@vritti/api-sdk 0.1.6 → 0.1.8

package/dist/index.js

@@ -4,7 +4,7 @@ var __name = (target, value) => __defProp(target, "name", { value, configurable:
 // src/auth/auth-config.module.ts
 import { Global as Global2, Module as Module2 } from "@nestjs/common";
 import { ConfigModule, ConfigService as ConfigService2 } from "@nestjs/config";
-import { APP_GUARD } from "@nestjs/core";
+import { APP_GUARD, Reflector as Reflector2 } from "@nestjs/core";
 import { JwtModule } from "@nestjs/jwt";
 
 // src/request/request.module.ts
@@ -217,11 +217,16 @@ RequestModule = _ts_decorate2([
 ], RequestModule);
 
 // src/auth/guards/vritti-auth.guard.ts
-import { Injectable as Injectable3, Logger as Logger3, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
+import { ForbiddenException, Injectable as Injectable3, Logger as Logger3, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
 import { ConfigService } from "@nestjs/config";
 import { Reflector } from "@nestjs/core";
 import { JwtService } from "@nestjs/jwt";
 
+// src/auth/decorators/skip-csrf.decorator.ts
+import { SetMetadata } from "@nestjs/common";
+var SKIP_CSRF_KEY = "skipCsrf";
+var SkipCsrf = /* @__PURE__ */ __name(() => SetMetadata(SKIP_CSRF_KEY, true), "SkipCsrf");
+
 // src/database/services/primary-database.service.ts
 import { Inject as Inject2, Injectable as Injectable2, InternalServerErrorException, Logger as Logger2 } from "@nestjs/common";
 import { eq, or } from "drizzle-orm";
@@ -503,6 +508,14 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
   }
   async canActivate(context) {
     const request = context.switchToHttp().getRequest();
+    const reply = context.switchToHttp().getResponse();
+    const skipCsrf = this.reflector.getAllAndOverride(SKIP_CSRF_KEY, [
+      context.getHandler(),
+      context.getClass()
+    ]);
+    if (!skipCsrf) {
+      await this.validateCsrf(request, reply);
+    }
     const isPublic = this.reflector.getAllAndOverride("isPublic", [
       context.getHandler(),
       context.getClass()
@@ -648,6 +661,52 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     }
     this.logger.debug("Token binding validated successfully");
   }
+  /**
+  * Validate CSRF token for state-changing requests
+  * Uses Fastify's csrf-protection plugin for token validation
+  *
+  * @param request - Fastify request object
+  * @param reply - Fastify reply object
+  * @throws ForbiddenException if CSRF validation fails
+  */
+  async validateCsrf(request, reply) {
+    const safeMethods = [
+      "GET",
+      "HEAD",
+      "OPTIONS"
+    ];
+    if (safeMethods.includes(request.method)) {
+      return;
+    }
+    try {
+      const fastifyInstance = request.server;
+      if (!fastifyInstance.csrfProtection) {
+        this.logger.error("CSRF protection plugin not found. Ensure @fastify/csrf-protection is registered.");
+        throw new ForbiddenException("CSRF protection not configured");
+      }
+      await new Promise((resolve, reject) => {
+        fastifyInstance.csrfProtection(request, reply, (err) => {
+          if (err) {
+            reject(err);
+          } else {
+            resolve();
+          }
+        });
+      });
+      this.logger.debug(`CSRF validation successful for ${request.method} ${request.url}`);
+    } catch (error) {
+      this.logger.warn(`CSRF validation failed for ${request.method} ${request.url}: ${error instanceof Error ? error.message : "Unknown error"}`);
+      throw new ForbiddenException({
+        errors: [
+          {
+            field: "csrf",
+            message: "Invalid or missing CSRF token"
+          }
+        ],
+        message: "CSRF validation failed"
+      });
+    }
+  }
 };
 VrittiAuthGuard = _ts_decorate4([
   Injectable3({
@@ -707,6 +766,11 @@ var AuthConfigModule = class _AuthConfigModule {
         })
       ],
       providers: [
+        // Required for external packages - NestJS global Reflector not available
+        {
+          provide: Reflector2,
+          useClass: Reflector2
+        },
         {
           provide: APP_GUARD,
           useClass: VrittiAuthGuard
@@ -724,12 +788,12 @@ AuthConfigModule = _ts_decorate5([
 ], AuthConfigModule);
 
 // src/auth/decorators/onboarding.decorator.ts
-import { SetMetadata } from "@nestjs/common";
-var Onboarding = /* @__PURE__ */ __name(() => SetMetadata("isOnboarding", true), "Onboarding");
+import { SetMetadata as SetMetadata2 } from "@nestjs/common";
+var Onboarding = /* @__PURE__ */ __name(() => SetMetadata2("isOnboarding", true), "Onboarding");
 
 // src/auth/decorators/public.decorator.ts
-import { SetMetadata as SetMetadata2 } from "@nestjs/common";
-var Public = /* @__PURE__ */ __name(() => SetMetadata2("isPublic", true), "Public");
+import { SetMetadata as SetMetadata3 } from "@nestjs/common";
+var Public = /* @__PURE__ */ __name(() => SetMetadata3("isPublic", true), "Public");
 
 // src/auth/decorators/user-id.decorator.ts
 import { createParamDecorator } from "@nestjs/common";
@@ -742,23 +806,123 @@ var UserId = createParamDecorator((_data, ctx) => {
   return user.id;
 });
 
+// src/auth/guards/sse-auth.guard.ts
+import { Injectable as Injectable4, Logger as Logger4, Scope as Scope3, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
+import { JwtService as JwtService2 } from "@nestjs/jwt";
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata4(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata4, "_ts_metadata");
+var SSE_ALLOWED_ORIGINS = [
+  "http://localhost:5173",
+  "http://localhost:3001",
+  "http://localhost:3012",
+  "http://localhost:5174",
+  "http://local.vrittiai.com:3012",
+  "http://cloud.local.vrittiai.com:3012",
+  "https://local.vrittiai.com:3012",
+  "https://cloud.local.vrittiai.com:3012"
+];
+var SseAuthGuard = class _SseAuthGuard {
+  static {
+    __name(this, "SseAuthGuard");
+  }
+  jwtService;
+  logger = new Logger4(_SseAuthGuard.name);
+  constructor(jwtService) {
+    this.jwtService = jwtService;
+  }
+  async canActivate(context) {
+    const request = context.switchToHttp().getRequest();
+    const response = context.switchToHttp().getResponse();
+    this.setCorsHeaders(request, response);
+    const token = request.query?.token;
+    if (!token) {
+      this.logger.warn("SSE authentication failed: token not found in query params");
+      throw new UnauthorizedException2("Authentication required");
+    }
+    try {
+      const decodedToken = this.jwtService.decode(token);
+      if (!decodedToken) {
+        this.logger.warn("SSE authentication failed: invalid token format");
+        throw new UnauthorizedException2("Invalid token format");
+      }
+      if (decodedToken.type !== "onboarding") {
+        this.logger.warn("SSE authentication failed: endpoint requires onboarding token");
+        throw new UnauthorizedException2("This endpoint requires an onboarding token");
+      }
+      const validatedToken = this.jwtService.verify(token);
+      this.logger.debug(`SSE token validated for user: ${validatedToken.userId}`);
+      request.user = {
+        id: validatedToken.userId
+      };
+      return true;
+    } catch (error) {
+      if (error instanceof UnauthorizedException2) {
+        throw error;
+      }
+      const jwtError = error;
+      if (jwtError?.name === "TokenExpiredError") {
+        this.logger.warn("SSE authentication failed: token expired");
+        throw new UnauthorizedException2("Token has expired");
+      }
+      if (jwtError?.name === "JsonWebTokenError") {
+        this.logger.warn(`SSE authentication failed: ${jwtError?.message}`);
+        throw new UnauthorizedException2("Invalid token");
+      }
+      this.logger.error("Unexpected error in SSE auth guard", error);
+      throw new UnauthorizedException2("Authentication failed");
+    }
+  }
+  /**
+  * Set CORS headers for SSE responses
+  * Must be called before any potential exceptions
+  */
+  setCorsHeaders(request, response) {
+    const origin = request.headers.origin;
+    if (origin && SSE_ALLOWED_ORIGINS.includes(origin)) {
+      response.header("Access-Control-Allow-Origin", origin);
+      response.header("Access-Control-Allow-Credentials", "true");
+      this.logger.debug(`CORS headers set for origin: ${origin}`);
+    } else if (origin) {
+      this.logger.warn(`SSE request from unauthorized origin: ${origin}`);
+    }
+  }
+};
+SseAuthGuard = _ts_decorate6([
+  Injectable4({
+    scope: Scope3.REQUEST
+  }),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof JwtService2 === "undefined" ? Object : JwtService2
+  ])
+], SseAuthGuard);
+
 // src/database/database.module.ts
 import { Global as Global3, Module as Module3 } from "@nestjs/common";
-import { APP_INTERCEPTOR } from "@nestjs/core";
+import { APP_INTERCEPTOR, Reflector as Reflector4 } from "@nestjs/core";
 
 // src/database/interceptors/message-tenant-context.interceptor.ts
-import { Injectable as Injectable5, Logger as Logger4, Scope as Scope4 } from "@nestjs/common";
+import { Injectable as Injectable6, Logger as Logger5, Scope as Scope5 } from "@nestjs/common";
 import { tap } from "rxjs/operators";
 
 // src/database/services/tenant-context.service.ts
-import { Injectable as Injectable4, Scope as Scope3, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
-function _ts_decorate6(decorators, target, key, desc) {
+import { Injectable as Injectable5, Scope as Scope4, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
+__name(_ts_decorate7, "_ts_decorate");
 var TenantContextService = class {
   static {
     __name(this, "TenantContextService");
@@ -789,7 +953,7 @@ var TenantContextService = class {
   */
   getTenant() {
     if (!this.tenantInfo) {
-      throw new UnauthorizedException2("Tenant context not set");
+      throw new UnauthorizedException3("Tenant context not set");
     }
     return this.tenantInfo;
   }
@@ -830,30 +994,30 @@ var TenantContextService = class {
     return this.tenantInfo?.subdomain ?? null;
   }
 };
-TenantContextService = _ts_decorate6([
-  Injectable4({
-    scope: Scope3.REQUEST
+TenantContextService = _ts_decorate7([
+  Injectable5({
+    scope: Scope4.REQUEST
   })
 ], TenantContextService);
 
 // src/database/interceptors/message-tenant-context.interceptor.ts
-function _ts_decorate7(decorators, target, key, desc) {
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
+__name(_ts_metadata5, "_ts_metadata");
 var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
   static {
     __name(this, "MessageTenantContextInterceptor");
   }
   tenantContext;
-  logger = new Logger4(_MessageTenantContextInterceptor.name);
+  logger = new Logger5(_MessageTenantContextInterceptor.name);
   constructor(tenantContext) {
     this.tenantContext = tenantContext;
   }
@@ -898,30 +1062,30 @@ var MessageTenantContextInterceptor = class _MessageTenantContextInterceptor {
     }
   }
 };
-MessageTenantContextInterceptor = _ts_decorate7([
-  Injectable5({
-    scope: Scope4.REQUEST
+MessageTenantContextInterceptor = _ts_decorate8([
+  Injectable6({
+    scope: Scope5.REQUEST
   }),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof TenantContextService === "undefined" ? Object : TenantContextService
   ])
 ], MessageTenantContextInterceptor);
 
 // src/database/interceptors/tenant-context.interceptor.ts
-import { Injectable as Injectable6, Logger as Logger5, Scope as Scope5, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
-import { Reflector as Reflector2 } from "@nestjs/core";
-function _ts_decorate8(decorators, target, key, desc) {
+import { Injectable as Injectable7, Logger as Logger6, Scope as Scope6, UnauthorizedException as UnauthorizedException4 } from "@nestjs/common";
+import { Reflector as Reflector3 } from "@nestjs/core";
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
+__name(_ts_metadata6, "_ts_metadata");
 var TenantContextInterceptor = class _TenantContextInterceptor {
   static {
     __name(this, "TenantContextInterceptor");
@@ -930,7 +1094,7 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
   tenantContext;
   primaryDatabase;
   requestService;
-  logger = new Logger5(_TenantContextInterceptor.name);
+  logger = new Logger6(_TenantContextInterceptor.name);
   constructor(reflector, tenantContext, primaryDatabase, requestService) {
     this.reflector = reflector;
     this.tenantContext = tenantContext;
@@ -951,7 +1115,7 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
         return next.handle();
       }
       if (!tenantIdentifier) {
-        throw new UnauthorizedException3("Tenant identifier not found in request");
+        throw new UnauthorizedException4("Tenant identifier not found in request");
       }
       this.logger.debug(`Tenant identifier extracted: ${tenantIdentifier}`);
       if (tenantIdentifier === "cloud") {
@@ -961,11 +1125,11 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
       const tenantInfo = await this.primaryDatabase.getTenantInfo(tenantIdentifier);
       if (!tenantInfo) {
         this.logger.warn(`Invalid tenant: ${tenantIdentifier}`);
-        throw new UnauthorizedException3("Invalid tenant");
+        throw new UnauthorizedException4("Invalid tenant");
       }
       if (tenantInfo.status !== "ACTIVE") {
         this.logger.warn(`Tenant ${tenantIdentifier} has status: ${tenantInfo.status}`);
-        throw new UnauthorizedException3(`Tenant is ${tenantInfo.status}`);
+        throw new UnauthorizedException4(`Tenant is ${tenantInfo.status}`);
       }
       this.logger.debug(`Tenant config loaded: ${tenantInfo.subdomain} (${tenantInfo.type})`);
       this.tenantContext.setTenant(tenantInfo);
@@ -978,13 +1142,13 @@ var TenantContextInterceptor = class _TenantContextInterceptor {
     return next.handle();
   }
 };
-TenantContextInterceptor = _ts_decorate8([
-  Injectable6({
-    scope: Scope5.REQUEST
+TenantContextInterceptor = _ts_decorate9([
+  Injectable7({
+    scope: Scope6.REQUEST
   }),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
-    typeof Reflector2 === "undefined" ? Object : Reflector2,
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    typeof Reflector3 === "undefined" ? Object : Reflector3,
     typeof TenantContextService === "undefined" ? Object : TenantContextService,
     typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
     typeof RequestService === "undefined" ? Object : RequestService
@@ -992,20 +1156,20 @@ TenantContextInterceptor = _ts_decorate8([
 ], TenantContextInterceptor);
 
 // src/database/services/tenant-database.service.ts
-import { Inject as Inject3, Injectable as Injectable7, InternalServerErrorException as InternalServerErrorException2, Logger as Logger6 } from "@nestjs/common";
+import { Inject as Inject3, Injectable as Injectable8, InternalServerErrorException as InternalServerErrorException2, Logger as Logger7 } from "@nestjs/common";
 import { drizzle as drizzle2 } from "drizzle-orm/node-postgres";
 import { Pool as Pool2 } from "pg";
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
+__name(_ts_metadata7, "_ts_metadata");
 function _ts_param3(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -1018,7 +1182,7 @@ var TenantDatabaseService = class _TenantDatabaseService {
   }
   options;
   tenantContext;
-  logger = new Logger6(_TenantDatabaseService.name);
+  logger = new Logger7(_TenantDatabaseService.name);
   /** Connection pool: Map<cacheKey, TenantConnection> */
   clients = /* @__PURE__ */ new Map();
   /** Track last usage time for idle connection cleanup */
@@ -1187,24 +1351,24 @@ var TenantDatabaseService = class _TenantDatabaseService {
     this.logger.log("All database connections closed");
   }
 };
-TenantDatabaseService = _ts_decorate9([
-  Injectable7(),
+TenantDatabaseService = _ts_decorate10([
+  Injectable8(),
   _ts_param3(0, Inject3(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions,
     typeof TenantContextService === "undefined" ? Object : TenantContextService
   ])
 ], TenantDatabaseService);
 
 // src/database/database.module.ts
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
+__name(_ts_decorate11, "_ts_decorate");
 var DatabaseModule = class _DatabaseModule {
   static {
     __name(this, "DatabaseModule");
@@ -1275,6 +1439,11 @@ var DatabaseModule = class _DatabaseModule {
       inject: options.inject || []
     };
     const providers = [
+      // Required for external packages - NestJS global Reflector not available
+      {
+        provide: Reflector4,
+        useClass: Reflector4
+      },
       asyncProvider,
       TenantContextService,
       PrimaryDatabaseService,
@@ -1306,7 +1475,7 @@ var DatabaseModule = class _DatabaseModule {
     };
   }
 };
-DatabaseModule = _ts_decorate10([
+DatabaseModule = _ts_decorate11([
   Global3(),
   Module3({})
 ], DatabaseModule);
@@ -1323,7 +1492,7 @@ var Tenant = createParamDecorator2((_data, ctx) => {
 });
 
 // src/database/repositories/primary-base.repository.ts
-import { Logger as Logger7 } from "@nestjs/common";
+import { Logger as Logger8 } from "@nestjs/common";
 import { eq as eq2, getTableName, sql } from "drizzle-orm";
 function snakeToCamel(str) {
   return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
@@ -1394,7 +1563,7 @@ var PrimaryBaseRepository = class {
     this.table = table;
     const dbTableName = getTableName(table);
     this.tableName = snakeToCamel(dbTableName);
-    this.logger = new Logger7(this.constructor.name);
+    this.logger = new Logger8(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
     this.logger.debug(`Table name: '${dbTableName}' -> query key: '${this.tableName}'`);
   }
@@ -1634,7 +1803,7 @@ var PrimaryBaseRepository = class {
 };
 
 // src/database/repositories/tenant-base.repository.ts
-import { Logger as Logger8 } from "@nestjs/common";
+import { Logger as Logger9 } from "@nestjs/common";
 import { eq as eq3, getTableName as getTableName2, sql as sql2 } from "drizzle-orm";
 var TenantBaseRepository = class {
   static {
@@ -1691,7 +1860,7 @@ var TenantBaseRepository = class {
     this.database = database;
     this.table = table;
     this.tableName = getTableName2(table);
-    this.logger = new Logger8(this.constructor.name);
+    this.logger = new Logger9(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
   }
   /**
@@ -1924,402 +2093,235 @@ var TenantBaseRepository = class {
 };
 
 // src/exceptions/bad-gateway.exception.ts
-import { HttpStatus as HttpStatus2 } from "@nestjs/common";
+import { HttpStatus } from "@nestjs/common";
 
 // src/exceptions/base-field.exception.ts
-import { HttpException, HttpStatus } from "@nestjs/common";
-var BaseFieldException = class extends HttpException {
+import { HttpException } from "@nestjs/common";
+var HttpProblemException = class extends HttpException {
   static {
-    __name(this, "BaseFieldException");
-  }
-  constructor(statusOrMessageOrErrors, messageOrStatus, statusOrDetail, detail) {
-    let errors;
-    let httpStatus;
-    let finalDetail;
-    if (Array.isArray(statusOrMessageOrErrors)) {
-      errors = statusOrMessageOrErrors;
-      httpStatus = messageOrStatus || HttpStatus.BAD_REQUEST;
-      finalDetail = typeof statusOrDetail === "string" ? statusOrDetail : void 0;
-    } else if (typeof statusOrMessageOrErrors === "string" && typeof messageOrStatus === "string") {
-      errors = [
-        {
-          field: statusOrMessageOrErrors,
-          message: messageOrStatus
-        }
-      ];
-      httpStatus = statusOrDetail;
-      finalDetail = detail;
-    } else if (typeof statusOrMessageOrErrors === "string") {
-      errors = [
-        {
-          message: statusOrMessageOrErrors
-        }
-      ];
-      httpStatus = messageOrStatus;
-      finalDetail = typeof statusOrDetail === "string" ? statusOrDetail : void 0;
-    } else {
-      errors = [
-        {
-          message: "An error occurred"
-        }
-      ];
-      httpStatus = statusOrMessageOrErrors;
-      finalDetail = void 0;
-    }
-    const response = finalDetail !== void 0 ? {
-      errors,
-      detail: finalDetail
-    } : {
-      errors
-    };
-    super(response, httpStatus);
+    __name(this, "HttpProblemException");
+  }
+  constructor(detailOrOptions, httpStatus) {
+    const options = typeof detailOrOptions === "string" ? {
+      detail: detailOrOptions
+    } : detailOrOptions;
+    super({
+      type: options.type ?? "about:blank",
+      label: options.label,
+      detail: options.detail,
+      errors: options.errors ?? []
+    }, httpStatus);
   }
 };
 
 // src/exceptions/bad-gateway.exception.ts
-var BadGatewayException = class extends BaseFieldException {
+var BadGatewayException = class extends HttpProblemException {
   static {
     __name(this, "BadGatewayException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus2.BAD_GATEWAY, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus2.BAD_GATEWAY, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus2.BAD_GATEWAY);
-    } else {
-      super(messageOrField, HttpStatus2.BAD_GATEWAY);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Gateway", HttpStatus.BAD_GATEWAY);
   }
 };
 
 // src/exceptions/bad-request.exception.ts
-import { HttpStatus as HttpStatus3 } from "@nestjs/common";
-var BadRequestException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus2 } from "@nestjs/common";
+var BadRequestException = class extends HttpProblemException {
   static {
     __name(this, "BadRequestException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus3.BAD_REQUEST, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus3.BAD_REQUEST, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus3.BAD_REQUEST);
-    } else {
-      super(messageOrField, HttpStatus3.BAD_REQUEST);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Request", HttpStatus2.BAD_REQUEST);
   }
 };
 
 // src/exceptions/conflict.exception.ts
-import { HttpStatus as HttpStatus4 } from "@nestjs/common";
-var ConflictException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus3 } from "@nestjs/common";
+var ConflictException = class extends HttpProblemException {
   static {
     __name(this, "ConflictException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus4.CONFLICT, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus4.CONFLICT, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus4.CONFLICT);
-    } else {
-      super(messageOrField, HttpStatus4.CONFLICT);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Conflict", HttpStatus3.CONFLICT);
   }
 };
 
 // src/exceptions/forbidden.exception.ts
-import { HttpStatus as HttpStatus5 } from "@nestjs/common";
-var ForbiddenException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus4 } from "@nestjs/common";
+var ForbiddenException2 = class extends HttpProblemException {
   static {
     __name(this, "ForbiddenException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus5.FORBIDDEN, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus5.FORBIDDEN, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus5.FORBIDDEN);
-    } else {
-      super(messageOrField, HttpStatus5.FORBIDDEN);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Forbidden", HttpStatus4.FORBIDDEN);
   }
 };
 
 // src/exceptions/gone.exception.ts
-import { HttpStatus as HttpStatus6 } from "@nestjs/common";
-var GoneException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus5 } from "@nestjs/common";
+var GoneException = class extends HttpProblemException {
   static {
     __name(this, "GoneException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus6.GONE, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus6.GONE, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus6.GONE);
-    } else {
-      super(messageOrField, HttpStatus6.GONE);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Gone", HttpStatus5.GONE);
   }
 };
 
 // src/exceptions/internal-server-error.exception.ts
-import { HttpStatus as HttpStatus7 } from "@nestjs/common";
-var InternalServerErrorException3 = class extends BaseFieldException {
+import { HttpStatus as HttpStatus6 } from "@nestjs/common";
+var InternalServerErrorException3 = class extends HttpProblemException {
   static {
     __name(this, "InternalServerErrorException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus7.INTERNAL_SERVER_ERROR, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus7.INTERNAL_SERVER_ERROR, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus7.INTERNAL_SERVER_ERROR);
-    } else {
-      super(messageOrField, HttpStatus7.INTERNAL_SERVER_ERROR);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Internal Server Error", HttpStatus6.INTERNAL_SERVER_ERROR);
   }
 };
 
 // src/exceptions/method-not-allowed.exception.ts
-import { HttpStatus as HttpStatus8 } from "@nestjs/common";
-var MethodNotAllowedException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus7 } from "@nestjs/common";
+var MethodNotAllowedException = class extends HttpProblemException {
   static {
     __name(this, "MethodNotAllowedException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus8.METHOD_NOT_ALLOWED, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus8.METHOD_NOT_ALLOWED, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus8.METHOD_NOT_ALLOWED);
-    } else {
-      super(messageOrField, HttpStatus8.METHOD_NOT_ALLOWED);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Method Not Allowed", HttpStatus7.METHOD_NOT_ALLOWED);
   }
 };
 
 // src/exceptions/not-acceptable.exception.ts
-import { HttpStatus as HttpStatus9 } from "@nestjs/common";
-var NotAcceptableException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus8 } from "@nestjs/common";
+var NotAcceptableException = class extends HttpProblemException {
   static {
     __name(this, "NotAcceptableException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus9.NOT_ACCEPTABLE, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus9.NOT_ACCEPTABLE, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus9.NOT_ACCEPTABLE);
-    } else {
-      super(messageOrField, HttpStatus9.NOT_ACCEPTABLE);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Acceptable", HttpStatus8.NOT_ACCEPTABLE);
   }
 };
 
 // src/exceptions/not-found.exception.ts
-import { HttpStatus as HttpStatus10 } from "@nestjs/common";
-var NotFoundException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus9 } from "@nestjs/common";
+var NotFoundException = class extends HttpProblemException {
   static {
     __name(this, "NotFoundException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus10.NOT_FOUND, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus10.NOT_FOUND, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus10.NOT_FOUND);
-    } else {
-      super(messageOrField, HttpStatus10.NOT_FOUND);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Found", HttpStatus9.NOT_FOUND);
   }
 };
 
 // src/exceptions/not-implemented.exception.ts
-import { HttpStatus as HttpStatus11 } from "@nestjs/common";
-var NotImplementedException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus10 } from "@nestjs/common";
+var NotImplementedException = class extends HttpProblemException {
   static {
     __name(this, "NotImplementedException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus11.NOT_IMPLEMENTED, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus11.NOT_IMPLEMENTED, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus11.NOT_IMPLEMENTED);
-    } else {
-      super(messageOrField, HttpStatus11.NOT_IMPLEMENTED);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Implemented", HttpStatus10.NOT_IMPLEMENTED);
   }
 };
 
 // src/exceptions/payload-too-large.exception.ts
-import { HttpStatus as HttpStatus12 } from "@nestjs/common";
-var PayloadTooLargeException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus11 } from "@nestjs/common";
+var PayloadTooLargeException = class extends HttpProblemException {
   static {
     __name(this, "PayloadTooLargeException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus12.PAYLOAD_TOO_LARGE, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus12.PAYLOAD_TOO_LARGE, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus12.PAYLOAD_TOO_LARGE);
-    } else {
-      super(messageOrField, HttpStatus12.PAYLOAD_TOO_LARGE);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Payload Too Large", HttpStatus11.PAYLOAD_TOO_LARGE);
   }
 };
 
 // src/exceptions/request-timeout.exception.ts
-import { HttpStatus as HttpStatus13 } from "@nestjs/common";
-var RequestTimeoutException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus12 } from "@nestjs/common";
+var RequestTimeoutException = class extends HttpProblemException {
   static {
     __name(this, "RequestTimeoutException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus13.REQUEST_TIMEOUT, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus13.REQUEST_TIMEOUT, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus13.REQUEST_TIMEOUT);
-    } else {
-      super(messageOrField, HttpStatus13.REQUEST_TIMEOUT);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Request Timeout", HttpStatus12.REQUEST_TIMEOUT);
   }
 };
 
 // src/exceptions/service-unavailable.exception.ts
-import { HttpStatus as HttpStatus14 } from "@nestjs/common";
-var ServiceUnavailableException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus13 } from "@nestjs/common";
+var ServiceUnavailableException = class extends HttpProblemException {
   static {
     __name(this, "ServiceUnavailableException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus14.SERVICE_UNAVAILABLE, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus14.SERVICE_UNAVAILABLE, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus14.SERVICE_UNAVAILABLE);
-    } else {
-      super(messageOrField, HttpStatus14.SERVICE_UNAVAILABLE);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Service Unavailable", HttpStatus13.SERVICE_UNAVAILABLE);
   }
 };
 
 // src/exceptions/too-many-requests.exception.ts
-import { HttpStatus as HttpStatus15 } from "@nestjs/common";
-var TooManyRequestsException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus14 } from "@nestjs/common";
+var TooManyRequestsException = class extends HttpProblemException {
   static {
     __name(this, "TooManyRequestsException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus15.TOO_MANY_REQUESTS, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus15.TOO_MANY_REQUESTS, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus15.TOO_MANY_REQUESTS);
-    } else {
-      super(messageOrField, HttpStatus15.TOO_MANY_REQUESTS);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Too Many Requests", HttpStatus14.TOO_MANY_REQUESTS);
   }
 };
 
 // src/exceptions/unauthorized.exception.ts
-import { HttpStatus as HttpStatus16 } from "@nestjs/common";
-var UnauthorizedException4 = class extends BaseFieldException {
+import { HttpStatus as HttpStatus15 } from "@nestjs/common";
+var UnauthorizedException5 = class extends HttpProblemException {
   static {
     __name(this, "UnauthorizedException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus16.UNAUTHORIZED, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus16.UNAUTHORIZED, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus16.UNAUTHORIZED);
-    } else {
-      super(messageOrField, HttpStatus16.UNAUTHORIZED);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unauthorized", HttpStatus15.UNAUTHORIZED);
   }
 };
 
 // src/exceptions/unprocessable-entity.exception.ts
-import { HttpStatus as HttpStatus17 } from "@nestjs/common";
-var UnprocessableEntityException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus16 } from "@nestjs/common";
+var UnprocessableEntityException = class extends HttpProblemException {
   static {
     __name(this, "UnprocessableEntityException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus17.UNPROCESSABLE_ENTITY, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus17.UNPROCESSABLE_ENTITY, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus17.UNPROCESSABLE_ENTITY);
-    } else {
-      super(messageOrField, HttpStatus17.UNPROCESSABLE_ENTITY);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unprocessable Entity", HttpStatus16.UNPROCESSABLE_ENTITY);
   }
 };
 
 // src/exceptions/unsupported-media-type.exception.ts
-import { HttpStatus as HttpStatus18 } from "@nestjs/common";
-var UnsupportedMediaTypeException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus17 } from "@nestjs/common";
+var UnsupportedMediaTypeException = class extends HttpProblemException {
   static {
     __name(this, "UnsupportedMediaTypeException");
   }
-  constructor(messageOrField, fieldMessageOrDetail, detail) {
-    if (Array.isArray(messageOrField)) {
-      super(messageOrField, HttpStatus18.UNSUPPORTED_MEDIA_TYPE, fieldMessageOrDetail);
-    } else if (detail !== void 0) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus18.UNSUPPORTED_MEDIA_TYPE, detail);
-    } else if (fieldMessageOrDetail) {
-      super(messageOrField, fieldMessageOrDetail, HttpStatus18.UNSUPPORTED_MEDIA_TYPE);
-    } else {
-      super(messageOrField, HttpStatus18.UNSUPPORTED_MEDIA_TYPE);
-    }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unsupported Media Type", HttpStatus17.UNSUPPORTED_MEDIA_TYPE);
   }
 };
 
 // src/exceptions/validation.exception.ts
-import { HttpStatus as HttpStatus19 } from "@nestjs/common";
-var ValidationException = class extends BaseFieldException {
+import { HttpStatus as HttpStatus18 } from "@nestjs/common";
+var ValidationException = class extends HttpProblemException {
   static {
     __name(this, "ValidationException");
   }
-  constructor(errors, detail) {
-    super(errors, HttpStatus19.BAD_REQUEST, detail);
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Validation Failed", HttpStatus18.BAD_REQUEST);
   }
 };
 
 // src/filters/http-exception.filter.ts
-import { Catch, HttpException as HttpException2, HttpStatus as HttpStatus20, Logger as Logger9 } from "@nestjs/common";
-function _ts_decorate11(decorators, target, key, desc) {
+import { Catch, HttpException as HttpException2, HttpStatus as HttpStatus19, Logger as Logger10 } from "@nestjs/common";
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 function getHttpStatusTitle(status) {
-  const enumKey = Object.entries(HttpStatus20).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
+  const enumKey = Object.entries(HttpStatus19).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
   if (!enumKey) {
     return "Error";
   }
@@ -2330,21 +2332,27 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
   static {
     __name(this, "HttpExceptionFilter");
   }
-  logger = new Logger9(_HttpExceptionFilter.name);
+  logger = new Logger10(_HttpExceptionFilter.name);
   catch(exception, host) {
     const ctx = host.switchToHttp();
     const response = ctx.getResponse();
-    let status = HttpStatus20.INTERNAL_SERVER_ERROR;
-    let errors = [];
+    const request = ctx.getRequest();
+    let status = HttpStatus19.INTERNAL_SERVER_ERROR;
+    let type = "about:blank";
+    let label;
     let detail = "Internal server error";
+    let errors = [];
     if (exception instanceof HttpException2) {
       status = exception.getStatus();
       const exceptionResponse = exception.getResponse();
       if (typeof exceptionResponse === "object" && exceptionResponse !== null) {
         const responseObj = exceptionResponse;
-        if ("errors" in responseObj && Array.isArray(responseObj.errors)) {
-          errors = responseObj.errors;
-          detail = ("detail" in responseObj ? responseObj.detail : void 0) || exception.message;
+        if ("type" in responseObj || "label" in responseObj || "errors" in responseObj) {
+          const problemResponse = responseObj;
+          type = problemResponse.type ?? "about:blank";
+          label = problemResponse.label;
+          detail = problemResponse.detail ?? exception.message ?? getHttpStatusTitle(status);
+          errors = problemResponse.errors ?? [];
         } else if ("message" in responseObj && Array.isArray(responseObj.message)) {
           errors = responseObj.message.map((msg) => {
             if (typeof msg === "object" && "property" in msg && "constraints" in msg) {
@@ -2354,135 +2362,249 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
                 message: constraintValues[0] ?? "Validation failed"
               };
             }
-            return {
-              message: typeof msg === "string" ? msg : JSON.stringify(msg)
-            };
-          });
+            return null;
+          }).filter((error) => error !== null);
           detail = "Validation failed";
         } else if ("message" in responseObj) {
           const message = responseObj.message;
-          errors = [
-            {
-              message: Array.isArray(message) ? message.join(", ") : message
-            }
-          ];
-          detail = ("error" in responseObj ? responseObj.error : void 0) || exception.message;
+          detail = Array.isArray(message) ? message.join(", ") : message;
         }
       } else if (typeof exceptionResponse === "string") {
-        errors = [
-          {
-            message: exceptionResponse
-          }
-        ];
         detail = exceptionResponse;
       }
     } else {
       const errorMessage = exception instanceof Error ? exception.message : "Unknown error";
       const stack = exception instanceof Error ? exception.stack : void 0;
       this.logger.error(`Unexpected error: ${errorMessage}`, stack);
-      errors = [
-        {
-          message: "An unexpected error occurred"
-        }
-      ];
+      detail = "An unexpected error occurred";
     }
     const problemDetails = {
+      type,
       title: getHttpStatusTitle(status),
       status,
+      ...label && {
+        label
+      },
       detail,
+      instance: request.url,
       errors
     };
-    response.status(status).send(problemDetails);
+    response.header("Content-Type", "application/problem+json").status(status).send(problemDetails);
   }
 };
-HttpExceptionFilter = _ts_decorate11([
+HttpExceptionFilter = _ts_decorate12([
   Catch()
 ], HttpExceptionFilter);
 
-// src/http/guards/csrf.guard.ts
-import { ForbiddenException as ForbiddenException2, Injectable as Injectable8, Logger as Logger10 } from "@nestjs/common";
-function _ts_decorate12(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate12, "_ts_decorate");
-var CsrfGuard = class _CsrfGuard {
-  static {
-    __name(this, "CsrfGuard");
-  }
-  logger = new Logger10(_CsrfGuard.name);
-  async canActivate(context) {
-    const request = context.switchToHttp().getRequest();
-    const reply = context.switchToHttp().getResponse();
-    const safeMethods = [
-      "GET",
-      "HEAD",
-      "OPTIONS"
-    ];
-    if (safeMethods.includes(request.method)) {
-      return true;
-    }
-    try {
-      const fastifyInstance = request.server;
-      if (!fastifyInstance.csrfProtection) {
-        this.logger.error("CSRF protection plugin not found. Ensure @fastify/csrf-protection is registered.");
-        throw new ForbiddenException2("CSRF protection not configured");
-      }
-      await new Promise((resolve, reject) => {
-        fastifyInstance.csrfProtection(request, reply, (err) => {
-          if (err) {
-            reject(err);
-          } else {
-            resolve();
-          }
-        });
-      });
-      this.logger.debug(`CSRF validation successful for ${request.method} ${request.url}`);
-      return true;
-    } catch (error) {
-      this.logger.warn(`CSRF validation failed for ${request.method} ${request.url}: ${error instanceof Error ? error.message : "Unknown error"}`);
-      throw new ForbiddenException2({
-        errors: [
-          {
-            field: "csrf",
-            message: "Invalid or missing CSRF token"
-          }
-        ],
-        message: "CSRF validation failed"
-      });
-    }
-  }
+// src/utils/phone.utils.ts
+var CALLING_CODE_TO_COUNTRY = {
+  // 3-digit codes
+  "355": "AL",
+  "213": "DZ",
+  "376": "AD",
+  "244": "AO",
+  "672": "AQ",
+  "374": "AM",
+  "297": "AW",
+  "994": "AZ",
+  "973": "BH",
+  "880": "BD",
+  "375": "BY",
+  "501": "BZ",
+  "229": "BJ",
+  "975": "BT",
+  "591": "BO",
+  "387": "BA",
+  "267": "BW",
+  "673": "BN",
+  "359": "BG",
+  "226": "BF",
+  "257": "BI",
+  "855": "KH",
+  "237": "CM",
+  "238": "CV",
+  "236": "CF",
+  "235": "TD",
+  "269": "KM",
+  "242": "CG",
+  "243": "CD",
+  "506": "CR",
+  "385": "HR",
+  "357": "CY",
+  "420": "CZ",
+  "253": "DJ",
+  "593": "EC",
+  "503": "SV",
+  "240": "GQ",
+  "291": "ER",
+  "372": "EE",
+  "251": "ET",
+  "679": "FJ",
+  "358": "FI",
+  "241": "GA",
+  "220": "GM",
+  "995": "GE",
+  "233": "GH",
+  "350": "GI",
+  "299": "GL",
+  "502": "GT",
+  "224": "GN",
+  "245": "GW",
+  "592": "GY",
+  "509": "HT",
+  "504": "HN",
+  "354": "IS",
+  "964": "IQ",
+  "353": "IE",
+  "972": "IL",
+  "225": "CI",
+  "962": "JO",
+  "254": "KE",
+  "686": "KI",
+  "965": "KW",
+  "996": "KG",
+  "856": "LA",
+  "371": "LV",
+  "961": "LB",
+  "266": "LS",
+  "231": "LR",
+  "218": "LY",
+  "423": "LI",
+  "370": "LT",
+  "352": "LU",
+  "389": "MK",
+  "261": "MG",
+  "265": "MW",
+  "960": "MV",
+  "223": "ML",
+  "356": "MT",
+  "692": "MH",
+  "222": "MR",
+  "230": "MU",
+  "262": "YT",
+  "691": "FM",
+  "373": "MD",
+  "377": "MC",
+  "976": "MN",
+  "382": "ME",
+  "258": "MZ",
+  "264": "NA",
+  "674": "NR",
+  "977": "NP",
+  "505": "NI",
+  "227": "NE",
+  "234": "NG",
+  "683": "NU",
+  "968": "OM",
+  "680": "PW",
+  "970": "PS",
+  "507": "PA",
+  "675": "PG",
+  "595": "PY",
+  "351": "PT",
+  "974": "QA",
+  "250": "RW",
+  "685": "WS",
+  "378": "SM",
+  "239": "ST",
+  "966": "SA",
+  "221": "SN",
+  "381": "RS",
+  "248": "SC",
+  "232": "SL",
+  "421": "SK",
+  "386": "SI",
+  "677": "SB",
+  "252": "SO",
+  "211": "SS",
+  "249": "SD",
+  "597": "SR",
+  "268": "SZ",
+  "963": "SY",
+  "992": "TJ",
+  "255": "TZ",
+  "228": "TG",
+  "676": "TO",
+  "216": "TN",
+  "993": "TM",
+  "688": "TV",
+  "256": "UG",
+  "380": "UA",
+  "971": "AE",
+  "598": "UY",
+  "998": "UZ",
+  "678": "VU",
+  "379": "VA",
+  "967": "YE",
+  "260": "ZM",
+  "263": "ZW",
+  // 2-digit codes
+  "93": "AF",
+  "54": "AR",
+  "61": "AU",
+  "43": "AT",
+  "32": "BE",
+  "55": "BR",
+  "56": "CL",
+  "86": "CN",
+  "57": "CO",
+  "53": "CU",
+  "45": "DK",
+  "20": "EG",
+  "33": "FR",
+  "49": "DE",
+  "30": "GR",
+  "36": "HU",
+  "91": "IN",
+  "62": "ID",
+  "98": "IR",
+  "39": "IT",
+  "81": "JP",
+  "82": "KR",
+  "60": "MY",
+  "52": "MX",
+  "31": "NL",
+  "64": "NZ",
+  "47": "NO",
+  "92": "PK",
+  "51": "PE",
+  "63": "PH",
+  "48": "PL",
+  "40": "RO",
+  "65": "SG",
+  "27": "ZA",
+  "34": "ES",
+  "94": "LK",
+  "46": "SE",
+  "41": "CH",
+  "66": "TH",
+  "90": "TR",
+  "44": "GB",
+  "58": "VE",
+  "84": "VN",
+  // 1-digit codes (shared codes default to most common country)
+  "1": "US",
+  "7": "RU"
 };
-CsrfGuard = _ts_decorate12([
-  Injectable8()
-], CsrfGuard);
-
-// src/http/http.module.ts
-import { Module as Module4 } from "@nestjs/common";
-function _ts_decorate13(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
+function extractCountryFromPhone(phone) {
+  const digits = phone.startsWith("+") ? phone.slice(1) : phone;
+  for (const length of [
+    3,
+    2,
+    1
+  ]) {
+    const prefix = digits.slice(0, length);
+    if (CALLING_CODE_TO_COUNTRY[prefix]) {
+      return CALLING_CODE_TO_COUNTRY[prefix];
+    }
+  }
+  return void 0;
 }
-__name(_ts_decorate13, "_ts_decorate");
-var HttpModule = class {
-  static {
-    __name(this, "HttpModule");
-  }
-};
-HttpModule = _ts_decorate13([
-  Module4({
-    providers: [
-      CsrfGuard
-    ],
-    exports: [
-      CsrfGuard
-    ]
-  })
-], HttpModule);
+__name(extractCountryFromPhone, "extractCountryFromPhone");
+function normalizePhoneNumber(phone) {
+  return phone.startsWith("+") ? phone : `+${phone}`;
+}
+__name(normalizePhoneNumber, "normalizePhoneNumber");
 
 // src/logger/interceptors/http-logger.interceptor.ts
 import { Injectable as Injectable10, Optional as Optional2 } from "@nestjs/common";
@@ -2527,17 +2649,17 @@ function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_C
 __name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
 
 // src/logger/services/logger.service.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
+__name(_ts_metadata8, "_ts_metadata");
 function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -2745,29 +2867,29 @@ ${trace}`;
     return childLogger;
   }
 };
-LoggerService = _ts_decorate14([
+LoggerService = _ts_decorate13([
   Injectable9(),
   _ts_param4(0, Optional()),
   _ts_param4(1, Optional()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
     typeof Logger === "undefined" ? Object : Logger
   ])
 ], LoggerService);
 
 // src/logger/interceptors/http-logger.interceptor.ts
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
+__name(_ts_metadata9, "_ts_metadata");
 function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -2875,32 +2997,32 @@ var HttpLoggerInterceptor = class {
     }
   }
 };
-HttpLoggerInterceptor = _ts_decorate15([
+HttpLoggerInterceptor = _ts_decorate14([
   Injectable10(),
   _ts_param5(1, Optional2()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof LoggerService === "undefined" ? Object : LoggerService,
     typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
   ])
 ], HttpLoggerInterceptor);
 
 // src/logger/logger.module.ts
-import { Global as Global4, Logger as Logger11, Module as Module5 } from "@nestjs/common";
+import { Global as Global4, Logger as Logger11, Module as Module4 } from "@nestjs/common";
 
 // src/logger/middleware/correlation-id.middleware.ts
 import { Injectable as Injectable11 } from "@nestjs/common";
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
+__name(_ts_metadata10, "_ts_metadata");
 var CorrelationIdMiddleware = class {
   static {
     __name(this, "CorrelationIdMiddleware");
@@ -2943,22 +3065,22 @@ var CorrelationIdMiddleware = class {
     }
   }
 };
-CorrelationIdMiddleware = _ts_decorate16([
+CorrelationIdMiddleware = _ts_decorate15([
   Injectable11(),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
   ])
 ], CorrelationIdMiddleware);
 
 // src/logger/logger.module.ts
-function _ts_decorate17(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
+__name(_ts_decorate16, "_ts_decorate");
 var LOGGER_MODULE_OPTIONS = Symbol("LOGGER_MODULE_OPTIONS");
 var DEFAULT_LOGGER_OPTIONS = {
   provider: "winston",
@@ -3361,25 +3483,23 @@ var LoggerModule = class _LoggerModule {
     throw new Error("LoggerModule.forRootAsync() requires one of: useFactory, useClass, or useExisting");
   }
 };
-LoggerModule = _ts_decorate17([
+LoggerModule = _ts_decorate16([
   Global4(),
-  Module5({})
+  Module4({})
 ], LoggerModule);
 export {
   AuthConfigModule,
   BadGatewayException,
   BadRequestException,
-  BaseFieldException,
   ConflictException,
   CorrelationIdMiddleware,
-  CsrfGuard,
   DEFAULT_CORRELATION_HEADER,
   DatabaseModule,
-  ForbiddenException,
+  ForbiddenException2 as ForbiddenException,
   GoneException,
   HttpExceptionFilter,
   HttpLoggerInterceptor,
-  HttpModule,
+  HttpProblemException,
   InternalServerErrorException3 as InternalServerErrorException,
   LOGGER_MODULE_OPTIONS,
   LoggerModule,
@@ -3394,13 +3514,16 @@ export {
   PrimaryDatabaseService,
   Public,
   RequestTimeoutException,
+  SKIP_CSRF_KEY,
   ServiceUnavailableException,
+  SkipCsrf,
+  SseAuthGuard,
   Tenant,
   TenantBaseRepository,
   TenantContextService,
   TenantDatabaseService,
   TooManyRequestsException,
-  UnauthorizedException4 as UnauthorizedException,
+  UnauthorizedException5 as UnauthorizedException,
   UnprocessableEntityException,
   UnsupportedMediaTypeException,
   UserId,
@@ -3410,6 +3533,7 @@ export {
   configureApiSdk,
   correlationStorage,
   defineConfig,
+  extractCountryFromPhone,
   generateCorrelationId,
   getConfig,
   getCorrelationContext,
@@ -3417,6 +3541,7 @@ export {
   getJwtExpiry,
   getRefreshCookieOptions,
   hashToken,
+  normalizePhoneNumber,
   resetConfig,
   runWithCorrelationContext,
   updateCorrelationContext,