@vritti/api-sdk 0.1.2 → 0.1.3

package/dist/index.js

@@ -1,6 +1,19 @@
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
+// src/auth/auth-config.module.ts
+import { Global as Global2, Module as Module2 } from "@nestjs/common";
+import { ConfigModule, ConfigService as ConfigService2 } from "@nestjs/config";
+import { APP_GUARD } from "@nestjs/core";
+import { JwtModule } from "@nestjs/jwt";
+
+// src/request/request.module.ts
+import { Global, Module } from "@nestjs/common";
+
+// src/request/services/request.service.ts
+import { Inject, Injectable, Scope } from "@nestjs/common";
+import { REQUEST } from "@nestjs/core";
+
 // src/config/index.ts
 var defaultConfig = {
   cookie: {
@@ -75,31 +88,7 @@ function getJwtExpiry() {
 }
 __name(getJwtExpiry, "getJwtExpiry");
 
-// src/auth/utils/token-hash.util.ts
-import * as crypto from "crypto";
-function hashToken(token) {
-  return crypto.createHash("sha256").update(token).digest("hex");
-}
-__name(hashToken, "hashToken");
-function verifyTokenHash(token, expectedHash) {
-  const computedHash = hashToken(token);
-  if (computedHash.length !== expectedHash.length) return false;
-  return crypto.timingSafeEqual(Buffer.from(computedHash, "hex"), Buffer.from(expectedHash, "hex"));
-}
-__name(verifyTokenHash, "verifyTokenHash");
-
-// src/auth/auth-config.module.ts
-import { Global as Global2, Module as Module2 } from "@nestjs/common";
-import { ConfigModule, ConfigService as ConfigService2 } from "@nestjs/config";
-import { APP_GUARD } from "@nestjs/core";
-import { JwtModule } from "@nestjs/jwt";
-
-// src/request/request.module.ts
-import { Global, Module } from "@nestjs/common";
-
 // src/request/services/request.service.ts
-import { Inject, Injectable, Scope } from "@nestjs/common";
-import { REQUEST } from "@nestjs/core";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -117,7 +106,7 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-var RequestService = class {
+var RequestService2 = class {
   static {
     __name(this, "RequestService");
   }
@@ -166,7 +155,7 @@ var RequestService = class {
         }
       }
       return null;
-    } catch (error) {
+    } catch (_error) {
       return null;
     }
   }
@@ -186,7 +175,7 @@ var RequestService = class {
     return this.request.headers || {};
   }
 };
-RequestService = _ts_decorate([
+RequestService2 = _ts_decorate([
   Injectable({
     scope: Scope.REQUEST
   }),
@@ -195,7 +184,7 @@ RequestService = _ts_decorate([
   _ts_metadata("design:paramtypes", [
     typeof FastifyRequest === "undefined" ? Object : FastifyRequest
   ])
-], RequestService);
+], RequestService2);
 
 // src/request/request.module.ts
 function _ts_decorate2(decorators, target, key, desc) {
@@ -214,30 +203,31 @@ RequestModule = _ts_decorate2([
   Global(),
   Module({
     providers: [
-      RequestService
+      RequestService2
     ],
     exports: [
-      RequestService
+      RequestService2
     ]
   })
 ], RequestModule);
 
 // src/auth/guards/vritti-auth.guard.ts
-import { Injectable as Injectable3, Logger as Logger2, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
-import { ConfigService } from "@nestjs/config";
-import { Reflector } from "@nestjs/core";
-import { JwtService } from "@nestjs/jwt";
-
-// src/database/services/primary-database.service.ts
-import { Inject as Inject2, Injectable as Injectable2, InternalServerErrorException, Logger } from "@nestjs/common";
-import { Pool } from "pg";
-import { drizzle } from "drizzle-orm/node-postgres";
-import { eq, or } from "drizzle-orm";
+import { Injectable as Injectable2, Logger as Logger2, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
 
-// src/database/constants.ts
-var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+// src/auth/utils/token-hash.util.ts
+import * as crypto from "crypto";
+function hashToken(token) {
+  return crypto.createHash("sha256").update(token).digest("hex");
+}
+__name(hashToken, "hashToken");
+function verifyTokenHash(token, expectedHash) {
+  const computedHash = hashToken(token);
+  if (computedHash.length !== expectedHash.length) return false;
+  return crypto.timingSafeEqual(Buffer.from(computedHash, "hex"), Buffer.from(expectedHash, "hex"));
+}
+__name(verifyTokenHash, "verifyTokenHash");
 
-// src/database/services/primary-database.service.ts
+// src/auth/guards/vritti-auth.guard.ts
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -249,491 +239,658 @@ function _ts_metadata2(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var PrimaryDatabaseService = class _PrimaryDatabaseService {
+var VrittiAuthGuard = class _VrittiAuthGuard {
   static {
-    __name(this, "PrimaryDatabaseService");
+    __name(this, "VrittiAuthGuard");
   }
-  options;
-  logger = new Logger(_PrimaryDatabaseService.name);
-  /** PostgreSQL connection pool */
-  pool = null;
-  /** Drizzle database instance */
-  db = null;
-  /** In-memory cache: Map<tenantIdentifier, TenantConfig> */
-  tenantConfigCache = /* @__PURE__ */ new Map();
-  /** Cache TTL in milliseconds */
-  cacheTTL;
-  constructor(options) {
-    this.options = options;
-    this.cacheTTL = options.connectionCacheTTL || 3e5;
+  reflector;
+  _configService;
+  jwtService;
+  primaryDatabase;
+  requestService;
+  logger = new Logger2(_VrittiAuthGuard.name);
+  constructor(reflector, _configService, jwtService, primaryDatabase, requestService) {
+    this.reflector = reflector;
+    this._configService = _configService;
+    this.jwtService = jwtService;
+    this.primaryDatabase = primaryDatabase;
+    this.requestService = requestService;
   }
-  async onModuleInit() {
-    if (this.options.primaryDb) {
-      await this.initializeDrizzleClient();
+  async canActivate(context) {
+    const request = context.switchToHttp().getRequest();
+    const isPublic = this.reflector.getAllAndOverride("isPublic", [
+      context.getHandler(),
+      context.getClass()
+    ]);
+    if (isPublic) {
+      this.logger.debug("Public endpoint detected, skipping authentication");
+      return true;
+    }
+    const isOnboarding = this.reflector.getAllAndOverride("isOnboarding", [
+      context.getHandler(),
+      context.getClass()
+    ]);
+    try {
+      const accessToken = this.requestService.getAccessToken();
+      if (!accessToken) {
+        this.logger.warn("Access token not found in Authorization header");
+        throw new UnauthorizedException("Access token not found");
+      }
+      const decodedToken = this.jwtService.decode(accessToken);
+      if (!decodedToken) {
+        this.logger.warn("Failed to decode access token");
+        throw new UnauthorizedException("Invalid token format");
+      }
+      if (isOnboarding) {
+        if (decodedToken.type !== "onboarding") {
+          this.logger.warn("Onboarding endpoint requires onboarding token");
+          throw new UnauthorizedException("This endpoint requires an onboarding token");
+        }
+        const validatedToken2 = this.validateAccessToken(accessToken);
+        this.logger.debug("Onboarding token validated successfully");
+        this.validateRefreshTokenBinding(context, validatedToken2);
+        const userId2 = validatedToken2.userId;
+        request.user = {
+          id: userId2
+        };
+        return true;
+      }
+      if (decodedToken.type === "onboarding") {
+        this.logger.warn("Regular endpoint accessed with onboarding token");
+        throw new UnauthorizedException("Onboarding tokens cannot access this endpoint");
+      }
+      const validatedToken = this.validateAccessToken(accessToken);
+      this.logger.debug("Access token validated successfully");
+      this.validateRefreshTokenBinding(context, validatedToken);
+      const userId = validatedToken.userId;
+      request.user = {
+        id: userId
+      };
+      const tenantIdentifier = this.requestService.getTenantIdentifier();
+      if (!tenantIdentifier) {
+        this.logger.warn("Tenant identifier not found in request");
+        throw new UnauthorizedException("Tenant identifier not found");
+      }
+      this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
+      if (tenantIdentifier === "cloud") {
+        this.logger.debug("Platform admin access detected, skipping tenant database validation");
+        return true;
+      }
+      const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
+      if (!tenantInfo) {
+        this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
+        throw new UnauthorizedException("Invalid tenant");
+      }
+      if (tenantInfo.status !== "ACTIVE") {
+        this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
+        throw new UnauthorizedException(`Tenant is ${tenantInfo.status}`);
+      }
+      this.logger.debug(`Tenant validated: ${tenantInfo.subdomain} (${tenantInfo.type})`);
+      return true;
+    } catch (error) {
+      if (error instanceof UnauthorizedException) {
+        throw error;
+      }
+      this.logger.error("Unexpected error in auth guard", error);
+      throw new UnauthorizedException("Authentication failed");
     }
   }
   /**
-  * Initialize connection to primary database using Drizzle
+  * Validate access token with proper expiry checks
+  * Throws UnauthorizedException if token is invalid or expired
   */
-  async initializeDrizzleClient() {
+  validateAccessToken(token) {
     try {
-      const databaseUrl = this.buildPrimaryDbUrl();
-      this.pool = new Pool({
-        connectionString: databaseUrl,
-        max: this.options.maxConnections || 10
-      });
-      this.logger.debug(`Schema keys passed to drizzle: [${Object.keys(this.options.drizzleSchema || {}).join(", ")}]`);
-      this.logger.debug(`Relations keys passed to drizzle: [${Object.keys(this.options.drizzleRelations || {}).join(", ")}]`);
-      this.db = drizzle({
-        client: this.pool,
-        schema: this.options.drizzleSchema,
-        relations: this.options.drizzleRelations
-      });
-      this.logger.debug(`Drizzle query keys after init: [${Object.keys(this.db.query || {}).join(", ")}]`);
-      await this.pool.query("SELECT 1");
-      this.logger.log("Connected to primary database (tenant registry)");
+      const decoded = this.jwtService.verify(token);
+      this.logger.debug(`Access token decoded for user: ${decoded.userId}`);
+      if (decoded.exp) {
+        const expiryTime = decoded.exp * 1e3;
+        const currentTime = Date.now();
+        const timeRemaining = expiryTime - currentTime;
+        this.logger.debug(`Access token valid for ${Math.floor(timeRemaining / 1e3)} more seconds`);
+      }
+      return decoded;
     } catch (error) {
-      this.logger.error("Failed to connect to primary database", error);
-      throw new InternalServerErrorException("Failed to initialize tenant registry");
+      if (error instanceof UnauthorizedException) {
+        throw error;
+      }
+      const jwtError = error;
+      if (jwtError?.name === "TokenExpiredError") {
+        this.logger.warn(`Access token expired at: ${jwtError?.expiredAt}`);
+        throw new UnauthorizedException("Access token has expired");
+      }
+      if (jwtError?.name === "JsonWebTokenError") {
+        this.logger.warn(`Access token verification failed: ${jwtError?.message}`);
+        throw new UnauthorizedException("Invalid access token");
+      }
+      if (jwtError?.name === "NotBeforeError") {
+        this.logger.warn("Access token used before valid (nbf claim)");
+        throw new UnauthorizedException("Access token not yet valid");
+      }
+      this.logger.error("Unexpected error validating access token", error);
+      throw new UnauthorizedException("Access token validation failed");
     }
   }
   /**
-  * Build connection URL from primary database properties
+  * Validate that the access token is bound to the refresh token in the cookie.
+  * This prevents token theft - a stolen access token is useless without the
+  * corresponding refresh token cookie.
+  *
+  * @param context - The execution context containing the request
+  * @param validatedToken - The decoded and validated JWT token
+  * @throws UnauthorizedException if token binding validation fails
   */
-  buildPrimaryDbUrl() {
-    if (!this.options.primaryDb) {
-      throw new Error("Primary database configuration not provided");
+  validateRefreshTokenBinding(context, validatedToken) {
+    const config = getConfig();
+    if (!config.jwt.validateTokenBinding) {
+      this.logger.debug("Token binding validation is disabled");
+      return;
     }
-    const { host, port = 5432, username, password, database, schema = "public", sslMode = "require" } = this.options.primaryDb;
-    let url = `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}`;
-    const params = new URLSearchParams();
-    if (schema) {
-      params.set("schema", schema);
+    if (!validatedToken.refreshTokenHash) {
+      this.logger.debug("Token does not contain refreshTokenHash, skipping binding validation");
+      return;
     }
-    params.set("sslmode", sslMode);
-    const queryString = params.toString();
-    if (queryString) {
-      url += `?${queryString}`;
+    const request = context.switchToHttp().getRequest();
+    const cookies = request.cookies || {};
+    const refreshToken = cookies[config.cookie.refreshCookieName];
+    if (!refreshToken) {
+      this.logger.warn("Session validation failed - refresh token cookie not found");
+      throw new UnauthorizedException("Session validation failed");
     }
-    this.logger.debug(`Primary DB connection URL: ${this.maskPassword(url)}`);
-    return url;
-  }
-  /**
-  * Mask password in connection URL for logging
-  */
-  maskPassword(url) {
-    return url.replace(/:([^@]+)@/, ":****@");
-  }
-  /**
-  * Get tenant configuration by identifier (ID or subdomain)
-  *
-  * @param tenantIdentifier Tenant ID or subdomain
-  * @returns Tenant configuration or null if not found
-  */
-  async getTenantInfo(tenantIdentifier) {
-    const cached = this.tenantConfigCache.get(tenantIdentifier);
-    if (cached) {
-      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
-      return cached;
-    }
-    try {
-      if (!this.db) {
-        throw new Error("Primary database client not initialized");
-      }
-      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
-      const schema = this.options.drizzleSchema;
-      const { tenants, tenantDatabaseConfigs } = schema;
-      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, eq(tenants.id, tenantDatabaseConfigs.tenantId)).where(or(eq(tenants.id, tenantIdentifier), eq(tenants.subdomain, tenantIdentifier))).limit(1);
-      if (!result.length) {
-        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
-        return null;
-      }
-      const row = result[0];
-      const tenant = row.tenants;
-      const config = row.tenant_database_configs;
-      if (tenant.status !== "ACTIVE") {
-        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
-        return null;
-      }
-      const info = {
-        id: tenant.id,
-        subdomain: tenant.subdomain,
-        type: tenant.dbType,
-        status: tenant.status,
-        // For SHARED tenants: schema name
-        schemaName: config?.dbSchema || void 0,
-        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
-        databaseName: config?.dbName || void 0,
-        databaseHost: config?.dbHost || void 0,
-        databasePort: config?.dbPort || void 0,
-        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
-        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
-        databaseSslMode: config?.dbSslMode || void 0,
-        connectionPoolSize: config?.connectionPoolSize || void 0
-      };
-      this.cacheInfo(info);
-      return info;
-    } catch (error) {
-      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
-      throw new InternalServerErrorException("Failed to resolve tenant");
-    }
-  }
-  /**
-  * Cache tenant information with TTL
-  */
-  cacheInfo(info) {
-    this.tenantConfigCache.set(info.id, info);
-    this.tenantConfigCache.set(info.subdomain, info);
-    setTimeout(() => {
-      this.tenantConfigCache.delete(info.id);
-      this.tenantConfigCache.delete(info.subdomain);
-      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
-    }, this.cacheTTL);
-  }
-  /**
-  * Clear cached tenant information
-  *
-  * Useful when tenant settings are updated and cache needs to be invalidated
-  *
-  * @param tenantIdentifier Tenant ID or subdomain
-  */
-  clearTenantCache(tenantIdentifier) {
-    const config = this.tenantConfigCache.get(tenantIdentifier);
-    if (config) {
-      this.tenantConfigCache.delete(config.id);
-      this.tenantConfigCache.delete(config.subdomain);
-      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
-    }
-  }
-  /**
-  * Clear all cached tenant configurations
-  */
-  clearAllCaches() {
-    const size = this.tenantConfigCache.size;
-    this.tenantConfigCache.clear();
-    this.logger.log(`Cleared ${size} cached tenant configs`);
-  }
-  /**
-  * Get the Drizzle database instance for the primary database.
-  * This is a synchronous property that returns the initialized Drizzle client.
-  *
-  * @returns Primary database Drizzle instance
-  * @throws Error if primary database client is not initialized
-  */
-  get drizzleClient() {
-    if (!this.db) {
-      throw new Error("Primary database client not initialized");
+    if (!verifyTokenHash(refreshToken, validatedToken.refreshTokenHash)) {
+      this.logger.warn("Session validation failed - token binding mismatch");
+      throw new UnauthorizedException("Session validation failed");
     }
-    return this.db;
+    this.logger.debug("Token binding validated successfully");
   }
-  /**
-  * Get the Drizzle schema
-  */
-  get schema() {
-    return this.options.drizzleSchema;
+};
+VrittiAuthGuard = _ts_decorate3([
+  Injectable2({
+    scope: Scope2.REQUEST
+  }),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof Reflector === "undefined" ? Object : Reflector,
+    typeof ConfigService === "undefined" ? Object : ConfigService,
+    typeof JwtService === "undefined" ? Object : JwtService,
+    typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
+    typeof RequestService === "undefined" ? Object : RequestService
+  ])
+], VrittiAuthGuard);
+
+// src/auth/auth-config.module.ts
+function _ts_decorate4(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate4, "_ts_decorate");
+var AuthConfigModule = class _AuthConfigModule {
+  static {
+    __name(this, "AuthConfigModule");
   }
   /**
-  * Decrypt database credentials
+  * Register the auth module with async configuration
   *
-  * Override this method to implement your encryption strategy
+  * This method:
+  * 1. Configures JwtModule with JWT_SECRET from ConfigService
+  * 2. Provides VrittiAuthGuard globally (applies to all routes)
+  * 3. Exports JwtModule for use in other modules (e.g., for signing tokens)
   *
-  * @param encrypted Encrypted value
-  * @returns Decrypted value
+  * @returns Dynamic module configuration
   */
-  decrypt(encrypted) {
-    return encrypted;
-  }
-  async onModuleDestroy() {
-    if (this.pool) {
-      await this.pool.end();
-      this.logger.log("Disconnected from primary database");
-    }
+  static forRootAsync() {
+    return {
+      module: _AuthConfigModule,
+      imports: [
+        ConfigModule,
+        RequestModule,
+        JwtModule.registerAsync({
+          imports: [
+            ConfigModule
+          ],
+          inject: [
+            ConfigService2
+          ],
+          useFactory: /* @__PURE__ */ __name((config) => ({
+            secret: config.get("JWT_SECRET"),
+            signOptions: {
+              algorithm: "HS256"
+            }
+          }), "useFactory")
+        })
+      ],
+      providers: [
+        {
+          provide: APP_GUARD,
+          useClass: VrittiAuthGuard
+        }
+      ],
+      exports: [
+        JwtModule
+      ]
+    };
   }
 };
-PrimaryDatabaseService = _ts_decorate3([
-  Injectable2(),
-  _ts_param2(0, Inject2(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
-  ])
-], PrimaryDatabaseService);
+AuthConfigModule = _ts_decorate4([
+  Global2(),
+  Module2({})
+], AuthConfigModule);
 
-// src/auth/guards/vritti-auth.guard.ts
-function _ts_decorate4(decorators, target, key, desc) {
+// src/auth/decorators/onboarding.decorator.ts
+import { SetMetadata } from "@nestjs/common";
+var Onboarding = /* @__PURE__ */ __name(() => SetMetadata("isOnboarding", true), "Onboarding");
+
+// src/auth/decorators/public.decorator.ts
+import { SetMetadata as SetMetadata2 } from "@nestjs/common";
+var Public = /* @__PURE__ */ __name(() => SetMetadata2("isPublic", true), "Public");
+
+// src/database/database.module.ts
+import { Global as Global3, Module as Module3 } from "@nestjs/common";
+import { APP_INTERCEPTOR } from "@nestjs/core";
+
+// src/database/constants.ts
+var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+
+// src/database/interceptors/message-tenant-context.interceptor.ts
+import { Injectable as Injectable3, Logger as Logger3, Scope as Scope3 } from "@nestjs/common";
+import { tap } from "rxjs/operators";
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
+__name(_ts_decorate5, "_ts_decorate");
 function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata3, "_ts_metadata");
-var VrittiAuthGuard = class _VrittiAuthGuard {
+var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
   static {
-    __name(this, "VrittiAuthGuard");
+    __name(this, "MessageTenantContextInterceptor");
   }
-  reflector;
-  configService;
-  jwtService;
-  primaryDatabase;
-  requestService;
-  logger = new Logger2(_VrittiAuthGuard.name);
-  constructor(reflector, configService, jwtService, primaryDatabase, requestService) {
-    this.reflector = reflector;
-    this.configService = configService;
-    this.jwtService = jwtService;
-    this.primaryDatabase = primaryDatabase;
-    this.requestService = requestService;
+  tenantContext;
+  logger = new Logger3(_MessageTenantContextInterceptor.name);
+  constructor(tenantContext) {
+    this.tenantContext = tenantContext;
   }
-  async canActivate(context) {
-    const request = context.switchToHttp().getRequest();
-    const isPublic = this.reflector.getAllAndOverride("isPublic", [
-      context.getHandler(),
-      context.getClass()
-    ]);
-    if (isPublic) {
-      this.logger.debug("Public endpoint detected, skipping authentication");
-      return true;
-    }
-    const isOnboarding = this.reflector.getAllAndOverride("isOnboarding", [
-      context.getHandler(),
-      context.getClass()
-    ]);
-    try {
-      const accessToken = this.requestService.getAccessToken();
-      if (!accessToken) {
-        this.logger.warn("Access token not found in Authorization header");
-        throw new UnauthorizedException("Access token not found");
-      }
-      const decodedToken = this.jwtService.decode(accessToken);
-      if (!decodedToken) {
-        this.logger.warn("Failed to decode access token");
-        throw new UnauthorizedException("Invalid token format");
-      }
-      if (isOnboarding) {
-        if (decodedToken.type !== "onboarding") {
-          this.logger.warn("Onboarding endpoint requires onboarding token");
-          throw new UnauthorizedException("This endpoint requires an onboarding token");
+  intercept(context, next) {
+    const contextType = context.getType();
+    if (contextType === "rpc") {
+      const rpcContext = context.switchToRpc();
+      const payload = rpcContext.getData();
+      if (payload?.tenant) {
+        const tenant = payload.tenant;
+        this.logger.debug(`Setting tenant context from message: ${tenant.subdomain}`);
+        try {
+          this.tenantContext.setTenant(tenant);
+          this.logger.log(`Tenant context set: ${tenant.subdomain} (${tenant.type})`);
+        } catch (error) {
+          this.logger.error("Failed to set tenant context from message", error);
         }
-        const validatedToken2 = this.validateAccessToken(accessToken);
-        this.logger.debug("Onboarding token validated successfully");
-        this.validateRefreshTokenBinding(context, validatedToken2);
-        const userId2 = validatedToken2.userId;
-        request.user = {
-          id: userId2
-        };
-        return true;
-      }
-      if (decodedToken.type === "onboarding") {
-        this.logger.warn("Regular endpoint accessed with onboarding token");
-        throw new UnauthorizedException("Onboarding tokens cannot access this endpoint");
+      } else {
+        this.logger.warn("Message payload missing tenant information");
       }
-      const validatedToken = this.validateAccessToken(accessToken);
-      this.logger.debug("Access token validated successfully");
-      this.validateRefreshTokenBinding(context, validatedToken);
-      const userId = validatedToken.userId;
-      request.user = {
-        id: userId
-      };
+    }
+    return next.handle().pipe(tap({
+      next: /* @__PURE__ */ __name(() => {
+        this.cleanupContext();
+      }, "next"),
+      error: /* @__PURE__ */ __name(() => {
+        this.cleanupContext();
+      }, "error"),
+      complete: /* @__PURE__ */ __name(() => {
+        this.cleanupContext();
+      }, "complete")
+    }));
+  }
+  /**
+  * Clean up tenant context after message is processed
+  */
+  cleanupContext() {
+    if (this.tenantContext.hasTenant()) {
+      const tenant = this.tenantContext.getTenantIdSafe();
+      this.tenantContext.clearTenant();
+      this.logger.debug(`Cleaned up tenant context: ${tenant}`);
+    }
+  }
+};
+MessageTenantContextInterceptor = _ts_decorate5([
+  Injectable3({
+    scope: Scope3.REQUEST
+  }),
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
+    typeof TenantContextService === "undefined" ? Object : TenantContextService
+  ])
+], MessageTenantContextInterceptor);
+
+// src/database/interceptors/tenant-context.interceptor.ts
+import { Injectable as Injectable4, Logger as Logger4, Scope as Scope4, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata4(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata4, "_ts_metadata");
+var TenantContextInterceptor = class _TenantContextInterceptor {
+  static {
+    __name(this, "TenantContextInterceptor");
+  }
+  reflector;
+  tenantContext;
+  primaryDatabase;
+  requestService;
+  logger = new Logger4(_TenantContextInterceptor.name);
+  constructor(reflector, tenantContext, primaryDatabase, requestService) {
+    this.reflector = reflector;
+    this.tenantContext = tenantContext;
+    this.primaryDatabase = primaryDatabase;
+    this.requestService = requestService;
+  }
+  async intercept(context, next) {
+    const request = context.switchToHttp().getRequest();
+    this.logger.debug(`Processing request: ${request.method} ${request.url}`);
+    const isPublic = this.reflector.getAllAndOverride("isPublic", [
+      context.getHandler(),
+      context.getClass()
+    ]);
+    try {
       const tenantIdentifier = this.requestService.getTenantIdentifier();
+      if (isPublic && !tenantIdentifier) {
+        this.logger.debug("Public endpoint without tenant identifier, skipping tenant context setup");
+        return next.handle();
+      }
       if (!tenantIdentifier) {
-        this.logger.warn("Tenant identifier not found in request");
-        throw new UnauthorizedException("Tenant identifier not found");
+        throw new UnauthorizedException2("Tenant identifier not found in request");
       }
       this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
       if (tenantIdentifier === "cloud") {
-        this.logger.debug("Platform admin access detected, skipping tenant database validation");
-        return true;
+        this.logger.log("Cloud platform access detected, skipping tenant context setup");
+        return next.handle();
       }
       const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
       if (!tenantInfo) {
         this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
-        throw new UnauthorizedException("Invalid tenant");
+        throw new UnauthorizedException2("Invalid tenant");
       }
       if (tenantInfo.status !== "ACTIVE") {
         this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
-        throw new UnauthorizedException(`Tenant is ${tenantInfo.status}`);
-      }
-      this.logger.debug(`Tenant validated: ${tenantInfo.subdomain} (${tenantInfo.type})`);
-      return true;
-    } catch (error) {
-      if (error instanceof UnauthorizedException) {
-        throw error;
-      }
-      this.logger.error("Unexpected error in auth guard", error);
-      throw new UnauthorizedException("Authentication failed");
-    }
-  }
-  /**
-  * Validate access token with proper expiry checks
-  * Throws UnauthorizedException if token is invalid or expired
-  */
-  validateAccessToken(token) {
-    try {
-      const decoded = this.jwtService.verify(token);
-      this.logger.debug(`Access token decoded for user: ${decoded.userId}`);
-      if (decoded.exp) {
-        const expiryTime = decoded.exp * 1e3;
-        const currentTime = Date.now();
-        const timeRemaining = expiryTime - currentTime;
-        this.logger.debug(`Access token valid for ${Math.floor(timeRemaining / 1e3)} more seconds`);
+        throw new UnauthorizedException2(`Tenant is ${tenantInfo.status}`);
       }
-      return decoded;
+      this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
+      this.tenantContext.setTenant(tenantInfo);
+      request.tenant = tenantInfo;
+      this.logger.log(`Tenant context set: ${tenantInfo.subdomain}`);
     } catch (error) {
-      if (error instanceof UnauthorizedException) {
-        throw error;
-      }
-      const jwtError = error;
-      if (jwtError?.name === "TokenExpiredError") {
-        this.logger.warn(`Access token expired at: ${jwtError?.expiredAt}`);
-        throw new UnauthorizedException("Access token has expired");
-      }
-      if (jwtError?.name === "JsonWebTokenError") {
-        this.logger.warn(`Access token verification failed: ${jwtError?.message}`);
-        throw new UnauthorizedException("Invalid access token");
-      }
-      if (jwtError?.name === "NotBeforeError") {
-        this.logger.warn("Access token used before valid (nbf claim)");
-        throw new UnauthorizedException("Access token not yet valid");
-      }
-      this.logger.error("Unexpected error validating access token", error);
-      throw new UnauthorizedException("Access token validation failed");
-    }
-  }
-  /**
-  * Validate that the access token is bound to the refresh token in the cookie.
-  * This prevents token theft - a stolen access token is useless without the
-  * corresponding refresh token cookie.
-  *
-  * @param context - The execution context containing the request
-  * @param validatedToken - The decoded and validated JWT token
-  * @throws UnauthorizedException if token binding validation fails
-  */
-  validateRefreshTokenBinding(context, validatedToken) {
-    const config = getConfig();
-    if (!config.jwt.validateTokenBinding) {
-      this.logger.debug("Token binding validation is disabled");
-      return;
-    }
-    if (!validatedToken.refreshTokenHash) {
-      this.logger.debug("Token does not contain refreshTokenHash, skipping binding validation");
-      return;
-    }
-    const request = context.switchToHttp().getRequest();
-    const cookies = request.cookies || {};
-    const refreshToken = cookies[config.cookie.refreshCookieName];
-    if (!refreshToken) {
-      this.logger.warn("Session validation failed - refresh token cookie not found");
-      throw new UnauthorizedException("Session validation failed");
-    }
-    if (!verifyTokenHash(refreshToken, validatedToken.refreshTokenHash)) {
-      this.logger.warn("Session validation failed - token binding mismatch");
-      throw new UnauthorizedException("Session validation failed");
+      this.logger.error("Failed to set tenant context", error);
+      throw error;
     }
-    this.logger.debug("Token binding validated successfully");
+    return next.handle();
   }
 };
-VrittiAuthGuard = _ts_decorate4([
-  Injectable3({
-    scope: Scope2.REQUEST
+TenantContextInterceptor = _ts_decorate6([
+  Injectable4({
+    scope: Scope4.REQUEST
   }),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
     typeof Reflector === "undefined" ? Object : Reflector,
-    typeof ConfigService === "undefined" ? Object : ConfigService,
-    typeof JwtService === "undefined" ? Object : JwtService,
+    typeof TenantContextService === "undefined" ? Object : TenantContextService,
     typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
     typeof RequestService === "undefined" ? Object : RequestService
   ])
-], VrittiAuthGuard);
+], TenantContextInterceptor);
 
-// src/auth/auth-config.module.ts
-function _ts_decorate5(decorators, target, key, desc) {
+// src/database/services/primary-database.service.ts
+import { Inject as Inject2, Injectable as Injectable5, InternalServerErrorException, Logger as Logger5 } from "@nestjs/common";
+import { eq, or } from "drizzle-orm";
+import { drizzle } from "drizzle-orm/node-postgres";
+import { Pool } from "pg";
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-var AuthConfigModule = class _AuthConfigModule {
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata5(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata5, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var PrimaryDatabaseService2 = class _PrimaryDatabaseService {
   static {
-    __name(this, "AuthConfigModule");
+    __name(this, "PrimaryDatabaseService");
+  }
+  options;
+  logger = new Logger5(_PrimaryDatabaseService.name);
+  /** PostgreSQL connection pool */
+  pool = null;
+  /** Drizzle database instance */
+  db = null;
+  /** In-memory cache: Map<tenantIdentifier, TenantConfig> */
+  tenantConfigCache = /* @__PURE__ */ new Map();
+  /** Cache TTL in milliseconds */
+  cacheTTL;
+  constructor(options) {
+    this.options = options;
+    this.cacheTTL = options.connectionCacheTTL || 3e5;
+  }
+  async onModuleInit() {
+    if (this.options.primaryDb) {
+      await this.initializeDrizzleClient();
+    }
   }
   /**
-  * Register the auth module with async configuration
+  * Initialize connection to primary database using Drizzle
+  */
+  async initializeDrizzleClient() {
+    try {
+      const databaseUrl = this.buildPrimaryDbUrl();
+      this.pool = new Pool({
+        connectionString: databaseUrl,
+        max: this.options.maxConnections || 10
+      });
+      this.logger.debug(`Schema keys passed to drizzle: [${Object.keys(this.options.drizzleSchema || {}).join(", ")}]`);
+      this.logger.debug(`Relations keys passed to drizzle: [${Object.keys(this.options.drizzleRelations || {}).join(", ")}]`);
+      this.db = drizzle({
+        client: this.pool,
+        schema: this.options.drizzleSchema,
+        relations: this.options.drizzleRelations
+      });
+      this.logger.debug(`Drizzle query keys after init: [${Object.keys(this.db.query || {}).join(", ")}]`);
+      await this.pool.query("SELECT 1");
+      this.logger.log("Connected to primary database (tenant registry)");
+    } catch (error) {
+      this.logger.error("Failed to connect to primary database", error);
+      throw new InternalServerErrorException("Failed to initialize tenant registry");
+    }
+  }
+  /**
+  * Build connection URL from primary database properties
+  */
+  buildPrimaryDbUrl() {
+    if (!this.options.primaryDb) {
+      throw new Error("Primary database configuration not provided");
+    }
+    const { host, port = 5432, username, password, database, schema = "public", sslMode = "require" } = this.options.primaryDb;
+    let url = `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}`;
+    const params = new URLSearchParams();
+    if (schema) {
+      params.set("schema", schema);
+    }
+    params.set("sslmode", sslMode);
+    const queryString = params.toString();
+    if (queryString) {
+      url += `?${queryString}`;
+    }
+    this.logger.debug(`Primary DB connection URL: ${this.maskPassword(url)}`);
+    return url;
+  }
+  /**
+  * Mask password in connection URL for logging
+  */
+  maskPassword(url) {
+    return url.replace(/:([^@]+)@/, ":****@");
+  }
+  /**
+  * Get tenant configuration by identifier (ID or subdomain)
   *
-  * This method:
-  * 1. Configures JwtModule with JWT_SECRET from ConfigService
-  * 2. Provides VrittiAuthGuard globally (applies to all routes)
-  * 3. Exports JwtModule for use in other modules (e.g., for signing tokens)
+  * @param tenantIdentifier Tenant ID or subdomain
+  * @returns Tenant configuration or null if not found
+  */
+  async getTenantInfo(tenantIdentifier) {
+    const cached = this.tenantConfigCache.get(tenantIdentifier);
+    if (cached) {
+      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
+      return cached;
+    }
+    try {
+      if (!this.db) {
+        throw new Error("Primary database client not initialized");
+      }
+      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
+      const schema = this.options.drizzleSchema;
+      const { tenants, tenantDatabaseConfigs } = schema;
+      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, eq(tenants.id, tenantDatabaseConfigs.tenantId)).where(or(eq(tenants.id, tenantIdentifier), eq(tenants.subdomain, tenantIdentifier))).limit(1);
+      if (!result.length) {
+        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
+        return null;
+      }
+      const row = result[0];
+      const tenant = row.tenants;
+      const config = row.tenant_database_configs;
+      if (tenant.status !== "ACTIVE") {
+        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
+        return null;
+      }
+      const info = {
+        id: tenant.id,
+        subdomain: tenant.subdomain,
+        type: tenant.dbType,
+        status: tenant.status,
+        // For SHARED tenants: schema name
+        schemaName: config?.dbSchema || void 0,
+        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
+        databaseName: config?.dbName || void 0,
+        databaseHost: config?.dbHost || void 0,
+        databasePort: config?.dbPort || void 0,
+        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
+        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
+        databaseSslMode: config?.dbSslMode || void 0,
+        connectionPoolSize: config?.connectionPoolSize || void 0
+      };
+      this.cacheInfo(info);
+      return info;
+    } catch (error) {
+      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
+      throw new InternalServerErrorException("Failed to resolve tenant");
+    }
+  }
+  /**
+  * Cache tenant information with TTL
+  */
+  cacheInfo(info) {
+    this.tenantConfigCache.set(info.id, info);
+    this.tenantConfigCache.set(info.subdomain, info);
+    setTimeout(() => {
+      this.tenantConfigCache.delete(info.id);
+      this.tenantConfigCache.delete(info.subdomain);
+      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
+    }, this.cacheTTL);
+  }
+  /**
+  * Clear cached tenant information
   *
-  * @returns Dynamic module configuration
+  * Useful when tenant settings are updated and cache needs to be invalidated
+  *
+  * @param tenantIdentifier Tenant ID or subdomain
   */
-  static forRootAsync() {
-    return {
-      module: _AuthConfigModule,
-      imports: [
-        ConfigModule,
-        RequestModule,
-        JwtModule.registerAsync({
-          imports: [
-            ConfigModule
-          ],
-          inject: [
-            ConfigService2
-          ],
-          useFactory: /* @__PURE__ */ __name((config) => ({
-            secret: config.get("JWT_SECRET"),
-            signOptions: {
-              algorithm: "HS256"
-            }
-          }), "useFactory")
-        })
-      ],
-      providers: [
-        {
-          provide: APP_GUARD,
-          useClass: VrittiAuthGuard
-        }
-      ],
-      exports: [
-        JwtModule
-      ]
-    };
+  clearTenantCache(tenantIdentifier) {
+    const config = this.tenantConfigCache.get(tenantIdentifier);
+    if (config) {
+      this.tenantConfigCache.delete(config.id);
+      this.tenantConfigCache.delete(config.subdomain);
+      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
+    }
+  }
+  /**
+  * Clear all cached tenant configurations
+  */
+  clearAllCaches() {
+    const size = this.tenantConfigCache.size;
+    this.tenantConfigCache.clear();
+    this.logger.log(`Cleared ${size} cached tenant configs`);
+  }
+  /**
+  * Get the Drizzle database instance for the primary database.
+  * This is a synchronous property that returns the initialized Drizzle client.
+  *
+  * @returns Primary database Drizzle instance
+  * @throws Error if primary database client is not initialized
+  */
+  get drizzleClient() {
+    if (!this.db) {
+      throw new Error("Primary database client not initialized");
+    }
+    return this.db;
+  }
+  /**
+  * Get the Drizzle schema
+  */
+  get schema() {
+    return this.options.drizzleSchema;
+  }
+  /**
+  * Decrypt database credentials
+  *
+  * Override this method to implement your encryption strategy
+  *
+  * @param encrypted Encrypted value
+  * @returns Decrypted value
+  */
+  decrypt(encrypted) {
+    return encrypted;
+  }
+  async onModuleDestroy() {
+    if (this.pool) {
+      await this.pool.end();
+      this.logger.log("Disconnected from primary database");
+    }
   }
 };
-AuthConfigModule = _ts_decorate5([
-  Global2(),
-  Module2({})
-], AuthConfigModule);
-
-// src/database/database.module.ts
-import { Global as Global3, Module as Module3 } from "@nestjs/common";
-import { APP_INTERCEPTOR } from "@nestjs/core";
-
-// src/database/interceptors/message-tenant-context.interceptor.ts
-import { Injectable as Injectable5, Logger as Logger3, Scope as Scope4 } from "@nestjs/common";
-import { tap } from "rxjs/operators";
+PrimaryDatabaseService2 = _ts_decorate7([
+  Injectable5(),
+  _ts_param2(0, Inject2(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
+  ])
+], PrimaryDatabaseService2);
 
 // src/database/services/tenant-context.service.ts
-import { Injectable as Injectable4, Scope as Scope3, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
-function _ts_decorate6(decorators, target, key, desc) {
+import { Injectable as Injectable6, Scope as Scope5, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-var TenantContextService = class {
+__name(_ts_decorate8, "_ts_decorate");
+var TenantContextService2 = class {
   static {
     __name(this, "TenantContextService");
   }
@@ -763,7 +920,7 @@ var TenantContextService = class {
   */
   getTenant() {
     if (!this.tenantInfo) {
-      throw new UnauthorizedException2("Tenant context not set");
+      throw new UnauthorizedException3("Tenant context not set");
     }
     return this.tenantInfo;
   }
@@ -804,195 +961,40 @@ var TenantContextService = class {
     return this.tenantInfo?.subdomain ?? null;
   }
 };
-TenantContextService = _ts_decorate6([
-  Injectable4({
-    scope: Scope3.REQUEST
+TenantContextService2 = _ts_decorate8([
+  Injectable6({
+    scope: Scope5.REQUEST
   })
-], TenantContextService);
+], TenantContextService2);
 
-// src/database/interceptors/message-tenant-context.interceptor.ts
-function _ts_decorate7(decorators, target, key, desc) {
+// src/database/services/tenant-database.service.ts
+import { Inject as Inject3, Injectable as Injectable7, InternalServerErrorException as InternalServerErrorException2, Logger as Logger6 } from "@nestjs/common";
+import { drizzle as drizzle2 } from "drizzle-orm/node-postgres";
+import { Pool as Pool2 } from "pg";
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
-var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param3, "_ts_param");
+var TenantDatabaseService = class _TenantDatabaseService {
   static {
-    __name(this, "MessageTenantContextInterceptor");
+    __name(this, "TenantDatabaseService");
   }
+  options;
   tenantContext;
-  logger = new Logger3(_MessageTenantContextInterceptor.name);
-  constructor(tenantContext) {
-    this.tenantContext = tenantContext;
-  }
-  intercept(context, next) {
-    const contextType = context.getType();
-    if (contextType === "rpc") {
-      const rpcContext = context.switchToRpc();
-      const payload = rpcContext.getData();
-      if (payload && payload.tenant) {
-        const tenant = payload.tenant;
-        this.logger.debug(`Setting tenant context from message: ${tenant.subdomain}`);
-        try {
-          this.tenantContext.setTenant(tenant);
-          this.logger.log(`Tenant context set: ${tenant.subdomain} (${tenant.type})`);
-        } catch (error) {
-          this.logger.error("Failed to set tenant context from message", error);
-        }
-      } else {
-        this.logger.warn("Message payload missing tenant information");
-      }
-    }
-    return next.handle().pipe(tap({
-      next: /* @__PURE__ */ __name(() => {
-        this.cleanupContext();
-      }, "next"),
-      error: /* @__PURE__ */ __name(() => {
-        this.cleanupContext();
-      }, "error"),
-      complete: /* @__PURE__ */ __name(() => {
-        this.cleanupContext();
-      }, "complete")
-    }));
-  }
-  /**
-  * Clean up tenant context after message is processed
-  */
-  cleanupContext() {
-    if (this.tenantContext.hasTenant()) {
-      const tenant = this.tenantContext.getTenantIdSafe();
-      this.tenantContext.clearTenant();
-      this.logger.debug(`Cleaned up tenant context: ${tenant}`);
-    }
-  }
-};
-MessageTenantContextInterceptor = _ts_decorate7([
-  Injectable5({
-    scope: Scope4.REQUEST
-  }),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
-    typeof TenantContextService === "undefined" ? Object : TenantContextService
-  ])
-], MessageTenantContextInterceptor);
-
-// src/database/interceptors/tenant-context.interceptor.ts
-import { Injectable as Injectable6, Logger as Logger4, Scope as Scope5, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
-import { Reflector as Reflector2 } from "@nestjs/core";
-function _ts_decorate8(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata5(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata5, "_ts_metadata");
-var TenantContextInterceptor = class _TenantContextInterceptor {
-  static {
-    __name(this, "TenantContextInterceptor");
-  }
-  reflector;
-  tenantContext;
-  primaryDatabase;
-  requestService;
-  logger = new Logger4(_TenantContextInterceptor.name);
-  constructor(reflector, tenantContext, primaryDatabase, requestService) {
-    this.reflector = reflector;
-    this.tenantContext = tenantContext;
-    this.primaryDatabase = primaryDatabase;
-    this.requestService = requestService;
-  }
-  async intercept(context, next) {
-    const request = context.switchToHttp().getRequest();
-    this.logger.debug(`Processing request: ${request.method} ${request.url}`);
-    const isPublic = this.reflector.getAllAndOverride("isPublic", [
-      context.getHandler(),
-      context.getClass()
-    ]);
-    try {
-      const tenantIdentifier = this.requestService.getTenantIdentifier();
-      if (isPublic && !tenantIdentifier) {
-        this.logger.debug("Public endpoint without tenant identifier, skipping tenant context setup");
-        return next.handle();
-      }
-      if (!tenantIdentifier) {
-        throw new UnauthorizedException3("Tenant identifier not found in request");
-      }
-      this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
-      if (tenantIdentifier === "cloud") {
-        this.logger.log("Cloud platform access detected, skipping tenant context setup");
-        return next.handle();
-      }
-      const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
-      if (!tenantInfo) {
-        this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
-        throw new UnauthorizedException3("Invalid tenant");
-      }
-      if (tenantInfo.status !== "ACTIVE") {
-        this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
-        throw new UnauthorizedException3(`Tenant is ${tenantInfo.status}`);
-      }
-      this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
-      this.tenantContext.setTenant(tenantInfo);
-      request.tenant = tenantInfo;
-      this.logger.log(`Tenant context set: ${tenantInfo.subdomain}`);
-    } catch (error) {
-      this.logger.error("Failed to set tenant context", error);
-      throw error;
-    }
-    return next.handle();
-  }
-};
-TenantContextInterceptor = _ts_decorate8([
-  Injectable6({
-    scope: Scope5.REQUEST
-  }),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
-    typeof Reflector2 === "undefined" ? Object : Reflector2,
-    typeof TenantContextService === "undefined" ? Object : TenantContextService,
-    typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
-    typeof RequestService === "undefined" ? Object : RequestService
-  ])
-], TenantContextInterceptor);
-
-// src/database/services/tenant-database.service.ts
-import { Inject as Inject3, Injectable as Injectable7, InternalServerErrorException as InternalServerErrorException2, Logger as Logger5 } from "@nestjs/common";
-import { Pool as Pool2 } from "pg";
-import { drizzle as drizzle2 } from "drizzle-orm/node-postgres";
-function _ts_decorate9(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata6(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata6, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param3, "_ts_param");
-var TenantDatabaseService = class _TenantDatabaseService {
-  static {
-    __name(this, "TenantDatabaseService");
-  }
-  options;
-  tenantContext;
-  logger = new Logger5(_TenantDatabaseService.name);
+  logger = new Logger6(_TenantDatabaseService.name);
   /** Connection pool: Map<cacheKey, TenantConnection> */
   clients = /* @__PURE__ */ new Map();
   /** Track last usage time for idle connection cleanup */
@@ -1211,7 +1213,7 @@ var DatabaseModule = class _DatabaseModule {
   * })
   */
   static forServer(options) {
-    return this.createDynamicModule(options, "server");
+    return _DatabaseModule.createDynamicModule(options, "server");
   }
   /**
   * Configure DatabaseModule for Microservice/Messaging mode (RabbitMQ workers)
@@ -1233,7 +1235,7 @@ var DatabaseModule = class _DatabaseModule {
   * })
   */
   static forMicroservice(options) {
-    return this.createDynamicModule(options, "microservice");
+    return _DatabaseModule.createDynamicModule(options, "microservice");
   }
   /**
   * Internal helper to create dynamic module with conditional interceptor registration
@@ -1250,8 +1252,8 @@ var DatabaseModule = class _DatabaseModule {
     };
     const providers = [
       asyncProvider,
-      TenantContextService,
-      PrimaryDatabaseService,
+      TenantContextService2,
+      PrimaryDatabaseService2,
       TenantDatabaseService
     ];
     if (mode === "server") {
@@ -1273,8 +1275,8 @@ var DatabaseModule = class _DatabaseModule {
       providers,
       exports: [
         TenantDatabaseService,
-        TenantContextService,
-        PrimaryDatabaseService,
+        TenantContextService2,
+        PrimaryDatabaseService2,
         asyncProvider
       ]
     };
@@ -1285,9 +1287,20 @@ DatabaseModule = _ts_decorate10([
   Module3({})
 ], DatabaseModule);
 
+// src/database/decorators/tenant.decorator.ts
+import { createParamDecorator } from "@nestjs/common";
+var Tenant = createParamDecorator((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const tenantContext = request.app?.get?.(TenantContextService2);
+  if (!tenantContext) {
+    throw new Error("TenantContextService not found.");
+  }
+  return tenantContext.getTenant();
+});
+
 // src/database/repositories/primary-base.repository.ts
-import { Logger as Logger6 } from "@nestjs/common";
-import { eq as eq2, sql, getTableName } from "drizzle-orm";
+import { Logger as Logger7 } from "@nestjs/common";
+import { eq as eq2, getTableName, sql } from "drizzle-orm";
 function snakeToCamel(str) {
   return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
 }
@@ -1357,7 +1370,7 @@ var PrimaryBaseRepository = class {
     this.table = table;
     const dbTableName = getTableName(table);
     this.tableName = snakeToCamel(dbTableName);
-    this.logger = new Logger6(this.constructor.name);
+    this.logger = new Logger7(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
     this.logger.debug(`Table name: '${dbTableName}' -> query key: '${this.tableName}'`);
   }
@@ -1597,8 +1610,8 @@ var PrimaryBaseRepository = class {
 };
 
 // src/database/repositories/tenant-base.repository.ts
-import { Logger as Logger7 } from "@nestjs/common";
-import { eq as eq3, sql as sql2, getTableName as getTableName2 } from "drizzle-orm";
+import { Logger as Logger8 } from "@nestjs/common";
+import { eq as eq3, getTableName as getTableName2, sql as sql2 } from "drizzle-orm";
 var TenantBaseRepository = class {
   static {
     __name(this, "TenantBaseRepository");
@@ -1654,7 +1667,7 @@ var TenantBaseRepository = class {
     this.database = database;
     this.table = table;
     this.tableName = getTableName2(table);
-    this.logger = new Logger7(this.constructor.name);
+    this.logger = new Logger8(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
   }
   /**
@@ -1886,262 +1899,74 @@ var TenantBaseRepository = class {
   }
 };
 
-// src/database/decorators/tenant.decorator.ts
-import { createParamDecorator } from "@nestjs/common";
-var Tenant = createParamDecorator((data, ctx) => {
-  const request = ctx.switchToHttp().getRequest();
-  const tenantContext = request.app?.get?.(TenantContextService);
-  if (!tenantContext) {
-    throw new Error("TenantContextService not found.");
-  }
-  return tenantContext.getTenant();
-});
-
-// src/auth/decorators/onboarding.decorator.ts
-import { SetMetadata } from "@nestjs/common";
-var Onboarding = /* @__PURE__ */ __name(() => SetMetadata("isOnboarding", true), "Onboarding");
-
-// src/auth/decorators/public.decorator.ts
-import { SetMetadata as SetMetadata2 } from "@nestjs/common";
-var Public = /* @__PURE__ */ __name(() => SetMetadata2("isPublic", true), "Public");
+// src/exceptions/bad-gateway.exception.ts
+import { HttpStatus as HttpStatus2 } from "@nestjs/common";
 
-// src/http/http.module.ts
-import { Module as Module4 } from "@nestjs/common";
+// src/exceptions/base-field.exception.ts
+import { HttpException, HttpStatus } from "@nestjs/common";
+var BaseFieldException = class extends HttpException {
+  static {
+    __name(this, "BaseFieldException");
+  }
+  constructor(statusOrMessageOrErrors, messageOrStatus, statusOrDetail, detail) {
+    let errors;
+    let httpStatus;
+    let finalDetail;
+    if (Array.isArray(statusOrMessageOrErrors)) {
+      errors = statusOrMessageOrErrors;
+      httpStatus = messageOrStatus || HttpStatus.BAD_REQUEST;
+      finalDetail = typeof statusOrDetail === "string" ? statusOrDetail : void 0;
+    } else if (typeof statusOrMessageOrErrors === "string" && typeof messageOrStatus === "string") {
+      errors = [
+        {
+          field: statusOrMessageOrErrors,
+          message: messageOrStatus
+        }
+      ];
+      httpStatus = statusOrDetail;
+      finalDetail = detail;
+    } else if (typeof statusOrMessageOrErrors === "string") {
+      errors = [
+        {
+          message: statusOrMessageOrErrors
+        }
+      ];
+      httpStatus = messageOrStatus;
+      finalDetail = typeof statusOrDetail === "string" ? statusOrDetail : void 0;
+    } else {
+      errors = [
+        {
+          message: "An error occurred"
+        }
+      ];
+      httpStatus = statusOrMessageOrErrors;
+      finalDetail = void 0;
+    }
+    const response = finalDetail !== void 0 ? {
+      errors,
+      detail: finalDetail
+    } : {
+      errors
+    };
+    super(response, httpStatus);
+  }
+};
 
-// src/http/guards/csrf.guard.ts
-import { ForbiddenException, Injectable as Injectable8, Logger as Logger8 } from "@nestjs/common";
-import { Reflector as Reflector3 } from "@nestjs/core";
-function _ts_decorate11(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata7(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata7, "_ts_metadata");
-var CsrfGuard = class _CsrfGuard {
+// src/exceptions/bad-gateway.exception.ts
+var BadGatewayException = class extends BaseFieldException {
   static {
-    __name(this, "CsrfGuard");
+    __name(this, "BadGatewayException");
   }
-  reflector;
-  logger = new Logger8(_CsrfGuard.name);
-  constructor(reflector) {
-    this.reflector = reflector;
-  }
-  async canActivate(context) {
-    const request = context.switchToHttp().getRequest();
-    const reply = context.switchToHttp().getResponse();
-    const safeMethods = [
-      "GET",
-      "HEAD",
-      "OPTIONS"
-    ];
-    if (safeMethods.includes(request.method)) {
-      return true;
-    }
-    try {
-      const fastifyInstance = request.server;
-      if (!fastifyInstance.csrfProtection) {
-        this.logger.error("CSRF protection plugin not found. Ensure @fastify/csrf-protection is registered.");
-        throw new ForbiddenException("CSRF protection not configured");
-      }
-      await new Promise((resolve, reject) => {
-        fastifyInstance.csrfProtection(request, reply, (err) => {
-          if (err) {
-            reject(err);
-          } else {
-            resolve();
-          }
-        });
-      });
-      this.logger.debug(`CSRF validation successful for ${request.method} ${request.url}`);
-      return true;
-    } catch (error) {
-      this.logger.warn(`CSRF validation failed for ${request.method} ${request.url}: ${error instanceof Error ? error.message : "Unknown error"}`);
-      throw new ForbiddenException({
-        errors: [
-          {
-            field: "csrf",
-            message: "Invalid or missing CSRF token"
-          }
-        ],
-        message: "CSRF validation failed"
-      });
-    }
-  }
-};
-CsrfGuard = _ts_decorate11([
-  Injectable8(),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof Reflector3 === "undefined" ? Object : Reflector3
-  ])
-], CsrfGuard);
-
-// src/http/http.module.ts
-function _ts_decorate12(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate12, "_ts_decorate");
-var HttpModule = class {
-  static {
-    __name(this, "HttpModule");
-  }
-};
-HttpModule = _ts_decorate12([
-  Module4({
-    providers: [
-      CsrfGuard
-    ],
-    exports: [
-      CsrfGuard
-    ]
-  })
-], HttpModule);
-
-// src/filters/http-exception.filter.ts
-import { Catch, HttpException, HttpStatus, Logger as Logger9 } from "@nestjs/common";
-function _ts_decorate13(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate13, "_ts_decorate");
-function getHttpStatusTitle(status) {
-  const enumKey = Object.entries(HttpStatus).find(([key, value]) => value === status && isNaN(Number(key)))?.[0];
-  if (!enumKey) {
-    return "Error";
-  }
-  return enumKey.split("_").map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
-}
-__name(getHttpStatusTitle, "getHttpStatusTitle");
-var HttpExceptionFilter = class _HttpExceptionFilter {
-  static {
-    __name(this, "HttpExceptionFilter");
-  }
-  logger = new Logger9(_HttpExceptionFilter.name);
-  catch(exception, host) {
-    const ctx = host.switchToHttp();
-    const response = ctx.getResponse();
-    let status = HttpStatus.INTERNAL_SERVER_ERROR;
-    let errors = [];
-    let detail = "Internal server error";
-    if (exception instanceof HttpException) {
-      status = exception.getStatus();
-      const exceptionResponse = exception.getResponse();
-      if (typeof exceptionResponse === "object" && exceptionResponse !== null) {
-        const responseObj = exceptionResponse;
-        if ("errors" in responseObj && Array.isArray(responseObj.errors)) {
-          errors = responseObj.errors;
-          detail = ("detail" in responseObj ? responseObj.detail : void 0) || exception.message;
-        } else if ("message" in responseObj && Array.isArray(responseObj.message)) {
-          errors = responseObj.message.map((msg) => {
-            if (typeof msg === "object" && "property" in msg && "constraints" in msg) {
-              const constraintValues = Object.values(msg.constraints);
-              return {
-                field: msg.property,
-                message: constraintValues[0] ?? "Validation failed"
-              };
-            }
-            return {
-              message: typeof msg === "string" ? msg : JSON.stringify(msg)
-            };
-          });
-          detail = "Validation failed";
-        } else if ("message" in responseObj) {
-          const message = responseObj.message;
-          errors = [
-            {
-              message: Array.isArray(message) ? message.join(", ") : message
-            }
-          ];
-          detail = ("error" in responseObj ? responseObj.error : void 0) || exception.message;
-        }
-      } else if (typeof exceptionResponse === "string") {
-        errors = [
-          {
-            message: exceptionResponse
-          }
-        ];
-        detail = exceptionResponse;
-      }
-    } else {
-      const errorMessage = exception instanceof Error ? exception.message : "Unknown error";
-      const stack = exception instanceof Error ? exception.stack : void 0;
-      this.logger.error(`Unexpected error: ${errorMessage}`, stack);
-      errors = [
-        {
-          message: "An unexpected error occurred"
-        }
-      ];
-    }
-    const problemDetails = {
-      title: getHttpStatusTitle(status),
-      status,
-      detail,
-      errors
-    };
-    response.status(status).send(problemDetails);
-  }
-};
-HttpExceptionFilter = _ts_decorate13([
-  Catch()
-], HttpExceptionFilter);
-
-// src/exceptions/base-field.exception.ts
-import { HttpException as HttpException2, HttpStatus as HttpStatus2 } from "@nestjs/common";
-var BaseFieldException = class extends HttpException2 {
-  static {
-    __name(this, "BaseFieldException");
-  }
-  constructor(statusOrMessageOrErrors, messageOrStatus, statusOrDetail, detail) {
-    let errors;
-    let httpStatus;
-    let finalDetail;
-    if (Array.isArray(statusOrMessageOrErrors)) {
-      errors = statusOrMessageOrErrors;
-      httpStatus = messageOrStatus || HttpStatus2.BAD_REQUEST;
-      finalDetail = typeof statusOrDetail === "string" ? statusOrDetail : void 0;
-    } else if (typeof statusOrMessageOrErrors === "string" && typeof messageOrStatus === "string") {
-      errors = [
-        {
-          field: statusOrMessageOrErrors,
-          message: messageOrStatus
-        }
-      ];
-      httpStatus = statusOrDetail;
-      finalDetail = detail;
-    } else if (typeof statusOrMessageOrErrors === "string") {
-      errors = [
-        {
-          message: statusOrMessageOrErrors
-        }
-      ];
-      httpStatus = messageOrStatus;
-      finalDetail = typeof statusOrDetail === "string" ? statusOrDetail : void 0;
-    } else {
-      errors = [
-        {
-          message: "An error occurred"
-        }
-      ];
-      httpStatus = statusOrMessageOrErrors;
-      finalDetail = void 0;
-    }
-    const response = finalDetail !== void 0 ? {
-      errors,
-      detail: finalDetail
-    } : {
-      errors
-    };
-    super(response, httpStatus);
+  constructor(messageOrField, fieldMessageOrDetail, detail) {
+    if (Array.isArray(messageOrField)) {
+      super(messageOrField, HttpStatus2.BAD_GATEWAY, fieldMessageOrDetail);
+    } else if (detail !== void 0) {
+      super(messageOrField, fieldMessageOrDetail, HttpStatus2.BAD_GATEWAY, detail);
+    } else if (fieldMessageOrDetail) {
+      super(messageOrField, fieldMessageOrDetail, HttpStatus2.BAD_GATEWAY);
+    } else {
+      super(messageOrField, HttpStatus2.BAD_GATEWAY);
+    }
   }
 };
 
@@ -2164,28 +1989,28 @@ var BadRequestException = class extends BaseFieldException {
   }
 };
 
-// src/exceptions/unauthorized.exception.ts
+// src/exceptions/conflict.exception.ts
 import { HttpStatus as HttpStatus4 } from "@nestjs/common";
-var UnauthorizedException4 = class extends BaseFieldException {
+var ConflictException = class extends BaseFieldException {
   static {
-    __name(this, "UnauthorizedException");
+    __name(this, "ConflictException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus4.UNAUTHORIZED, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus4.CONFLICT, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus4.UNAUTHORIZED, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus4.CONFLICT, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus4.UNAUTHORIZED);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus4.CONFLICT);
     } else {
-      super(messageOrField, HttpStatus4.UNAUTHORIZED);
+      super(messageOrField, HttpStatus4.CONFLICT);
     }
   }
 };
 
 // src/exceptions/forbidden.exception.ts
 import { HttpStatus as HttpStatus5 } from "@nestjs/common";
-var ForbiddenException2 = class extends BaseFieldException {
+var ForbiddenException = class extends BaseFieldException {
   static {
     __name(this, "ForbiddenException");
   }
@@ -2202,222 +2027,230 @@ var ForbiddenException2 = class extends BaseFieldException {
   }
 };
 
-// src/exceptions/not-found.exception.ts
+// src/exceptions/gone.exception.ts
 import { HttpStatus as HttpStatus6 } from "@nestjs/common";
-var NotFoundException = class extends BaseFieldException {
+var GoneException = class extends BaseFieldException {
   static {
-    __name(this, "NotFoundException");
+    __name(this, "GoneException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus6.NOT_FOUND, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus6.GONE, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus6.NOT_FOUND, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus6.GONE, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus6.NOT_FOUND);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus6.GONE);
     } else {
-      super(messageOrField, HttpStatus6.NOT_FOUND);
+      super(messageOrField, HttpStatus6.GONE);
     }
   }
 };
 
-// src/exceptions/conflict.exception.ts
+// src/exceptions/internal-server-error.exception.ts
 import { HttpStatus as HttpStatus7 } from "@nestjs/common";
-var ConflictException = class extends BaseFieldException {
+var InternalServerErrorException3 = class extends BaseFieldException {
   static {
-    __name(this, "ConflictException");
+    __name(this, "InternalServerErrorException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus7.CONFLICT, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus7.INTERNAL_SERVER_ERROR, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus7.CONFLICT, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus7.INTERNAL_SERVER_ERROR, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus7.CONFLICT);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus7.INTERNAL_SERVER_ERROR);
     } else {
-      super(messageOrField, HttpStatus7.CONFLICT);
+      super(messageOrField, HttpStatus7.INTERNAL_SERVER_ERROR);
     }
   }
 };
 
-// src/exceptions/internal-server-error.exception.ts
+// src/exceptions/method-not-allowed.exception.ts
 import { HttpStatus as HttpStatus8 } from "@nestjs/common";
-var InternalServerErrorException3 = class extends BaseFieldException {
+var MethodNotAllowedException = class extends BaseFieldException {
   static {
-    __name(this, "InternalServerErrorException");
+    __name(this, "MethodNotAllowedException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus8.INTERNAL_SERVER_ERROR, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus8.METHOD_NOT_ALLOWED, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus8.INTERNAL_SERVER_ERROR, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus8.METHOD_NOT_ALLOWED, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus8.INTERNAL_SERVER_ERROR);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus8.METHOD_NOT_ALLOWED);
     } else {
-      super(messageOrField, HttpStatus8.INTERNAL_SERVER_ERROR);
+      super(messageOrField, HttpStatus8.METHOD_NOT_ALLOWED);
     }
   }
 };
 
-// src/exceptions/validation.exception.ts
+// src/exceptions/not-acceptable.exception.ts
 import { HttpStatus as HttpStatus9 } from "@nestjs/common";
-var ValidationException = class extends BaseFieldException {
+var NotAcceptableException = class extends BaseFieldException {
   static {
-    __name(this, "ValidationException");
+    __name(this, "NotAcceptableException");
   }
-  constructor(errors, detail) {
-    super(errors, HttpStatus9.BAD_REQUEST, detail);
+  constructor(messageOrField, fieldMessageOrDetail, detail) {
+    if (Array.isArray(messageOrField)) {
+      super(messageOrField, HttpStatus9.NOT_ACCEPTABLE, fieldMessageOrDetail);
+    } else if (detail !== void 0) {
+      super(messageOrField, fieldMessageOrDetail, HttpStatus9.NOT_ACCEPTABLE, detail);
+    } else if (fieldMessageOrDetail) {
+      super(messageOrField, fieldMessageOrDetail, HttpStatus9.NOT_ACCEPTABLE);
+    } else {
+      super(messageOrField, HttpStatus9.NOT_ACCEPTABLE);
+    }
   }
 };
 
-// src/exceptions/unprocessable-entity.exception.ts
+// src/exceptions/not-found.exception.ts
 import { HttpStatus as HttpStatus10 } from "@nestjs/common";
-var UnprocessableEntityException = class extends BaseFieldException {
+var NotFoundException = class extends BaseFieldException {
   static {
-    __name(this, "UnprocessableEntityException");
+    __name(this, "NotFoundException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus10.UNPROCESSABLE_ENTITY, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus10.NOT_FOUND, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus10.UNPROCESSABLE_ENTITY, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus10.NOT_FOUND, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus10.UNPROCESSABLE_ENTITY);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus10.NOT_FOUND);
     } else {
-      super(messageOrField, HttpStatus10.UNPROCESSABLE_ENTITY);
+      super(messageOrField, HttpStatus10.NOT_FOUND);
     }
   }
 };
 
-// src/exceptions/too-many-requests.exception.ts
+// src/exceptions/not-implemented.exception.ts
 import { HttpStatus as HttpStatus11 } from "@nestjs/common";
-var TooManyRequestsException = class extends BaseFieldException {
+var NotImplementedException = class extends BaseFieldException {
   static {
-    __name(this, "TooManyRequestsException");
+    __name(this, "NotImplementedException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus11.TOO_MANY_REQUESTS, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus11.NOT_IMPLEMENTED, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus11.TOO_MANY_REQUESTS, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus11.NOT_IMPLEMENTED, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus11.TOO_MANY_REQUESTS);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus11.NOT_IMPLEMENTED);
     } else {
-      super(messageOrField, HttpStatus11.TOO_MANY_REQUESTS);
+      super(messageOrField, HttpStatus11.NOT_IMPLEMENTED);
     }
   }
 };
 
-// src/exceptions/service-unavailable.exception.ts
+// src/exceptions/payload-too-large.exception.ts
 import { HttpStatus as HttpStatus12 } from "@nestjs/common";
-var ServiceUnavailableException = class extends BaseFieldException {
+var PayloadTooLargeException = class extends BaseFieldException {
   static {
-    __name(this, "ServiceUnavailableException");
+    __name(this, "PayloadTooLargeException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus12.SERVICE_UNAVAILABLE, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus12.PAYLOAD_TOO_LARGE, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus12.SERVICE_UNAVAILABLE, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus12.PAYLOAD_TOO_LARGE, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus12.SERVICE_UNAVAILABLE);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus12.PAYLOAD_TOO_LARGE);
     } else {
-      super(messageOrField, HttpStatus12.SERVICE_UNAVAILABLE);
+      super(messageOrField, HttpStatus12.PAYLOAD_TOO_LARGE);
     }
   }
 };
 
-// src/exceptions/method-not-allowed.exception.ts
+// src/exceptions/request-timeout.exception.ts
 import { HttpStatus as HttpStatus13 } from "@nestjs/common";
-var MethodNotAllowedException = class extends BaseFieldException {
+var RequestTimeoutException = class extends BaseFieldException {
   static {
-    __name(this, "MethodNotAllowedException");
+    __name(this, "RequestTimeoutException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus13.METHOD_NOT_ALLOWED, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus13.REQUEST_TIMEOUT, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus13.METHOD_NOT_ALLOWED, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus13.REQUEST_TIMEOUT, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus13.METHOD_NOT_ALLOWED);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus13.REQUEST_TIMEOUT);
     } else {
-      super(messageOrField, HttpStatus13.METHOD_NOT_ALLOWED);
+      super(messageOrField, HttpStatus13.REQUEST_TIMEOUT);
     }
   }
 };
 
-// src/exceptions/gone.exception.ts
+// src/exceptions/service-unavailable.exception.ts
 import { HttpStatus as HttpStatus14 } from "@nestjs/common";
-var GoneException = class extends BaseFieldException {
+var ServiceUnavailableException = class extends BaseFieldException {
   static {
-    __name(this, "GoneException");
+    __name(this, "ServiceUnavailableException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus14.GONE, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus14.SERVICE_UNAVAILABLE, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus14.GONE, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus14.SERVICE_UNAVAILABLE, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus14.GONE);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus14.SERVICE_UNAVAILABLE);
     } else {
-      super(messageOrField, HttpStatus14.GONE);
+      super(messageOrField, HttpStatus14.SERVICE_UNAVAILABLE);
     }
   }
 };
 
-// src/exceptions/not-acceptable.exception.ts
+// src/exceptions/too-many-requests.exception.ts
 import { HttpStatus as HttpStatus15 } from "@nestjs/common";
-var NotAcceptableException = class extends BaseFieldException {
+var TooManyRequestsException = class extends BaseFieldException {
   static {
-    __name(this, "NotAcceptableException");
+    __name(this, "TooManyRequestsException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus15.NOT_ACCEPTABLE, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus15.TOO_MANY_REQUESTS, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus15.NOT_ACCEPTABLE, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus15.TOO_MANY_REQUESTS, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus15.NOT_ACCEPTABLE);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus15.TOO_MANY_REQUESTS);
     } else {
-      super(messageOrField, HttpStatus15.NOT_ACCEPTABLE);
+      super(messageOrField, HttpStatus15.TOO_MANY_REQUESTS);
     }
   }
 };
 
-// src/exceptions/request-timeout.exception.ts
+// src/exceptions/unauthorized.exception.ts
 import { HttpStatus as HttpStatus16 } from "@nestjs/common";
-var RequestTimeoutException = class extends BaseFieldException {
+var UnauthorizedException4 = class extends BaseFieldException {
   static {
-    __name(this, "RequestTimeoutException");
+    __name(this, "UnauthorizedException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus16.REQUEST_TIMEOUT, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus16.UNAUTHORIZED, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus16.REQUEST_TIMEOUT, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus16.UNAUTHORIZED, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus16.REQUEST_TIMEOUT);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus16.UNAUTHORIZED);
     } else {
-      super(messageOrField, HttpStatus16.REQUEST_TIMEOUT);
+      super(messageOrField, HttpStatus16.UNAUTHORIZED);
     }
   }
 };
 
-// src/exceptions/payload-too-large.exception.ts
+// src/exceptions/unprocessable-entity.exception.ts
 import { HttpStatus as HttpStatus17 } from "@nestjs/common";
-var PayloadTooLargeException = class extends BaseFieldException {
+var UnprocessableEntityException = class extends BaseFieldException {
   static {
-    __name(this, "PayloadTooLargeException");
+    __name(this, "UnprocessableEntityException");
   }
   constructor(messageOrField, fieldMessageOrDetail, detail) {
     if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus17.PAYLOAD_TOO_LARGE, fieldMessageOrDetail);
+      super(messageOrField, HttpStatus17.UNPROCESSABLE_ENTITY, fieldMessageOrDetail);
     } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus17.PAYLOAD_TOO_LARGE, detail);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus17.UNPROCESSABLE_ENTITY, detail);
     } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus17.PAYLOAD_TOO_LARGE);
+      super(messageOrField, fieldMessageOrDetail, HttpStatus17.UNPROCESSABLE_ENTITY);
     } else {
-      super(messageOrField, HttpStatus17.PAYLOAD_TOO_LARGE);
+      super(messageOrField, HttpStatus17.UNPROCESSABLE_ENTITY);
     }
   }
 };
@@ -2441,103 +2274,445 @@ var UnsupportedMediaTypeException = class extends BaseFieldException {
   }
 };
 
-// src/exceptions/not-implemented.exception.ts
+// src/exceptions/validation.exception.ts
 import { HttpStatus as HttpStatus19 } from "@nestjs/common";
-var NotImplementedException = class extends BaseFieldException {
+var ValidationException = class extends BaseFieldException {
   static {
-    __name(this, "NotImplementedException");
+    __name(this, "ValidationException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus19.NOT_IMPLEMENTED, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus19.NOT_IMPLEMENTED, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus19.NOT_IMPLEMENTED);
+  constructor(errors, detail) {
+    super(errors, HttpStatus19.BAD_REQUEST, detail);
+  }
+};
+
+// src/filters/http-exception.filter.ts
+import { Catch, HttpException as HttpException2, HttpStatus as HttpStatus20, Logger as Logger9 } from "@nestjs/common";
+function _ts_decorate11(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate11, "_ts_decorate");
+function getHttpStatusTitle(status) {
+  const enumKey = Object.entries(HttpStatus20).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
+  if (!enumKey) {
+    return "Error";
+  }
+  return enumKey.split("_").map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
+}
+__name(getHttpStatusTitle, "getHttpStatusTitle");
+var HttpExceptionFilter = class _HttpExceptionFilter {
+  static {
+    __name(this, "HttpExceptionFilter");
+  }
+  logger = new Logger9(_HttpExceptionFilter.name);
+  catch(exception, host) {
+    const ctx = host.switchToHttp();
+    const response = ctx.getResponse();
+    let status = HttpStatus20.INTERNAL_SERVER_ERROR;
+    let errors = [];
+    let detail = "Internal server error";
+    if (exception instanceof HttpException2) {
+      status = exception.getStatus();
+      const exceptionResponse = exception.getResponse();
+      if (typeof exceptionResponse === "object" && exceptionResponse !== null) {
+        const responseObj = exceptionResponse;
+        if ("errors" in responseObj && Array.isArray(responseObj.errors)) {
+          errors = responseObj.errors;
+          detail = ("detail" in responseObj ? responseObj.detail : void 0) || exception.message;
+        } else if ("message" in responseObj && Array.isArray(responseObj.message)) {
+          errors = responseObj.message.map((msg) => {
+            if (typeof msg === "object" && "property" in msg && "constraints" in msg) {
+              const constraintValues = Object.values(msg.constraints);
+              return {
+                field: msg.property,
+                message: constraintValues[0] ?? "Validation failed"
+              };
+            }
+            return {
+              message: typeof msg === "string" ? msg : JSON.stringify(msg)
+            };
+          });
+          detail = "Validation failed";
+        } else if ("message" in responseObj) {
+          const message = responseObj.message;
+          errors = [
+            {
+              message: Array.isArray(message) ? message.join(", ") : message
+            }
+          ];
+          detail = ("error" in responseObj ? responseObj.error : void 0) || exception.message;
+        }
+      } else if (typeof exceptionResponse === "string") {
+        errors = [
+          {
+            message: exceptionResponse
+          }
+        ];
+        detail = exceptionResponse;
+      }
     } else {
-      super(messageOrField, HttpStatus19.NOT_IMPLEMENTED);
+      const errorMessage = exception instanceof Error ? exception.message : "Unknown error";
+      const stack = exception instanceof Error ? exception.stack : void 0;
+      this.logger.error(`Unexpected error: ${errorMessage}`, stack);
+      errors = [
+        {
+          message: "An unexpected error occurred"
+        }
+      ];
     }
+    const problemDetails = {
+      title: getHttpStatusTitle(status),
+      status,
+      detail,
+      errors
+    };
+    response.status(status).send(problemDetails);
   }
 };
+HttpExceptionFilter = _ts_decorate11([
+  Catch()
+], HttpExceptionFilter);
 
-// src/exceptions/bad-gateway.exception.ts
-import { HttpStatus as HttpStatus20 } from "@nestjs/common";
-var BadGatewayException = class extends BaseFieldException {
+// src/http/guards/csrf.guard.ts
+import { ForbiddenException as ForbiddenException2, Injectable as Injectable8, Logger as Logger10 } from "@nestjs/common";
+function _ts_decorate12(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate12, "_ts_decorate");
+var CsrfGuard = class _CsrfGuard {
   static {
-    __name(this, "BadGatewayException");
+    __name(this, "CsrfGuard");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus20.BAD_GATEWAY, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus20.BAD_GATEWAY, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus20.BAD_GATEWAY);
-    } else {
-      super(messageOrField, HttpStatus20.BAD_GATEWAY);
+  logger = new Logger10(_CsrfGuard.name);
+  async canActivate(context) {
+    const request = context.switchToHttp().getRequest();
+    const reply = context.switchToHttp().getResponse();
+    const safeMethods = [
+      "GET",
+      "HEAD",
+      "OPTIONS"
+    ];
+    if (safeMethods.includes(request.method)) {
+      return true;
+    }
+    try {
+      const fastifyInstance = request.server;
+      if (!fastifyInstance.csrfProtection) {
+        this.logger.error("CSRF protection plugin not found. Ensure @fastify/csrf-protection is registered.");
+        throw new ForbiddenException2("CSRF protection not configured");
+      }
+      await new Promise((resolve, reject) => {
+        fastifyInstance.csrfProtection(request, reply, (err) => {
+          if (err) {
+            reject(err);
+          } else {
+            resolve();
+          }
+        });
+      });
+      this.logger.debug(`CSRF validation successful for ${request.method} ${request.url}`);
+      return true;
+    } catch (error) {
+      this.logger.warn(`CSRF validation failed for ${request.method} ${request.url}: ${error instanceof Error ? error.message : "Unknown error"}`);
+      throw new ForbiddenException2({
+        errors: [
+          {
+            field: "csrf",
+            message: "Invalid or missing CSRF token"
+          }
+        ],
+        message: "CSRF validation failed"
+      });
+    }
+  }
+};
+CsrfGuard = _ts_decorate12([
+  Injectable8()
+], CsrfGuard);
+
+// src/http/http.module.ts
+import { Module as Module4 } from "@nestjs/common";
+function _ts_decorate13(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate13, "_ts_decorate");
+var HttpModule = class {
+  static {
+    __name(this, "HttpModule");
+  }
+};
+HttpModule = _ts_decorate13([
+  Module4({
+    providers: [
+      CsrfGuard
+    ],
+    exports: [
+      CsrfGuard
+    ]
+  })
+], HttpModule);
+
+// src/logger/interceptors/http-logger.interceptor.ts
+import { Injectable as Injectable9, Optional } from "@nestjs/common";
+import { catchError, tap as tap2 } from "rxjs/operators";
+
+// src/logger/utils/index.ts
+import { AsyncLocalStorage } from "async_hooks";
+import { randomUUID } from "crypto";
+var correlationStorage = new AsyncLocalStorage();
+function getCorrelationContext() {
+  return correlationStorage.getStore();
+}
+__name(getCorrelationContext, "getCorrelationContext");
+function runWithCorrelationContext(context, callback) {
+  return correlationStorage.run(context, callback);
+}
+__name(runWithCorrelationContext, "runWithCorrelationContext");
+function updateCorrelationContext(updates) {
+  const context = correlationStorage.getStore();
+  if (context) {
+    Object.assign(context, updates);
+  }
+}
+__name(updateCorrelationContext, "updateCorrelationContext");
+var DEFAULT_CORRELATION_HEADER = "x-correlation-id";
+function generateCorrelationId() {
+  return randomUUID();
+}
+__name(generateCorrelationId, "generateCorrelationId");
+function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_CORRELATION_HEADER) {
+  if (typeof reply.header === "function") {
+    reply.header(headerName, correlationId);
+  } else if (reply.raw && typeof reply.raw.setHeader === "function") {
+    reply.raw.setHeader(headerName, correlationId);
+  }
+}
+__name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
+
+// src/logger/interceptors/http-logger.interceptor.ts
+function _ts_decorate14(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata7(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param4, "_ts_param");
+var HttpLoggerInterceptor = class {
+  static {
+    __name(this, "HttpLoggerInterceptor");
+  }
+  logger;
+  enableRequestLog;
+  enableResponseLog;
+  slowRequestThreshold;
+  constructor(logger, options) {
+    this.logger = logger;
+    this.enableRequestLog = options?.enableRequestLog ?? true;
+    this.enableResponseLog = options?.enableResponseLog ?? true;
+    this.slowRequestThreshold = options?.slowRequestThreshold ?? 3e3;
+  }
+  intercept(context, next) {
+    if (context.getType() !== "http") {
+      return next.handle();
+    }
+    const httpContext = context.switchToHttp();
+    const request = httpContext.getRequest();
+    const response = httpContext.getResponse();
+    const startTime = Date.now();
+    if (this.enableRequestLog) {
+      this.logRequest(request);
+    }
+    return next.handle().pipe(tap2(() => {
+      if (this.enableResponseLog) {
+        const duration = Date.now() - startTime;
+        this.logResponse(request, response, duration);
+      }
+    }), catchError((error) => {
+      const duration = Date.now() - startTime;
+      this.logError(request, response, duration, error);
+      throw error;
+    }));
+  }
+  logRequest(request) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const metadata = {
+        type: "http_request",
+        method: request.method,
+        url: request.url,
+        correlationId: correlationContext?.correlationId,
+        ip: request.ip,
+        userAgent: request.headers["user-agent"]
+      };
+      this.logger.logWithMetadata("log", `Incoming ${request.method} ${request.url}`, metadata);
+    } catch (error) {
+      this.logger.error("Failed to log HTTP request", error.stack);
+    }
+  }
+  logResponse(request, response, duration) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const statusCode = response.statusCode;
+      const logLevel = statusCode >= 500 ? "error" : statusCode >= 400 ? "warn" : "log";
+      const metadata = {
+        type: "http_response",
+        method: request.method,
+        url: request.url,
+        statusCode,
+        duration,
+        correlationId: correlationContext?.correlationId
+      };
+      if (duration > this.slowRequestThreshold) {
+        metadata.slowRequest = true;
+      }
+      const message = metadata.slowRequest ? `SLOW ${request.method} ${request.url} ${statusCode} - ${duration}ms` : `${request.method} ${request.url} ${statusCode} - ${duration}ms`;
+      this.logger.logWithMetadata(logLevel, message, metadata);
+    } catch (error) {
+      this.logger.error("Failed to log HTTP response", error.stack);
+    }
+  }
+  logError(request, response, duration, error) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const statusCode = response.statusCode || 500;
+      const metadata = {
+        type: "http_error",
+        method: request.method,
+        url: request.url,
+        statusCode,
+        duration,
+        correlationId: correlationContext?.correlationId,
+        errorName: error?.name || "Error",
+        errorMessage: error?.message || "Unknown error"
+      };
+      if (error?.stack) {
+        metadata.trace = error.stack;
+      }
+      if (error?.response) {
+        metadata.errorDetails = error.response;
+      }
+      const message = `ERROR ${request.method} ${request.url} ${statusCode} - ${error?.message || "Unknown error"}`;
+      this.logger.logWithMetadata("error", message, metadata);
+    } catch (loggingError) {
+      this.logger.error("Failed to log HTTP error", loggingError.stack);
+    }
+  }
+};
+HttpLoggerInterceptor = _ts_decorate14([
+  Injectable9(),
+  _ts_param4(1, Optional()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof LoggerService === "undefined" ? Object : LoggerService,
+    typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
+  ])
+], HttpLoggerInterceptor);
+
+// src/logger/logger.module.ts
+import { Global as Global4, Logger as Logger11, Module as Module5 } from "@nestjs/common";
+
+// src/logger/middleware/correlation-id.middleware.ts
+import { Injectable as Injectable10 } from "@nestjs/common";
+function _ts_decorate15(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+var CorrelationIdMiddleware = class {
+  static {
+    __name(this, "CorrelationIdMiddleware");
+  }
+  includeInResponse;
+  responseHeader;
+  constructor(options = {}) {
+    this.includeInResponse = options.includeInResponse ?? true;
+    this.responseHeader = options.responseHeader ?? DEFAULT_CORRELATION_HEADER;
+  }
+  /**
+  * Middleware handler for processing requests.
+  */
+  use(_req, reply, next) {
+    const correlationId = generateCorrelationId();
+    if (this.includeInResponse) {
+      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
+    }
+    runWithCorrelationContext({
+      correlationId
+    }, () => {
+      next();
+    });
+  }
+  /**
+  * Fastify hook handler for onRequest.
+  * This is an async function that returns a Promise, ensuring the AsyncLocalStorage
+  * context persists throughout the entire request lifecycle.
+  */
+  async onRequest(_req, reply) {
+    const correlationId = generateCorrelationId();
+    if (this.includeInResponse) {
+      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
+    }
+    const store = correlationStorage.getStore();
+    if (!store) {
+      correlationStorage.enterWith({
+        correlationId
+      });
     }
   }
 };
-
-// src/logger/logger.module.ts
-import { Global as Global4, Module as Module5, Logger as Logger11 } from "@nestjs/common";
+CorrelationIdMiddleware = _ts_decorate15([
+  Injectable10(),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
+  ])
+], CorrelationIdMiddleware);
 
 // src/logger/services/logger.service.ts
-import { Injectable as Injectable9, Logger as Logger10, Optional } from "@nestjs/common";
+import { Injectable as Injectable11, Optional as Optional2 } from "@nestjs/common";
 import { createLogger, format, transports } from "winston";
 import DailyRotateFile from "winston-daily-rotate-file";
-
-// src/logger/utils/index.ts
-import { AsyncLocalStorage } from "async_hooks";
-import { randomUUID } from "crypto";
-var correlationStorage = new AsyncLocalStorage();
-function getCorrelationContext() {
-  return correlationStorage.getStore();
-}
-__name(getCorrelationContext, "getCorrelationContext");
-function runWithCorrelationContext(context, callback) {
-  return correlationStorage.run(context, callback);
-}
-__name(runWithCorrelationContext, "runWithCorrelationContext");
-function updateCorrelationContext(updates) {
-  const context = correlationStorage.getStore();
-  if (context) {
-    Object.assign(context, updates);
-  }
-}
-__name(updateCorrelationContext, "updateCorrelationContext");
-var DEFAULT_CORRELATION_HEADER = "x-correlation-id";
-function generateCorrelationId() {
-  return randomUUID();
-}
-__name(generateCorrelationId, "generateCorrelationId");
-function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_CORRELATION_HEADER) {
-  if (typeof reply.header === "function") {
-    reply.header(headerName, correlationId);
-  } else if (reply.raw && typeof reply.raw.setHeader === "function") {
-    reply.raw.setHeader(headerName, correlationId);
-  }
-}
-__name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
-
-// src/logger/services/logger.service.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var LoggerService2 = class _LoggerService {
   static {
     __name(this, "LoggerService");
@@ -2590,7 +2765,8 @@ var LoggerService2 = class _LoggerService {
         ].filter(Boolean);
         let output = parts.join(" ");
         if (trace) {
-          output += "\n" + trace;
+          output += `
+${trace}`;
         }
         return output;
       }), format.colorize({
@@ -2738,210 +2914,16 @@ var LoggerService2 = class _LoggerService {
     return childLogger;
   }
 };
-LoggerService2 = _ts_decorate14([
-  Injectable9(),
-  _ts_param4(0, Optional()),
-  _ts_param4(1, Optional()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
-    typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
-    typeof Logger10 === "undefined" ? Object : Logger10
-  ])
-], LoggerService2);
-
-// src/logger/middleware/correlation-id.middleware.ts
-import { Injectable as Injectable10 } from "@nestjs/common";
-function _ts_decorate15(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata9(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata9, "_ts_metadata");
-var CorrelationIdMiddleware = class {
-  static {
-    __name(this, "CorrelationIdMiddleware");
-  }
-  includeInResponse;
-  responseHeader;
-  constructor(options = {}) {
-    this.includeInResponse = options.includeInResponse ?? true;
-    this.responseHeader = options.responseHeader ?? DEFAULT_CORRELATION_HEADER;
-  }
-  /**
-  * Middleware handler for processing requests.
-  */
-  use(req, reply, next) {
-    const correlationId = generateCorrelationId();
-    if (this.includeInResponse) {
-      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
-    }
-    runWithCorrelationContext({
-      correlationId
-    }, () => {
-      next();
-    });
-  }
-  /**
-  * Fastify hook handler for onRequest.
-  * This is an async function that returns a Promise, ensuring the AsyncLocalStorage
-  * context persists throughout the entire request lifecycle.
-  */
-  async onRequest(req, reply) {
-    const correlationId = generateCorrelationId();
-    if (this.includeInResponse) {
-      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
-    }
-    const store = correlationStorage.getStore();
-    if (!store) {
-      correlationStorage.enterWith({
-        correlationId
-      });
-    }
-  }
-};
-CorrelationIdMiddleware = _ts_decorate15([
-  Injectable10(),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
-    typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
-  ])
-], CorrelationIdMiddleware);
-
-// src/logger/interceptors/http-logger.interceptor.ts
-import { Injectable as Injectable11, Optional as Optional2 } from "@nestjs/common";
-import { tap as tap2, catchError } from "rxjs/operators";
-function _ts_decorate16(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata10(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param5, "_ts_param");
-var HttpLoggerInterceptor = class {
-  static {
-    __name(this, "HttpLoggerInterceptor");
-  }
-  logger;
-  enableRequestLog;
-  enableResponseLog;
-  slowRequestThreshold;
-  constructor(logger, options) {
-    this.logger = logger;
-    this.enableRequestLog = options?.enableRequestLog ?? true;
-    this.enableResponseLog = options?.enableResponseLog ?? true;
-    this.slowRequestThreshold = options?.slowRequestThreshold ?? 3e3;
-  }
-  intercept(context, next) {
-    if (context.getType() !== "http") {
-      return next.handle();
-    }
-    const httpContext = context.switchToHttp();
-    const request = httpContext.getRequest();
-    const response = httpContext.getResponse();
-    const startTime = Date.now();
-    if (this.enableRequestLog) {
-      this.logRequest(request);
-    }
-    return next.handle().pipe(tap2(() => {
-      if (this.enableResponseLog) {
-        const duration = Date.now() - startTime;
-        this.logResponse(request, response, duration);
-      }
-    }), catchError((error) => {
-      const duration = Date.now() - startTime;
-      this.logError(request, response, duration, error);
-      throw error;
-    }));
-  }
-  logRequest(request) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const metadata = {
-        type: "http_request",
-        method: request.method,
-        url: request.url,
-        correlationId: correlationContext?.correlationId,
-        ip: request.ip,
-        userAgent: request.headers["user-agent"]
-      };
-      this.logger.logWithMetadata("log", `Incoming ${request.method} ${request.url}`, metadata);
-    } catch (error) {
-      this.logger.error("Failed to log HTTP request", error.stack);
-    }
-  }
-  logResponse(request, response, duration) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const statusCode = response.statusCode;
-      const logLevel = statusCode >= 500 ? "error" : statusCode >= 400 ? "warn" : "log";
-      const metadata = {
-        type: "http_response",
-        method: request.method,
-        url: request.url,
-        statusCode,
-        duration,
-        correlationId: correlationContext?.correlationId
-      };
-      if (duration > this.slowRequestThreshold) {
-        metadata.slowRequest = true;
-      }
-      const message = metadata.slowRequest ? `SLOW ${request.method} ${request.url} ${statusCode} - ${duration}ms` : `${request.method} ${request.url} ${statusCode} - ${duration}ms`;
-      this.logger.logWithMetadata(logLevel, message, metadata);
-    } catch (error) {
-      this.logger.error("Failed to log HTTP response", error.stack);
-    }
-  }
-  logError(request, response, duration, error) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const statusCode = response.statusCode || 500;
-      const metadata = {
-        type: "http_error",
-        method: request.method,
-        url: request.url,
-        statusCode,
-        duration,
-        correlationId: correlationContext?.correlationId,
-        errorName: error?.name || "Error",
-        errorMessage: error?.message || "Unknown error"
-      };
-      if (error?.stack) {
-        metadata.trace = error.stack;
-      }
-      if (error?.response) {
-        metadata.errorDetails = error.response;
-      }
-      const message = `ERROR ${request.method} ${request.url} ${statusCode} - ${error?.message || "Unknown error"}`;
-      this.logger.logWithMetadata("error", message, metadata);
-    } catch (loggingError) {
-      this.logger.error("Failed to log HTTP error", loggingError.stack);
-    }
-  }
-};
-HttpLoggerInterceptor = _ts_decorate16([
+LoggerService2 = _ts_decorate16([
   Injectable11(),
+  _ts_param5(0, Optional2()),
   _ts_param5(1, Optional2()),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
-    typeof LoggerService === "undefined" ? Object : LoggerService,
-    typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
+    typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
+    typeof Logger === "undefined" ? Object : Logger
   ])
-], HttpLoggerInterceptor);
+], LoggerService2);
 
 // src/logger/logger.module.ts
 function _ts_decorate17(decorators, target, key, desc) {
@@ -3214,7 +3196,7 @@ var LoggerModule = class _LoggerModule {
   * ```
   */
   static forRootAsync(options) {
-    const asyncProviders = this.createAsyncProviders(options);
+    const asyncProviders = _LoggerModule.createAsyncProviders(options);
     return {
       module: _LoggerModule,
       imports: options.imports || [],
@@ -3290,7 +3272,7 @@ var LoggerModule = class _LoggerModule {
   * Configures middleware for the module.
   * Middleware is registered globally in main.ts using Fastify hooks.
   */
-  configure(consumer) {
+  configure(_consumer) {
   }
   /**
   * Creates async providers for dynamic module configuration.
@@ -3298,11 +3280,11 @@ var LoggerModule = class _LoggerModule {
   static createAsyncProviders(options) {
     if (options.useFactory) {
       return [
-        this.createAsyncOptionsProvider(options)
+        _LoggerModule.createAsyncOptionsProvider(options)
       ];
     }
     const providers = [
-      this.createAsyncOptionsProvider(options)
+      _LoggerModule.createAsyncOptionsProvider(options)
     ];
     if (options.useClass) {
       providers.push({
@@ -3320,7 +3302,7 @@ var LoggerModule = class _LoggerModule {
       return {
         provide: LOGGER_MODULE_OPTIONS,
         useFactory: /* @__PURE__ */ __name(async (...args) => {
-          const userOptions = await options.useFactory(...args);
+          const userOptions = await options.useFactory?.(...args);
           return mergeWithDefaults(userOptions);
         }, "useFactory"),
         inject: options.inject || []
@@ -3367,7 +3349,7 @@ export {
   CsrfGuard,
   DEFAULT_CORRELATION_HEADER,
   DatabaseModule,
-  ForbiddenException2 as ForbiddenException,
+  ForbiddenException,
   GoneException,
   HttpExceptionFilter,
   HttpLoggerInterceptor,
@@ -3383,13 +3365,13 @@ export {
   Onboarding,
   PayloadTooLargeException,
   PrimaryBaseRepository,
-  PrimaryDatabaseService,
+  PrimaryDatabaseService2 as PrimaryDatabaseService,
   Public,
   RequestTimeoutException,
   ServiceUnavailableException,
   Tenant,
   TenantBaseRepository,
-  TenantContextService,
+  TenantContextService2 as TenantContextService,
   TenantDatabaseService,
   TooManyRequestsException,
   UnauthorizedException4 as UnauthorizedException,