@gzl10/nexus-backend 0.19.0 → 0.20.0

package/dist/migration-helpers/index.js

@@ -7940,96 +7940,70 @@ var init_system = __esm({
   }
 });
 
-// src/modules/ui-settings/ui-branding.entity.ts
-import { useTextField as useTextField7, useImageField } from "@gzl10/nexus-sdk/fields";
-var uiBrandingEntity;
-var init_ui_branding_entity = __esm({
-  "src/modules/ui-settings/ui-branding.entity.ts"() {
+// src/modules/ui-settings/ui-style-guide.entity.ts
+import { useTextField as useTextField7, useImageField, useSelectField as useSelectField6, useColorField, useNumberField as useNumberField4, useSwitchField as useSwitchField2 } from "@gzl10/nexus-sdk/fields";
+var uiStyleGuideEntity;
+var init_ui_style_guide_entity = __esm({
+  "src/modules/ui-settings/ui-style-guide.entity.ts"() {
     "use strict";
-    uiBrandingEntity = {
+    uiStyleGuideEntity = {
       type: "single",
       realtime: "sync",
-      key: "ui_branding",
-      label: { en: "Branding", es: "Identidad Corporativa" },
-      icon: "mdi:palette-swatch-outline",
+      key: "ui_style_guide",
+      label: { en: "Style Guide", es: "Gu\xEDa de Estilos" },
+      icon: "mdi:palette-outline",
       public: true,
-      routePrefix: "/ui-branding",
+      routePrefix: "/ui-style-guide",
       defaults: {
         appName: "Nexus",
         logo: null,
         logoDark: null,
-        favicon: null
+        favicon: null,
+        primaryColor: "#3B82F6",
+        font: "space-grotesk",
+        typographyScale: "default",
+        borderRadius: 8,
+        glassEffect: true,
+        theme: "system",
+        loginLayout: "centered"
       },
       fields: {
         appName: useTextField7({
           label: { en: "App Name", es: "Nombre de la App" },
-          hint: { en: "Displayed in the header, browser tab and emails", es: "Se muestra en el header, pesta\xF1a del navegador y emails" },
+          hint: { en: "Displayed in header, browser tab and emails", es: "Se muestra en header, pesta\xF1a del navegador y emails" },
           size: 100,
           required: true
         }),
         logo: useImageField({
           label: { en: "Logo (Light Theme)", es: "Logo (Tema Claro)" },
-          hint: { en: "Recommended: SVG or PNG with transparent background, max 200px height", es: "Recomendado: SVG o PNG con fondo transparente, m\xE1x 200px de alto" },
+          hint: { en: "SVG or PNG with transparent background, max 200px height", es: "SVG o PNG con fondo transparente, m\xE1x 200px de alto" },
           folder: "branding",
           isPublic: true,
           dedupe: true
         }),
         logoDark: useImageField({
           label: { en: "Logo (Dark Theme)", es: "Logo (Tema Oscuro)" },
-          hint: { en: "Optional: Use a lighter version for dark backgrounds", es: "Opcional: Usa una versi\xF3n m\xE1s clara para fondos oscuros" },
+          hint: { en: "Lighter version for dark backgrounds", es: "Versi\xF3n m\xE1s clara para fondos oscuros" },
           folder: "branding",
           isPublic: true,
           dedupe: true
         }),
         favicon: useImageField({
           label: { en: "Favicon", es: "Favicon" },
-          hint: { en: "Browser tab icon. Recommended: 32x32 or 64x64 PNG/ICO", es: "Icono de pesta\xF1a del navegador. Recomendado: 32x32 o 64x64 PNG/ICO" },
+          hint: { en: "32x32 or 64x64 PNG/ICO", es: "32x32 o 64x64 PNG/ICO" },
           accept: "image/x-icon,image/png,image/svg+xml",
           maxSize: "256KB",
           folder: "branding",
           isPublic: true,
           dedupe: true
-        })
-      },
-      casl: {
-        subject: "UiBranding",
-        permissions: {
-          ADMIN: { actions: ["read", "update"] }
-        }
-      }
-    };
-  }
-});
-
-// src/modules/ui-settings/ui-theme.entity.ts
-import { useSelectField as useSelectField6, useColorField } from "@gzl10/nexus-sdk/fields";
-var uiThemeEntity;
-var init_ui_theme_entity = __esm({
-  "src/modules/ui-settings/ui-theme.entity.ts"() {
-    "use strict";
-    uiThemeEntity = {
-      type: "single",
-      realtime: "sync",
-      key: "ui_theme",
-      label: { en: "Theme & Colors", es: "Tema y Colores" },
-      icon: "mdi:palette",
-      public: true,
-      routePrefix: "/ui-theme",
-      defaults: {
-        // Typography
-        font: "space-grotesk",
-        // Theme & Colors
-        theme: "system",
-        primaryColor: "#3B82F6",
-        dopamineTheme: "none",
-        // Layout
-        loginLayout: "centered"
-      },
-      fields: {
-        // === Typography ===
+        }),
+        primaryColor: useColorField({
+          label: { en: "Primary Color", es: "Color Principal" },
+          hint: { en: "Accent color for buttons, links and highlights", es: "Color de acento para botones, enlaces y resaltados" }
+        }),
         font: useSelectField6({
           label: { en: "Font", es: "Fuente" },
-          hint: { en: "Primary font for headings and UI elements", es: "Fuente principal para t\xEDtulos y elementos de interfaz" },
+          hint: { en: "Primary font for headings and UI", es: "Fuente principal para t\xEDtulos e interfaz" },
           options: [
             { value: "space-grotesk", label: "Space Grotesk" },
             { value: "inter", label: "Inter" },
@@ -8039,37 +8013,38 @@ var init_ui_theme_entity = __esm({
             { value: "system", label: { en: "System Default", es: "Sistema" } }
           ]
         }),
-        // === Theme & Colors ===
+        typographyScale: useSelectField6({
+          label: { en: "Typography Scale", es: "Escala Tipogr\xE1fica" },
+          hint: { en: "Font size scaling (WCAG 1.4.4)", es: "Escala de tama\xF1os de fuente (WCAG 1.4.4)" },
+          options: [
+            { value: "compact", label: { en: "Compact", es: "Compacta" } },
+            { value: "default", label: { en: "Default", es: "Por defecto" } },
+            { value: "relaxed", label: { en: "Relaxed", es: "Relajada" } }
+          ]
+        }),
+        borderRadius: useNumberField4({
+          label: { en: "Border Radius", es: "Radio de Bordes" },
+          hint: { en: "Corner roundness in pixels (0 = sharp, 16 = very round)", es: "Redondeo de esquinas en p\xEDxeles (0 = cuadrado, 16 = muy redondo)" },
+          defaultValue: 8,
+          validation: { min: 0, max: 16 }
+        }),
+        glassEffect: useSwitchField2({
+          label: { en: "Glass Effect", es: "Efecto Glass" },
+          hint: { en: "Glassmorphism blur on cards and modals", es: "Desenfoque glassmorphism en cards y modales" },
+          defaultValue: true
+        }),
         theme: useSelectField6({
           label: { en: "Theme", es: "Tema" },
-          hint: { en: "System follows your device preferences", es: "Sistema sigue las preferencias de tu dispositivo" },
+          hint: { en: "System follows device preferences", es: "Sistema sigue las preferencias del dispositivo" },
           options: [
             { value: "light", label: { en: "Light", es: "Claro" } },
             { value: "dark", label: { en: "Dark", es: "Oscuro" } },
             { value: "system", label: { en: "System", es: "Sistema" } }
           ]
         }),
-        dopamineTheme: useSelectField6({
-          label: { en: "Dopamine Theme", es: "Tema Dopamina" },
-          hint: { en: "Vibrant color presets optimized for light and dark modes (2025/2026 trends)", es: "Presets de colores vibrantes optimizados para modo claro y oscuro (tendencias 2025/2026)" },
-          options: [
-            { value: "none", label: { en: "None (Custom Color)", es: "Ninguno (Color personalizado)" } },
-            { value: "electric", label: { en: "Electric (Cobalt Blue)", es: "El\xE9ctrico (Azul Cobalto)" } },
-            { value: "sunset", label: { en: "Sunset (Coral Red)", es: "Atardecer (Rojo Coral)" } },
-            { value: "ocean", label: { en: "Ocean (Teal)", es: "Oc\xE9ano (Verde Azulado)" } },
-            { value: "forest", label: { en: "Forest (Mint)", es: "Bosque (Menta)" } },
-            { value: "lavender", label: { en: "Lavender (Violet)", es: "Lavanda (Violeta)" } },
-            { value: "cherry", label: { en: "Cherry (Fuchsia)", es: "Cereza (Fucsia)" } },
-            { value: "amber", label: { en: "Amber (Golden)", es: "\xC1mbar (Dorado)" } },
-            { value: "tangerine", label: { en: "Tangerine (Orange)", es: "Mandarina (Naranja)" } },
-            { value: "slate", label: { en: "Slate (Cool Gray)", es: "Pizarra (Gris Fr\xEDo)" } },
-            { value: "bronze", label: { en: "Bronze (Earth)", es: "Bronce (Tierra)" } }
-          ]
-        }),
-        // === Login Layout ===
         loginLayout: useSelectField6({
           label: { en: "Login Layout", es: "Dise\xF1o de Login" },
-          hint: { en: "Visual layout for authentication pages", es: "Dise\xF1o visual para p\xE1ginas de autenticaci\xF3n" },
+          hint: { en: "Auth page visual layout", es: "Dise\xF1o visual de p\xE1ginas de autenticaci\xF3n" },
           options: [
             { value: "centered", label: { en: "Centered", es: "Centrado" } },
             { value: "split", label: { en: "Split", es: "Dividido" } },
@@ -8077,140 +8052,10 @@ var init_ui_theme_entity = __esm({
             { value: "floating", label: { en: "Floating", es: "Flotante" } },
             { value: "minimal", label: { en: "Minimal", es: "Minimalista" } }
           ]
-        }),
-        primaryColor: {
-          ...useColorField({
-            label: { en: "Primary Color", es: "Color Principal" },
-            hint: { en: "Custom accent color for buttons, links and highlights", es: "Color de acento personalizado para botones, enlaces y resaltados" }
-          }),
-          // Hide when a dopamine theme is active (show only if 'none')
-          hidden: { field: "dopamineTheme", $ne: "none" }
-        }
-      },
-      casl: {
-        subject: "UiTheme",
-        permissions: {
-          ADMIN: { actions: ["read", "update"] }
-        }
-      }
-    };
-  }
-});
-
-// src/modules/ui-settings/ui-effects.entity.ts
-import { useSelectField as useSelectField7, useSwitchField as useSwitchField2 } from "@gzl10/nexus-sdk/fields";
-var uiEffectsEntity;
-var init_ui_effects_entity = __esm({
-  "src/modules/ui-settings/ui-effects.entity.ts"() {
-    "use strict";
-    uiEffectsEntity = {
-      type: "single",
-      realtime: "sync",
-      key: "ui_effects",
-      label: { en: "Visual Effects", es: "Efectos Visuales" },
-      icon: "mdi:shimmer",
-      public: true,
-      routePrefix: "/ui-effects",
-      defaults: {
-        glassIntensity: "medium",
-        borderStyle: "rounded",
-        enableAnimations: true,
-        enableOrganicShapes: false
-      },
-      fields: {
-        glassIntensity: useSelectField7({
-          label: { en: "Glass Intensity", es: "Intensidad Glass" },
-          hint: { en: "Glassmorphism blur effect on cards and modals", es: "Efecto de desenfoque glassmorphism en cards y modales" },
-          options: [
-            { value: "none", label: { en: "None", es: "Ninguno" } },
-            { value: "low", label: { en: "Low", es: "Baja" } },
-            { value: "medium", label: { en: "Medium", es: "Media" } },
-            { value: "high", label: { en: "High", es: "Alta" } }
-          ]
-        }),
-        borderStyle: useSelectField7({
-          label: { en: "Border Style", es: "Estilo de Bordes" },
-          hint: { en: "Corner radius for buttons, cards and inputs", es: "Radio de esquinas para botones, cards e inputs" },
-          options: [
-            { value: "sharp", label: { en: "Sharp", es: "Cuadrados" } },
-            { value: "rounded", label: { en: "Rounded", es: "Redondeados" } },
-            { value: "organic", label: { en: "Organic", es: "Org\xE1nicos" } }
-          ]
-        }),
-        enableAnimations: useSwitchField2({
-          label: { en: "Enable Animations", es: "Habilitar Animaciones" },
-          hint: { en: "Micro-interactions and transitions (hover, focus, page changes)", es: "Micro-interacciones y transiciones (hover, focus, cambios de p\xE1gina)" },
-          defaultValue: true,
-          meta: { sortable: true }
-        }),
-        enableOrganicShapes: useSwitchField2({
-          label: { en: "Enable Organic Shapes", es: "Habilitar Formas Org\xE1nicas" },
-          hint: { en: "Asymmetric border-radius for a more natural, playful look", es: "Border-radius asim\xE9trico para un aspecto m\xE1s natural y divertido" },
-          defaultValue: false,
-          meta: { sortable: true },
-          hidden: { field: "borderStyle", $ne: "organic" }
         })
       },
       casl: {
-        subject: "UiEffects",
-        permissions: {
-          ADMIN: { actions: ["read", "update"] }
-        }
-      }
-    };
-  }
-});
-
-// src/modules/ui-settings/ui-accessibility.entity.ts
-import { useSelectField as useSelectField8, useSwitchField as useSwitchField3 } from "@gzl10/nexus-sdk/fields";
-var uiAccessibilityEntity;
-var init_ui_accessibility_entity = __esm({
-  "src/modules/ui-settings/ui-accessibility.entity.ts"() {
-    "use strict";
-    uiAccessibilityEntity = {
-      type: "single",
-      realtime: "sync",
-      key: "ui_accessibility",
-      label: { en: "Accessibility", es: "Accesibilidad" },
-      icon: "mdi:human",
-      public: true,
-      routePrefix: "/ui-accessibility",
-      defaults: {
-        typographyScale: "default",
-        reducedMotion: false,
-        highContrast: false
-      },
-      fields: {
-        typographyScale: useSelectField8({
-          label: { en: "Typography Scale", es: "Escala Tipogr\xE1fica" },
-          hint: { en: "Adjusts font sizes for better readability (WCAG 1.4.4)", es: "Ajusta tama\xF1os de fuente para mejor legibilidad (WCAG 1.4.4)" },
-          options: [
-            { value: "compact", label: { en: "Compact (smaller)", es: "Compacta (m\xE1s peque\xF1a)" } },
-            { value: "default", label: { en: "Default", es: "Por defecto" } },
-            { value: "relaxed", label: { en: "Relaxed (larger)", es: "Relajada (m\xE1s grande)" } }
-          ]
-        }),
-        reducedMotion: useSwitchField3({
-          label: { en: "Reduced Motion", es: "Movimiento Reducido" },
-          defaultValue: false,
-          meta: { sortable: true },
-          hint: {
-            en: "Minimizes animations for users sensitive to motion (WCAG 2.1)",
-            es: "Minimiza animaciones para usuarios sensibles al movimiento (WCAG 2.1)"
-          }
-        }),
-        highContrast: useSwitchField3({
-          label: { en: "High Contrast", es: "Alto Contraste" },
-          defaultValue: false,
-          meta: { sortable: true },
-          hint: {
-            en: "Increases text contrast for better readability (WCAG AAA)",
-            es: "Aumenta el contraste del texto para mejor legibilidad (WCAG AAA)"
-          }
-        })
-      },
-      casl: {
-        subject: "UiAccessibility",
+        subject: "UiStyleGuide",
         permissions: {
           ADMIN: { actions: ["read", "update"] }
         }
@@ -8220,24 +8065,20 @@ var init_ui_accessibility_entity = __esm({
 });
 
 // src/modules/ui-settings/index.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { join as join5 } from "path";
 var init_ui_settings = __esm({
   "src/modules/ui-settings/index.ts"() {
     "use strict";
-    init_ui_branding_entity();
-    init_ui_theme_entity();
-    init_ui_effects_entity();
-    init_ui_accessibility_entity();
-    init_ui_branding_entity();
-    init_ui_theme_entity();
-    init_ui_effects_entity();
-    init_ui_accessibility_entity();
+    init_ui_style_guide_entity();
+    init_ui_style_guide_entity();
   }
 });
 
 // src/modules/storage/drivers/filesystem.driver.ts
-import { createReadStream, createWriteStream, existsSync as existsSync3, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
+import { createReadStream, createWriteStream, existsSync as existsSync4, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
 import { readFile, readdir, stat, copyFile, rename, mkdir } from "fs/promises";
-import { join as join5, dirname as dirname3, extname, basename } from "path";
+import { join as join6, dirname as dirname3, extname, basename } from "path";
 import { createHash } from "crypto";
 var init_filesystem_driver = __esm({
   "src/modules/storage/drivers/filesystem.driver.ts"() {
@@ -8265,8 +8106,8 @@ var init_s3_driver = __esm({
 });
 
 // src/modules/storage/storage.config.ts
-import { join as join6, isAbsolute } from "path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3 } from "fs";
+import { join as join7, isAbsolute } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3 } from "fs";
 var DEFAULT_MAX_SIZE, projectPath;
 var init_storage_config = __esm({
   "src/modules/storage/storage.config.ts"() {
@@ -8298,7 +8139,7 @@ var init_storage_service = __esm({
 });
 
 // src/modules/storage/storage.entity.ts
-import { useIdField as useIdField3, useTextField as useTextField8, useSelectField as useSelectField9, useUrlField, useNumberField as useNumberField4, useCheckboxField as useCheckboxField3, useJsonField as useJsonField2, useMetadataField, usePublicField } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField3, useTextField as useTextField8, useSelectField as useSelectField7, useUrlField, useNumberField as useNumberField5, useCheckboxField as useCheckboxField3, useJsonField as useJsonField2, useMetadataField, usePublicField } from "@gzl10/nexus-sdk/fields";
 var DEFAULT_MAX_SIZE2, storageConfigEntity, storageFilesEntity;
 var init_storage_entity = __esm({
   "src/modules/storage/storage.entity.ts"() {
@@ -8333,7 +8174,7 @@ var init_storage_entity = __esm({
           hint: { en: "Unique identifier (e.g. default_filesystem, default_s3)", es: "Identificador \xFAnico (ej: default_filesystem, default_s3)" }
         }),
         driver: {
-          ...useSelectField9({
+          ...useSelectField7({
             label: { en: "Driver", es: "Controlador" },
             required: true,
             hint: { en: "Storage backend", es: "Backend de almacenamiento" },
@@ -8350,7 +8191,7 @@ var init_storage_entity = __esm({
           size: 500,
           nullable: true
         }),
-        max_file_size: useNumberField4({
+        max_file_size: useNumberField5({
           label: { en: "Max File Size (bytes)", es: "Tama\xF1o m\xE1ximo de archivo (bytes)" },
           hint: { en: "Maximum size in bytes (default: 10MB = 10485760)", es: "Tama\xF1o m\xE1ximo en bytes (default: 10MB = 10485760)" },
           nullable: false,
@@ -8543,7 +8384,7 @@ var init_storage_entity = __esm({
           index: true,
           meta: { sortable: true, searchable: true }
         }),
-        size: useNumberField4({
+        size: useNumberField5({
           label: { en: "Size", es: "Tama\xF1o" },
           required: true,
           nullable: false,
@@ -8682,7 +8523,7 @@ var init_storage = __esm({
 });
 
 // src/modules/users/users.entity.ts
-import { useIdField as useIdField4, useSelectField as useSelectField10, useEmailField, usePasswordField, useTextField as useTextField9, useDatetimeField as useDatetimeField3, useCheckboxField as useCheckboxField4, useImageField as useImageField2, useNameField as useNameField2, useMetadataField as useMetadataField2, useDescriptionField as useDescriptionField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField4, useSelectField as useSelectField8, useEmailField, usePasswordField, useTextField as useTextField9, useDatetimeField as useDatetimeField3, useCheckboxField as useCheckboxField4, useImageField as useImageField2, useNameField as useNameField2, useMetadataField as useMetadataField2, useDescriptionField as useDescriptionField2 } from "@gzl10/nexus-sdk/fields";
 import { z as z2 } from "zod";
 var userEntity, roleEntity, userRoleEntity;
 var init_users_entity = __esm({
@@ -8756,7 +8597,7 @@ var init_users_entity = __esm({
           label: { en: "Marketing Opt-in", es: "Aceptar marketing" },
           meta: { exportable: true, showInForm: false, showInDisplay: false }
         }),
-        locale: useSelectField10({
+        locale: useSelectField8({
           label: { en: "Language", es: "Idioma" },
           options: [
             { value: "es", label: { en: "Spanish", es: "Espa\xF1ol" } },
@@ -8766,13 +8607,13 @@ var init_users_entity = __esm({
           meta: { sortable: true },
           defaultValue: "en"
         }),
-        timezone: useSelectField10({
+        timezone: useSelectField8({
           label: { en: "Timezone", es: "Zona horaria" },
           master: "timezones",
           meta: { sortable: true },
           defaultValue: "timezones:Europe/Madrid"
         }),
-        type: useSelectField10({
+        type: useSelectField8({
           label: { en: "Type", es: "Tipo" },
           defaultValue: "human",
           options: [
@@ -8941,7 +8782,7 @@ var init_users_entity = __esm({
       expose: false,
       fields: {
         id: useIdField4(),
-        user_id: useSelectField10({
+        user_id: useSelectField8({
           label: { en: "User", es: "Usuario" },
           required: true,
           table: "users",
@@ -8952,7 +8793,7 @@ var init_users_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        role_id: useSelectField10({
+        role_id: useSelectField8({
           label: { en: "Role", es: "Rol" },
           required: true,
           table: "roles",
@@ -9012,7 +8853,7 @@ var init_users = __esm({
 });
 
 // src/modules/auth/auth.entity.ts
-import { useIdField as useIdField5, useTextField as useTextField10, useSelectField as useSelectField11, useDatetimeField as useDatetimeField4, useEmailField as useEmailField2, useMetadataField as useMetadataField3, useExpiresAtField } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField5, useTextField as useTextField10, useSelectField as useSelectField9, useDatetimeField as useDatetimeField4, useEmailField as useEmailField2, useMetadataField as useMetadataField3, useExpiresAtField } from "@gzl10/nexus-sdk/fields";
 var refreshTokenEntity, authIdentitiesEntity;
 var init_auth_entity = __esm({
   "src/modules/auth/auth.entity.ts"() {
@@ -9093,7 +8934,7 @@ var init_auth_entity = __esm({
       order: 5,
       fields: {
         id: useIdField5(),
-        user_id: useSelectField11({
+        user_id: useSelectField9({
           label: { en: "User", es: "Usuario" },
           table: "users",
           column: "id",
@@ -9166,30 +9007,258 @@ var init_auth_routes = __esm({
   }
 });
 
-// src/modules/auth/auth.config.ts
+// src/config/env.ts
 import { z as z4 } from "zod";
+function resolveConfig() {
+  env = envSchema.parse(process.env);
+  process.env["TZ"] = env.TZ;
+  resolvedConfig = {
+    nodeEnv: env.NODE_ENV,
+    port: env.PORT,
+    host: "0.0.0.0",
+    ui: {
+      enabled: env.NEXUS_UI_ENABLED,
+      base: env.NEXUS_UI_BASE,
+      path: env.NEXUS_UI_PATH
+    },
+    corsOrigin: env.CORS_ORIGIN,
+    databaseUrl: env.DATABASE_URL,
+    adminEmail: env.ADMIN_EMAIL,
+    adminPassword: env.ADMIN_PASSWORD,
+    timezone: env.TZ
+  };
+  return resolvedConfig;
+}
+function getConfig() {
+  if (!resolvedConfig) {
+    return resolveConfig();
+  }
+  return resolvedConfig;
+}
+function resetConfig() {
+  resolvedConfig = null;
+}
+var envSchema, env, resolvedConfig;
+var init_env = __esm({
+  "src/config/env.ts"() {
+    "use strict";
+    envSchema = z4.object({
+      NODE_ENV: z4.enum(["development", "production", "test"]).default("development"),
+      PORT: z4.coerce.number().default(3e3),
+      CORS_ORIGIN: z4.string().default("*"),
+      BACKEND_URL: z4.string().optional(),
+      DATABASE_URL: z4.string().default("file:./dev.db"),
+      REDIS_URL: z4.string().url().optional(),
+      REDIS_PREFIX: z4.string().default("nexus"),
+      ADMIN_EMAIL: z4.string().email().optional(),
+      ADMIN_PASSWORD: z4.string().min(6).optional(),
+      COOKIE_DOMAIN: z4.string().optional(),
+      TZ: z4.string().default("UTC"),
+      TRUST_PROXY: z4.coerce.boolean().default(false),
+      NEXUS_UI_ENABLED: z4.coerce.boolean().default(true),
+      NEXUS_UI_BASE: z4.string().default("/"),
+      NEXUS_UI_PATH: z4.string().default("../ui/dist"),
+      NEXUS_CHECK_DRIFT: z4.coerce.boolean().optional(),
+      NEXUS_FAIL_ON_DRIFT: z4.coerce.boolean().optional(),
+      FRPC_SERVER: z4.string().optional(),
+      FRPC_SERVER_PORT: z4.coerce.number().default(7e3),
+      FRPC_TOKEN: z4.string().optional(),
+      FRPC_SUBDOMAIN: z4.string().optional()
+    });
+    env = envSchema.parse(process.env);
+    process.env["TZ"] = env.TZ;
+    resolvedConfig = null;
+  }
+});
+
+// src/db/sql-utils.ts
+function extractTableFromSql(sql, type2) {
+  const match = sql.match(SQL_PATTERNS[type2]);
+  return match?.[1];
+}
+function extractTableFromSelect(sql) {
+  return extractTableFromSql(sql, "select");
+}
+function extractTableFromInsert(sql) {
+  return extractTableFromSql(sql, "insert");
+}
+function extractTableFromUpdate(sql) {
+  return extractTableFromSql(sql, "update");
+}
+function extractTableFromDelete(sql) {
+  return extractTableFromSql(sql, "delete");
+}
+var SQL_PATTERNS;
+var init_sql_utils = __esm({
+  "src/db/sql-utils.ts"() {
+    "use strict";
+    SQL_PATTERNS = {
+      select: /from\s+["'`]?(\w+)["'`]?/i,
+      insert: /insert into\s+["'`]?(\w+)["'`]?/i,
+      update: /update\s+["'`]?(\w+)["'`]?/i,
+      delete: /delete from\s+["'`]?(\w+)["'`]?/i
+    };
+  }
+});
+
+// src/db/sqlite-compat.ts
+function createSqliteBooleanProcessor() {
+  const booleanColumns = /* @__PURE__ */ new Map();
+  function registerBooleanColumn2(table, column) {
+    if (!booleanColumns.has(table)) {
+      booleanColumns.set(table, /* @__PURE__ */ new Set());
+    }
+    booleanColumns.get(table).add(column);
+  }
+  function convertBooleans2(table, row) {
+    const columns = booleanColumns.get(table);
+    if (!columns || columns.size === 0) return row;
+    const result = { ...row };
+    for (const column of columns) {
+      if (column in result) {
+        const value = result[column];
+        if (value === 0 || value === 1) {
+          result[column] = value === 1;
+        }
+      }
+    }
+    return result;
+  }
+  function postProcess(result, queryContext) {
+    const sql = queryContext?.sql?.toLowerCase() ?? "";
+    if (!sql.startsWith("select")) return result;
+    const table = extractTableFromSelect(sql);
+    if (!table) return result;
+    if (Array.isArray(result)) {
+      return result.map(
+        (row) => typeof row === "object" && row !== null ? convertBooleans2(table, row) : row
+      );
+    }
+    if (typeof result === "object" && result !== null) {
+      return convertBooleans2(table, result);
+    }
+    return result;
+  }
+  function clear() {
+    booleanColumns.clear();
+  }
+  return { registerBooleanColumn: registerBooleanColumn2, convertBooleans: convertBooleans2, postProcess, clear };
+}
+var defaultProcessor, registerBooleanColumn, convertBooleans, sqlitePostProcess;
+var init_sqlite_compat = __esm({
+  "src/db/sqlite-compat.ts"() {
+    "use strict";
+    init_sql_utils();
+    defaultProcessor = createSqliteBooleanProcessor();
+    registerBooleanColumn = defaultProcessor.registerBooleanColumn;
+    convertBooleans = defaultProcessor.convertBooleans;
+    sqlitePostProcess = defaultProcessor.postProcess;
+  }
+});
+
+// src/config/database.ts
+import { join as join8, dirname as dirname5, isAbsolute as isAbsolute2 } from "path";
+import { mkdirSync as mkdirSync4 } from "fs";
+function getDatabaseConfig() {
+  const url = getConfig().databaseUrl;
+  if (IN_MEMORY_RE.test(url)) {
+    return {
+      client: "better-sqlite3",
+      connection: { filename: ":memory:" },
+      useNullAsDefault: true,
+      postProcessResponse: sqlitePostProcess,
+      pool: { min: 0, max: 1 }
+    };
+  }
+  if (url.startsWith("file:") || url.startsWith("sqlite:")) {
+    let filename = url.replace(/^(file:|sqlite:)/, "");
+    if (!isAbsolute2(filename)) {
+      filename = join8(getProjectPath(), "data", filename);
+    }
+    mkdirSync4(dirname5(filename), { recursive: true });
+    return {
+      client: "better-sqlite3",
+      connection: { filename },
+      useNullAsDefault: true,
+      postProcessResponse: sqlitePostProcess
+    };
+  }
+  if (url.startsWith("postgresql://") || url.startsWith("postgres://")) {
+    return {
+      client: "pg",
+      connection: url,
+      pool: { min: 2, max: 10 }
+    };
+  }
+  if (url.startsWith("mysql://")) {
+    const offsetMinutes = (/* @__PURE__ */ new Date()).getTimezoneOffset();
+    const offsetHours = Math.abs(Math.floor(offsetMinutes / 60));
+    const offsetMins = Math.abs(offsetMinutes % 60);
+    const sign = offsetMinutes <= 0 ? "+" : "-";
+    const tzOffset = `${sign}${String(offsetHours).padStart(2, "0")}:${String(offsetMins).padStart(2, "0")}`;
+    return {
+      client: "mysql2",
+      connection: {
+        uri: url,
+        timezone: tzOffset
+        // mysql2 requiere formato "+HH:MM"
+      },
+      pool: { min: 2, max: 10 }
+    };
+  }
+  throw new Error(`Unsupported database URL: ${url}`);
+}
+var IN_MEMORY_RE;
+var init_database = __esm({
+  "src/config/database.ts"() {
+    "use strict";
+    init_env();
+    init_paths();
+    init_sqlite_compat();
+    IN_MEMORY_RE = /^((file:|sqlite:)?:memory:?)$/;
+  }
+});
+
+// src/core/crypto/secret-resolver.ts
+import { randomBytes } from "crypto";
+function _resetSecretResolver() {
+  _secret = null;
+  _db = null;
+}
+var _secret, _db;
+var init_secret_resolver = __esm({
+  "src/core/crypto/secret-resolver.ts"() {
+    "use strict";
+    init_database();
+    _secret = null;
+    _db = null;
+  }
+});
+
+// src/modules/auth/auth.config.ts
+import { z as z5 } from "zod";
 var authEnvSchema;
 var init_auth_config = __esm({
   "src/modules/auth/auth.config.ts"() {
     "use strict";
-    authEnvSchema = z4.object({
-      AUTH_SECRET: z4.string().min(32, "AUTH_SECRET must be at least 32 characters"),
-      AUTH_ACCESS_EXPIRES: z4.string().default("15m"),
-      AUTH_REFRESH_EXPIRES: z4.string().default("7d"),
+    init_secret_resolver();
+    authEnvSchema = z5.object({
+      AUTH_ACCESS_EXPIRES: z5.string().default("15m"),
+      AUTH_REFRESH_EXPIRES: z5.string().default("7d"),
       // Rate limiting (default: 5 requests per 15 minutes)
-      AUTH_RATE_LIMIT_MAX: z4.coerce.number().default(5),
-      AUTH_RATE_LIMIT_WINDOW: z4.coerce.number().default(900),
+      AUTH_RATE_LIMIT_MAX: z5.coerce.number().default(5),
+      AUTH_RATE_LIMIT_WINDOW: z5.coerce.number().default(900),
       // seconds
       // Cookie domain for SSO across subdomains (e.g., '.example.com')
-      AUTH_COOKIE_DOMAIN: z4.string().optional(),
+      AUTH_COOKIE_DOMAIN: z5.string().optional(),
       // Challenge threshold: failed attempts before requiring OTP (default: 2)
-      AUTH_CHALLENGE_THRESHOLD: z4.coerce.number().default(2),
+      AUTH_CHALLENGE_THRESHOLD: z5.coerce.number().default(2),
       // Skip OTP verification for registration (DEVELOPMENT ONLY - rejected in production)
-      AUTH_SKIP_REGISTER_OTP: z4.coerce.boolean().default(false),
+      AUTH_SKIP_REGISTER_OTP: z5.coerce.boolean().default(false),
       // Disable self-registration via POST /auth/register (default: false)
-      AUTH_DISABLE_REGISTRATION: z4.coerce.boolean().default(false),
+      AUTH_DISABLE_REGISTRATION: z5.coerce.boolean().default(false),
       // Disable auto-creation of users on first OIDC login (default: false)
-      AUTH_DISABLE_AUTO_CREATE: z4.coerce.boolean().default(false)
+      AUTH_DISABLE_AUTO_CREATE: z5.coerce.boolean().default(false)
     });
   }
 });
@@ -9204,7 +9273,7 @@ var init_auth_middleware = __esm({
 });
 
 // src/modules/auth/auth.pat.entity.ts
-import { useIdField as useIdField6, useTextField as useTextField11, useSelectField as useSelectField12, useDatetimeField as useDatetimeField5, useExpiresAtField as useExpiresAtField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField6, useTextField as useTextField11, useSelectField as useSelectField10, useDatetimeField as useDatetimeField5, useExpiresAtField as useExpiresAtField2 } from "@gzl10/nexus-sdk/fields";
 var personalTokenEntity;
 var init_auth_pat_entity = __esm({
   "src/modules/auth/auth.pat.entity.ts"() {
@@ -9221,7 +9290,7 @@ var init_auth_pat_entity = __esm({
       routePrefix: "/personal-tokens",
       fields: {
         id: useIdField6(),
-        user_id: useSelectField12({
+        user_id: useSelectField10({
           label: { en: "User", es: "Usuario" },
           table: "users",
           column: "id",
@@ -9256,7 +9325,7 @@ var init_auth_pat_entity = __esm({
           unique: true,
           meta: { exportable: false }
         }),
-        scope: useSelectField12({
+        scope: useSelectField10({
           label: { en: "Permission", es: "Permiso" },
           required: true,
           options: [
@@ -9288,14 +9357,6 @@ var init_auth_pat_entity = __esm({
   }
 });
 
-// src/modules/auth/actions/providers.action.ts
-var init_providers_action = __esm({
-  "src/modules/auth/actions/providers.action.ts"() {
-    "use strict";
-    init_auth_config();
-  }
-});
-
 // src/modules/auth/actions/helpers.ts
 var init_helpers2 = __esm({
   "src/modules/auth/actions/helpers.ts"() {
@@ -9426,7 +9487,6 @@ var init_impersonate_action = __esm({
 var init_actions2 = __esm({
   "src/modules/auth/actions/index.ts"() {
     "use strict";
-    init_providers_action();
     init_login_action();
     init_register_action();
     init_forgot_password_action();
@@ -9442,7 +9502,6 @@ var init_actions2 = __esm({
     init_list_tokens_action();
     init_revoke_token_action();
     init_impersonate_action();
-    init_providers_action();
     init_login_action();
     init_register_action();
     init_forgot_password_action();
@@ -9478,7 +9537,7 @@ var init_otp_manager = __esm({
 });
 
 // src/modules/auth/auth.service.ts
-import { createHash as createHash4, randomBytes } from "crypto";
+import { createHash as createHash4, randomBytes as randomBytes2 } from "crypto";
 var REFRESH_TOKENS, AUTH_IDENTITIES, PERSONAL_TOKENS;
 var init_auth_service = __esm({
   "src/modules/auth/auth.service.ts"() {
@@ -9495,38 +9554,38 @@ var init_auth_service = __esm({
 });
 
 // src/modules/auth/auth.types.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 var loginSchema, registerSchema, forgotPasswordSchema, resetPasswordSchema, createPersonalTokenSchema;
 var init_auth_types = __esm({
   "src/modules/auth/auth.types.ts"() {
     "use strict";
-    loginSchema = z5.object({
-      email: z5.string().email("Invalid email"),
-      password: z5.string().min(1, "Password required"),
-      otp: z5.string().length(6).optional(),
-      deviceId: z5.string().max(64).optional(),
-      deviceName: z5.string().max(100).optional()
+    loginSchema = z6.object({
+      email: z6.string().email("Invalid email"),
+      password: z6.string().min(1, "Password required"),
+      otp: z6.string().length(6).optional(),
+      deviceId: z6.string().max(64).optional(),
+      deviceName: z6.string().max(100).optional()
     });
-    registerSchema = z5.object({
-      email: z5.string().email("Invalid email"),
-      password: z5.string().min(8, "Password must be at least 8 characters"),
-      name: z5.string().min(2, "Name must be at least 2 characters"),
-      otp: z5.string().length(6).optional(),
-      deviceId: z5.string().max(64).optional(),
-      deviceName: z5.string().max(100).optional()
+    registerSchema = z6.object({
+      email: z6.string().email("Invalid email"),
+      password: z6.string().min(8, "Password must be at least 8 characters"),
+      name: z6.string().min(2, "Name must be at least 2 characters"),
+      otp: z6.string().length(6).optional(),
+      deviceId: z6.string().max(64).optional(),
+      deviceName: z6.string().max(100).optional()
     });
-    forgotPasswordSchema = z5.object({
-      email: z5.string().email("Invalid email")
+    forgotPasswordSchema = z6.object({
+      email: z6.string().email("Invalid email")
     });
-    resetPasswordSchema = z5.object({
-      email: z5.string().email("Invalid email"),
-      otp: z5.string().length(6, "OTP must be 6 digits"),
-      newPassword: z5.string().min(8, "Password must be at least 8 characters")
+    resetPasswordSchema = z6.object({
+      email: z6.string().email("Invalid email"),
+      otp: z6.string().length(6, "OTP must be 6 digits"),
+      newPassword: z6.string().min(8, "Password must be at least 8 characters")
     });
-    createPersonalTokenSchema = z5.object({
-      name: z5.string().min(1).max(100),
-      scope: z5.enum(["readonly", "readwrite"]),
-      expires_at: z5.string().datetime().optional()
+    createPersonalTokenSchema = z6.object({
+      name: z6.string().min(1).max(100),
+      scope: z6.enum(["readonly", "readwrite"]),
+      expires_at: z6.string().datetime().optional()
     });
   }
 });
@@ -9546,18 +9605,18 @@ var init_auth = __esm({
 });
 
 // src/modules/mail/mail.config.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 var mailEnvSchema, mailEnv;
 var init_mail_config = __esm({
   "src/modules/mail/mail.config.ts"() {
     "use strict";
-    mailEnvSchema = z6.object({
-      SMTP_HOST: z6.string().default("localhost"),
-      SMTP_PORT: z6.coerce.number().default(1025),
-      SMTP_SECURE: z6.string().default("false").transform((v) => v === "true" || v === "1"),
-      SMTP_USER: z6.string().optional(),
-      SMTP_PASS: z6.string().optional(),
-      SMTP_FROM: z6.string().default("noreply@nexus.local")
+    mailEnvSchema = z7.object({
+      SMTP_HOST: z7.string().default("localhost"),
+      SMTP_PORT: z7.coerce.number().default(1025),
+      SMTP_SECURE: z7.string().default("false").transform((v) => v === "true" || v === "1"),
+      SMTP_USER: z7.string().optional(),
+      SMTP_PASS: z7.string().optional(),
+      SMTP_FROM: z7.string().default("noreply@nexus.local")
     });
     mailEnv = mailEnvSchema.parse(process.env);
   }
@@ -9565,7 +9624,7 @@ var init_mail_config = __esm({
 
 // src/modules/mail/mail.service.ts
 import nodemailer from "nodemailer";
-import { join as join7 } from "path";
+import { join as join9 } from "path";
 function getMailService() {
   if (!mailServiceInstance) {
     throw new Error("MailService not initialized. Call initMailService() first.");
@@ -9577,14 +9636,14 @@ var init_mail_service = __esm({
   "src/modules/mail/mail.service.ts"() {
     "use strict";
     init_mail_config();
-    TEMPLATE_REL_PATH = join7("public", "mail", "base.html");
-    LOGO_REL_PATH = join7("public", "nexus", "nexus-light-512.png");
+    TEMPLATE_REL_PATH = join9("public", "mail", "base.html");
+    LOGO_REL_PATH = join9("public", "nexus", "nexus-light-512.png");
     mailServiceInstance = null;
   }
 });
 
 // src/modules/mail/mail.entity.ts
-import { useIdField as useIdField7, useTextField as useTextField12, useSelectField as useSelectField13, useNumberField as useNumberField5, useSwitchField as useSwitchField4, useEmailField as useEmailField3, usePasswordField as usePasswordField2, useTextareaField as useTextareaField3, useTagsField as useTagsField2, useDatetimeField as useDatetimeField6 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField7, useTextField as useTextField12, useSelectField as useSelectField11, useNumberField as useNumberField6, useSwitchField as useSwitchField3, useEmailField as useEmailField3, usePasswordField as usePasswordField2, useTextareaField as useTextareaField3, useTagsField as useTagsField2, useDatetimeField as useDatetimeField6 } from "@gzl10/nexus-sdk/fields";
 import nodemailer2 from "nodemailer";
 async function getMailConfigFromDB(ctx) {
   const configService = ctx.services["config"];
@@ -9653,12 +9712,12 @@ var init_mail_entity = __esm({
           nullable: false,
           hint: { en: "Default: SMTP_HOST env var", es: "Por defecto: variable SMTP_HOST" }
         }),
-        port: useNumberField5({
+        port: useNumberField6({
           label: { en: "Port", es: "Puerto" },
           nullable: false,
           hint: { en: "Default: SMTP_PORT env var", es: "Por defecto: variable SMTP_PORT" }
         }),
-        secure: useSwitchField4({
+        secure: useSwitchField3({
           label: { en: "TLS/SSL", es: "TLS/SSL" },
           hint: { en: "Default: SMTP_SECURE env var", es: "Por defecto: variable SMTP_SECURE" }
         }),
@@ -9829,7 +9888,7 @@ var init_mail_entity = __esm({
           meta: { searchable: true, sortable: true }
         }),
         status: {
-          ...useSelectField13({
+          ...useSelectField11({
             label: { en: "Status", es: "Estado" },
             options: [
               { value: "pending", label: { en: "Pending", es: "Pendiente" } },
@@ -9853,7 +9912,7 @@ var init_mail_entity = __esm({
           label: { en: "Error", es: "Error" },
           nullable: true
         }),
-        sent_by: useSelectField13({
+        sent_by: useSelectField11({
           label: { en: "Sent by", es: "Enviado por" },
           table: "users",
           column: "id",
@@ -9904,7 +9963,7 @@ var init_observability_service = __esm({
 });
 
 // src/modules/observability/observability.config.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 function getOtelConfig() {
   if (cachedConfig) return cachedConfig;
   const env2 = otelEnvSchema.parse(process.env);
@@ -9921,12 +9980,12 @@ var otelEnvSchema, cachedConfig;
 var init_observability_config = __esm({
   "src/modules/observability/observability.config.ts"() {
     "use strict";
-    otelEnvSchema = z7.object({
-      OTEL_ENABLED: z7.coerce.boolean().default(false),
-      OTEL_SERVICE_NAME: z7.string().default("nexus"),
-      OTEL_PROMETHEUS_PORT: z7.coerce.number().int().min(0).max(65535).default(9464),
-      OTEL_EXPORTER_OTLP_ENDPOINT: z7.string().url().optional(),
-      OTEL_TRACE_SAMPLE_RATE: z7.coerce.number().min(0).max(1).default(1)
+    otelEnvSchema = z8.object({
+      OTEL_ENABLED: z8.coerce.boolean().default(false),
+      OTEL_SERVICE_NAME: z8.string().default("nexus"),
+      OTEL_PROMETHEUS_PORT: z8.coerce.number().int().min(0).max(65535).default(9464),
+      OTEL_EXPORTER_OTLP_ENDPOINT: z8.string().url().optional(),
+      OTEL_TRACE_SAMPLE_RATE: z8.coerce.number().min(0).max(1).default(1)
     });
     cachedConfig = null;
   }
@@ -10153,7 +10212,7 @@ var init_toggle_plugin_action = __esm({
 });
 
 // src/modules/plugins/plugins.entity.ts
-import { useTextField as useTextField13, useSelectField as useSelectField14, useCheckboxField as useCheckboxField5 } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField13, useSelectField as useSelectField12, useCheckboxField as useCheckboxField5 } from "@gzl10/nexus-sdk/fields";
 import { OFFICIAL_PLUGINS } from "@gzl10/nexus-sdk";
 var allowPluginManagement, pluginsEntity;
 var init_plugins_entity = __esm({
@@ -10195,7 +10254,7 @@ var init_plugins_entity = __esm({
           size: 20,
           nullable: false
         }),
-        category: useSelectField14({
+        category: useSelectField12({
           label: { en: "Category", es: "Categor\xEDa" },
           options: [
             { value: "content", label: { en: "Content", es: "Contenido" } },
@@ -10274,7 +10333,7 @@ var init_plugins_entity = __esm({
 
 // src/modules/plugins/plugins.routes.ts
 import { Router } from "express";
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 var init_plugins_routes = __esm({
   "src/modules/plugins/plugins.routes.ts"() {
     "use strict";
@@ -10295,7 +10354,7 @@ var init_plugins = __esm({
 import {
   useIdField as useIdField8,
   useTextField as useTextField14,
-  useSelectField as useSelectField15,
+  useSelectField as useSelectField13,
   useTextareaField as useTextareaField4,
   useJsonField as useJsonField3,
   useDatetimeField as useDatetimeField7,
@@ -10337,7 +10396,7 @@ var init_audit_entity = __esm({
           }),
           validation: { min: 1, max: 100 }
         },
-        actor_id: useSelectField15({
+        actor_id: useSelectField13({
           label: { en: "Actor", es: "Actor" },
           table: "users",
           column: "id",
@@ -10455,91 +10514,6 @@ var init_subject_extractor = __esm({
   }
 });
 
-// src/db/sql-utils.ts
-function extractTableFromSql(sql, type2) {
-  const match = sql.match(SQL_PATTERNS[type2]);
-  return match?.[1];
-}
-function extractTableFromSelect(sql) {
-  return extractTableFromSql(sql, "select");
-}
-function extractTableFromInsert(sql) {
-  return extractTableFromSql(sql, "insert");
-}
-function extractTableFromUpdate(sql) {
-  return extractTableFromSql(sql, "update");
-}
-function extractTableFromDelete(sql) {
-  return extractTableFromSql(sql, "delete");
-}
-var SQL_PATTERNS;
-var init_sql_utils = __esm({
-  "src/db/sql-utils.ts"() {
-    "use strict";
-    SQL_PATTERNS = {
-      select: /from\s+["'`]?(\w+)["'`]?/i,
-      insert: /insert into\s+["'`]?(\w+)["'`]?/i,
-      update: /update\s+["'`]?(\w+)["'`]?/i,
-      delete: /delete from\s+["'`]?(\w+)["'`]?/i
-    };
-  }
-});
-
-// src/db/sqlite-compat.ts
-function createSqliteBooleanProcessor() {
-  const booleanColumns = /* @__PURE__ */ new Map();
-  function registerBooleanColumn2(table, column) {
-    if (!booleanColumns.has(table)) {
-      booleanColumns.set(table, /* @__PURE__ */ new Set());
-    }
-    booleanColumns.get(table).add(column);
-  }
-  function convertBooleans2(table, row) {
-    const columns = booleanColumns.get(table);
-    if (!columns || columns.size === 0) return row;
-    const result = { ...row };
-    for (const column of columns) {
-      if (column in result) {
-        const value = result[column];
-        if (value === 0 || value === 1) {
-          result[column] = value === 1;
-        }
-      }
-    }
-    return result;
-  }
-  function postProcess(result, queryContext) {
-    const sql = queryContext?.sql?.toLowerCase() ?? "";
-    if (!sql.startsWith("select")) return result;
-    const table = extractTableFromSelect(sql);
-    if (!table) return result;
-    if (Array.isArray(result)) {
-      return result.map(
-        (row) => typeof row === "object" && row !== null ? convertBooleans2(table, row) : row
-      );
-    }
-    if (typeof result === "object" && result !== null) {
-      return convertBooleans2(table, result);
-    }
-    return result;
-  }
-  function clear() {
-    booleanColumns.clear();
-  }
-  return { registerBooleanColumn: registerBooleanColumn2, convertBooleans: convertBooleans2, postProcess, clear };
-}
-var defaultProcessor, registerBooleanColumn, convertBooleans, sqlitePostProcess;
-var init_sqlite_compat = __esm({
-  "src/db/sqlite-compat.ts"() {
-    "use strict";
-    init_sql_utils();
-    defaultProcessor = createSqliteBooleanProcessor();
-    registerBooleanColumn = defaultProcessor.registerBooleanColumn;
-    convertBooleans = defaultProcessor.convertBooleans;
-    sqlitePostProcess = defaultProcessor.postProcess;
-  }
-});
-
 // src/runtime/types.ts
 var init_types = __esm({
   "src/runtime/types.ts"() {
@@ -10651,7 +10625,7 @@ var init_external_service = __esm({
 });
 
 // src/runtime/validation/schema-builder.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 var init_schema_builder2 = __esm({
   "src/runtime/validation/schema-builder.ts"() {
     "use strict";
@@ -10755,8 +10729,8 @@ var init_runtime = __esm({
 });
 
 // src/db/seed-runner.ts
-import { existsSync as existsSync6 } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync7 } from "fs";
+import { join as join10 } from "path";
 import { pathToFileURL } from "url";
 var init_seed_runner = __esm({
   "src/db/seed-runner.ts"() {
@@ -10791,133 +10765,6 @@ var init_migration_sources = __esm({
   }
 });
 
-// src/config/env.ts
-import { z as z9 } from "zod";
-function resolveConfig() {
-  env = envSchema.parse(process.env);
-  process.env["TZ"] = env.TZ;
-  resolvedConfig = {
-    nodeEnv: env.NODE_ENV,
-    port: env.PORT,
-    host: "0.0.0.0",
-    ui: {
-      enabled: env.NEXUS_UI_ENABLED,
-      base: env.NEXUS_UI_BASE,
-      path: env.NEXUS_UI_PATH
-    },
-    corsOrigin: env.CORS_ORIGIN,
-    databaseUrl: env.DATABASE_URL,
-    adminEmail: env.ADMIN_EMAIL,
-    adminPassword: env.ADMIN_PASSWORD,
-    timezone: env.TZ
-  };
-  return resolvedConfig;
-}
-function getConfig() {
-  if (!resolvedConfig) {
-    return resolveConfig();
-  }
-  return resolvedConfig;
-}
-function resetConfig() {
-  resolvedConfig = null;
-}
-var envSchema, env, resolvedConfig;
-var init_env = __esm({
-  "src/config/env.ts"() {
-    "use strict";
-    envSchema = z9.object({
-      NODE_ENV: z9.enum(["development", "production", "test"]).default("development"),
-      PORT: z9.coerce.number().default(3e3),
-      CORS_ORIGIN: z9.string().default("*"),
-      BACKEND_URL: z9.string().optional(),
-      DATABASE_URL: z9.string().default("file:./dev.db"),
-      REDIS_URL: z9.string().url().optional(),
-      REDIS_PREFIX: z9.string().default("nexus"),
-      ADMIN_EMAIL: z9.string().email().optional(),
-      ADMIN_PASSWORD: z9.string().min(6).optional(),
-      COOKIE_DOMAIN: z9.string().optional(),
-      TZ: z9.string().default("UTC"),
-      TRUST_PROXY: z9.coerce.boolean().default(false),
-      NEXUS_UI_ENABLED: z9.coerce.boolean().default(true),
-      NEXUS_UI_BASE: z9.string().default("/"),
-      NEXUS_UI_PATH: z9.string().default("../ui/dist"),
-      NEXUS_CHECK_DRIFT: z9.coerce.boolean().optional(),
-      NEXUS_FAIL_ON_DRIFT: z9.coerce.boolean().optional(),
-      FRPC_SERVER: z9.string().optional(),
-      FRPC_SERVER_PORT: z9.coerce.number().default(7e3),
-      FRPC_TOKEN: z9.string().optional(),
-      FRPC_SUBDOMAIN: z9.string().optional()
-    });
-    env = envSchema.parse(process.env);
-    process.env["TZ"] = env.TZ;
-    resolvedConfig = null;
-  }
-});
-
-// src/config/database.ts
-import { join as join9, dirname as dirname5, isAbsolute as isAbsolute2 } from "path";
-import { mkdirSync as mkdirSync4 } from "fs";
-function getDatabaseConfig() {
-  const url = getConfig().databaseUrl;
-  if (IN_MEMORY_RE.test(url)) {
-    return {
-      client: "better-sqlite3",
-      connection: { filename: ":memory:" },
-      useNullAsDefault: true,
-      postProcessResponse: sqlitePostProcess,
-      pool: { min: 0, max: 1 }
-    };
-  }
-  if (url.startsWith("file:") || url.startsWith("sqlite:")) {
-    let filename = url.replace(/^(file:|sqlite:)/, "");
-    if (!isAbsolute2(filename)) {
-      filename = join9(getProjectPath(), "data", filename);
-    }
-    mkdirSync4(dirname5(filename), { recursive: true });
-    return {
-      client: "better-sqlite3",
-      connection: { filename },
-      useNullAsDefault: true,
-      postProcessResponse: sqlitePostProcess
-    };
-  }
-  if (url.startsWith("postgresql://") || url.startsWith("postgres://")) {
-    return {
-      client: "pg",
-      connection: url,
-      pool: { min: 2, max: 10 }
-    };
-  }
-  if (url.startsWith("mysql://")) {
-    const offsetMinutes = (/* @__PURE__ */ new Date()).getTimezoneOffset();
-    const offsetHours = Math.abs(Math.floor(offsetMinutes / 60));
-    const offsetMins = Math.abs(offsetMinutes % 60);
-    const sign = offsetMinutes <= 0 ? "+" : "-";
-    const tzOffset = `${sign}${String(offsetHours).padStart(2, "0")}:${String(offsetMins).padStart(2, "0")}`;
-    return {
-      client: "mysql2",
-      connection: {
-        uri: url,
-        timezone: tzOffset
-        // mysql2 requiere formato "+HH:MM"
-      },
-      pool: { min: 2, max: 10 }
-    };
-  }
-  throw new Error(`Unsupported database URL: ${url}`);
-}
-var IN_MEMORY_RE;
-var init_database = __esm({
-  "src/config/database.ts"() {
-    "use strict";
-    init_env();
-    init_paths();
-    init_sqlite_compat();
-    IN_MEMORY_RE = /^((file:|sqlite:)?:memory:?)$/;
-  }
-});
-
 // src/db/query-interceptor.ts
 function setupQueryInterceptor(knexInstance) {
   const queryTimings = /* @__PURE__ */ new Map();
@@ -11049,7 +10896,7 @@ var init_migration_helpers = __esm({
 // src/db/migration-generator.ts
 import path2 from "path";
 import fs2 from "fs/promises";
-import { readFileSync as readFileSync3, mkdirSync as mkdirSync5, realpathSync } from "fs";
+import { readFileSync as readFileSync4, mkdirSync as mkdirSync5, realpathSync } from "fs";
 var init_migration_generator = __esm({
   "src/db/migration-generator.ts"() {
     "use strict";
@@ -11204,6 +11051,13 @@ var init_events_api = __esm({
   }
 });
 
+// src/engine/capabilities-registry.ts
+var init_capabilities_registry = __esm({
+  "src/engine/capabilities-registry.ts"() {
+    "use strict";
+  }
+});
+
 // src/core/cache/lru-cache.ts
 var init_lru_cache = __esm({
   "src/core/cache/lru-cache.ts"() {
@@ -11269,6 +11123,7 @@ var init_context = __esm({
     init_plugin_ops();
     init_load_config();
     init_events_api();
+    init_capabilities_registry();
     init_seed_runner();
     init_cache_manager();
     sharedCacheManager = null;
@@ -11287,6 +11142,7 @@ var init_engine = __esm({
     init_subject_extractor();
     init_definition_extractors();
     init_context();
+    init_capabilities_registry();
   }
 });
 
@@ -11335,6 +11191,7 @@ import jwt3 from "jsonwebtoken";
 var init_jwt = __esm({
   "src/core/jwt/index.ts"() {
     "use strict";
+    init_secret_resolver();
   }
 });
 
@@ -11508,6 +11365,7 @@ var init_socket = __esm({
     "use strict";
     init_emitter();
     init_logger();
+    init_secret_resolver();
     io = null;
     userSockets = /* @__PURE__ */ new Map();
     socketUsers = /* @__PURE__ */ new Map();
@@ -11703,7 +11561,7 @@ var init_port_check = __esm({
 // src/core/tunnel.ts
 import { spawn, execSync } from "child_process";
 import { writeFileSync as writeFileSync2, unlinkSync as unlinkSync2 } from "fs";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 import { tmpdir } from "os";
 function stopTunnel() {
   if (tunnelProcess) {
@@ -11807,6 +11665,7 @@ async function stop() {
     resetConfigCache();
     clearCustomCaslRules();
     clearSeedPermissions();
+    _resetSecretResolver();
     await resetServeSPA();
     return;
   }
@@ -11842,6 +11701,7 @@ async function stop() {
   resetConfigCache();
   clearCustomCaslRules();
   clearSeedPermissions();
+  _resetSecretResolver();
   await resetServeSPA();
   currentConfig = void 0;
   server = null;
@@ -11902,6 +11762,7 @@ var init_server = __esm({
     init_ensure_system_tables();
     init_load_config();
     init_tunnel();
+    init_secret_resolver();
     server = null;
     gracefulShutdownRegistered = false;
     setupGracefulShutdown();
@@ -11957,10 +11818,11 @@ var init_hash = __esm({
 });
 
 // src/core/crypto/symmetric.ts
-import { createCipheriv, createDecipheriv, randomBytes as randomBytes2, hkdfSync } from "crypto";
+import { createCipheriv, createDecipheriv, randomBytes as randomBytes3, hkdfSync } from "crypto";
 var init_symmetric = __esm({
   "src/core/crypto/symmetric.ts"() {
     "use strict";
+    init_secret_resolver();
   }
 });