@vritti/api-sdk 0.1.3 → 0.1.4

package/dist/index.cjs

@@ -48,7 +48,7 @@ __export(index_exports, {
   InternalServerErrorException: () => InternalServerErrorException3,
   LOGGER_MODULE_OPTIONS: () => LOGGER_MODULE_OPTIONS,
   LoggerModule: () => LoggerModule,
-  LoggerService: () => LoggerService2,
+  LoggerService: () => LoggerService,
   MethodNotAllowedException: () => MethodNotAllowedException,
   NotAcceptableException: () => NotAcceptableException,
   NotFoundException: () => NotFoundException,
@@ -56,13 +56,13 @@ __export(index_exports, {
   Onboarding: () => Onboarding,
   PayloadTooLargeException: () => PayloadTooLargeException,
   PrimaryBaseRepository: () => PrimaryBaseRepository,
-  PrimaryDatabaseService: () => PrimaryDatabaseService2,
+  PrimaryDatabaseService: () => PrimaryDatabaseService,
   Public: () => Public,
   RequestTimeoutException: () => RequestTimeoutException,
   ServiceUnavailableException: () => ServiceUnavailableException,
   Tenant: () => Tenant,
   TenantBaseRepository: () => TenantBaseRepository,
-  TenantContextService: () => TenantContextService2,
+  TenantContextService: () => TenantContextService,
   TenantDatabaseService: () => TenantDatabaseService,
   TooManyRequestsException: () => TooManyRequestsException,
   UnauthorizedException: () => UnauthorizedException4,
@@ -89,10 +89,10 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/auth/auth-config.module.ts
-var import_common4 = require("@nestjs/common");
-var import_config3 = require("@nestjs/config");
-var import_core2 = require("@nestjs/core");
-var import_jwt = require("@nestjs/jwt");
+var import_common5 = require("@nestjs/common");
+var import_config4 = require("@nestjs/config");
+var import_core3 = require("@nestjs/core");
+var import_jwt2 = require("@nestjs/jwt");
 
 // src/request/request.module.ts
 var import_common2 = require("@nestjs/common");
@@ -193,7 +193,7 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-var RequestService2 = class {
+var RequestService = class {
   static {
     __name(this, "RequestService");
   }
@@ -262,7 +262,7 @@ var RequestService2 = class {
     return this.request.headers || {};
   }
 };
-RequestService2 = _ts_decorate([
+RequestService = _ts_decorate([
   (0, import_common.Injectable)({
     scope: import_common.Scope.REQUEST
   }),
@@ -271,7 +271,7 @@ RequestService2 = _ts_decorate([
   _ts_metadata("design:paramtypes", [
     typeof FastifyRequest === "undefined" ? Object : FastifyRequest
   ])
-], RequestService2);
+], RequestService);
 
 // src/request/request.module.ts
 function _ts_decorate2(decorators, target, key, desc) {
@@ -290,16 +290,256 @@ RequestModule = _ts_decorate2([
   (0, import_common2.Global)(),
   (0, import_common2.Module)({
     providers: [
-      RequestService2
+      RequestService
     ],
     exports: [
-      RequestService2
+      RequestService
     ]
   })
 ], RequestModule);
 
 // src/auth/guards/vritti-auth.guard.ts
+var import_common4 = require("@nestjs/common");
+var import_config2 = require("@nestjs/config");
+var import_core2 = require("@nestjs/core");
+var import_jwt = require("@nestjs/jwt");
+
+// src/database/services/primary-database.service.ts
 var import_common3 = require("@nestjs/common");
+var import_drizzle_orm = require("drizzle-orm");
+var import_node_postgres = require("drizzle-orm/node-postgres");
+var import_pg = require("pg");
+
+// src/database/constants.ts
+var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+
+// src/database/services/primary-database.service.ts
+function _ts_decorate3(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var PrimaryDatabaseService = class _PrimaryDatabaseService {
+  static {
+    __name(this, "PrimaryDatabaseService");
+  }
+  options;
+  logger = new import_common3.Logger(_PrimaryDatabaseService.name);
+  /** PostgreSQL connection pool */
+  pool = null;
+  /** Drizzle database instance */
+  db = null;
+  /** In-memory cache: Map<tenantIdentifier, TenantConfig> */
+  tenantConfigCache = /* @__PURE__ */ new Map();
+  /** Cache TTL in milliseconds */
+  cacheTTL;
+  constructor(options) {
+    this.options = options;
+    this.cacheTTL = options.connectionCacheTTL || 3e5;
+  }
+  async onModuleInit() {
+    if (this.options.primaryDb) {
+      await this.initializeDrizzleClient();
+    }
+  }
+  /**
+  * Initialize connection to primary database using Drizzle
+  */
+  async initializeDrizzleClient() {
+    try {
+      const databaseUrl = this.buildPrimaryDbUrl();
+      this.pool = new import_pg.Pool({
+        connectionString: databaseUrl,
+        max: this.options.maxConnections || 10
+      });
+      this.logger.debug(`Schema keys passed to drizzle: [${Object.keys(this.options.drizzleSchema || {}).join(", ")}]`);
+      this.logger.debug(`Relations keys passed to drizzle: [${Object.keys(this.options.drizzleRelations || {}).join(", ")}]`);
+      this.db = (0, import_node_postgres.drizzle)({
+        client: this.pool,
+        schema: this.options.drizzleSchema,
+        relations: this.options.drizzleRelations
+      });
+      this.logger.debug(`Drizzle query keys after init: [${Object.keys(this.db.query || {}).join(", ")}]`);
+      await this.pool.query("SELECT 1");
+      this.logger.log("Connected to primary database (tenant registry)");
+    } catch (error) {
+      this.logger.error("Failed to connect to primary database", error);
+      throw new import_common3.InternalServerErrorException("Failed to initialize tenant registry");
+    }
+  }
+  /**
+  * Build connection URL from primary database properties
+  */
+  buildPrimaryDbUrl() {
+    if (!this.options.primaryDb) {
+      throw new Error("Primary database configuration not provided");
+    }
+    const { host, port = 5432, username, password, database, schema = "public", sslMode = "require" } = this.options.primaryDb;
+    let url = `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}`;
+    const params = new URLSearchParams();
+    if (schema) {
+      params.set("schema", schema);
+    }
+    params.set("sslmode", sslMode);
+    const queryString = params.toString();
+    if (queryString) {
+      url += `?${queryString}`;
+    }
+    this.logger.debug(`Primary DB connection URL: ${this.maskPassword(url)}`);
+    return url;
+  }
+  /**
+  * Mask password in connection URL for logging
+  */
+  maskPassword(url) {
+    return url.replace(/:([^@]+)@/, ":****@");
+  }
+  /**
+  * Get tenant configuration by identifier (ID or subdomain)
+  *
+  * @param tenantIdentifier Tenant ID or subdomain
+  * @returns Tenant configuration or null if not found
+  */
+  async getTenantInfo(tenantIdentifier) {
+    const cached = this.tenantConfigCache.get(tenantIdentifier);
+    if (cached) {
+      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
+      return cached;
+    }
+    try {
+      if (!this.db) {
+        throw new Error("Primary database client not initialized");
+      }
+      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
+      const schema = this.options.drizzleSchema;
+      const { tenants, tenantDatabaseConfigs } = schema;
+      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, (0, import_drizzle_orm.eq)(tenants.id, tenantDatabaseConfigs.tenantId)).where((0, import_drizzle_orm.or)((0, import_drizzle_orm.eq)(tenants.id, tenantIdentifier), (0, import_drizzle_orm.eq)(tenants.subdomain, tenantIdentifier))).limit(1);
+      if (!result.length) {
+        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
+        return null;
+      }
+      const row = result[0];
+      const tenant = row.tenants;
+      const config = row.tenant_database_configs;
+      if (tenant.status !== "ACTIVE") {
+        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
+        return null;
+      }
+      const info = {
+        id: tenant.id,
+        subdomain: tenant.subdomain,
+        type: tenant.dbType,
+        status: tenant.status,
+        // For SHARED tenants: schema name
+        schemaName: config?.dbSchema || void 0,
+        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
+        databaseName: config?.dbName || void 0,
+        databaseHost: config?.dbHost || void 0,
+        databasePort: config?.dbPort || void 0,
+        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
+        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
+        databaseSslMode: config?.dbSslMode || void 0,
+        connectionPoolSize: config?.connectionPoolSize || void 0
+      };
+      this.cacheInfo(info);
+      return info;
+    } catch (error) {
+      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
+      throw new import_common3.InternalServerErrorException("Failed to resolve tenant");
+    }
+  }
+  /**
+  * Cache tenant information with TTL
+  */
+  cacheInfo(info) {
+    this.tenantConfigCache.set(info.id, info);
+    this.tenantConfigCache.set(info.subdomain, info);
+    setTimeout(() => {
+      this.tenantConfigCache.delete(info.id);
+      this.tenantConfigCache.delete(info.subdomain);
+      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
+    }, this.cacheTTL);
+  }
+  /**
+  * Clear cached tenant information
+  *
+  * Useful when tenant settings are updated and cache needs to be invalidated
+  *
+  * @param tenantIdentifier Tenant ID or subdomain
+  */
+  clearTenantCache(tenantIdentifier) {
+    const config = this.tenantConfigCache.get(tenantIdentifier);
+    if (config) {
+      this.tenantConfigCache.delete(config.id);
+      this.tenantConfigCache.delete(config.subdomain);
+      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
+    }
+  }
+  /**
+  * Clear all cached tenant configurations
+  */
+  clearAllCaches() {
+    const size = this.tenantConfigCache.size;
+    this.tenantConfigCache.clear();
+    this.logger.log(`Cleared ${size} cached tenant configs`);
+  }
+  /**
+  * Get the Drizzle database instance for the primary database.
+  * This is a synchronous property that returns the initialized Drizzle client.
+  *
+  * @returns Primary database Drizzle instance
+  * @throws Error if primary database client is not initialized
+  */
+  get drizzleClient() {
+    if (!this.db) {
+      throw new Error("Primary database client not initialized");
+    }
+    return this.db;
+  }
+  /**
+  * Get the Drizzle schema
+  */
+  get schema() {
+    return this.options.drizzleSchema;
+  }
+  /**
+  * Decrypt database credentials
+  *
+  * Override this method to implement your encryption strategy
+  *
+  * @param encrypted Encrypted value
+  * @returns Decrypted value
+  */
+  decrypt(encrypted) {
+    return encrypted;
+  }
+  async onModuleDestroy() {
+    if (this.pool) {
+      await this.pool.end();
+      this.logger.log("Disconnected from primary database");
+    }
+  }
+};
+PrimaryDatabaseService = _ts_decorate3([
+  (0, import_common3.Injectable)(),
+  _ts_param2(0, (0, import_common3.Inject)(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
+  ])
+], PrimaryDatabaseService);
 
 // src/auth/utils/token-hash.util.ts
 var crypto = __toESM(require("crypto"), 1);
@@ -315,17 +555,17 @@ function verifyTokenHash(token, expectedHash) {
 __name(verifyTokenHash, "verifyTokenHash");
 
 // src/auth/guards/vritti-auth.guard.ts
-function _ts_decorate3(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate3, "_ts_decorate");
-function _ts_metadata2(k, v) {
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata2, "_ts_metadata");
+__name(_ts_metadata3, "_ts_metadata");
 var VrittiAuthGuard = class _VrittiAuthGuard {
   static {
     __name(this, "VrittiAuthGuard");
@@ -335,7 +575,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
   jwtService;
   primaryDatabase;
   requestService;
-  logger = new import_common3.Logger(_VrittiAuthGuard.name);
+  logger = new import_common4.Logger(_VrittiAuthGuard.name);
   constructor(reflector, _configService, jwtService, primaryDatabase, requestService) {
     this.reflector = reflector;
     this._configService = _configService;
@@ -361,17 +601,17 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       const accessToken = this.requestService.getAccessToken();
       if (!accessToken) {
         this.logger.warn("Access token not found in Authorization header");
-        throw new import_common3.UnauthorizedException("Access token not found");
+        throw new import_common4.UnauthorizedException("Access token not found");
       }
       const decodedToken = this.jwtService.decode(accessToken);
       if (!decodedToken) {
         this.logger.warn("Failed to decode access token");
-        throw new import_common3.UnauthorizedException("Invalid token format");
+        throw new import_common4.UnauthorizedException("Invalid token format");
       }
       if (isOnboarding) {
         if (decodedToken.type !== "onboarding") {
           this.logger.warn("Onboarding endpoint requires onboarding token");
-          throw new import_common3.UnauthorizedException("This endpoint requires an onboarding token");
+          throw new import_common4.UnauthorizedException("This endpoint requires an onboarding token");
         }
         const validatedToken2 = this.validateAccessToken(accessToken);
         this.logger.debug("Onboarding token validated successfully");
@@ -384,7 +624,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       }
       if (decodedToken.type === "onboarding") {
         this.logger.warn("Regular endpoint accessed with onboarding token");
-        throw new import_common3.UnauthorizedException("Onboarding tokens cannot access this endpoint");
+        throw new import_common4.UnauthorizedException("Onboarding tokens cannot access this endpoint");
       }
       const validatedToken = this.validateAccessToken(accessToken);
       this.logger.debug("Access token validated successfully");
@@ -396,7 +636,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       const tenantIdentifier = this.requestService.getTenantIdentifier();
       if (!tenantIdentifier) {
         this.logger.warn("Tenant identifier not found in request");
-        throw new import_common3.UnauthorizedException("Tenant identifier not found");
+        throw new import_common4.UnauthorizedException("Tenant identifier not found");
       }
       this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
       if (tenantIdentifier === "cloud") {
@@ -406,20 +646,20 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
       if (!tenantInfo) {
         this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
-        throw new import_common3.UnauthorizedException("Invalid tenant");
+        throw new import_common4.UnauthorizedException("Invalid tenant");
       }
       if (tenantInfo.status !== "ACTIVE") {
         this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
-        throw new import_common3.UnauthorizedException(`Tenant is ${tenantInfo.status}`);
+        throw new import_common4.UnauthorizedException(`Tenant is ${tenantInfo.status}`);
       }
       this.logger.debug(`Tenant validated: ${tenantInfo.subdomain} (${tenantInfo.type})`);
       return true;
     } catch (error) {
-      if (error instanceof import_common3.UnauthorizedException) {
+      if (error instanceof import_common4.UnauthorizedException) {
         throw error;
       }
       this.logger.error("Unexpected error in auth guard", error);
-      throw new import_common3.UnauthorizedException("Authentication failed");
+      throw new import_common4.UnauthorizedException("Authentication failed");
     }
   }
   /**
@@ -438,24 +678,24 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       }
       return decoded;
     } catch (error) {
-      if (error instanceof import_common3.UnauthorizedException) {
+      if (error instanceof import_common4.UnauthorizedException) {
         throw error;
       }
       const jwtError = error;
       if (jwtError?.name === "TokenExpiredError") {
         this.logger.warn(`Access token expired at: ${jwtError?.expiredAt}`);
-        throw new import_common3.UnauthorizedException("Access token has expired");
+        throw new import_common4.UnauthorizedException("Access token has expired");
       }
       if (jwtError?.name === "JsonWebTokenError") {
         this.logger.warn(`Access token verification failed: ${jwtError?.message}`);
-        throw new import_common3.UnauthorizedException("Invalid access token");
+        throw new import_common4.UnauthorizedException("Invalid access token");
       }
       if (jwtError?.name === "NotBeforeError") {
         this.logger.warn("Access token used before valid (nbf claim)");
-        throw new import_common3.UnauthorizedException("Access token not yet valid");
+        throw new import_common4.UnauthorizedException("Access token not yet valid");
       }
       this.logger.error("Unexpected error validating access token", error);
-      throw new import_common3.UnauthorizedException("Access token validation failed");
+      throw new import_common4.UnauthorizedException("Access token validation failed");
     }
   }
   /**
@@ -482,37 +722,37 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     const refreshToken = cookies[config.cookie.refreshCookieName];
     if (!refreshToken) {
       this.logger.warn("Session validation failed - refresh token cookie not found");
-      throw new import_common3.UnauthorizedException("Session validation failed");
+      throw new import_common4.UnauthorizedException("Session validation failed");
     }
     if (!verifyTokenHash(refreshToken, validatedToken.refreshTokenHash)) {
       this.logger.warn("Session validation failed - token binding mismatch");
-      throw new import_common3.UnauthorizedException("Session validation failed");
+      throw new import_common4.UnauthorizedException("Session validation failed");
     }
     this.logger.debug("Token binding validated successfully");
   }
 };
-VrittiAuthGuard = _ts_decorate3([
-  (0, import_common3.Injectable)({
-    scope: import_common3.Scope.REQUEST
+VrittiAuthGuard = _ts_decorate4([
+  (0, import_common4.Injectable)({
+    scope: import_common4.Scope.REQUEST
   }),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof Reflector === "undefined" ? Object : Reflector,
-    typeof ConfigService === "undefined" ? Object : ConfigService,
-    typeof JwtService === "undefined" ? Object : JwtService,
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
+    typeof import_core2.Reflector === "undefined" ? Object : import_core2.Reflector,
+    typeof import_config2.ConfigService === "undefined" ? Object : import_config2.ConfigService,
+    typeof import_jwt.JwtService === "undefined" ? Object : import_jwt.JwtService,
     typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
     typeof RequestService === "undefined" ? Object : RequestService
   ])
 ], VrittiAuthGuard);
 
 // src/auth/auth-config.module.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
+__name(_ts_decorate5, "_ts_decorate");
 var AuthConfigModule = class _AuthConfigModule {
   static {
     __name(this, "AuthConfigModule");
@@ -531,14 +771,14 @@ var AuthConfigModule = class _AuthConfigModule {
     return {
       module: _AuthConfigModule,
       imports: [
-        import_config3.ConfigModule,
+        import_config4.ConfigModule,
         RequestModule,
-        import_jwt.JwtModule.registerAsync({
+        import_jwt2.JwtModule.registerAsync({
           imports: [
-            import_config3.ConfigModule
+            import_config4.ConfigModule
           ],
           inject: [
-            import_config3.ConfigService
+            import_config4.ConfigService
           ],
           useFactory: /* @__PURE__ */ __name((config) => ({
             secret: config.get("JWT_SECRET"),
@@ -550,56 +790,141 @@ var AuthConfigModule = class _AuthConfigModule {
       ],
       providers: [
         {
-          provide: import_core2.APP_GUARD,
+          provide: import_core3.APP_GUARD,
           useClass: VrittiAuthGuard
         }
       ],
       exports: [
-        import_jwt.JwtModule
+        import_jwt2.JwtModule
       ]
     };
   }
 };
-AuthConfigModule = _ts_decorate4([
-  (0, import_common4.Global)(),
-  (0, import_common4.Module)({})
+AuthConfigModule = _ts_decorate5([
+  (0, import_common5.Global)(),
+  (0, import_common5.Module)({})
 ], AuthConfigModule);
 
 // src/auth/decorators/onboarding.decorator.ts
-var import_common5 = require("@nestjs/common");
-var Onboarding = /* @__PURE__ */ __name(() => (0, import_common5.SetMetadata)("isOnboarding", true), "Onboarding");
+var import_common6 = require("@nestjs/common");
+var Onboarding = /* @__PURE__ */ __name(() => (0, import_common6.SetMetadata)("isOnboarding", true), "Onboarding");
 
 // src/auth/decorators/public.decorator.ts
-var import_common6 = require("@nestjs/common");
-var Public = /* @__PURE__ */ __name(() => (0, import_common6.SetMetadata)("isPublic", true), "Public");
+var import_common7 = require("@nestjs/common");
+var Public = /* @__PURE__ */ __name(() => (0, import_common7.SetMetadata)("isPublic", true), "Public");
 
 // src/database/database.module.ts
 var import_common12 = require("@nestjs/common");
-var import_core3 = require("@nestjs/core");
-
-// src/database/constants.ts
-var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+var import_core5 = require("@nestjs/core");
 
 // src/database/interceptors/message-tenant-context.interceptor.ts
-var import_common7 = require("@nestjs/common");
+var import_common9 = require("@nestjs/common");
 var import_operators = require("rxjs/operators");
-function _ts_decorate5(decorators, target, key, desc) {
+
+// src/database/services/tenant-context.service.ts
+var import_common8 = require("@nestjs/common");
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata3(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+var TenantContextService = class {
+  static {
+    __name(this, "TenantContextService");
+  }
+  tenantInfo = null;
+  /**
+  * Set tenant information for this request/message
+  *
+  * This is typically called by:
+  * - TenantContextInterceptor (for HTTP requests in gateway)
+  * - MessageTenantContextInterceptor (for RabbitMQ messages in microservices)
+  * - Manual context setup in message handlers
+  *
+  * @param tenantInfo Complete tenant information
+  * @throws Error if tenant context is already set (prevents accidental overwrites)
+  */
+  setTenant(tenantInfo) {
+    if (this.tenantInfo) {
+      throw new Error("Tenant context already set for this request");
+    }
+    this.tenantInfo = tenantInfo;
+  }
+  /**
+  * Get tenant information for this request/message
+  *
+  * @returns Tenant information
+  * @throws UnauthorizedException if tenant context hasn't been set
+  */
+  getTenant() {
+    if (!this.tenantInfo) {
+      throw new import_common8.UnauthorizedException("Tenant context not set");
+    }
+    return this.tenantInfo;
+  }
+  /**
+  * Check if tenant context has been set
+  *
+  * @returns true if tenant context is available
+  */
+  hasTenant() {
+    return this.tenantInfo !== null;
+  }
+  /**
+  * Clear tenant context
+  *
+  * This is useful for cleanup in RabbitMQ message handlers
+  * after the message has been processed.
+  *
+  * HTTP requests don't need manual cleanup as the service
+  * instance is destroyed when the request ends.
+  */
+  clearTenant() {
+    this.tenantInfo = null;
+  }
+  /**
+  * Get tenant ID safely (returns null if not set)
+  *
+  * @returns Tenant ID or null
+  */
+  getTenantIdSafe() {
+    return this.tenantInfo?.id ?? null;
+  }
+  /**
+  * Get tenant subdomain safely (returns null if not set)
+  *
+  * @returns Tenant subdomain or null
+  */
+  getTenantSubdomainSafe() {
+    return this.tenantInfo?.subdomain ?? null;
+  }
+};
+TenantContextService = _ts_decorate6([
+  (0, import_common8.Injectable)({
+    scope: import_common8.Scope.REQUEST
+  })
+], TenantContextService);
+
+// src/database/interceptors/message-tenant-context.interceptor.ts
+function _ts_decorate7(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata4(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata3, "_ts_metadata");
+__name(_ts_metadata4, "_ts_metadata");
 var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
   static {
     __name(this, "MessageTenantContextInterceptor");
   }
   tenantContext;
-  logger = new import_common7.Logger(_MessageTenantContextInterceptor.name);
+  logger = new import_common9.Logger(_MessageTenantContextInterceptor.name);
   constructor(tenantContext) {
     this.tenantContext = tenantContext;
   }
@@ -644,29 +969,30 @@ var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
     }
   }
 };
-MessageTenantContextInterceptor = _ts_decorate5([
-  (0, import_common7.Injectable)({
-    scope: import_common7.Scope.REQUEST
+MessageTenantContextInterceptor = _ts_decorate7([
+  (0, import_common9.Injectable)({
+    scope: import_common9.Scope.REQUEST
   }),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
     typeof TenantContextService === "undefined" ? Object : TenantContextService
   ])
 ], MessageTenantContextInterceptor);
 
 // src/database/interceptors/tenant-context.interceptor.ts
-var import_common8 = require("@nestjs/common");
-function _ts_decorate6(decorators, target, key, desc) {
+var import_common10 = require("@nestjs/common");
+var import_core4 = require("@nestjs/core");
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
+__name(_ts_metadata5, "_ts_metadata");
 var TenantContextInterceptor = class _TenantContextInterceptor {
   static {
     __name(this, "TenantContextInterceptor");
@@ -675,7 +1001,7 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
   tenantContext;
   primaryDatabase;
   requestService;
-  logger = new import_common8.Logger(_TenantContextInterceptor.name);
+  logger = new import_common10.Logger(_TenantContextInterceptor.name);
   constructor(reflector, tenantContext, primaryDatabase, requestService) {
     this.reflector = reflector;
     this.tenantContext = tenantContext;
@@ -696,7 +1022,7 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
         return next.handle();
       }
       if (!tenantIdentifier) {
-        throw new import_common8.UnauthorizedException("Tenant identifier not found in request");
+        throw new import_common10.UnauthorizedException("Tenant identifier not found in request");
       }
       this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
       if (tenantIdentifier === "cloud") {
@@ -706,353 +1032,35 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
       const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
       if (!tenantInfo) {
         this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
-        throw new import_common8.UnauthorizedException("Invalid tenant");
+        throw new import_common10.UnauthorizedException("Invalid tenant");
       }
       if (tenantInfo.status !== "ACTIVE") {
-        this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
-        throw new import_common8.UnauthorizedException(`Tenant is ${tenantInfo.status}`);
-      }
-      this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
-      this.tenantContext.setTenant(tenantInfo);
-      request.tenant = tenantInfo;
-      this.logger.log(`Tenant context set: ${tenantInfo.subdomain}`);
-    } catch (error) {
-      this.logger.error("Failed to set tenant context", error);
-      throw error;
-    }
-    return next.handle();
-  }
-};
-TenantContextInterceptor = _ts_decorate6([
-  (0, import_common8.Injectable)({
-    scope: import_common8.Scope.REQUEST
-  }),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
-    typeof Reflector === "undefined" ? Object : Reflector,
-    typeof TenantContextService === "undefined" ? Object : TenantContextService,
-    typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
-    typeof RequestService === "undefined" ? Object : RequestService
-  ])
-], TenantContextInterceptor);
-
-// src/database/services/primary-database.service.ts
-var import_common9 = require("@nestjs/common");
-var import_drizzle_orm = require("drizzle-orm");
-var import_node_postgres = require("drizzle-orm/node-postgres");
-var import_pg = require("pg");
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata5(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var PrimaryDatabaseService2 = class _PrimaryDatabaseService {
-  static {
-    __name(this, "PrimaryDatabaseService");
-  }
-  options;
-  logger = new import_common9.Logger(_PrimaryDatabaseService.name);
-  /** PostgreSQL connection pool */
-  pool = null;
-  /** Drizzle database instance */
-  db = null;
-  /** In-memory cache: Map<tenantIdentifier, TenantConfig> */
-  tenantConfigCache = /* @__PURE__ */ new Map();
-  /** Cache TTL in milliseconds */
-  cacheTTL;
-  constructor(options) {
-    this.options = options;
-    this.cacheTTL = options.connectionCacheTTL || 3e5;
-  }
-  async onModuleInit() {
-    if (this.options.primaryDb) {
-      await this.initializeDrizzleClient();
-    }
-  }
-  /**
-  * Initialize connection to primary database using Drizzle
-  */
-  async initializeDrizzleClient() {
-    try {
-      const databaseUrl = this.buildPrimaryDbUrl();
-      this.pool = new import_pg.Pool({
-        connectionString: databaseUrl,
-        max: this.options.maxConnections || 10
-      });
-      this.logger.debug(`Schema keys passed to drizzle: [${Object.keys(this.options.drizzleSchema || {}).join(", ")}]`);
-      this.logger.debug(`Relations keys passed to drizzle: [${Object.keys(this.options.drizzleRelations || {}).join(", ")}]`);
-      this.db = (0, import_node_postgres.drizzle)({
-        client: this.pool,
-        schema: this.options.drizzleSchema,
-        relations: this.options.drizzleRelations
-      });
-      this.logger.debug(`Drizzle query keys after init: [${Object.keys(this.db.query || {}).join(", ")}]`);
-      await this.pool.query("SELECT 1");
-      this.logger.log("Connected to primary database (tenant registry)");
-    } catch (error) {
-      this.logger.error("Failed to connect to primary database", error);
-      throw new import_common9.InternalServerErrorException("Failed to initialize tenant registry");
-    }
-  }
-  /**
-  * Build connection URL from primary database properties
-  */
-  buildPrimaryDbUrl() {
-    if (!this.options.primaryDb) {
-      throw new Error("Primary database configuration not provided");
-    }
-    const { host, port = 5432, username, password, database, schema = "public", sslMode = "require" } = this.options.primaryDb;
-    let url = `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}`;
-    const params = new URLSearchParams();
-    if (schema) {
-      params.set("schema", schema);
-    }
-    params.set("sslmode", sslMode);
-    const queryString = params.toString();
-    if (queryString) {
-      url += `?${queryString}`;
-    }
-    this.logger.debug(`Primary DB connection URL: ${this.maskPassword(url)}`);
-    return url;
-  }
-  /**
-  * Mask password in connection URL for logging
-  */
-  maskPassword(url) {
-    return url.replace(/:([^@]+)@/, ":****@");
-  }
-  /**
-  * Get tenant configuration by identifier (ID or subdomain)
-  *
-  * @param tenantIdentifier Tenant ID or subdomain
-  * @returns Tenant configuration or null if not found
-  */
-  async getTenantInfo(tenantIdentifier) {
-    const cached = this.tenantConfigCache.get(tenantIdentifier);
-    if (cached) {
-      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
-      return cached;
-    }
-    try {
-      if (!this.db) {
-        throw new Error("Primary database client not initialized");
-      }
-      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
-      const schema = this.options.drizzleSchema;
-      const { tenants, tenantDatabaseConfigs } = schema;
-      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, (0, import_drizzle_orm.eq)(tenants.id, tenantDatabaseConfigs.tenantId)).where((0, import_drizzle_orm.or)((0, import_drizzle_orm.eq)(tenants.id, tenantIdentifier), (0, import_drizzle_orm.eq)(tenants.subdomain, tenantIdentifier))).limit(1);
-      if (!result.length) {
-        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
-        return null;
-      }
-      const row = result[0];
-      const tenant = row.tenants;
-      const config = row.tenant_database_configs;
-      if (tenant.status !== "ACTIVE") {
-        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
-        return null;
-      }
-      const info = {
-        id: tenant.id,
-        subdomain: tenant.subdomain,
-        type: tenant.dbType,
-        status: tenant.status,
-        // For SHARED tenants: schema name
-        schemaName: config?.dbSchema || void 0,
-        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
-        databaseName: config?.dbName || void 0,
-        databaseHost: config?.dbHost || void 0,
-        databasePort: config?.dbPort || void 0,
-        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
-        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
-        databaseSslMode: config?.dbSslMode || void 0,
-        connectionPoolSize: config?.connectionPoolSize || void 0
-      };
-      this.cacheInfo(info);
-      return info;
-    } catch (error) {
-      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
-      throw new import_common9.InternalServerErrorException("Failed to resolve tenant");
-    }
-  }
-  /**
-  * Cache tenant information with TTL
-  */
-  cacheInfo(info) {
-    this.tenantConfigCache.set(info.id, info);
-    this.tenantConfigCache.set(info.subdomain, info);
-    setTimeout(() => {
-      this.tenantConfigCache.delete(info.id);
-      this.tenantConfigCache.delete(info.subdomain);
-      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
-    }, this.cacheTTL);
-  }
-  /**
-  * Clear cached tenant information
-  *
-  * Useful when tenant settings are updated and cache needs to be invalidated
-  *
-  * @param tenantIdentifier Tenant ID or subdomain
-  */
-  clearTenantCache(tenantIdentifier) {
-    const config = this.tenantConfigCache.get(tenantIdentifier);
-    if (config) {
-      this.tenantConfigCache.delete(config.id);
-      this.tenantConfigCache.delete(config.subdomain);
-      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
-    }
-  }
-  /**
-  * Clear all cached tenant configurations
-  */
-  clearAllCaches() {
-    const size = this.tenantConfigCache.size;
-    this.tenantConfigCache.clear();
-    this.logger.log(`Cleared ${size} cached tenant configs`);
-  }
-  /**
-  * Get the Drizzle database instance for the primary database.
-  * This is a synchronous property that returns the initialized Drizzle client.
-  *
-  * @returns Primary database Drizzle instance
-  * @throws Error if primary database client is not initialized
-  */
-  get drizzleClient() {
-    if (!this.db) {
-      throw new Error("Primary database client not initialized");
-    }
-    return this.db;
-  }
-  /**
-  * Get the Drizzle schema
-  */
-  get schema() {
-    return this.options.drizzleSchema;
-  }
-  /**
-  * Decrypt database credentials
-  *
-  * Override this method to implement your encryption strategy
-  *
-  * @param encrypted Encrypted value
-  * @returns Decrypted value
-  */
-  decrypt(encrypted) {
-    return encrypted;
-  }
-  async onModuleDestroy() {
-    if (this.pool) {
-      await this.pool.end();
-      this.logger.log("Disconnected from primary database");
-    }
-  }
-};
-PrimaryDatabaseService2 = _ts_decorate7([
-  (0, import_common9.Injectable)(),
-  _ts_param2(0, (0, import_common9.Inject)(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
-    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
-  ])
-], PrimaryDatabaseService2);
-
-// src/database/services/tenant-context.service.ts
-var import_common10 = require("@nestjs/common");
-function _ts_decorate8(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate8, "_ts_decorate");
-var TenantContextService2 = class {
-  static {
-    __name(this, "TenantContextService");
-  }
-  tenantInfo = null;
-  /**
-  * Set tenant information for this request/message
-  *
-  * This is typically called by:
-  * - TenantContextInterceptor (for HTTP requests in gateway)
-  * - MessageTenantContextInterceptor (for RabbitMQ messages in microservices)
-  * - Manual context setup in message handlers
-  *
-  * @param tenantInfo Complete tenant information
-  * @throws Error if tenant context is already set (prevents accidental overwrites)
-  */
-  setTenant(tenantInfo) {
-    if (this.tenantInfo) {
-      throw new Error("Tenant context already set for this request");
-    }
-    this.tenantInfo = tenantInfo;
-  }
-  /**
-  * Get tenant information for this request/message
-  *
-  * @returns Tenant information
-  * @throws UnauthorizedException if tenant context hasn't been set
-  */
-  getTenant() {
-    if (!this.tenantInfo) {
-      throw new import_common10.UnauthorizedException("Tenant context not set");
-    }
-    return this.tenantInfo;
-  }
-  /**
-  * Check if tenant context has been set
-  *
-  * @returns true if tenant context is available
-  */
-  hasTenant() {
-    return this.tenantInfo !== null;
-  }
-  /**
-  * Clear tenant context
-  *
-  * This is useful for cleanup in RabbitMQ message handlers
-  * after the message has been processed.
-  *
-  * HTTP requests don't need manual cleanup as the service
-  * instance is destroyed when the request ends.
-  */
-  clearTenant() {
-    this.tenantInfo = null;
-  }
-  /**
-  * Get tenant ID safely (returns null if not set)
-  *
-  * @returns Tenant ID or null
-  */
-  getTenantIdSafe() {
-    return this.tenantInfo?.id ?? null;
-  }
-  /**
-  * Get tenant subdomain safely (returns null if not set)
-  *
-  * @returns Tenant subdomain or null
-  */
-  getTenantSubdomainSafe() {
-    return this.tenantInfo?.subdomain ?? null;
+        this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
+        throw new import_common10.UnauthorizedException(`Tenant is ${tenantInfo.status}`);
+      }
+      this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
+      this.tenantContext.setTenant(tenantInfo);
+      request.tenant = tenantInfo;
+      this.logger.log(`Tenant context set: ${tenantInfo.subdomain}`);
+    } catch (error) {
+      this.logger.error("Failed to set tenant context", error);
+      throw error;
+    }
+    return next.handle();
   }
 };
-TenantContextService2 = _ts_decorate8([
+TenantContextInterceptor = _ts_decorate8([
   (0, import_common10.Injectable)({
     scope: import_common10.Scope.REQUEST
-  })
-], TenantContextService2);
+  }),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof import_core4.Reflector === "undefined" ? Object : import_core4.Reflector,
+    typeof TenantContextService === "undefined" ? Object : TenantContextService,
+    typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
+    typeof RequestService === "undefined" ? Object : RequestService
+  ])
+], TenantContextInterceptor);
 
 // src/database/services/tenant-database.service.ts
 var import_common11 = require("@nestjs/common");
@@ -1339,18 +1347,18 @@ var DatabaseModule = class _DatabaseModule {
     };
     const providers = [
       asyncProvider,
-      TenantContextService2,
-      PrimaryDatabaseService2,
+      TenantContextService,
+      PrimaryDatabaseService,
       TenantDatabaseService
     ];
     if (mode === "server") {
       providers.push({
-        provide: import_core3.APP_INTERCEPTOR,
+        provide: import_core5.APP_INTERCEPTOR,
         useClass: TenantContextInterceptor
       });
     } else {
       providers.push({
-        provide: import_core3.APP_INTERCEPTOR,
+        provide: import_core5.APP_INTERCEPTOR,
         useClass: MessageTenantContextInterceptor
       });
     }
@@ -1362,8 +1370,8 @@ var DatabaseModule = class _DatabaseModule {
       providers,
       exports: [
         TenantDatabaseService,
-        TenantContextService2,
-        PrimaryDatabaseService2,
+        TenantContextService,
+        PrimaryDatabaseService,
         asyncProvider
       ]
     };
@@ -1378,7 +1386,7 @@ DatabaseModule = _ts_decorate10([
 var import_common13 = require("@nestjs/common");
 var Tenant = (0, import_common13.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
-  const tenantContext = request.app?.get?.(TenantContextService2);
+  const tenantContext = request.app?.get?.(TenantContextService);
   if (!tenantContext) {
     throw new Error("TenantContextService not found.");
   }
@@ -2540,267 +2548,74 @@ HttpModule = _ts_decorate13([
   (0, import_common37.Module)({
     providers: [
       CsrfGuard
-    ],
-    exports: [
-      CsrfGuard
-    ]
-  })
-], HttpModule);
-
-// src/logger/interceptors/http-logger.interceptor.ts
-var import_common38 = require("@nestjs/common");
-var import_operators2 = require("rxjs/operators");
-
-// src/logger/utils/index.ts
-var import_node_async_hooks = require("async_hooks");
-var import_node_crypto = require("crypto");
-var correlationStorage = new import_node_async_hooks.AsyncLocalStorage();
-function getCorrelationContext() {
-  return correlationStorage.getStore();
-}
-__name(getCorrelationContext, "getCorrelationContext");
-function runWithCorrelationContext(context, callback) {
-  return correlationStorage.run(context, callback);
-}
-__name(runWithCorrelationContext, "runWithCorrelationContext");
-function updateCorrelationContext(updates) {
-  const context = correlationStorage.getStore();
-  if (context) {
-    Object.assign(context, updates);
-  }
-}
-__name(updateCorrelationContext, "updateCorrelationContext");
-var DEFAULT_CORRELATION_HEADER = "x-correlation-id";
-function generateCorrelationId() {
-  return (0, import_node_crypto.randomUUID)();
-}
-__name(generateCorrelationId, "generateCorrelationId");
-function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_CORRELATION_HEADER) {
-  if (typeof reply.header === "function") {
-    reply.header(headerName, correlationId);
-  } else if (reply.raw && typeof reply.raw.setHeader === "function") {
-    reply.raw.setHeader(headerName, correlationId);
-  }
-}
-__name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
-
-// src/logger/interceptors/http-logger.interceptor.ts
-function _ts_decorate14(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata7(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param4, "_ts_param");
-var HttpLoggerInterceptor = class {
-  static {
-    __name(this, "HttpLoggerInterceptor");
-  }
-  logger;
-  enableRequestLog;
-  enableResponseLog;
-  slowRequestThreshold;
-  constructor(logger, options) {
-    this.logger = logger;
-    this.enableRequestLog = options?.enableRequestLog ?? true;
-    this.enableResponseLog = options?.enableResponseLog ?? true;
-    this.slowRequestThreshold = options?.slowRequestThreshold ?? 3e3;
-  }
-  intercept(context, next) {
-    if (context.getType() !== "http") {
-      return next.handle();
-    }
-    const httpContext = context.switchToHttp();
-    const request = httpContext.getRequest();
-    const response = httpContext.getResponse();
-    const startTime = Date.now();
-    if (this.enableRequestLog) {
-      this.logRequest(request);
-    }
-    return next.handle().pipe((0, import_operators2.tap)(() => {
-      if (this.enableResponseLog) {
-        const duration = Date.now() - startTime;
-        this.logResponse(request, response, duration);
-      }
-    }), (0, import_operators2.catchError)((error) => {
-      const duration = Date.now() - startTime;
-      this.logError(request, response, duration, error);
-      throw error;
-    }));
-  }
-  logRequest(request) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const metadata = {
-        type: "http_request",
-        method: request.method,
-        url: request.url,
-        correlationId: correlationContext?.correlationId,
-        ip: request.ip,
-        userAgent: request.headers["user-agent"]
-      };
-      this.logger.logWithMetadata("log", `Incoming ${request.method} ${request.url}`, metadata);
-    } catch (error) {
-      this.logger.error("Failed to log HTTP request", error.stack);
-    }
-  }
-  logResponse(request, response, duration) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const statusCode = response.statusCode;
-      const logLevel = statusCode >= 500 ? "error" : statusCode >= 400 ? "warn" : "log";
-      const metadata = {
-        type: "http_response",
-        method: request.method,
-        url: request.url,
-        statusCode,
-        duration,
-        correlationId: correlationContext?.correlationId
-      };
-      if (duration > this.slowRequestThreshold) {
-        metadata.slowRequest = true;
-      }
-      const message = metadata.slowRequest ? `SLOW ${request.method} ${request.url} ${statusCode} - ${duration}ms` : `${request.method} ${request.url} ${statusCode} - ${duration}ms`;
-      this.logger.logWithMetadata(logLevel, message, metadata);
-    } catch (error) {
-      this.logger.error("Failed to log HTTP response", error.stack);
-    }
-  }
-  logError(request, response, duration, error) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const statusCode = response.statusCode || 500;
-      const metadata = {
-        type: "http_error",
-        method: request.method,
-        url: request.url,
-        statusCode,
-        duration,
-        correlationId: correlationContext?.correlationId,
-        errorName: error?.name || "Error",
-        errorMessage: error?.message || "Unknown error"
-      };
-      if (error?.stack) {
-        metadata.trace = error.stack;
-      }
-      if (error?.response) {
-        metadata.errorDetails = error.response;
-      }
-      const message = `ERROR ${request.method} ${request.url} ${statusCode} - ${error?.message || "Unknown error"}`;
-      this.logger.logWithMetadata("error", message, metadata);
-    } catch (loggingError) {
-      this.logger.error("Failed to log HTTP error", loggingError.stack);
-    }
-  }
-};
-HttpLoggerInterceptor = _ts_decorate14([
-  (0, import_common38.Injectable)(),
-  _ts_param4(1, (0, import_common38.Optional)()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof LoggerService === "undefined" ? Object : LoggerService,
-    typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
-  ])
-], HttpLoggerInterceptor);
-
-// src/logger/logger.module.ts
-var import_common41 = require("@nestjs/common");
-
-// src/logger/middleware/correlation-id.middleware.ts
-var import_common39 = require("@nestjs/common");
-function _ts_decorate15(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata8(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata8, "_ts_metadata");
-var CorrelationIdMiddleware = class {
-  static {
-    __name(this, "CorrelationIdMiddleware");
-  }
-  includeInResponse;
-  responseHeader;
-  constructor(options = {}) {
-    this.includeInResponse = options.includeInResponse ?? true;
-    this.responseHeader = options.responseHeader ?? DEFAULT_CORRELATION_HEADER;
-  }
-  /**
-  * Middleware handler for processing requests.
-  */
-  use(_req, reply, next) {
-    const correlationId = generateCorrelationId();
-    if (this.includeInResponse) {
-      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
-    }
-    runWithCorrelationContext({
-      correlationId
-    }, () => {
-      next();
-    });
-  }
-  /**
-  * Fastify hook handler for onRequest.
-  * This is an async function that returns a Promise, ensuring the AsyncLocalStorage
-  * context persists throughout the entire request lifecycle.
-  */
-  async onRequest(_req, reply) {
-    const correlationId = generateCorrelationId();
-    if (this.includeInResponse) {
-      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
-    }
-    const store = correlationStorage.getStore();
-    if (!store) {
-      correlationStorage.enterWith({
-        correlationId
-      });
-    }
-  }
-};
-CorrelationIdMiddleware = _ts_decorate15([
-  (0, import_common39.Injectable)(),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
-    typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
-  ])
-], CorrelationIdMiddleware);
+    ],
+    exports: [
+      CsrfGuard
+    ]
+  })
+], HttpModule);
+
+// src/logger/interceptors/http-logger.interceptor.ts
+var import_common39 = require("@nestjs/common");
+var import_operators2 = require("rxjs/operators");
 
 // src/logger/services/logger.service.ts
-var import_common40 = require("@nestjs/common");
+var import_common38 = require("@nestjs/common");
 var import_winston = require("winston");
 var import_winston_daily_rotate_file = __toESM(require("winston-daily-rotate-file"), 1);
-function _ts_decorate16(decorators, target, key, desc) {
+
+// src/logger/utils/index.ts
+var import_node_async_hooks = require("async_hooks");
+var import_node_crypto = require("crypto");
+var correlationStorage = new import_node_async_hooks.AsyncLocalStorage();
+function getCorrelationContext() {
+  return correlationStorage.getStore();
+}
+__name(getCorrelationContext, "getCorrelationContext");
+function runWithCorrelationContext(context, callback) {
+  return correlationStorage.run(context, callback);
+}
+__name(runWithCorrelationContext, "runWithCorrelationContext");
+function updateCorrelationContext(updates) {
+  const context = correlationStorage.getStore();
+  if (context) {
+    Object.assign(context, updates);
+  }
+}
+__name(updateCorrelationContext, "updateCorrelationContext");
+var DEFAULT_CORRELATION_HEADER = "x-correlation-id";
+function generateCorrelationId() {
+  return (0, import_node_crypto.randomUUID)();
+}
+__name(generateCorrelationId, "generateCorrelationId");
+function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_CORRELATION_HEADER) {
+  if (typeof reply.header === "function") {
+    reply.header(headerName, correlationId);
+  } else if (reply.raw && typeof reply.raw.setHeader === "function") {
+    reply.raw.setHeader(headerName, correlationId);
+  }
+}
+__name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
+
+// src/logger/services/logger.service.ts
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
-var LoggerService2 = class _LoggerService {
+__name(_ts_param4, "_ts_param");
+var LoggerService = class _LoggerService {
   static {
     __name(this, "LoggerService");
   }
@@ -3001,16 +2816,211 @@ ${trace}`;
     return childLogger;
   }
 };
-LoggerService2 = _ts_decorate16([
+LoggerService = _ts_decorate14([
+  (0, import_common38.Injectable)(),
+  _ts_param4(0, (0, import_common38.Optional)()),
+  _ts_param4(1, (0, import_common38.Optional)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
+    typeof Logger === "undefined" ? Object : Logger
+  ])
+], LoggerService);
+
+// src/logger/interceptors/http-logger.interceptor.ts
+function _ts_decorate15(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param5, "_ts_param");
+var HttpLoggerInterceptor = class {
+  static {
+    __name(this, "HttpLoggerInterceptor");
+  }
+  logger;
+  enableRequestLog;
+  enableResponseLog;
+  slowRequestThreshold;
+  constructor(logger, options) {
+    this.logger = logger;
+    this.enableRequestLog = options?.enableRequestLog ?? true;
+    this.enableResponseLog = options?.enableResponseLog ?? true;
+    this.slowRequestThreshold = options?.slowRequestThreshold ?? 3e3;
+  }
+  intercept(context, next) {
+    if (context.getType() !== "http") {
+      return next.handle();
+    }
+    const httpContext = context.switchToHttp();
+    const request = httpContext.getRequest();
+    const response = httpContext.getResponse();
+    const startTime = Date.now();
+    if (this.enableRequestLog) {
+      this.logRequest(request);
+    }
+    return next.handle().pipe((0, import_operators2.tap)(() => {
+      if (this.enableResponseLog) {
+        const duration = Date.now() - startTime;
+        this.logResponse(request, response, duration);
+      }
+    }), (0, import_operators2.catchError)((error) => {
+      const duration = Date.now() - startTime;
+      this.logError(request, response, duration, error);
+      throw error;
+    }));
+  }
+  logRequest(request) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const metadata = {
+        type: "http_request",
+        method: request.method,
+        url: request.url,
+        correlationId: correlationContext?.correlationId,
+        ip: request.ip,
+        userAgent: request.headers["user-agent"]
+      };
+      this.logger.logWithMetadata("log", `Incoming ${request.method} ${request.url}`, metadata);
+    } catch (error) {
+      this.logger.error("Failed to log HTTP request", error.stack);
+    }
+  }
+  logResponse(request, response, duration) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const statusCode = response.statusCode;
+      const logLevel = statusCode >= 500 ? "error" : statusCode >= 400 ? "warn" : "log";
+      const metadata = {
+        type: "http_response",
+        method: request.method,
+        url: request.url,
+        statusCode,
+        duration,
+        correlationId: correlationContext?.correlationId
+      };
+      if (duration > this.slowRequestThreshold) {
+        metadata.slowRequest = true;
+      }
+      const message = metadata.slowRequest ? `SLOW ${request.method} ${request.url} ${statusCode} - ${duration}ms` : `${request.method} ${request.url} ${statusCode} - ${duration}ms`;
+      this.logger.logWithMetadata(logLevel, message, metadata);
+    } catch (error) {
+      this.logger.error("Failed to log HTTP response", error.stack);
+    }
+  }
+  logError(request, response, duration, error) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const statusCode = response.statusCode || 500;
+      const metadata = {
+        type: "http_error",
+        method: request.method,
+        url: request.url,
+        statusCode,
+        duration,
+        correlationId: correlationContext?.correlationId,
+        errorName: error?.name || "Error",
+        errorMessage: error?.message || "Unknown error"
+      };
+      if (error?.stack) {
+        metadata.trace = error.stack;
+      }
+      if (error?.response) {
+        metadata.errorDetails = error.response;
+      }
+      const message = `ERROR ${request.method} ${request.url} ${statusCode} - ${error?.message || "Unknown error"}`;
+      this.logger.logWithMetadata("error", message, metadata);
+    } catch (loggingError) {
+      this.logger.error("Failed to log HTTP error", loggingError.stack);
+    }
+  }
+};
+HttpLoggerInterceptor = _ts_decorate15([
+  (0, import_common39.Injectable)(),
+  _ts_param5(1, (0, import_common39.Optional)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof LoggerService === "undefined" ? Object : LoggerService,
+    typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
+  ])
+], HttpLoggerInterceptor);
+
+// src/logger/logger.module.ts
+var import_common41 = require("@nestjs/common");
+
+// src/logger/middleware/correlation-id.middleware.ts
+var import_common40 = require("@nestjs/common");
+function _ts_decorate16(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata9(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata9, "_ts_metadata");
+var CorrelationIdMiddleware = class {
+  static {
+    __name(this, "CorrelationIdMiddleware");
+  }
+  includeInResponse;
+  responseHeader;
+  constructor(options = {}) {
+    this.includeInResponse = options.includeInResponse ?? true;
+    this.responseHeader = options.responseHeader ?? DEFAULT_CORRELATION_HEADER;
+  }
+  /**
+  * Middleware handler for processing requests.
+  */
+  use(_req, reply, next) {
+    const correlationId = generateCorrelationId();
+    if (this.includeInResponse) {
+      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
+    }
+    runWithCorrelationContext({
+      correlationId
+    }, () => {
+      next();
+    });
+  }
+  /**
+  * Fastify hook handler for onRequest.
+  * This is an async function that returns a Promise, ensuring the AsyncLocalStorage
+  * context persists throughout the entire request lifecycle.
+  */
+  async onRequest(_req, reply) {
+    const correlationId = generateCorrelationId();
+    if (this.includeInResponse) {
+      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
+    }
+    const store = correlationStorage.getStore();
+    if (!store) {
+      correlationStorage.enterWith({
+        correlationId
+      });
+    }
+  }
+};
+CorrelationIdMiddleware = _ts_decorate16([
   (0, import_common40.Injectable)(),
-  _ts_param5(0, (0, import_common40.Optional)()),
-  _ts_param5(1, (0, import_common40.Optional)()),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
-    typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
-    typeof Logger === "undefined" ? Object : Logger
+    typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
   ])
-], LoggerService2);
+], CorrelationIdMiddleware);
 
 // src/logger/logger.module.ts
 function _ts_decorate17(decorators, target, key, desc) {
@@ -3133,9 +3143,9 @@ function createLoggerProviders(options = {}) {
     providers.push(createDefaultLoggerProvider(mergedOptions));
   }
   providers.push({
-    provide: LoggerService2,
+    provide: LoggerService,
     useFactory: /* @__PURE__ */ __name((opts, defaultLogger) => {
-      return new LoggerService2(opts, defaultLogger);
+      return new LoggerService(opts, defaultLogger);
     }, "useFactory"),
     inject: [
       LOGGER_MODULE_OPTIONS,
@@ -3164,7 +3174,7 @@ function createLoggerProviders(options = {}) {
       return new HttpLoggerInterceptor(logger, httpLoggerOptions);
     }, "useFactory"),
     inject: [
-      LoggerService2,
+      LoggerService,
       LOGGER_MODULE_OPTIONS
     ]
   });
@@ -3232,7 +3242,7 @@ var LoggerModule = class _LoggerModule {
       module: _LoggerModule,
       providers,
       exports: [
-        LoggerService2,
+        LoggerService,
         CorrelationIdMiddleware,
         HttpLoggerInterceptor,
         LOGGER_MODULE_OPTIONS
@@ -3309,9 +3319,9 @@ var LoggerModule = class _LoggerModule {
         },
         // Unified logger service
         {
-          provide: LoggerService2,
+          provide: LoggerService,
           useFactory: /* @__PURE__ */ __name((opts, defaultLogger) => {
-            return new LoggerService2(opts, defaultLogger);
+            return new LoggerService(opts, defaultLogger);
           }, "useFactory"),
           inject: [
             LOGGER_MODULE_OPTIONS,
@@ -3342,13 +3352,13 @@ var LoggerModule = class _LoggerModule {
             return new HttpLoggerInterceptor(logger, httpLoggerOptions);
           }, "useFactory"),
           inject: [
-            LoggerService2,
+            LoggerService,
             LOGGER_MODULE_OPTIONS
           ]
         }
       ],
       exports: [
-        LoggerService2,
+        LoggerService,
         CorrelationIdMiddleware,
         HttpLoggerInterceptor,
         LOGGER_MODULE_OPTIONS