@vritti/api-sdk 0.2.1 → 0.2.3

package/dist/index.js

@@ -14,6 +14,225 @@ import { Global, Module } from "@nestjs/common";
 import { Inject, Injectable, Scope } from "@nestjs/common";
 import { REQUEST } from "@nestjs/core";
 
+// src/exceptions/bad-gateway.exception.ts
+import { HttpStatus } from "@nestjs/common";
+
+// src/exceptions/base-field.exception.ts
+import { HttpException } from "@nestjs/common";
+var HttpProblemException = class extends HttpException {
+  static {
+    __name(this, "HttpProblemException");
+  }
+  constructor(detailOrOptions, httpStatus) {
+    const options = typeof detailOrOptions === "string" ? {
+      detail: detailOrOptions
+    } : detailOrOptions;
+    super({
+      type: options.type ?? "about:blank",
+      label: options.label,
+      detail: options.detail,
+      errors: options.errors ?? []
+    }, httpStatus);
+  }
+};
+
+// src/exceptions/bad-gateway.exception.ts
+var BadGatewayException = class extends HttpProblemException {
+  static {
+    __name(this, "BadGatewayException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Gateway", HttpStatus.BAD_GATEWAY);
+  }
+};
+
+// src/exceptions/bad-request.exception.ts
+import { HttpStatus as HttpStatus2 } from "@nestjs/common";
+var BadRequestException = class extends HttpProblemException {
+  static {
+    __name(this, "BadRequestException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Request", HttpStatus2.BAD_REQUEST);
+  }
+};
+
+// src/exceptions/conflict.exception.ts
+import { HttpStatus as HttpStatus3 } from "@nestjs/common";
+var ConflictException = class extends HttpProblemException {
+  static {
+    __name(this, "ConflictException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Conflict", HttpStatus3.CONFLICT);
+  }
+};
+
+// src/exceptions/forbidden.exception.ts
+import { HttpStatus as HttpStatus4 } from "@nestjs/common";
+var ForbiddenException = class extends HttpProblemException {
+  static {
+    __name(this, "ForbiddenException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Forbidden", HttpStatus4.FORBIDDEN);
+  }
+};
+
+// src/exceptions/gone.exception.ts
+import { HttpStatus as HttpStatus5 } from "@nestjs/common";
+var GoneException = class extends HttpProblemException {
+  static {
+    __name(this, "GoneException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Gone", HttpStatus5.GONE);
+  }
+};
+
+// src/exceptions/internal-server-error.exception.ts
+import { HttpStatus as HttpStatus6 } from "@nestjs/common";
+var InternalServerErrorException = class extends HttpProblemException {
+  static {
+    __name(this, "InternalServerErrorException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Internal Server Error", HttpStatus6.INTERNAL_SERVER_ERROR);
+  }
+};
+
+// src/exceptions/method-not-allowed.exception.ts
+import { HttpStatus as HttpStatus7 } from "@nestjs/common";
+var MethodNotAllowedException = class extends HttpProblemException {
+  static {
+    __name(this, "MethodNotAllowedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Method Not Allowed", HttpStatus7.METHOD_NOT_ALLOWED);
+  }
+};
+
+// src/exceptions/not-acceptable.exception.ts
+import { HttpStatus as HttpStatus8 } from "@nestjs/common";
+var NotAcceptableException = class extends HttpProblemException {
+  static {
+    __name(this, "NotAcceptableException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Acceptable", HttpStatus8.NOT_ACCEPTABLE);
+  }
+};
+
+// src/exceptions/not-found.exception.ts
+import { HttpStatus as HttpStatus9 } from "@nestjs/common";
+var NotFoundException = class extends HttpProblemException {
+  static {
+    __name(this, "NotFoundException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Found", HttpStatus9.NOT_FOUND);
+  }
+};
+
+// src/exceptions/not-implemented.exception.ts
+import { HttpStatus as HttpStatus10 } from "@nestjs/common";
+var NotImplementedException = class extends HttpProblemException {
+  static {
+    __name(this, "NotImplementedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Not Implemented", HttpStatus10.NOT_IMPLEMENTED);
+  }
+};
+
+// src/exceptions/payload-too-large.exception.ts
+import { HttpStatus as HttpStatus11 } from "@nestjs/common";
+var PayloadTooLargeException = class extends HttpProblemException {
+  static {
+    __name(this, "PayloadTooLargeException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Payload Too Large", HttpStatus11.PAYLOAD_TOO_LARGE);
+  }
+};
+
+// src/exceptions/request-timeout.exception.ts
+import { HttpStatus as HttpStatus12 } from "@nestjs/common";
+var RequestTimeoutException = class extends HttpProblemException {
+  static {
+    __name(this, "RequestTimeoutException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Request Timeout", HttpStatus12.REQUEST_TIMEOUT);
+  }
+};
+
+// src/exceptions/service-unavailable.exception.ts
+import { HttpStatus as HttpStatus13 } from "@nestjs/common";
+var ServiceUnavailableException = class extends HttpProblemException {
+  static {
+    __name(this, "ServiceUnavailableException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Service Unavailable", HttpStatus13.SERVICE_UNAVAILABLE);
+  }
+};
+
+// src/exceptions/too-many-requests.exception.ts
+import { HttpStatus as HttpStatus14 } from "@nestjs/common";
+var TooManyRequestsException = class extends HttpProblemException {
+  static {
+    __name(this, "TooManyRequestsException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Too Many Requests", HttpStatus14.TOO_MANY_REQUESTS);
+  }
+};
+
+// src/exceptions/unauthorized.exception.ts
+import { HttpStatus as HttpStatus15 } from "@nestjs/common";
+var UnauthorizedException = class extends HttpProblemException {
+  static {
+    __name(this, "UnauthorizedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unauthorized", HttpStatus15.UNAUTHORIZED);
+  }
+};
+
+// src/exceptions/unprocessable-entity.exception.ts
+import { HttpStatus as HttpStatus16 } from "@nestjs/common";
+var UnprocessableEntityException = class extends HttpProblemException {
+  static {
+    __name(this, "UnprocessableEntityException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unprocessable Entity", HttpStatus16.UNPROCESSABLE_ENTITY);
+  }
+};
+
+// src/exceptions/unsupported-media-type.exception.ts
+import { HttpStatus as HttpStatus17 } from "@nestjs/common";
+var UnsupportedMediaTypeException = class extends HttpProblemException {
+  static {
+    __name(this, "UnsupportedMediaTypeException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unsupported Media Type", HttpStatus17.UNSUPPORTED_MEDIA_TYPE);
+  }
+};
+
+// src/exceptions/validation.exception.ts
+import { HttpStatus as HttpStatus18 } from "@nestjs/common";
+var ValidationException = class extends HttpProblemException {
+  static {
+    __name(this, "ValidationException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Validation Failed", HttpStatus18.BAD_REQUEST);
+  }
+};
+
 // src/config/index.ts
 var defaultConfig = {
   cookie: {
@@ -70,19 +289,36 @@ function resetConfig() {
 }
 __name(resetConfig, "resetConfig");
 function getRefreshCookieOptions() {
-  const options = {
+  return {
     httpOnly: true,
     secure: currentConfig.cookie.refreshCookieSecure,
     sameSite: currentConfig.cookie.refreshCookieSameSite,
     path: currentConfig.cookie.refreshCookiePath,
-    maxAge: currentConfig.cookie.refreshCookieMaxAge
+    maxAge: currentConfig.cookie.refreshCookieMaxAge,
+    ...currentConfig.cookie.refreshCookieDomain && {
+      domain: currentConfig.cookie.refreshCookieDomain
+    }
   };
-  if (currentConfig.cookie.refreshCookieDomain) {
-    options.domain = currentConfig.cookie.refreshCookieDomain;
-  }
-  return options;
 }
 __name(getRefreshCookieOptions, "getRefreshCookieOptions");
+function getRefreshCookieOptionsForHost(hostname) {
+  const baseDomain = currentConfig.cookie.refreshCookieDomain;
+  if (!baseDomain) {
+    throw new Error("refreshCookieDomain must be configured before using getRefreshCookieOptionsForHost");
+  }
+  if (!hostname.endsWith(`.${baseDomain}`)) {
+    throw new UnauthorizedException("Invalid request host.");
+  }
+  return {
+    httpOnly: true,
+    secure: currentConfig.cookie.refreshCookieSecure,
+    sameSite: currentConfig.cookie.refreshCookieSameSite,
+    path: currentConfig.cookie.refreshCookiePath,
+    maxAge: currentConfig.cookie.refreshCookieMaxAge,
+    domain: hostname
+  };
+}
+__name(getRefreshCookieOptionsForHost, "getRefreshCookieOptionsForHost");
 function getJwtExpiry() {
   return {
     access: currentConfig.jwt.accessTokenExpiry,
@@ -93,9 +329,9 @@ function getJwtExpiry() {
 __name(getJwtExpiry, "getJwtExpiry");
 
 // src/request/services/request.service.ts
-function _ts_decorate(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -172,9 +408,9 @@ RequestService = _ts_decorate([
 ], RequestService);
 
 // src/request/request.module.ts
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate2(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -197,7 +433,7 @@ RequestModule = _ts_decorate2([
 ], RequestModule);
 
 // src/auth/guards/vritti-auth.guard.ts
-import { ForbiddenException, Injectable as Injectable2, Logger as Logger2, Scope as Scope2, UnauthorizedException } from "@nestjs/common";
+import { ForbiddenException as ForbiddenException2, Injectable as Injectable2, Logger as Logger2, Scope as Scope2, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
 import { SSE_METADATA } from "@nestjs/common/constants";
 import { ConfigService } from "@nestjs/config";
 import { Reflector } from "@nestjs/core";
@@ -227,9 +463,9 @@ function verifyTokenHash(token, expectedHash) {
 __name(verifyTokenHash, "verifyTokenHash");
 
 // src/auth/guards/vritti-auth.guard.ts
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate3(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -285,21 +521,21 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     try {
       const accessToken = this.requestService.getAccessToken();
       if (!accessToken) {
-        throw new UnauthorizedException("Access token not found");
+        throw new UnauthorizedException2("Access token not found");
       }
       const decodedAccessToken = this.validateAccessToken(accessToken);
       if (decodedAccessToken.tokenType !== "access") {
-        throw new UnauthorizedException("Invalid token type");
+        throw new UnauthorizedException2("Invalid token type");
       }
       this.validateRefreshTokenBinding(decodedAccessToken);
       if (isOnboarding && decodedAccessToken.sessionType !== "ONBOARDING") {
-        throw new UnauthorizedException("This endpoint requires an onboarding session");
+        throw new UnauthorizedException2("This endpoint requires an onboarding session");
       }
       if (isReset && decodedAccessToken.sessionType !== "RESET") {
-        throw new UnauthorizedException("This endpoint requires a reset session");
+        throw new UnauthorizedException2("This endpoint requires a reset session");
       }
       if (!isOnboarding && !isReset && (decodedAccessToken.sessionType === "ONBOARDING" || decodedAccessToken.sessionType === "RESET")) {
-        throw new UnauthorizedException(`${decodedAccessToken.sessionType} sessions cannot access this endpoint`);
+        throw new UnauthorizedException2(`${decodedAccessToken.sessionType} sessions cannot access this endpoint`);
       }
       request.sessionInfo = {
         userId: decodedAccessToken.userId,
@@ -308,11 +544,11 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       };
       return true;
     } catch (error) {
-      if (error instanceof UnauthorizedException) {
+      if (error instanceof UnauthorizedException2) {
         throw error;
       }
       this.logger.error("Unexpected error in auth guard", error);
-      throw new UnauthorizedException("Authentication failed");
+      throw new UnauthorizedException2("Authentication failed");
     }
   }
   // Validates JWT signature, expiry, and not-before claims
@@ -320,50 +556,50 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     try {
       return this.jwtService.verify(token);
     } catch (error) {
-      if (error instanceof UnauthorizedException) throw error;
+      if (error instanceof UnauthorizedException2) throw error;
       const jwtError = error;
       if (jwtError?.name === "TokenExpiredError") {
-        throw new UnauthorizedException("Access token has expired");
+        throw new UnauthorizedException2("Access token has expired");
       }
       if (jwtError?.name === "JsonWebTokenError") {
-        throw new UnauthorizedException("Invalid access token");
+        throw new UnauthorizedException2("Invalid access token");
       }
       if (jwtError?.name === "NotBeforeError") {
-        throw new UnauthorizedException("Access token not yet valid");
+        throw new UnauthorizedException2("Access token not yet valid");
       }
-      throw new UnauthorizedException("Access token validation failed");
+      throw new UnauthorizedException2("Access token validation failed");
     }
   }
   // Validates that the access token is bound to the refresh token in the cookie
   validateRefreshTokenBinding(decodedAccessToken) {
     if (!decodedAccessToken.refreshTokenHash) {
-      throw new UnauthorizedException("Token missing refresh token binding");
+      throw new UnauthorizedException2("Token missing refresh token binding");
     }
     const refreshToken = this.requestService.getRefreshToken();
     if (!refreshToken) {
-      throw new UnauthorizedException("Session validation failed");
+      throw new UnauthorizedException2("Session validation failed");
     }
     if (!verifyTokenHash(refreshToken, decodedAccessToken.refreshTokenHash)) {
-      throw new UnauthorizedException("Session validation failed");
+      throw new UnauthorizedException2("Session validation failed");
     }
   }
   // Authenticates SSE connections using the refresh token httpOnly cookie
   handleSseAuth(request, isOnboarding) {
     const refreshToken = this.requestService.getRefreshToken();
     if (!refreshToken) {
-      throw new UnauthorizedException("Authentication required");
+      throw new UnauthorizedException2("Authentication required");
     }
     let decoded;
     try {
       decoded = this.jwtService.verify(refreshToken);
     } catch {
-      throw new UnauthorizedException("Invalid or expired session");
+      throw new UnauthorizedException2("Invalid or expired session");
     }
     if (decoded.tokenType !== "refresh") {
-      throw new UnauthorizedException("Invalid token type");
+      throw new UnauthorizedException2("Invalid token type");
     }
     if (isOnboarding && decoded.sessionType !== "ONBOARDING") {
-      throw new UnauthorizedException("This endpoint requires an onboarding session");
+      throw new UnauthorizedException2("This endpoint requires an onboarding session");
     }
     request.sessionInfo = {
       userId: decoded.userId,
@@ -384,7 +620,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
       const fastifyInstance = request.server;
       const csrfProtection = fastifyInstance.csrfProtection;
       if (!csrfProtection) {
-        throw new ForbiddenException("CSRF protection not configured");
+        throw new ForbiddenException2("CSRF protection not configured");
       }
       await new Promise((resolve, reject) => {
         const originalSend = reply.send.bind(reply);
@@ -400,7 +636,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
         });
       });
     } catch (error) {
-      throw new ForbiddenException({
+      throw new ForbiddenException2({
         errors: [
           {
             field: "csrf",
@@ -465,9 +701,9 @@ var TokenType = /* @__PURE__ */ (function(TokenType2) {
 })({});
 
 // src/auth/services/jwt-auth.service.ts
-function _ts_decorate4(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate4(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -548,9 +784,9 @@ JwtAuthService = _ts_decorate4([
 ], JwtAuthService);
 
 // src/auth/auth-config.module.ts
-function _ts_decorate5(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate5(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -613,6 +849,18 @@ var AccessToken = createParamDecorator((_data, ctx) => {
   return authHeader?.replace("Bearer ", "") || "";
 });
 
+// src/auth/decorators/cookie-domain.decorator.ts
+import { createParamDecorator as createParamDecorator2 } from "@nestjs/common";
+var CookieDomain = createParamDecorator2((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const forwarded = request.headers["x-forwarded-host"];
+  const raw = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  const hostStr = raw ?? request.hostname;
+  const domain = hostStr.split(":")[0] ?? hostStr;
+  const baseDomain = getConfig().cookie.refreshCookieDomain ?? "";
+  return domain.endsWith(`.${baseDomain}`) ? domain : baseDomain;
+});
+
 // src/auth/decorators/onboarding.decorator.ts
 import { SetMetadata as SetMetadata3 } from "@nestjs/common";
 var Onboarding = /* @__PURE__ */ __name(() => SetMetadata3("isOnboarding", true), "Onboarding");
@@ -621,9 +869,20 @@ var Onboarding = /* @__PURE__ */ __name(() => SetMetadata3("isOnboarding", true)
 import { SetMetadata as SetMetadata4 } from "@nestjs/common";
 var Public = /* @__PURE__ */ __name(() => SetMetadata4("isPublic", true), "Public");
 
+// src/auth/decorators/refresh-cookie-options.decorator.ts
+import { createParamDecorator as createParamDecorator3 } from "@nestjs/common";
+var RefreshCookieOptions = createParamDecorator3((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const forwarded = request.headers["x-forwarded-host"];
+  const raw = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  const hostStr = raw ?? request.hostname;
+  const domain = hostStr.split(":")[0] ?? hostStr;
+  return getRefreshCookieOptionsForHost(domain);
+});
+
 // src/auth/decorators/refresh-token-cookie.decorator.ts
-import { createParamDecorator as createParamDecorator2 } from "@nestjs/common";
-var RefreshTokenCookie = createParamDecorator2((_data, ctx) => {
+import { createParamDecorator as createParamDecorator4 } from "@nestjs/common";
+var RefreshTokenCookie = createParamDecorator4((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const cookies = request.cookies ?? {};
   const config = getConfig();
@@ -631,8 +890,8 @@ var RefreshTokenCookie = createParamDecorator2((_data, ctx) => {
 });
 
 // src/auth/decorators/session-data.decorator.ts
-import { createParamDecorator as createParamDecorator3 } from "@nestjs/common";
-var SessionData = createParamDecorator3((_data, ctx) => {
+import { createParamDecorator as createParamDecorator5 } from "@nestjs/common";
+var SessionData = createParamDecorator5((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const sessionInfo = request.sessionInfo;
   if (!sessionInfo?.sessionId) {
@@ -646,8 +905,8 @@ var SessionData = createParamDecorator3((_data, ctx) => {
 });
 
 // src/auth/decorators/user-id.decorator.ts
-import { createParamDecorator as createParamDecorator4 } from "@nestjs/common";
-var UserId = createParamDecorator4((_data, ctx) => {
+import { createParamDecorator as createParamDecorator6 } from "@nestjs/common";
+var UserId = createParamDecorator6((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const sessionInfo = request.sessionInfo;
   if (!sessionInfo?.userId) {
@@ -656,21 +915,20 @@ var UserId = createParamDecorator4((_data, ctx) => {
   return sessionInfo.userId;
 });
 
-// src/database/database.module.ts
-import { Global as Global3, Module as Module3 } from "@nestjs/common";
-import { Reflector as Reflector3 } from "@nestjs/core";
+// src/cache/cache.module.ts
+import { Module as Module3 } from "@nestjs/common";
+import { ConfigModule as ConfigModule2 } from "@nestjs/config";
 
-// src/database/constants.ts
-var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+// src/cache/cache.service.ts
+import { Inject as Inject2, Injectable as Injectable4, Logger as Logger4 } from "@nestjs/common";
 
-// src/database/services/primary-database.service.ts
-import { Inject as Inject2, Injectable as Injectable4, InternalServerErrorException, Logger as Logger4 } from "@nestjs/common";
-import { eq, or } from "drizzle-orm";
-import { drizzle } from "drizzle-orm/node-postgres";
-import { Pool } from "pg";
-function _ts_decorate6(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+// src/cache/constants.ts
+var CACHE_PROVIDER = Symbol("CACHE_PROVIDER");
+
+// src/cache/cache.service.ts
+function _ts_decorate6(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -685,14 +943,220 @@ function _ts_param2(paramIndex, decorator) {
   };
 }
 __name(_ts_param2, "_ts_param");
-var PrimaryDatabaseService = class _PrimaryDatabaseService {
+var CacheService = class _CacheService {
   static {
-    __name(this, "PrimaryDatabaseService");
+    __name(this, "CacheService");
   }
-  options;
-  logger = new Logger4(_PrimaryDatabaseService.name);
-  pool = null;
-  db = null;
+  provider;
+  logger = new Logger4(_CacheService.name);
+  constructor(provider) {
+    this.provider = provider;
+  }
+  // Stores a value with mandatory TTL — errors are logged and swallowed so DB writes still succeed
+  async set(key, value, ttlSeconds) {
+    try {
+      await this.provider.set(key, value, ttlSeconds);
+    } catch (err) {
+      this.logger.error(`Cache set failed for key "${key}"`, err);
+    }
+  }
+  // Returns cached value or null on miss or any Redis error — callers fall back to DB
+  async get(key) {
+    try {
+      return await this.provider.get(key);
+    } catch (err) {
+      this.logger.error(`Cache get failed for key "${key}"`, err);
+      return null;
+    }
+  }
+  // Deletes one or more keys — errors are logged and swallowed
+  async del(...keys) {
+    try {
+      await this.provider.del(...keys);
+    } catch (err) {
+      this.logger.error(`Cache del failed for keys "${keys.join(", ")}"`, err);
+    }
+  }
+  // Returns all keys matching a glob pattern — returns empty array on error
+  async scanKeys(pattern) {
+    try {
+      return await this.provider.scanKeys(pattern);
+    } catch (err) {
+      this.logger.error(`Cache scanKeys failed for pattern "${pattern}"`, err);
+      return [];
+    }
+  }
+  // Returns raw memory info from the provider — returns empty string on error
+  async getMemoryInfo() {
+    try {
+      return await this.provider.getMemoryInfo();
+    } catch (err) {
+      this.logger.error("Cache getMemoryInfo failed", err);
+      return "";
+    }
+  }
+};
+CacheService = _ts_decorate6([
+  Injectable4(),
+  _ts_param2(0, Inject2(CACHE_PROVIDER)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof ICacheProvider === "undefined" ? Object : ICacheProvider
+  ])
+], CacheService);
+
+// src/cache/providers/redis.provider.ts
+import { Injectable as Injectable5, Logger as Logger5 } from "@nestjs/common";
+import { ConfigService as ConfigService4 } from "@nestjs/config";
+import Redis from "ioredis";
+function _ts_decorate7(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata5(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata5, "_ts_metadata");
+var RedisCacheProvider = class _RedisCacheProvider {
+  static {
+    __name(this, "RedisCacheProvider");
+  }
+  configService;
+  logger = new Logger5(_RedisCacheProvider.name);
+  client;
+  constructor(configService) {
+    this.configService = configService;
+  }
+  // Creates the ioredis client and attaches connection/error listeners
+  onModuleInit() {
+    const url = this.configService.getOrThrow("REDIS_URL");
+    this.client = new Redis(url, {
+      lazyConnect: true,
+      maxRetriesPerRequest: 3
+    });
+    this.client.on("connect", () => this.logger.log("Redis connected"));
+    this.client.on("error", (err) => this.logger.error("Redis error", err));
+  }
+  // Gracefully closes the ioredis connection on app shutdown
+  async onModuleDestroy() {
+    await this.client.quit();
+    this.logger.log("Redis disconnected");
+  }
+  // Serializes value to JSON and stores with a mandatory TTL
+  async set(key, value, ttlSeconds) {
+    const json = JSON.stringify(value);
+    await this.client.setex(key, ttlSeconds, json);
+  }
+  // Reads the stored JSON string and parses back to the original type
+  async get(key) {
+    const json = await this.client.get(key);
+    if (!json) return null;
+    return JSON.parse(json);
+  }
+  // Deletes one or more keys in a single command
+  async del(...keys) {
+    if (keys.length > 0) {
+      await this.client.del(...keys);
+    }
+  }
+  // Cursor-iterates all keys matching a glob pattern — never uses KEYS command
+  async scanKeys(pattern) {
+    const keys = [];
+    let cursor = "0";
+    do {
+      const [nextCursor, batch] = await this.client.scan(cursor, "MATCH", pattern, "COUNT", 100);
+      cursor = nextCursor;
+      keys.push(...batch);
+    } while (cursor !== "0");
+    return keys;
+  }
+  // Returns raw INFO memory output for memory monitoring
+  async getMemoryInfo() {
+    return this.client.info("memory");
+  }
+};
+RedisCacheProvider = _ts_decorate7([
+  Injectable5(),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof ConfigService4 === "undefined" ? Object : ConfigService4
+  ])
+], RedisCacheProvider);
+
+// src/cache/cache.module.ts
+function _ts_decorate8(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+var CacheModule = class {
+  static {
+    __name(this, "CacheModule");
+  }
+};
+CacheModule = _ts_decorate8([
+  Module3({
+    imports: [
+      ConfigModule2
+    ],
+    providers: [
+      RedisCacheProvider,
+      {
+        provide: CACHE_PROVIDER,
+        useExisting: RedisCacheProvider
+      },
+      CacheService
+    ],
+    exports: [
+      RedisCacheProvider,
+      CACHE_PROVIDER,
+      CacheService
+    ]
+  })
+], CacheModule);
+
+// src/database/database.module.ts
+import { Global as Global3, Module as Module4 } from "@nestjs/common";
+import { Reflector as Reflector3 } from "@nestjs/core";
+
+// src/database/constants.ts
+var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
+
+// src/database/services/primary-database.service.ts
+import { Inject as Inject3, Injectable as Injectable6, InternalServerErrorException as InternalServerErrorException2, Logger as Logger6 } from "@nestjs/common";
+import { eq, or } from "drizzle-orm";
+import { drizzle } from "drizzle-orm/node-postgres";
+import { Pool } from "pg";
+function _ts_decorate9(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata6(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param3, "_ts_param");
+var PrimaryDatabaseService = class _PrimaryDatabaseService {
+  static {
+    __name(this, "PrimaryDatabaseService");
+  }
+  options;
+  logger = new Logger6(_PrimaryDatabaseService.name);
+  pool = null;
+  db = null;
   tenantConfigCache = /* @__PURE__ */ new Map();
   cacheTTL;
   constructor(options) {
@@ -724,7 +1188,7 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
       this.logger.log("Connected to primary database (tenant registry)");
     } catch (error) {
       this.logger.error("Failed to connect to primary database", error);
-      throw new InternalServerErrorException("Failed to initialize tenant registry");
+      throw new InternalServerErrorException2("Failed to initialize tenant registry");
     }
   }
   // Builds the PostgreSQL connection URL from primary database config properties
@@ -796,7 +1260,7 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
       return info;
     } catch (error) {
       this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
-      throw new InternalServerErrorException("Failed to resolve tenant");
+      throw new InternalServerErrorException2("Failed to resolve tenant");
     }
   }
   // Caches tenant info by both ID and subdomain with TTL expiration
@@ -846,24 +1310,24 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
     }
   }
 };
-PrimaryDatabaseService = _ts_decorate6([
-  Injectable4(),
-  _ts_param2(0, Inject2(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+PrimaryDatabaseService = _ts_decorate9([
+  Injectable6(),
+  _ts_param3(0, Inject3(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions
   ])
 ], PrimaryDatabaseService);
 
 // src/database/services/tenant-context.service.ts
-import { Injectable as Injectable5, Scope as Scope3, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+import { Injectable as Injectable7, Scope as Scope3, UnauthorizedException as UnauthorizedException3 } from "@nestjs/common";
+function _ts_decorate10(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 var TenantContextService = class {
   static {
     __name(this, "TenantContextService");
@@ -879,7 +1343,7 @@ var TenantContextService = class {
   // Returns the tenant info for this request, throwing if context is not set
   getTenant() {
     if (!this.tenantInfo) {
-      throw new UnauthorizedException2("Tenant context not set");
+      throw new UnauthorizedException3("Tenant context not set");
     }
     return this.tenantInfo;
   }
@@ -900,40 +1364,40 @@ var TenantContextService = class {
     return this.tenantInfo?.subdomain ?? null;
   }
 };
-TenantContextService = _ts_decorate7([
-  Injectable5({
+TenantContextService = _ts_decorate10([
+  Injectable7({
     scope: Scope3.REQUEST
   })
 ], TenantContextService);
 
 // src/database/services/tenant-database.service.ts
-import { Inject as Inject3, Injectable as Injectable6, InternalServerErrorException as InternalServerErrorException2, Logger as Logger5 } from "@nestjs/common";
+import { Inject as Inject4, Injectable as Injectable8, InternalServerErrorException as InternalServerErrorException3, Logger as Logger7 } from "@nestjs/common";
 import { drizzle as drizzle2 } from "drizzle-orm/node-postgres";
 import { Pool as Pool2 } from "pg";
-function _ts_decorate8(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate11(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param3, "_ts_param");
+__name(_ts_param4, "_ts_param");
 var TenantDatabaseService = class _TenantDatabaseService {
   static {
     __name(this, "TenantDatabaseService");
   }
   options;
   tenantContext;
-  logger = new Logger5(_TenantDatabaseService.name);
+  logger = new Logger7(_TenantDatabaseService.name);
   clients = /* @__PURE__ */ new Map();
   clientLastUsed = /* @__PURE__ */ new Map();
   cleanupInterval;
@@ -985,7 +1449,7 @@ var TenantDatabaseService = class _TenantDatabaseService {
       };
     } catch (error) {
       this.logger.error(`Failed to create database connection for tenant: ${tenant.subdomain}`, error);
-      throw new InternalServerErrorException2("Failed to connect to tenant database");
+      throw new InternalServerErrorException3("Failed to connect to tenant database");
     }
   }
   // Builds the PostgreSQL connection URL for a dedicated tenant database
@@ -1065,24 +1529,24 @@ var TenantDatabaseService = class _TenantDatabaseService {
     this.logger.log("All database connections closed");
   }
 };
-TenantDatabaseService = _ts_decorate8([
-  Injectable6(),
-  _ts_param3(0, Inject3(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+TenantDatabaseService = _ts_decorate11([
+  Injectable8(),
+  _ts_param4(0, Inject4(DATABASE_MODULE_OPTIONS)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions,
     typeof TenantContextService === "undefined" ? Object : TenantContextService
   ])
 ], TenantDatabaseService);
 
 // src/database/database.module.ts
-function _ts_decorate9(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate12(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var DatabaseModule = class _DatabaseModule {
   static {
     __name(this, "DatabaseModule");
@@ -1128,14 +1592,14 @@ var DatabaseModule = class _DatabaseModule {
     };
   }
 };
-DatabaseModule = _ts_decorate9([
+DatabaseModule = _ts_decorate12([
   Global3(),
-  Module3({})
+  Module4({})
 ], DatabaseModule);
 
 // src/database/decorators/tenant.decorator.ts
-import { createParamDecorator as createParamDecorator5 } from "@nestjs/common";
-var Tenant = createParamDecorator5((_data, ctx) => {
+import { createParamDecorator as createParamDecorator7 } from "@nestjs/common";
+var Tenant = createParamDecorator7((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const tenantContext = request.app?.get?.(TenantContextService);
   if (!tenantContext) {
@@ -1148,17 +1612,17 @@ var Tenant = createParamDecorator5((_data, ctx) => {
 import { ApiPropertyOptional } from "@nestjs/swagger";
 import { Type } from "class-transformer";
 import { IsInt, IsOptional, IsString, Min } from "class-validator";
-function _ts_decorate10(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate13(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
+__name(_ts_metadata8, "_ts_metadata");
 var SelectOptionsQueryDto = class {
   static {
     __name(this, "SelectOptionsQueryDto");
@@ -1170,18 +1634,19 @@ var SelectOptionsQueryDto = class {
   excludeIds;
   valueKey;
   labelKey;
+  descriptionKey;
   groupIdKey;
 };
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Search term to filter by label",
     example: "united"
   }),
   IsOptional(),
   IsString(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "search", void 0);
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Maximum number of results",
     example: 20,
@@ -1191,9 +1656,9 @@ _ts_decorate10([
   Type(() => Number),
   IsInt(),
   Min(1),
-  _ts_metadata6("design:type", Number)
+  _ts_metadata8("design:type", Number)
 ], SelectOptionsQueryDto.prototype, "limit", void 0);
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Number of results to skip",
     example: 0,
@@ -1203,27 +1668,27 @@ _ts_decorate10([
   Type(() => Number),
   IsInt(),
   Min(0),
-  _ts_metadata6("design:type", Number)
+  _ts_metadata8("design:type", Number)
 ], SelectOptionsQueryDto.prototype, "offset", void 0);
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Comma-separated values to fetch specific options",
     example: "1,2,3"
   }),
   IsOptional(),
   IsString(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "values", void 0);
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Comma-separated IDs to exclude from results (already selected)",
     example: "5,10"
   }),
   IsOptional(),
   IsString(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "excludeIds", void 0);
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Column name for option value",
     example: "id",
@@ -1231,9 +1696,9 @@ _ts_decorate10([
   }),
   IsOptional(),
   IsString(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "valueKey", void 0);
-_ts_decorate10([
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Column name for option label",
     example: "name",
@@ -1241,21 +1706,193 @@ _ts_decorate10([
   }),
   IsOptional(),
   IsString(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "labelKey", void 0);
-_ts_decorate10([
+_ts_decorate13([
+  ApiPropertyOptional({
+    description: "Column name for option description",
+    example: "description"
+  }),
+  IsOptional(),
+  IsString(),
+  _ts_metadata8("design:type", String)
+], SelectOptionsQueryDto.prototype, "descriptionKey", void 0);
+_ts_decorate13([
   ApiPropertyOptional({
     description: "Column name for group ID",
     example: "regionId"
   }),
   IsOptional(),
   IsString(),
-  _ts_metadata6("design:type", String)
+  _ts_metadata8("design:type", String)
 ], SelectOptionsQueryDto.prototype, "groupIdKey", void 0);
 
+// src/database/dto/success-response.dto.ts
+import { ApiProperty } from "@nestjs/swagger";
+import { IsBoolean, IsNotEmpty, IsString as IsString2 } from "class-validator";
+function _ts_decorate14(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata9(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata9, "_ts_metadata");
+var SuccessResponseDto = class {
+  static {
+    __name(this, "SuccessResponseDto");
+  }
+  success;
+  message;
+};
+_ts_decorate14([
+  ApiProperty({
+    example: true
+  }),
+  IsNotEmpty(),
+  IsBoolean(),
+  _ts_metadata9("design:type", Boolean)
+], SuccessResponseDto.prototype, "success", void 0);
+_ts_decorate14([
+  ApiProperty({
+    example: "Operation completed successfully"
+  }),
+  IsNotEmpty(),
+  IsString2(),
+  _ts_metadata9("design:type", String)
+], SuccessResponseDto.prototype, "message", void 0);
+
+// src/database/dto/table-response.dto.ts
+import { ApiProperty as ApiProperty2, ApiPropertyOptional as ApiPropertyOptional2 } from "@nestjs/swagger";
+function _ts_decorate15(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata10(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata10, "_ts_metadata");
+var TableResponseDto = class {
+  static {
+    __name(this, "TableResponseDto");
+  }
+  result;
+  count;
+  state;
+  activeViewId;
+};
+_ts_decorate15([
+  ApiProperty2(),
+  _ts_metadata10("design:type", Array)
+], TableResponseDto.prototype, "result", void 0);
+_ts_decorate15([
+  ApiProperty2(),
+  _ts_metadata10("design:type", Number)
+], TableResponseDto.prototype, "count", void 0);
+_ts_decorate15([
+  ApiProperty2(),
+  _ts_metadata10("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+], TableResponseDto.prototype, "state", void 0);
+_ts_decorate15([
+  ApiPropertyOptional2({
+    nullable: true
+  }),
+  _ts_metadata10("design:type", Object)
+], TableResponseDto.prototype, "activeViewId", void 0);
+
+// src/database/filter/filter.processor.ts
+import { and, asc, desc, eq as eq2, gt, gte, ilike, lt, lte, ne, notIlike, or as or2 } from "drizzle-orm";
+var FilterProcessor = class {
+  static {
+    __name(this, "FilterProcessor");
+  }
+  // Returns undefined if no conditions (Drizzle accepts undefined as "no WHERE")
+  static buildWhere(filters = [], fieldMap) {
+    const conditions = filters.flatMap((f) => {
+      const def = fieldMap[f.field];
+      if (!def) return [];
+      if ("expression" in def) return [
+        def.expression(f.value)
+      ];
+      const { column: col } = def;
+      const val = f.value;
+      switch (f.operator) {
+        case "equals":
+          if (def.type === "boolean") return [
+            eq2(col, val === "true" || val === 1)
+          ];
+          return [
+            eq2(col, val)
+          ];
+        case "notEquals":
+          if (def.type === "boolean") return [
+            ne(col, val === "true" || val === 1)
+          ];
+          return [
+            ne(col, val)
+          ];
+        case "contains":
+          return [
+            ilike(col, `%${val}%`)
+          ];
+        case "notContains":
+          return [
+            notIlike(col, `%${val}%`)
+          ];
+        case "gt":
+          return [
+            gt(col, val)
+          ];
+        case "gte":
+          return [
+            gte(col, val)
+          ];
+        case "lt":
+          return [
+            lt(col, val)
+          ];
+        case "lte":
+          return [
+            lte(col, val)
+          ];
+        default:
+          return [];
+      }
+    });
+    return conditions.length ? and(...conditions) : void 0;
+  }
+  // Builds a search WHERE — OR across all string fields when columnId is 'all', otherwise a single ilike
+  static buildSearch(search, fieldMap) {
+    if (!search?.value) return void 0;
+    if (search.columnId === "all") {
+      const conditions = Object.values(fieldMap).filter((def2) => "column" in def2 && def2.type === "string").map((def2) => ilike(def2.column, `%${search.value}%`));
+      return conditions.length ? or2(...conditions) : void 0;
+    }
+    const def = fieldMap[search.columnId];
+    if (!def || !("column" in def)) return void 0;
+    return ilike(def.column, `%${search.value}%`);
+  }
+  // Maps each SortCondition to an asc/desc SQL expression
+  static buildOrderBy(sort = [], fieldMap) {
+    return sort.flatMap((s) => {
+      const def = fieldMap[s.field];
+      if (!def || !("column" in def)) return [];
+      return [
+        s.direction === "asc" ? asc(def.column) : desc(def.column)
+      ];
+    });
+  }
+};
+
 // src/database/repositories/primary-base.repository.ts
-import { Logger as Logger6 } from "@nestjs/common";
-import { and, asc, eq as eq2, getTableName, ilike, inArray, notInArray, sql } from "drizzle-orm";
+import { Logger as Logger8 } from "@nestjs/common";
+import { and as and2, asc as asc2, eq as eq3, getTableName, ilike as ilike2, inArray, notInArray, sql } from "drizzle-orm";
 function snakeToCamel(str) {
   return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
 }
@@ -1286,7 +1923,7 @@ var PrimaryBaseRepository = class {
     this.table = table;
     const dbTableName = getTableName(table);
     this.tableName = snakeToCamel(dbTableName);
-    this.logger = new Logger6(this.constructor.name);
+    this.logger = new Logger8(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
     this.logger.debug(`Table name: '${dbTableName}' -> query key: '${this.tableName}'`);
   }
@@ -1319,12 +1956,32 @@ var PrimaryBaseRepository = class {
     this.logger.debug("Finding multiple records");
     return this.model.findMany(options);
   }
+  // Builds a select query with optional custom fields, join, filter, ordering, and pagination
+  buildSelectQuery(options) {
+    const base = options?.select ? this.db.select(options.select).from(this.table) : this.db.select().from(this.table);
+    const joined = options?.leftJoin ? base.leftJoin(options.leftJoin.table, options.leftJoin.on) : base;
+    const filtered = options?.where ? joined.where(options.where) : joined;
+    const ordered = options?.orderBy?.length ? filtered.orderBy(...options.orderBy) : filtered;
+    const limited = options?.limit ? ordered.limit(options.limit) : ordered;
+    return options?.offset ? limited.offset(options.offset) : limited;
+  }
+  // Returns paginated result and total count, with optional custom select, LEFT JOIN, and ordering
+  async findAllAndCount(options) {
+    const [count, result] = await Promise.all([
+      this.count(options?.where),
+      this.buildSelectQuery(options)
+    ]);
+    return {
+      result,
+      count
+    };
+  }
   // Updates a record by ID and returns the updated record
   async update(id, data) {
     this.logger.log(`Updating record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.update(this.table).set(data).where(eq2(idColumn, id)).returning();
+    const results = await this.db.update(this.table).set(data).where(eq3(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1342,7 +1999,7 @@ var PrimaryBaseRepository = class {
     this.logger.log(`Deleting record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.delete(this.table).where(eq2(idColumn, id)).returning();
+    const results = await this.db.delete(this.table).where(eq3(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1382,20 +2039,44 @@ var PrimaryBaseRepository = class {
     if (!valueCol) throw new Error(`Column '${config.value}' not found in table '${this.tableName}'`);
     const labelCol = tableColumns[config.label];
     if (!labelCol) throw new Error(`Column '${config.label}' not found in table '${this.tableName}'`);
+    let descriptionCol = config.description ? tableColumns[config.description] : void 0;
+    if (!descriptionCol && config.description && config.joins) {
+      for (const join of config.joins) {
+        const joinCols = join.table;
+        if (joinCols[config.description]) {
+          descriptionCol = joinCols[config.description];
+          break;
+        }
+      }
+    }
     if (parsedValues && parsedValues.length > 0) {
       const selectCols = {
         value: valueCol,
         label: labelCol
       };
+      if (descriptionCol) selectCols.description = descriptionCol;
       if (config.groupId) {
         const groupIdCol = tableColumns[config.groupId];
         if (groupIdCol) selectCols.groupId = groupIdCol;
       }
-      const rows2 = await this.db.select(selectCols).from(this.table).where(inArray(valueCol, parsedValues));
+      let valuesQuery = this.db.select(selectCols).from(this.table).$dynamic();
+      if (config.joins) {
+        for (const join of config.joins) {
+          if (join.type === "inner") {
+            valuesQuery = valuesQuery.innerJoin(join.table, join.on);
+          } else {
+            valuesQuery = valuesQuery.leftJoin(join.table, join.on);
+          }
+        }
+      }
+      const rows2 = await valuesQuery.where(inArray(valueCol, parsedValues));
       return {
         options: rows2.map((row) => ({
           value: row.value,
           label: String(row.label),
+          ...descriptionCol && row.description != null ? {
+            description: row.description
+          } : {},
           ...config.groupId && row.groupId != null ? {
             groupId: row.groupId
           } : {}
@@ -1411,13 +2092,14 @@ var PrimaryBaseRepository = class {
       label: labelCol,
       totalCount: sql`count(*) over()`.mapWith(Number)
     };
+    if (descriptionCol) selectFields.description = descriptionCol;
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
       if (groupIdCol) selectFields.groupId = groupIdCol;
     }
     const conditions = [];
     if (config.search) {
-      conditions.push(ilike(labelCol, `%${config.search}%`));
+      conditions.push(ilike2(labelCol, `%${config.search}%`));
     }
     if (parsedExcludeIds.length > 0) {
       conditions.push(notInArray(valueCol, parsedExcludeIds));
@@ -1426,30 +2108,45 @@ var PrimaryBaseRepository = class {
       for (const [field, val] of Object.entries(config.where)) {
         const column = tableColumns[field];
         if (column) {
-          conditions.push(eq2(column, val));
+          conditions.push(eq3(column, val));
         }
       }
     }
+    if (config.conditions) {
+      conditions.push(...config.conditions);
+    }
     const orderByKey = config.orderBy ? Object.keys(config.orderBy)[0] : void 0;
     const orderByCol = orderByKey ? tableColumns[orderByKey] ?? labelCol : labelCol;
     const limit = Number(config.limit) || 20;
     const offset = Number(config.offset) || 0;
     let query = this.db.select(selectFields).from(this.table).$dynamic();
+    if (config.joins) {
+      for (const join of config.joins) {
+        if (join.type === "inner") {
+          query = query.innerJoin(join.table, join.on);
+        } else {
+          query = query.leftJoin(join.table, join.on);
+        }
+      }
+    }
     if (conditions.length > 0) {
-      query = query.where(conditions.length === 1 ? conditions[0] : and(...conditions));
+      query = query.where(conditions.length === 1 ? conditions[0] : and2(...conditions));
     }
     const orderClauses = [];
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) orderClauses.push(asc(groupIdCol));
+      if (groupIdCol) orderClauses.push(asc2(groupIdCol));
     }
-    orderClauses.push(asc(orderByCol));
+    orderClauses.push(asc2(orderByCol));
     query = query.orderBy(...orderClauses).limit(limit).offset(offset);
     const rows = await query;
     const totalCount = rows.length > 0 ? rows[0].totalCount : 0;
     const options = rows.map((row) => ({
       value: row.value,
       label: String(row.label),
+      ...descriptionCol && row.description != null ? {
+        description: row.description
+      } : {},
       ...config.groupId && row.groupId != null ? {
         groupId: row.groupId
       } : {}
@@ -1466,7 +2163,7 @@ var PrimaryBaseRepository = class {
       const groupRows = await this.db.select({
         id: groupIdCol,
         name: groupNameCol
-      }).from(config.groupTable).orderBy(asc(groupNameCol));
+      }).from(config.groupTable).orderBy(asc2(groupNameCol));
       resolvedGroups = groupRows.map((r) => ({
         id: r.id,
         name: String(r.name)
@@ -1484,8 +2181,8 @@ var PrimaryBaseRepository = class {
 };
 
 // src/database/repositories/tenant-base.repository.ts
-import { Logger as Logger7 } from "@nestjs/common";
-import { and as and2, asc as asc2, eq as eq3, getTableName as getTableName2, ilike as ilike2, inArray as inArray2, notInArray as notInArray2, sql as sql2 } from "drizzle-orm";
+import { Logger as Logger9 } from "@nestjs/common";
+import { and as and3, asc as asc3, eq as eq4, getTableName as getTableName2, ilike as ilike3, inArray as inArray2, notInArray as notInArray2, sql as sql2 } from "drizzle-orm";
 var TenantBaseRepository = class {
   static {
     __name(this, "TenantBaseRepository");
@@ -1504,7 +2201,7 @@ var TenantBaseRepository = class {
     this.database = database;
     this.table = table;
     this.tableName = getTableName2(table);
-    this.logger = new Logger7(this.constructor.name);
+    this.logger = new Logger9(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
   }
   // Creates a new record and returns it
@@ -1520,7 +2217,7 @@ var TenantBaseRepository = class {
     this.logger.debug(`Finding record by ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.select().from(this.table).where(eq3(idColumn, id)).limit(1);
+    const results = await this.db.select().from(this.table).where(eq4(idColumn, id)).limit(1);
     return results[0] ?? null;
   }
   // Finds a single record matching the given SQL condition
@@ -1552,7 +2249,7 @@ var TenantBaseRepository = class {
     this.logger.log(`Updating record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.update(this.table).set(data).where(eq3(idColumn, id)).returning();
+    const results = await this.db.update(this.table).set(data).where(eq4(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1570,7 +2267,7 @@ var TenantBaseRepository = class {
     this.logger.log(`Deleting record with ID: ${id}`);
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.delete(this.table).where(eq3(idColumn, id)).returning();
+    const results = await this.db.delete(this.table).where(eq4(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -1645,7 +2342,7 @@ var TenantBaseRepository = class {
     }
     const conditions = [];
     if (config.search) {
-      conditions.push(ilike2(labelCol, `%${config.search}%`));
+      conditions.push(ilike3(labelCol, `%${config.search}%`));
     }
     if (parsedExcludeIds.length > 0) {
       conditions.push(notInArray2(valueCol, parsedExcludeIds));
@@ -1654,7 +2351,7 @@ var TenantBaseRepository = class {
       for (const [field, val] of Object.entries(config.where)) {
         const column = tableColumns[field];
         if (column) {
-          conditions.push(eq3(column, val));
+          conditions.push(eq4(column, val));
         }
       }
     }
@@ -1664,14 +2361,14 @@ var TenantBaseRepository = class {
     const offset = Number(config.offset) || 0;
     let query = this.db.select(selectFields).from(this.table).$dynamic();
     if (conditions.length > 0) {
-      query = query.where(conditions.length === 1 ? conditions[0] : and2(...conditions));
+      query = query.where(conditions.length === 1 ? conditions[0] : and3(...conditions));
     }
     const orderClauses = [];
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) orderClauses.push(asc2(groupIdCol));
+      if (groupIdCol) orderClauses.push(asc3(groupIdCol));
     }
-    orderClauses.push(asc2(orderByCol));
+    orderClauses.push(asc3(orderByCol));
     query = query.orderBy(...orderClauses).limit(limit).offset(offset);
     const rows = await query;
     const totalCount = rows.length > 0 ? rows[0].totalCount : 0;
@@ -1694,7 +2391,7 @@ var TenantBaseRepository = class {
       const groupRows = await this.db.select({
         id: groupIdCol,
         name: groupNameCol
-      }).from(config.groupTable).orderBy(asc2(groupNameCol));
+      }).from(config.groupTable).orderBy(asc3(groupNameCol));
       resolvedGroups = groupRows.map((r) => ({
         id: r.id,
         name: String(r.name)
@@ -1712,30 +2409,30 @@ var TenantBaseRepository = class {
 };
 
 // src/email/email.module.ts
-import { Global as Global4, Module as Module4 } from "@nestjs/common";
-import { ConfigModule as ConfigModule2 } from "@nestjs/config";
+import { Global as Global4, Module as Module5 } from "@nestjs/common";
+import { ConfigModule as ConfigModule3 } from "@nestjs/config";
 
 // src/email/email.service.ts
 import { BrevoClient, BrevoError, BrevoTimeoutError } from "@getbrevo/brevo";
-import { Injectable as Injectable7, Logger as Logger8 } from "@nestjs/common";
-import { ConfigService as ConfigService4 } from "@nestjs/config";
-function _ts_decorate11(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+import { Injectable as Injectable9, Logger as Logger10 } from "@nestjs/common";
+import { ConfigService as ConfigService5 } from "@nestjs/config";
+function _ts_decorate16(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
+__name(_ts_metadata11, "_ts_metadata");
 var EmailService = class _EmailService {
   static {
     __name(this, "EmailService");
   }
   configService;
-  logger = new Logger8(_EmailService.name);
+  logger = new Logger10(_EmailService.name);
   brevoClient;
   senderEmail;
   senderName;
@@ -2109,393 +2806,174 @@ This is an automated message, please do not reply.
                         Hello <strong>${name}</strong>,
                       </p>
                       <p style="margin: 0 0 30px; color: #333333; font-size: 16px; line-height: 1.6;">
-                        Your recent email address change has been successfully reverted. Your email is now:
-                      </p>
-
-                      <div style="background-color: #d4edda; padding: 20px; border-radius: 8px; margin: 30px 0; text-align: center;">
-                        <p style="margin: 0; color: #155724; font-size: 18px; font-weight: 600; font-family: monospace;">
-                          ${email}
-                        </p>
-                      </div>
-
-                      <p style="margin: 30px 0 20px; color: #666666; font-size: 14px; line-height: 1.6;">
-                        If you did not request this revert, please contact our support team immediately.
-                      </p>
-                    </td>
-                  </tr>
-
-                  <!-- Footer -->
-                  <tr>
-                    <td style="padding: 30px 40px; border-top: 1px solid #e0e0e0; text-align: center;">
-                      <p style="margin: 0; color: #999999; font-size: 12px; line-height: 1.5;">
-                        Vritti AI Cloud - Cloud Management Platform
-                      </p>
-                      <p style="margin: 8px 0 0; color: #999999; font-size: 12px; line-height: 1.5;">
-                        This is an automated message, please do not reply.
-                      </p>
-                    </td>
-                  </tr>
-                </table>
-              </td>
-            </tr>
-          </table>
-        </body>
-      </html>
-    `;
-    const textContent = `
-Hello ${name},
-
-Your recent email address change has been successfully reverted. Your email is now:
-
-${email}
-
-If you did not request this revert, please contact our support team immediately.
-
----
-Vritti AI Cloud - Cloud Management Platform
-This is an automated message, please do not reply.
-    `.trim();
-    await this.sendEmail({
-      to: [
-        {
-          email,
-          name
-        }
-      ],
-      subject,
-      htmlContent,
-      textContent
-    });
-    this.logger.log(`Email revert confirmation sent to ${email}`);
-  }
-  // Verifies Brevo API connectivity — a 400 response means the API is reachable
-  async verifyConnection() {
-    try {
-      await this.brevoClient.transactionalEmails.sendTransacEmail({
-        sender: {
-          email: this.senderEmail,
-          name: this.senderName
-        },
-        to: [
-          {
-            email: this.senderEmail
-          }
-        ],
-        subject: "Connection Test",
-        htmlContent: "<p>Test</p>"
-      });
-      return true;
-    } catch (err) {
-      if (err instanceof BrevoError && err.statusCode === 400) {
-        return true;
-      }
-      this.logger.error("Brevo connection verification failed:", err);
-      return false;
-    }
-  }
-  // Sends a transactional email via Brevo — retries handled internally by BrevoClient
-  async sendEmail(emailData) {
-    try {
-      const result = await this.brevoClient.transactionalEmails.sendTransacEmail({
-        sender: {
-          email: this.senderEmail,
-          name: this.senderName
-        },
-        to: emailData.to,
-        subject: emailData.subject,
-        htmlContent: emailData.htmlContent,
-        textContent: emailData.textContent
-      });
-      this.logger.debug(`Email sent successfully. Message ID: ${result.messageId}`);
-    } catch (err) {
-      if (err instanceof BrevoTimeoutError) {
-        this.logger.error("Brevo request timed out after retries.");
-        throw new Error("Email sending failed: timeout");
-      }
-      if (err instanceof BrevoError) {
-        if (err.statusCode === 429) {
-          this.logger.error("Brevo rate limit exceeded after retries.");
-          throw new Error("Email sending failed: rate limit exceeded");
-        }
-        if (err.statusCode === 401) {
-          this.logger.error("Brevo authentication failed. Check your API key.");
-          throw new Error("Email service authentication failed");
-        }
-        if (err.statusCode === 400) {
-          this.logger.error("Bad request to Brevo API:", err.message);
-          throw new Error(`Invalid email parameters: ${err.message}`);
-        }
-        this.logger.error(`Brevo API error ${err.statusCode}:`, err.message);
-        throw new Error(`Email sending failed: ${err.message}`);
-      }
-      throw err;
-    }
-  }
-};
-EmailService = _ts_decorate11([
-  Injectable7(),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof ConfigService4 === "undefined" ? Object : ConfigService4
-  ])
-], EmailService);
-
-// src/email/email.module.ts
-function _ts_decorate12(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate12, "_ts_decorate");
-var EmailModule = class {
-  static {
-    __name(this, "EmailModule");
-  }
-};
-EmailModule = _ts_decorate12([
-  Global4(),
-  Module4({
-    imports: [
-      ConfigModule2
-    ],
-    providers: [
-      EmailService
-    ],
-    exports: [
-      EmailService
-    ]
-  })
-], EmailModule);
-
-// src/exceptions/bad-gateway.exception.ts
-import { HttpStatus } from "@nestjs/common";
-
-// src/exceptions/base-field.exception.ts
-import { HttpException } from "@nestjs/common";
-var HttpProblemException = class extends HttpException {
-  static {
-    __name(this, "HttpProblemException");
-  }
-  constructor(detailOrOptions, httpStatus) {
-    const options = typeof detailOrOptions === "string" ? {
-      detail: detailOrOptions
-    } : detailOrOptions;
-    super({
-      type: options.type ?? "about:blank",
-      label: options.label,
-      detail: options.detail,
-      errors: options.errors ?? []
-    }, httpStatus);
-  }
-};
-
-// src/exceptions/bad-gateway.exception.ts
-var BadGatewayException = class extends HttpProblemException {
-  static {
-    __name(this, "BadGatewayException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Bad Gateway", HttpStatus.BAD_GATEWAY);
-  }
-};
-
-// src/exceptions/bad-request.exception.ts
-import { HttpStatus as HttpStatus2 } from "@nestjs/common";
-var BadRequestException = class extends HttpProblemException {
-  static {
-    __name(this, "BadRequestException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Bad Request", HttpStatus2.BAD_REQUEST);
-  }
-};
-
-// src/exceptions/conflict.exception.ts
-import { HttpStatus as HttpStatus3 } from "@nestjs/common";
-var ConflictException = class extends HttpProblemException {
-  static {
-    __name(this, "ConflictException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Conflict", HttpStatus3.CONFLICT);
-  }
-};
-
-// src/exceptions/forbidden.exception.ts
-import { HttpStatus as HttpStatus4 } from "@nestjs/common";
-var ForbiddenException2 = class extends HttpProblemException {
-  static {
-    __name(this, "ForbiddenException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Forbidden", HttpStatus4.FORBIDDEN);
-  }
-};
-
-// src/exceptions/gone.exception.ts
-import { HttpStatus as HttpStatus5 } from "@nestjs/common";
-var GoneException = class extends HttpProblemException {
-  static {
-    __name(this, "GoneException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Gone", HttpStatus5.GONE);
-  }
-};
-
-// src/exceptions/internal-server-error.exception.ts
-import { HttpStatus as HttpStatus6 } from "@nestjs/common";
-var InternalServerErrorException3 = class extends HttpProblemException {
-  static {
-    __name(this, "InternalServerErrorException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Internal Server Error", HttpStatus6.INTERNAL_SERVER_ERROR);
-  }
-};
-
-// src/exceptions/method-not-allowed.exception.ts
-import { HttpStatus as HttpStatus7 } from "@nestjs/common";
-var MethodNotAllowedException = class extends HttpProblemException {
-  static {
-    __name(this, "MethodNotAllowedException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Method Not Allowed", HttpStatus7.METHOD_NOT_ALLOWED);
-  }
-};
-
-// src/exceptions/not-acceptable.exception.ts
-import { HttpStatus as HttpStatus8 } from "@nestjs/common";
-var NotAcceptableException = class extends HttpProblemException {
-  static {
-    __name(this, "NotAcceptableException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Not Acceptable", HttpStatus8.NOT_ACCEPTABLE);
-  }
-};
-
-// src/exceptions/not-found.exception.ts
-import { HttpStatus as HttpStatus9 } from "@nestjs/common";
-var NotFoundException = class extends HttpProblemException {
-  static {
-    __name(this, "NotFoundException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Not Found", HttpStatus9.NOT_FOUND);
-  }
-};
-
-// src/exceptions/not-implemented.exception.ts
-import { HttpStatus as HttpStatus10 } from "@nestjs/common";
-var NotImplementedException = class extends HttpProblemException {
-  static {
-    __name(this, "NotImplementedException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Not Implemented", HttpStatus10.NOT_IMPLEMENTED);
-  }
-};
+                        Your recent email address change has been successfully reverted. Your email is now:
+                      </p>
 
-// src/exceptions/payload-too-large.exception.ts
-import { HttpStatus as HttpStatus11 } from "@nestjs/common";
-var PayloadTooLargeException = class extends HttpProblemException {
-  static {
-    __name(this, "PayloadTooLargeException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Payload Too Large", HttpStatus11.PAYLOAD_TOO_LARGE);
-  }
-};
+                      <div style="background-color: #d4edda; padding: 20px; border-radius: 8px; margin: 30px 0; text-align: center;">
+                        <p style="margin: 0; color: #155724; font-size: 18px; font-weight: 600; font-family: monospace;">
+                          ${email}
+                        </p>
+                      </div>
 
-// src/exceptions/request-timeout.exception.ts
-import { HttpStatus as HttpStatus12 } from "@nestjs/common";
-var RequestTimeoutException = class extends HttpProblemException {
-  static {
-    __name(this, "RequestTimeoutException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Request Timeout", HttpStatus12.REQUEST_TIMEOUT);
-  }
-};
+                      <p style="margin: 30px 0 20px; color: #666666; font-size: 14px; line-height: 1.6;">
+                        If you did not request this revert, please contact our support team immediately.
+                      </p>
+                    </td>
+                  </tr>
 
-// src/exceptions/service-unavailable.exception.ts
-import { HttpStatus as HttpStatus13 } from "@nestjs/common";
-var ServiceUnavailableException = class extends HttpProblemException {
-  static {
-    __name(this, "ServiceUnavailableException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Service Unavailable", HttpStatus13.SERVICE_UNAVAILABLE);
-  }
-};
+                  <!-- Footer -->
+                  <tr>
+                    <td style="padding: 30px 40px; border-top: 1px solid #e0e0e0; text-align: center;">
+                      <p style="margin: 0; color: #999999; font-size: 12px; line-height: 1.5;">
+                        Vritti AI Cloud - Cloud Management Platform
+                      </p>
+                      <p style="margin: 8px 0 0; color: #999999; font-size: 12px; line-height: 1.5;">
+                        This is an automated message, please do not reply.
+                      </p>
+                    </td>
+                  </tr>
+                </table>
+              </td>
+            </tr>
+          </table>
+        </body>
+      </html>
+    `;
+    const textContent = `
+Hello ${name},
 
-// src/exceptions/too-many-requests.exception.ts
-import { HttpStatus as HttpStatus14 } from "@nestjs/common";
-var TooManyRequestsException = class extends HttpProblemException {
-  static {
-    __name(this, "TooManyRequestsException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Too Many Requests", HttpStatus14.TOO_MANY_REQUESTS);
-  }
-};
+Your recent email address change has been successfully reverted. Your email is now:
 
-// src/exceptions/unauthorized.exception.ts
-import { HttpStatus as HttpStatus15 } from "@nestjs/common";
-var UnauthorizedException3 = class extends HttpProblemException {
-  static {
-    __name(this, "UnauthorizedException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Unauthorized", HttpStatus15.UNAUTHORIZED);
-  }
-};
+${email}
 
-// src/exceptions/unprocessable-entity.exception.ts
-import { HttpStatus as HttpStatus16 } from "@nestjs/common";
-var UnprocessableEntityException = class extends HttpProblemException {
-  static {
-    __name(this, "UnprocessableEntityException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Unprocessable Entity", HttpStatus16.UNPROCESSABLE_ENTITY);
-  }
-};
+If you did not request this revert, please contact our support team immediately.
 
-// src/exceptions/unsupported-media-type.exception.ts
-import { HttpStatus as HttpStatus17 } from "@nestjs/common";
-var UnsupportedMediaTypeException = class extends HttpProblemException {
-  static {
-    __name(this, "UnsupportedMediaTypeException");
+---
+Vritti AI Cloud - Cloud Management Platform
+This is an automated message, please do not reply.
+    `.trim();
+    await this.sendEmail({
+      to: [
+        {
+          email,
+          name
+        }
+      ],
+      subject,
+      htmlContent,
+      textContent
+    });
+    this.logger.log(`Email revert confirmation sent to ${email}`);
   }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Unsupported Media Type", HttpStatus17.UNSUPPORTED_MEDIA_TYPE);
+  // Verifies Brevo API connectivity — a 400 response means the API is reachable
+  async verifyConnection() {
+    try {
+      await this.brevoClient.transactionalEmails.sendTransacEmail({
+        sender: {
+          email: this.senderEmail,
+          name: this.senderName
+        },
+        to: [
+          {
+            email: this.senderEmail
+          }
+        ],
+        subject: "Connection Test",
+        htmlContent: "<p>Test</p>"
+      });
+      return true;
+    } catch (err) {
+      if (err instanceof BrevoError && err.statusCode === 400) {
+        return true;
+      }
+      this.logger.error("Brevo connection verification failed:", err);
+      return false;
+    }
+  }
+  // Sends a transactional email via Brevo — retries handled internally by BrevoClient
+  async sendEmail(emailData) {
+    try {
+      const result = await this.brevoClient.transactionalEmails.sendTransacEmail({
+        sender: {
+          email: this.senderEmail,
+          name: this.senderName
+        },
+        to: emailData.to,
+        subject: emailData.subject,
+        htmlContent: emailData.htmlContent,
+        textContent: emailData.textContent
+      });
+      this.logger.debug(`Email sent successfully. Message ID: ${result.messageId}`);
+    } catch (err) {
+      if (err instanceof BrevoTimeoutError) {
+        this.logger.error("Brevo request timed out after retries.");
+        throw new Error("Email sending failed: timeout");
+      }
+      if (err instanceof BrevoError) {
+        if (err.statusCode === 429) {
+          this.logger.error("Brevo rate limit exceeded after retries.");
+          throw new Error("Email sending failed: rate limit exceeded");
+        }
+        if (err.statusCode === 401) {
+          this.logger.error("Brevo authentication failed. Check your API key.");
+          throw new Error("Email service authentication failed");
+        }
+        if (err.statusCode === 400) {
+          this.logger.error("Bad request to Brevo API:", err.message);
+          throw new Error(`Invalid email parameters: ${err.message}`);
+        }
+        this.logger.error(`Brevo API error ${err.statusCode}:`, err.message);
+        throw new Error(`Email sending failed: ${err.message}`);
+      }
+      throw err;
+    }
   }
 };
+EmailService = _ts_decorate16([
+  Injectable9(),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof ConfigService5 === "undefined" ? Object : ConfigService5
+  ])
+], EmailService);
 
-// src/exceptions/validation.exception.ts
-import { HttpStatus as HttpStatus18 } from "@nestjs/common";
-var ValidationException = class extends HttpProblemException {
+// src/email/email.module.ts
+function _ts_decorate17(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate17, "_ts_decorate");
+var EmailModule = class {
   static {
-    __name(this, "ValidationException");
-  }
-  constructor(detailOrOptions) {
-    super(detailOrOptions ?? "Validation Failed", HttpStatus18.BAD_REQUEST);
+    __name(this, "EmailModule");
   }
 };
+EmailModule = _ts_decorate17([
+  Global4(),
+  Module5({
+    imports: [
+      ConfigModule3
+    ],
+    providers: [
+      EmailService
+    ],
+    exports: [
+      EmailService
+    ]
+  })
+], EmailModule);
 
 // src/filters/http-exception.filter.ts
-import { Catch, HttpException as HttpException2, HttpStatus as HttpStatus19, Logger as Logger9 } from "@nestjs/common";
-function _ts_decorate13(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+import { Catch, HttpException as HttpException2, HttpStatus as HttpStatus19, Logger as Logger11 } from "@nestjs/common";
+function _ts_decorate18(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate18, "_ts_decorate");
 function getHttpStatusTitle(status) {
   const enumKey = Object.entries(HttpStatus19).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
   if (!enumKey) {
@@ -2508,7 +2986,7 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
   static {
     __name(this, "HttpExceptionFilter");
   }
-  logger = new Logger9(_HttpExceptionFilter.name);
+  logger = new Logger11(_HttpExceptionFilter.name);
   catch(exception, host) {
     const ctx = host.switchToHttp();
     const response = ctx.getResponse();
@@ -2548,10 +3026,14 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
       } else if (typeof exceptionResponse === "string") {
         detail = exceptionResponse;
       }
+    } else if (this.isAxiosError(exception)) {
+      const axiosStatus = exception.response?.status;
+      const axiosDetail = exception.response?.data?.message || exception.response?.data?.detail || exception.message;
+      const url = exception.config?.url;
+      status = HttpStatus19.BAD_GATEWAY;
+      detail = `Upstream service error${axiosStatus ? ` (${axiosStatus})` : ""}: ${axiosDetail}`;
+      this.logger.error(`Upstream API error [${axiosStatus}]: ${axiosDetail} \u2014 URL: ${url}`, exception.stack);
     } else {
-      const errorMessage = exception instanceof Error ? exception.message : "Unknown error";
-      const stack = exception instanceof Error ? exception.stack : void 0;
-      this.logger.error(`Unexpected error: ${errorMessage}`, stack);
       detail = "An unexpected error occurred";
     }
     const problemDetails = {
@@ -2567,17 +3049,21 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
     };
     response.header("Content-Type", "application/problem+json").status(status).send(problemDetails);
   }
+  // Duck-type check for AxiosError without importing axios
+  isAxiosError(error) {
+    return error instanceof Error && error.isAxiosError === true;
+  }
 };
-HttpExceptionFilter = _ts_decorate13([
+HttpExceptionFilter = _ts_decorate18([
   Catch()
 ], HttpExceptionFilter);
 
 // src/logger/interceptors/http-logger.interceptor.ts
-import { Injectable as Injectable9, Optional as Optional2 } from "@nestjs/common";
+import { Injectable as Injectable11, Optional as Optional2 } from "@nestjs/common";
 import { catchError, tap } from "rxjs/operators";
 
 // src/logger/services/logger.service.ts
-import { Injectable as Injectable8, Optional } from "@nestjs/common";
+import { Injectable as Injectable10, Optional } from "@nestjs/common";
 import { createLogger, format, transports } from "winston";
 import DailyRotateFile from "winston-daily-rotate-file";
 
@@ -2615,23 +3101,23 @@ function addCorrelationIdToResponse(reply, correlationId, headerName = DEFAULT_C
 __name(addCorrelationIdToResponse, "addCorrelationIdToResponse");
 
 // src/logger/services/logger.service.ts
-function _ts_decorate14(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate19(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var LoggerService = class _LoggerService {
   static {
     __name(this, "LoggerService");
@@ -2823,35 +3309,35 @@ ${trace}`;
     return childLogger;
   }
 };
-LoggerService = _ts_decorate14([
-  Injectable8(),
-  _ts_param4(0, Optional()),
-  _ts_param4(1, Optional()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+LoggerService = _ts_decorate19([
+  Injectable10(),
+  _ts_param5(0, Optional()),
+  _ts_param5(1, Optional()),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
     typeof Logger === "undefined" ? Object : Logger
   ])
 ], LoggerService);
 
 // src/logger/interceptors/http-logger.interceptor.ts
-function _ts_decorate15(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate20(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate20, "_ts_decorate");
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var HttpLoggerInterceptor = class {
   static {
     __name(this, "HttpLoggerInterceptor");
@@ -2954,32 +3440,32 @@ var HttpLoggerInterceptor = class {
     }
   }
 };
-HttpLoggerInterceptor = _ts_decorate15([
-  Injectable9(),
-  _ts_param5(1, Optional2()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+HttpLoggerInterceptor = _ts_decorate20([
+  Injectable11(),
+  _ts_param6(1, Optional2()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof LoggerService === "undefined" ? Object : LoggerService,
     typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
   ])
 ], HttpLoggerInterceptor);
 
 // src/logger/logger.module.ts
-import { Global as Global5, Logger as Logger10, Module as Module5 } from "@nestjs/common";
+import { Global as Global5, Logger as Logger12, Module as Module6 } from "@nestjs/common";
 
 // src/logger/middleware/correlation-id.middleware.ts
-import { Injectable as Injectable10 } from "@nestjs/common";
-function _ts_decorate16(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+import { Injectable as Injectable12 } from "@nestjs/common";
+function _ts_decorate21(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate21, "_ts_decorate");
+function _ts_metadata14(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
+__name(_ts_metadata14, "_ts_metadata");
 var CorrelationIdMiddleware = class {
   static {
     __name(this, "CorrelationIdMiddleware");
@@ -3016,22 +3502,22 @@ var CorrelationIdMiddleware = class {
     }
   }
 };
-CorrelationIdMiddleware = _ts_decorate16([
-  Injectable10(),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+CorrelationIdMiddleware = _ts_decorate21([
+  Injectable12(),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
   ])
 ], CorrelationIdMiddleware);
 
 // src/logger/logger.module.ts
-function _ts_decorate17(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate22(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
+__name(_ts_decorate22, "_ts_decorate");
 var LOGGER_MODULE_OPTIONS = Symbol("LOGGER_MODULE_OPTIONS");
 var DEFAULT_LOGGER_OPTIONS = {
   provider: "winston",
@@ -3108,9 +3594,9 @@ function mergeWithDefaults(options = {}) {
 __name(mergeWithDefaults, "mergeWithDefaults");
 function createDefaultLoggerProvider(options) {
   return {
-    provide: Logger10,
+    provide: Logger12,
     useFactory: /* @__PURE__ */ __name(() => {
-      const logger = new Logger10();
+      const logger = new Logger12();
       if (options.level) {
         const levels = getLevelsUpTo(options.level);
         logger.setLogLevels?.(levels);
@@ -3140,7 +3626,7 @@ function createLoggerProviders(options = {}) {
     inject: [
       LOGGER_MODULE_OPTIONS,
       {
-        token: Logger10,
+        token: Logger12,
         optional: true
       }
     ]
@@ -3219,10 +3705,10 @@ var LoggerModule = class _LoggerModule {
         ...asyncProviders,
         // Default logger provider
         {
-          provide: Logger10,
+          provide: Logger12,
           useFactory: /* @__PURE__ */ __name((opts) => {
             if (opts.provider === "default") {
-              const logger = new Logger10();
+              const logger = new Logger12();
               if (opts.level) {
                 const levels = getLevelsUpTo(opts.level);
                 logger.setLogLevels?.(levels);
@@ -3244,7 +3730,7 @@ var LoggerModule = class _LoggerModule {
           inject: [
             LOGGER_MODULE_OPTIONS,
             {
-              token: Logger10,
+              token: Logger12,
               optional: true
             }
           ]
@@ -3343,13 +3829,13 @@ var LoggerModule = class _LoggerModule {
     throw new Error("LoggerModule.forRootAsync() requires one of: useFactory, useClass, or useExisting");
   }
 };
-LoggerModule = _ts_decorate17([
+LoggerModule = _ts_decorate22([
   Global5(),
-  Module5({})
+  Module6({})
 ], LoggerModule);
 
 // src/root/root.module.ts
-import { Module as Module6 } from "@nestjs/common";
+import { Module as Module7 } from "@nestjs/common";
 
 // src/root/controllers/app.controller.ts
 import { Controller, Get } from "@nestjs/common";
@@ -3370,14 +3856,14 @@ function ApiHealthCheck() {
 __name(ApiHealthCheck, "ApiHealthCheck");
 
 // src/root/services/app.service.ts
-import { Injectable as Injectable11 } from "@nestjs/common";
-function _ts_decorate18(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+import { Injectable as Injectable13 } from "@nestjs/common";
+function _ts_decorate23(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate18, "_ts_decorate");
+__name(_ts_decorate23, "_ts_decorate");
 var AppService = class {
   static {
     __name(this, "AppService");
@@ -3387,22 +3873,22 @@ var AppService = class {
     return `Hello World!`;
   }
 };
-AppService = _ts_decorate18([
-  Injectable11()
+AppService = _ts_decorate23([
+  Injectable13()
 ], AppService);
 
 // src/root/controllers/app.controller.ts
-function _ts_decorate19(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate24(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate19, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate24, "_ts_decorate");
+function _ts_metadata15(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
+__name(_ts_metadata15, "_ts_metadata");
 var AppController = class {
   static {
     __name(this, "AppController");
@@ -3416,19 +3902,19 @@ var AppController = class {
     return this.appService.getHello();
   }
 };
-_ts_decorate19([
+_ts_decorate24([
   Get(),
   Public(),
   ApiHealthCheck(),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", []),
-  _ts_metadata11("design:returntype", String)
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", []),
+  _ts_metadata15("design:returntype", String)
 ], AppController.prototype, "getHello", null);
-AppController = _ts_decorate19([
+AppController = _ts_decorate24([
   ApiTags("Health"),
   Controller(),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof AppService === "undefined" ? Object : AppService
   ])
 ], AppController);
@@ -3465,23 +3951,23 @@ function ApiGetCsrfToken() {
 __name(ApiGetCsrfToken, "ApiGetCsrfToken");
 
 // src/root/controllers/csrf.controller.ts
-function _ts_decorate20(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate25(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate20, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate25, "_ts_decorate");
+function _ts_metadata16(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var CsrfController = class {
   static {
     __name(this, "CsrfController");
@@ -3494,40 +3980,40 @@ var CsrfController = class {
     };
   }
 };
-_ts_decorate20([
+_ts_decorate25([
   Get2("token"),
   Public(),
   HttpCode(HttpStatus20.OK),
   ApiGetCsrfToken(),
-  _ts_param6(0, Res({
+  _ts_param7(0, Res({
     passthrough: true
   })),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof FastifyReply === "undefined" ? Object : FastifyReply
   ]),
-  _ts_metadata12("design:returntype", Object)
+  _ts_metadata16("design:returntype", Object)
 ], CsrfController.prototype, "getToken", null);
-CsrfController = _ts_decorate20([
+CsrfController = _ts_decorate25([
   ApiTags2("CSRF"),
   Controller2("csrf")
 ], CsrfController);
 
 // src/root/root.module.ts
-function _ts_decorate21(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+function _ts_decorate26(decorators, target, key, desc2) {
+  var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate21, "_ts_decorate");
+__name(_ts_decorate26, "_ts_decorate");
 var RootModule = class {
   static {
     __name(this, "RootModule");
   }
 };
-RootModule = _ts_decorate21([
-  Module6({
+RootModule = _ts_decorate26([
+  Module7({
     controllers: [
       AppController,
       CsrfController
@@ -3752,18 +4238,23 @@ export {
   AuthConfigModule,
   BadGatewayException,
   BadRequestException,
+  CACHE_PROVIDER,
+  CacheModule,
+  CacheService,
   ConflictException,
+  CookieDomain,
   CorrelationIdMiddleware,
   DEFAULT_CORRELATION_HEADER,
   DatabaseModule,
   EmailModule,
   EmailService,
-  ForbiddenException2 as ForbiddenException,
+  FilterProcessor,
+  ForbiddenException,
   GoneException,
   HttpExceptionFilter,
   HttpLoggerInterceptor,
   HttpProblemException,
-  InternalServerErrorException3 as InternalServerErrorException,
+  InternalServerErrorException,
   JwtAuthService,
   LOGGER_MODULE_OPTIONS,
   LoggerModule,
@@ -3778,6 +4269,8 @@ export {
   PrimaryDatabaseService,
   Public,
   RESET_KEY,
+  RedisCacheProvider,
+  RefreshCookieOptions,
   RefreshTokenCookie,
   RequestTimeoutException,
   Reset,
@@ -3787,13 +4280,15 @@ export {
   ServiceUnavailableException,
   SessionData,
   SkipCsrf,
+  SuccessResponseDto,
+  TableResponseDto,
   Tenant,
   TenantBaseRepository,
   TenantContextService,
   TenantDatabaseService,
   TokenType,
   TooManyRequestsException,
-  UnauthorizedException3 as UnauthorizedException,
+  UnauthorizedException,
   UnprocessableEntityException,
   UnsupportedMediaTypeException,
   UserId,
@@ -3810,6 +4305,7 @@ export {
   getHttpStatusTitle,
   getJwtExpiry,
   getRefreshCookieOptions,
+  getRefreshCookieOptionsForHost,
   getTokenExpiry,
   hashToken,
   jwtConfigFactory,