@vritti/api-sdk 0.1.3 → 0.1.5

package/dist/index.js

@@ -106,7 +106,7 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-var RequestService2 = class {
+var RequestService = class {
   static {
     __name(this, "RequestService");
   }
@@ -175,7 +175,7 @@ var RequestService2 = class {
     return this.request.headers || {};
   }
 };
-RequestService2 = _ts_decorate([
+RequestService = _ts_decorate([
   Injectable({
     scope: Scope.REQUEST
   }),
@@ -184,7 +184,7 @@ RequestService2 = _ts_decorate([
   _ts_metadata("design:paramtypes", [
     typeof FastifyRequest === "undefined" ? Object : FastifyRequest
   ])
-], RequestService2);
+], RequestService);
 
 // src/request/request.module.ts
 function _ts_decorate2(decorators, target, key, desc) {
@@ -203,16 +203,256 @@ RequestModule = _ts_decorate2([
   Global(),
   Module({
     providers: [
-      RequestService2
+      RequestService
     ],
     exports: [
-      RequestService2
+      RequestService
     ]
   })
 ], RequestModule);
 
 // src/auth/guards/vritti-auth.guard.ts
-import { Injectable as Injectable2, Logger as Logger2, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
+import { Injectable as Injectable3, Logger as Logger3, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
+import { ConfigService } from "@nestjs/config";
+import { Reflector } from "@nestjs/core";
+import { JwtService } from "@nestjs/jwt";
+
+// src/database/services/primary-database.service.ts
+import { Inject as Inject2, Injectable as Injectable2, InternalServerErrorException, Logger as Logger2 } from "@nestjs/common";
+import { eq, or } from "drizzle-orm";
+import { drizzle } from "drizzle-orm/node-postgres";
+import { Pool } from "pg";
+
+// src/database/constants.ts
+var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+
+// src/database/services/primary-database.service.ts
+function _ts_decorate3(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var PrimaryDatabaseService = class _PrimaryDatabaseService {
+  static {
+    __name(this, "PrimaryDatabaseService");
+  }
+  options;
+  logger = new Logger2(_PrimaryDatabaseService.name);
+  /** PostgreSQL connection pool */
+  pool = null;
+  /** Drizzle database instance */
+  db = null;
+  /** In-memory cache: Map<tenantIdentifier, TenantConfig> */
+  tenantConfigCache = /* @__PURE__ */ new Map();
+  /** Cache TTL in milliseconds */
+  cacheTTL;
+  constructor(options) {
+    this.options = options;
+    this.cacheTTL = options.connectionCacheTTL || 3e5;
+  }
+  async onModuleInit() {
+    if (this.options.primaryDb) {
+      await this.initializeDrizzleClient();
+    }
+  }
+  /**
+  * Initialize connection to primary database using Drizzle
+  */
+  async initializeDrizzleClient() {
+    try {
+      const databaseUrl = this.buildPrimaryDbUrl();
+      this.pool = new Pool({
+        connectionString: databaseUrl,
+        max: this.options.maxConnections || 10
+      });
+      this.logger.debug(`Schema keys passed to drizzle: [${Object.keys(this.options.drizzleSchema || {}).join(", ")}]`);
+      this.logger.debug(`Relations keys passed to drizzle: [${Object.keys(this.options.drizzleRelations || {}).join(", ")}]`);
+      this.db = drizzle({
+        client: this.pool,
+        schema: this.options.drizzleSchema,
+        relations: this.options.drizzleRelations
+      });
+      this.logger.debug(`Drizzle query keys after init: [${Object.keys(this.db.query || {}).join(", ")}]`);
+      await this.pool.query("SELECT 1");
+      this.logger.log("Connected to primary database (tenant registry)");
+    } catch (error) {
+      this.logger.error("Failed to connect to primary database", error);
+      throw new InternalServerErrorException("Failed to initialize tenant registry");
+    }
+  }
+  /**
+  * Build connection URL from primary database properties
+  */
+  buildPrimaryDbUrl() {
+    if (!this.options.primaryDb) {
+      throw new Error("Primary database configuration not provided");
+    }
+    const { host, port = 5432, username, password, database, schema = "public", sslMode = "require" } = this.options.primaryDb;
+    let url = `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}`;
+    const params = new URLSearchParams();
+    if (schema) {
+      params.set("schema", schema);
+    }
+    params.set("sslmode", sslMode);
+    const queryString = params.toString();
+    if (queryString) {
+      url += `?${queryString}`;
+    }
+    this.logger.debug(`Primary DB connection URL: ${this.maskPassword(url)}`);
+    return url;
+  }
+  /**
+  * Mask password in connection URL for logging
+  */
+  maskPassword(url) {
+    return url.replace(/:([^@]+)@/, ":****@");
+  }
+  /**
+  * Get tenant configuration by identifier (ID or subdomain)
+  *
+  * @param tenantIdentifier Tenant ID or subdomain
+  * @returns Tenant configuration or null if not found
+  */
+  async getTenantInfo(tenantIdentifier) {
+    const cached = this.tenantConfigCache.get(tenantIdentifier);
+    if (cached) {
+      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
+      return cached;
+    }
+    try {
+      if (!this.db) {
+        throw new Error("Primary database client not initialized");
+      }
+      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
+      const schema = this.options.drizzleSchema;
+      const { tenants, tenantDatabaseConfigs } = schema;
+      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, eq(tenants.id, tenantDatabaseConfigs.tenantId)).where(or(eq(tenants.id, tenantIdentifier), eq(tenants.subdomain, tenantIdentifier))).limit(1);
+      if (!result.length) {
+        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
+        return null;
+      }
+      const row = result[0];
+      const tenant = row.tenants;
+      const config = row.tenant_database_configs;
+      if (tenant.status !== "ACTIVE") {
+        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
+        return null;
+      }
+      const info = {
+        id: tenant.id,
+        subdomain: tenant.subdomain,
+        type: tenant.dbType,
+        status: tenant.status,
+        // For SHARED tenants: schema name
+        schemaName: config?.dbSchema || void 0,
+        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
+        databaseName: config?.dbName || void 0,
+        databaseHost: config?.dbHost || void 0,
+        databasePort: config?.dbPort || void 0,
+        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
+        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
+        databaseSslMode: config?.dbSslMode || void 0,
+        connectionPoolSize: config?.connectionPoolSize || void 0
+      };
+      this.cacheInfo(info);
+      return info;
+    } catch (error) {
+      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
+      throw new InternalServerErrorException("Failed to resolve tenant");
+    }
+  }
+  /**
+  * Cache tenant information with TTL
+  */
+  cacheInfo(info) {
+    this.tenantConfigCache.set(info.id, info);
+    this.tenantConfigCache.set(info.subdomain, info);
+    setTimeout(() => {
+      this.tenantConfigCache.delete(info.id);
+      this.tenantConfigCache.delete(info.subdomain);
+      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
+    }, this.cacheTTL);
+  }
+  /**
+  * Clear cached tenant information
+  *
+  * Useful when tenant settings are updated and cache needs to be invalidated
+  *
+  * @param tenantIdentifier Tenant ID or subdomain
+  */
+  clearTenantCache(tenantIdentifier) {
+    const config = this.tenantConfigCache.get(tenantIdentifier);
+    if (config) {
+      this.tenantConfigCache.delete(config.id);
+      this.tenantConfigCache.delete(config.subdomain);
+      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
+    }
+  }
+  /**
+  * Clear all cached tenant configurations
+  */
+  clearAllCaches() {
+    const size = this.tenantConfigCache.size;
+    this.tenantConfigCache.clear();
+    this.logger.log(`Cleared ${size} cached tenant configs`);
+  }
+  /**
+  * Get the Drizzle database instance for the primary database.
+  * This is a synchronous property that returns the initialized Drizzle client.
+  *
+  * @returns Primary database Drizzle instance
+  * @throws Error if primary database client is not initialized
+  */
+  get drizzleClient() {
+    if (!this.db) {
+      throw new Error("Primary database client not initialized");
+    }
+    return this.db;
+  }
+  /**
+  * Get the Drizzle schema
+  */
+  get schema() {
+    return this.options.drizzleSchema;
+  }
+  /**
+  * Decrypt database credentials
+  *
+  * Override this method to implement your encryption strategy
+  *
+  * @param encrypted Encrypted value
+  * @returns Decrypted value
+  */
+  decrypt(encrypted) {
+    return encrypted;
+  }
+  async onModuleDestroy() {
+    if (this.pool) {
+      await this.pool.end();
+      this.logger.log("Disconnected from primary database");
+    }
+  }
+};
+PrimaryDatabaseService = _ts_decorate3([
+  Injectable2(),
+  _ts_param2(0, Inject2(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
+  ])
+], PrimaryDatabaseService);
 
 // src/auth/utils/token-hash.util.ts
 import * as crypto from "crypto";
@@ -228,17 +468,17 @@ function verifyTokenHash(token, expectedHash) {
 __name(verifyTokenHash, "verifyTokenHash");
 
 // src/auth/guards/vritti-auth.guard.ts
-function _ts_decorate3(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate3, "_ts_decorate");
-function _ts_metadata2(k, v) {
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata2, "_ts_metadata");
+__name(_ts_metadata3, "_ts_metadata");
 var VrittiAuthGuard = class _VrittiAuthGuard {
   static {
     __name(this, "VrittiAuthGuard");
@@ -248,7 +488,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
   jwtService;
   primaryDatabase;
   requestService;
-  logger = new Logger2(_VrittiAuthGuard.name);
+  logger = new Logger3(_VrittiAuthGuard.name);
   constructor(reflector, _configService, jwtService, primaryDatabase, requestService) {
     this.reflector = reflector;
     this._configService = _configService;
@@ -404,12 +644,12 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     this.logger.debug("Token binding validated successfully");
   }
 };
-VrittiAuthGuard = _ts_decorate3([
-  Injectable2({
+VrittiAuthGuard = _ts_decorate4([
+  Injectable3({
     scope: Scope2.REQUEST
   }),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
     typeof Reflector === "undefined" ? Object : Reflector,
     typeof ConfigService === "undefined" ? Object : ConfigService,
     typeof JwtService === "undefined" ? Object : JwtService,
@@ -419,13 +659,13 @@ VrittiAuthGuard = _ts_decorate3([
 ], VrittiAuthGuard);
 
 // src/auth/auth-config.module.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
+__name(_ts_decorate5, "_ts_decorate");
 var AuthConfigModule = class _AuthConfigModule {
   static {
     __name(this, "AuthConfigModule");
@@ -473,7 +713,7 @@ var AuthConfigModule = class _AuthConfigModule {
     };
   }
 };
-AuthConfigModule = _ts_decorate4([
+AuthConfigModule = _ts_decorate5([
   Global2(),
   Module2({})
 ], AuthConfigModule);
@@ -486,33 +726,129 @@ var Onboarding = /* @__PURE__ */ __name(() => SetMetadata("isOnboarding", true),
 import { SetMetadata as SetMetadata2 } from "@nestjs/common";
 var Public = /* @__PURE__ */ __name(() => SetMetadata2("isPublic", true), "Public");
 
+// src/auth/decorators/user-id.decorator.ts
+import { createParamDecorator } from "@nestjs/common";
+var UserId = createParamDecorator((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const user = request.user;
+  if (!user?.id) {
+    throw new Error("User ID not found on request. Ensure route is protected by auth guard.");
+  }
+  return user.id;
+});
+
 // src/database/database.module.ts
 import { Global as Global3, Module as Module3 } from "@nestjs/common";
 import { APP_INTERCEPTOR } from "@nestjs/core";
 
-// src/database/constants.ts
-var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
-
 // src/database/interceptors/message-tenant-context.interceptor.ts
-import { Injectable as Injectable3, Logger as Logger3, Scope as Scope3 } from "@nestjs/common";
+import { Injectable as Injectable5, Logger as Logger4, Scope as Scope4 } from "@nestjs/common";
 import { tap } from "rxjs/operators";
-function _ts_decorate5(decorators, target, key, desc) {
+
+// src/database/services/tenant-context.service.ts
+import { Injectable as Injectable4, Scope as Scope3, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata3(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+var TenantContextService = class {
+  static {
+    __name(this, "TenantContextService");
+  }
+  tenantInfo = null;
+  /**
+  * Set tenant information for this request/message
+  *
+  * This is typically called by:
+  * - TenantContextInterceptor (for HTTP requests in gateway)
+  * - MessageTenantContextInterceptor (for RabbitMQ messages in microservices)
+  * - Manual context setup in message handlers
+  *
+  * @param tenantInfo Complete tenant information
+  * @throws Error if tenant context is already set (prevents accidental overwrites)
+  */
+  setTenant(tenantInfo) {
+    if (this.tenantInfo) {
+      throw new Error("Tenant context already set for this request");
+    }
+    this.tenantInfo = tenantInfo;
+  }
+  /**
+  * Get tenant information for this request/message
+  *
+  * @returns Tenant information
+  * @throws UnauthorizedException if tenant context hasn't been set
+  */
+  getTenant() {
+    if (!this.tenantInfo) {
+      throw new UnauthorizedException2("Tenant context not set");
+    }
+    return this.tenantInfo;
+  }
+  /**
+  * Check if tenant context has been set
+  *
+  * @returns true if tenant context is available
+  */
+  hasTenant() {
+    return this.tenantInfo !== null;
+  }
+  /**
+  * Clear tenant context
+  *
+  * This is useful for cleanup in RabbitMQ message handlers
+  * after the message has been processed.
+  *
+  * HTTP requests don't need manual cleanup as the service
+  * instance is destroyed when the request ends.
+  */
+  clearTenant() {
+    this.tenantInfo = null;
+  }
+  /**
+  * Get tenant ID safely (returns null if not set)
+  *
+  * @returns Tenant ID or null
+  */
+  getTenantIdSafe() {
+    return this.tenantInfo?.id ?? null;
+  }
+  /**
+  * Get tenant subdomain safely (returns null if not set)
+  *
+  * @returns Tenant subdomain or null
+  */
+  getTenantSubdomainSafe() {
+    return this.tenantInfo?.subdomain ?? null;
+  }
+};
+TenantContextService = _ts_decorate6([
+  Injectable4({
+    scope: Scope3.REQUEST
+  })
+], TenantContextService);
+
+// src/database/interceptors/message-tenant-context.interceptor.ts
+function _ts_decorate7(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata4(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata3, "_ts_metadata");
+__name(_ts_metadata4, "_ts_metadata");
 var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
   static {
     __name(this, "MessageTenantContextInterceptor");
   }
   tenantContext;
-  logger = new Logger3(_MessageTenantContextInterceptor.name);
+  logger = new Logger4(_MessageTenantContextInterceptor.name);
   constructor(tenantContext) {
     this.tenantContext = tenantContext;
   }
@@ -557,29 +893,30 @@ var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
     }
   }
 };
-MessageTenantContextInterceptor = _ts_decorate5([
-  Injectable3({
-    scope: Scope3.REQUEST
+MessageTenantContextInterceptor = _ts_decorate7([
+  Injectable5({
+    scope: Scope4.REQUEST
   }),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
     typeof TenantContextService === "undefined" ? Object : TenantContextService
   ])
 ], MessageTenantContextInterceptor);
 
 // src/database/interceptors/tenant-context.interceptor.ts
-import { Injectable as Injectable4, Logger as Logger4, Scope as Scope4, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
-function _ts_decorate6(decorators, target, key, desc) {
+import { Injectable as Injectable6, Logger as Logger5, Scope as Scope5, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
+import { Reflector as Reflector2 } from "@nestjs/core";
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
+__name(_ts_metadata5, "_ts_metadata");
 var TenantContextInterceptor = class _TenantContextInterceptor {
   static {
     __name(this, "TenantContextInterceptor");
@@ -588,7 +925,7 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
   tenantContext;
   primaryDatabase;
   requestService;
-  logger = new Logger4(_TenantContextInterceptor.name);
+  logger = new Logger5(_TenantContextInterceptor.name);
   constructor(reflector, tenantContext, primaryDatabase, requestService) {
     this.reflector = reflector;
     this.tenantContext = tenantContext;
@@ -609,7 +946,7 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
         return next.handle();
       }
       if (!tenantIdentifier) {
-        throw new UnauthorizedException2("Tenant identifier not found in request");
+        throw new UnauthorizedException3("Tenant identifier not found in request");
       }
       this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
       if (tenantIdentifier === "cloud") {
@@ -619,353 +956,35 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
       const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
       if (!tenantInfo) {
         this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
-        throw new UnauthorizedException2("Invalid tenant");
+        throw new UnauthorizedException3("Invalid tenant");
       }
       if (tenantInfo.status !== "ACTIVE") {
         this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
-        throw new UnauthorizedException2(`Tenant is ${tenantInfo.status}`);
-      }
-      this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
-      this.tenantContext.setTenant(tenantInfo);
-      request.tenant = tenantInfo;
-      this.logger.log(`Tenant context set: ${tenantInfo.subdomain}`);
-    } catch (error) {
-      this.logger.error("Failed to set tenant context", error);
-      throw error;
-    }
-    return next.handle();
-  }
-};
-TenantContextInterceptor = _ts_decorate6([
-  Injectable4({
-    scope: Scope4.REQUEST
-  }),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
-    typeof Reflector === "undefined" ? Object : Reflector,
-    typeof TenantContextService === "undefined" ? Object : TenantContextService,
-    typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
-    typeof RequestService === "undefined" ? Object : RequestService
-  ])
-], TenantContextInterceptor);
-
-// src/database/services/primary-database.service.ts
-import { Inject as Inject2, Injectable as Injectable5, InternalServerErrorException, Logger as Logger5 } from "@nestjs/common";
-import { eq, or } from "drizzle-orm";
-import { drizzle } from "drizzle-orm/node-postgres";
-import { Pool } from "pg";
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata5(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var PrimaryDatabaseService2 = class _PrimaryDatabaseService {
-  static {
-    __name(this, "PrimaryDatabaseService");
-  }
-  options;
-  logger = new Logger5(_PrimaryDatabaseService.name);
-  /** PostgreSQL connection pool */
-  pool = null;
-  /** Drizzle database instance */
-  db = null;
-  /** In-memory cache: Map<tenantIdentifier, TenantConfig> */
-  tenantConfigCache = /* @__PURE__ */ new Map();
-  /** Cache TTL in milliseconds */
-  cacheTTL;
-  constructor(options) {
-    this.options = options;
-    this.cacheTTL = options.connectionCacheTTL || 3e5;
-  }
-  async onModuleInit() {
-    if (this.options.primaryDb) {
-      await this.initializeDrizzleClient();
-    }
-  }
-  /**
-  * Initialize connection to primary database using Drizzle
-  */
-  async initializeDrizzleClient() {
-    try {
-      const databaseUrl = this.buildPrimaryDbUrl();
-      this.pool = new Pool({
-        connectionString: databaseUrl,
-        max: this.options.maxConnections || 10
-      });
-      this.logger.debug(`Schema keys passed to drizzle: [${Object.keys(this.options.drizzleSchema || {}).join(", ")}]`);
-      this.logger.debug(`Relations keys passed to drizzle: [${Object.keys(this.options.drizzleRelations || {}).join(", ")}]`);
-      this.db = drizzle({
-        client: this.pool,
-        schema: this.options.drizzleSchema,
-        relations: this.options.drizzleRelations
-      });
-      this.logger.debug(`Drizzle query keys after init: [${Object.keys(this.db.query || {}).join(", ")}]`);
-      await this.pool.query("SELECT 1");
-      this.logger.log("Connected to primary database (tenant registry)");
-    } catch (error) {
-      this.logger.error("Failed to connect to primary database", error);
-      throw new InternalServerErrorException("Failed to initialize tenant registry");
-    }
-  }
-  /**
-  * Build connection URL from primary database properties
-  */
-  buildPrimaryDbUrl() {
-    if (!this.options.primaryDb) {
-      throw new Error("Primary database configuration not provided");
-    }
-    const { host, port = 5432, username, password, database, schema = "public", sslMode = "require" } = this.options.primaryDb;
-    let url = `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}`;
-    const params = new URLSearchParams();
-    if (schema) {
-      params.set("schema", schema);
-    }
-    params.set("sslmode", sslMode);
-    const queryString = params.toString();
-    if (queryString) {
-      url += `?${queryString}`;
-    }
-    this.logger.debug(`Primary DB connection URL: ${this.maskPassword(url)}`);
-    return url;
-  }
-  /**
-  * Mask password in connection URL for logging
-  */
-  maskPassword(url) {
-    return url.replace(/:([^@]+)@/, ":****@");
-  }
-  /**
-  * Get tenant configuration by identifier (ID or subdomain)
-  *
-  * @param tenantIdentifier Tenant ID or subdomain
-  * @returns Tenant configuration or null if not found
-  */
-  async getTenantInfo(tenantIdentifier) {
-    const cached = this.tenantConfigCache.get(tenantIdentifier);
-    if (cached) {
-      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
-      return cached;
-    }
-    try {
-      if (!this.db) {
-        throw new Error("Primary database client not initialized");
-      }
-      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
-      const schema = this.options.drizzleSchema;
-      const { tenants, tenantDatabaseConfigs } = schema;
-      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, eq(tenants.id, tenantDatabaseConfigs.tenantId)).where(or(eq(tenants.id, tenantIdentifier), eq(tenants.subdomain, tenantIdentifier))).limit(1);
-      if (!result.length) {
-        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
-        return null;
-      }
-      const row = result[0];
-      const tenant = row.tenants;
-      const config = row.tenant_database_configs;
-      if (tenant.status !== "ACTIVE") {
-        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
-        return null;
-      }
-      const info = {
-        id: tenant.id,
-        subdomain: tenant.subdomain,
-        type: tenant.dbType,
-        status: tenant.status,
-        // For SHARED tenants: schema name
-        schemaName: config?.dbSchema || void 0,
-        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
-        databaseName: config?.dbName || void 0,
-        databaseHost: config?.dbHost || void 0,
-        databasePort: config?.dbPort || void 0,
-        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
-        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
-        databaseSslMode: config?.dbSslMode || void 0,
-        connectionPoolSize: config?.connectionPoolSize || void 0
-      };
-      this.cacheInfo(info);
-      return info;
-    } catch (error) {
-      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
-      throw new InternalServerErrorException("Failed to resolve tenant");
-    }
-  }
-  /**
-  * Cache tenant information with TTL
-  */
-  cacheInfo(info) {
-    this.tenantConfigCache.set(info.id, info);
-    this.tenantConfigCache.set(info.subdomain, info);
-    setTimeout(() => {
-      this.tenantConfigCache.delete(info.id);
-      this.tenantConfigCache.delete(info.subdomain);
-      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
-    }, this.cacheTTL);
-  }
-  /**
-  * Clear cached tenant information
-  *
-  * Useful when tenant settings are updated and cache needs to be invalidated
-  *
-  * @param tenantIdentifier Tenant ID or subdomain
-  */
-  clearTenantCache(tenantIdentifier) {
-    const config = this.tenantConfigCache.get(tenantIdentifier);
-    if (config) {
-      this.tenantConfigCache.delete(config.id);
-      this.tenantConfigCache.delete(config.subdomain);
-      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
-    }
-  }
-  /**
-  * Clear all cached tenant configurations
-  */
-  clearAllCaches() {
-    const size = this.tenantConfigCache.size;
-    this.tenantConfigCache.clear();
-    this.logger.log(`Cleared ${size} cached tenant configs`);
-  }
-  /**
-  * Get the Drizzle database instance for the primary database.
-  * This is a synchronous property that returns the initialized Drizzle client.
-  *
-  * @returns Primary database Drizzle instance
-  * @throws Error if primary database client is not initialized
-  */
-  get drizzleClient() {
-    if (!this.db) {
-      throw new Error("Primary database client not initialized");
-    }
-    return this.db;
-  }
-  /**
-  * Get the Drizzle schema
-  */
-  get schema() {
-    return this.options.drizzleSchema;
-  }
-  /**
-  * Decrypt database credentials
-  *
-  * Override this method to implement your encryption strategy
-  *
-  * @param encrypted Encrypted value
-  * @returns Decrypted value
-  */
-  decrypt(encrypted) {
-    return encrypted;
-  }
-  async onModuleDestroy() {
-    if (this.pool) {
-      await this.pool.end();
-      this.logger.log("Disconnected from primary database");
-    }
-  }
-};
-PrimaryDatabaseService2 = _ts_decorate7([
-  Injectable5(),
-  _ts_param2(0, Inject2(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
-    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
-  ])
-], PrimaryDatabaseService2);
-
-// src/database/services/tenant-context.service.ts
-import { Injectable as Injectable6, Scope as Scope5, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
-function _ts_decorate8(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate8, "_ts_decorate");
-var TenantContextService2 = class {
-  static {
-    __name(this, "TenantContextService");
-  }
-  tenantInfo = null;
-  /**
-  * Set tenant information for this request/message
-  *
-  * This is typically called by:
-  * - TenantContextInterceptor (for HTTP requests in gateway)
-  * - MessageTenantContextInterceptor (for RabbitMQ messages in microservices)
-  * - Manual context setup in message handlers
-  *
-  * @param tenantInfo Complete tenant information
-  * @throws Error if tenant context is already set (prevents accidental overwrites)
-  */
-  setTenant(tenantInfo) {
-    if (this.tenantInfo) {
-      throw new Error("Tenant context already set for this request");
-    }
-    this.tenantInfo = tenantInfo;
-  }
-  /**
-  * Get tenant information for this request/message
-  *
-  * @returns Tenant information
-  * @throws UnauthorizedException if tenant context hasn't been set
-  */
-  getTenant() {
-    if (!this.tenantInfo) {
-      throw new UnauthorizedException3("Tenant context not set");
-    }
-    return this.tenantInfo;
-  }
-  /**
-  * Check if tenant context has been set
-  *
-  * @returns true if tenant context is available
-  */
-  hasTenant() {
-    return this.tenantInfo !== null;
-  }
-  /**
-  * Clear tenant context
-  *
-  * This is useful for cleanup in RabbitMQ message handlers
-  * after the message has been processed.
-  *
-  * HTTP requests don't need manual cleanup as the service
-  * instance is destroyed when the request ends.
-  */
-  clearTenant() {
-    this.tenantInfo = null;
-  }
-  /**
-  * Get tenant ID safely (returns null if not set)
-  *
-  * @returns Tenant ID or null
-  */
-  getTenantIdSafe() {
-    return this.tenantInfo?.id ?? null;
-  }
-  /**
-  * Get tenant subdomain safely (returns null if not set)
-  *
-  * @returns Tenant subdomain or null
-  */
-  getTenantSubdomainSafe() {
-    return this.tenantInfo?.subdomain ?? null;
+        throw new UnauthorizedException3(`Tenant is ${tenantInfo.status}`);
+      }
+      this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
+      this.tenantContext.setTenant(tenantInfo);
+      request.tenant = tenantInfo;
+      this.logger.log(`Tenant context set: ${tenantInfo.subdomain}`);
+    } catch (error) {
+      this.logger.error("Failed to set tenant context", error);
+      throw error;
+    }
+    return next.handle();
   }
 };
-TenantContextService2 = _ts_decorate8([
+TenantContextInterceptor = _ts_decorate8([
   Injectable6({
     scope: Scope5.REQUEST
-  })
-], TenantContextService2);
+  }),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof Reflector2 === "undefined" ? Object : Reflector2,
+    typeof TenantContextService === "undefined" ? Object : TenantContextService,
+    typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
+    typeof RequestService === "undefined" ? Object : RequestService
+  ])
+], TenantContextInterceptor);
 
 // src/database/services/tenant-database.service.ts
 import { Inject as Inject3, Injectable as Injectable7, InternalServerErrorException as InternalServerErrorException2, Logger as Logger6 } from "@nestjs/common";
@@ -1252,8 +1271,8 @@ var DatabaseModule = class _DatabaseModule {
     };
     const providers = [
       asyncProvider,
-      TenantContextService2,
-      PrimaryDatabaseService2,
+      TenantContextService,
+      PrimaryDatabaseService,
       TenantDatabaseService
     ];
     if (mode === "server") {
@@ -1275,8 +1294,8 @@ var DatabaseModule = class _DatabaseModule {
       providers,
       exports: [
         TenantDatabaseService,
-        TenantContextService2,
-        PrimaryDatabaseService2,
+        TenantContextService,
+        PrimaryDatabaseService,
         asyncProvider
       ]
     };
@@ -1288,10 +1307,10 @@ DatabaseModule = _ts_decorate10([
 ], DatabaseModule);
 
 // src/database/decorators/tenant.decorator.ts
-import { createParamDecorator } from "@nestjs/common";
-var Tenant = createParamDecorator((_data, ctx) => {
+import { createParamDecorator as createParamDecorator2 } from "@nestjs/common";
+var Tenant = createParamDecorator2((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
-  const tenantContext = request.app?.get?.(TenantContextService2);
+  const tenantContext = request.app?.get?.(TenantContextService);
   if (!tenantContext) {
     throw new Error("TenantContextService not found.");
   }
@@ -2452,268 +2471,75 @@ var HttpModule = class {
 HttpModule = _ts_decorate13([
   Module4({
     providers: [
-      CsrfGuard
-    ],
-    exports: [
-      CsrfGuard
-    ]
-  })
-], HttpModule);
-
-// src/logger/interceptors/http-logger.interceptor.ts
-import { Injectable as Injectable9, Optional } from "@nestjs/common";
-import { catchError, tap as tap2 } from "rxjs/operators";
-
-// src/logger/utils/index.ts
-import { AsyncLocalStorage } from "async_hooks";
-import { randomUUID } from "crypto";
-var correlationStorage = new AsyncLocalStorage();
-function getCorrelationContext() {
-  return correlationStorage.getStore();
-}
-__name(getCorrelationContext, "getCorrelationContext");
-function runWithCorrelationContext(context, callback) {
-  return correlationStorage.run(context, callback);
-}
-__name(runWithCorrelationContext, "runWithCorrelationContext");
-function updateCorrelationContext(updates) {
-  const context = correlationStorage.getStore();
-  if (context) {
-    Object.assign(context, updates);
-  }
-}
-__name(updateCorrelationContext, "updateCorrelationContext");
-var DEFAULT_CORRELATION_HEADER = "x-correlation-id";
-function generateCorrelationId() {
-  return randomUUID();
-}
-__name(generateCorrelationId, "generateCorrelationId");
-function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_CORRELATION_HEADER) {
-  if (typeof reply.header === "function") {
-    reply.header(headerName, correlationId);
-  } else if (reply.raw && typeof reply.raw.setHeader === "function") {
-    reply.raw.setHeader(headerName, correlationId);
-  }
-}
-__name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
-
-// src/logger/interceptors/http-logger.interceptor.ts
-function _ts_decorate14(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata7(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param4, "_ts_param");
-var HttpLoggerInterceptor = class {
-  static {
-    __name(this, "HttpLoggerInterceptor");
-  }
-  logger;
-  enableRequestLog;
-  enableResponseLog;
-  slowRequestThreshold;
-  constructor(logger, options) {
-    this.logger = logger;
-    this.enableRequestLog = options?.enableRequestLog ?? true;
-    this.enableResponseLog = options?.enableResponseLog ?? true;
-    this.slowRequestThreshold = options?.slowRequestThreshold ?? 3e3;
-  }
-  intercept(context, next) {
-    if (context.getType() !== "http") {
-      return next.handle();
-    }
-    const httpContext = context.switchToHttp();
-    const request = httpContext.getRequest();
-    const response = httpContext.getResponse();
-    const startTime = Date.now();
-    if (this.enableRequestLog) {
-      this.logRequest(request);
-    }
-    return next.handle().pipe(tap2(() => {
-      if (this.enableResponseLog) {
-        const duration = Date.now() - startTime;
-        this.logResponse(request, response, duration);
-      }
-    }), catchError((error) => {
-      const duration = Date.now() - startTime;
-      this.logError(request, response, duration, error);
-      throw error;
-    }));
-  }
-  logRequest(request) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const metadata = {
-        type: "http_request",
-        method: request.method,
-        url: request.url,
-        correlationId: correlationContext?.correlationId,
-        ip: request.ip,
-        userAgent: request.headers["user-agent"]
-      };
-      this.logger.logWithMetadata("log", `Incoming ${request.method} ${request.url}`, metadata);
-    } catch (error) {
-      this.logger.error("Failed to log HTTP request", error.stack);
-    }
-  }
-  logResponse(request, response, duration) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const statusCode = response.statusCode;
-      const logLevel = statusCode >= 500 ? "error" : statusCode >= 400 ? "warn" : "log";
-      const metadata = {
-        type: "http_response",
-        method: request.method,
-        url: request.url,
-        statusCode,
-        duration,
-        correlationId: correlationContext?.correlationId
-      };
-      if (duration > this.slowRequestThreshold) {
-        metadata.slowRequest = true;
-      }
-      const message = metadata.slowRequest ? `SLOW ${request.method} ${request.url} ${statusCode} - ${duration}ms` : `${request.method} ${request.url} ${statusCode} - ${duration}ms`;
-      this.logger.logWithMetadata(logLevel, message, metadata);
-    } catch (error) {
-      this.logger.error("Failed to log HTTP response", error.stack);
-    }
-  }
-  logError(request, response, duration, error) {
-    try {
-      const correlationContext = getCorrelationContext();
-      const statusCode = response.statusCode || 500;
-      const metadata = {
-        type: "http_error",
-        method: request.method,
-        url: request.url,
-        statusCode,
-        duration,
-        correlationId: correlationContext?.correlationId,
-        errorName: error?.name || "Error",
-        errorMessage: error?.message || "Unknown error"
-      };
-      if (error?.stack) {
-        metadata.trace = error.stack;
-      }
-      if (error?.response) {
-        metadata.errorDetails = error.response;
-      }
-      const message = `ERROR ${request.method} ${request.url} ${statusCode} - ${error?.message || "Unknown error"}`;
-      this.logger.logWithMetadata("error", message, metadata);
-    } catch (loggingError) {
-      this.logger.error("Failed to log HTTP error", loggingError.stack);
-    }
-  }
-};
-HttpLoggerInterceptor = _ts_decorate14([
-  Injectable9(),
-  _ts_param4(1, Optional()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof LoggerService === "undefined" ? Object : LoggerService,
-    typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
-  ])
-], HttpLoggerInterceptor);
-
-// src/logger/logger.module.ts
-import { Global as Global4, Logger as Logger11, Module as Module5 } from "@nestjs/common";
-
-// src/logger/middleware/correlation-id.middleware.ts
-import { Injectable as Injectable10 } from "@nestjs/common";
-function _ts_decorate15(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata8(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata8, "_ts_metadata");
-var CorrelationIdMiddleware = class {
-  static {
-    __name(this, "CorrelationIdMiddleware");
-  }
-  includeInResponse;
-  responseHeader;
-  constructor(options = {}) {
-    this.includeInResponse = options.includeInResponse ?? true;
-    this.responseHeader = options.responseHeader ?? DEFAULT_CORRELATION_HEADER;
-  }
-  /**
-  * Middleware handler for processing requests.
-  */
-  use(_req, reply, next) {
-    const correlationId = generateCorrelationId();
-    if (this.includeInResponse) {
-      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
-    }
-    runWithCorrelationContext({
-      correlationId
-    }, () => {
-      next();
-    });
-  }
-  /**
-  * Fastify hook handler for onRequest.
-  * This is an async function that returns a Promise, ensuring the AsyncLocalStorage
-  * context persists throughout the entire request lifecycle.
-  */
-  async onRequest(_req, reply) {
-    const correlationId = generateCorrelationId();
-    if (this.includeInResponse) {
-      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
-    }
-    const store = correlationStorage.getStore();
-    if (!store) {
-      correlationStorage.enterWith({
-        correlationId
-      });
-    }
-  }
-};
-CorrelationIdMiddleware = _ts_decorate15([
-  Injectable10(),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
-    typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
-  ])
-], CorrelationIdMiddleware);
+      CsrfGuard
+    ],
+    exports: [
+      CsrfGuard
+    ]
+  })
+], HttpModule);
+
+// src/logger/interceptors/http-logger.interceptor.ts
+import { Injectable as Injectable10, Optional as Optional2 } from "@nestjs/common";
+import { catchError, tap as tap2 } from "rxjs/operators";
 
 // src/logger/services/logger.service.ts
-import { Injectable as Injectable11, Optional as Optional2 } from "@nestjs/common";
+import { Injectable as Injectable9, Optional } from "@nestjs/common";
 import { createLogger, format, transports } from "winston";
 import DailyRotateFile from "winston-daily-rotate-file";
-function _ts_decorate16(decorators, target, key, desc) {
+
+// src/logger/utils/index.ts
+import { AsyncLocalStorage } from "async_hooks";
+import { randomUUID } from "crypto";
+var correlationStorage = new AsyncLocalStorage();
+function getCorrelationContext() {
+  return correlationStorage.getStore();
+}
+__name(getCorrelationContext, "getCorrelationContext");
+function runWithCorrelationContext(context, callback) {
+  return correlationStorage.run(context, callback);
+}
+__name(runWithCorrelationContext, "runWithCorrelationContext");
+function updateCorrelationContext(updates) {
+  const context = correlationStorage.getStore();
+  if (context) {
+    Object.assign(context, updates);
+  }
+}
+__name(updateCorrelationContext, "updateCorrelationContext");
+var DEFAULT_CORRELATION_HEADER = "x-correlation-id";
+function generateCorrelationId() {
+  return randomUUID();
+}
+__name(generateCorrelationId, "generateCorrelationId");
+function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_CORRELATION_HEADER) {
+  if (typeof reply.header === "function") {
+    reply.header(headerName, correlationId);
+  } else if (reply.raw && typeof reply.raw.setHeader === "function") {
+    reply.raw.setHeader(headerName, correlationId);
+  }
+}
+__name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
+
+// src/logger/services/logger.service.ts
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
-var LoggerService2 = class _LoggerService {
+__name(_ts_param4, "_ts_param");
+var LoggerService = class _LoggerService {
   static {
     __name(this, "LoggerService");
   }
@@ -2914,16 +2740,211 @@ ${trace}`;
     return childLogger;
   }
 };
-LoggerService2 = _ts_decorate16([
-  Injectable11(),
-  _ts_param5(0, Optional2()),
+LoggerService = _ts_decorate14([
+  Injectable9(),
+  _ts_param4(0, Optional()),
+  _ts_param4(1, Optional()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
+    typeof Logger === "undefined" ? Object : Logger
+  ])
+], LoggerService);
+
+// src/logger/interceptors/http-logger.interceptor.ts
+function _ts_decorate15(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param5, "_ts_param");
+var HttpLoggerInterceptor = class {
+  static {
+    __name(this, "HttpLoggerInterceptor");
+  }
+  logger;
+  enableRequestLog;
+  enableResponseLog;
+  slowRequestThreshold;
+  constructor(logger, options) {
+    this.logger = logger;
+    this.enableRequestLog = options?.enableRequestLog ?? true;
+    this.enableResponseLog = options?.enableResponseLog ?? true;
+    this.slowRequestThreshold = options?.slowRequestThreshold ?? 3e3;
+  }
+  intercept(context, next) {
+    if (context.getType() !== "http") {
+      return next.handle();
+    }
+    const httpContext = context.switchToHttp();
+    const request = httpContext.getRequest();
+    const response = httpContext.getResponse();
+    const startTime = Date.now();
+    if (this.enableRequestLog) {
+      this.logRequest(request);
+    }
+    return next.handle().pipe(tap2(() => {
+      if (this.enableResponseLog) {
+        const duration = Date.now() - startTime;
+        this.logResponse(request, response, duration);
+      }
+    }), catchError((error) => {
+      const duration = Date.now() - startTime;
+      this.logError(request, response, duration, error);
+      throw error;
+    }));
+  }
+  logRequest(request) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const metadata = {
+        type: "http_request",
+        method: request.method,
+        url: request.url,
+        correlationId: correlationContext?.correlationId,
+        ip: request.ip,
+        userAgent: request.headers["user-agent"]
+      };
+      this.logger.logWithMetadata("log", `Incoming ${request.method} ${request.url}`, metadata);
+    } catch (error) {
+      this.logger.error("Failed to log HTTP request", error.stack);
+    }
+  }
+  logResponse(request, response, duration) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const statusCode = response.statusCode;
+      const logLevel = statusCode >= 500 ? "error" : statusCode >= 400 ? "warn" : "log";
+      const metadata = {
+        type: "http_response",
+        method: request.method,
+        url: request.url,
+        statusCode,
+        duration,
+        correlationId: correlationContext?.correlationId
+      };
+      if (duration > this.slowRequestThreshold) {
+        metadata.slowRequest = true;
+      }
+      const message = metadata.slowRequest ? `SLOW ${request.method} ${request.url} ${statusCode} - ${duration}ms` : `${request.method} ${request.url} ${statusCode} - ${duration}ms`;
+      this.logger.logWithMetadata(logLevel, message, metadata);
+    } catch (error) {
+      this.logger.error("Failed to log HTTP response", error.stack);
+    }
+  }
+  logError(request, response, duration, error) {
+    try {
+      const correlationContext = getCorrelationContext();
+      const statusCode = response.statusCode || 500;
+      const metadata = {
+        type: "http_error",
+        method: request.method,
+        url: request.url,
+        statusCode,
+        duration,
+        correlationId: correlationContext?.correlationId,
+        errorName: error?.name || "Error",
+        errorMessage: error?.message || "Unknown error"
+      };
+      if (error?.stack) {
+        metadata.trace = error.stack;
+      }
+      if (error?.response) {
+        metadata.errorDetails = error.response;
+      }
+      const message = `ERROR ${request.method} ${request.url} ${statusCode} - ${error?.message || "Unknown error"}`;
+      this.logger.logWithMetadata("error", message, metadata);
+    } catch (loggingError) {
+      this.logger.error("Failed to log HTTP error", loggingError.stack);
+    }
+  }
+};
+HttpLoggerInterceptor = _ts_decorate15([
+  Injectable10(),
   _ts_param5(1, Optional2()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof LoggerService === "undefined" ? Object : LoggerService,
+    typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
+  ])
+], HttpLoggerInterceptor);
+
+// src/logger/logger.module.ts
+import { Global as Global4, Logger as Logger11, Module as Module5 } from "@nestjs/common";
+
+// src/logger/middleware/correlation-id.middleware.ts
+import { Injectable as Injectable11 } from "@nestjs/common";
+function _ts_decorate16(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata9(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata9, "_ts_metadata");
+var CorrelationIdMiddleware = class {
+  static {
+    __name(this, "CorrelationIdMiddleware");
+  }
+  includeInResponse;
+  responseHeader;
+  constructor(options = {}) {
+    this.includeInResponse = options.includeInResponse ?? true;
+    this.responseHeader = options.responseHeader ?? DEFAULT_CORRELATION_HEADER;
+  }
+  /**
+  * Middleware handler for processing requests.
+  */
+  use(_req, reply, next) {
+    const correlationId = generateCorrelationId();
+    if (this.includeInResponse) {
+      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
+    }
+    runWithCorrelationContext({
+      correlationId
+    }, () => {
+      next();
+    });
+  }
+  /**
+  * Fastify hook handler for onRequest.
+  * This is an async function that returns a Promise, ensuring the AsyncLocalStorage
+  * context persists throughout the entire request lifecycle.
+  */
+  async onRequest(_req, reply) {
+    const correlationId = generateCorrelationId();
+    if (this.includeInResponse) {
+      addCorrelationIdToResponse(reply, correlationId, this.responseHeader);
+    }
+    const store = correlationStorage.getStore();
+    if (!store) {
+      correlationStorage.enterWith({
+        correlationId
+      });
+    }
+  }
+};
+CorrelationIdMiddleware = _ts_decorate16([
+  Injectable11(),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
-    typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
-    typeof Logger === "undefined" ? Object : Logger
+    typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
   ])
-], LoggerService2);
+], CorrelationIdMiddleware);
 
 // src/logger/logger.module.ts
 function _ts_decorate17(decorators, target, key, desc) {
@@ -3046,9 +3067,9 @@ function createLoggerProviders(options = {}) {
     providers.push(createDefaultLoggerProvider(mergedOptions));
   }
   providers.push({
-    provide: LoggerService2,
+    provide: LoggerService,
     useFactory: /* @__PURE__ */ __name((opts, defaultLogger) => {
-      return new LoggerService2(opts, defaultLogger);
+      return new LoggerService(opts, defaultLogger);
     }, "useFactory"),
     inject: [
       LOGGER_MODULE_OPTIONS,
@@ -3077,7 +3098,7 @@ function createLoggerProviders(options = {}) {
       return new HttpLoggerInterceptor(logger, httpLoggerOptions);
     }, "useFactory"),
     inject: [
-      LoggerService2,
+      LoggerService,
       LOGGER_MODULE_OPTIONS
     ]
   });
@@ -3145,7 +3166,7 @@ var LoggerModule = class _LoggerModule {
       module: _LoggerModule,
       providers,
       exports: [
-        LoggerService2,
+        LoggerService,
         CorrelationIdMiddleware,
         HttpLoggerInterceptor,
         LOGGER_MODULE_OPTIONS
@@ -3222,9 +3243,9 @@ var LoggerModule = class _LoggerModule {
         },
         // Unified logger service
         {
-          provide: LoggerService2,
+          provide: LoggerService,
           useFactory: /* @__PURE__ */ __name((opts, defaultLogger) => {
-            return new LoggerService2(opts, defaultLogger);
+            return new LoggerService(opts, defaultLogger);
           }, "useFactory"),
           inject: [
             LOGGER_MODULE_OPTIONS,
@@ -3255,13 +3276,13 @@ var LoggerModule = class _LoggerModule {
             return new HttpLoggerInterceptor(logger, httpLoggerOptions);
           }, "useFactory"),
           inject: [
-            LoggerService2,
+            LoggerService,
             LOGGER_MODULE_OPTIONS
           ]
         }
       ],
       exports: [
-        LoggerService2,
+        LoggerService,
         CorrelationIdMiddleware,
         HttpLoggerInterceptor,
         LOGGER_MODULE_OPTIONS
@@ -3357,7 +3378,7 @@ export {
   InternalServerErrorException3 as InternalServerErrorException,
   LOGGER_MODULE_OPTIONS,
   LoggerModule,
-  LoggerService2 as LoggerService,
+  LoggerService,
   MethodNotAllowedException,
   NotAcceptableException,
   NotFoundException,
@@ -3365,18 +3386,19 @@ export {
   Onboarding,
   PayloadTooLargeException,
   PrimaryBaseRepository,
-  PrimaryDatabaseService2 as PrimaryDatabaseService,
+  PrimaryDatabaseService,
   Public,
   RequestTimeoutException,
   ServiceUnavailableException,
   Tenant,
   TenantBaseRepository,
-  TenantContextService2 as TenantContextService,
+  TenantContextService,
   TenantDatabaseService,
   TooManyRequestsException,
   UnauthorizedException4 as UnauthorizedException,
   UnprocessableEntityException,
   UnsupportedMediaTypeException,
+  UserId,
   ValidationException,
   VrittiAuthGuard,
   addCorrelationIdToResponse,