Object]") {
-        return escapeString(JSON.stringify(chunk));
-      }
-      return escapeString(mappedValueAsString);
-    }
-    throw new Error("Unexpected param value: " + chunk);
-  }
-  getSQL() {
-    return this;
-  }
-  as(alias) {
-    if (alias === void 0) {
-      return this;
-    }
-    return new SQL2.Aliased(this, alias);
-  }
-  mapWith(decoder) {
-    this.decoder = typeof decoder === "function" ? {
-      mapFromDriverValue: decoder
-    } : decoder;
-    return this;
-  }
-  inlineParams() {
-    this.shouldInlineParams = true;
-    return this;
-  }
-  /**
-  * This method is used to conditionally include a part of the query.
-  *
-  * @param condition - Condition to check
-  * @returns itself if the condition is `true`, otherwise `undefined`
-  */
-  if(condition) {
-    return condition ? this : void 0;
-  }
-};
-var Name = class Name2 {
-  static {
-    __name(this, "Name");
-  }
-  constructor(value) {
-    this.value = value;
-  }
-  static [entityKind] = "Name";
-  brand;
-  getSQL() {
-    return new SQL([
-      this
-    ]);
-  }
-};
-function isDriverValueEncoder(value) {
-  return typeof value === "object" && value !== null && "mapToDriverValue" in value && typeof value.mapToDriverValue === "function";
-}
-__name(isDriverValueEncoder, "isDriverValueEncoder");
-var noopDecoder = {
-  mapFromDriverValue: /* @__PURE__ */ __name((value) => value, "mapFromDriverValue")
-};
-var noopEncoder = {
-  mapToDriverValue: /* @__PURE__ */ __name((value) => value, "mapToDriverValue")
-};
-({
-  ...noopDecoder,
-  ...noopEncoder
-});
-var Param = class Param2 {
-  static {
-    __name(this, "Param");
-  }
-  /**
-  * @param value - Parameter value
-  * @param encoder - Encoder to convert the value to a driver parameter
-  */
-  constructor(value, encoder = noopEncoder) {
-    this.value = value;
-    this.encoder = encoder;
-  }
-  static [entityKind] = "Param";
-  brand;
-  getSQL() {
-    return new SQL([
-      this
-    ]);
-  }
-};
-function sql(strings, ...params) {
-  const queryChunks = [];
-  if (params.length > 0 || strings.length > 0 && strings[0] !== "") {
-    queryChunks.push(new StringChunk(strings[0]));
-  }
-  for (const [paramIndex, param2] of params.entries()) {
-    queryChunks.push(param2, new StringChunk(strings[paramIndex + 1]));
-  }
-  return new SQL(queryChunks);
-}
-__name(sql, "sql");
-((sql2) => {
-  function empty() {
-    return new SQL([]);
-  }
-  __name(empty, "empty");
-  sql2.empty = empty;
-  function fromList(list) {
-    return new SQL(list);
-  }
-  __name(fromList, "fromList");
-  sql2.fromList = fromList;
-  function raw(str) {
-    return new SQL([
-      new StringChunk(str)
-    ]);
-  }
-  __name(raw, "raw");
-  sql2.raw = raw;
-  function join(chunks, separator) {
-    const result = [];
-    for (const [i, chunk] of chunks.entries()) {
-      if (i > 0 && separator !== void 0) {
-        result.push(separator);
-      }
-      result.push(chunk);
-    }
-    return new SQL(result);
-  }
-  __name(join, "join");
-  sql2.join = join;
-  function identifier(value) {
-    return new Name(value);
-  }
-  __name(identifier, "identifier");
-  sql2.identifier = identifier;
-  function placeholder2(name2) {
-    return new Placeholder(name2);
-  }
-  __name(placeholder2, "placeholder2");
-  sql2.placeholder = placeholder2;
-  function param2(value, encoder) {
-    return new Param(value, encoder);
-  }
-  __name(param2, "param2");
-  sql2.param = param2;
-})(sql || (sql = {}));
-((SQL22) => {
-  let Aliased = class Aliased2 {
-    static {
-      __name(this, "Aliased");
-    }
-    constructor(sql2, fieldAlias) {
-      this.sql = sql2;
-      this.fieldAlias = fieldAlias;
-    }
-    static [entityKind] = "SQL.Aliased";
-    /** @internal */
-    isSelectionField = false;
-    getSQL() {
-      return this.sql;
-    }
-    /** @internal */
-    clone() {
-      return new Aliased2(this.sql, this.fieldAlias);
-    }
-  };
-  SQL22.Aliased = Aliased;
-})(SQL || (SQL = {}));
-var Placeholder = class Placeholder2 {
-  static {
-    __name(this, "Placeholder");
-  }
-  constructor(name2) {
-    this.name = name2;
-  }
-  static [entityKind] = "Placeholder";
-  getSQL() {
-    return new SQL([
-      this
-    ]);
-  }
-};
-var View = class View2 {
-  static {
-    __name(this, "View");
-  }
-  static [entityKind] = "View";
-  /** @internal */
-  [ViewBaseConfig];
-  constructor({ name: name2, schema: schema9, selectedFields, query }) {
-    this[ViewBaseConfig] = {
-      name: name2,
-      originalName: name2,
-      schema: schema9,
-      selectedFields,
-      query,
-      isExisting: !query,
-      isAlias: false
-    };
-  }
-  getSQL() {
-    return new SQL([
-      this
-    ]);
-  }
-};
-Column.prototype.getSQL = function() {
-  return new SQL([
-    this
-  ]);
-};
-Table.prototype.getSQL = function() {
-  return new SQL([
-    this
-  ]);
-};
-Subquery.prototype.getSQL = function() {
-  return new SQL([
-    this
-  ]);
-};
-
-// ../../node_modules/drizzle-orm/sql/expressions/conditions.js
-function bindIfParam(value, column) {
-  if (isDriverValueEncoder(column) && !isSQLWrapper(value) && !is(value, Param) && !is(value, Placeholder) && !is(value, Column) && !is(value, Table) && !is(value, View)) {
-    return new Param(value, column);
-  }
-  return value;
-}
-__name(bindIfParam, "bindIfParam");
-var eq = /* @__PURE__ */ __name((left, right) => {
-  return sql`${left} = ${bindIfParam(right, left)}`;
-}, "eq");
-function and(...unfilteredConditions) {
-  const conditions = unfilteredConditions.filter((c) => c !== void 0);
-  if (conditions.length === 0) {
-    return void 0;
-  }
-  if (conditions.length === 1) {
-    return new SQL(conditions);
-  }
-  return new SQL([
-    new StringChunk("("),
-    sql.join(conditions, new StringChunk(" and ")),
-    new StringChunk(")")
-  ]);
-}
-__name(and, "and");
-function or(...unfilteredConditions) {
-  const conditions = unfilteredConditions.filter((c) => c !== void 0);
-  if (conditions.length === 0) {
-    return void 0;
-  }
-  if (conditions.length === 1) {
-    return new SQL(conditions);
-  }
-  return new SQL([
-    new StringChunk("("),
-    sql.join(conditions, new StringChunk(" or ")),
-    new StringChunk(")")
-  ]);
-}
-__name(or, "or");
-function inArray(column, values) {
-  if (Array.isArray(values)) {
-    if (values.length === 0) {
-      return sql`false`;
-    }
-    return sql`${column} in ${values.map((v) => bindIfParam(v, column))}`;
-  }
-  return sql`${column} in ${bindIfParam(values, column)}`;
-}
-__name(inArray, "inArray");
-function isNull(value) {
-  return sql`${value} is null`;
-}
-__name(isNull, "isNull");
-function isNotNull(value) {
-  return sql`${value} is not null`;
-}
-__name(isNotNull, "isNotNull");
-
-// ../../node_modules/drizzle-orm/sql/expressions/select.js
-function asc(column) {
-  return sql`${column} asc`;
-}
-__name(asc, "asc");
-function desc(column) {
-  return sql`${column} desc`;
-}
-__name(desc, "desc");
-
-// ../../node_modules/drizzle-orm/utils.js
-function getTableColumns(table) {
-  return table[Table.Symbol.Columns];
-}
-__name(getTableColumns, "getTableColumns");
-
-// ../../packages/dvss-integration-libs/src/integration-common-utils/dao/integration-booking.dao.ts
-function _ts_decorate9(decorators, target, key, desc2) {
-  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata6(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata6, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param3, "_ts_param");
-exports.IntegrationBookingDao = class IntegrationBookingDao {
-  static {
-    __name(this, "IntegrationBookingDao");
-  }
-  conn;
-  logger;
-  fileName = "integration-booking.dao";
-  constructor(conn, logger) {
-    this.conn = conn;
-    this.logger = logger;
-  }
-  async getOfferingBookingOccurrence(input) {
-    this.logger.debug(input.loggedInUserId, this.getOfferingBookingOccurrence.name, this.fileName, "Getting offering booking occurrence with input: ", input);
-    const conditions = [
-      isNull(dvssBackendModuleDatastore.schema.offeringBookingOccurrence.deletedAt),
-      eq(dvssBackendModuleDatastore.schema.offeringBookingOccurrence.id, input.offeringBookingOccurrenceId),
-      isNull(dvssBackendModuleDatastore.schema.offeringBooking.deletedAt),
-      isNull(dvssBackendModuleDatastore.schema.offering.deletedAt)
-    ];
-    if (input.offeringBookingId != null) {
-      conditions.push(eq(dvssBackendModuleDatastore.schema.offeringBooking.id, input.offeringBookingId));
-    }
-    const result = await this.conn.select({
-      offeringBookingOccurrence: dvssBackendModuleDatastore.schema.offeringBookingOccurrence,
-      offering: dvssBackendModuleDatastore.schema.offering,
-      offeringIntentId: dvssBackendModuleDatastore.schema.offeringBooking.offeringIntentId
-    }).from(dvssBackendModuleDatastore.schema.offeringBookingOccurrence).innerJoin(dvssBackendModuleDatastore.schema.offeringBooking, eq(dvssBackendModuleDatastore.schema.offeringBookingOccurrence.offeringBookingId, dvssBackendModuleDatastore.schema.offeringBooking.id)).innerJoin(dvssBackendModuleDatastore.schema.offering, eq(dvssBackendModuleDatastore.schema.offeringBooking.offeringId, dvssBackendModuleDatastore.schema.offering.id)).where(and(...conditions)).limit(1);
-    if (!result[0] || result[0].offeringIntentId == null) return void 0;
-    return {
-      offeringBookingOccurrence: result[0].offeringBookingOccurrence,
-      offering: result[0].offering,
-      offeringIntentId: result[0].offeringIntentId
-    };
-  }
-  /**
-   * Fetches offering intent by id.
-   */
-  async getOfferingIntent(input) {
-    const row = await this.conn.query.offeringIntent.findFirst({
-      where: and(isNull(dvssBackendModuleDatastore.schema.offeringIntent.deletedAt), eq(dvssBackendModuleDatastore.schema.offeringIntent.id, input.offeringIntentId))
-    });
-    return row ?? void 0;
-  }
-};
-exports.IntegrationBookingDao = _ts_decorate9([
-  common.Injectable(),
-  _ts_param3(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
-    typeof MySql2Database === "undefined" ? Object : MySql2Database,
-    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
-  ])
-], exports.IntegrationBookingDao);
-function _ts_decorate10(decorators, target, key, desc2) {
-  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata7(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param4, "_ts_param");
-exports.IntegrationCommonDao = class IntegrationCommonDao {
-  static {
-    __name(this, "IntegrationCommonDao");
-  }
-  conn;
-  logger;
-  fileName = "integration-common.dao";
-  constructor(conn, logger) {
-    this.conn = conn;
-    this.logger = logger;
-  }
-  /**
-   * Gets timezone using userContext (first propertyId) with fallback to projectId
-   * First tries to get timezone from user's first propertyId, then falls back to projectId
-   * @param input - Object containing projectId and loggedInUserId
-   * @returns Promise resolving to timezone string
-   */
-  async getTimezoneForRequest(input) {
-    const { projectId, loggedInUserId } = input;
-    try {
-      const userBehavior = await this.conn.query.userIdentityBehaviorMapping.findFirst({
-        where: and(eq(dvssBackendModuleDatastore.schema.userIdentityBehaviorMapping.userIdentityId, loggedInUserId), isNotNull(dvssBackendModuleDatastore.schema.userIdentityBehaviorMapping.propertyId), isNull(dvssBackendModuleDatastore.schema.userIdentityBehaviorMapping.deletedAt)),
-        with: {
-          property: true
-        }
-      });
-      if (userBehavior?.propertyId && userBehavior.property?.timezone) {
-        this.logger.info(loggedInUserId, this.getTimezoneForRequest.name, this.fileName, "Successfully fetched property timezone using userContext", {
-          projectId,
-          loggedInUserId,
-          propertyId: userBehavior.propertyId,
-          timezone: userBehavior.property.timezone
-        });
-        return userBehavior.property.timezone;
-      }
-      if (projectId) {
-        const properties = await this.conn.query.property.findMany({
-          where: and(eq(dvssBackendModuleDatastore.schema.property.projectId, projectId), isNull(dvssBackendModuleDatastore.schema.property.deletedAt)),
-          limit: 1
-        });
-        if (properties.length > 0 && properties[0].timezone) {
-          this.logger.info(loggedInUserId, this.getTimezoneForRequest.name, this.fileName, "Successfully fetched property timezone using projectId", {
-            projectId,
-            propertyId: properties[0].id,
-            timezone: properties[0].timezone
-          });
-          return properties[0].timezone;
-        }
-      }
-    } catch (error) {
-      this.logger.warn(loggedInUserId, this.getTimezoneForRequest.name, this.fileName, "Error fetching property timezone, using default", {
-        projectId,
-        error
-      });
-    }
-    return dvssBackendModuleUtility.DEFAULT_TIMEZONE;
-  }
-};
-exports.IntegrationCommonDao = _ts_decorate10([
-  common.Injectable(),
-  _ts_param4(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof MySql2Database === "undefined" ? Object : MySql2Database,
-    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
-  ])
-], exports.IntegrationCommonDao);
-function _ts_decorate11(decorators, target, key, desc2) {
-  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata8(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param5, "_ts_param");
-exports.IntegrationSubcapabilityDao = class IntegrationSubcapabilityDao {
-  static {
-    __name(this, "IntegrationSubcapabilityDao");
-  }
-  conn;
-  logger;
-  fileName = "integration-subcapability.dao";
-  constructor(conn, logger) {
-    this.conn = conn;
-    this.logger = logger;
-  }
-  /**
-   * Returns subcapability id for given capabilityId and subcapability name.
-   * Enforces uniqueness: if more than one active row is found, throws an error.
-   * If no active row is found, returns undefined (caller decides how to handle).
-   */
-  async getSubcapabilityId(input, loggedInUserId) {
-    this.logger.info(loggedInUserId, this.getSubcapabilityId.name, this.fileName, "IntegrationSubcapabilityDao -> getSubcapabilityId called", {
-      input
-    });
-    try {
-      const rows = await this.conn.query.subcapability.findMany({
-        where: and(eq(dvssBackendModuleDatastore.schema.subcapability.capabilityId, input.capabilityId), eq(dvssBackendModuleDatastore.schema.subcapability.name, input.name), isNull(dvssBackendModuleDatastore.schema.subcapability.deletedAt))
-      });
-      if (rows.length === 0) {
-        this.logger.error(loggedInUserId, this.getSubcapabilityId.name, this.fileName, "Subcapability not found for given capabilityId and name", {
-          input
-        });
-        return void 0;
-      }
-      return rows[0].id;
-    } catch (error) {
-      this.logger.error(loggedInUserId, this.getSubcapabilityId.name, this.fileName, "Error in getSubcapabilityId", error, {
-        input
-      });
-      throw error;
-    }
+  /**
+   * Returns subcapability id for given capabilityId and subcapability name.
+   * Enforces uniqueness: if more than one active row is found, throws an error.
+   * If no active row is found, returns undefined (caller decides how to handle).
+   */
+  async getSubcapabilityId(input, loggedInUserId) {
+    this.logger.info(loggedInUserId, this.getSubcapabilityId.name, this.fileName, "IntegrationSubcapabilityDao -> getSubcapabilityId called", {
+      input
+    });
+    try {
+      const rows = await this.conn.query.subcapability.findMany({
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.subcapability.capabilityId, input.capabilityId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.subcapability.name, input.name), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.subcapability.deletedAt))
+      });
+      if (rows.length === 0) {
+        this.logger.error(loggedInUserId, this.getSubcapabilityId.name, this.fileName, "Subcapability not found for given capabilityId and name", {
+          input
+        });
+        return void 0;
+      }
+      return rows[0].id;
+    } catch (error) {
+      this.logger.error(loggedInUserId, this.getSubcapabilityId.name, this.fileName, "Error in getSubcapabilityId", error, {
+        input
+      });
+      throw error;
+    }
   }
   async getSubcapabilities(input, loggedInUserId) {
     this.logger.info(loggedInUserId, this.getSubcapabilities.name, this.fileName, "IntegrationSubcapabilityDao -> getSubcapabilities called", {
@@ -2983,7 +1738,7 @@ exports.IntegrationSubcapabilityDao = class IntegrationSubcapabilityDao {
     });
     try {
       return await this.conn.query.subcapability.findMany({
-        where: and(eq(dvssBackendModuleDatastore.schema.subcapability.capabilityId, input.capabilityId), isNull(dvssBackendModuleDatastore.schema.subcapability.deletedAt))
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.subcapability.capabilityId, input.capabilityId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.subcapability.deletedAt))
       });
     } catch (error) {
       this.logger.error(loggedInUserId, this.getSubcapabilities.name, this.fileName, "Error in getSubcapabilities", error, {
@@ -3022,13 +1777,13 @@ var IntegrationVisitorCredentialMappingDao = class {
       return;
     }
     const officeVisitorConfigProfile = await input.db.query.officeVisitorConfigProfile.findFirst({
-      where: and(eq(dvssBackendModuleDatastore.schema.officeVisitorConfigProfile.projectId, input.projectId), isNull(dvssBackendModuleDatastore.schema.officeVisitorConfigProfile.deletedAt))
+      where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.officeVisitorConfigProfile.projectId, input.projectId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.officeVisitorConfigProfile.deletedAt))
     });
     if (!officeVisitorConfigProfile) {
       return;
     }
     const capIntegResourceMapping = await input.db.query.capIntegResourceMapping.findFirst({
-      where: and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, this.capIntegResourceMappingOfficeVisitorType), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, officeVisitorConfigProfile.id), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))
+      where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, this.capIntegResourceMappingOfficeVisitorType), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, officeVisitorConfigProfile.id), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))
     });
     const currentConfig = capIntegResourceMapping?.config;
     const isCurrentGenerateCredentialEnabled = currentConfig?.generateCredential === true;
@@ -3040,7 +1795,7 @@ var IntegrationVisitorCredentialMappingDao = class {
           },
           updatedAt: /* @__PURE__ */ new Date(),
           updatedBy: input.loggedInUserId
-        }).where(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, capIntegResourceMapping.id));
+        }).where(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, capIntegResourceMapping.id));
       }
       return;
     }
@@ -3171,7 +1926,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
         request
       });
       return await this.conn.query.capability.findFirst({
-        where: and(eq(dvssBackendModuleDatastore.schema.capability.id, request.capabilityId), isNull(dvssBackendModuleDatastore.schema.capability.deletedAt))
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capability.id, request.capabilityId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capability.deletedAt))
       });
     } catch (error) {
       this.logger.error(loggedInUserId, this.getCapability.name, this.fileName, "Error on getCapability", error, {
@@ -3190,7 +1945,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
         request
       });
       return await this.conn.query.capabilityProvider.findFirst({
-        where: and(eq(dvssBackendModuleDatastore.schema.capabilityProvider.id, request.capabilityProviderId), isNull(dvssBackendModuleDatastore.schema.capabilityProvider.deletedAt))
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityProvider.id, request.capabilityProviderId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityProvider.deletedAt))
       });
     } catch (error) {
       this.logger.error(loggedInUserId, this.getCapabilityProvider.name, this.fileName, "Error on getCapabilityProvider", error, {
@@ -3214,7 +1969,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
       });
       const response = await this.conn.update(dvssBackendModuleDatastore.schema.capabilityIntegration).set({
         ...input.updateData
-      }).where(eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, input.id));
+      }).where(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, input.id));
       const isGenerateCredentialsForVisitorEnabled = this.integrationVisitorCredentialMappingDao.extractGenerateCredentialsForVisitorValue(input.updateData.config);
       if (typeof isGenerateCredentialsForVisitorEnabled === "boolean") {
         await this.integrationVisitorCredentialMappingDao.syncVisitorCredentialMapping({
@@ -3239,9 +1994,9 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
       this.logger.info(loggedInUserId, this.updateCapabilityIntegrationAccessDetails.name, this.fileName, "Updating capability integration access details", {
         capabilityIntegrationId
       });
-      const expiryAtExpression = sql`DATE_FORMAT(UTC_TIMESTAMP() + INTERVAL ${expiresInSeconds} SECOND, '%Y-%m-%dT%H:%i:%sZ')`;
+      const expiryAtExpression = drizzleOrm.sql`DATE_FORMAT(UTC_TIMESTAMP() + INTERVAL ${expiresInSeconds} SECOND, '%Y-%m-%dT%H:%i:%sZ')`;
       await this.conn.update(dvssBackendModuleDatastore.schema.capabilityIntegration).set({
-        config: sql`
+        config: drizzleOrm.sql`
                         JSON_SET(
                             JSON_SET(
                                 COALESCE(${dvssBackendModuleDatastore.schema.capabilityIntegration.config}, JSON_OBJECT()),
@@ -3253,7 +2008,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
                         )
                     `,
         updatedBy: loggedInUserId
-      }).where(and(eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, capabilityIntegrationId), isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt)));
+      }).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, capabilityIntegrationId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt)));
     } catch (error) {
       this.logger.error(loggedInUserId, this.updateCapabilityIntegrationAccessDetails.name, this.fileName, "Error updating capability integration access details", error, {
         capabilityIntegrationId
@@ -3282,7 +2037,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
           id: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id,
           configuredForId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId,
           configuredForType: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType
-        }).from(dvssBackendModuleDatastore.schema.capIntegResourceMapping).where(and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.projectId, input.projectId), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt)));
+        }).from(dvssBackendModuleDatastore.schema.capIntegResourceMapping).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.projectId, input.projectId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt)));
         const existingMap = /* @__PURE__ */ new Map();
         for (const e of existing) {
           existingMap.set(`${e.configuredForId}:${e.configuredForType}`, e);
@@ -3312,7 +2067,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
           await tx.update(dvssBackendModuleDatastore.schema.capIntegResourceMapping).set({
             deletedAt: /* @__PURE__ */ new Date(),
             deletedBy: loggedInUserId
-          }).where(inArray(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, toDeleteIds));
+          }).where(drizzleOrm.inArray(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, toDeleteIds));
         }
         if (toInsert.length > 0) {
           await tx.insert(dvssBackendModuleDatastore.schema.capIntegResourceMapping).values(toInsert);
@@ -3334,7 +2089,7 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
     try {
       this.logger.info(loggedInUserId, this.getCapabilityIntegration.name, this.fileName, "getCapabilityIntegration called", input);
       return await this.conn.query.capabilityIntegration.findFirst({
-        where: and(isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt), eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, input.capabilityIntegrationId))
+        where: drizzleOrm.and(drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, input.capabilityIntegrationId))
       });
     } catch (error) {
       this.logger.error(loggedInUserId, this.getCapabilityIntegration.name, this.fileName, "Error on getCapabilityIntegration", error, input);
@@ -3349,24 +2104,24 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
     try {
       this.logger.info(loggedInUserId, this.getCapabilityIntegrationById.name, this.fileName, "getCapabilityIntegrationById called", request);
       const conditions = [
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, request.id),
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, request.projectId),
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.type, capability_model.CAPABILITY_TYPE_ENUM.INTEGRATION),
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.status, capabilityIntegration_model.CAPABILITY_INTEGRATION_STATUS_ENUM.ACTIVE),
-        isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt),
-        isNull(dvssBackendModuleDatastore.schema.capability.deletedAt)
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.id, request.id),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, request.projectId),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.type, capability_model.CAPABILITY_TYPE_ENUM.INTEGRATION),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.status, capabilityIntegration_model.CAPABILITY_INTEGRATION_STATUS_ENUM.ACTIVE),
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt),
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capability.deletedAt)
       ];
       if (request.category) {
-        conditions.push(eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, request.category));
+        conditions.push(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, request.category));
       }
       const response = await this.conn.select({
-        ...getTableColumns(dvssBackendModuleDatastore.schema.capabilityIntegration),
+        ...drizzleOrm.getTableColumns(dvssBackendModuleDatastore.schema.capabilityIntegration),
         resourceMappingId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id,
         configuredForId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId,
         configuredForType: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType,
         resourceMappingConfig: dvssBackendModuleDatastore.schema.capIntegResourceMapping.config,
         provider: dvssBackendModuleDatastore.schema.capability.providerIntegrationType
-      }).from(dvssBackendModuleDatastore.schema.capabilityIntegration).innerJoin(dvssBackendModuleDatastore.schema.capability, eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId)).leftJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.projectId, request.projectId), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).where(and(...conditions));
+      }).from(dvssBackendModuleDatastore.schema.capabilityIntegration).innerJoin(dvssBackendModuleDatastore.schema.capability, drizzleOrm.eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId)).leftJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.projectId, request.projectId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).where(drizzleOrm.and(...conditions));
       return response[0];
     } catch (error) {
       this.logger.error(loggedInUserId, this.getCapabilityIntegrationById.name, this.fileName, "Error on getCapabilityIntegrationById", error, request);
@@ -3381,27 +2136,27 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
     try {
       this.logger.info(loggedInUserId, this.getCapabilityIntegrationByProvider.name, this.fileName, "getCapabilityIntegrationByProvider called", request);
       const conditions = [
-        isNull(dvssBackendModuleDatastore.schema.capability.deletedAt),
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, request.projectId),
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.type, capability_model.CAPABILITY_TYPE_ENUM.INTEGRATION),
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.status, capabilityIntegration_model.CAPABILITY_INTEGRATION_STATUS_ENUM.ACTIVE),
-        isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt),
-        eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.projectId, request.projectId),
-        eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, request.configuredForType),
-        eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, request.configuredForId),
-        isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt)
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capability.deletedAt),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, request.projectId),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.type, capability_model.CAPABILITY_TYPE_ENUM.INTEGRATION),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.status, capabilityIntegration_model.CAPABILITY_INTEGRATION_STATUS_ENUM.ACTIVE),
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.projectId, request.projectId),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, request.configuredForType),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, request.configuredForId),
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt)
       ];
       if (request.category) {
-        conditions.push(eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, request.category));
+        conditions.push(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, request.category));
       }
       const response = await this.conn.select({
-        ...getTableColumns(dvssBackendModuleDatastore.schema.capabilityIntegration),
+        ...drizzleOrm.getTableColumns(dvssBackendModuleDatastore.schema.capabilityIntegration),
         resourceMappingId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id,
         configuredForId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId,
         configuredForType: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType,
         resourceMappingConfig: dvssBackendModuleDatastore.schema.capIntegResourceMapping.config,
         provider: dvssBackendModuleDatastore.schema.capability.providerIntegrationType
-      }).from(dvssBackendModuleDatastore.schema.capabilityIntegration).innerJoin(dvssBackendModuleDatastore.schema.capability, eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId)).innerJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id)).where(and(...conditions));
+      }).from(dvssBackendModuleDatastore.schema.capabilityIntegration).innerJoin(dvssBackendModuleDatastore.schema.capability, drizzleOrm.eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId)).innerJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id)).where(drizzleOrm.and(...conditions));
       return response[0];
     } catch (error) {
       this.logger.error(loggedInUserId, this.getCapabilityIntegrationByProvider.name, this.fileName, "Error on getCapabilityIntegrationByProvider", error, request);
@@ -3424,60 +2179,60 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
       } else if (sorting?.by === "UPDATED_AT") {
         sortBy = dvssBackendModuleDatastore.schema.capabilityIntegration.updatedAt;
       }
-      const sortOrder = sorting?.order === common_enum.SORTING_ORDER_ENUM.ASC ? asc(sortBy) : desc(sortBy);
+      const sortOrder = sorting?.order === common_enum.SORTING_ORDER_ENUM.ASC ? drizzleOrm.asc(sortBy) : drizzleOrm.desc(sortBy);
       const searchTerm = input.options?.search;
       const shouldJoinCapability = Boolean(searchTerm) || Boolean(input.options?.filters?.some((filter) => filter.by === "PROVIDER_INTEGRATION_TYPE"));
       const whereConditions = [
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, input.projectId),
-        isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt)
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, input.projectId),
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt)
       ];
       if (input.category) {
-        whereConditions.push(eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, input.category));
+        whereConditions.push(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, input.category));
       }
       if (input.options?.filters && input.options.filters.length > 0) {
         this.applyFilters(whereConditions, input.options);
       }
       if (searchTerm) {
         const searchPattern = `%${searchTerm}%`;
-        whereConditions.push(sql`(${dvssBackendModuleDatastore.schema.capabilityIntegration.nickname} LIKE ${searchPattern} OR ${dvssBackendModuleDatastore.schema.capability.name} LIKE ${searchPattern})`);
+        whereConditions.push(drizzleOrm.sql`(${dvssBackendModuleDatastore.schema.capabilityIntegration.nickname} LIKE ${searchPattern} OR ${dvssBackendModuleDatastore.schema.capability.name} LIKE ${searchPattern})`);
       }
       if (shouldJoinCapability) {
-        whereConditions.push(isNull(dvssBackendModuleDatastore.schema.capability.deletedAt));
+        whereConditions.push(drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capability.deletedAt));
       }
       if (input.propertyId) {
-        whereConditions.push(isNotNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id));
+        whereConditions.push(drizzleOrm.isNotNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id));
       }
       const countWhereConditions = [
-        eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, input.projectId),
-        isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt)
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.projectId, input.projectId),
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.deletedAt)
       ];
       if (input.category) {
-        countWhereConditions.push(eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, input.category));
+        countWhereConditions.push(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capabilityIntegration.category, input.category));
       }
       if (input.options?.filters && input.options.filters.length > 0) {
         this.applyFilters(countWhereConditions, input.options);
       }
       if (searchTerm) {
         const searchPattern = `%${searchTerm}%`;
-        countWhereConditions.push(sql`(${dvssBackendModuleDatastore.schema.capabilityIntegration.nickname} LIKE ${searchPattern} OR ${dvssBackendModuleDatastore.schema.capability.name} LIKE ${searchPattern})`);
+        countWhereConditions.push(drizzleOrm.sql`(${dvssBackendModuleDatastore.schema.capabilityIntegration.nickname} LIKE ${searchPattern} OR ${dvssBackendModuleDatastore.schema.capability.name} LIKE ${searchPattern})`);
       }
       const countQueryBuilder = this.conn.select({
-        count: sql`count(distinct ${dvssBackendModuleDatastore.schema.capabilityIntegration.id})`.as("count")
+        count: drizzleOrm.sql`count(distinct ${dvssBackendModuleDatastore.schema.capabilityIntegration.id})`.as("count")
       }).from(dvssBackendModuleDatastore.schema.capabilityIntegration);
-      const countQueryWithJoins = shouldJoinCapability ? countQueryBuilder.leftJoin(dvssBackendModuleDatastore.schema.capability, eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId)) : countQueryBuilder;
+      const countQueryWithJoins = shouldJoinCapability ? countQueryBuilder.leftJoin(dvssBackendModuleDatastore.schema.capability, drizzleOrm.eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId)) : countQueryBuilder;
       if (shouldJoinCapability) {
-        countWhereConditions.push(isNull(dvssBackendModuleDatastore.schema.capability.deletedAt));
+        countWhereConditions.push(drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capability.deletedAt));
       }
-      const countQueryWithPropertyJoin = input.propertyId ? countQueryWithJoins.leftJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, models.CONFIGURED_FOR_TYPE_ENUM.PROPERTY), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, BigInt(input.propertyId)), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))) : countQueryWithJoins;
+      const countQueryWithPropertyJoin = input.propertyId ? countQueryWithJoins.leftJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, models.CONFIGURED_FOR_TYPE_ENUM.PROPERTY), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, BigInt(input.propertyId)), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))) : countQueryWithJoins;
       if (input.propertyId) {
-        countWhereConditions.push(isNotNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id));
+        countWhereConditions.push(drizzleOrm.isNotNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id));
       }
-      const countQuery = countQueryWithPropertyJoin.where(and(...countWhereConditions));
+      const countQuery = countQueryWithPropertyJoin.where(drizzleOrm.and(...countWhereConditions));
       const baseQuery = this.conn.select({
-        ...getTableColumns(dvssBackendModuleDatastore.schema.capabilityIntegration),
+        ...drizzleOrm.getTableColumns(dvssBackendModuleDatastore.schema.capabilityIntegration),
         provider: dvssBackendModuleDatastore.schema.capability.providerIntegrationType
-      }).from(dvssBackendModuleDatastore.schema.capabilityIntegration).leftJoin(dvssBackendModuleDatastore.schema.capability, eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId));
-      const finalQuery = input.propertyId ? baseQuery.leftJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, models.CONFIGURED_FOR_TYPE_ENUM.PROPERTY), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, BigInt(input.propertyId)), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).where(and(...whereConditions)) : baseQuery.where(and(...whereConditions));
+      }).from(dvssBackendModuleDatastore.schema.capabilityIntegration).leftJoin(dvssBackendModuleDatastore.schema.capability, drizzleOrm.eq(dvssBackendModuleDatastore.schema.capability.id, dvssBackendModuleDatastore.schema.capabilityIntegration.capabilityId));
+      const finalQuery = input.propertyId ? baseQuery.leftJoin(dvssBackendModuleDatastore.schema.capIntegResourceMapping, drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, dvssBackendModuleDatastore.schema.capabilityIntegration.id), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, models.CONFIGURED_FOR_TYPE_ENUM.PROPERTY), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, BigInt(input.propertyId)), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).where(drizzleOrm.and(...whereConditions)) : baseQuery.where(drizzleOrm.and(...whereConditions));
       const [{ count: totalCount }, records] = await Promise.all([
         countQuery.execute().then((result) => result[0]),
         finalQuery.limit(count).offset(offset).orderBy(sortOrder).execute()
@@ -3505,9 +2260,9 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
       }
       switch (filter.by) {
         case "PROVIDER_INTEGRATION_TYPE": {
-          const valuePlaceholders = filterValues.map((value) => sql`${String(value)}`);
-          const joinedValues = sql.join(valuePlaceholders, sql`, `);
-          whereConditions.push(sql`${dvssBackendModuleDatastore.schema.capability.providerIntegrationType} IN (${joinedValues})`);
+          const valuePlaceholders = filterValues.map((value) => drizzleOrm.sql`${String(value)}`);
+          const joinedValues = drizzleOrm.sql.join(valuePlaceholders, drizzleOrm.sql`, `);
+          whereConditions.push(drizzleOrm.sql`${dvssBackendModuleDatastore.schema.capability.providerIntegrationType} IN (${joinedValues})`);
           break;
         }
         case "CAPABILITY_INTEGRATION_TYPE": {
@@ -3515,15 +2270,15 @@ exports.IntegrationConfigurationDao = class IntegrationConfigurationDao2 {
           for (const value of filterValues) {
             const upperValue = String(value).toUpperCase();
             if (upperValue === "PARENT") {
-              parentConditions.push(isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.parentId));
+              parentConditions.push(drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capabilityIntegration.parentId));
             } else if (upperValue === "CHILD") {
-              parentConditions.push(isNotNull(dvssBackendModuleDatastore.schema.capabilityIntegration.parentId));
+              parentConditions.push(drizzleOrm.isNotNull(dvssBackendModuleDatastore.schema.capabilityIntegration.parentId));
             }
           }
           if (parentConditions.length === 1) {
             whereConditions.push(parentConditions[0]);
           } else if (parentConditions.length > 1) {
-            const orCondition = or(...parentConditions);
+            const orCondition = drizzleOrm.or(...parentConditions);
             if (orCondition) {
               whereConditions.push(orCondition);
             }
@@ -3583,19 +2338,19 @@ exports.IntegrationServiceCommunicationTopicDao = class IntegrationServiceCommun
     });
     try {
       const existing = await this.conn.query.serviceCommunicationTopic.findFirst({
-        where: and(
-          eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.deploymentId, input.deploymentId),
-          eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.projectId, input.projectId),
-          isNull(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.deletedAt),
+        where: drizzleOrm.and(
+          drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.deploymentId, input.deploymentId),
+          drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.projectId, input.projectId),
+          drizzleOrm.isNull(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.deletedAt),
           ...input.capability ? [
-            eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.capability, input.capability)
+            drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.capability, input.capability)
           ] : [],
           ...input.subcapability ? [
-            eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.subcapability, input.subcapability)
+            drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.subcapability, input.subcapability)
           ] : [],
-          eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.subcapabilityOperation, input.subcapabilityOperation),
+          drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.subcapabilityOperation, input.subcapabilityOperation),
           ...input.capabilityIntegrationId ? [
-            eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.capabilityIntegrationId, input.capabilityIntegrationId)
+            drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.capabilityIntegrationId, input.capabilityIntegrationId)
           ] : []
         )
       });
@@ -3608,7 +2363,7 @@ exports.IntegrationServiceCommunicationTopicDao = class IntegrationServiceCommun
           shouldSubscribe: input.shouldSubscribe ?? existing.shouldSubscribe,
           updatedAt: /* @__PURE__ */ new Date(),
           updatedBy: loggedInUserId
-        }).where(eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.id, existing.id));
+        }).where(drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.id, existing.id));
         return {
           status: true
         };
@@ -3650,9 +2405,9 @@ exports.IntegrationServiceCommunicationTopicDao = class IntegrationServiceCommun
     });
     try {
       const topics = await this.conn.select({
-        ...getTableColumns(dvssBackendModuleDatastore.schema.serviceCommunicationTopic),
-        subcapability: getTableColumns(dvssBackendModuleDatastore.schema.subcapability)
-      }).from(dvssBackendModuleDatastore.schema.serviceCommunicationTopic).innerJoin(dvssBackendModuleDatastore.schema.subcapability, eq(dvssBackendModuleDatastore.schema.subcapability.id, dvssBackendModuleDatastore.schema.serviceCommunicationTopic.subcapability)).where(and(eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.capabilityIntegrationId, integrationId), isNull(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.deletedAt)));
+        ...drizzleOrm.getTableColumns(dvssBackendModuleDatastore.schema.serviceCommunicationTopic),
+        subcapability: drizzleOrm.getTableColumns(dvssBackendModuleDatastore.schema.subcapability)
+      }).from(dvssBackendModuleDatastore.schema.serviceCommunicationTopic).innerJoin(dvssBackendModuleDatastore.schema.subcapability, drizzleOrm.eq(dvssBackendModuleDatastore.schema.subcapability.id, dvssBackendModuleDatastore.schema.serviceCommunicationTopic.subcapability)).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.capabilityIntegrationId, integrationId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.serviceCommunicationTopic.deletedAt)));
       return topics;
     } catch (error) {
       this.logger.error(loggedInUserId, this.getServiceCommunicationTopics.name, this.fileName, "Error in getServiceCommunicationTopics", error, {
@@ -3738,276 +2493,1029 @@ exports.IntegrationResourceManagementDao = class IntegrationResourceManagementDa
       throw error;
     }
   }
-  /**
-   * Checks if a capability integration resource mapping exists.
-   * Validates that the mapping exists for the given capability integration, configured for ID and type.
-   *
-   * @param input - Input containing capability integration ID, configured for ID and type
-   * @param loggedInUserId - ID of the user performing the operation
-   * @returns Promise that resolves to true if mapping exists, false otherwise
-   */
-  async checkMappingExists(input, loggedInUserId) {
+  /**
+   * Checks if a capability integration resource mapping exists.
+   * Validates that the mapping exists for the given capability integration, configured for ID and type.
+   *
+   * @param input - Input containing capability integration ID, configured for ID and type
+   * @param loggedInUserId - ID of the user performing the operation
+   * @returns Promise that resolves to true if mapping exists, false otherwise
+   */
+  async checkMappingExists(input, loggedInUserId) {
+    try {
+      this.logger.info(loggedInUserId, this.checkMappingExists.name, this.fileName, `${this.checkMappingExists.name} called`, input);
+      const response = await this.conn.select({
+        id: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id
+      }).from(dvssBackendModuleDatastore.schema.capIntegResourceMapping).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, input.configuredForId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, input.configuredForType), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).limit(1);
+      return response.length > 0;
+    } catch (error) {
+      this.logger.error(loggedInUserId, this.checkMappingExists.name, this.fileName, "Error in checkMappingExists", error, input);
+      throw error;
+    }
+  }
+  /**
+   * Removes capability integration resource mapping (soft delete).
+   * Sets deletedAt and deletedBy on the matching cap_integ_resource_mapping row.
+   * Use this from UIF/callers instead of inter-service call to project-onboarding-ms.
+   *
+   * @param input - Delete parameters including capability integration ID, configured for ID and type
+   * @param loggedInUserId - ID of the user performing the operation
+   * @returns Promise resolving to { status: true } if any row was updated, { status: false } otherwise
+   */
+  async removeCapabilityIntegrationMapping(input, context) {
+    try {
+      this.logger.info(context.loggedInUserId, this.removeCapabilityIntegrationMapping.name, this.fileName, "Removing capability integration mapping", input);
+      const whereConditions = [
+        drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, input.configuredForId),
+        drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, input.configuredForType)
+      ];
+      const deleteResult = await this.conn.update(dvssBackendModuleDatastore.schema.capIntegResourceMapping).set({
+        deletedAt: /* @__PURE__ */ new Date(),
+        deletedBy: context.loggedInUserId
+      }).where(drizzleOrm.and(...whereConditions));
+      const isSuccess = deleteResult[0].affectedRows > 0;
+      this.logger.info(context.loggedInUserId, this.removeCapabilityIntegrationMapping.name, this.fileName, `Mapping removal ${isSuccess ? "successful" : "failed - no matching records"}`, {
+        affectedRows: deleteResult[0].affectedRows
+      });
+      return {
+        status: isSuccess
+      };
+    } catch (error) {
+      this.logger.error(context.loggedInUserId, this.removeCapabilityIntegrationMapping.name, this.fileName, "Error removing capability integration mapping", error, input);
+      throw error;
+    }
+  }
+  /**
+   * Gets a capability integration resource mapping by id (non-deleted only).
+   * Use from UIF wrappers to validate mapping exists before update.
+   *
+   * @param id - cap_integ_resource_mapping.id
+   * @param loggedInUserId - for logging
+   * @returns The mapping row or undefined if not found
+   */
+  async getCapabilityIntegrationResourceMappingById(id, loggedInUserId) {
+    try {
+      this.logger.info(loggedInUserId, this.getCapabilityIntegrationResourceMappingById.name, this.fileName, `${this.getCapabilityIntegrationResourceMappingById.name} called`, {
+        id: id.toString()
+      });
+      const rows = await this.conn.select({
+        id: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id,
+        capabilityIntegrationId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId,
+        configuredForId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId,
+        configuredForType: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType
+      }).from(dvssBackendModuleDatastore.schema.capIntegResourceMapping).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, id), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).limit(1);
+      return rows[0];
+    } catch (error) {
+      this.logger.error(loggedInUserId, this.getCapabilityIntegrationResourceMappingById.name, this.fileName, "Error in getCapabilityIntegrationResourceMappingById", error, {
+        id: id.toString()
+      });
+      throw error;
+    }
+  }
+  /**
+   * Updates capability integration resource mapping config by id.
+   * Replaces inter-service gRPC call to project-onboarding-ms for update capability integration configuration.
+   *
+   * @param input - id (mapping row id), config (new config JSON)
+   * @param context - GraphQL context for loggedInUserId
+   * @returns Promise resolving to { status: true } if row was updated, { status: false } otherwise
+   */
+  async updateCapabilityIntegrationConfiguration(input, context) {
+    try {
+      this.logger.info(context.loggedInUserId, this.updateCapabilityIntegrationConfiguration.name, this.fileName, "Updating capability integration resource mapping config", {
+        id: input.id.toString()
+      });
+      const updateResult = await this.conn.update(dvssBackendModuleDatastore.schema.capIntegResourceMapping).set({
+        config: input.config,
+        updatedBy: context.loggedInUserId
+      }).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, input.id), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt)));
+      const isSuccess = updateResult[0].affectedRows > 0;
+      this.logger.info(context.loggedInUserId, this.updateCapabilityIntegrationConfiguration.name, this.fileName, `Mapping config update ${isSuccess ? "successful" : "failed - no matching records"}`, {
+        affectedRows: updateResult[0].affectedRows
+      });
+      return {
+        status: isSuccess
+      };
+    } catch (error) {
+      this.logger.error(context.loggedInUserId, this.updateCapabilityIntegrationConfiguration.name, this.fileName, "Error updating capability integration resource mapping config", error, input);
+      throw error;
+    }
+  }
+};
+exports.IntegrationResourceManagementDao = _ts_decorate14([
+  common.Injectable(),
+  _ts_param8(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database,
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  ])
+], exports.IntegrationResourceManagementDao);
+function _ts_decorate15(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata12(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param9, "_ts_param");
+exports.IntegrationUserManagementDao = class IntegrationUserManagementDao {
+  static {
+    __name(this, "IntegrationUserManagementDao");
+  }
+  conn;
+  constructor(conn) {
+    this.conn = conn;
+  }
+};
+exports.IntegrationUserManagementDao = _ts_decorate15([
+  common.Injectable(),
+  _ts_param9(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database
+  ])
+], exports.IntegrationUserManagementDao);
+function _ts_decorate16(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata13(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param10, "_ts_param");
+exports.IntegrationOnpremDeploymentDao = class IntegrationOnpremDeploymentDao {
+  static {
+    __name(this, "IntegrationOnpremDeploymentDao");
+  }
+  conn;
+  logger;
+  fileName = "integration-onprem-deployment.dao";
+  constructor(conn, logger) {
+    this.conn = conn;
+    this.logger = logger;
+  }
+  async addUpdateOnpremDeployment(input, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
     try {
-      this.logger.info(loggedInUserId, this.checkMappingExists.name, this.fileName, `${this.checkMappingExists.name} called`, input);
-      const response = await this.conn.select({
-        id: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id
-      }).from(dvssBackendModuleDatastore.schema.capIntegResourceMapping).where(and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, input.configuredForId), eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, input.configuredForType), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).limit(1);
-      return response.length > 0;
+      this.logger.info(loggedInUserId, this.addUpdateOnpremDeployment.name, this.fileName, `IntegrationOnpremDeploymentDao -> addUpdateOnpremDeployment called`, {
+        input
+      });
+      const existingEntry = await this.conn.query.onPremDeployment.findFirst({
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.onPremDeployment.projectId, input.projectId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.onPremDeployment.capabilityIntegrationId, input.capabilityIntegrationId))
+      });
+      if (existingEntry) {
+        await this.updateOnpremDeployment(existingEntry.id, input, loggedInUserId);
+        return {
+          status: true,
+          id: existingEntry.id
+        };
+      }
+      return this.addOnpremDeployment(input, loggedInUserId);
     } catch (error) {
-      this.logger.error(loggedInUserId, this.checkMappingExists.name, this.fileName, "Error in checkMappingExists", error, input);
+      this.logger.error(loggedInUserId, this.addUpdateOnpremDeployment.name, this.fileName, "Error in addCapabilityIntegration", error, {
+        input
+      });
       throw error;
     }
   }
-  /**
-   * Removes capability integration resource mapping (soft delete).
-   * Sets deletedAt and deletedBy on the matching cap_integ_resource_mapping row.
-   * Use this from UIF/callers instead of inter-service call to project-onboarding-ms.
-   *
-   * @param input - Delete parameters including capability integration ID, configured for ID and type
-   * @param loggedInUserId - ID of the user performing the operation
-   * @returns Promise resolving to { status: true } if any row was updated, { status: false } otherwise
-   */
-  async removeCapabilityIntegrationMapping(input, context) {
+  async addOnpremDeployment(input, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
     try {
-      this.logger.info(context.loggedInUserId, this.removeCapabilityIntegrationMapping.name, this.fileName, "Removing capability integration mapping", input);
-      const whereConditions = [
-        isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt),
-        eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId, input.capabilityIntegrationId),
-        eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId, input.configuredForId),
-        eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType, input.configuredForType)
-      ];
-      const deleteResult = await this.conn.update(dvssBackendModuleDatastore.schema.capIntegResourceMapping).set({
-        deletedAt: /* @__PURE__ */ new Date(),
-        deletedBy: context.loggedInUserId
-      }).where(and(...whereConditions));
-      const isSuccess = deleteResult[0].affectedRows > 0;
-      this.logger.info(context.loggedInUserId, this.removeCapabilityIntegrationMapping.name, this.fileName, `Mapping removal ${isSuccess ? "successful" : "failed - no matching records"}`, {
-        affectedRows: deleteResult[0].affectedRows
-      });
+      const [insertedResult] = await this.conn.insert(dvssBackendModuleDatastore.schema.onPremDeployment).values(input).$returningId();
       return {
-        status: isSuccess
+        status: true,
+        id: BigInt(insertedResult.id)
       };
     } catch (error) {
-      this.logger.error(context.loggedInUserId, this.removeCapabilityIntegrationMapping.name, this.fileName, "Error removing capability integration mapping", error, input);
+      this.logger.error(loggedInUserId, this.addOnpremDeployment.name, this.fileName, "Error in addOnpremDeployment", error, {
+        input
+      });
       throw error;
     }
   }
-  /**
-   * Gets a capability integration resource mapping by id (non-deleted only).
-   * Use from UIF wrappers to validate mapping exists before update.
-   *
-   * @param id - cap_integ_resource_mapping.id
-   * @param loggedInUserId - for logging
-   * @returns The mapping row or undefined if not found
-   */
-  async getCapabilityIntegrationResourceMappingById(id, loggedInUserId) {
+  async updateOnpremDeployment(id, updateData, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
     try {
-      this.logger.info(loggedInUserId, this.getCapabilityIntegrationResourceMappingById.name, this.fileName, `${this.getCapabilityIntegrationResourceMappingById.name} called`, {
-        id: id.toString()
-      });
-      const rows = await this.conn.select({
-        id: dvssBackendModuleDatastore.schema.capIntegResourceMapping.id,
-        capabilityIntegrationId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.capabilityIntegrationId,
-        configuredForId: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForId,
-        configuredForType: dvssBackendModuleDatastore.schema.capIntegResourceMapping.configuredForType
-      }).from(dvssBackendModuleDatastore.schema.capIntegResourceMapping).where(and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, id), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt))).limit(1);
-      return rows[0];
+      const result = await this.conn.update(dvssBackendModuleDatastore.schema.onPremDeployment).set(updateData).where(drizzleOrm.eq(dvssBackendModuleDatastore.schema.onPremDeployment.id, id)).execute();
+      return {
+        status: result[0].affectedRows > 0,
+        id
+      };
     } catch (error) {
-      this.logger.error(loggedInUserId, this.getCapabilityIntegrationResourceMappingById.name, this.fileName, "Error in getCapabilityIntegrationResourceMappingById", error, {
-        id: id.toString()
+      this.logger.error(loggedInUserId, this.updateOnpremDeployment.name, this.fileName, "Error in updateOnpremDeployment", error, {
+        id,
+        updateData
       });
       throw error;
     }
   }
   /**
-   * Updates capability integration resource mapping config by id.
-   * Replaces inter-service gRPC call to project-onboarding-ms for update capability integration configuration.
-   *
-   * @param input - id (mapping row id), config (new config JSON)
-   * @param context - GraphQL context for loggedInUserId
-   * @returns Promise resolving to { status: true } if row was updated, { status: false } otherwise
+   * Gets an on-prem deployment by capability integration id.
+   * Used by Suprema integration to resolve deployment for a given integration.
    */
-  async updateCapabilityIntegrationConfiguration(input, context) {
+  async getOnpremDeployment(input, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
     try {
-      this.logger.info(context.loggedInUserId, this.updateCapabilityIntegrationConfiguration.name, this.fileName, "Updating capability integration resource mapping config", {
-        id: input.id.toString()
+      this.logger.info(loggedInUserId, this.getOnpremDeployment.name, this.fileName, "IntegrationOnpremDeploymentDao -> getOnpremDeployment called", {
+        input
       });
-      const updateResult = await this.conn.update(dvssBackendModuleDatastore.schema.capIntegResourceMapping).set({
-        config: input.config,
-        updatedBy: context.loggedInUserId
-      }).where(and(eq(dvssBackendModuleDatastore.schema.capIntegResourceMapping.id, input.id), isNull(dvssBackendModuleDatastore.schema.capIntegResourceMapping.deletedAt)));
-      const isSuccess = updateResult[0].affectedRows > 0;
-      this.logger.info(context.loggedInUserId, this.updateCapabilityIntegrationConfiguration.name, this.fileName, `Mapping config update ${isSuccess ? "successful" : "failed - no matching records"}`, {
-        affectedRows: updateResult[0].affectedRows
+      return await this.conn.query.onPremDeployment.findFirst({
+        where: drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.onPremDeployment.projectId, input.projectId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.onPremDeployment.capabilityIntegrationId, input.integrationId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.onPremDeployment.deletedAt))
       });
-      return {
-        status: isSuccess
-      };
     } catch (error) {
-      this.logger.error(context.loggedInUserId, this.updateCapabilityIntegrationConfiguration.name, this.fileName, "Error updating capability integration resource mapping config", error, input);
+      this.logger.error(loggedInUserId, this.getOnpremDeployment.name, this.fileName, "Error in getOnpremDeployment", error, {
+        input
+      });
       throw error;
     }
   }
 };
-exports.IntegrationResourceManagementDao = _ts_decorate14([
+exports.IntegrationOnpremDeploymentDao = _ts_decorate16([
+  common.Injectable(),
+  _ts_param10(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database,
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  ])
+], exports.IntegrationOnpremDeploymentDao);
+function substituteUrlPlaceholders(url, params = {}) {
+  return url.replace(/\{(\w+)\}/g, (matched, name) => params[name] ?? matched);
+}
+__name(substituteUrlPlaceholders, "substituteUrlPlaceholders");
+function hasPersistedIntegrationId(id) {
+  return id != null && id !== BigInt(0);
+}
+__name(hasPersistedIntegrationId, "hasPersistedIntegrationId");
+function secondsUntil(expiresAt, nowMs = Date.now()) {
+  return Math.max(0, Math.floor((expiresAt.getTime() - nowMs) / 1e3));
+}
+__name(secondsUntil, "secondsUntil");
+var OAUTH_TOKEN_FRESHNESS_BUFFER_MS = 6e4;
+function isTokenFresh(expiresAt, nowMs = Date.now()) {
+  return expiresAt.getTime() - OAUTH_TOKEN_FRESHNESS_BUFFER_MS > nowMs;
+}
+__name(isTokenFresh, "isTokenFresh");
+function getIntegrationConfigKmsKeyId() {
+  return process.env.INTEGRATION_CONFIG_KMS_KEY_ID || "";
+}
+__name(getIntegrationConfigKmsKeyId, "getIntegrationConfigKmsKeyId");
+function delay(ms) {
+  return new Promise((resolve3) => {
+    setTimeout(resolve3, ms);
+  });
+}
+__name(delay, "delay");
+function getOauthTokenCacheKey(capabilityIntegrationId) {
+  return `${dvssBackendModuleDatastore.ENV_PREFIX}${dvssBackendModuleDatastore.OAUTH_TOKEN_CACHE_PREFIX}${capabilityIntegrationId.toString()}`;
+}
+__name(getOauthTokenCacheKey, "getOauthTokenCacheKey");
+function getOauthTokenLockKey(capabilityIntegrationId) {
+  return `${dvssBackendModuleDatastore.ENV_PREFIX}${dvssBackendModuleDatastore.OAUTH_TOKEN_LOCK_PREFIX}${capabilityIntegrationId.toString()}`;
+}
+__name(getOauthTokenLockKey, "getOauthTokenLockKey");
+
+// ../../packages/dvss-integration-oauth/src/cache/oauth-token-cache.ts
+function _ts_decorate17(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate17, "_ts_decorate");
+function _ts_metadata14(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata14, "_ts_metadata");
+var OauthTokenCache = class {
+  static {
+    __name(this, "OauthTokenCache");
+  }
+  redisCacheStoreService;
+  constructor(redisCacheStoreService) {
+    this.redisCacheStoreService = redisCacheStoreService;
+  }
+  async get(capabilityIntegrationId) {
+    const cached = await this.redisCacheStoreService.get(getOauthTokenCacheKey(capabilityIntegrationId));
+    if (!cached?.accessToken || !cached.expiresAt) {
+      return void 0;
+    }
+    return {
+      accessToken: cached.accessToken,
+      tokenType: cached.tokenType,
+      expiresAt: new Date(cached.expiresAt),
+      refreshToken: cached.refreshToken
+    };
+  }
+  async set(capabilityIntegrationId, token) {
+    const ttlSeconds = secondsUntil(token.expiresAt);
+    if (ttlSeconds <= 0) {
+      return;
+    }
+    await this.redisCacheStoreService.set(getOauthTokenCacheKey(capabilityIntegrationId), {
+      accessToken: token.accessToken,
+      tokenType: token.tokenType,
+      expiresAt: token.expiresAt.toISOString(),
+      refreshToken: token.refreshToken
+    }, ttlSeconds);
+  }
+  async del(capabilityIntegrationId) {
+    await this.redisCacheStoreService.del(getOauthTokenCacheKey(capabilityIntegrationId));
+  }
+};
+OauthTokenCache = _ts_decorate17([
+  common.Injectable(),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof dvssBackendModuleDatastore.RedisCacheStoreService === "undefined" ? Object : dvssBackendModuleDatastore.RedisCacheStoreService
+  ])
+], OauthTokenCache);
+function _ts_decorate18(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate18, "_ts_decorate");
+var AuthorizationCodeGrantHandler = class {
+  static {
+    __name(this, "AuthorizationCodeGrantHandler");
+  }
+  mint(request) {
+    throw new Error(`NotImplemented: authorization_code grant is not supported (${request.tokenUrl})`);
+  }
+};
+AuthorizationCodeGrantHandler = _ts_decorate18([
+  common.Injectable()
+], AuthorizationCodeGrantHandler);
+
+// ../../packages/dvss-integration-oauth/src/models/oauth.model.ts
+var OAUTH_GRANT_TYPE = {
+  CLIENT_CREDENTIALS: "CLIENT_CREDENTIALS"
+};
+var OAUTH_RFC_GRANT_TYPE = {
+  CLIENT_CREDENTIALS: "client_credentials"
+};
+var OAUTH_DEFAULT_TOKEN_TYPE = "Bearer";
+var OAUTH_TOKEN_HEADERS = {
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  Accept: "application/json",
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  "Content-Type": "application/x-www-form-urlencoded"
+};
+
+// ../../packages/dvss-integration-oauth/src/grants/client-credentials.handler.ts
+function _ts_decorate19(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata15(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata15, "_ts_metadata");
+var ClientCredentialsGrantHandler = class {
+  static {
+    __name(this, "ClientCredentialsGrantHandler");
+  }
+  logger;
+  trafficGatewayService;
+  fileName = "client-credentials.handler";
+  constructor(logger, trafficGatewayService) {
+    this.logger = logger;
+    this.trafficGatewayService = trafficGatewayService;
+  }
+  async mint(request) {
+    const tokenUrl = new URL(request.tokenUrl);
+    const body = new URLSearchParams({
+      client_id: request.credentials.clientId,
+      client_secret: request.credentials.clientSecret,
+      grant_type: OAUTH_RFC_GRANT_TYPE.CLIENT_CREDENTIALS
+    });
+    if (request.scope) {
+      body.set("scope", request.scope);
+    }
+    const loggedInUserId = request.loggedInUserId;
+    const integrationContext = {
+      id: request.integration.id,
+      capabilityId: request.integration.capabilityId,
+      providerId: request.integration.providerId,
+      projectId: request.integration.projectId,
+      headers: OAUTH_TOKEN_HEADERS,
+      config: {
+        platformConfig: {
+          authUrl: request.tokenUrl,
+          baseUrl: tokenUrl.origin
+        },
+        integrationConfig: {}
+      }
+    };
+    this.logger.info(loggedInUserId, this.mint.name, this.fileName, "Minting OAuth access token with client_credentials");
+    const response = await this.trafficGatewayService.executeIntegrationRequest({
+      apiMethod: HTTP_METHOD.POST,
+      baseUrl: tokenUrl.origin,
+      url: `${tokenUrl.pathname}${tokenUrl.search}`,
+      body: body.toString(),
+      headers: OAUTH_TOKEN_HEADERS
+    }, integrationContext, loggedInUserId);
+    if (!response.access_token) {
+      throw new Error("OAuth token response is missing access_token");
+    }
+    const expiresInSeconds = response.expires_in ?? 0;
+    return {
+      accessToken: response.access_token,
+      tokenType: response.token_type ?? OAUTH_DEFAULT_TOKEN_TYPE,
+      expiresAt: new Date(Date.now() + expiresInSeconds * 1e3),
+      refreshToken: response.refresh_token
+    };
+  }
+};
+ClientCredentialsGrantHandler = _ts_decorate19([
+  common.Injectable(),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
+    typeof exports.TrafficGatewayService === "undefined" ? Object : exports.TrafficGatewayService
+  ])
+], ClientCredentialsGrantHandler);
+function _ts_decorate20(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate20, "_ts_decorate");
+function _ts_metadata16(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata16, "_ts_metadata");
+var GrantHandlerRegistry = class {
+  static {
+    __name(this, "GrantHandlerRegistry");
+  }
+  clientCredentialsGrantHandler;
+  authorizationCodeGrantHandler;
+  constructor(clientCredentialsGrantHandler, authorizationCodeGrantHandler) {
+    this.clientCredentialsGrantHandler = clientCredentialsGrantHandler;
+    this.authorizationCodeGrantHandler = authorizationCodeGrantHandler;
+  }
+  get(grantType) {
+    if (grantType === OAUTH_GRANT_TYPE.CLIENT_CREDENTIALS) {
+      return this.clientCredentialsGrantHandler;
+    }
+    return this.authorizationCodeGrantHandler;
+  }
+  resolvePreferredGrant(supportedGrantTypes) {
+    if (supportedGrantTypes?.includes(OAUTH_GRANT_TYPE.CLIENT_CREDENTIALS)) {
+      return OAUTH_GRANT_TYPE.CLIENT_CREDENTIALS;
+    }
+    if (supportedGrantTypes?.length) {
+      return supportedGrantTypes[0];
+    }
+    return OAUTH_GRANT_TYPE.CLIENT_CREDENTIALS;
+  }
+};
+GrantHandlerRegistry = _ts_decorate20([
   common.Injectable(),
-  _ts_param8(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
-    typeof MySql2Database === "undefined" ? Object : MySql2Database,
-    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
+    typeof ClientCredentialsGrantHandler === "undefined" ? Object : ClientCredentialsGrantHandler,
+    typeof AuthorizationCodeGrantHandler === "undefined" ? Object : AuthorizationCodeGrantHandler
   ])
-], exports.IntegrationResourceManagementDao);
-function _ts_decorate15(decorators, target, key, desc2) {
+], GrantHandlerRegistry);
+function _ts_decorate21(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate21, "_ts_decorate");
+function _ts_metadata17(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
-exports.IntegrationUserManagementDao = class IntegrationUserManagementDao {
+__name(_ts_param11, "_ts_param");
+var OauthProviderDao = class {
   static {
-    __name(this, "IntegrationUserManagementDao");
+    __name(this, "OauthProviderDao");
   }
   conn;
-  constructor(conn) {
+  logger;
+  fileName = "oauth-provider.dao";
+  constructor(conn, logger) {
     this.conn = conn;
+    this.logger = logger;
+  }
+  async findByCapabilityAndProvider(capabilityId, providerId, loggedInUserId) {
+    this.logger.info(loggedInUserId, this.findByCapabilityAndProvider.name, this.fileName, "Loading OAuth provider catalog row", {
+      capabilityId,
+      providerId
+    });
+    try {
+      const rows = await this.conn.select().from(dvssBackendModuleDatastore.schema.integrationOauthProvider).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.integrationOauthProvider.capabilityId, capabilityId), drizzleOrm.eq(dvssBackendModuleDatastore.schema.integrationOauthProvider.providerId, providerId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.integrationOauthProvider.deletedAt)));
+      return rows[0];
+    } catch (error) {
+      throw dvssBackendModuleDatastore.errorHandler(loggedInUserId, this.findByCapabilityAndProvider.name, this.fileName, dvssBackendModuleDatastore.DATABASE_ERROR_NAMES.DATABASE_ERROR, dvssBackendModuleDatastore.MODULE_NAME.COMMON, error, {
+        capabilityId,
+        providerId
+      });
+    }
   }
 };
-exports.IntegrationUserManagementDao = _ts_decorate15([
+OauthProviderDao = _ts_decorate21([
   common.Injectable(),
-  _ts_param9(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
-    typeof MySql2Database === "undefined" ? Object : MySql2Database
+  _ts_param11(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database,
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
   ])
-], exports.IntegrationUserManagementDao);
-function _ts_decorate16(decorators, target, key, desc2) {
+], OauthProviderDao);
+function _ts_decorate22(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata13(k, v) {
+__name(_ts_decorate22, "_ts_decorate");
+function _ts_metadata18(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata18, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
-exports.IntegrationOnpremDeploymentDao = class IntegrationOnpremDeploymentDao {
+__name(_ts_param12, "_ts_param");
+var OauthTokenDao = class {
   static {
-    __name(this, "IntegrationOnpremDeploymentDao");
+    __name(this, "OauthTokenDao");
   }
   conn;
   logger;
-  fileName = "integration-onprem-deployment.dao";
+  fileName = "oauth-token.dao";
   constructor(conn, logger) {
     this.conn = conn;
     this.logger = logger;
   }
-  async addUpdateOnpremDeployment(input, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
+  async findByCapabilityIntegrationId(capabilityIntegrationId, loggedInUserId) {
+    this.logger.info(loggedInUserId, this.findByCapabilityIntegrationId.name, this.fileName, "Loading OAuth token row", {
+      capabilityIntegrationId
+    });
     try {
-      this.logger.info(loggedInUserId, this.addUpdateOnpremDeployment.name, this.fileName, `IntegrationOnpremDeploymentDao -> addUpdateOnpremDeployment called`, {
-        input
-      });
-      const existingEntry = await this.conn.query.onPremDeployment.findFirst({
-        where: and(eq(dvssBackendModuleDatastore.schema.onPremDeployment.projectId, input.projectId), eq(dvssBackendModuleDatastore.schema.onPremDeployment.capabilityIntegrationId, input.capabilityIntegrationId))
-      });
-      if (existingEntry) {
-        await this.updateOnpremDeployment(existingEntry.id, input, loggedInUserId);
-        return {
-          status: true,
-          id: existingEntry.id
-        };
-      }
-      return this.addOnpremDeployment(input, loggedInUserId);
+      const rows = await this.conn.select().from(dvssBackendModuleDatastore.schema.integrationOauthToken).where(drizzleOrm.and(drizzleOrm.eq(dvssBackendModuleDatastore.schema.integrationOauthToken.capabilityIntegrationId, capabilityIntegrationId), drizzleOrm.isNull(dvssBackendModuleDatastore.schema.integrationOauthToken.deletedAt)));
+      return rows[0];
     } catch (error) {
-      this.logger.error(loggedInUserId, this.addUpdateOnpremDeployment.name, this.fileName, "Error in addCapabilityIntegration", error, {
-        input
+      throw dvssBackendModuleDatastore.errorHandler(loggedInUserId, this.findByCapabilityIntegrationId.name, this.fileName, dvssBackendModuleDatastore.DATABASE_ERROR_NAMES.DATABASE_ERROR, dvssBackendModuleDatastore.MODULE_NAME.COMMON, error, {
+        capabilityIntegrationId
       });
-      throw error;
     }
   }
-  async addOnpremDeployment(input, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
+  async upsert(input) {
+    this.logger.info(input.loggedInUserId, this.upsert.name, this.fileName, "Upserting OAuth token row", {
+      capabilityIntegrationId: input.capabilityIntegrationId
+    });
+    const existing = await this.findByCapabilityIntegrationId(input.capabilityIntegrationId, input.loggedInUserId);
+    const now = /* @__PURE__ */ new Date();
     try {
-      const [insertedResult] = await this.conn.insert(dvssBackendModuleDatastore.schema.onPremDeployment).values(input).$returningId();
-      return {
-        status: true,
-        id: BigInt(insertedResult.id)
-      };
+      if (existing) {
+        await this.conn.update(dvssBackendModuleDatastore.schema.integrationOauthToken).set({
+          accessToken: input.accessToken,
+          refreshToken: input.refreshToken ?? null,
+          expiresAt: input.expiresAt,
+          refreshExpiredAt: input.refreshExpiredAt ?? null,
+          tokenMetadata: input.tokenMetadata ?? null,
+          updatedAt: now,
+          updatedBy: input.loggedInUserId,
+          deletedAt: null,
+          deletedBy: null
+        }).where(drizzleOrm.eq(dvssBackendModuleDatastore.schema.integrationOauthToken.id, existing.id));
+        return;
+      }
+      await this.conn.insert(dvssBackendModuleDatastore.schema.integrationOauthToken).values({
+        capabilityIntegrationId: input.capabilityIntegrationId,
+        accessToken: input.accessToken,
+        refreshToken: input.refreshToken ?? null,
+        expiresAt: input.expiresAt,
+        refreshExpiredAt: input.refreshExpiredAt ?? null,
+        tokenMetadata: input.tokenMetadata ?? null,
+        createdAt: now,
+        createdBy: input.loggedInUserId
+      });
     } catch (error) {
-      this.logger.error(loggedInUserId, this.addOnpremDeployment.name, this.fileName, "Error in addOnpremDeployment", error, {
-        input
+      throw dvssBackendModuleDatastore.errorHandler(input.loggedInUserId, this.upsert.name, this.fileName, dvssBackendModuleDatastore.DATABASE_ERROR_NAMES.DATABASE_ERROR, dvssBackendModuleDatastore.MODULE_NAME.COMMON, error, {
+        capabilityIntegrationId: input.capabilityIntegrationId
       });
-      throw error;
     }
   }
-  async updateOnpremDeployment(id, updateData, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
-    try {
-      const result = await this.conn.update(dvssBackendModuleDatastore.schema.onPremDeployment).set(updateData).where(eq(dvssBackendModuleDatastore.schema.onPremDeployment.id, id)).execute();
+};
+OauthTokenDao = _ts_decorate22([
+  common.Injectable(),
+  _ts_param12(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
+  _ts_metadata18("design:type", Function),
+  _ts_metadata18("design:paramtypes", [
+    typeof MySql2Database === "undefined" ? Object : MySql2Database,
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  ])
+], OauthTokenDao);
+
+// ../../packages/dvss-integration-oauth/src/token-manager/oauth-token-manager.ts
+function _ts_decorate23(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate23, "_ts_decorate");
+function _ts_metadata19(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata19, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param13, "_ts_param");
+var oauthSecretProviderToken = dvssBackendModuleUtility.SECRET_PROVIDER ?? /* @__PURE__ */ Symbol("SECRET_PROVIDER");
+var OAUTH_LOCK_TTL_SECONDS = 30;
+var OAUTH_LOCK_WAIT_MS = 100;
+var OAUTH_LOCK_MAX_WAIT_MS = 1e4;
+var OauthTokenManager = class {
+  static {
+    __name(this, "OauthTokenManager");
+  }
+  logger;
+  tokenDao;
+  providerDao;
+  tokenCache;
+  redisCacheStoreService;
+  grantHandlerRegistry;
+  secretProvider;
+  fileName = "oauth-token-manager";
+  sessions = /* @__PURE__ */ new Map();
+  constructor(logger, tokenDao, providerDao, tokenCache, redisCacheStoreService, grantHandlerRegistry, secretProvider) {
+    this.logger = logger;
+    this.tokenDao = tokenDao;
+    this.providerDao = providerDao;
+    this.tokenCache = tokenCache;
+    this.redisCacheStoreService = redisCacheStoreService;
+    this.grantHandlerRegistry = grantHandlerRegistry;
+    this.secretProvider = secretProvider;
+  }
+  async getValidAccessToken(capabilityIntegrationId, opts = {}) {
+    const loggedInUserId = opts.loggedInUserId ?? dvssBackendModuleUtility.SYSTEM_USER_ID;
+    const shouldForceRefresh = opts.forceRefresh === true;
+    if (!shouldForceRefresh && hasPersistedIntegrationId(capabilityIntegrationId)) {
+      const cached = await this.readCachedToken(capabilityIntegrationId, loggedInUserId);
+      if (cached) {
+        return cached;
+      }
+    }
+    if (!hasPersistedIntegrationId(capabilityIntegrationId)) {
+      return this.mintToken(void 0, opts, loggedInUserId);
+    }
+    return this.mintWithDistributedLock(capabilityIntegrationId, opts, loggedInUserId, shouldForceRefresh);
+  }
+  async storeToken(capabilityIntegrationId, token, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
+    await this.persistToken(capabilityIntegrationId, token, loggedInUserId);
+    this.writeMemory(capabilityIntegrationId, token);
+    await this.tokenCache.set(capabilityIntegrationId, token);
+  }
+  async invalidate(capabilityIntegrationId) {
+    this.sessions.delete(capabilityIntegrationId.toString());
+    await this.tokenCache.del(capabilityIntegrationId);
+  }
+  async mintWithDistributedLock(capabilityIntegrationId, opts, loggedInUserId, shouldForceRefresh) {
+    const lockKey = getOauthTokenLockKey(capabilityIntegrationId);
+    const deadline = Date.now() + OAUTH_LOCK_MAX_WAIT_MS;
+    while (Date.now() < deadline) {
+      if (!shouldForceRefresh) {
+        const cached = await this.readCachedToken(capabilityIntegrationId, loggedInUserId);
+        if (cached) {
+          return cached;
+        }
+      }
+      const ownerId = crypto.randomUUID();
+      const isAcquired = await this.redisCacheStoreService.setIfAbsent(lockKey, ownerId, OAUTH_LOCK_TTL_SECONDS);
+      if (isAcquired) {
+        this.logger.info(loggedInUserId, this.mintWithDistributedLock.name, this.fileName, "OAuth token lock acquired", {
+          capabilityIntegrationId: capabilityIntegrationId.toString()
+        });
+        try {
+          if (!shouldForceRefresh) {
+            const cached = await this.readCachedToken(capabilityIntegrationId, loggedInUserId);
+            if (cached) {
+              return cached;
+            }
+          }
+          return await this.mintToken(capabilityIntegrationId, opts, loggedInUserId);
+        } finally {
+          await this.releaseLockIfOwner(lockKey, ownerId);
+        }
+      }
+      const existingLock = await this.redisCacheStoreService.get(lockKey);
+      if (existingLock == null) {
+        this.logger.warn(loggedInUserId, this.mintWithDistributedLock.name, this.fileName, "OAuth token lock unavailable; minting without lock", {
+          capabilityIntegrationId: capabilityIntegrationId.toString()
+        });
+        if (!shouldForceRefresh) {
+          const cached = await this.readCachedToken(capabilityIntegrationId, loggedInUserId);
+          if (cached) {
+            return cached;
+          }
+        }
+        return this.mintToken(capabilityIntegrationId, opts, loggedInUserId);
+      }
+      this.logger.info(loggedInUserId, this.mintWithDistributedLock.name, this.fileName, "OAuth token lock contention; waiting", {
+        capabilityIntegrationId: capabilityIntegrationId.toString()
+      });
+      await delay(OAUTH_LOCK_WAIT_MS);
+    }
+    this.logger.warn(loggedInUserId, this.mintWithDistributedLock.name, this.fileName, "OAuth token lock wait timed out; minting without lock", {
+      capabilityIntegrationId: capabilityIntegrationId.toString()
+    });
+    if (!shouldForceRefresh) {
+      const cached = await this.readCachedToken(capabilityIntegrationId, loggedInUserId);
+      if (cached) {
+        return cached;
+      }
+    }
+    return this.mintToken(capabilityIntegrationId, opts, loggedInUserId);
+  }
+  async releaseLockIfOwner(lockKey, ownerId) {
+    const current = await this.redisCacheStoreService.get(lockKey);
+    if (current === ownerId) {
+      await this.redisCacheStoreService.del(lockKey);
+    }
+  }
+  async readCachedToken(capabilityIntegrationId, loggedInUserId) {
+    const memory = this.sessions.get(capabilityIntegrationId.toString());
+    if (memory && isTokenFresh(memory.tokenExpiry)) {
       return {
-        status: result[0].affectedRows > 0,
-        id
+        accessToken: memory.token,
+        tokenType: memory.tokenType,
+        expiresAt: memory.tokenExpiry,
+        refreshToken: memory.refreshToken
       };
-    } catch (error) {
-      this.logger.error(loggedInUserId, this.updateOnpremDeployment.name, this.fileName, "Error in updateOnpremDeployment", error, {
-        id,
-        updateData
-      });
-      throw error;
     }
+    const redisToken = await this.tokenCache.get(capabilityIntegrationId);
+    if (redisToken && isTokenFresh(redisToken.expiresAt)) {
+      this.writeMemory(capabilityIntegrationId, redisToken);
+      return redisToken;
+    }
+    const row = await this.tokenDao.findByCapabilityIntegrationId(capabilityIntegrationId, loggedInUserId);
+    if (!row || !isTokenFresh(row.expiresAt)) {
+      return void 0;
+    }
+    const accessToken = await this.decryptToken(row.accessToken);
+    const refreshToken = row.refreshToken ? await this.decryptToken(row.refreshToken) : void 0;
+    const token = {
+      accessToken,
+      tokenType: row.tokenMetadata?.tokenType ?? "Bearer",
+      expiresAt: row.expiresAt,
+      refreshToken,
+      metadata: row.tokenMetadata ?? void 0
+    };
+    this.writeMemory(capabilityIntegrationId, token);
+    await this.tokenCache.set(capabilityIntegrationId, token);
+    return token;
   }
-  /**
-   * Gets an on-prem deployment by capability integration id.
-   * Used by Suprema integration to resolve deployment for a given integration.
-   */
-  async getOnpremDeployment(input, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
+  async mintToken(capabilityIntegrationId, opts, loggedInUserId) {
+    if (!opts.credentials) {
+      throw new Error("OAuth mint credentials are required when no valid cached token exists");
+    }
+    const { tokenUrl, scope, grantType } = await this.resolveMintContext(opts.credentials, opts, loggedInUserId);
+    const handler = this.grantHandlerRegistry.get(grantType);
+    this.logger.info(loggedInUserId, this.mintToken.name, this.fileName, "Minting OAuth token", {
+      capabilityIntegrationId: capabilityIntegrationId?.toString(),
+      grantType
+    });
     try {
-      this.logger.info(loggedInUserId, this.getOnpremDeployment.name, this.fileName, "IntegrationOnpremDeploymentDao -> getOnpremDeployment called", {
-        input
-      });
-      return await this.conn.query.onPremDeployment.findFirst({
-        where: and(eq(dvssBackendModuleDatastore.schema.onPremDeployment.projectId, input.projectId), eq(dvssBackendModuleDatastore.schema.onPremDeployment.capabilityIntegrationId, input.integrationId), isNull(dvssBackendModuleDatastore.schema.onPremDeployment.deletedAt))
+      const minted = await handler.mint({
+        credentials: opts.credentials,
+        tokenUrl,
+        scope,
+        integration: {
+          id: capabilityIntegrationId,
+          capabilityId: opts.capabilityId,
+          providerId: opts.providerId
+        },
+        loggedInUserId
       });
+      if (!minted.accessToken) {
+        throw new Error("OAuth mint returned an empty access token");
+      }
+      if (hasPersistedIntegrationId(capabilityIntegrationId)) {
+        await this.storeToken(capabilityIntegrationId, minted, loggedInUserId);
+      }
+      return minted;
     } catch (error) {
-      this.logger.error(loggedInUserId, this.getOnpremDeployment.name, this.fileName, "Error in getOnpremDeployment", error, {
-        input
-      });
+      this.logger.error(loggedInUserId, this.mintToken.name, this.fileName, "OAuth token mint failed", error);
       throw error;
     }
   }
+  async resolveMintContext(credentials, opts, loggedInUserId) {
+    let tokenUrl = credentials.tokenUrl;
+    let supportedGrantTypes;
+    let defaultScopes;
+    if (opts.capabilityId != null && opts.providerId != null) {
+      const provider = await this.providerDao.findByCapabilityAndProvider(opts.capabilityId, opts.providerId, loggedInUserId);
+      if (provider) {
+        tokenUrl = substituteUrlPlaceholders(provider.tokenUrl, credentials.urlParams);
+        supportedGrantTypes = provider.supportedGrantTypes;
+        defaultScopes = provider.defaultScopes;
+      }
+    }
+    tokenUrl = substituteUrlPlaceholders(tokenUrl, credentials.urlParams);
+    const scope = credentials.scope ?? (defaultScopes?.length ? defaultScopes.join(" ") : void 0);
+    const grantType = this.grantHandlerRegistry.resolvePreferredGrant(supportedGrantTypes);
+    return {
+      tokenUrl,
+      scope,
+      grantType
+    };
+  }
+  async persistToken(capabilityIntegrationId, token, loggedInUserId) {
+    const encryptedAccessToken = await this.encryptToken(token.accessToken);
+    const encryptedRefreshToken = token.refreshToken ? await this.encryptToken(token.refreshToken) : void 0;
+    await this.tokenDao.upsert({
+      capabilityIntegrationId,
+      accessToken: encryptedAccessToken,
+      refreshToken: encryptedRefreshToken,
+      expiresAt: token.expiresAt,
+      tokenMetadata: {
+        ...token.metadata ?? {},
+        tokenType: token.tokenType
+      },
+      loggedInUserId
+    });
+  }
+  writeMemory(capabilityIntegrationId, token) {
+    this.sessions.set(capabilityIntegrationId.toString(), {
+      token: token.accessToken,
+      tokenType: token.tokenType,
+      tokenExpiry: token.expiresAt,
+      refreshToken: token.refreshToken
+    });
+  }
+  async encryptToken(value) {
+    const keyId = getIntegrationConfigKmsKeyId();
+    if (!this.secretProvider || !keyId) {
+      throw new Error("OAuth token persist requires SECRET_PROVIDER and INTEGRATION_CONFIG_KMS_KEY_ID");
+    }
+    return this.secretProvider.encrypt(value, keyId);
+  }
+  async decryptToken(value) {
+    const keyId = getIntegrationConfigKmsKeyId();
+    if (!this.secretProvider || !keyId) {
+      throw new Error("OAuth token decrypt requires SECRET_PROVIDER and INTEGRATION_CONFIG_KMS_KEY_ID");
+    }
+    return this.secretProvider.decrypt(value, keyId);
+  }
 };
-exports.IntegrationOnpremDeploymentDao = _ts_decorate16([
+OauthTokenManager = _ts_decorate23([
   common.Injectable(),
-  _ts_param10(0, common.Inject(dvssBackendModuleDatastore.appConstants.DB_CONNECTION)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
-    typeof MySql2Database === "undefined" ? Object : MySql2Database,
-    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService
+  _ts_param13(6, common.Optional()),
+  _ts_param13(6, common.Inject(oauthSecretProviderToken)),
+  _ts_metadata19("design:type", Function),
+  _ts_metadata19("design:paramtypes", [
+    typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
+    typeof OauthTokenDao === "undefined" ? Object : OauthTokenDao,
+    typeof OauthProviderDao === "undefined" ? Object : OauthProviderDao,
+    typeof OauthTokenCache === "undefined" ? Object : OauthTokenCache,
+    typeof dvssBackendModuleDatastore.RedisCacheStoreService === "undefined" ? Object : dvssBackendModuleDatastore.RedisCacheStoreService,
+    typeof GrantHandlerRegistry === "undefined" ? Object : GrantHandlerRegistry,
+    typeof SecretProvider === "undefined" ? Object : SecretProvider
   ])
-], exports.IntegrationOnpremDeploymentDao);
+], OauthTokenManager);
+
+// ../../packages/dvss-integration-oauth/src/oauth2.provider.ts
+function _ts_decorate24(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate24, "_ts_decorate");
+function _ts_metadata20(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata20, "_ts_metadata");
+var OAuth2Provider = class {
+  static {
+    __name(this, "OAuth2Provider");
+  }
+  tokenManager;
+  constructor(tokenManager) {
+    this.tokenManager = tokenManager;
+  }
+  async getValidAccessToken(capabilityIntegrationId, opts = {}) {
+    return this.tokenManager.getValidAccessToken(capabilityIntegrationId, opts);
+  }
+  async getAuthenticationHeaders(capabilityIntegrationId, opts = {}) {
+    const token = await this.getValidAccessToken(capabilityIntegrationId, opts);
+    return {
+      // eslint-disable-next-line @typescript-eslint/naming-convention
+      Authorization: `${token.tokenType} ${token.accessToken}`
+    };
+  }
+  async testIntegration(integration, loggedInUserId, credentials) {
+    const token = await this.getValidAccessToken(integration.id, {
+      forceRefresh: true,
+      loggedInUserId,
+      credentials,
+      capabilityId: integration.capabilityId,
+      providerId: integration.providerId
+    });
+    if (!token.accessToken) {
+      throw new Error("OAuth integration test failed: empty access token");
+    }
+    return true;
+  }
+  async storeToken(capabilityIntegrationId, token, loggedInUserId) {
+    await this.tokenManager.storeToken(capabilityIntegrationId, token, loggedInUserId ?? dvssBackendModuleUtility.SYSTEM_USER_ID);
+  }
+  async invalidate(capabilityIntegrationId) {
+    await this.tokenManager.invalidate(capabilityIntegrationId);
+  }
+};
+OAuth2Provider = _ts_decorate24([
+  common.Injectable(),
+  _ts_metadata20("design:type", Function),
+  _ts_metadata20("design:paramtypes", [
+    typeof OauthTokenManager === "undefined" ? Object : OauthTokenManager
+  ])
+], OAuth2Provider);
+
+// ../../packages/dvss-integration-oauth/src/oauth.module.ts
+function _ts_decorate25(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate25, "_ts_decorate");
+var IntegrationOauthModule = class {
+  static {
+    __name(this, "IntegrationOauthModule");
+  }
+};
+IntegrationOauthModule = _ts_decorate25([
+  common.Module({
+    imports: [
+      exports.IntegrationLibsModule,
+      dvssBackendModuleUtility.LoggerModule,
+      dvssBackendModuleDatastore.DatastoreModule
+    ],
+    providers: [
+      OauthTokenDao,
+      OauthProviderDao,
+      OauthTokenCache,
+      ClientCredentialsGrantHandler,
+      AuthorizationCodeGrantHandler,
+      GrantHandlerRegistry,
+      OauthTokenManager,
+      OAuth2Provider
+    ],
+    exports: [
+      OAuth2Provider,
+      OauthTokenManager
+    ]
+  })
+], IntegrationOauthModule);
 
 // ../../packages/dvss-integration-microsoft/src/common/microsoft.constant.ts
 var MICROSOFT_GRAPH_PATHS = {
   rooms: "/places/microsoft.graph.room",
-  userCalendarEvents: /* @__PURE__ */ __name((roomEmail) => `/users/${encodeURIComponent(roomEmail)}/calendar/events`, "userCalendarEvents"),
-  userCalendarEvent: /* @__PURE__ */ __name((roomEmail, eventId) => `/users/${encodeURIComponent(roomEmail)}/calendar/events/${encodeURIComponent(eventId)}`, "userCalendarEvent"),
-  userCalendarView: /* @__PURE__ */ __name((roomEmail, startDateTime, endDateTime) => `/users/${encodeURIComponent(roomEmail)}/calendarView?startDateTime=${encodeURIComponent(startDateTime)}&endDateTime=${encodeURIComponent(endDateTime)}`, "userCalendarView"),
+  userCalendarEvents: /* @__PURE__ */ __name((mailboxEmail) => `/users/${encodeURIComponent(mailboxEmail)}/calendar/events`, "userCalendarEvents"),
+  userCalendarEvent: /* @__PURE__ */ __name((mailboxEmail, eventId) => `/users/${encodeURIComponent(mailboxEmail)}/calendar/events/${encodeURIComponent(eventId)}`, "userCalendarEvent"),
+  userCalendarView: /* @__PURE__ */ __name((mailboxEmail, startDateTime, endDateTime) => `/users/${encodeURIComponent(mailboxEmail)}/calendarView?startDateTime=${encodeURIComponent(startDateTime)}&endDateTime=${encodeURIComponent(endDateTime)}`, "userCalendarView"),
   subscriptions: "/subscriptions",
   subscription: /* @__PURE__ */ __name((subscriptionId) => `/subscriptions/${encodeURIComponent(subscriptionId)}`, "subscription")
 };
@@ -4064,23 +3572,23 @@ var MICROSOFT_TOKEN_HEADERS = {
 };
 
 // ../../packages/dvss-integration-microsoft/src/capabilities/auth/auth.service.ts
-function _ts_decorate17(decorators, target, key, desc2) {
+function _ts_decorate26(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
-function _ts_metadata14(k, v) {
+__name(_ts_decorate26, "_ts_decorate");
+function _ts_metadata21(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata21, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param14, "_ts_param");
 function requireNonEmpty(value, fieldName) {
   if (value == null || typeof value === "string" && value.trim() === "") {
     throw new Error(`Microsoft integration configuration: ${fieldName} is required`);
@@ -4098,32 +3606,25 @@ exports.MicrosoftAuthService = class MicrosoftAuthService {
     __name(this, "MicrosoftAuthService");
   }
   logger;
-  trafficGatewayService;
-  integrationConfigurationDao;
+  oauth2Provider;
   secureStorage;
   fileName = "auth.service";
-  constructor(logger, trafficGatewayService, integrationConfigurationDao, secureStorage) {
+  constructor(logger, oauth2Provider, secureStorage) {
     this.logger = logger;
-    this.trafficGatewayService = trafficGatewayService;
-    this.integrationConfigurationDao = integrationConfigurationDao;
+    this.oauth2Provider = oauth2Provider;
     this.secureStorage = secureStorage;
   }
   /**
-   * Validates Azure AD / Graph integration configuration and returns a validated integration
-   * with Authorization headers when a cached access token is present.
+   * Validates Azure AD / Graph integration configuration.
+   * Authorization headers are resolved on demand via OAuth2Provider (not from config.accessDetails).
    */
   validateConfig(integration, loggedInUserId) {
     const config2 = this.parseAndValidateConfig(integration, loggedInUserId);
-    const headers = {};
-    if (config2.accessDetails?.accessToken) {
-      const tokenType = config2.accessDetails.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE;
-      headers.Authorization = `${tokenType} ${config2.accessDetails.accessToken}`;
-    }
     return {
       ...integration,
-      id: integration.id ?? BigInt(0),
+      id: integration.id,
       config: config2,
-      headers
+      headers: {}
     };
   }
   /**
@@ -4148,10 +3649,7 @@ exports.MicrosoftAuthService = class MicrosoftAuthService {
     }, raw);
     requireNonEmpty(config2.platformConfig.authUrl, "platformConfig.authUrl");
     requireNonEmpty(config2.platformConfig.baseUrl, "platformConfig.baseUrl");
-    return {
-      ...config2,
-      accessDetails: raw.accessDetails
-    };
+    return config2;
   }
   /**
    * Decrypts stored secure-storage envelopes when present, then validates.
@@ -4174,11 +3672,27 @@ exports.MicrosoftAuthService = class MicrosoftAuthService {
   }
   async getAccessToken(integration, loggedInUserId, forceRefresh = false) {
     const config2 = await this.resolvePlaintextConfig(integration, loggedInUserId);
-    const cachedToken = this.getCachedToken(config2);
-    if (cachedToken && !forceRefresh) {
-      return cachedToken;
+    const token = await this.oauth2Provider.getValidAccessToken("id" in integration ? integration.id : void 0, {
+      forceRefresh,
+      loggedInUserId: loggedInUserId ?? dvssBackendModuleUtility.SYSTEM_USER_ID,
+      credentials: this.toMintCredentials(config2),
+      capabilityId: integration.capabilityId,
+      providerId: integration.providerId
+    });
+    return this.toMicrosoftAccessToken(token);
+  }
+  /**
+   * Persists a previously minted token after capability_integration insert.
+   */
+  async persistMintedAccessToken(capabilityIntegrationId, token, loggedInUserId) {
+    if (token.expiresIn <= 0) {
+      return;
     }
-    return this.requestAccessToken(integration, config2, loggedInUserId);
+    await this.oauth2Provider.storeToken(capabilityIntegrationId, {
+      accessToken: token.accessToken,
+      tokenType: token.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE,
+      expiresAt: new Date(Date.now() + token.expiresIn * 1e3)
+    }, loggedInUserId);
   }
   /**
    * BaseAuth contract — returns the access token string.
@@ -4192,116 +3706,68 @@ exports.MicrosoftAuthService = class MicrosoftAuthService {
    */
   async testIntegration(integration, loggedInUserId) {
     this.logger.info(loggedInUserId, this.testIntegration.name, this.fileName, "Testing Microsoft Graph integration");
-    const token = await this.getAccessToken(integration, loggedInUserId, true);
-    if (!token.accessToken) {
-      throw new Error("Microsoft integration test failed: empty access token");
-    }
+    const config2 = await this.resolvePlaintextConfig(integration, loggedInUserId);
+    const isSuccessful = await this.oauth2Provider.testIntegration(integration, loggedInUserId, this.toMintCredentials(config2));
     this.logger.info(loggedInUserId, this.testIntegration.name, this.fileName, "Microsoft Graph integration test successful");
-    return true;
+    return isSuccessful;
   }
-  getCachedToken(config2) {
-    const cachedToken = config2.accessDetails?.accessToken;
-    const cachedExpiryIso = config2.accessDetails?.expiryAt;
-    if (!cachedToken || !cachedExpiryIso) {
-      return void 0;
-    }
-    const expiryTimeMs = new Date(cachedExpiryIso).getTime();
-    if (Number.isNaN(expiryTimeMs) || expiryTimeMs <= Date.now()) {
-      return void 0;
-    }
+  toMintCredentials(config2) {
     return {
-      accessToken: cachedToken,
-      tokenType: config2.accessDetails?.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE,
-      expiresIn: Math.max(0, Math.floor((expiryTimeMs - Date.now()) / 1e3))
-    };
-  }
-  async requestAccessToken(integration, config2, loggedInUserId) {
-    const tokenUrl = new URL(config2.platformConfig.authUrl.replace("{tenantId}", config2.integrationConfig.tenantId));
-    const body = new URLSearchParams({
-      client_id: config2.integrationConfig.clientId,
-      client_secret: config2.integrationConfig.clientSecret,
+      tokenUrl: config2.platformConfig.authUrl,
+      clientId: config2.integrationConfig.clientId,
+      clientSecret: config2.integrationConfig.clientSecret,
       scope: MICROSOFT_DEFAULT_GRAPH_SCOPE,
-      grant_type: MICROSOFT_CLIENT_CREDENTIALS_GRANT_TYPE
-    }).toString();
-    const integrationContext = {
-      ...integration,
-      id: "id" in integration && integration.id != null ? integration.id : BigInt(0),
-      headers: MICROSOFT_TOKEN_HEADERS
-    };
-    const effectiveLoggedInUserId = loggedInUserId ?? dvssBackendModuleUtility.SYSTEM_USER_ID;
-    this.logger.info(effectiveLoggedInUserId, this.requestAccessToken.name, this.fileName, "Fetching Microsoft Graph access token");
-    const response = await this.trafficGatewayService.executeIntegrationRequest({
-      apiMethod: HTTP_METHOD.POST,
-      baseUrl: tokenUrl.origin,
-      url: `${tokenUrl.pathname}${tokenUrl.search}`,
-      body,
-      headers: MICROSOFT_TOKEN_HEADERS
-    }, integrationContext, effectiveLoggedInUserId);
-    if (!response.access_token) {
-      throw new Error("Microsoft access token response is missing access_token");
-    }
-    const token = {
-      accessToken: response.access_token,
-      tokenType: response.token_type ?? MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE,
-      expiresIn: response.expires_in ?? 0
+      urlParams: {
+        tenantId: config2.integrationConfig.tenantId
+      }
     };
-    await this.persistAccessDetails(integration, config2, token, effectiveLoggedInUserId);
-    return token;
   }
-  async persistAccessDetails(integration, config2, token, loggedInUserId) {
-    if (!("id" in integration) || !integration.id || token.expiresIn <= 0) {
-      config2.accessDetails = {
-        accessToken: token.accessToken,
-        expiryAt: new Date(Date.now() + Math.max(token.expiresIn, 0) * 1e3).toISOString(),
-        tokenType: token.tokenType
-      };
-      return;
-    }
-    await this.integrationConfigurationDao.updateCapabilityIntegrationAccessDetails(integration.id, token.accessToken, token.expiresIn, loggedInUserId);
-    config2.accessDetails = {
+  toMicrosoftAccessToken(token) {
+    return {
       accessToken: token.accessToken,
-      expiryAt: new Date(Date.now() + token.expiresIn * 1e3).toISOString(),
-      tokenType: token.tokenType
+      tokenType: token.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE,
+      expiresIn: secondsUntil(token.expiresAt)
     };
   }
 };
-exports.MicrosoftAuthService = _ts_decorate17([
+exports.MicrosoftAuthService = _ts_decorate26([
   common.Injectable(),
-  _ts_param11(3, common.Optional()),
-  _ts_param11(3, common.Inject(MICROSOFT_SECURE_STORAGE)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+  _ts_param14(2, common.Optional()),
+  _ts_param14(2, common.Inject(MICROSOFT_SECURE_STORAGE)),
+  _ts_metadata21("design:type", Function),
+  _ts_metadata21("design:paramtypes", [
     typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
-    typeof exports.TrafficGatewayService === "undefined" ? Object : exports.TrafficGatewayService,
-    typeof exports.IntegrationConfigurationDao === "undefined" ? Object : exports.IntegrationConfigurationDao,
+    typeof OAuth2Provider === "undefined" ? Object : OAuth2Provider,
     typeof IntegrationConfigSecureStorageService === "undefined" ? Object : IntegrationConfigSecureStorageService
   ])
 ], exports.MicrosoftAuthService);
 
 // ../../packages/dvss-integration-microsoft/src/adapter/microsoft-api-client.service.ts
-function _ts_decorate18(decorators, target, key, desc2) {
+function _ts_decorate27(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate18, "_ts_decorate");
-function _ts_metadata15(k, v) {
+__name(_ts_decorate27, "_ts_decorate");
+function _ts_metadata22(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata15, "_ts_metadata");
+__name(_ts_metadata22, "_ts_metadata");
 exports.MicrosoftApiClientService = class MicrosoftApiClientService {
   static {
     __name(this, "MicrosoftApiClientService");
   }
   logger;
   authService;
+  oauth2Provider;
   trafficGatewayService;
   fileName = "microsoft-api-client.service";
   maxAuthRetryCount = 2;
-  constructor(logger, authService, trafficGatewayService) {
+  constructor(logger, authService, oauth2Provider, trafficGatewayService) {
     this.logger = logger;
     this.authService = authService;
+    this.oauth2Provider = oauth2Provider;
     this.trafficGatewayService = trafficGatewayService;
   }
   async apiCall(request, integration, loggedInUserId = dvssBackendModuleUtility.SYSTEM_USER_ID) {
@@ -4309,16 +3775,17 @@ exports.MicrosoftApiClientService = class MicrosoftApiClientService {
   }
   async executeWithRetry(request, integration, loggedInUserId, retryCount) {
     const config2 = await this.authService.resolvePlaintextConfig(integration, loggedInUserId);
-    const decryptedIntegration = {
-      ...integration,
-      config: config2
-    };
-    const accessToken = await this.authService.getAccessToken(decryptedIntegration, loggedInUserId, retryCount > 0);
+    const authHeaders = await this.oauth2Provider.getAuthenticationHeaders(integration.id, {
+      forceRefresh: retryCount > 0,
+      loggedInUserId,
+      credentials: this.authService.toMintCredentials(config2),
+      capabilityId: integration.capabilityId,
+      providerId: integration.providerId
+    });
     const headers = {
       ...MICROSOFT_DEFAULT_HEADERS,
       ...request.headers ?? {},
-      // eslint-disable-next-line @typescript-eslint/naming-convention
-      Authorization: `${accessToken.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE} ${accessToken.accessToken}`
+      ...authHeaders
     };
     const validatedIntegration = {
       ...integration,
@@ -4342,7 +3809,9 @@ exports.MicrosoftApiClientService = class MicrosoftApiClientService {
       if (!this.isUnauthorizedError(error) || retryCount >= this.maxAuthRetryCount) {
         throw error;
       }
-      this.clearCachedAccessDetails(integration);
+      if (integration.id != null) {
+        await this.oauth2Provider.invalidate(integration.id);
+      }
       this.logger.info(loggedInUserId, this.executeWithRetry.name, this.fileName, "Retrying Microsoft Graph API call after unauthorized response", {
         retryCount: retryCount + 1,
         url: request.url
@@ -4354,24 +3823,19 @@ exports.MicrosoftApiClientService = class MicrosoftApiClientService {
     const errorObject = error;
     return errorObject.response?.status === 401 || errorObject.status === 401;
   }
-  clearCachedAccessDetails(integration) {
-    const config2 = integration.config;
-    if (config2) {
-      config2.accessDetails = void 0;
-    }
-  }
 };
-exports.MicrosoftApiClientService = _ts_decorate18([
+exports.MicrosoftApiClientService = _ts_decorate27([
   common.Injectable(),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", [
+  _ts_metadata22("design:type", Function),
+  _ts_metadata22("design:paramtypes", [
     typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
     typeof exports.MicrosoftAuthService === "undefined" ? Object : exports.MicrosoftAuthService,
+    typeof OAuth2Provider === "undefined" ? Object : OAuth2Provider,
     typeof exports.TrafficGatewayService === "undefined" ? Object : exports.TrafficGatewayService
   ])
 ], exports.MicrosoftApiClientService);
 
-// ../../packages/dvss-integration-microsoft/src/capabilities/calendar-booking-management/calendar-booking-management.mapper.ts
+// ../../packages/dvss-integration-microsoft/src/capabilities/booking-management/booking-management.mapper.ts
 var GRAPH_EVENT_KNOWN_KEYS = /* @__PURE__ */ new Set([
   "id",
   "subject",
@@ -4385,7 +3849,8 @@ var GRAPH_EVENT_KNOWN_KEYS = /* @__PURE__ */ new Set([
   "attendees",
   "organizer"
 ]);
-function toGraphEvent(event) {
+var GRAPH_RESOURCE_ATTENDEE_TYPE = "resource";
+function toGraphEvent(event, options) {
   const graph = {};
   if (event.subject !== void 0) {
     graph.subject = event.subject;
@@ -4436,12 +3901,20 @@ function toGraphEvent(event) {
       return mapped;
     });
   }
-  if (event.organizerEmail !== void 0) {
-    graph.organizer = {
-      emailAddress: {
-        address: event.organizerEmail
-      }
-    };
+  const resourceId = options?.resourceId?.trim();
+  if (resourceId) {
+    const isAlreadyInvited = graph.attendees?.some((attendee) => attendee.emailAddress?.address?.toLowerCase() === resourceId.toLowerCase());
+    if (isAlreadyInvited !== true) {
+      graph.attendees = [
+        ...graph.attendees ?? [],
+        {
+          emailAddress: {
+            address: resourceId
+          },
+          type: GRAPH_RESOURCE_ATTENDEE_TYPE
+        }
+      ];
+    }
   }
   return graph;
 }
@@ -4454,7 +3927,8 @@ function toGraphRecurrence(recurrence) {
       daysOfWeek: recurrence.pattern.daysOfWeek,
       firstDayOfWeek: recurrence.pattern.firstDayOfWeek,
       dayOfMonth: recurrence.pattern.dayOfMonth,
-      month: recurrence.pattern.month
+      month: recurrence.pattern.month,
+      index: recurrence.pattern.index
     }),
     range: omitUndefined({
       type: recurrence.range.type,
@@ -4481,7 +3955,7 @@ function fromGraphEvent(graph, options) {
       timeZone: ""
     },
     location: graph.location?.displayName,
-    resourceEmail: options?.resourceEmail,
+    resourceId: options?.resourceId,
     recurrence: graph.recurrence ? fromGraphRecurrence(graph.recurrence) : void 0,
     attendees: graph.attendees?.filter((attendee) => Boolean(attendee.emailAddress?.address)).map((attendee) => ({
       email: attendee.emailAddress?.address ?? "",
@@ -4493,7 +3967,11 @@ function fromGraphEvent(graph, options) {
     isCancelled: graph.isCancelled,
     syncMetadata: omitUndefined({
       ...options?.syncMetadata,
-      externalEventId: graph.id ?? options?.syncMetadata?.externalEventId
+      externalEventId: graph.id ?? options?.syncMetadata?.externalEventId,
+      // Event ids are mailbox-scoped — remember which mailbox can address this id.
+      // Left undefined when the room organizes; `resourceId` addresses the event then.
+      organizerUserEmail: options?.organizerUserEmail ?? options?.syncMetadata?.organizerUserEmail,
+      resourceId: options?.resourceId ?? options?.syncMetadata?.resourceId
     }),
     providerPayload
   };
@@ -4507,7 +3985,8 @@ function fromGraphRecurrence(recurrence) {
       daysOfWeek: recurrence.pattern?.daysOfWeek,
       firstDayOfWeek: recurrence.pattern?.firstDayOfWeek,
       dayOfMonth: recurrence.pattern?.dayOfMonth,
-      month: recurrence.pattern?.month
+      month: recurrence.pattern?.month,
+      index: recurrence.pattern?.index
     }),
     range: omitUndefined({
       type: recurrence.range?.type ?? "",
@@ -4534,48 +4013,54 @@ function collectUnknownGraphFields(graph) {
 }
 __name(collectUnknownGraphFields, "collectUnknownGraphFields");
 
-// ../../packages/dvss-integration-microsoft/src/capabilities/calendar-booking-management/calendar-booking-management.service.ts
-function _ts_decorate19(decorators, target, key, desc2) {
+// ../../packages/dvss-integration-microsoft/src/capabilities/booking-management/booking-management.service.ts
+function _ts_decorate28(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate19, "_ts_decorate");
-function _ts_metadata16(k, v) {
+__name(_ts_decorate28, "_ts_decorate");
+function _ts_metadata23(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata16, "_ts_metadata");
+__name(_ts_metadata23, "_ts_metadata");
 exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService extends BaseCalendarBookingManagement {
   static {
     __name(this, "MicrosoftCalendarBookingService");
   }
   logger;
   microsoftApiClient;
-  fileName = "calendar-booking-management.service";
+  fileName = "booking-management.service";
   constructor(logger, microsoftApiClient) {
     super(), this.logger = logger, this.microsoftApiClient = microsoftApiClient;
   }
   async createEvent(request, integration, loggedInUserId) {
     try {
+      const mailboxEmail = this.resolveMailboxEmail(request);
       this.logger.info(loggedInUserId, this.createEvent.name, this.fileName, "Create Microsoft Graph calendar event", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         subject: request.event.subject,
-        path: MICROSOFT_GRAPH_PATHS.userCalendarEvents(request.resourceEmail)
+        path: MICROSOFT_GRAPH_PATHS.userCalendarEvents(mailboxEmail)
       });
-      this.assertResourceEmail(request.resourceEmail);
+      this.assertResourceId(request.resourceId);
       const graphEvent = await this.microsoftApiClient.apiCall({
         apiMethod: HTTP_METHOD.POST,
-        url: MICROSOFT_GRAPH_PATHS.userCalendarEvents(request.resourceEmail),
-        body: toGraphEvent(request.event)
+        url: MICROSOFT_GRAPH_PATHS.userCalendarEvents(mailboxEmail),
+        body: toGraphEvent(request.event, {
+          resourceId: this.resourceAsAttendee(mailboxEmail, request.resourceId)
+        })
       }, integration, loggedInUserId);
       const mapped = fromGraphEvent(graphEvent, {
-        resourceEmail: request.resourceEmail,
+        resourceId: request.resourceId,
+        organizerUserEmail: this.organizerUserMailbox(request),
         syncMetadata: request.event.syncMetadata
       });
       this.logger.info(loggedInUserId, this.createEvent.name, this.fileName, "Created Microsoft Graph calendar event", {
         eventId: mapped.id,
-        resourceEmail: request.resourceEmail
+        mailboxEmail,
+        resourceId: request.resourceId
       });
       return mapped;
     } catch (error) {
@@ -4585,25 +4070,29 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
   }
   async updateEvent(request, integration, loggedInUserId) {
     try {
+      const mailboxEmail = this.resolveMailboxEmail(request);
       this.logger.info(loggedInUserId, this.updateEvent.name, this.fileName, "Update Microsoft Graph calendar event", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         eventId: request.eventId,
-        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(request.resourceEmail, request.eventId)
+        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, request.eventId)
       });
-      this.assertResourceEmail(request.resourceEmail);
+      this.assertResourceId(request.resourceId);
       this.assertEventId(request.eventId);
       const graphEvent = await this.microsoftApiClient.apiCall({
         apiMethod: HTTP_METHOD.PATCH,
-        url: MICROSOFT_GRAPH_PATHS.userCalendarEvent(request.resourceEmail, request.eventId),
+        url: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, request.eventId),
         body: toGraphEvent(request.event)
       }, integration, loggedInUserId);
       const mapped = fromGraphEvent(graphEvent, {
-        resourceEmail: request.resourceEmail,
+        resourceId: request.resourceId,
+        organizerUserEmail: this.organizerUserMailbox(request),
         syncMetadata: request.event.syncMetadata
       });
       this.logger.info(loggedInUserId, this.updateEvent.name, this.fileName, "Updated Microsoft Graph calendar event", {
         eventId: mapped.id,
-        resourceEmail: request.resourceEmail
+        mailboxEmail,
+        resourceId: request.resourceId
       });
       return mapped;
     } catch (error) {
@@ -4613,15 +4102,18 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
   }
   async cancelEvent(request, integration, loggedInUserId) {
     try {
+      const mailboxEmail = this.resolveMailboxEmail(request);
       this.logger.info(loggedInUserId, this.cancelEvent.name, this.fileName, "Cancel Microsoft Graph calendar event", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         eventId: request.eventId,
-        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(request.resourceEmail, request.eventId)
+        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, request.eventId)
       });
-      await this.deleteGraphEvent(request.resourceEmail, request.eventId, integration, loggedInUserId);
+      await this.deleteGraphEvent(mailboxEmail, request.resourceId, request.eventId, integration, loggedInUserId);
       this.logger.info(loggedInUserId, this.cancelEvent.name, this.fileName, "Cancelled Microsoft Graph calendar event", {
         eventId: request.eventId,
-        resourceEmail: request.resourceEmail
+        mailboxEmail,
+        resourceId: request.resourceId
       });
     } catch (error) {
       this.logger.error(loggedInUserId, this.cancelEvent.name, this.fileName, "Error cancelling Microsoft Graph calendar event", error);
@@ -4630,15 +4122,18 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
   }
   async deleteEvent(request, integration, loggedInUserId) {
     try {
+      const mailboxEmail = this.resolveMailboxEmail(request);
       this.logger.info(loggedInUserId, this.deleteEvent.name, this.fileName, "Delete Microsoft Graph calendar event", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         eventId: request.eventId,
-        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(request.resourceEmail, request.eventId)
+        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, request.eventId)
       });
-      await this.deleteGraphEvent(request.resourceEmail, request.eventId, integration, loggedInUserId);
+      await this.deleteGraphEvent(mailboxEmail, request.resourceId, request.eventId, integration, loggedInUserId);
       this.logger.info(loggedInUserId, this.deleteEvent.name, this.fileName, "Deleted Microsoft Graph calendar event", {
         eventId: request.eventId,
-        resourceEmail: request.resourceEmail
+        mailboxEmail,
+        resourceId: request.resourceId
       });
     } catch (error) {
       this.logger.error(loggedInUserId, this.deleteEvent.name, this.fileName, "Error deleting Microsoft Graph calendar event", error);
@@ -4647,23 +4142,27 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
   }
   async getEvent(request, integration, loggedInUserId) {
     try {
+      const mailboxEmail = this.resolveMailboxEmail(request);
       this.logger.info(loggedInUserId, this.getEvent.name, this.fileName, "Get Microsoft Graph calendar event", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         eventId: request.eventId,
-        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(request.resourceEmail, request.eventId)
+        path: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, request.eventId)
       });
-      this.assertResourceEmail(request.resourceEmail);
+      this.assertResourceId(request.resourceId);
       this.assertEventId(request.eventId);
       const graphEvent = await this.microsoftApiClient.apiCall({
         apiMethod: HTTP_METHOD.GET,
-        url: MICROSOFT_GRAPH_PATHS.userCalendarEvent(request.resourceEmail, request.eventId)
+        url: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, request.eventId)
       }, integration, loggedInUserId);
       const mapped = fromGraphEvent(graphEvent, {
-        resourceEmail: request.resourceEmail
+        resourceId: request.resourceId,
+        organizerUserEmail: this.organizerUserMailbox(request)
       });
       this.logger.info(loggedInUserId, this.getEvent.name, this.fileName, "Fetched Microsoft Graph calendar event", {
         eventId: mapped.id,
-        resourceEmail: request.resourceEmail
+        mailboxEmail,
+        resourceId: request.resourceId
       });
       return mapped;
     } catch (error) {
@@ -4673,10 +4172,12 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
   }
   async getEvents(request, integration, loggedInUserId) {
     try {
-      this.assertResourceEmail(request.resourceEmail);
-      const url = request.start && request.end ? MICROSOFT_GRAPH_PATHS.userCalendarView(request.resourceEmail, request.start.dateTime, request.end.dateTime) : MICROSOFT_GRAPH_PATHS.userCalendarEvents(request.resourceEmail);
+      this.assertResourceId(request.resourceId);
+      const mailboxEmail = this.resolveMailboxEmail(request);
+      const url = request.start && request.end ? MICROSOFT_GRAPH_PATHS.userCalendarView(mailboxEmail, request.start.dateTime, request.end.dateTime) : MICROSOFT_GRAPH_PATHS.userCalendarEvents(mailboxEmail);
       this.logger.info(loggedInUserId, this.getEvents.name, this.fileName, "List Microsoft Graph calendar events", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         path: url,
         hasTimeWindow: Boolean(request.start && request.end)
       });
@@ -4685,10 +4186,12 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
         url
       }, integration, loggedInUserId);
       const events = (response.value ?? []).map((graphEvent) => fromGraphEvent(graphEvent, {
-        resourceEmail: request.resourceEmail
+        resourceId: request.resourceId,
+        organizerUserEmail: this.organizerUserMailbox(request)
       }));
       this.logger.info(loggedInUserId, this.getEvents.name, this.fileName, "Listed Microsoft Graph calendar events", {
-        resourceEmail: request.resourceEmail,
+        mailboxEmail,
+        resourceId: request.resourceId,
         count: events.length
       });
       return {
@@ -4701,30 +4204,45 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
   }
   syncEvents(request, integration, loggedInUserId) {
     this.logger.info(loggedInUserId, this.syncEvents.name, this.fileName, "Sync Microsoft Graph calendar events (delta)", {
-      resourceEmail: request.resourceEmail,
+      resourceId: request.resourceId,
       hasSyncToken: Boolean(request.syncToken)
     });
     void this.microsoftApiClient;
     return Promise.reject(new common.NotImplementedException("MicrosoftCalendarBookingService.syncEvents is not implemented yet"));
   }
-  getRoomAvailability(request, integration, loggedInUserId) {
-    this.logger.info(loggedInUserId, this.getRoomAvailability.name, this.fileName, "Get Microsoft Graph room availability", {
-      resourceCount: request.resourceEmails.length
-    });
-    void this.microsoftApiClient;
-    return Promise.reject(new common.NotImplementedException("MicrosoftCalendarBookingService.getRoomAvailability is not implemented yet"));
-  }
-  async deleteGraphEvent(resourceEmail, eventId, integration, loggedInUserId) {
-    this.assertResourceEmail(resourceEmail);
+  async deleteGraphEvent(mailboxEmail, resourceId, eventId, integration, loggedInUserId) {
+    this.assertResourceId(resourceId);
     this.assertEventId(eventId);
     await this.microsoftApiClient.apiCall({
       apiMethod: HTTP_METHOD.DELETE,
-      url: MICROSOFT_GRAPH_PATHS.userCalendarEvent(resourceEmail, eventId)
+      url: MICROSOFT_GRAPH_PATHS.userCalendarEvent(mailboxEmail, eventId)
     }, integration, loggedInUserId);
   }
-  assertResourceEmail(resourceEmail) {
-    if (!resourceEmail?.trim()) {
-      throw new dvssBackendModuleUtility.CustomException("BAD_REQUEST", "resourceEmail is required");
+  /**
+   * Mailbox the Graph call targets: the organizing user when one is known, otherwise the
+   * resource mailbox, which keeps the room-organizes behaviour for callers that cannot
+   * resolve a user. The return value is therefore a user *or* a resource mailbox — never
+   * store it as `organizerUserEmail`; use `organizerUserMailbox` for that.
+   */
+  resolveMailboxEmail(request) {
+    return this.organizerUserMailbox(request) ?? request.resourceId;
+  }
+  /**
+   * The organizing user's mailbox, or undefined when the room ends up organizing.
+   */
+  organizerUserMailbox(request) {
+    return request.organizerUserEmail?.trim() || void 0;
+  }
+  /**
+   * The room only needs to be invited as an attendee when the event lives in someone
+   * else's mailbox. Posting into the room's own calendar already books it.
+   */
+  resourceAsAttendee(mailboxEmail, resourceId) {
+    return mailboxEmail.trim().toLowerCase() === resourceId.trim().toLowerCase() ? void 0 : resourceId;
+  }
+  assertResourceId(resourceId) {
+    if (!resourceId?.trim()) {
+      throw new dvssBackendModuleUtility.CustomException("BAD_REQUEST", "resourceId is required");
     }
   }
   assertEventId(eventId) {
@@ -4733,32 +4251,32 @@ exports.MicrosoftCalendarBookingService = class MicrosoftCalendarBookingService
     }
   }
 };
-exports.MicrosoftCalendarBookingService = _ts_decorate19([
+exports.MicrosoftCalendarBookingService = _ts_decorate28([
   common.Injectable(),
-  _ts_metadata16("design:type", Function),
-  _ts_metadata16("design:paramtypes", [
+  _ts_metadata23("design:type", Function),
+  _ts_metadata23("design:paramtypes", [
     typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
     typeof exports.MicrosoftApiClientService === "undefined" ? Object : exports.MicrosoftApiClientService
   ])
 ], exports.MicrosoftCalendarBookingService);
-function _ts_decorate20(decorators, target, key, desc2) {
+function _ts_decorate29(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate20, "_ts_decorate");
-function _ts_metadata17(k, v) {
+__name(_ts_decorate29, "_ts_decorate");
+function _ts_metadata24(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata17, "_ts_metadata");
+__name(_ts_metadata24, "_ts_metadata");
 exports.MicrosoftCalendarResourceService = class MicrosoftCalendarResourceService extends BaseCalendarResourceManagement {
   static {
     __name(this, "MicrosoftCalendarResourceService");
   }
   logger;
   microsoftApiClient;
-  fileName = "calendar-resource-management.service";
+  fileName = "resource-management.service";
   constructor(logger, microsoftApiClient) {
     super(), this.logger = logger, this.microsoftApiClient = microsoftApiClient;
   }
@@ -4794,25 +4312,25 @@ exports.MicrosoftCalendarResourceService = class MicrosoftCalendarResourceServic
     };
   }
 };
-exports.MicrosoftCalendarResourceService = _ts_decorate20([
+exports.MicrosoftCalendarResourceService = _ts_decorate29([
   common.Injectable(),
-  _ts_metadata17("design:type", Function),
-  _ts_metadata17("design:paramtypes", [
+  _ts_metadata24("design:type", Function),
+  _ts_metadata24("design:paramtypes", [
     typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
     typeof exports.MicrosoftApiClientService === "undefined" ? Object : exports.MicrosoftApiClientService
   ])
 ], exports.MicrosoftCalendarResourceService);
-function _ts_decorate21(decorators, target, key, desc2) {
+function _ts_decorate30(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate21, "_ts_decorate");
-function _ts_metadata18(k, v) {
+__name(_ts_decorate30, "_ts_decorate");
+function _ts_metadata25(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata18, "_ts_metadata");
+__name(_ts_metadata25, "_ts_metadata");
 var GRAPH_SUBSCRIPTION_KNOWN_KEYS = /* @__PURE__ */ new Set([
   "id",
   "resource",
@@ -4827,7 +4345,7 @@ exports.MicrosoftCalendarWebhookService = class MicrosoftCalendarWebhookService
   }
   logger;
   microsoftApiClient;
-  fileName = "calendar-webhook-management.service";
+  fileName = "webhook-management.service";
   constructor(logger, microsoftApiClient) {
     super(), this.logger = logger, this.microsoftApiClient = microsoftApiClient;
   }
@@ -4946,31 +4464,31 @@ exports.MicrosoftCalendarWebhookService = class MicrosoftCalendarWebhookService
     }
   }
 };
-exports.MicrosoftCalendarWebhookService = _ts_decorate21([
+exports.MicrosoftCalendarWebhookService = _ts_decorate30([
   common.Injectable(),
-  _ts_metadata18("design:type", Function),
-  _ts_metadata18("design:paramtypes", [
+  _ts_metadata25("design:type", Function),
+  _ts_metadata25("design:paramtypes", [
     typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
     typeof exports.MicrosoftApiClientService === "undefined" ? Object : exports.MicrosoftApiClientService
   ])
 ], exports.MicrosoftCalendarWebhookService);
-function _ts_decorate22(decorators, target, key, desc2) {
+function _ts_decorate31(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate22, "_ts_decorate");
-function _ts_metadata19(k, v) {
+__name(_ts_decorate31, "_ts_decorate");
+function _ts_metadata26(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata19, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata26, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param15, "_ts_param");
 var MICROSOFT_SECURE_STORAGE_OPTIONS = {
   useSecureStorage: true,
   get kmsKeyId() {
@@ -4997,22 +4515,19 @@ exports.MicrosoftIntegrationConfigurationService = class MicrosoftIntegrationCon
       clientSecret: integrationConfig.clientSecret
     }, rawConfig);
     const token = await this.microsoftAuthService.getAccessToken({
-      config: microsoftConfig
+      config: microsoftConfig,
+      capabilityId: input.capabilityId,
+      providerId: input.capabilityProviderId
     }, context.loggedInUserId, true);
-    return super.addCapabilityIntegration({
+    const result = await super.addCapabilityIntegration({
       ...input,
-      config: {
-        ...microsoftConfig,
-        accessDetails: {
-          accessToken: token.accessToken,
-          expiryAt: new Date(Date.now() + token.expiresIn * 1e3).toISOString(),
-          tokenType: token.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE
-        }
-      }
+      config: microsoftConfig
     }, context, {
       useSecureStorage: MICROSOFT_SECURE_STORAGE_OPTIONS.useSecureStorage,
       kmsKeyId: MICROSOFT_SECURE_STORAGE_OPTIONS.kmsKeyId
     });
+    await this.microsoftAuthService.persistMintedAccessToken(BigInt(result.id), token, context.loggedInUserId);
+    return result;
   }
   async updateCapabilityIntegration(request, integration, loggedInUserId) {
     if (!request.updateData.config) {
@@ -5035,33 +4550,25 @@ exports.MicrosoftIntegrationConfigurationService = class MicrosoftIntegrationCon
     const mergedConfig = buildMicrosoftIntegrationConfig(mergedCredentials, platformConfig ? {
       platformConfig
     } : void 0);
-    const token = await this.microsoftAuthService.getAccessToken({
+    await this.microsoftAuthService.getAccessToken({
       id: request.id,
-      config: mergedConfig
+      config: mergedConfig,
+      capabilityId: integration?.capabilityId,
+      providerId: integration?.providerId
     }, loggedInUserId, true);
-    const accessDetails = {
-      accessToken: token.accessToken,
-      expiryAt: new Date(Date.now() + token.expiresIn * 1e3).toISOString(),
-      tokenType: token.tokenType || MICROSOFT_DEFAULT_ACCESS_TOKEN_TYPE
-    };
-    const configWithAccessDetails = {
-      ...mergedConfig,
-      accessDetails
-    };
     const updateRequest = {
       ...request,
       updateData: {
         ...request.updateData,
         config: {
           ...request.updateData.config,
-          ...configWithAccessDetails,
-          accessDetails
+          ...mergedConfig
         }
       }
     };
     const integrationForUpdate = integration ? {
       ...integration,
-      config: configWithAccessDetails
+      config: mergedConfig
     } : integration;
     return super.updateCapabilityIntegration(updateRequest, integrationForUpdate, loggedInUserId, {
       useSecureStorage: MICROSOFT_SECURE_STORAGE_OPTIONS.useSecureStorage,
@@ -5069,14 +4576,14 @@ exports.MicrosoftIntegrationConfigurationService = class MicrosoftIntegrationCon
     });
   }
 };
-exports.MicrosoftIntegrationConfigurationService = _ts_decorate22([
+exports.MicrosoftIntegrationConfigurationService = _ts_decorate31([
   common.Injectable(),
-  _ts_param12(4, common.Optional()),
-  _ts_param12(4, common.Inject(exports.IntegrationConfigSecureStorageService)),
-  _ts_param12(5, common.Optional()),
-  _ts_param12(5, common.Inject(dvssBackendModuleUtility.SECRET_PROVIDER)),
-  _ts_metadata19("design:type", Function),
-  _ts_metadata19("design:paramtypes", [
+  _ts_param15(4, common.Optional()),
+  _ts_param15(4, common.Inject(exports.IntegrationConfigSecureStorageService)),
+  _ts_param15(5, common.Optional()),
+  _ts_param15(5, common.Inject(dvssBackendModuleUtility.SECRET_PROVIDER)),
+  _ts_metadata26("design:type", Function),
+  _ts_metadata26("design:paramtypes", [
     typeof exports.IntegrationConfigurationDao === "undefined" ? Object : exports.IntegrationConfigurationDao,
     typeof dvssBackendModuleDatastore.CommonValidationDatabaseService === "undefined" ? Object : dvssBackendModuleDatastore.CommonValidationDatabaseService,
     typeof dvssBackendModuleUtility.LoggerService === "undefined" ? Object : dvssBackendModuleUtility.LoggerService,
@@ -5087,24 +4594,25 @@ exports.MicrosoftIntegrationConfigurationService = _ts_decorate22([
 ], exports.MicrosoftIntegrationConfigurationService);
 
 // ../../packages/dvss-integration-microsoft/src/app.module.ts
-function _ts_decorate23(decorators, target, key, desc2) {
+function _ts_decorate32(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate23, "_ts_decorate");
+__name(_ts_decorate32, "_ts_decorate");
 exports.IntegrationMicrosoftModule = class AppModule2 {
   static {
     __name(this, "AppModule");
   }
 };
-exports.IntegrationMicrosoftModule = _ts_decorate23([
+exports.IntegrationMicrosoftModule = _ts_decorate32([
   common.Module({
     imports: [
       exports.IntegrationLibsModule,
       dvssBackendModuleUtility.LoggerModule,
-      dvssBackendModuleDatastore.DatastoreModule
+      dvssBackendModuleDatastore.DatastoreModule,
+      IntegrationOauthModule
     ],
     providers: [
       exports.MicrosoftAuthService,
@@ -5128,18 +4636,20 @@ exports.IntegrationMicrosoftModule = _ts_decorate23([
       exports.MicrosoftCalendarResourceService,
       exports.MicrosoftCalendarBookingService,
       exports.MicrosoftCalendarWebhookService,
+      exports.IntegrationSubcapabilityDao,
       exports.IntegrationConfigurationDao,
-      dvssBackendModuleDatastore.CommonValidationDatabaseService
+      dvssBackendModuleDatastore.CommonValidationDatabaseService,
+      IntegrationOauthModule
     ]
   })
 ], exports.IntegrationMicrosoftModule);
-function _ts_decorate24(decorators, target, key, desc2) {
+function _ts_decorate33(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate24, "_ts_decorate");
+__name(_ts_decorate33, "_ts_decorate");
 exports.AdapterFactoryService = class AdapterFactoryService {
   static {
     __name(this, "AdapterFactoryService");
@@ -5152,7 +4662,7 @@ exports.AdapterFactoryService = class AdapterFactoryService {
     return adapter;
   }
 };
-exports.AdapterFactoryService = _ts_decorate24([
+exports.AdapterFactoryService = _ts_decorate33([
   common.Injectable()
 ], exports.AdapterFactoryService);
 
@@ -5170,17 +4680,17 @@ var ICalendarAuthHandler = class {
 };
 
 // src/providers/microsoft/microsoft-calendar-auth.handler.ts
-function _ts_decorate25(decorators, target, key, desc2) {
+function _ts_decorate34(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate25, "_ts_decorate");
-function _ts_metadata20(k, v) {
+__name(_ts_decorate34, "_ts_decorate");
+function _ts_metadata27(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata20, "_ts_metadata");
+__name(_ts_metadata27, "_ts_metadata");
 exports.MicrosoftCalendarAuthHandler = class MicrosoftCalendarAuthHandler extends ICalendarAuthHandler {
   static {
     __name(this, "MicrosoftCalendarAuthHandler");
@@ -5199,26 +4709,26 @@ exports.MicrosoftCalendarAuthHandler = class MicrosoftCalendarAuthHandler extend
     return this.microsoftAuthService.fetchAccessToken(integration, loggedInUserId);
   }
 };
-exports.MicrosoftCalendarAuthHandler = _ts_decorate25([
+exports.MicrosoftCalendarAuthHandler = _ts_decorate34([
   common.Injectable(),
-  _ts_metadata20("design:type", Function),
-  _ts_metadata20("design:paramtypes", [
+  _ts_metadata27("design:type", Function),
+  _ts_metadata27("design:paramtypes", [
     typeof exports.MicrosoftAuthService === "undefined" ? Object : exports.MicrosoftAuthService
   ])
 ], exports.MicrosoftCalendarAuthHandler);
 
 // src/adapters/calendar-auth.adapter.factory.ts
-function _ts_decorate26(decorators, target, key, desc2) {
+function _ts_decorate35(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate26, "_ts_decorate");
-function _ts_metadata21(k, v) {
+__name(_ts_decorate35, "_ts_decorate");
+function _ts_metadata28(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata21, "_ts_metadata");
+__name(_ts_metadata28, "_ts_metadata");
 exports.CalendarAuthAdapterFactory = class CalendarAuthAdapterFactory extends exports.AdapterFactoryService {
   static {
     __name(this, "CalendarAuthAdapterFactory");
@@ -5231,10 +4741,10 @@ exports.CalendarAuthAdapterFactory = class CalendarAuthAdapterFactory extends ex
     };
   }
 };
-exports.CalendarAuthAdapterFactory = _ts_decorate26([
+exports.CalendarAuthAdapterFactory = _ts_decorate35([
   common.Injectable(),
-  _ts_metadata21("design:type", Function),
-  _ts_metadata21("design:paramtypes", [
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     typeof exports.MicrosoftCalendarAuthHandler === "undefined" ? Object : exports.MicrosoftCalendarAuthHandler
   ])
 ], exports.CalendarAuthAdapterFactory);
@@ -5247,17 +4757,17 @@ var ICalendarBookingHandler = class {
 };
 
 // src/providers/microsoft/microsoft-calendar-booking.handler.ts
-function _ts_decorate27(decorators, target, key, desc2) {
+function _ts_decorate36(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate27, "_ts_decorate");
-function _ts_metadata22(k, v) {
+__name(_ts_decorate36, "_ts_decorate");
+function _ts_metadata29(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata22, "_ts_metadata");
+__name(_ts_metadata29, "_ts_metadata");
 exports.MicrosoftCalendarBookingHandler = class MicrosoftCalendarBookingHandler extends ICalendarBookingHandler {
   static {
     __name(this, "MicrosoftCalendarBookingHandler");
@@ -5287,30 +4797,27 @@ exports.MicrosoftCalendarBookingHandler = class MicrosoftCalendarBookingHandler
   async syncCalendarBookings(request, integration, loggedInUserId) {
     return this.microsoftCalendarBookingService.syncEvents(request, integration, loggedInUserId);
   }
-  async getRoomAvailability(request, integration, loggedInUserId) {
-    return this.microsoftCalendarBookingService.getRoomAvailability(request, integration, loggedInUserId);
-  }
 };
-exports.MicrosoftCalendarBookingHandler = _ts_decorate27([
+exports.MicrosoftCalendarBookingHandler = _ts_decorate36([
   common.Injectable(),
-  _ts_metadata22("design:type", Function),
-  _ts_metadata22("design:paramtypes", [
+  _ts_metadata29("design:type", Function),
+  _ts_metadata29("design:paramtypes", [
     typeof exports.MicrosoftCalendarBookingService === "undefined" ? Object : exports.MicrosoftCalendarBookingService
   ])
 ], exports.MicrosoftCalendarBookingHandler);
 
 // src/adapters/calendar-booking.adapter.factory.ts
-function _ts_decorate28(decorators, target, key, desc2) {
+function _ts_decorate37(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate28, "_ts_decorate");
-function _ts_metadata23(k, v) {
+__name(_ts_decorate37, "_ts_decorate");
+function _ts_metadata30(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata23, "_ts_metadata");
+__name(_ts_metadata30, "_ts_metadata");
 exports.CalendarBookingAdapterFactory = class CalendarBookingAdapterFactory extends exports.AdapterFactoryService {
   static {
     __name(this, "CalendarBookingAdapterFactory");
@@ -5323,10 +4830,10 @@ exports.CalendarBookingAdapterFactory = class CalendarBookingAdapterFactory exte
     };
   }
 };
-exports.CalendarBookingAdapterFactory = _ts_decorate28([
+exports.CalendarBookingAdapterFactory = _ts_decorate37([
   common.Injectable(),
-  _ts_metadata23("design:type", Function),
-  _ts_metadata23("design:paramtypes", [
+  _ts_metadata30("design:type", Function),
+  _ts_metadata30("design:paramtypes", [
     typeof exports.MicrosoftCalendarBookingHandler === "undefined" ? Object : exports.MicrosoftCalendarBookingHandler
   ])
 ], exports.CalendarBookingAdapterFactory);
@@ -5339,17 +4846,17 @@ var ICalendarIntegrationConfigurationHandler = class {
 };
 
 // src/providers/microsoft/microsoft-calendar-integration-configuration.handler.ts
-function _ts_decorate29(decorators, target, key, desc2) {
+function _ts_decorate38(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate29, "_ts_decorate");
-function _ts_metadata24(k, v) {
+__name(_ts_decorate38, "_ts_decorate");
+function _ts_metadata31(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata24, "_ts_metadata");
+__name(_ts_metadata31, "_ts_metadata");
 exports.MicrosoftCalendarIntegrationConfigurationHandler = class MicrosoftCalendarIntegrationConfigurationHandler extends ICalendarIntegrationConfigurationHandler {
   static {
     __name(this, "MicrosoftCalendarIntegrationConfigurationHandler");
@@ -5371,26 +4878,26 @@ exports.MicrosoftCalendarIntegrationConfigurationHandler = class MicrosoftCalend
     return this.microsoftIntegrationConfigurationService.getCapabilityIntegration(input, context);
   }
 };
-exports.MicrosoftCalendarIntegrationConfigurationHandler = _ts_decorate29([
+exports.MicrosoftCalendarIntegrationConfigurationHandler = _ts_decorate38([
   common.Injectable(),
-  _ts_metadata24("design:type", Function),
-  _ts_metadata24("design:paramtypes", [
+  _ts_metadata31("design:type", Function),
+  _ts_metadata31("design:paramtypes", [
     typeof exports.MicrosoftIntegrationConfigurationService === "undefined" ? Object : exports.MicrosoftIntegrationConfigurationService
   ])
 ], exports.MicrosoftCalendarIntegrationConfigurationHandler);
 
 // src/adapters/calendar-integration-configuration.adapter.factory.ts
-function _ts_decorate30(decorators, target, key, desc2) {
+function _ts_decorate39(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate30, "_ts_decorate");
-function _ts_metadata25(k, v) {
+__name(_ts_decorate39, "_ts_decorate");
+function _ts_metadata32(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata25, "_ts_metadata");
+__name(_ts_metadata32, "_ts_metadata");
 exports.CalendarIntegrationConfigurationAdapterFactory = class CalendarIntegrationConfigurationAdapterFactory extends exports.AdapterFactoryService {
   static {
     __name(this, "CalendarIntegrationConfigurationAdapterFactory");
@@ -5403,10 +4910,10 @@ exports.CalendarIntegrationConfigurationAdapterFactory = class CalendarIntegrati
     };
   }
 };
-exports.CalendarIntegrationConfigurationAdapterFactory = _ts_decorate30([
+exports.CalendarIntegrationConfigurationAdapterFactory = _ts_decorate39([
   common.Injectable(),
-  _ts_metadata25("design:type", Function),
-  _ts_metadata25("design:paramtypes", [
+  _ts_metadata32("design:type", Function),
+  _ts_metadata32("design:paramtypes", [
     typeof exports.MicrosoftCalendarIntegrationConfigurationHandler === "undefined" ? Object : exports.MicrosoftCalendarIntegrationConfigurationHandler
   ])
 ], exports.CalendarIntegrationConfigurationAdapterFactory);
@@ -5419,17 +4926,17 @@ var ICalendarResourceHandler = class {
 };
 
 // src/providers/microsoft/microsoft-calendar-resource.handler.ts
-function _ts_decorate31(decorators, target, key, desc2) {
+function _ts_decorate40(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate31, "_ts_decorate");
-function _ts_metadata26(k, v) {
+__name(_ts_decorate40, "_ts_decorate");
+function _ts_metadata33(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata26, "_ts_metadata");
+__name(_ts_metadata33, "_ts_metadata");
 exports.MicrosoftCalendarResourceHandler = class MicrosoftCalendarResourceHandler extends ICalendarResourceHandler {
   static {
     __name(this, "MicrosoftCalendarResourceHandler");
@@ -5442,26 +4949,26 @@ exports.MicrosoftCalendarResourceHandler = class MicrosoftCalendarResourceHandle
     return this.microsoftCalendarResourceService.getResources(request, integration, loggedInUserId);
   }
 };
-exports.MicrosoftCalendarResourceHandler = _ts_decorate31([
+exports.MicrosoftCalendarResourceHandler = _ts_decorate40([
   common.Injectable(),
-  _ts_metadata26("design:type", Function),
-  _ts_metadata26("design:paramtypes", [
+  _ts_metadata33("design:type", Function),
+  _ts_metadata33("design:paramtypes", [
     typeof exports.MicrosoftCalendarResourceService === "undefined" ? Object : exports.MicrosoftCalendarResourceService
   ])
 ], exports.MicrosoftCalendarResourceHandler);
 
 // src/adapters/calendar-resource.adapter.factory.ts
-function _ts_decorate32(decorators, target, key, desc2) {
+function _ts_decorate41(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate32, "_ts_decorate");
-function _ts_metadata27(k, v) {
+__name(_ts_decorate41, "_ts_decorate");
+function _ts_metadata34(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata27, "_ts_metadata");
+__name(_ts_metadata34, "_ts_metadata");
 exports.CalendarResourceAdapterFactory = class CalendarResourceAdapterFactory extends exports.AdapterFactoryService {
   static {
     __name(this, "CalendarResourceAdapterFactory");
@@ -5474,10 +4981,10 @@ exports.CalendarResourceAdapterFactory = class CalendarResourceAdapterFactory ex
     };
   }
 };
-exports.CalendarResourceAdapterFactory = _ts_decorate32([
+exports.CalendarResourceAdapterFactory = _ts_decorate41([
   common.Injectable(),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_metadata34("design:type", Function),
+  _ts_metadata34("design:paramtypes", [
     typeof exports.MicrosoftCalendarResourceHandler === "undefined" ? Object : exports.MicrosoftCalendarResourceHandler
   ])
 ], exports.CalendarResourceAdapterFactory);
@@ -5490,17 +4997,17 @@ var ICalendarWebhookHandler = class {
 };
 
 // src/providers/microsoft/microsoft-calendar-webhook.handler.ts
-function _ts_decorate33(decorators, target, key, desc2) {
+function _ts_decorate42(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate33, "_ts_decorate");
-function _ts_metadata28(k, v) {
+__name(_ts_decorate42, "_ts_decorate");
+function _ts_metadata35(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata28, "_ts_metadata");
+__name(_ts_metadata35, "_ts_metadata");
 exports.MicrosoftCalendarWebhookHandler = class MicrosoftCalendarWebhookHandler extends ICalendarWebhookHandler {
   static {
     __name(this, "MicrosoftCalendarWebhookHandler");
@@ -5519,26 +5026,26 @@ exports.MicrosoftCalendarWebhookHandler = class MicrosoftCalendarWebhookHandler
     return this.microsoftCalendarWebhookService.deleteSubscription(request, integration, loggedInUserId);
   }
 };
-exports.MicrosoftCalendarWebhookHandler = _ts_decorate33([
+exports.MicrosoftCalendarWebhookHandler = _ts_decorate42([
   common.Injectable(),
-  _ts_metadata28("design:type", Function),
-  _ts_metadata28("design:paramtypes", [
+  _ts_metadata35("design:type", Function),
+  _ts_metadata35("design:paramtypes", [
     typeof exports.MicrosoftCalendarWebhookService === "undefined" ? Object : exports.MicrosoftCalendarWebhookService
   ])
 ], exports.MicrosoftCalendarWebhookHandler);
 
 // src/adapters/calendar-webhook.adapter.factory.ts
-function _ts_decorate34(decorators, target, key, desc2) {
+function _ts_decorate43(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate34, "_ts_decorate");
-function _ts_metadata29(k, v) {
+__name(_ts_decorate43, "_ts_decorate");
+function _ts_metadata36(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata29, "_ts_metadata");
+__name(_ts_metadata36, "_ts_metadata");
 exports.CalendarWebhookAdapterFactory = class CalendarWebhookAdapterFactory extends exports.AdapterFactoryService {
   static {
     __name(this, "CalendarWebhookAdapterFactory");
@@ -5551,22 +5058,22 @@ exports.CalendarWebhookAdapterFactory = class CalendarWebhookAdapterFactory exte
     };
   }
 };
-exports.CalendarWebhookAdapterFactory = _ts_decorate34([
+exports.CalendarWebhookAdapterFactory = _ts_decorate43([
   common.Injectable(),
-  _ts_metadata29("design:type", Function),
-  _ts_metadata29("design:paramtypes", [
+  _ts_metadata36("design:type", Function),
+  _ts_metadata36("design:paramtypes", [
     typeof exports.MicrosoftCalendarWebhookHandler === "undefined" ? Object : exports.MicrosoftCalendarWebhookHandler
   ])
 ], exports.CalendarWebhookAdapterFactory);
 
 // src/app.module.ts
-function _ts_decorate35(decorators, target, key, desc2) {
+function _ts_decorate44(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate35, "_ts_decorate");
+__name(_ts_decorate44, "_ts_decorate");
 var microsoftHandlers = [
   exports.MicrosoftCalendarBookingHandler,
   exports.MicrosoftCalendarResourceHandler,
@@ -5586,7 +5093,7 @@ exports.CalendarIntegrationManager = class AppModule3 {
     __name(this, "AppModule");
   }
 };
-exports.CalendarIntegrationManager = _ts_decorate35([
+exports.CalendarIntegrationManager = _ts_decorate44([
   common.Module({
     imports: [
       exports.IntegrationLibsModule,