@vritti/api-sdk 0.2.1 → 0.2.3

package/dist/index.cjs

@@ -10,11 +10,11 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
-var __copyProps = (to, from, except, desc) => {
+var __copyProps = (to, from, except, desc2) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
       if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc2 = __getOwnPropDesc(from, key)) || desc2.enumerable });
   }
   return to;
 };
@@ -35,18 +35,23 @@ __export(index_exports, {
   AuthConfigModule: () => AuthConfigModule,
   BadGatewayException: () => BadGatewayException,
   BadRequestException: () => BadRequestException,
+  CACHE_PROVIDER: () => CACHE_PROVIDER,
+  CacheModule: () => CacheModule,
+  CacheService: () => CacheService,
   ConflictException: () => ConflictException,
+  CookieDomain: () => CookieDomain,
   CorrelationIdMiddleware: () => CorrelationIdMiddleware,
   DEFAULT_CORRELATION_HEADER: () => DEFAULT_CORRELATION_HEADER,
   DatabaseModule: () => DatabaseModule,
   EmailModule: () => EmailModule,
   EmailService: () => EmailService,
-  ForbiddenException: () => ForbiddenException2,
+  FilterProcessor: () => FilterProcessor,
+  ForbiddenException: () => ForbiddenException,
   GoneException: () => GoneException,
   HttpExceptionFilter: () => HttpExceptionFilter,
   HttpLoggerInterceptor: () => HttpLoggerInterceptor,
   HttpProblemException: () => HttpProblemException,
-  InternalServerErrorException: () => InternalServerErrorException3,
+  InternalServerErrorException: () => InternalServerErrorException,
   JwtAuthService: () => JwtAuthService,
   LOGGER_MODULE_OPTIONS: () => LOGGER_MODULE_OPTIONS,
   LoggerModule: () => LoggerModule,
@@ -61,6 +66,8 @@ __export(index_exports, {
   PrimaryDatabaseService: () => PrimaryDatabaseService,
   Public: () => Public,
   RESET_KEY: () => RESET_KEY,
+  RedisCacheProvider: () => RedisCacheProvider,
+  RefreshCookieOptions: () => RefreshCookieOptions,
   RefreshTokenCookie: () => RefreshTokenCookie,
   RequestTimeoutException: () => RequestTimeoutException,
   Reset: () => Reset,
@@ -70,13 +77,15 @@ __export(index_exports, {
   ServiceUnavailableException: () => ServiceUnavailableException,
   SessionData: () => SessionData,
   SkipCsrf: () => SkipCsrf,
+  SuccessResponseDto: () => SuccessResponseDto,
+  TableResponseDto: () => TableResponseDto,
   Tenant: () => Tenant,
   TenantBaseRepository: () => TenantBaseRepository,
   TenantContextService: () => TenantContextService,
   TenantDatabaseService: () => TenantDatabaseService,
   TokenType: () => TokenType,
   TooManyRequestsException: () => TooManyRequestsException,
-  UnauthorizedException: () => UnauthorizedException3,
+  UnauthorizedException: () => UnauthorizedException,
   UnprocessableEntityException: () => UnprocessableEntityException,
   UnsupportedMediaTypeException: () => UnsupportedMediaTypeException,
   UserId: () => UserId,
@@ -93,6 +102,7 @@ __export(index_exports, {
   getHttpStatusTitle: () => getHttpStatusTitle,
   getJwtExpiry: () => getJwtExpiry,
   getRefreshCookieOptions: () => getRefreshCookieOptions,
+  getRefreshCookieOptionsForHost: () => getRefreshCookieOptionsForHost,
   getTokenExpiry: () => getTokenExpiry,
   hashToken: () => hashToken,
   jwtConfigFactory: () => jwtConfigFactory,
@@ -106,18 +116,237 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/auth/auth-config.module.ts
-var import_common7 = require("@nestjs/common");
+var import_common26 = require("@nestjs/common");
 var import_config4 = require("@nestjs/config");
 var import_core3 = require("@nestjs/core");
 var import_jwt4 = require("@nestjs/jwt");
 
 // src/request/request.module.ts
-var import_common2 = require("@nestjs/common");
+var import_common21 = require("@nestjs/common");
 
 // src/request/services/request.service.ts
-var import_common = require("@nestjs/common");
+var import_common20 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
+// src/exceptions/bad-gateway.exception.ts
+var import_common2 = require("@nestjs/common");
+
+// src/exceptions/base-field.exception.ts
+var import_common = require("@nestjs/common");
+var HttpProblemException = class extends import_common.HttpException {
+  static {
+    __name(this, "HttpProblemException");
+  }
+  constructor(detailOrOptions, httpStatus) {
+    const options = typeof detailOrOptions === "string" ? {
+      detail: detailOrOptions
+    } : detailOrOptions;
+    super({
+      type: options.type ?? "about:blank",
+      label: options.label,
+      detail: options.detail,
+      errors: options.errors ?? []
+    }, httpStatus);
+  }
+};
+
+// src/exceptions/bad-gateway.exception.ts
+var BadGatewayException = class extends HttpProblemException {
+  static {
+    __name(this, "BadGatewayException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Gateway", import_common2.HttpStatus.BAD_GATEWAY);
+  }
+};
+
+// src/exceptions/bad-request.exception.ts
+var import_common3 = require("@nestjs/common");
+var BadRequestException = class extends HttpProblemException {
+  static {
+    __name(this, "BadRequestException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Request", import_common3.HttpStatus.BAD_REQUEST);
+  }
+};
+
+// src/exceptions/conflict.exception.ts
+var import_common4 = require("@nestjs/common");
+var ConflictException = class extends HttpProblemException {
+  static {
+    __name(this, "ConflictException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Conflict", import_common4.HttpStatus.CONFLICT);
+  }
+};
+
+// src/exceptions/forbidden.exception.ts
+var import_common5 = require("@nestjs/common");
+var ForbiddenException = class extends HttpProblemException {
+  static {
+    __name(this, "ForbiddenException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Forbidden", import_common5.HttpStatus.FORBIDDEN);
+  }
+};
+
+// src/exceptions/gone.exception.ts
+var import_common6 = require("@nestjs/common");
+var GoneException = class extends HttpProblemException {
+  static {
+    __name(this, "GoneException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Gone", import_common6.HttpStatus.GONE);
+  }
+};
+
+// src/exceptions/internal-server-error.exception.ts
+var import_common7 = require("@nestjs/common");
+var InternalServerErrorException = class extends HttpProblemException {
+  static {
+    __name(this, "InternalServerErrorException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Internal Server Error", import_common7.HttpStatus.INTERNAL_SERVER_ERROR);
+  }
+};
+
+// src/exceptions/method-not-allowed.exception.ts
+var import_common8 = require("@nestjs/common");
+var MethodNotAllowedException = class extends HttpProblemException {
+  static {
+    __name(this, "MethodNotAllowedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Method Not Allowed", import_common8.HttpStatus.METHOD_NOT_ALLOWED);
+  }
+};
+
+// src/exceptions/not-acceptable.exception.ts
+var import_common9 = require("@nestjs/common");
+var NotAcceptableException = class extends HttpProblemException {
+  static {
+    __name(this, "NotAcceptableException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Acceptable", import_common9.HttpStatus.NOT_ACCEPTABLE);
+  }
+};
+
+// src/exceptions/not-found.exception.ts
+var import_common10 = require("@nestjs/common");
+var NotFoundException = class extends HttpProblemException {
+  static {
+    __name(this, "NotFoundException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Found", import_common10.HttpStatus.NOT_FOUND);
+  }
+};
+
+// src/exceptions/not-implemented.exception.ts
+var import_common11 = require("@nestjs/common");
+var NotImplementedException = class extends HttpProblemException {
+  static {
+    __name(this, "NotImplementedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Implemented", import_common11.HttpStatus.NOT_IMPLEMENTED);
+  }
+};
+
+// src/exceptions/payload-too-large.exception.ts
+var import_common12 = require("@nestjs/common");
+var PayloadTooLargeException = class extends HttpProblemException {
+  static {
+    __name(this, "PayloadTooLargeException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Payload Too Large", import_common12.HttpStatus.PAYLOAD_TOO_LARGE);
+  }
+};
+
+// src/exceptions/request-timeout.exception.ts
+var import_common13 = require("@nestjs/common");
+var RequestTimeoutException = class extends HttpProblemException {
+  static {
+    __name(this, "RequestTimeoutException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Request Timeout", import_common13.HttpStatus.REQUEST_TIMEOUT);
+  }
+};
+
+// src/exceptions/service-unavailable.exception.ts
+var import_common14 = require("@nestjs/common");
+var ServiceUnavailableException = class extends HttpProblemException {
+  static {
+    __name(this, "ServiceUnavailableException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Service Unavailable", import_common14.HttpStatus.SERVICE_UNAVAILABLE);
+  }
+};
+
+// src/exceptions/too-many-requests.exception.ts
+var import_common15 = require("@nestjs/common");
+var TooManyRequestsException = class extends HttpProblemException {
+  static {
+    __name(this, "TooManyRequestsException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Too Many Requests", import_common15.HttpStatus.TOO_MANY_REQUESTS);
+  }
+};
+
+// src/exceptions/unauthorized.exception.ts
+var import_common16 = require("@nestjs/common");
+var UnauthorizedException = class extends HttpProblemException {
+  static {
+    __name(this, "UnauthorizedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unauthorized", import_common16.HttpStatus.UNAUTHORIZED);
+  }
+};
+
+// src/exceptions/unprocessable-entity.exception.ts
+var import_common17 = require("@nestjs/common");
+var UnprocessableEntityException = class extends HttpProblemException {
+  static {
+    __name(this, "UnprocessableEntityException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unprocessable Entity", import_common17.HttpStatus.UNPROCESSABLE_ENTITY);
+  }
+};
+
+// src/exceptions/unsupported-media-type.exception.ts
+var import_common18 = require("@nestjs/common");
+var UnsupportedMediaTypeException = class extends HttpProblemException {
+  static {
+    __name(this, "UnsupportedMediaTypeException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unsupported Media Type", import_common18.HttpStatus.UNSUPPORTED_MEDIA_TYPE);
+  }
+};
+
+// src/exceptions/validation.exception.ts
+var import_common19 = require("@nestjs/common");
+var ValidationException = class extends HttpProblemException {
+  static {
+    __name(this, "ValidationException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Validation Failed", import_common19.HttpStatus.BAD_REQUEST);
+  }
+};
+
 // src/config/index.ts
 var defaultConfig = {
   cookie: {
@@ -174,19 +403,36 @@ function resetConfig() {
 }
 __name(resetConfig, "resetConfig");
 function getRefreshCookieOptions() {
-  const options = {
+  return {
     httpOnly: true,
     secure: currentConfig.cookie.refreshCookieSecure,
     sameSite: currentConfig.cookie.refreshCookieSameSite,
     path: currentConfig.cookie.refreshCookiePath,
-    maxAge: currentConfig.cookie.refreshCookieMaxAge
+    maxAge: currentConfig.cookie.refreshCookieMaxAge,
+    ...currentConfig.cookie.refreshCookieDomain && {
+      domain: currentConfig.cookie.refreshCookieDomain
+    }
   };
-  if (currentConfig.cookie.refreshCookieDomain) {
-    options.domain = currentConfig.cookie.refreshCookieDomain;
-  }
-  return options;
 }
 __name(getRefreshCookieOptions, "getRefreshCookieOptions");
+function getRefreshCookieOptionsForHost(hostname) {
+  const baseDomain = currentConfig.cookie.refreshCookieDomain;
+  if (!baseDomain) {
+    throw new Error("refreshCookieDomain must be configured before using getRefreshCookieOptionsForHost");
+  }
+  if (!hostname.endsWith(`.${baseDomain}`)) {
+    throw new UnauthorizedException("Invalid request host.");
+  }
+  return {
+    httpOnly: true,
+    secure: currentConfig.cookie.refreshCookieSecure,
+    sameSite: currentConfig.cookie.refreshCookieSameSite,
+    path: currentConfig.cookie.refreshCookiePath,
+    maxAge: currentConfig.cookie.refreshCookieMaxAge,
+    domain: hostname
+  };
+}
+__name(getRefreshCookieOptionsForHost, "getRefreshCookieOptionsForHost");
 function getJwtExpiry() {
   return {
     access: currentConfig.jwt.accessTokenExpiry,
@@ -197,9 +443,9 @@ function getJwtExpiry() {
 __name(getJwtExpiry, "getJwtExpiry");
 
 // src/request/services/request.service.ts
-function _ts_decorate(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -265,10 +511,10 @@ var RequestService = class {
   }
 };
 RequestService = _ts_decorate([
-  (0, import_common.Injectable)({
-    scope: import_common.Scope.REQUEST
+  (0, import_common20.Injectable)({
+    scope: import_common20.Scope.REQUEST
   }),
-  _ts_param(0, (0, import_common.Inject)(import_core.REQUEST)),
+  _ts_param(0, (0, import_common20.Inject)(import_core.REQUEST)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof FastifyRequest === "undefined" ? Object : FastifyRequest
@@ -276,9 +522,9 @@ RequestService = _ts_decorate([
 ], RequestService);
 
 // src/request/request.module.ts
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate2(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -289,8 +535,8 @@ var RequestModule = class {
   }
 };
 RequestModule = _ts_decorate2([
-  (0, import_common2.Global)(),
-  (0, import_common2.Module)({
+  (0, import_common21.Global)(),
+  (0, import_common21.Module)({
     providers: [
       RequestService
     ],
@@ -301,21 +547,21 @@ RequestModule = _ts_decorate2([
 ], RequestModule);
 
 // src/auth/guards/vritti-auth.guard.ts
-var import_common5 = require("@nestjs/common");
+var import_common24 = require("@nestjs/common");
 var import_constants = require("@nestjs/common/constants");
 var import_config2 = require("@nestjs/config");
 var import_core2 = require("@nestjs/core");
 var import_jwt = require("@nestjs/jwt");
 
 // src/auth/decorators/reset.decorator.ts
-var import_common3 = require("@nestjs/common");
+var import_common22 = require("@nestjs/common");
 var RESET_KEY = "isReset";
-var Reset = /* @__PURE__ */ __name(() => (0, import_common3.SetMetadata)(RESET_KEY, true), "Reset");
+var Reset = /* @__PURE__ */ __name(() => (0, import_common22.SetMetadata)(RESET_KEY, true), "Reset");
 
 // src/auth/decorators/skip-csrf.decorator.ts
-var import_common4 = require("@nestjs/common");
+var import_common23 = require("@nestjs/common");
 var SKIP_CSRF_KEY = "skipCsrf";
-var SkipCsrf = /* @__PURE__ */ __name(() => (0, import_common4.SetMetadata)(SKIP_CSRF_KEY, true), "SkipCsrf");
+var SkipCsrf = /* @__PURE__ */ __name(() => (0, import_common23.SetMetadata)(SKIP_CSRF_KEY, true), "SkipCsrf");
 
 // src/auth/utils/token-hash.util.ts
 var crypto = __toESM(require("crypto"), 1);
@@ -331,9 +577,9 @@ function verifyTokenHash(token, expectedHash) {
 __name(verifyTokenHash, "verifyTokenHash");
 
 // src/auth/guards/vritti-auth.guard.ts
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate3(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -350,7 +596,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
   _configService;
   jwtService;
   requestService;
-  logger = new import_common5.Logger(_VrittiAuthGuard.name);
+  logger = new import_common24.Logger(_VrittiAuthGuard.name);
   constructor(reflector, _configService, jwtService, requestService) {
     this.reflector = reflector;
     this._configService = _configService;
@@ -389,21 +635,21 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     try {
       const accessToken = this.requestService.getAccessToken();
       if (!accessToken) {
-        throw new import_common5.UnauthorizedException("Access token not found");
+        throw new import_common24.UnauthorizedException("Access token not found");
       }
       const decodedAccessToken = this.validateAccessToken(accessToken);
       if (decodedAccessToken.tokenType !== "access") {
-        throw new import_common5.UnauthorizedException("Invalid token type");
+        throw new import_common24.UnauthorizedException("Invalid token type");
       }
       this.validateRefreshTokenBinding(decodedAccessToken);
       if (isOnboarding && decodedAccessToken.sessionType !== "ONBOARDING") {
-        throw new import_common5.UnauthorizedException("This endpoint requires an onboarding session");
+        throw new import_common24.UnauthorizedException("This endpoint requires an onboarding session");
       }
       if (isReset && decodedAccessToken.sessionType !== "RESET") {
-        throw new import_common5.UnauthorizedException("This endpoint requires a reset session");
+        throw new import_common24.UnauthorizedException("This endpoint requires a reset session");
       }
       if (!isOnboarding && !isReset && (decodedAccessToken.sessionType === "ONBOARDING" || decodedAccessToken.sessionType === "RESET")) {
-        throw new import_common5.UnauthorizedException(`${decodedAccessToken.sessionType} sessions cannot access this endpoint`);
+        throw new import_common24.UnauthorizedException(`${decodedAccessToken.sessionType} sessions cannot access this endpoint`);
       }
       request.sessionInfo = {
         userId: decodedAccessToken.userId,
@@ -412,11 +658,11 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       };
       return true;
     } catch (error) {
-      if (error instanceof import_common5.UnauthorizedException) {
+      if (error instanceof import_common24.UnauthorizedException) {
         throw error;
       }
       this.logger.error("Unexpected error in auth guard", error);
-      throw new import_common5.UnauthorizedException("Authentication failed");
+      throw new import_common24.UnauthorizedException("Authentication failed");
     }
   }
   // Validates JWT signature, expiry, and not-before claims
@@ -424,50 +670,50 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     try {
       return this.jwtService.verify(token);
     } catch (error) {
-      if (error instanceof import_common5.UnauthorizedException) throw error;
+      if (error instanceof import_common24.UnauthorizedException) throw error;
       const jwtError = error;
       if (jwtError?.name === "TokenExpiredError") {
-        throw new import_common5.UnauthorizedException("Access token has expired");
+        throw new import_common24.UnauthorizedException("Access token has expired");
       }
       if (jwtError?.name === "JsonWebTokenError") {
-        throw new import_common5.UnauthorizedException("Invalid access token");
+        throw new import_common24.UnauthorizedException("Invalid access token");
       }
       if (jwtError?.name === "NotBeforeError") {
-        throw new import_common5.UnauthorizedException("Access token not yet valid");
+        throw new import_common24.UnauthorizedException("Access token not yet valid");
       }
-      throw new import_common5.UnauthorizedException("Access token validation failed");
+      throw new import_common24.UnauthorizedException("Access token validation failed");
     }
   }
   // Validates that the access token is bound to the refresh token in the cookie
   validateRefreshTokenBinding(decodedAccessToken) {
     if (!decodedAccessToken.refreshTokenHash) {
-      throw new import_common5.UnauthorizedException("Token missing refresh token binding");
+      throw new import_common24.UnauthorizedException("Token missing refresh token binding");
     }
     const refreshToken = this.requestService.getRefreshToken();
     if (!refreshToken) {
-      throw new import_common5.UnauthorizedException("Session validation failed");
+      throw new import_common24.UnauthorizedException("Session validation failed");
     }
     if (!verifyTokenHash(refreshToken, decodedAccessToken.refreshTokenHash)) {
-      throw new import_common5.UnauthorizedException("Session validation failed");
+      throw new import_common24.UnauthorizedException("Session validation failed");
     }
   }
   // Authenticates SSE connections using the refresh token httpOnly cookie
   handleSseAuth(request, isOnboarding) {
     const refreshToken = this.requestService.getRefreshToken();
     if (!refreshToken) {
-      throw new import_common5.UnauthorizedException("Authentication required");
+      throw new import_common24.UnauthorizedException("Authentication required");
     }
     let decoded;
     try {
       decoded = this.jwtService.verify(refreshToken);
     } catch {
-      throw new import_common5.UnauthorizedException("Invalid or expired session");
+      throw new import_common24.UnauthorizedException("Invalid or expired session");
     }
     if (decoded.tokenType !== "refresh") {
-      throw new import_common5.UnauthorizedException("Invalid token type");
+      throw new import_common24.UnauthorizedException("Invalid token type");
     }
     if (isOnboarding && decoded.sessionType !== "ONBOARDING") {
-      throw new import_common5.UnauthorizedException("This endpoint requires an onboarding session");
+      throw new import_common24.UnauthorizedException("This endpoint requires an onboarding session");
     }
     request.sessionInfo = {
       userId: decoded.userId,
@@ -488,7 +734,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       const fastifyInstance = request.server;
       const csrfProtection = fastifyInstance.csrfProtection;
       if (!csrfProtection) {
-        throw new import_common5.ForbiddenException("CSRF protection not configured");
+        throw new import_common24.ForbiddenException("CSRF protection not configured");
       }
       await new Promise((resolve, reject) => {
         const originalSend = reply.send.bind(reply);
@@ -504,7 +750,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
         });
       });
     } catch (error) {
-      throw new import_common5.ForbiddenException({
+      throw new import_common24.ForbiddenException({
         errors: [
           {
             field: "csrf",
@@ -517,8 +763,8 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
   }
 };
 VrittiAuthGuard = _ts_decorate3([
-  (0, import_common5.Injectable)({
-    scope: import_common5.Scope.REQUEST
+  (0, import_common24.Injectable)({
+    scope: import_common24.Scope.REQUEST
   }),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
@@ -530,7 +776,7 @@ VrittiAuthGuard = _ts_decorate3([
 ], VrittiAuthGuard);
 
 // src/auth/services/jwt-auth.service.ts
-var import_common6 = require("@nestjs/common");
+var import_common25 = require("@nestjs/common");
 var import_config3 = require("@nestjs/config");
 var import_jwt2 = require("@nestjs/jwt");
 
@@ -569,9 +815,9 @@ var TokenType = /* @__PURE__ */ (function(TokenType2) {
 })({});
 
 // src/auth/services/jwt-auth.service.ts
-function _ts_decorate4(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate4(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -586,7 +832,7 @@ var JwtAuthService = class _JwtAuthService {
   }
   jwtService;
   configService;
-  logger = new import_common6.Logger(_JwtAuthService.name);
+  logger = new import_common25.Logger(_JwtAuthService.name);
   tokenExpiry;
   constructor(jwtService, configService) {
     this.jwtService = jwtService;
@@ -643,7 +889,7 @@ var JwtAuthService = class _JwtAuthService {
   }
 };
 JwtAuthService = _ts_decorate4([
-  (0, import_common6.Injectable)(),
+  (0, import_common25.Injectable)(),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     typeof import_jwt2.JwtService === "undefined" ? Object : import_jwt2.JwtService,
@@ -652,9 +898,9 @@ JwtAuthService = _ts_decorate4([
 ], JwtAuthService);
 
 // src/auth/auth-config.module.ts
-function _ts_decorate5(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate5(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -705,29 +951,52 @@ var AuthConfigModule = class _AuthConfigModule {
   }
 };
 AuthConfigModule = _ts_decorate5([
-  (0, import_common7.Global)(),
-  (0, import_common7.Module)({})
+  (0, import_common26.Global)(),
+  (0, import_common26.Module)({})
 ], AuthConfigModule);
 
 // src/auth/decorators/access-token.decorator.ts
-var import_common8 = require("@nestjs/common");
-var AccessToken = (0, import_common8.createParamDecorator)((_data, ctx) => {
+var import_common27 = require("@nestjs/common");
+var AccessToken = (0, import_common27.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const authHeader = request.headers.authorization;
   return authHeader?.replace("Bearer ", "") || "";
 });
 
+// src/auth/decorators/cookie-domain.decorator.ts
+var import_common28 = require("@nestjs/common");
+var CookieDomain = (0, import_common28.createParamDecorator)((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const forwarded = request.headers["x-forwarded-host"];
+  const raw = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  const hostStr = raw ?? request.hostname;
+  const domain = hostStr.split(":")[0] ?? hostStr;
+  const baseDomain = getConfig().cookie.refreshCookieDomain ?? "";
+  return domain.endsWith(`.${baseDomain}`) ? domain : baseDomain;
+});
+
 // src/auth/decorators/onboarding.decorator.ts
-var import_common9 = require("@nestjs/common");
-var Onboarding = /* @__PURE__ */ __name(() => (0, import_common9.SetMetadata)("isOnboarding", true), "Onboarding");
+var import_common29 = require("@nestjs/common");
+var Onboarding = /* @__PURE__ */ __name(() => (0, import_common29.SetMetadata)("isOnboarding", true), "Onboarding");
 
 // src/auth/decorators/public.decorator.ts
-var import_common10 = require("@nestjs/common");
-var Public = /* @__PURE__ */ __name(() => (0, import_common10.SetMetadata)("isPublic", true), "Public");
+var import_common30 = require("@nestjs/common");
+var Public = /* @__PURE__ */ __name(() => (0, import_common30.SetMetadata)("isPublic", true), "Public");
+
+// src/auth/decorators/refresh-cookie-options.decorator.ts
+var import_common31 = require("@nestjs/common");
+var RefreshCookieOptions = (0, import_common31.createParamDecorator)((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const forwarded = request.headers["x-forwarded-host"];
+  const raw = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  const hostStr = raw ?? request.hostname;
+  const domain = hostStr.split(":")[0] ?? hostStr;
+  return getRefreshCookieOptionsForHost(domain);
+});
 
 // src/auth/decorators/refresh-token-cookie.decorator.ts
-var import_common11 = require("@nestjs/common");
-var RefreshTokenCookie = (0, import_common11.createParamDecorator)((_data, ctx) => {
+var import_common32 = require("@nestjs/common");
+var RefreshTokenCookie = (0, import_common32.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const cookies = request.cookies ?? {};
   const config = getConfig();
@@ -735,8 +1004,8 @@ var RefreshTokenCookie = (0, import_common11.createParamDecorator)((_data, ctx)
 });
 
 // src/auth/decorators/session-data.decorator.ts
-var import_common12 = require("@nestjs/common");
-var SessionData = (0, import_common12.createParamDecorator)((_data, ctx) => {
+var import_common33 = require("@nestjs/common");
+var SessionData = (0, import_common33.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const sessionInfo = request.sessionInfo;
   if (!sessionInfo?.sessionId) {
@@ -750,8 +1019,8 @@ var SessionData = (0, import_common12.createParamDecorator)((_data, ctx) => {
 });
 
 // src/auth/decorators/user-id.decorator.ts
-var import_common13 = require("@nestjs/common");
-var UserId = (0, import_common13.createParamDecorator)((_data, ctx) => {
+var import_common34 = require("@nestjs/common");
+var UserId = (0, import_common34.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const sessionInfo = request.sessionInfo;
   if (!sessionInfo?.userId) {
@@ -760,21 +1029,20 @@ var UserId = (0, import_common13.createParamDecorator)((_data, ctx) => {
   return sessionInfo.userId;
 });
 
-// src/database/database.module.ts
-var import_common17 = require("@nestjs/common");
-var import_core4 = require("@nestjs/core");
+// src/cache/cache.module.ts
+var import_common37 = require("@nestjs/common");
+var import_config9 = require("@nestjs/config");
 
-// src/database/constants.ts
-var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+// src/cache/cache.service.ts
+var import_common35 = require("@nestjs/common");
 
-// src/database/services/primary-database.service.ts
-var import_common14 = require("@nestjs/common");
-var import_drizzle_orm = require("drizzle-orm");
-var import_node_postgres = require("drizzle-orm/node-postgres");
-var import_pg = require("pg");
-function _ts_decorate6(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+// src/cache/constants.ts
+var CACHE_PROVIDER = Symbol("CACHE_PROVIDER");
+
+// src/cache/cache.service.ts
+function _ts_decorate6(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -789,12 +1057,218 @@ function _ts_param2(paramIndex, decorator) {
   };
 }
 __name(_ts_param2, "_ts_param");
+var CacheService = class _CacheService {
+  static {
+    __name(this, "CacheService");
+  }
+  provider;
+  logger = new import_common35.Logger(_CacheService.name);
+  constructor(provider) {
+    this.provider = provider;
+  }
+  // Stores a value with mandatory TTL — errors are logged and swallowed so DB writes still succeed
+  async set(key, value, ttlSeconds) {
+    try {
+      await this.provider.set(key, value, ttlSeconds);
+    } catch (err) {
+      this.logger.error(`Cache set failed for key "${key}"`, err);
+    }
+  }
+  // Returns cached value or null on miss or any Redis error — callers fall back to DB
+  async get(key) {
+    try {
+      return await this.provider.get(key);
+    } catch (err) {
+      this.logger.error(`Cache get failed for key "${key}"`, err);
+      return null;
+    }
+  }
+  // Deletes one or more keys — errors are logged and swallowed
+  async del(...keys) {
+    try {
+      await this.provider.del(...keys);
+    } catch (err) {
+      this.logger.error(`Cache del failed for keys "${keys.join(", ")}"`, err);
+    }
+  }
+  // Returns all keys matching a glob pattern — returns empty array on error
+  async scanKeys(pattern) {
+    try {
+      return await this.provider.scanKeys(pattern);
+    } catch (err) {
+      this.logger.error(`Cache scanKeys failed for pattern "${pattern}"`, err);
+      return [];
+    }
+  }
+  // Returns raw memory info from the provider — returns empty string on error
+  async getMemoryInfo() {
+    try {
+      return await this.provider.getMemoryInfo();
+    } catch (err) {
+      this.logger.error("Cache getMemoryInfo failed", err);
+      return "";
+    }
+  }
+};
+CacheService = _ts_decorate6([
+  (0, import_common35.Injectable)(),
+  _ts_param2(0, (0, import_common35.Inject)(CACHE_PROVIDER)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof ICacheProvider === "undefined" ? Object : ICacheProvider
+  ])
+], CacheService);
+
+// src/cache/providers/redis.provider.ts
+var import_common36 = require("@nestjs/common");
+var import_config8 = require("@nestjs/config");
+var import_ioredis = __toESM(require("ioredis"), 1);
+function _ts_decorate7(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata5(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata5, "_ts_metadata");
+var RedisCacheProvider = class _RedisCacheProvider {
+  static {
+    __name(this, "RedisCacheProvider");
+  }
+  configService;
+  logger = new import_common36.Logger(_RedisCacheProvider.name);
+  client;
+  constructor(configService) {
+    this.configService = configService;
+  }
+  // Creates the ioredis client and attaches connection/error listeners
+  onModuleInit() {
+    const url = this.configService.getOrThrow("REDIS_URL");
+    this.client = new import_ioredis.default(url, {
+      lazyConnect: true,
+      maxRetriesPerRequest: 3
+    });
+    this.client.on("connect", () => this.logger.log("Redis connected"));
+    this.client.on("error", (err) => this.logger.error("Redis error", err));
+  }
+  // Gracefully closes the ioredis connection on app shutdown
+  async onModuleDestroy() {
+    await this.client.quit();
+    this.logger.log("Redis disconnected");
+  }
+  // Serializes value to JSON and stores with a mandatory TTL
+  async set(key, value, ttlSeconds) {
+    const json = JSON.stringify(value);
+    await this.client.setex(key, ttlSeconds, json);
+  }
+  // Reads the stored JSON string and parses back to the original type
+  async get(key) {
+    const json = await this.client.get(key);
+    if (!json) return null;
+    return JSON.parse(json);
+  }
+  // Deletes one or more keys in a single command
+  async del(...keys) {
+    if (keys.length > 0) {
+      await this.client.del(...keys);
+    }
+  }
+  // Cursor-iterates all keys matching a glob pattern — never uses KEYS command
+  async scanKeys(pattern) {
+    const keys = [];
+    let cursor = "0";
+    do {
+      const [nextCursor, batch] = await this.client.scan(cursor, "MATCH", pattern, "COUNT", 100);
+      cursor = nextCursor;
+      keys.push(...batch);
+    } while (cursor !== "0");
+    return keys;
+  }
+  // Returns raw INFO memory output for memory monitoring
+  async getMemoryInfo() {
+    return this.client.info("memory");
+  }
+};
+RedisCacheProvider = _ts_decorate7([
+  (0, import_common36.Injectable)(),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof import_config8.ConfigService === "undefined" ? Object : import_config8.ConfigService
+  ])
+], RedisCacheProvider);
+
+// src/cache/cache.module.ts
+function _ts_decorate8(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+var CacheModule = class {
+  static {
+    __name(this, "CacheModule");
+  }
+};
+CacheModule = _ts_decorate8([
+  (0, import_common37.Module)({
+    imports: [
+      import_config9.ConfigModule
+    ],
+    providers: [
+      RedisCacheProvider,
+      {
+        provide: CACHE_PROVIDER,
+        useExisting: RedisCacheProvider
+      },
+      CacheService
+    ],
+    exports: [
+      RedisCacheProvider,
+      CACHE_PROVIDER,
+      CacheService
+    ]
+  })
+], CacheModule);
+
+// src/database/database.module.ts
+var import_common41 = require("@nestjs/common");
+var import_core4 = require("@nestjs/core");
+
+// src/database/constants.ts
+var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+
+// src/database/services/primary-database.service.ts
+var import_common38 = require("@nestjs/common");
+var import_drizzle_orm = require("drizzle-orm");
+var import_node_postgres = require("drizzle-orm/node-postgres");
+var import_pg = require("pg");
+function _ts_decorate9(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata6(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param3, "_ts_param");
 var PrimaryDatabaseService = class _PrimaryDatabaseService {
   static {
     __name(this, "PrimaryDatabaseService");
   }
   options;
-  logger = new import_common14.Logger(_PrimaryDatabaseService.name);
+  logger = new import_common38.Logger(_PrimaryDatabaseService.name);
   pool = null;
   db = null;
   tenantConfigCache = /* @__PURE__ */ new Map();
@@ -828,7 +1302,7 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
       this.logger.log("Connected to primary database (tenant registry)");
     } catch (error) {
       this.logger.error("Failed to connect to primary database", error);
-      throw new import_common14.InternalServerErrorException("Failed to initialize tenant registry");
+      throw new import_common38.InternalServerErrorException("Failed to initialize tenant registry");
     }
   }
   // Builds the PostgreSQL connection URL from primary database config properties
@@ -900,7 +1374,7 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
       return info;
     } catch (error) {
       this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
-      throw new import_common14.InternalServerErrorException("Failed to resolve tenant");
+      throw new import_common38.InternalServerErrorException("Failed to resolve tenant");
     }
   }
   // Caches tenant info by both ID and subdomain with TTL expiration
@@ -950,24 +1424,24 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
     }
   }
 };
-PrimaryDatabaseService = _ts_decorate6([
-  (0, import_common14.Injectable)(),
-  _ts_param2(0, (0, import_common14.Inject)(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+PrimaryDatabaseService = _ts_decorate9([
+  (0, import_common38.Injectable)(),
+  _ts_param3(0, (0, import_common38.Inject)(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
   ])
 ], PrimaryDatabaseService);
 
 // src/database/services/tenant-context.service.ts
-var import_common15 = require("@nestjs/common");
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+var import_common39 = require("@nestjs/common");
+function _ts_decorate10(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 var TenantContextService = class {
   static {
     __name(this, "TenantContextService");
@@ -983,7 +1457,7 @@ var TenantContextService = class {
   // Returns the tenant info for this request, throwing if context is not set
   getTenant() {
     if (!this.tenantInfo) {
-      throw new import_common15.UnauthorizedException("Tenant context not set");
+      throw new import_common39.UnauthorizedException("Tenant context not set");
     }
     return this.tenantInfo;
   }
@@ -1004,40 +1478,40 @@ var TenantContextService = class {
     return this.tenantInfo?.subdomain ?? null;
   }
 };
-TenantContextService = _ts_decorate7([
-  (0, import_common15.Injectable)({
-    scope: import_common15.Scope.REQUEST
+TenantContextService = _ts_decorate10([
+  (0, import_common39.Injectable)({
+    scope: import_common39.Scope.REQUEST
   })
 ], TenantContextService);
 
 // src/database/services/tenant-database.service.ts
-var import_common16 = require("@nestjs/common");
+var import_common40 = require("@nestjs/common");
 var import_node_postgres2 = require("drizzle-orm/node-postgres");
 var import_pg2 = require("pg");
-function _ts_decorate8(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate11(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param3, "_ts_param");
+__name(_ts_param4, "_ts_param");
 var TenantDatabaseService = class _TenantDatabaseService {
   static {
     __name(this, "TenantDatabaseService");
   }
   options;
   tenantContext;
-  logger = new import_common16.Logger(_TenantDatabaseService.name);
+  logger = new import_common40.Logger(_TenantDatabaseService.name);
   clients = /* @__PURE__ */ new Map();
   clientLastUsed = /* @__PURE__ */ new Map();
   cleanupInterval;
@@ -1089,7 +1563,7 @@ var TenantDatabaseService = class _TenantDatabaseService {
       };
     } catch (error) {
       this.logger.error(`Failed to create database connection for tenant: ${tenant.subdomain}`, error);
-      throw new import_common16.InternalServerErrorException("Failed to connect to tenant database");
+      throw new import_common40.InternalServerErrorException("Failed to connect to tenant database");
     }
   }
   // Builds the PostgreSQL connection URL for a dedicated tenant database
@@ -1169,24 +1643,24 @@ var TenantDatabaseService = class _TenantDatabaseService {
     this.logger.log("All database connections closed");
   }
 };
-TenantDatabaseService = _ts_decorate8([
-  (0, import_common16.Injectable)(),
-  _ts_param3(0, (0, import_common16.Inject)(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+TenantDatabaseService = _ts_decorate11([
+  (0, import_common40.Injectable)(),
+  _ts_param4(0, (0, import_common40.Inject)(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions,
     typeof TenantContextService === "undefined" ? Object : TenantContextService
   ])
 ], TenantDatabaseService);
 
 // src/database/database.module.ts
-function _ts_decorate9(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate12(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var DatabaseModule = class _DatabaseModule {
   static {
     __name(this, "DatabaseModule");
@@ -1232,14 +1706,14 @@ var DatabaseModule = class _DatabaseModule {
     };
   }
 };
-DatabaseModule = _ts_decorate9([
-  (0, import_common17.Global)(),
-  (0, import_common17.Module)({})
+DatabaseModule = _ts_decorate12([
+  (0, import_common41.Global)(),
+  (0, import_common41.Module)({})
 ], DatabaseModule);
 
 // src/database/decorators/tenant.decorator.ts
-var import_common18 = require("@nestjs/common");
-var Tenant = (0, import_common18.createParamDecorator)((_data, ctx) => {
+var import_common42 = require("@nestjs/common");
+var Tenant = (0, import_common42.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const tenantContext = request.app?.get?.(TenantContextService);
   if (!tenantContext) {
@@ -1252,17 +1726,17 @@ var Tenant = (0, import_common18.createParamDecorator)((_data, ctx) => {
 var import_swagger = require("@nestjs/swagger");
 var import_class_transformer = require("class-transformer");
 var import_class_validator = require("class-validator");
-function _ts_decorate10(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate13(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
+__name(_ts_metadata8, "_ts_metadata");
 var SelectOptionsQueryDto = class {
   static {
     __name(this, "SelectOptionsQueryDto");
@@ -1274,18 +1748,19 @@ var SelectOptionsQueryDto = class {
   excludeIds;
   valueKey;
   labelKey;
+  descriptionKey;
   groupIdKey;
 };
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Search term to filter by label",
     example: "united"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "search", void 0);
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Maximum number of results",
     example: 20,
@@ -1295,9 +1770,9 @@ _ts_decorate10([
   (0, import_class_transformer.Type)(() => Number),
   (0, import_class_validator.IsInt)(),
   (0, import_class_validator.Min)(1),
-  _ts_metadata6("design:type", Number)
+  _ts_metadata8("design:type", Number)
 ], SelectOptionsQueryDto.prototype, "limit", void 0);
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Number of results to skip",
     example: 0,
@@ -1307,27 +1782,27 @@ _ts_decorate10([
   (0, import_class_transformer.Type)(() => Number),
   (0, import_class_validator.IsInt)(),
   (0, import_class_validator.Min)(0),
-  _ts_metadata6("design:type", Number)
+  _ts_metadata8("design:type", Number)
 ], SelectOptionsQueryDto.prototype, "offset", void 0);
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Comma-separated values to fetch specific options",
     example: "1,2,3"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "values", void 0);
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Comma-separated IDs to exclude from results (already selected)",
     example: "5,10"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "excludeIds", void 0);
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Column name for option value",
     example: "id",
@@ -1335,9 +1810,9 @@ _ts_decorate10([
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "valueKey", void 0);
-_ts_decorate10([
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Column name for option label",
     example: "name",
@@ -1345,21 +1820,193 @@ _ts_decorate10([
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "labelKey", void 0);
-_ts_decorate10([
+_ts_decorate13([
+  (0, import_swagger.ApiPropertyOptional)({
+    description: "Column name for option description",
+    example: "description"
+  }),
+  (0, import_class_validator.IsOptional)(),
+  (0, import_class_validator.IsString)(),
+  _ts_metadata8("design:type", String)
+], SelectOptionsQueryDto.prototype, "descriptionKey", void 0);
+_ts_decorate13([
   (0, import_swagger.ApiPropertyOptional)({
     description: "Column name for group ID",
     example: "regionId"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "groupIdKey", void 0);
 
-// src/database/repositories/primary-base.repository.ts
-var import_common19 = require("@nestjs/common");
+// src/database/dto/success-response.dto.ts
+var import_swagger2 = require("@nestjs/swagger");
+var import_class_validator2 = require("class-validator");
+function _ts_decorate14(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata9(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata9, "_ts_metadata");
+var SuccessResponseDto = class {
+  static {
+    __name(this, "SuccessResponseDto");
+  }
+  success;
+  message;
+};
+_ts_decorate14([
+  (0, import_swagger2.ApiProperty)({
+    example: true
+  }),
+  (0, import_class_validator2.IsNotEmpty)(),
+  (0, import_class_validator2.IsBoolean)(),
+  _ts_metadata9("design:type", Boolean)
+], SuccessResponseDto.prototype, "success", void 0);
+_ts_decorate14([
+  (0, import_swagger2.ApiProperty)({
+    example: "Operation completed successfully"
+  }),
+  (0, import_class_validator2.IsNotEmpty)(),
+  (0, import_class_validator2.IsString)(),
+  _ts_metadata9("design:type", String)
+], SuccessResponseDto.prototype, "message", void 0);
+
+// src/database/dto/table-response.dto.ts
+var import_swagger3 = require("@nestjs/swagger");
+function _ts_decorate15(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata10(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata10, "_ts_metadata");
+var TableResponseDto = class {
+  static {
+    __name(this, "TableResponseDto");
+  }
+  result;
+  count;
+  state;
+  activeViewId;
+};
+_ts_decorate15([
+  (0, import_swagger3.ApiProperty)(),
+  _ts_metadata10("design:type", Array)
+], TableResponseDto.prototype, "result", void 0);
+_ts_decorate15([
+  (0, import_swagger3.ApiProperty)(),
+  _ts_metadata10("design:type", Number)
+], TableResponseDto.prototype, "count", void 0);
+_ts_decorate15([
+  (0, import_swagger3.ApiProperty)(),
+  _ts_metadata10("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+], TableResponseDto.prototype, "state", void 0);
+_ts_decorate15([
+  (0, import_swagger3.ApiPropertyOptional)({
+    nullable: true
+  }),
+  _ts_metadata10("design:type", Object)
+], TableResponseDto.prototype, "activeViewId", void 0);
+
+// src/database/filter/filter.processor.ts
 var import_drizzle_orm2 = require("drizzle-orm");
+var FilterProcessor = class {
+  static {
+    __name(this, "FilterProcessor");
+  }
+  // Returns undefined if no conditions (Drizzle accepts undefined as "no WHERE")
+  static buildWhere(filters = [], fieldMap) {
+    const conditions = filters.flatMap((f) => {
+      const def = fieldMap[f.field];
+      if (!def) return [];
+      if ("expression" in def) return [
+        def.expression(f.value)
+      ];
+      const { column: col } = def;
+      const val = f.value;
+      switch (f.operator) {
+        case "equals":
+          if (def.type === "boolean") return [
+            (0, import_drizzle_orm2.eq)(col, val === "true" || val === 1)
+          ];
+          return [
+            (0, import_drizzle_orm2.eq)(col, val)
+          ];
+        case "notEquals":
+          if (def.type === "boolean") return [
+            (0, import_drizzle_orm2.ne)(col, val === "true" || val === 1)
+          ];
+          return [
+            (0, import_drizzle_orm2.ne)(col, val)
+          ];
+        case "contains":
+          return [
+            (0, import_drizzle_orm2.ilike)(col, `%${val}%`)
+          ];
+        case "notContains":
+          return [
+            (0, import_drizzle_orm2.notIlike)(col, `%${val}%`)
+          ];
+        case "gt":
+          return [
+            (0, import_drizzle_orm2.gt)(col, val)
+          ];
+        case "gte":
+          return [
+            (0, import_drizzle_orm2.gte)(col, val)
+          ];
+        case "lt":
+          return [
+            (0, import_drizzle_orm2.lt)(col, val)
+          ];
+        case "lte":
+          return [
+            (0, import_drizzle_orm2.lte)(col, val)
+          ];
+        default:
+          return [];
+      }
+    });
+    return conditions.length ? (0, import_drizzle_orm2.and)(...conditions) : void 0;
+  }
+  // Builds a search WHERE — OR across all string fields when columnId is 'all', otherwise a single ilike
+  static buildSearch(search, fieldMap) {
+    if (!search?.value) return void 0;
+    if (search.columnId === "all") {
+      const conditions = Object.values(fieldMap).filter((def2) => "column" in def2 && def2.type === "string").map((def2) => (0, import_drizzle_orm2.ilike)(def2.column, `%${search.value}%`));
+      return conditions.length ? (0, import_drizzle_orm2.or)(...conditions) : void 0;
+    }
+    const def = fieldMap[search.columnId];
+    if (!def || !("column" in def)) return void 0;
+    return (0, import_drizzle_orm2.ilike)(def.column, `%${search.value}%`);
+  }
+  // Maps each SortCondition to an asc/desc SQL expression
+  static buildOrderBy(sort = [], fieldMap) {
+    return sort.flatMap((s) => {
+      const def = fieldMap[s.field];
+      if (!def || !("column" in def)) return [];
+      return [
+        s.direction === "asc" ? (0, import_drizzle_orm2.asc)(def.column) : (0, import_drizzle_orm2.desc)(def.column)
+      ];
+    });
+  }
+};
+
+// src/database/repositories/primary-base.repository.ts
+var import_common43 = require("@nestjs/common");
+var import_drizzle_orm3 = require("drizzle-orm");
 function snakeToCamel(str) {
   return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
 }
@@ -1388,9 +2035,9 @@ var PrimaryBaseRepository = class {
   constructor(database, table) {
     this.database = database;
     this.table = table;
-    const dbTableName = (0, import_drizzle_orm2.getTableName)(table);
+    const dbTableName = (0, import_drizzle_orm3.getTableName)(table);
     this.tableName = snakeToCamel(dbTableName);
-    this.logger = new import_common19.Logger(this.constructor.name);
+    this.logger = new import_common43.Logger(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
     this.logger.debug(`Table name: '${dbTableName}' -> query key: '${this.tableName}'`);
   }
@@ -1423,12 +2070,32 @@ var PrimaryBaseRepository = class {
     this.logger.debug("Finding multiple records");
     return this.model.findMany(options);
   }
+  // Builds a select query with optional custom fields, join, filter, ordering, and pagination
+  buildSelectQuery(options) {
+    const base = options?.select ? this.db.select(options.select).from(this.table) : this.db.select().from(this.table);
+    const joined = options?.leftJoin ? base.leftJoin(options.leftJoin.table, options.leftJoin.on) : base;
+    const filtered = options?.where ? joined.where(options.where) : joined;
+    const ordered = options?.orderBy?.length ? filtered.orderBy(...options.orderBy) : filtered;
+    const limited = options?.limit ? ordered.limit(options.limit) : ordered;
+    return options?.offset ? limited.offset(options.offset) : limited;
+  }
+  // Returns paginated result and total count, with optional custom select, LEFT JOIN, and ordering
+  async findAllAndCount(options) {
+    const [count, result] = await Promise.all([
+      this.count(options?.where),
+      this.buildSelectQuery(options)
+    ]);
+    return {
+      result,
+      count
+    };
+  }
   // Updates a record by ID and returns the updated record
   async update(id, data) {
     this.logger.log(`Updating record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.update(this.table).set(data).where((0, import_drizzle_orm2.eq)(idColumn, id)).returning();
+    const results = await this.db.update(this.table).set(data).where((0, import_drizzle_orm3.eq)(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1446,7 +2113,7 @@ var PrimaryBaseRepository = class {
     this.logger.log(`Deleting record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.delete(this.table).where((0, import_drizzle_orm2.eq)(idColumn, id)).returning();
+    const results = await this.db.delete(this.table).where((0, import_drizzle_orm3.eq)(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1463,7 +2130,7 @@ var PrimaryBaseRepository = class {
   async count(where) {
     this.logger.debug("Counting records");
     let query = this.db.select({
-      count: import_drizzle_orm2.sql`count(*)::int`
+      count: import_drizzle_orm3.sql`count(*)::int`
     }).from(this.table).$dynamic();
     if (where) {
       query = query.where(where);
@@ -1486,20 +2153,44 @@ var PrimaryBaseRepository = class {
     if (!valueCol) throw new Error(`Column '${config.value}' not found in table '${this.tableName}'`);
     const labelCol = tableColumns[config.label];
     if (!labelCol) throw new Error(`Column '${config.label}' not found in table '${this.tableName}'`);
+    let descriptionCol = config.description ? tableColumns[config.description] : void 0;
+    if (!descriptionCol && config.description && config.joins) {
+      for (const join of config.joins) {
+        const joinCols = join.table;
+        if (joinCols[config.description]) {
+          descriptionCol = joinCols[config.description];
+          break;
+        }
+      }
+    }
     if (parsedValues && parsedValues.length > 0) {
       const selectCols = {
         value: valueCol,
         label: labelCol
       };
+      if (descriptionCol) selectCols.description = descriptionCol;
       if (config.groupId) {
         const groupIdCol = tableColumns[config.groupId];
         if (groupIdCol) selectCols.groupId = groupIdCol;
       }
-      const rows2 = await this.db.select(selectCols).from(this.table).where((0, import_drizzle_orm2.inArray)(valueCol, parsedValues));
+      let valuesQuery = this.db.select(selectCols).from(this.table).$dynamic();
+      if (config.joins) {
+        for (const join of config.joins) {
+          if (join.type === "inner") {
+            valuesQuery = valuesQuery.innerJoin(join.table, join.on);
+          } else {
+            valuesQuery = valuesQuery.leftJoin(join.table, join.on);
+          }
+        }
+      }
+      const rows2 = await valuesQuery.where((0, import_drizzle_orm3.inArray)(valueCol, parsedValues));
       return {
         options: rows2.map((row) => ({
           value: row.value,
           label: String(row.label),
+          ...descriptionCol && row.description != null ? {
+            description: row.description
+          } : {},
           ...config.groupId && row.groupId != null ? {
             groupId: row.groupId
           } : {}
@@ -1513,47 +2204,63 @@ var PrimaryBaseRepository = class {
     const selectFields = {
       value: valueCol,
       label: labelCol,
-      totalCount: import_drizzle_orm2.sql`count(*) over()`.mapWith(Number)
+      totalCount: import_drizzle_orm3.sql`count(*) over()`.mapWith(Number)
     };
+    if (descriptionCol) selectFields.description = descriptionCol;
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
       if (groupIdCol) selectFields.groupId = groupIdCol;
     }
     const conditions = [];
     if (config.search) {
-      conditions.push((0, import_drizzle_orm2.ilike)(labelCol, `%${config.search}%`));
+      conditions.push((0, import_drizzle_orm3.ilike)(labelCol, `%${config.search}%`));
     }
     if (parsedExcludeIds.length > 0) {
-      conditions.push((0, import_drizzle_orm2.notInArray)(valueCol, parsedExcludeIds));
+      conditions.push((0, import_drizzle_orm3.notInArray)(valueCol, parsedExcludeIds));
     }
     if (config.where) {
       for (const [field, val] of Object.entries(config.where)) {
         const column = tableColumns[field];
         if (column) {
-          conditions.push((0, import_drizzle_orm2.eq)(column, val));
+          conditions.push((0, import_drizzle_orm3.eq)(column, val));
         }
       }
     }
+    if (config.conditions) {
+      conditions.push(...config.conditions);
+    }
     const orderByKey = config.orderBy ? Object.keys(config.orderBy)[0] : void 0;
     const orderByCol = orderByKey ? tableColumns[orderByKey] ?? labelCol : labelCol;
     const limit = Number(config.limit) || 20;
     const offset = Number(config.offset) || 0;
     let query = this.db.select(selectFields).from(this.table).$dynamic();
+    if (config.joins) {
+      for (const join of config.joins) {
+        if (join.type === "inner") {
+          query = query.innerJoin(join.table, join.on);
+        } else {
+          query = query.leftJoin(join.table, join.on);
+        }
+      }
+    }
     if (conditions.length > 0) {
-      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm2.and)(...conditions));
+      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm3.and)(...conditions));
     }
     const orderClauses = [];
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) orderClauses.push((0, import_drizzle_orm2.asc)(groupIdCol));
+      if (groupIdCol) orderClauses.push((0, import_drizzle_orm3.asc)(groupIdCol));
     }
-    orderClauses.push((0, import_drizzle_orm2.asc)(orderByCol));
+    orderClauses.push((0, import_drizzle_orm3.asc)(orderByCol));
     query = query.orderBy(...orderClauses).limit(limit).offset(offset);
     const rows = await query;
     const totalCount = rows.length > 0 ? rows[0].totalCount : 0;
     const options = rows.map((row) => ({
       value: row.value,
       label: String(row.label),
+      ...descriptionCol && row.description != null ? {
+        description: row.description
+      } : {},
       ...config.groupId && row.groupId != null ? {
         groupId: row.groupId
       } : {}
@@ -1570,7 +2277,7 @@ var PrimaryBaseRepository = class {
       const groupRows = await this.db.select({
         id: groupIdCol,
         name: groupNameCol
-      }).from(config.groupTable).orderBy((0, import_drizzle_orm2.asc)(groupNameCol));
+      }).from(config.groupTable).orderBy((0, import_drizzle_orm3.asc)(groupNameCol));
       resolvedGroups = groupRows.map((r) => ({
         id: r.id,
         name: String(r.name)
@@ -1588,8 +2295,8 @@ var PrimaryBaseRepository = class {
 };
 
 // src/database/repositories/tenant-base.repository.ts
-var import_common20 = require("@nestjs/common");
-var import_drizzle_orm3 = require("drizzle-orm");
+var import_common44 = require("@nestjs/common");
+var import_drizzle_orm4 = require("drizzle-orm");
 var TenantBaseRepository = class {
   static {
     __name(this, "TenantBaseRepository");
@@ -1607,8 +2314,8 @@ var TenantBaseRepository = class {
   constructor(database, table) {
     this.database = database;
     this.table = table;
-    this.tableName = (0, import_drizzle_orm3.getTableName)(table);
-    this.logger = new import_common20.Logger(this.constructor.name);
+    this.tableName = (0, import_drizzle_orm4.getTableName)(table);
+    this.logger = new import_common44.Logger(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
   }
   // Creates a new record and returns it
@@ -1624,7 +2331,7 @@ var TenantBaseRepository = class {
     this.logger.debug(`Finding record by ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.select().from(this.table).where((0, import_drizzle_orm3.eq)(idColumn, id)).limit(1);
+    const results = await this.db.select().from(this.table).where((0, import_drizzle_orm4.eq)(idColumn, id)).limit(1);
     return results[0] ?? null;
   }
   // Finds a single record matching the given SQL condition
@@ -1656,7 +2363,7 @@ var TenantBaseRepository = class {
     this.logger.log(`Updating record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.update(this.table).set(data).where((0, import_drizzle_orm3.eq)(idColumn, id)).returning();
+    const results = await this.db.update(this.table).set(data).where((0, import_drizzle_orm4.eq)(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1674,7 +2381,7 @@ var TenantBaseRepository = class {
     this.logger.log(`Deleting record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.delete(this.table).where((0, import_drizzle_orm3.eq)(idColumn, id)).returning();
+    const results = await this.db.delete(this.table).where((0, import_drizzle_orm4.eq)(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1691,7 +2398,7 @@ var TenantBaseRepository = class {
   async count(where) {
     this.logger.debug("Counting records");
     let query = this.db.select({
-      count: import_drizzle_orm3.sql`count(*)::int`
+      count: import_drizzle_orm4.sql`count(*)::int`
     }).from(this.table).$dynamic();
     if (where) {
       query = query.where(where);
@@ -1723,7 +2430,7 @@ var TenantBaseRepository = class {
         const groupIdCol = tableColumns[config.groupId];
         if (groupIdCol) selectCols.groupId = groupIdCol;
       }
-      const rows2 = await this.db.select(selectCols).from(this.table).where((0, import_drizzle_orm3.inArray)(valueCol, parsedValues));
+      const rows2 = await this.db.select(selectCols).from(this.table).where((0, import_drizzle_orm4.inArray)(valueCol, parsedValues));
       return {
         options: rows2.map((row) => ({
           value: row.value,
@@ -1741,7 +2448,7 @@ var TenantBaseRepository = class {
     const selectFields = {
       value: valueCol,
       label: labelCol,
-      totalCount: import_drizzle_orm3.sql`count(*) over()`.mapWith(Number)
+      totalCount: import_drizzle_orm4.sql`count(*) over()`.mapWith(Number)
     };
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
@@ -1749,16 +2456,16 @@ var TenantBaseRepository = class {
     }
     const conditions = [];
     if (config.search) {
-      conditions.push((0, import_drizzle_orm3.ilike)(labelCol, `%${config.search}%`));
+      conditions.push((0, import_drizzle_orm4.ilike)(labelCol, `%${config.search}%`));
     }
     if (parsedExcludeIds.length > 0) {
-      conditions.push((0, import_drizzle_orm3.notInArray)(valueCol, parsedExcludeIds));
+      conditions.push((0, import_drizzle_orm4.notInArray)(valueCol, parsedExcludeIds));
     }
     if (config.where) {
       for (const [field, val] of Object.entries(config.where)) {
         const column = tableColumns[field];
         if (column) {
-          conditions.push((0, import_drizzle_orm3.eq)(column, val));
+          conditions.push((0, import_drizzle_orm4.eq)(column, val));
         }
       }
     }
@@ -1768,14 +2475,14 @@ var TenantBaseRepository = class {
     const offset = Number(config.offset) || 0;
     let query = this.db.select(selectFields).from(this.table).$dynamic();
     if (conditions.length > 0) {
-      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm3.and)(...conditions));
+      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm4.and)(...conditions));
     }
     const orderClauses = [];
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) orderClauses.push((0, import_drizzle_orm3.asc)(groupIdCol));
+      if (groupIdCol) orderClauses.push((0, import_drizzle_orm4.asc)(groupIdCol));
     }
-    orderClauses.push((0, import_drizzle_orm3.asc)(orderByCol));
+    orderClauses.push((0, import_drizzle_orm4.asc)(orderByCol));
     query = query.orderBy(...orderClauses).limit(limit).offset(offset);
     const rows = await query;
     const totalCount = rows.length > 0 ? rows[0].totalCount : 0;
@@ -1798,7 +2505,7 @@ var TenantBaseRepository = class {
       const groupRows = await this.db.select({
         id: groupIdCol,
         name: groupNameCol
-      }).from(config.groupTable).orderBy((0, import_drizzle_orm3.asc)(groupNameCol));
+      }).from(config.groupTable).orderBy((0, import_drizzle_orm4.asc)(groupNameCol));
       resolvedGroups = groupRows.map((r) => ({
         id: r.id,
         name: String(r.name)
@@ -1816,30 +2523,30 @@ var TenantBaseRepository = class {
 };
 
 // src/email/email.module.ts
-var import_common22 = require("@nestjs/common");
-var import_config7 = require("@nestjs/config");
+var import_common46 = require("@nestjs/common");
+var import_config11 = require("@nestjs/config");
 
 // src/email/email.service.ts
 var import_brevo = require("@getbrevo/brevo");
-var import_common21 = require("@nestjs/common");
-var import_config6 = require("@nestjs/config");
-function _ts_decorate11(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+var import_common45 = require("@nestjs/common");
+var import_config10 = require("@nestjs/config");
+function _ts_decorate16(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
+__name(_ts_metadata11, "_ts_metadata");
 var EmailService = class _EmailService {
   static {
     __name(this, "EmailService");
   }
   configService;
-  logger = new import_common21.Logger(_EmailService.name);
+  logger = new import_common45.Logger(_EmailService.name);
   brevoClient;
   senderEmail;
   senderName;
@@ -2220,388 +2927,169 @@ This is an automated message, please do not reply.
                         <p style="margin: 0; color: #155724; font-size: 18px; font-weight: 600; font-family: monospace;">
                           ${email}
                         </p>
-                      </div>
-
-                      <p style="margin: 30px 0 20px; color: #666666; font-size: 14px; line-height: 1.6;">
-                        If you did not request this revert, please contact our support team immediately.
-                      </p>
-                    </td>
-                  </tr>
-
-                  <!-- Footer -->
-                  <tr>
-                    <td style="padding: 30px 40px; border-top: 1px solid #e0e0e0; text-align: center;">
-                      <p style="margin: 0; color: #999999; font-size: 12px; line-height: 1.5;">
-                        Vritti AI Cloud - Cloud Management Platform
-                      </p>
-                      <p style="margin: 8px 0 0; color: #999999; font-size: 12px; line-height: 1.5;">
-                        This is an automated message, please do not reply.
-                      </p>
-                    </td>
-                  </tr>
-                </table>
-              </td>
-            </tr>
-          </table>
-        </body>
-      </html>
-    `;
-    const textContent = `
-Hello ${name},
-
-Your recent email address change has been successfully reverted. Your email is now:
-
-${email}
-
-If you did not request this revert, please contact our support team immediately.
-
----
-Vritti AI Cloud - Cloud Management Platform
-This is an automated message, please do not reply.
-    `.trim();
-    await this.sendEmail({
-      to: [
-        {
-          email,
-          name
-        }
-      ],
-      subject,
-      htmlContent,
-      textContent
-    });
-    this.logger.log(`Email revert confirmation sent to ${email}`);
-  }
-  // Verifies Brevo API connectivity — a 400 response means the API is reachable
-  async verifyConnection() {
-    try {
-      await this.brevoClient.transactionalEmails.sendTransacEmail({
-        sender: {
-          email: this.senderEmail,
-          name: this.senderName
-        },
-        to: [
-          {
-            email: this.senderEmail
-          }
-        ],
-        subject: "Connection Test",
-        htmlContent: "<p>Test</p>"
-      });
-      return true;
-    } catch (err) {
-      if (err instanceof import_brevo.BrevoError && err.statusCode === 400) {
-        return true;
-      }
-      this.logger.error("Brevo connection verification failed:", err);
-      return false;
-    }
-  }
-  // Sends a transactional email via Brevo — retries handled internally by BrevoClient
-  async sendEmail(emailData) {
-    try {
-      const result = await this.brevoClient.transactionalEmails.sendTransacEmail({
-        sender: {
-          email: this.senderEmail,
-          name: this.senderName
-        },
-        to: emailData.to,
-        subject: emailData.subject,
-        htmlContent: emailData.htmlContent,
-        textContent: emailData.textContent
-      });
-      this.logger.debug(`Email sent successfully. Message ID: ${result.messageId}`);
-    } catch (err) {
-      if (err instanceof import_brevo.BrevoTimeoutError) {
-        this.logger.error("Brevo request timed out after retries.");
-        throw new Error("Email sending failed: timeout");
-      }
-      if (err instanceof import_brevo.BrevoError) {
-        if (err.statusCode === 429) {
-          this.logger.error("Brevo rate limit exceeded after retries.");
-          throw new Error("Email sending failed: rate limit exceeded");
-        }
-        if (err.statusCode === 401) {
-          this.logger.error("Brevo authentication failed. Check your API key.");
-          throw new Error("Email service authentication failed");
-        }
-        if (err.statusCode === 400) {
-          this.logger.error("Bad request to Brevo API:", err.message);
-          throw new Error(`Invalid email parameters: ${err.message}`);
-        }
-        this.logger.error(`Brevo API error ${err.statusCode}:`, err.message);
-        throw new Error(`Email sending failed: ${err.message}`);
-      }
-      throw err;
-    }
-  }
-};
-EmailService = _ts_decorate11([
-  (0, import_common21.Injectable)(),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof import_config6.ConfigService === "undefined" ? Object : import_config6.ConfigService
-  ])
-], EmailService);
-
-// src/email/email.module.ts
-function _ts_decorate12(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate12, "_ts_decorate");
-var EmailModule = class {
-  static {
-    __name(this, "EmailModule");
-  }
-};
-EmailModule = _ts_decorate12([
-  (0, import_common22.Global)(),
-  (0, import_common22.Module)({
-    imports: [
-      import_config7.ConfigModule
-    ],
-    providers: [
-      EmailService
-    ],
-    exports: [
-      EmailService
-    ]
-  })
-], EmailModule);
-
-// src/exceptions/bad-gateway.exception.ts
-var import_common24 = require("@nestjs/common");
-
-// src/exceptions/base-field.exception.ts
-var import_common23 = require("@nestjs/common");
-var HttpProblemException = class extends import_common23.HttpException {
-  static {
-    __name(this, "HttpProblemException");
-  }
-  constructor(detailOrOptions, httpStatus) {
-    const options = typeof detailOrOptions === "string" ? {
-      detail: detailOrOptions
-    } : detailOrOptions;
-    super({
-      type: options.type ?? "about:blank",
-      label: options.label,
-      detail: options.detail,
-      errors: options.errors ?? []
-    }, httpStatus);
-  }
-};
-
-// src/exceptions/bad-gateway.exception.ts
-var BadGatewayException = class extends HttpProblemException {
-  static {
-    __name(this, "BadGatewayException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Bad Gateway", import_common24.HttpStatus.BAD_GATEWAY);
-  }
-};
-
-// src/exceptions/bad-request.exception.ts
-var import_common25 = require("@nestjs/common");
-var BadRequestException = class extends HttpProblemException {
-  static {
-    __name(this, "BadRequestException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Bad Request", import_common25.HttpStatus.BAD_REQUEST);
-  }
-};
-
-// src/exceptions/conflict.exception.ts
-var import_common26 = require("@nestjs/common");
-var ConflictException = class extends HttpProblemException {
-  static {
-    __name(this, "ConflictException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Conflict", import_common26.HttpStatus.CONFLICT);
-  }
-};
-
-// src/exceptions/forbidden.exception.ts
-var import_common27 = require("@nestjs/common");
-var ForbiddenException2 = class extends HttpProblemException {
-  static {
-    __name(this, "ForbiddenException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Forbidden", import_common27.HttpStatus.FORBIDDEN);
-  }
-};
-
-// src/exceptions/gone.exception.ts
-var import_common28 = require("@nestjs/common");
-var GoneException = class extends HttpProblemException {
-  static {
-    __name(this, "GoneException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Gone", import_common28.HttpStatus.GONE);
-  }
-};
-
-// src/exceptions/internal-server-error.exception.ts
-var import_common29 = require("@nestjs/common");
-var InternalServerErrorException3 = class extends HttpProblemException {
-  static {
-    __name(this, "InternalServerErrorException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Internal Server Error", import_common29.HttpStatus.INTERNAL_SERVER_ERROR);
-  }
-};
-
-// src/exceptions/method-not-allowed.exception.ts
-var import_common30 = require("@nestjs/common");
-var MethodNotAllowedException = class extends HttpProblemException {
-  static {
-    __name(this, "MethodNotAllowedException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Method Not Allowed", import_common30.HttpStatus.METHOD_NOT_ALLOWED);
-  }
-};
-
-// src/exceptions/not-acceptable.exception.ts
-var import_common31 = require("@nestjs/common");
-var NotAcceptableException = class extends HttpProblemException {
-  static {
-    __name(this, "NotAcceptableException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Not Acceptable", import_common31.HttpStatus.NOT_ACCEPTABLE);
-  }
-};
-
-// src/exceptions/not-found.exception.ts
-var import_common32 = require("@nestjs/common");
-var NotFoundException = class extends HttpProblemException {
-  static {
-    __name(this, "NotFoundException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Not Found", import_common32.HttpStatus.NOT_FOUND);
-  }
-};
-
-// src/exceptions/not-implemented.exception.ts
-var import_common33 = require("@nestjs/common");
-var NotImplementedException = class extends HttpProblemException {
-  static {
-    __name(this, "NotImplementedException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Not Implemented", import_common33.HttpStatus.NOT_IMPLEMENTED);
-  }
-};
-
-// src/exceptions/payload-too-large.exception.ts
-var import_common34 = require("@nestjs/common");
-var PayloadTooLargeException = class extends HttpProblemException {
-  static {
-    __name(this, "PayloadTooLargeException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Payload Too Large", import_common34.HttpStatus.PAYLOAD_TOO_LARGE);
-  }
-};
+                      </div>
 
-// src/exceptions/request-timeout.exception.ts
-var import_common35 = require("@nestjs/common");
-var RequestTimeoutException = class extends HttpProblemException {
-  static {
-    __name(this, "RequestTimeoutException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Request Timeout", import_common35.HttpStatus.REQUEST_TIMEOUT);
-  }
-};
+                      <p style="margin: 30px 0 20px; color: #666666; font-size: 14px; line-height: 1.6;">
+                        If you did not request this revert, please contact our support team immediately.
+                      </p>
+                    </td>
+                  </tr>
 
-// src/exceptions/service-unavailable.exception.ts
-var import_common36 = require("@nestjs/common");
-var ServiceUnavailableException = class extends HttpProblemException {
-  static {
-    __name(this, "ServiceUnavailableException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Service Unavailable", import_common36.HttpStatus.SERVICE_UNAVAILABLE);
-  }
-};
+                  <!-- Footer -->
+                  <tr>
+                    <td style="padding: 30px 40px; border-top: 1px solid #e0e0e0; text-align: center;">
+                      <p style="margin: 0; color: #999999; font-size: 12px; line-height: 1.5;">
+                        Vritti AI Cloud - Cloud Management Platform
+                      </p>
+                      <p style="margin: 8px 0 0; color: #999999; font-size: 12px; line-height: 1.5;">
+                        This is an automated message, please do not reply.
+                      </p>
+                    </td>
+                  </tr>
+                </table>
+              </td>
+            </tr>
+          </table>
+        </body>
+      </html>
+    `;
+    const textContent = `
+Hello ${name},
 
-// src/exceptions/too-many-requests.exception.ts
-var import_common37 = require("@nestjs/common");
-var TooManyRequestsException = class extends HttpProblemException {
-  static {
-    __name(this, "TooManyRequestsException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Too Many Requests", import_common37.HttpStatus.TOO_MANY_REQUESTS);
-  }
-};
+Your recent email address change has been successfully reverted. Your email is now:
 
-// src/exceptions/unauthorized.exception.ts
-var import_common38 = require("@nestjs/common");
-var UnauthorizedException3 = class extends HttpProblemException {
-  static {
-    __name(this, "UnauthorizedException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Unauthorized", import_common38.HttpStatus.UNAUTHORIZED);
-  }
-};
+${email}
 
-// src/exceptions/unprocessable-entity.exception.ts
-var import_common39 = require("@nestjs/common");
-var UnprocessableEntityException = class extends HttpProblemException {
-  static {
-    __name(this, "UnprocessableEntityException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Unprocessable Entity", import_common39.HttpStatus.UNPROCESSABLE_ENTITY);
-  }
-};
+If you did not request this revert, please contact our support team immediately.
 
-// src/exceptions/unsupported-media-type.exception.ts
-var import_common40 = require("@nestjs/common");
-var UnsupportedMediaTypeException = class extends HttpProblemException {
-  static {
-    __name(this, "UnsupportedMediaTypeException");
+---
+Vritti AI Cloud - Cloud Management Platform
+This is an automated message, please do not reply.
+    `.trim();
+    await this.sendEmail({
+      to: [
+        {
+          email,
+          name
+        }
+      ],
+      subject,
+      htmlContent,
+      textContent
+    });
+    this.logger.log(`Email revert confirmation sent to ${email}`);
   }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Unsupported Media Type", import_common40.HttpStatus.UNSUPPORTED_MEDIA_TYPE);
+  // Verifies Brevo API connectivity — a 400 response means the API is reachable
+  async verifyConnection() {
+    try {
+      await this.brevoClient.transactionalEmails.sendTransacEmail({
+        sender: {
+          email: this.senderEmail,
+          name: this.senderName
+        },
+        to: [
+          {
+            email: this.senderEmail
+          }
+        ],
+        subject: "Connection Test",
+        htmlContent: "<p>Test</p>"
+      });
+      return true;
+    } catch (err) {
+      if (err instanceof import_brevo.BrevoError && err.statusCode === 400) {
+        return true;
+      }
+      this.logger.error("Brevo connection verification failed:", err);
+      return false;
+    }
+  }
+  // Sends a transactional email via Brevo — retries handled internally by BrevoClient
+  async sendEmail(emailData) {
+    try {
+      const result = await this.brevoClient.transactionalEmails.sendTransacEmail({
+        sender: {
+          email: this.senderEmail,
+          name: this.senderName
+        },
+        to: emailData.to,
+        subject: emailData.subject,
+        htmlContent: emailData.htmlContent,
+        textContent: emailData.textContent
+      });
+      this.logger.debug(`Email sent successfully. Message ID: ${result.messageId}`);
+    } catch (err) {
+      if (err instanceof import_brevo.BrevoTimeoutError) {
+        this.logger.error("Brevo request timed out after retries.");
+        throw new Error("Email sending failed: timeout");
+      }
+      if (err instanceof import_brevo.BrevoError) {
+        if (err.statusCode === 429) {
+          this.logger.error("Brevo rate limit exceeded after retries.");
+          throw new Error("Email sending failed: rate limit exceeded");
+        }
+        if (err.statusCode === 401) {
+          this.logger.error("Brevo authentication failed. Check your API key.");
+          throw new Error("Email service authentication failed");
+        }
+        if (err.statusCode === 400) {
+          this.logger.error("Bad request to Brevo API:", err.message);
+          throw new Error(`Invalid email parameters: ${err.message}`);
+        }
+        this.logger.error(`Brevo API error ${err.statusCode}:`, err.message);
+        throw new Error(`Email sending failed: ${err.message}`);
+      }
+      throw err;
+    }
   }
 };
+EmailService = _ts_decorate16([
+  (0, import_common45.Injectable)(),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof import_config10.ConfigService === "undefined" ? Object : import_config10.ConfigService
+  ])
+], EmailService);
 
-// src/exceptions/validation.exception.ts
-var import_common41 = require("@nestjs/common");
-var ValidationException = class extends HttpProblemException {
+// src/email/email.module.ts
+function _ts_decorate17(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate17, "_ts_decorate");
+var EmailModule = class {
   static {
-    __name(this, "ValidationException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Validation Failed", import_common41.HttpStatus.BAD_REQUEST);
+    __name(this, "EmailModule");
   }
 };
+EmailModule = _ts_decorate17([
+  (0, import_common46.Global)(),
+  (0, import_common46.Module)({
+    imports: [
+      import_config11.ConfigModule
+    ],
+    providers: [
+      EmailService
+    ],
+    exports: [
+      EmailService
+    ]
+  })
+], EmailModule);
 
 // src/filters/http-exception.filter.ts
-var import_common42 = require("@nestjs/common");
-function _ts_decorate13(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+var import_common47 = require("@nestjs/common");
+function _ts_decorate18(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate18, "_ts_decorate");
 function getHttpStatusTitle(status) {
-  const enumKey = Object.entries(import_common42.HttpStatus).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
+  const enumKey = Object.entries(import_common47.HttpStatus).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
   if (!enumKey) {
     return "Error";
   }
@@ -2612,17 +3100,17 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
   static {
     __name(this, "HttpExceptionFilter");
   }
-  logger = new import_common42.Logger(_HttpExceptionFilter.name);
+  logger = new import_common47.Logger(_HttpExceptionFilter.name);
   catch(exception, host) {
     const ctx = host.switchToHttp();
     const response = ctx.getResponse();
     const request = ctx.getRequest();
-    let status = import_common42.HttpStatus.INTERNAL_SERVER_ERROR;
+    let status = import_common47.HttpStatus.INTERNAL_SERVER_ERROR;
     let type = "about:blank";
     let label;
     let detail = "Internal server error";
     let errors = [];
-    if (exception instanceof import_common42.HttpException) {
+    if (exception instanceof import_common47.HttpException) {
       status = exception.getStatus();
       const exceptionResponse = exception.getResponse();
       if (typeof exceptionResponse === "object" && exceptionResponse !== null) {
@@ -2652,10 +3140,14 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
       } else if (typeof exceptionResponse === "string") {
         detail = exceptionResponse;
       }
+    } else if (this.isAxiosError(exception)) {
+      const axiosStatus = exception.response?.status;
+      const axiosDetail = exception.response?.data?.message || exception.response?.data?.detail || exception.message;
+      const url = exception.config?.url;
+      status = import_common47.HttpStatus.BAD_GATEWAY;
+      detail = `Upstream service error${axiosStatus ? ` (${axiosStatus})` : ""}: ${axiosDetail}`;
+      this.logger.error(`Upstream API error [${axiosStatus}]: ${axiosDetail} \u2014 URL: ${url}`, exception.stack);
     } else {
-      const errorMessage = exception instanceof Error ? exception.message : "Unknown error";
-      const stack = exception instanceof Error ? exception.stack : void 0;
-      this.logger.error(`Unexpected error: ${errorMessage}`, stack);
       detail = "An unexpected error occurred";
     }
     const problemDetails = {
@@ -2671,17 +3163,21 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
     };
     response.header("Content-Type", "application/problem+json").status(status).send(problemDetails);
   }
+  // Duck-type check for AxiosError without importing axios
+  isAxiosError(error) {
+    return error instanceof Error && error.isAxiosError === true;
+  }
 };
-HttpExceptionFilter = _ts_decorate13([
-  (0, import_common42.Catch)()
+HttpExceptionFilter = _ts_decorate18([
+  (0, import_common47.Catch)()
 ], HttpExceptionFilter);
 
 // src/logger/interceptors/http-logger.interceptor.ts
-var import_common44 = require("@nestjs/common");
+var import_common49 = require("@nestjs/common");
 var import_operators = require("rxjs/operators");
 
 // src/logger/services/logger.service.ts
-var import_common43 = require("@nestjs/common");
+var import_common48 = require("@nestjs/common");
 var import_winston = require("winston");
 var import_winston_daily_rotate_file = __toESM(require("winston-daily-rotate-file"), 1);
 
@@ -2719,23 +3215,23 @@ function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_C
 __name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
 
 // src/logger/services/logger.service.ts
-function _ts_decorate14(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate19(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var LoggerService = class _LoggerService {
   static {
     __name(this, "LoggerService");
@@ -2927,35 +3423,35 @@ ${trace}`;
     return childLogger;
   }
 };
-LoggerService = _ts_decorate14([
-  (0, import_common43.Injectable)(),
-  _ts_param4(0, (0, import_common43.Optional)()),
-  _ts_param4(1, (0, import_common43.Optional)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+LoggerService = _ts_decorate19([
+  (0, import_common48.Injectable)(),
+  _ts_param5(0, (0, import_common48.Optional)()),
+  _ts_param5(1, (0, import_common48.Optional)()),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
     typeof Logger === "undefined" ? Object : Logger
   ])
 ], LoggerService);
 
 // src/logger/interceptors/http-logger.interceptor.ts
-function _ts_decorate15(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate20(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate20, "_ts_decorate");
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var HttpLoggerInterceptor = class {
   static {
     __name(this, "HttpLoggerInterceptor");
@@ -3058,32 +3554,32 @@ var HttpLoggerInterceptor = class {
     }
   }
 };
-HttpLoggerInterceptor = _ts_decorate15([
-  (0, import_common44.Injectable)(),
-  _ts_param5(1, (0, import_common44.Optional)()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+HttpLoggerInterceptor = _ts_decorate20([
+  (0, import_common49.Injectable)(),
+  _ts_param6(1, (0, import_common49.Optional)()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof LoggerService === "undefined" ? Object : LoggerService,
     typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
   ])
 ], HttpLoggerInterceptor);
 
 // src/logger/logger.module.ts
-var import_common46 = require("@nestjs/common");
+var import_common51 = require("@nestjs/common");
 
 // src/logger/middleware/correlation-id.middleware.ts
-var import_common45 = require("@nestjs/common");
-function _ts_decorate16(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+var import_common50 = require("@nestjs/common");
+function _ts_decorate21(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate21, "_ts_decorate");
+function _ts_metadata14(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
+__name(_ts_metadata14, "_ts_metadata");
 var CorrelationIdMiddleware = class {
   static {
     __name(this, "CorrelationIdMiddleware");
@@ -3120,22 +3616,22 @@ var CorrelationIdMiddleware = class {
     }
   }
 };
-CorrelationIdMiddleware = _ts_decorate16([
-  (0, import_common45.Injectable)(),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+CorrelationIdMiddleware = _ts_decorate21([
+  (0, import_common50.Injectable)(),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
   ])
 ], CorrelationIdMiddleware);
 
 // src/logger/logger.module.ts
-function _ts_decorate17(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate22(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
+__name(_ts_decorate22, "_ts_decorate");
 var LOGGER_MODULE_OPTIONS = Symbol("LOGGER_MODULE_OPTIONS");
 var DEFAULT_LOGGER_OPTIONS = {
   provider: "winston",
@@ -3212,9 +3708,9 @@ function mergeWithDefaults(options = {}) {
 __name(mergeWithDefaults, "mergeWithDefaults");
 function createDefaultLoggerProvider(options) {
   return {
-    provide: import_common46.Logger,
+    provide: import_common51.Logger,
     useFactory: /* @__PURE__ */ __name(() => {
-      const logger = new import_common46.Logger();
+      const logger = new import_common51.Logger();
       if (options.level) {
         const levels = getLevelsUpTo(options.level);
         logger.setLogLevels?.(levels);
@@ -3244,7 +3740,7 @@ function createLoggerProviders(options = {}) {
     inject: [
       LOGGER_MODULE_OPTIONS,
       {
-        token: import_common46.Logger,
+        token: import_common51.Logger,
         optional: true
       }
     ]
@@ -3323,10 +3819,10 @@ var LoggerModule = class _LoggerModule {
         ...asyncProviders,
         // Default logger provider
         {
-          provide: import_common46.Logger,
+          provide: import_common51.Logger,
           useFactory: /* @__PURE__ */ __name((opts) => {
             if (opts.provider === "default") {
-              const logger = new import_common46.Logger();
+              const logger = new import_common51.Logger();
               if (opts.level) {
                 const levels = getLevelsUpTo(opts.level);
                 logger.setLogLevels?.(levels);
@@ -3348,7 +3844,7 @@ var LoggerModule = class _LoggerModule {
           inject: [
             LOGGER_MODULE_OPTIONS,
             {
-              token: import_common46.Logger,
+              token: import_common51.Logger,
               optional: true
             }
           ]
@@ -3447,25 +3943,25 @@ var LoggerModule = class _LoggerModule {
     throw new Error("LoggerModule.forRootAsync() requires one of: useFactory, useClass, or useExisting");
   }
 };
-LoggerModule = _ts_decorate17([
-  (0, import_common46.Global)(),
-  (0, import_common46.Module)({})
+LoggerModule = _ts_decorate22([
+  (0, import_common51.Global)(),
+  (0, import_common51.Module)({})
 ], LoggerModule);
 
 // src/root/root.module.ts
-var import_common52 = require("@nestjs/common");
+var import_common57 = require("@nestjs/common");
 
 // src/root/controllers/app.controller.ts
-var import_common49 = require("@nestjs/common");
-var import_swagger3 = require("@nestjs/swagger");
+var import_common54 = require("@nestjs/common");
+var import_swagger5 = require("@nestjs/swagger");
 
 // src/root/docs/app.docs.ts
-var import_common47 = require("@nestjs/common");
-var import_swagger2 = require("@nestjs/swagger");
+var import_common52 = require("@nestjs/common");
+var import_swagger4 = require("@nestjs/swagger");
 function ApiHealthCheck() {
-  return (0, import_common47.applyDecorators)((0, import_swagger2.ApiOperation)({
+  return (0, import_common52.applyDecorators)((0, import_swagger4.ApiOperation)({
     summary: "Health check endpoint"
-  }), (0, import_swagger2.ApiResponse)({
+  }), (0, import_swagger4.ApiResponse)({
     status: 200,
     description: "Returns a welcome message indicating the API is running",
     type: String
@@ -3474,14 +3970,14 @@ function ApiHealthCheck() {
 __name(ApiHealthCheck, "ApiHealthCheck");
 
 // src/root/services/app.service.ts
-var import_common48 = require("@nestjs/common");
-function _ts_decorate18(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+var import_common53 = require("@nestjs/common");
+function _ts_decorate23(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate18, "_ts_decorate");
+__name(_ts_decorate23, "_ts_decorate");
 var AppService = class {
   static {
     __name(this, "AppService");
@@ -3491,22 +3987,22 @@ var AppService = class {
     return `Hello World!`;
   }
 };
-AppService = _ts_decorate18([
-  (0, import_common48.Injectable)()
+AppService = _ts_decorate23([
+  (0, import_common53.Injectable)()
 ], AppService);
 
 // src/root/controllers/app.controller.ts
-function _ts_decorate19(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate24(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate19, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate24, "_ts_decorate");
+function _ts_metadata15(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
+__name(_ts_metadata15, "_ts_metadata");
 var AppController = class {
   static {
     __name(this, "AppController");
@@ -3520,35 +4016,35 @@ var AppController = class {
     return this.appService.getHello();
   }
 };
-_ts_decorate19([
-  (0, import_common49.Get)(),
+_ts_decorate24([
+  (0, import_common54.Get)(),
   Public(),
   ApiHealthCheck(),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", []),
-  _ts_metadata11("design:returntype", String)
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", []),
+  _ts_metadata15("design:returntype", String)
 ], AppController.prototype, "getHello", null);
-AppController = _ts_decorate19([
-  (0, import_swagger3.ApiTags)("Health"),
-  (0, import_common49.Controller)(),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+AppController = _ts_decorate24([
+  (0, import_swagger5.ApiTags)("Health"),
+  (0, import_common54.Controller)(),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof AppService === "undefined" ? Object : AppService
   ])
 ], AppController);
 
 // src/root/controllers/csrf.controller.ts
-var import_common51 = require("@nestjs/common");
-var import_swagger5 = require("@nestjs/swagger");
+var import_common56 = require("@nestjs/common");
+var import_swagger7 = require("@nestjs/swagger");
 
 // src/root/docs/csrf.docs.ts
-var import_common50 = require("@nestjs/common");
-var import_swagger4 = require("@nestjs/swagger");
+var import_common55 = require("@nestjs/common");
+var import_swagger6 = require("@nestjs/swagger");
 function ApiGetCsrfToken() {
-  return (0, import_common50.applyDecorators)((0, import_swagger4.ApiOperation)({
+  return (0, import_common55.applyDecorators)((0, import_swagger6.ApiOperation)({
     summary: "Get CSRF token",
     description: "Generates and returns a CSRF token that must be included in all state-changing requests (POST, PUT, PATCH, DELETE). The token should be sent in the X-CSRF-Token header."
-  }), (0, import_swagger4.ApiResponse)({
+  }), (0, import_swagger6.ApiResponse)({
     status: 200,
     description: "CSRF token generated successfully",
     schema: {
@@ -3569,23 +4065,23 @@ function ApiGetCsrfToken() {
 __name(ApiGetCsrfToken, "ApiGetCsrfToken");
 
 // src/root/controllers/csrf.controller.ts
-function _ts_decorate20(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate25(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate20, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate25, "_ts_decorate");
+function _ts_metadata16(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var CsrfController = class {
   static {
     __name(this, "CsrfController");
@@ -3598,40 +4094,40 @@ var CsrfController = class {
     };
   }
 };
-_ts_decorate20([
-  (0, import_common51.Get)("token"),
+_ts_decorate25([
+  (0, import_common56.Get)("token"),
   Public(),
-  (0, import_common51.HttpCode)(import_common51.HttpStatus.OK),
+  (0, import_common56.HttpCode)(import_common56.HttpStatus.OK),
   ApiGetCsrfToken(),
-  _ts_param6(0, (0, import_common51.Res)({
+  _ts_param7(0, (0, import_common56.Res)({
     passthrough: true
   })),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof FastifyReply === "undefined" ? Object : FastifyReply
   ]),
-  _ts_metadata12("design:returntype", Object)
+  _ts_metadata16("design:returntype", Object)
 ], CsrfController.prototype, "getToken", null);
-CsrfController = _ts_decorate20([
-  (0, import_swagger5.ApiTags)("CSRF"),
-  (0, import_common51.Controller)("csrf")
+CsrfController = _ts_decorate25([
+  (0, import_swagger7.ApiTags)("CSRF"),
+  (0, import_common56.Controller)("csrf")
 ], CsrfController);
 
 // src/root/root.module.ts
-function _ts_decorate21(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate26(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate21, "_ts_decorate");
+__name(_ts_decorate26, "_ts_decorate");
 var RootModule = class {
   static {
     __name(this, "RootModule");
   }
 };
-RootModule = _ts_decorate21([
-  (0, import_common52.Module)({
+RootModule = _ts_decorate26([
+  (0, import_common57.Module)({
     controllers: [
       AppController,
       CsrfController
@@ -3857,12 +4353,17 @@ __name(normalizePhoneNumber, "normalizePhoneNumber");
   AuthConfigModule,
   BadGatewayException,
   BadRequestException,
+  CACHE_PROVIDER,
+  CacheModule,
+  CacheService,
   ConflictException,
+  CookieDomain,
   CorrelationIdMiddleware,
   DEFAULT_CORRELATION_HEADER,
   DatabaseModule,
   EmailModule,
   EmailService,
+  FilterProcessor,
   ForbiddenException,
   GoneException,
   HttpExceptionFilter,
@@ -3883,6 +4384,8 @@ __name(normalizePhoneNumber, "normalizePhoneNumber");
   PrimaryDatabaseService,
   Public,
   RESET_KEY,
+  RedisCacheProvider,
+  RefreshCookieOptions,
   RefreshTokenCookie,
   RequestTimeoutException,
   Reset,
@@ -3892,6 +4395,8 @@ __name(normalizePhoneNumber, "normalizePhoneNumber");
   ServiceUnavailableException,
   SessionData,
   SkipCsrf,
+  SuccessResponseDto,
+  TableResponseDto,
   Tenant,
   TenantBaseRepository,
   TenantContextService,
@@ -3915,6 +4420,7 @@ __name(normalizePhoneNumber, "normalizePhoneNumber");
   getHttpStatusTitle,
   getJwtExpiry,
   getRefreshCookieOptions,
+  getRefreshCookieOptionsForHost,
   getTokenExpiry,
   hashToken,
   jwtConfigFactory,