@vritti/api-sdk 0.2.4 → 0.2.5

package/dist/index.cjs

@@ -43,6 +43,7 @@ __export(index_exports, {
   CookieDomain: () => CookieDomain,
   CorrelationIdMiddleware: () => CorrelationIdMiddleware,
   CreateDataTableViewDto: () => CreateDataTableViewDto,
+  CreateResponseDto: () => CreateResponseDto,
   DATA_TABLE_VIEWS_TABLE: () => DATA_TABLE_VIEWS_TABLE,
   DEFAULT_CORRELATION_HEADER: () => DEFAULT_CORRELATION_HEADER,
   DataTableModule: () => DataTableModule,
@@ -58,6 +59,8 @@ __export(index_exports, {
   HttpExceptionFilter: () => HttpExceptionFilter,
   HttpLoggerInterceptor: () => HttpLoggerInterceptor,
   HttpProblemException: () => HttpProblemException,
+  ImportResponseDto: () => ImportResponseDto,
+  ImportSummaryDto: () => ImportSummaryDto,
   InternalServerErrorException: () => InternalServerErrorException,
   JwtAuthService: () => JwtAuthService,
   LOGGER_MODULE_OPTIONS: () => LOGGER_MODULE_OPTIONS,
@@ -67,30 +70,26 @@ __export(index_exports, {
   NotAcceptableException: () => NotAcceptableException,
   NotFoundException: () => NotFoundException,
   NotImplementedException: () => NotImplementedException,
-  Onboarding: () => Onboarding,
   PayloadTooLargeException: () => PayloadTooLargeException,
   PrimaryBaseRepository: () => PrimaryBaseRepository,
   PrimaryDatabaseService: () => PrimaryDatabaseService,
   Public: () => Public,
-  RESET_KEY: () => RESET_KEY,
+  REQUIRE_SESSION_KEY: () => REQUIRE_SESSION_KEY,
   RedisCacheProvider: () => RedisCacheProvider,
   RefreshCookieOptions: () => RefreshCookieOptions,
   RefreshTokenCookie: () => RefreshTokenCookie,
   RenameDataTableViewDto: () => RenameDataTableViewDto,
   RequestTimeoutException: () => RequestTimeoutException,
-  Reset: () => Reset,
+  RequireSession: () => RequireSession,
   RootModule: () => RootModule,
   SKIP_CSRF_KEY: () => SKIP_CSRF_KEY,
   SelectOptionsQueryDto: () => SelectOptionsQueryDto,
   ServiceUnavailableException: () => ServiceUnavailableException,
   SessionData: () => SessionData,
   SkipCsrf: () => SkipCsrf,
+  Subdomain: () => Subdomain,
   SuccessResponseDto: () => SuccessResponseDto,
   TableResponseDto: () => TableResponseDto,
-  Tenant: () => Tenant,
-  TenantBaseRepository: () => TenantBaseRepository,
-  TenantContextService: () => TenantContextService,
-  TenantDatabaseService: () => TenantDatabaseService,
   ToggleShareDataTableViewDto: () => ToggleShareDataTableViewDto,
   TokenType: () => TokenType,
   TooManyRequestsException: () => TooManyRequestsException,
@@ -98,8 +97,10 @@ __export(index_exports, {
   UnprocessableEntityException: () => UnprocessableEntityException,
   UnsupportedMediaTypeException: () => UnsupportedMediaTypeException,
   UpdateDataTableViewDto: () => UpdateDataTableViewDto,
+  UploadedFile: () => UploadedFile,
   UpsertDataTableStateDto: () => UpsertDataTableStateDto,
   UserId: () => UserId,
+  ValidatedRowDto: () => ValidatedRowDto,
   ValidationException: () => ValidationException,
   VrittiAuthGuard: () => VrittiAuthGuard,
   addCorrelationIdToResponse: () => addCorrelationIdToResponse,
@@ -130,7 +131,7 @@ module.exports = __toCommonJS(index_exports);
 
 // src/auth/auth-config.module.ts
 var import_common26 = require("@nestjs/common");
-var import_config4 = require("@nestjs/config");
+var import_config5 = require("@nestjs/config");
 var import_core3 = require("@nestjs/core");
 var import_jwt4 = require("@nestjs/jwt");
 
@@ -378,7 +379,10 @@ var defaultConfig = {
   guard: {
     tenantHeaderName: "x-tenant-id",
     authHeaderName: "authorization",
-    tokenPrefix: "Bearer"
+    tokenPrefix: "Bearer",
+    defaultSessionTypes: [
+      "CLOUD"
+    ]
   }
 };
 var currentConfig = {
@@ -566,10 +570,10 @@ var import_config2 = require("@nestjs/config");
 var import_core2 = require("@nestjs/core");
 var import_jwt = require("@nestjs/jwt");
 
-// src/auth/decorators/reset.decorator.ts
+// src/auth/decorators/require-session.decorator.ts
 var import_common22 = require("@nestjs/common");
-var RESET_KEY = "isReset";
-var Reset = /* @__PURE__ */ __name(() => (0, import_common22.SetMetadata)(RESET_KEY, true), "Reset");
+var REQUIRE_SESSION_KEY = "requiredSessionTypes";
+var RequireSession = /* @__PURE__ */ __name((...types) => (0, import_common22.SetMetadata)(REQUIRE_SESSION_KEY, types), "RequireSession");
 
 // src/auth/decorators/skip-csrf.decorator.ts
 var import_common23 = require("@nestjs/common");
@@ -633,17 +637,13 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     if (isPublic) {
       return true;
     }
-    const isOnboarding = this.reflector.getAllAndOverride("isOnboarding", [
-      context.getHandler(),
-      context.getClass()
-    ]);
-    const isReset = this.reflector.getAllAndOverride(RESET_KEY, [
+    const requiredSessionTypes = this.reflector.getAllAndOverride(REQUIRE_SESSION_KEY, [
       context.getHandler(),
       context.getClass()
     ]);
     const isSseEndpoint = this.reflector.get(import_constants.SSE_METADATA, context.getHandler());
     if (isSseEndpoint) {
-      return this.handleSseAuth(request, isOnboarding);
+      return this.handleSseAuth(request, requiredSessionTypes);
     }
     try {
       const accessToken = this.requestService.getAccessToken();
@@ -655,14 +655,10 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
         throw new import_common24.UnauthorizedException("Invalid token type");
       }
       this.validateRefreshTokenBinding(decodedAccessToken);
-      if (isOnboarding && decodedAccessToken.sessionType !== "ONBOARDING") {
-        throw new import_common24.UnauthorizedException("This endpoint requires an onboarding session");
-      }
-      if (isReset && decodedAccessToken.sessionType !== "RESET") {
-        throw new import_common24.UnauthorizedException("This endpoint requires a reset session");
-      }
-      if (!isOnboarding && !isReset && (decodedAccessToken.sessionType === "ONBOARDING" || decodedAccessToken.sessionType === "RESET")) {
-        throw new import_common24.UnauthorizedException(`${decodedAccessToken.sessionType} sessions cannot access this endpoint`);
+      const sessionType = decodedAccessToken.sessionType;
+      const allowed = requiredSessionTypes ?? getConfig().guard.defaultSessionTypes;
+      if (!allowed.includes(sessionType)) {
+        throw new import_common24.UnauthorizedException(`${sessionType} sessions cannot access this endpoint`);
       }
       request.sessionInfo = {
         userId: decodedAccessToken.userId,
@@ -711,7 +707,7 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     }
   }
   // Authenticates SSE connections using the refresh token httpOnly cookie
-  handleSseAuth(request, isOnboarding) {
+  handleSseAuth(request, requiredSessionTypes) {
     const refreshToken = this.requestService.getRefreshToken();
     if (!refreshToken) {
       throw new import_common24.UnauthorizedException("Authentication required");
@@ -725,8 +721,9 @@ var VrittiAuthGuard = class _VrittiAuthGuard {
     if (decoded.tokenType !== "refresh") {
       throw new import_common24.UnauthorizedException("Invalid token type");
     }
-    if (isOnboarding && decoded.sessionType !== "ONBOARDING") {
-      throw new import_common24.UnauthorizedException("This endpoint requires an onboarding session");
+    const allowed = requiredSessionTypes ?? getConfig().guard.defaultSessionTypes;
+    if (!allowed.includes(decoded.sessionType)) {
+      throw new import_common24.UnauthorizedException(`${decoded.sessionType} sessions cannot access this endpoint`);
     }
     request.sessionInfo = {
       userId: decoded.userId,
@@ -790,7 +787,7 @@ VrittiAuthGuard = _ts_decorate3([
 
 // src/auth/services/jwt-auth.service.ts
 var import_common25 = require("@nestjs/common");
-var import_config3 = require("@nestjs/config");
+var import_config4 = require("@nestjs/config");
 var import_jwt2 = require("@nestjs/jwt");
 
 // src/utils/time.utils.ts
@@ -906,7 +903,7 @@ JwtAuthService = _ts_decorate4([
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     typeof import_jwt2.JwtService === "undefined" ? Object : import_jwt2.JwtService,
-    typeof import_config3.ConfigService === "undefined" ? Object : import_config3.ConfigService
+    typeof import_config4.ConfigService === "undefined" ? Object : import_config4.ConfigService
   ])
 ], JwtAuthService);
 
@@ -927,14 +924,14 @@ var AuthConfigModule = class _AuthConfigModule {
     return {
       module: _AuthConfigModule,
       imports: [
-        import_config4.ConfigModule,
+        import_config5.ConfigModule,
         RequestModule,
         import_jwt4.JwtModule.registerAsync({
           imports: [
-            import_config4.ConfigModule
+            import_config5.ConfigModule
           ],
           inject: [
-            import_config4.ConfigService
+            import_config5.ConfigService
           ],
           useFactory: /* @__PURE__ */ __name((config) => ({
             secret: config.get("JWT_SECRET"),
@@ -988,17 +985,13 @@ var CookieDomain = (0, import_common28.createParamDecorator)((_data, ctx) => {
   return domain.endsWith(`.${baseDomain}`) ? domain : baseDomain;
 });
 
-// src/auth/decorators/onboarding.decorator.ts
-var import_common29 = require("@nestjs/common");
-var Onboarding = /* @__PURE__ */ __name(() => (0, import_common29.SetMetadata)("isOnboarding", true), "Onboarding");
-
 // src/auth/decorators/public.decorator.ts
-var import_common30 = require("@nestjs/common");
-var Public = /* @__PURE__ */ __name(() => (0, import_common30.SetMetadata)("isPublic", true), "Public");
+var import_common29 = require("@nestjs/common");
+var Public = /* @__PURE__ */ __name(() => (0, import_common29.SetMetadata)("isPublic", true), "Public");
 
 // src/auth/decorators/refresh-cookie-options.decorator.ts
-var import_common31 = require("@nestjs/common");
-var RefreshCookieOptions = (0, import_common31.createParamDecorator)((_data, ctx) => {
+var import_common30 = require("@nestjs/common");
+var RefreshCookieOptions = (0, import_common30.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const forwarded = request.headers["x-forwarded-host"];
   const raw = Array.isArray(forwarded) ? forwarded[0] : forwarded;
@@ -1008,14 +1001,32 @@ var RefreshCookieOptions = (0, import_common31.createParamDecorator)((_data, ctx
 });
 
 // src/auth/decorators/refresh-token-cookie.decorator.ts
-var import_common32 = require("@nestjs/common");
-var RefreshTokenCookie = (0, import_common32.createParamDecorator)((_data, ctx) => {
+var import_common31 = require("@nestjs/common");
+var RefreshTokenCookie = (0, import_common31.createParamDecorator)((_data, ctx) => {
   const request = ctx.switchToHttp().getRequest();
   const cookies = request.cookies ?? {};
   const config = getConfig();
   return cookies[config.cookie.refreshCookieName];
 });
 
+// src/auth/decorators/subdomain.decorator.ts
+var import_common32 = require("@nestjs/common");
+var Subdomain = (0, import_common32.createParamDecorator)((_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const origin = request.headers.origin;
+  if (origin) {
+    try {
+      const url = new URL(origin);
+      return url.hostname.split(".")[0];
+    } catch {
+    }
+  }
+  const forwarded = request.headers["x-forwarded-host"];
+  const host = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  if (host) return host.split(".")[0];
+  return void 0;
+});
+
 // src/auth/decorators/session-data.decorator.ts
 var import_common33 = require("@nestjs/common");
 var SessionData = (0, import_common33.createParamDecorator)((_data, ctx) => {
@@ -1044,7 +1055,7 @@ var UserId = (0, import_common34.createParamDecorator)((_data, ctx) => {
 
 // src/cache/cache.module.ts
 var import_common37 = require("@nestjs/common");
-var import_config9 = require("@nestjs/config");
+var import_config10 = require("@nestjs/config");
 
 // src/cache/cache.service.ts
 var import_common35 = require("@nestjs/common");
@@ -1134,7 +1145,7 @@ CacheService = _ts_decorate6([
 
 // src/cache/providers/redis.provider.ts
 var import_common36 = require("@nestjs/common");
-var import_config8 = require("@nestjs/config");
+var import_config9 = require("@nestjs/config");
 var import_ioredis = __toESM(require("ioredis"), 1);
 function _ts_decorate7(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -1209,7 +1220,7 @@ RedisCacheProvider = _ts_decorate7([
   (0, import_common36.Injectable)(),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
-    typeof import_config8.ConfigService === "undefined" ? Object : import_config8.ConfigService
+    typeof import_config9.ConfigService === "undefined" ? Object : import_config9.ConfigService
   ])
 ], RedisCacheProvider);
 
@@ -1229,7 +1240,7 @@ var CacheModule = class {
 CacheModule = _ts_decorate8([
   (0, import_common37.Module)({
     imports: [
-      import_config9.ConfigModule
+      import_config10.ConfigModule
     ],
     providers: [
       RedisCacheProvider,
@@ -1248,7 +1259,7 @@ CacheModule = _ts_decorate8([
 ], CacheModule);
 
 // src/database/database.module.ts
-var import_common41 = require("@nestjs/common");
+var import_common39 = require("@nestjs/common");
 var import_core4 = require("@nestjs/core");
 
 // src/database/constants.ts
@@ -1256,7 +1267,6 @@ var DATABASE_MODULE_OPTIONS = Symbol("DATABASE_MODULE_OPTIONS");
 
 // src/database/services/primary-database.service.ts
 var import_common38 = require("@nestjs/common");
-var import_drizzle_orm = require("drizzle-orm");
 var import_node_postgres = require("drizzle-orm/node-postgres");
 var import_pg = require("pg");
 function _ts_decorate9(decorators, target, key, desc2) {
@@ -1284,11 +1294,8 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
   logger = new import_common38.Logger(_PrimaryDatabaseService.name);
   pool = null;
   db = null;
-  tenantConfigCache = /* @__PURE__ */ new Map();
-  cacheTTL;
   constructor(options) {
     this.options = options;
-    this.cacheTTL = options.connectionCacheTTL || 3e5;
   }
   async onModuleInit() {
     if (this.options.primaryDb) {
@@ -1309,7 +1316,6 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
         ssl: sslMode === "disable" ? false : {
           rejectUnauthorized: sslMode !== "no-verify"
         },
-        // Pass schema as a PostgreSQL startup option — recognized by node-postgres, unlike the ?schema= URL param
         ...schema && {
           options: `-csearch_path=${schema}`
         }
@@ -1326,84 +1332,10 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
       this.logger.log(`Connected to primary database (schema: ${schema ?? "public"})`);
     } catch (error) {
       this.logger.error("Failed to connect to primary database", error);
-      throw new import_common38.InternalServerErrorException("Failed to initialize tenant registry");
+      throw new import_common38.InternalServerErrorException("Failed to initialize database connection");
     }
   }
-  // Retrieves tenant configuration by ID or subdomain, with in-memory caching
-  async getTenantInfo(tenantIdentifier) {
-    const cached = this.tenantConfigCache.get(tenantIdentifier);
-    if (cached) {
-      this.logger.debug(`Cache hit for tenant: ${tenantIdentifier}`);
-      return cached;
-    }
-    try {
-      if (!this.db) {
-        throw new Error("Primary database client not initialized");
-      }
-      this.logger.debug(`Querying primary database for tenant: ${tenantIdentifier}`);
-      const schema = this.options.drizzleSchema;
-      const { tenants, tenantDatabaseConfigs } = schema;
-      const result = await this.db.select().from(tenants).leftJoin(tenantDatabaseConfigs, (0, import_drizzle_orm.eq)(tenants.id, tenantDatabaseConfigs.tenantId)).where((0, import_drizzle_orm.or)((0, import_drizzle_orm.eq)(tenants.id, tenantIdentifier), (0, import_drizzle_orm.eq)(tenants.subdomain, tenantIdentifier))).limit(1);
-      if (!result.length) {
-        this.logger.warn(`Tenant not found: ${tenantIdentifier}`);
-        return null;
-      }
-      const row = result[0];
-      const tenant = row.tenants;
-      const config = row.tenant_database_configs;
-      if (tenant.status !== "ACTIVE") {
-        this.logger.warn(`Tenant not active: ${tenantIdentifier}`);
-        return null;
-      }
-      const info = {
-        id: tenant.id,
-        subdomain: tenant.subdomain,
-        type: tenant.dbType,
-        status: tenant.status,
-        // For SHARED tenants: schema name
-        schemaName: config?.dbSchema || void 0,
-        // For DEDICATED tenants: database configuration from TenantDatabaseConfig table
-        databaseName: config?.dbName || void 0,
-        databaseHost: config?.dbHost || void 0,
-        databasePort: config?.dbPort || void 0,
-        databaseUsername: config?.dbUsername ? this.decrypt(config.dbUsername) : void 0,
-        databasePassword: config?.dbPassword ? this.decrypt(config.dbPassword) : void 0,
-        databaseSslMode: config?.dbSslMode || void 0,
-        connectionPoolSize: config?.connectionPoolSize || void 0
-      };
-      this.cacheInfo(info);
-      return info;
-    } catch (error) {
-      this.logger.error(`Failed to fetch tenant info: ${tenantIdentifier}`, error);
-      throw new import_common38.InternalServerErrorException("Failed to resolve tenant");
-    }
-  }
-  // Caches tenant info by both ID and subdomain with TTL expiration
-  cacheInfo(info) {
-    this.tenantConfigCache.set(info.id, info);
-    this.tenantConfigCache.set(info.subdomain, info);
-    setTimeout(() => {
-      this.tenantConfigCache.delete(info.id);
-      this.tenantConfigCache.delete(info.subdomain);
-      this.logger.debug(`Cache expired for tenant: ${info.subdomain}`);
-    }, this.cacheTTL);
-  }
-  // Clears cached tenant info for the given ID or subdomain
-  clearTenantCache(tenantIdentifier) {
-    const config = this.tenantConfigCache.get(tenantIdentifier);
-    if (config) {
-      this.tenantConfigCache.delete(config.id);
-      this.tenantConfigCache.delete(config.subdomain);
-      this.logger.log(`Cleared cache for tenant: ${tenantIdentifier}`);
-    }
-  }
-  // Clears all cached tenant configurations
-  clearAllCaches() {
-    const size = this.tenantConfigCache.size;
-    this.tenantConfigCache.clear();
-    this.logger.log(`Cleared ${size} cached tenant configs`);
-  }
-  // Returns the initialized Drizzle client, throwing if not yet initialized
+  // Returns the initialized Drizzle client
   get drizzleClient() {
     if (!this.db) {
       throw new Error("Primary database client not initialized");
@@ -1414,10 +1346,6 @@ var PrimaryDatabaseService = class _PrimaryDatabaseService {
   get schema() {
     return this.options.drizzleSchema;
   }
-  // Decrypts a database credential value (placeholder for actual decryption)
-  decrypt(encrypted) {
-    return encrypted;
-  }
   async onModuleDestroy() {
     if (this.pool) {
       await this.pool.end();
@@ -1434,8 +1362,7 @@ PrimaryDatabaseService = _ts_decorate9([
   ])
 ], PrimaryDatabaseService);
 
-// src/database/services/tenant-context.service.ts
-var import_common39 = require("@nestjs/common");
+// src/database/database.module.ts
 function _ts_decorate10(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -1443,52 +1370,63 @@ function _ts_decorate10(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate10, "_ts_decorate");
-var TenantContextService = class {
+var DatabaseModule = class _DatabaseModule {
   static {
-    __name(this, "TenantContextService");
-  }
-  tenantInfo = null;
-  // Sets tenant info for this request, throwing if already set to prevent overwrites
-  setTenant(tenantInfo) {
-    if (this.tenantInfo) {
-      throw new Error("Tenant context already set for this request");
-    }
-    this.tenantInfo = tenantInfo;
-  }
-  // Returns the tenant info for this request, throwing if context is not set
-  getTenant() {
-    if (!this.tenantInfo) {
-      throw new import_common39.UnauthorizedException("Tenant context not set");
-    }
-    return this.tenantInfo;
-  }
-  // Returns true if tenant context has been set for this request
-  hasTenant() {
-    return this.tenantInfo !== null;
-  }
-  // Clears the tenant context (useful for RabbitMQ message handler cleanup)
-  clearTenant() {
-    this.tenantInfo = null;
-  }
-  // Returns the tenant ID or null if context is not set
-  getTenantIdSafe() {
-    return this.tenantInfo?.id ?? null;
+    __name(this, "DatabaseModule");
   }
-  // Returns the tenant subdomain or null if context is not set
-  getTenantSubdomainSafe() {
-    return this.tenantInfo?.subdomain ?? null;
+  // Configures the database module with a single primary connection
+  static forServer(options) {
+    const asyncProvider = {
+      provide: DATABASE_MODULE_OPTIONS,
+      useFactory: options.useFactory,
+      inject: options.inject || []
+    };
+    return {
+      module: _DatabaseModule,
+      imports: [
+        RequestModule
+      ],
+      providers: [
+        {
+          provide: import_core4.Reflector,
+          useClass: import_core4.Reflector
+        },
+        asyncProvider,
+        PrimaryDatabaseService
+      ],
+      exports: [
+        PrimaryDatabaseService,
+        asyncProvider
+      ]
+    };
   }
 };
-TenantContextService = _ts_decorate10([
-  (0, import_common39.Injectable)({
-    scope: import_common39.Scope.REQUEST
-  })
-], TenantContextService);
+DatabaseModule = _ts_decorate10([
+  (0, import_common39.Global)(),
+  (0, import_common39.Module)({})
+], DatabaseModule);
 
-// src/database/services/tenant-database.service.ts
+// src/decorators/uploaded-file.decorator.ts
 var import_common40 = require("@nestjs/common");
-var import_node_postgres2 = require("drizzle-orm/node-postgres");
-var import_pg2 = require("pg");
+var UploadedFile = (0, import_common40.createParamDecorator)(async (_data, ctx) => {
+  const request = ctx.switchToHttp().getRequest();
+  const file = await request.file();
+  if (!file) {
+    throw new BadRequestException({
+      label: "File Required",
+      detail: "Please attach a file to your request."
+    });
+  }
+  const buffer = await file.toBuffer();
+  return {
+    buffer,
+    filename: file.filename,
+    mimetype: file.mimetype
+  };
+});
+
+// src/database/dto/create-response.dto.ts
+var import_swagger = require("@nestjs/swagger");
 function _ts_decorate11(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -1500,161 +1438,33 @@ function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata7, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param4, "_ts_param");
-var TenantDatabaseService = class _TenantDatabaseService {
+var CreateResponseDto = class {
   static {
-    __name(this, "TenantDatabaseService");
-  }
-  options;
-  tenantContext;
-  logger = new import_common40.Logger(_TenantDatabaseService.name);
-  clients = /* @__PURE__ */ new Map();
-  clientLastUsed = /* @__PURE__ */ new Map();
-  cleanupInterval;
-  constructor(options, tenantContext) {
-    this.options = options;
-    this.tenantContext = tenantContext;
-    this.startConnectionCleaner();
-  }
-  // Returns the Drizzle client scoped to the current tenant's database
-  get drizzleClient() {
-    return this.getDbClient();
-  }
-  // Returns the Drizzle schema passed in module options
-  get schema() {
-    return this.options.drizzleSchema;
-  }
-  // Returns a cached or new Drizzle client for the current tenant context
-  getDbClient() {
-    const tenant = this.tenantContext.getTenant();
-    const cacheKey = this.buildCacheKey(tenant);
-    const existing = this.clients.get(cacheKey);
-    if (existing) {
-      this.clientLastUsed.set(cacheKey, Date.now());
-      this.logger.debug(`Reusing cached connection: ${cacheKey}`);
-      return existing.db;
-    }
-    this.logger.log(`Creating new database connection: ${cacheKey}`);
-    const connection = this.createDbClientSync(tenant);
-    this.clients.set(cacheKey, connection);
-    this.clientLastUsed.set(cacheKey, Date.now());
-    return connection.db;
-  }
-  // Creates a new pool and Drizzle client for the given tenant
-  createDbClientSync(tenant) {
-    try {
-      const databaseUrl = this.buildTenantDbUrl(tenant);
-      const pool = new import_pg2.Pool({
-        connectionString: databaseUrl,
-        max: tenant.connectionPoolSize || this.options.maxConnections || 10
-      });
-      const db = (0, import_node_postgres2.drizzle)({
-        client: pool,
-        schema: this.options.drizzleSchema
-      });
-      this.logger.log(`Connected to database for tenant: ${tenant.subdomain}`);
-      return {
-        pool,
-        db
-      };
-    } catch (error) {
-      this.logger.error(`Failed to create database connection for tenant: ${tenant.subdomain}`, error);
-      throw new import_common40.InternalServerErrorException("Failed to connect to tenant database");
-    }
-  }
-  // Builds the PostgreSQL connection URL for a dedicated tenant database
-  buildTenantDbUrl(tenant) {
-    const { databaseHost, databasePort, databaseName, databaseUsername, databasePassword, databaseSslMode } = tenant;
-    if (!databaseHost || !databaseName || !databaseUsername) {
-      throw new Error(`Tenant ${tenant.subdomain} missing database configuration`);
-    }
-    const port = databasePort || 5432;
-    const sslMode = databaseSslMode || "require";
-    const connectionUrl = `postgresql://${databaseUsername}:${encodeURIComponent(databasePassword || "")}@${databaseHost}:${port}/${databaseName}?sslmode=${sslMode}`;
-    this.logger.debug(`Tenant connection URL: ${this.maskPassword(connectionUrl)}`);
-    return connectionUrl;
-  }
-  // Builds a cache key for connection pooling from tenant database coordinates
-  buildCacheKey(tenant) {
-    return `${tenant.type}:${tenant.databaseName}@${tenant.databaseHost}`;
-  }
-  // Starts a periodic interval to close idle database connections
-  startConnectionCleaner() {
-    const interval = this.options.connectionCacheTTL || 3e5;
-    this.cleanupInterval = setInterval(() => {
-      this.cleanupIdleConnections();
-    }, interval);
-    this.logger.log(`Connection cleanup scheduled every ${interval / 1e3} seconds`);
-  }
-  // Closes and removes connections that have been idle beyond the TTL
-  async cleanupIdleConnections() {
-    const now = Date.now();
-    const maxIdle = this.options.connectionCacheTTL || 3e5;
-    let cleaned = 0;
-    for (const [key, lastUsed] of this.clientLastUsed.entries()) {
-      if (now - lastUsed > maxIdle) {
-        const connection = this.clients.get(key);
-        if (connection) {
-          try {
-            await connection.pool.end();
-            this.logger.debug(`Cleaned up idle connection: ${key}`);
-          } catch (error) {
-            this.logger.error(`Error disconnecting idle client: ${key}`, error);
-          }
-          this.clients.delete(key);
-          this.clientLastUsed.delete(key);
-          cleaned++;
-        }
-      }
-    }
-    if (cleaned > 0) {
-      this.logger.log(`Cleaned up ${cleaned} idle connections`);
-    }
-  }
-  // Returns the current number of active pooled connections and their tenant keys
-  getPoolStats() {
-    return {
-      activeConnections: this.clients.size,
-      tenants: Array.from(this.clients.keys())
-    };
-  }
-  // Masks password in connection URL for safe logging
-  maskPassword(url) {
-    return url.replace(/:([^@]+)@/, ":****@");
-  }
-  async onModuleDestroy() {
-    if (this.cleanupInterval) {
-      clearInterval(this.cleanupInterval);
-    }
-    this.logger.log(`Disconnecting ${this.clients.size} database connections`);
-    const disconnectPromises = Array.from(this.clients.entries()).map(async ([key, connection]) => {
-      try {
-        await connection.pool.end();
-        this.logger.debug(`Disconnected: ${key}`);
-      } catch (error) {
-        this.logger.error(`Error disconnecting client: ${key}`, error);
-      }
-    });
-    await Promise.all(disconnectPromises);
-    this.logger.log("All database connections closed");
+    __name(this, "CreateResponseDto");
   }
+  success;
+  message;
+  data;
 };
-TenantDatabaseService = _ts_decorate11([
-  (0, import_common40.Injectable)(),
-  _ts_param4(0, (0, import_common40.Inject)(DATABASE_MODULE_OPTIONS)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
-    typeof DatabaseModuleOptions === "undefined" ? Object : DatabaseModuleOptions,
-    typeof TenantContextService === "undefined" ? Object : TenantContextService
-  ])
-], TenantDatabaseService);
-
-// src/database/database.module.ts
+_ts_decorate11([
+  (0, import_swagger.ApiProperty)({
+    example: true
+  }),
+  _ts_metadata7("design:type", Boolean)
+], CreateResponseDto.prototype, "success", void 0);
+_ts_decorate11([
+  (0, import_swagger.ApiProperty)({
+    example: "Resource created successfully"
+  }),
+  _ts_metadata7("design:type", String)
+], CreateResponseDto.prototype, "message", void 0);
+_ts_decorate11([
+  (0, import_swagger.ApiProperty)(),
+  _ts_metadata7("design:type", typeof T === "undefined" ? Object : T)
+], CreateResponseDto.prototype, "data", void 0);
+
+// src/database/dto/import-response.dto.ts
+var import_swagger2 = require("@nestjs/swagger");
 function _ts_decorate12(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -1662,69 +1472,133 @@ function _ts_decorate12(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate12, "_ts_decorate");
-var DatabaseModule = class _DatabaseModule {
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+var ValidatedRowDto = class {
   static {
-    __name(this, "DatabaseModule");
+    __name(this, "ValidatedRowDto");
   }
-  // Configures the module for gateway/HTTP mode with TenantContextInterceptor
-  static forServer(options) {
-    return _DatabaseModule.createDynamicModule(options, "server");
-  }
-  // Configures the module for microservice mode with MessageTenantContextInterceptor
-  static forMicroservice(options) {
-    return _DatabaseModule.createDynamicModule(options, "microservice");
-  }
-  // Creates the dynamic module configuration with the appropriate interceptor for the given mode
-  static createDynamicModule(options, mode) {
-    const asyncProvider = {
-      provide: DATABASE_MODULE_OPTIONS,
-      useFactory: options.useFactory,
-      inject: options.inject || []
-    };
-    const providers = [
-      // Required for external packages - NestJS global Reflector not available
-      {
-        provide: import_core4.Reflector,
-        useClass: import_core4.Reflector
-      },
-      asyncProvider,
-      TenantContextService,
-      PrimaryDatabaseService,
-      TenantDatabaseService
-    ];
-    return {
-      module: _DatabaseModule,
-      imports: [
-        RequestModule
-      ],
-      providers,
-      exports: [
-        TenantDatabaseService,
-        TenantContextService,
-        PrimaryDatabaseService,
-        asyncProvider
-      ]
-    };
+  index;
+  data;
+  valid;
+  errors;
+};
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: 1
+  }),
+  _ts_metadata8("design:type", Number)
+], ValidatedRowDto.prototype, "index", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: {
+      code: "products",
+      name: "Products"
+    }
+  }),
+  _ts_metadata8("design:type", typeof Record === "undefined" ? Object : Record)
+], ValidatedRowDto.prototype, "data", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: true
+  }),
+  _ts_metadata8("design:type", Boolean)
+], ValidatedRowDto.prototype, "valid", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: [
+      "Code already exists"
+    ]
+  }),
+  _ts_metadata8("design:type", Array)
+], ValidatedRowDto.prototype, "errors", void 0);
+var ImportSummaryDto = class {
+  static {
+    __name(this, "ImportSummaryDto");
   }
+  total;
+  valid;
+  invalid;
 };
-DatabaseModule = _ts_decorate12([
-  (0, import_common41.Global)(),
-  (0, import_common41.Module)({})
-], DatabaseModule);
-
-// src/database/decorators/tenant.decorator.ts
-var import_common42 = require("@nestjs/common");
-var Tenant = (0, import_common42.createParamDecorator)((_data, ctx) => {
-  const request = ctx.switchToHttp().getRequest();
-  const tenantContext = request.app?.get?.(TenantContextService);
-  if (!tenantContext) {
-    throw new Error("TenantContextService not found.");
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: 10
+  }),
+  _ts_metadata8("design:type", Number)
+], ImportSummaryDto.prototype, "total", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: 8
+  }),
+  _ts_metadata8("design:type", Number)
+], ImportSummaryDto.prototype, "valid", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: 2
+  }),
+  _ts_metadata8("design:type", Number)
+], ImportSummaryDto.prototype, "invalid", void 0);
+var ImportResponseDto = class {
+  static {
+    __name(this, "ImportResponseDto");
   }
-  return tenantContext.getTenant();
-});
+  success;
+  message;
+  created;
+  updated;
+  skipped;
+  rows;
+  summary;
+};
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: true
+  }),
+  _ts_metadata8("design:type", Boolean)
+], ImportResponseDto.prototype, "success", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiProperty)({
+    example: "Import complete."
+  }),
+  _ts_metadata8("design:type", String)
+], ImportResponseDto.prototype, "message", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiPropertyOptional)({
+    example: 3
+  }),
+  _ts_metadata8("design:type", Number)
+], ImportResponseDto.prototype, "created", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiPropertyOptional)({
+    example: 2
+  }),
+  _ts_metadata8("design:type", Number)
+], ImportResponseDto.prototype, "updated", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiPropertyOptional)({
+    example: 1
+  }),
+  _ts_metadata8("design:type", Number)
+], ImportResponseDto.prototype, "skipped", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiPropertyOptional)({
+    type: [
+      ValidatedRowDto
+    ]
+  }),
+  _ts_metadata8("design:type", Array)
+], ImportResponseDto.prototype, "rows", void 0);
+_ts_decorate12([
+  (0, import_swagger2.ApiPropertyOptional)({
+    type: ImportSummaryDto
+  }),
+  _ts_metadata8("design:type", typeof ImportSummaryDto === "undefined" ? Object : ImportSummaryDto)
+], ImportResponseDto.prototype, "summary", void 0);
 
 // src/database/dto/select-options-query.dto.ts
-var import_swagger = require("@nestjs/swagger");
+var import_swagger3 = require("@nestjs/swagger");
 var import_class_transformer = require("class-transformer");
 var import_class_validator = require("class-validator");
 function _ts_decorate13(decorators, target, key, desc2) {
@@ -1734,10 +1608,10 @@ function _ts_decorate13(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata8(k, v) {
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
+__name(_ts_metadata9, "_ts_metadata");
 var SelectOptionsQueryDto = class {
   static {
     __name(this, "SelectOptionsQueryDto");
@@ -1753,16 +1627,16 @@ var SelectOptionsQueryDto = class {
   groupIdKey;
 };
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Search term to filter by label",
     example: "united"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "search", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Maximum number of results",
     example: 20,
     default: 20
@@ -1771,10 +1645,10 @@ _ts_decorate13([
   (0, import_class_transformer.Type)(() => Number),
   (0, import_class_validator.IsInt)(),
   (0, import_class_validator.Min)(1),
-  _ts_metadata8("design:type", Number)
+  _ts_metadata9("design:type", Number)
 ], SelectOptionsQueryDto.prototype, "limit", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Number of results to skip",
     example: 0,
     default: 0
@@ -1783,67 +1657,67 @@ _ts_decorate13([
   (0, import_class_transformer.Type)(() => Number),
   (0, import_class_validator.IsInt)(),
   (0, import_class_validator.Min)(0),
-  _ts_metadata8("design:type", Number)
+  _ts_metadata9("design:type", Number)
 ], SelectOptionsQueryDto.prototype, "offset", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Comma-separated values to fetch specific options",
     example: "1,2,3"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "values", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Comma-separated IDs to exclude from results (already selected)",
     example: "5,10"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "excludeIds", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Column name for option value",
     example: "id",
     default: "id"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "valueKey", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Column name for option label",
     example: "name",
     default: "name"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "labelKey", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Column name for option description",
     example: "description"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "descriptionKey", void 0);
 _ts_decorate13([
-  (0, import_swagger.ApiPropertyOptional)({
+  (0, import_swagger3.ApiPropertyOptional)({
     description: "Column name for group ID",
     example: "regionId"
   }),
   (0, import_class_validator.IsOptional)(),
   (0, import_class_validator.IsString)(),
-  _ts_metadata8("design:type", String)
+  _ts_metadata9("design:type", String)
 ], SelectOptionsQueryDto.prototype, "groupIdKey", void 0);
 
 // src/database/dto/success-response.dto.ts
-var import_swagger2 = require("@nestjs/swagger");
+var import_swagger4 = require("@nestjs/swagger");
 var import_class_validator2 = require("class-validator");
 function _ts_decorate14(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -1852,10 +1726,10 @@ function _ts_decorate14(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata9(k, v) {
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
+__name(_ts_metadata10, "_ts_metadata");
 var SuccessResponseDto = class {
   static {
     __name(this, "SuccessResponseDto");
@@ -1864,24 +1738,24 @@ var SuccessResponseDto = class {
   message;
 };
 _ts_decorate14([
-  (0, import_swagger2.ApiProperty)({
+  (0, import_swagger4.ApiProperty)({
     example: true
   }),
   (0, import_class_validator2.IsNotEmpty)(),
   (0, import_class_validator2.IsBoolean)(),
-  _ts_metadata9("design:type", Boolean)
+  _ts_metadata10("design:type", Boolean)
 ], SuccessResponseDto.prototype, "success", void 0);
 _ts_decorate14([
-  (0, import_swagger2.ApiProperty)({
+  (0, import_swagger4.ApiProperty)({
     example: "Operation completed successfully"
   }),
   (0, import_class_validator2.IsNotEmpty)(),
   (0, import_class_validator2.IsString)(),
-  _ts_metadata9("design:type", String)
+  _ts_metadata10("design:type", String)
 ], SuccessResponseDto.prototype, "message", void 0);
 
 // src/database/dto/table-response.dto.ts
-var import_swagger3 = require("@nestjs/swagger");
+var import_swagger5 = require("@nestjs/swagger");
 function _ts_decorate15(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -1889,10 +1763,10 @@ function _ts_decorate15(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata10(k, v) {
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
+__name(_ts_metadata11, "_ts_metadata");
 var TableResponseDto = class {
   static {
     __name(this, "TableResponseDto");
@@ -1903,26 +1777,26 @@ var TableResponseDto = class {
   activeViewId;
 };
 _ts_decorate15([
-  (0, import_swagger3.ApiProperty)(),
-  _ts_metadata10("design:type", Array)
+  (0, import_swagger5.ApiProperty)(),
+  _ts_metadata11("design:type", Array)
 ], TableResponseDto.prototype, "result", void 0);
 _ts_decorate15([
-  (0, import_swagger3.ApiProperty)(),
-  _ts_metadata10("design:type", Number)
+  (0, import_swagger5.ApiProperty)(),
+  _ts_metadata11("design:type", Number)
 ], TableResponseDto.prototype, "count", void 0);
 _ts_decorate15([
-  (0, import_swagger3.ApiProperty)(),
-  _ts_metadata10("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+  (0, import_swagger5.ApiProperty)(),
+  _ts_metadata11("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
 ], TableResponseDto.prototype, "state", void 0);
 _ts_decorate15([
-  (0, import_swagger3.ApiPropertyOptional)({
+  (0, import_swagger5.ApiPropertyOptional)({
     nullable: true
   }),
-  _ts_metadata10("design:type", Object)
+  _ts_metadata11("design:type", Object)
 ], TableResponseDto.prototype, "activeViewId", void 0);
 
 // src/database/filter/filter.processor.ts
-var import_drizzle_orm2 = require("drizzle-orm");
+var import_drizzle_orm = require("drizzle-orm");
 var FilterProcessor = class {
   static {
     __name(this, "FilterProcessor");
@@ -1940,58 +1814,58 @@ var FilterProcessor = class {
       switch (f.operator) {
         case "equals":
           if (def.type === "boolean") return [
-            (0, import_drizzle_orm2.eq)(col, val === "true" || val === 1)
+            (0, import_drizzle_orm.eq)(col, val === "true" || val === 1)
           ];
           return [
-            (0, import_drizzle_orm2.eq)(col, val)
+            (0, import_drizzle_orm.eq)(col, val)
           ];
         case "notEquals":
           if (def.type === "boolean") return [
-            (0, import_drizzle_orm2.ne)(col, val === "true" || val === 1)
+            (0, import_drizzle_orm.ne)(col, val === "true" || val === 1)
           ];
           return [
-            (0, import_drizzle_orm2.ne)(col, val)
+            (0, import_drizzle_orm.ne)(col, val)
           ];
         case "contains":
           return [
-            (0, import_drizzle_orm2.ilike)(col, `%${val}%`)
+            (0, import_drizzle_orm.ilike)(col, `%${val}%`)
           ];
         case "notContains":
           return [
-            (0, import_drizzle_orm2.notIlike)(col, `%${val}%`)
+            (0, import_drizzle_orm.notIlike)(col, `%${val}%`)
           ];
         case "gt":
           return [
-            (0, import_drizzle_orm2.gt)(col, val)
+            (0, import_drizzle_orm.gt)(col, val)
           ];
         case "gte":
           return [
-            (0, import_drizzle_orm2.gte)(col, val)
+            (0, import_drizzle_orm.gte)(col, val)
           ];
         case "lt":
           return [
-            (0, import_drizzle_orm2.lt)(col, val)
+            (0, import_drizzle_orm.lt)(col, val)
           ];
         case "lte":
           return [
-            (0, import_drizzle_orm2.lte)(col, val)
+            (0, import_drizzle_orm.lte)(col, val)
           ];
         default:
           return [];
       }
     });
-    return conditions.length ? (0, import_drizzle_orm2.and)(...conditions) : void 0;
+    return conditions.length ? (0, import_drizzle_orm.and)(...conditions) : void 0;
   }
   // Builds a search WHERE — OR across all string fields when columnId is 'all', otherwise a single ilike
   static buildSearch(search, fieldMap) {
     if (!search?.value) return void 0;
     if (search.columnId === "all") {
-      const conditions = Object.values(fieldMap).filter((def2) => "column" in def2 && def2.type === "string").map((def2) => (0, import_drizzle_orm2.ilike)(def2.column, `%${search.value}%`));
-      return conditions.length ? (0, import_drizzle_orm2.or)(...conditions) : void 0;
+      const conditions = Object.values(fieldMap).filter((def2) => "column" in def2 && def2.type === "string").map((def2) => (0, import_drizzle_orm.ilike)(def2.column, `%${search.value}%`));
+      return conditions.length ? (0, import_drizzle_orm.or)(...conditions) : void 0;
     }
     const def = fieldMap[search.columnId];
     if (!def || !("column" in def)) return void 0;
-    return (0, import_drizzle_orm2.ilike)(def.column, `%${search.value}%`);
+    return (0, import_drizzle_orm.ilike)(def.column, `%${search.value}%`);
   }
   // Maps each SortCondition to an asc/desc SQL expression
   static buildOrderBy(sort = [], fieldMap) {
@@ -1999,15 +1873,15 @@ var FilterProcessor = class {
       const def = fieldMap[s.field];
       if (!def || !("column" in def)) return [];
       return [
-        s.direction === "asc" ? (0, import_drizzle_orm2.asc)(def.column) : (0, import_drizzle_orm2.desc)(def.column)
+        s.direction === "asc" ? (0, import_drizzle_orm.asc)(def.column) : (0, import_drizzle_orm.desc)(def.column)
       ];
     });
   }
 };
 
 // src/database/repositories/primary-base.repository.ts
-var import_common43 = require("@nestjs/common");
-var import_drizzle_orm3 = require("drizzle-orm");
+var import_common41 = require("@nestjs/common");
+var import_drizzle_orm2 = require("drizzle-orm");
 function snakeToCamel(str) {
   return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
 }
@@ -2036,16 +1910,17 @@ var PrimaryBaseRepository = class {
   constructor(database, table) {
     this.database = database;
     this.table = table;
-    const dbTableName = (0, import_drizzle_orm3.getTableName)(table);
+    const dbTableName = (0, import_drizzle_orm2.getTableName)(table);
     this.tableName = snakeToCamel(dbTableName);
-    this.logger = new import_common43.Logger(this.constructor.name);
+    this.logger = new import_common41.Logger(this.constructor.name);
     this.logger.debug(`Initialized ${this.constructor.name}`);
     this.logger.debug(`Table name: '${dbTableName}' -> query key: '${this.tableName}'`);
   }
   // Creates a new record and returns it
-  async create(data) {
+  async create(data, tx) {
     this.logger.log("Creating record");
-    const results = await this.db.insert(this.table).values(data).returning();
+    const db = tx ?? this.db;
+    const results = await db.insert(this.table).values(data).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
@@ -2071,16 +1946,35 @@ var PrimaryBaseRepository = class {
     this.logger.debug("Finding multiple records");
     return this.model.findMany(options);
   }
-  // Builds a select query with optional custom fields, join, filter, ordering, and pagination
+  // Builds a select query with optional custom fields, joins, filter, grouping, ordering, and pagination
   buildSelectQuery(options) {
-    const base = options?.select ? this.db.select(options.select).from(this.table) : this.db.select().from(this.table);
-    const joined = options?.leftJoin ? base.leftJoin(options.leftJoin.table, options.leftJoin.on) : base;
-    const filtered = options?.where ? joined.where(options.where) : joined;
-    const ordered = options?.orderBy?.length ? filtered.orderBy(...options.orderBy) : filtered;
-    const limited = options?.limit ? ordered.limit(options.limit) : ordered;
-    return options?.offset ? limited.offset(options.offset) : limited;
-  }
-  // Returns paginated result and total count, with optional custom select, LEFT JOIN, and ordering
+    let query = (options?.select ? this.db.select(options.select).from(this.table) : this.db.select().from(this.table)).$dynamic();
+    if (options?.leftJoin) {
+      query = query.leftJoin(options.leftJoin.table, options.leftJoin.on);
+    }
+    if (options?.leftJoins) {
+      for (const join of options.leftJoins) {
+        query = query.leftJoin(join.table, join.on);
+      }
+    }
+    if (options?.where) {
+      query = query.where(options.where);
+    }
+    if (options?.groupBy?.length) {
+      query = query.groupBy(...options.groupBy);
+    }
+    if (options?.orderBy?.length) {
+      query = query.orderBy(...options.orderBy);
+    }
+    if (options?.limit) {
+      query = query.limit(options.limit);
+    }
+    if (options?.offset) {
+      query = query.offset(options.offset);
+    }
+    return query;
+  }
+  // Returns paginated result and total count, with optional custom select, LEFT JOINs, GROUP BY, and ordering
   async findAllAndCount(options) {
     const [count, result] = await Promise.all([
       this.count(options?.where),
@@ -2092,37 +1986,41 @@ var PrimaryBaseRepository = class {
     };
   }
   // Updates a record by ID and returns the updated record
-  async update(id, data) {
+  async update(id, data, tx) {
     this.logger.log(`Updating record with ID: ${id}`);
+    const db = tx ?? this.db;
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.update(this.table).set(data).where((0, import_drizzle_orm3.eq)(idColumn, id)).returning();
+    const results = await db.update(this.table).set(data).where((0, import_drizzle_orm2.eq)(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
   }
   // Updates all records matching the SQL condition and returns the affected count
-  async updateMany(where, data) {
+  async updateMany(where, data, tx) {
     this.logger.log("Updating multiple records");
-    const result = await this.db.update(this.table).set(data).where(where);
+    const db = tx ?? this.db;
+    const result = await db.update(this.table).set(data).where(where);
     return {
       count: result.rowCount ?? 0
     };
   }
   // Deletes a record by ID and returns the deleted record
-  async delete(id) {
+  async delete(id, tx) {
     this.logger.log(`Deleting record with ID: ${id}`);
+    const db = tx ?? this.db;
     const idColumn = this.table.id;
     if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.delete(this.table).where((0, import_drizzle_orm3.eq)(idColumn, id)).returning();
+    const results = await db.delete(this.table).where((0, import_drizzle_orm2.eq)(idColumn, id)).returning();
     const record = results[0];
     if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
     return record;
   }
   // Deletes all records matching the SQL condition and returns the affected count
-  async deleteMany(where) {
+  async deleteMany(where, tx) {
     this.logger.log("Deleting multiple records");
-    const result = await this.db.delete(this.table).where(where);
+    const db = tx ?? this.db;
+    const result = await db.delete(this.table).where(where);
     return {
       count: result.rowCount ?? 0
     };
@@ -2131,7 +2029,7 @@ var PrimaryBaseRepository = class {
   async count(where) {
     this.logger.debug("Counting records");
     let query = this.db.select({
-      count: import_drizzle_orm3.sql`count(*)::int`
+      count: import_drizzle_orm2.sql`count(*)::int`
     }).from(this.table).$dynamic();
     if (where) {
       query = query.where(where);
@@ -2144,9 +2042,14 @@ var PrimaryBaseRepository = class {
     const count = await this.count(where);
     return count > 0;
   }
+  // Executes the callback within a database transaction
+  async transaction(callback) {
+    return this.db.transaction(callback);
+  }
   // Finds records formatted as select dropdown options with optional search, pagination, and grouping
   async findForSelect(config) {
     this.logger.debug("Finding records for select dropdown");
+    const selectFn = config.distinct ? this.db.selectDistinct.bind(this.db) : this.db.select.bind(this.db);
     const parsedValues = typeof config.values === "string" ? config.values.split(",").map((v) => v.trim()).filter(Boolean) : config.values;
     const parsedExcludeIds = typeof config.excludeIds === "string" ? config.excludeIds.split(",").map((v) => v.trim()).filter(Boolean) : config.excludeIds ?? [];
     const tableColumns = this.table;
@@ -2174,7 +2077,7 @@ var PrimaryBaseRepository = class {
         const groupIdCol = tableColumns[config.groupId];
         if (groupIdCol) selectCols.groupId = groupIdCol;
       }
-      let valuesQuery = this.db.select(selectCols).from(this.table).$dynamic();
+      let valuesQuery = selectFn(selectCols).from(this.table).$dynamic();
       if (config.joins) {
         for (const join of config.joins) {
           if (join.type === "inner") {
@@ -2184,7 +2087,7 @@ var PrimaryBaseRepository = class {
           }
         }
       }
-      const rows2 = await valuesQuery.where((0, import_drizzle_orm3.inArray)(valueCol, parsedValues));
+      const rows2 = await valuesQuery.where((0, import_drizzle_orm2.inArray)(valueCol, parsedValues));
       return {
         options: rows2.map((row) => ({
           value: row.value,
@@ -2205,7 +2108,7 @@ var PrimaryBaseRepository = class {
     const selectFields = {
       value: valueCol,
       label: labelCol,
-      totalCount: import_drizzle_orm3.sql`count(*) over()`.mapWith(Number)
+      totalCount: import_drizzle_orm2.sql`count(*) over()`.mapWith(Number)
     };
     if (descriptionCol) selectFields.description = descriptionCol;
     if (config.groupId) {
@@ -2214,16 +2117,16 @@ var PrimaryBaseRepository = class {
     }
     const conditions = [];
     if (config.search) {
-      conditions.push((0, import_drizzle_orm3.ilike)(labelCol, `%${config.search}%`));
+      conditions.push((0, import_drizzle_orm2.ilike)(labelCol, `%${config.search}%`));
     }
     if (parsedExcludeIds.length > 0) {
-      conditions.push((0, import_drizzle_orm3.notInArray)(valueCol, parsedExcludeIds));
+      conditions.push((0, import_drizzle_orm2.notInArray)(valueCol, parsedExcludeIds));
     }
     if (config.where) {
       for (const [field, val] of Object.entries(config.where)) {
         const column = tableColumns[field];
         if (column) {
-          conditions.push((0, import_drizzle_orm3.eq)(column, val));
+          conditions.push((0, import_drizzle_orm2.eq)(column, val));
         }
       }
     }
@@ -2234,7 +2137,7 @@ var PrimaryBaseRepository = class {
     const orderByCol = orderByKey ? tableColumns[orderByKey] ?? labelCol : labelCol;
     const limit = Number(config.limit) || 20;
     const offset = Number(config.offset) || 0;
-    let query = this.db.select(selectFields).from(this.table).$dynamic();
+    let query = selectFn(selectFields).from(this.table).$dynamic();
     if (config.joins) {
       for (const join of config.joins) {
         if (join.type === "inner") {
@@ -2245,14 +2148,14 @@ var PrimaryBaseRepository = class {
       }
     }
     if (conditions.length > 0) {
-      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm3.and)(...conditions));
+      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm2.and)(...conditions));
     }
     const orderClauses = [];
     if (config.groupId) {
       const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) orderClauses.push((0, import_drizzle_orm3.asc)(groupIdCol));
+      if (groupIdCol) orderClauses.push((0, import_drizzle_orm2.asc)(groupIdCol));
     }
-    orderClauses.push((0, import_drizzle_orm3.asc)(orderByCol));
+    orderClauses.push((0, import_drizzle_orm2.asc)(orderByCol));
     query = query.orderBy(...orderClauses).limit(limit).offset(offset);
     const rows = await query;
     const totalCount = rows.length > 0 ? rows[0].totalCount : 0;
@@ -2278,235 +2181,7 @@ var PrimaryBaseRepository = class {
       const groupRows = await this.db.select({
         id: groupIdCol,
         name: groupNameCol
-      }).from(config.groupTable).orderBy((0, import_drizzle_orm3.asc)(groupNameCol));
-      resolvedGroups = groupRows.map((r) => ({
-        id: r.id,
-        name: String(r.name)
-      }));
-    }
-    return {
-      options,
-      hasMore: offset + limit < totalCount,
-      totalCount,
-      ...resolvedGroups ? {
-        groups: resolvedGroups
-      } : {}
-    };
-  }
-};
-
-// src/database/repositories/tenant-base.repository.ts
-var import_common44 = require("@nestjs/common");
-var import_drizzle_orm4 = require("drizzle-orm");
-var TenantBaseRepository = class {
-  static {
-    __name(this, "TenantBaseRepository");
-  }
-  database;
-  table;
-  logger;
-  tableName;
-  get db() {
-    return this.database.drizzleClient;
-  }
-  get model() {
-    return this.database.drizzleClient.query[this.tableName];
-  }
-  constructor(database, table) {
-    this.database = database;
-    this.table = table;
-    this.tableName = (0, import_drizzle_orm4.getTableName)(table);
-    this.logger = new import_common44.Logger(this.constructor.name);
-    this.logger.debug(`Initialized ${this.constructor.name}`);
-  }
-  // Creates a new record and returns it
-  async create(data) {
-    this.logger.log("Creating record");
-    const results = await this.db.insert(this.table).values(data).returning();
-    const record = results[0];
-    if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
-    return record;
-  }
-  // Finds a single record by primary key ID
-  async findById(id) {
-    this.logger.debug(`Finding record by ID: ${id}`);
-    const idColumn = this.table.id;
-    if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.select().from(this.table).where((0, import_drizzle_orm4.eq)(idColumn, id)).limit(1);
-    return results[0] ?? null;
-  }
-  // Finds a single record matching the given SQL condition
-  async findOne(where) {
-    this.logger.debug("Finding record with custom query");
-    const results = await this.db.select().from(this.table).where(where).limit(1);
-    return results[0] ?? null;
-  }
-  // Finds multiple records with optional SQL filtering, ordering, and pagination
-  async findMany(options) {
-    this.logger.debug("Finding multiple records");
-    let query = this.db.select().from(this.table).$dynamic();
-    if (options?.where) {
-      query = query.where(options.where);
-    }
-    if (options?.orderBy) {
-      query = query.orderBy(options.orderBy);
-    }
-    if (options?.limit) {
-      query = query.limit(options.limit);
-    }
-    if (options?.offset) {
-      query = query.offset(options.offset);
-    }
-    return await query;
-  }
-  // Updates a record by ID and returns the updated record
-  async update(id, data) {
-    this.logger.log(`Updating record with ID: ${id}`);
-    const idColumn = this.table.id;
-    if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.update(this.table).set(data).where((0, import_drizzle_orm4.eq)(idColumn, id)).returning();
-    const record = results[0];
-    if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
-    return record;
-  }
-  // Updates all records matching the SQL condition and returns the affected count
-  async updateMany(where, data) {
-    this.logger.log("Updating multiple records");
-    const result = await this.db.update(this.table).set(data).where(where);
-    return {
-      count: result.rowCount ?? 0
-    };
-  }
-  // Deletes a record by ID and returns the deleted record
-  async delete(id) {
-    this.logger.log(`Deleting record with ID: ${id}`);
-    const idColumn = this.table.id;
-    if (!idColumn) throw new Error(`Table '${this.tableName}' has no 'id' column`);
-    const results = await this.db.delete(this.table).where((0, import_drizzle_orm4.eq)(idColumn, id)).returning();
-    const record = results[0];
-    if (!record) throw new Error(`${this.tableName}: database operation returned no record`);
-    return record;
-  }
-  // Deletes all records matching the SQL condition and returns the affected count
-  async deleteMany(where) {
-    this.logger.log("Deleting multiple records");
-    const result = await this.db.delete(this.table).where(where);
-    return {
-      count: result.rowCount ?? 0
-    };
-  }
-  // Counts records matching the optional SQL condition
-  async count(where) {
-    this.logger.debug("Counting records");
-    let query = this.db.select({
-      count: import_drizzle_orm4.sql`count(*)::int`
-    }).from(this.table).$dynamic();
-    if (where) {
-      query = query.where(where);
-    }
-    const results = await query;
-    return results[0].count;
-  }
-  // Returns true if at least one record matches the SQL condition
-  async exists(where) {
-    const count = await this.count(where);
-    return count > 0;
-  }
-  // Finds records formatted as select dropdown options with optional search, pagination, and grouping
-  async findForSelect(config) {
-    this.logger.debug("Finding records for select dropdown");
-    const parsedValues = typeof config.values === "string" ? config.values.split(",").map((v) => v.trim()).filter(Boolean) : config.values;
-    const parsedExcludeIds = typeof config.excludeIds === "string" ? config.excludeIds.split(",").map((v) => v.trim()).filter(Boolean) : config.excludeIds ?? [];
-    const tableColumns = this.table;
-    const valueCol = tableColumns[config.value];
-    if (!valueCol) throw new Error(`Column '${config.value}' not found in table '${this.tableName}'`);
-    const labelCol = tableColumns[config.label];
-    if (!labelCol) throw new Error(`Column '${config.label}' not found in table '${this.tableName}'`);
-    if (parsedValues && parsedValues.length > 0) {
-      const selectCols = {
-        value: valueCol,
-        label: labelCol
-      };
-      if (config.groupId) {
-        const groupIdCol = tableColumns[config.groupId];
-        if (groupIdCol) selectCols.groupId = groupIdCol;
-      }
-      const rows2 = await this.db.select(selectCols).from(this.table).where((0, import_drizzle_orm4.inArray)(valueCol, parsedValues));
-      return {
-        options: rows2.map((row) => ({
-          value: row.value,
-          label: String(row.label),
-          ...config.groupId && row.groupId != null ? {
-            groupId: row.groupId
-          } : {}
-        })),
-        hasMore: false,
-        ...config.groups ? {
-          groups: config.groups
-        } : {}
-      };
-    }
-    const selectFields = {
-      value: valueCol,
-      label: labelCol,
-      totalCount: import_drizzle_orm4.sql`count(*) over()`.mapWith(Number)
-    };
-    if (config.groupId) {
-      const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) selectFields.groupId = groupIdCol;
-    }
-    const conditions = [];
-    if (config.search) {
-      conditions.push((0, import_drizzle_orm4.ilike)(labelCol, `%${config.search}%`));
-    }
-    if (parsedExcludeIds.length > 0) {
-      conditions.push((0, import_drizzle_orm4.notInArray)(valueCol, parsedExcludeIds));
-    }
-    if (config.where) {
-      for (const [field, val] of Object.entries(config.where)) {
-        const column = tableColumns[field];
-        if (column) {
-          conditions.push((0, import_drizzle_orm4.eq)(column, val));
-        }
-      }
-    }
-    const orderByKey = config.orderBy ? Object.keys(config.orderBy)[0] : void 0;
-    const orderByCol = orderByKey ? tableColumns[orderByKey] ?? labelCol : labelCol;
-    const limit = Number(config.limit) || 20;
-    const offset = Number(config.offset) || 0;
-    let query = this.db.select(selectFields).from(this.table).$dynamic();
-    if (conditions.length > 0) {
-      query = query.where(conditions.length === 1 ? conditions[0] : (0, import_drizzle_orm4.and)(...conditions));
-    }
-    const orderClauses = [];
-    if (config.groupId) {
-      const groupIdCol = tableColumns[config.groupId];
-      if (groupIdCol) orderClauses.push((0, import_drizzle_orm4.asc)(groupIdCol));
-    }
-    orderClauses.push((0, import_drizzle_orm4.asc)(orderByCol));
-    query = query.orderBy(...orderClauses).limit(limit).offset(offset);
-    const rows = await query;
-    const totalCount = rows.length > 0 ? rows[0].totalCount : 0;
-    const options = rows.map((row) => ({
-      value: row.value,
-      label: String(row.label),
-      ...config.groupId && row.groupId != null ? {
-        groupId: row.groupId
-      } : {}
-    }));
-    let resolvedGroups = config.groups;
-    if (config.groupTable && config.groupId) {
-      const groupTableColumns = config.groupTable;
-      const groupIdKey = config.groupIdKey ?? "id";
-      const groupNameKey = config.groupLabelKey ?? "name";
-      const groupIdCol = groupTableColumns[groupIdKey];
-      if (!groupIdCol) throw new Error(`Column '${groupIdKey}' not found in group table`);
-      const groupNameCol = groupTableColumns[groupNameKey];
-      if (!groupNameCol) throw new Error(`Column '${groupNameKey}' not found in group table`);
-      const groupRows = await this.db.select({
-        id: groupIdCol,
-        name: groupNameCol
-      }).from(config.groupTable).orderBy((0, import_drizzle_orm4.asc)(groupNameCol));
+      }).from(config.groupTable).orderBy((0, import_drizzle_orm2.asc)(groupNameCol));
       resolvedGroups = groupRows.map((r) => ({
         id: r.id,
         name: String(r.name)
@@ -2524,13 +2199,13 @@ var TenantBaseRepository = class {
 };
 
 // src/email/email.module.ts
-var import_common46 = require("@nestjs/common");
-var import_config11 = require("@nestjs/config");
+var import_common43 = require("@nestjs/common");
+var import_config12 = require("@nestjs/config");
 
 // src/email/email.service.ts
 var import_brevo = require("@getbrevo/brevo");
-var import_common45 = require("@nestjs/common");
-var import_config10 = require("@nestjs/config");
+var import_common42 = require("@nestjs/common");
+var import_config11 = require("@nestjs/config");
 function _ts_decorate16(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -2538,16 +2213,16 @@ function _ts_decorate16(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata11(k, v) {
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
+__name(_ts_metadata12, "_ts_metadata");
 var EmailService = class _EmailService {
   static {
     __name(this, "EmailService");
   }
   configService;
-  logger = new import_common45.Logger(_EmailService.name);
+  logger = new import_common42.Logger(_EmailService.name);
   brevoClient;
   senderEmail;
   senderName;
@@ -2872,7 +2547,96 @@ DIDN'T MAKE THIS CHANGE?
 If you did not authorize this change, you can revert it within the next ${hoursUntilExpiry} hours by visiting:
 ${revertLink}
 
-If you made this change, you can safely ignore this email.
+If you made this change, you can safely ignore this email.
+
+---
+Vritti AI Cloud - Cloud Management Platform
+This is an automated message, please do not reply.
+    `.trim();
+    await this.sendEmail({
+      to: [
+        {
+          email: oldEmail,
+          name
+        }
+      ],
+      subject,
+      htmlContent,
+      textContent
+    });
+    this.logger.log(`Email change notification sent to ${oldEmail}`);
+  }
+  // Sends a confirmation to the restored email address after a revert
+  async sendEmailRevertConfirmation(email, displayName) {
+    const name = displayName || "there";
+    const subject = "Email Address Change Reverted - Vritti AI Cloud";
+    const htmlContent = `
+      <!DOCTYPE html>
+      <html>
+        <head>
+          <meta charset="UTF-8">
+          <meta name="viewport" content="width=device-width, initial-scale=1.0">
+        </head>
+        <body style="margin: 0; padding: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif; background-color: #f5f5f5;">
+          <table role="presentation" style="width: 100%; border-collapse: collapse;">
+            <tr>
+              <td style="padding: 40px 20px;">
+                <table role="presentation" style="max-width: 600px; margin: 0 auto; background-color: #ffffff; border-radius: 8px; box-shadow: 0 2px 4px rgba(0,0,0,0.1);">
+                  <!-- Header -->
+                  <tr>
+                    <td style="padding: 40px 40px 20px; text-align: center; border-bottom: 1px solid #e0e0e0;">
+                      <h1 style="margin: 0; color: #1a1a1a; font-size: 24px; font-weight: 600;">Email Change Reverted</h1>
+                    </td>
+                  </tr>
+
+                  <!-- Content -->
+                  <tr>
+                    <td style="padding: 40px;">
+                      <p style="margin: 0 0 20px; color: #333333; font-size: 16px; line-height: 1.6;">
+                        Hello <strong>${name}</strong>,
+                      </p>
+                      <p style="margin: 0 0 30px; color: #333333; font-size: 16px; line-height: 1.6;">
+                        Your recent email address change has been successfully reverted. Your email is now:
+                      </p>
+
+                      <div style="background-color: #d4edda; padding: 20px; border-radius: 8px; margin: 30px 0; text-align: center;">
+                        <p style="margin: 0; color: #155724; font-size: 18px; font-weight: 600; font-family: monospace;">
+                          ${email}
+                        </p>
+                      </div>
+
+                      <p style="margin: 30px 0 20px; color: #666666; font-size: 14px; line-height: 1.6;">
+                        If you did not request this revert, please contact our support team immediately.
+                      </p>
+                    </td>
+                  </tr>
+
+                  <!-- Footer -->
+                  <tr>
+                    <td style="padding: 30px 40px; border-top: 1px solid #e0e0e0; text-align: center;">
+                      <p style="margin: 0; color: #999999; font-size: 12px; line-height: 1.5;">
+                        Vritti AI Cloud - Cloud Management Platform
+                      </p>
+                      <p style="margin: 8px 0 0; color: #999999; font-size: 12px; line-height: 1.5;">
+                        This is an automated message, please do not reply.
+                      </p>
+                    </td>
+                  </tr>
+                </table>
+              </td>
+            </tr>
+          </table>
+        </body>
+      </html>
+    `;
+    const textContent = `
+Hello ${name},
+
+Your recent email address change has been successfully reverted. Your email is now:
+
+${email}
+
+If you did not request this revert, please contact our support team immediately.
 
 ---
 Vritti AI Cloud - Cloud Management Platform
@@ -2881,7 +2645,7 @@ This is an automated message, please do not reply.
     await this.sendEmail({
       to: [
         {
-          email: oldEmail,
+          email,
           name
         }
       ],
@@ -2889,12 +2653,12 @@ This is an automated message, please do not reply.
       htmlContent,
       textContent
     });
-    this.logger.log(`Email change notification sent to ${oldEmail}`);
+    this.logger.log(`Email revert confirmation sent to ${email}`);
   }
-  // Sends a confirmation to the restored email address after a revert
-  async sendEmailRevertConfirmation(email, displayName) {
-    const name = displayName || "there";
-    const subject = "Email Address Change Reverted - Vritti AI Cloud";
+  // Sends an invite email to a new portal user with their set-password link
+  async sendInviteEmail(params) {
+    const { to, name, inviteUrl } = params;
+    const subject = "You have been invited to Vritti AI";
     const htmlContent = `
       <!DOCTYPE html>
       <html>
@@ -2910,7 +2674,7 @@ This is an automated message, please do not reply.
                   <!-- Header -->
                   <tr>
                     <td style="padding: 40px 40px 20px; text-align: center; border-bottom: 1px solid #e0e0e0;">
-                      <h1 style="margin: 0; color: #1a1a1a; font-size: 24px; font-weight: 600;">Email Change Reverted</h1>
+                      <h1 style="margin: 0; color: #1a1a1a; font-size: 24px; font-weight: 600;">You're Invited</h1>
                     </td>
                   </tr>
 
@@ -2921,17 +2685,17 @@ This is an automated message, please do not reply.
                         Hello <strong>${name}</strong>,
                       </p>
                       <p style="margin: 0 0 30px; color: #333333; font-size: 16px; line-height: 1.6;">
-                        Your recent email address change has been successfully reverted. Your email is now:
+                        You have been invited to join Vritti AI. Click the button below to set your password and get started.
                       </p>
 
-                      <div style="background-color: #d4edda; padding: 20px; border-radius: 8px; margin: 30px 0; text-align: center;">
-                        <p style="margin: 0; color: #155724; font-size: 18px; font-weight: 600; font-family: monospace;">
-                          ${email}
-                        </p>
+                      <div style="text-align: center; margin: 30px 0;">
+                        <a href="${inviteUrl}" style="display: inline-block; padding: 14px 32px; background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: #ffffff; text-decoration: none; border-radius: 6px; font-weight: 600; font-size: 16px;">
+                          Set Your Password
+                        </a>
                       </div>
 
-                      <p style="margin: 30px 0 20px; color: #666666; font-size: 14px; line-height: 1.6;">
-                        If you did not request this revert, please contact our support team immediately.
+                      <p style="margin: 30px 0 0; color: #666666; font-size: 14px; line-height: 1.6;">
+                        If you did not expect this invitation, you can safely ignore this email.
                       </p>
                     </td>
                   </tr>
@@ -2957,11 +2721,11 @@ This is an automated message, please do not reply.
     const textContent = `
 Hello ${name},
 
-Your recent email address change has been successfully reverted. Your email is now:
+You have been invited to join Vritti AI. Visit the link below to set your password and get started:
 
-${email}
+${inviteUrl}
 
-If you did not request this revert, please contact our support team immediately.
+If you did not expect this invitation, you can safely ignore this email.
 
 ---
 Vritti AI Cloud - Cloud Management Platform
@@ -2970,7 +2734,7 @@ This is an automated message, please do not reply.
     await this.sendEmail({
       to: [
         {
-          email,
+          email: to,
           name
         }
       ],
@@ -2978,7 +2742,7 @@ This is an automated message, please do not reply.
       htmlContent,
       textContent
     });
-    this.logger.log(`Email revert confirmation sent to ${email}`);
+    this.logger.log(`Invite email sent to ${to}`);
   }
   // Verifies Brevo API connectivity — a 400 response means the API is reachable
   async verifyConnection() {
@@ -3045,10 +2809,10 @@ This is an automated message, please do not reply.
   }
 };
 EmailService = _ts_decorate16([
-  (0, import_common45.Injectable)(),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
-    typeof import_config10.ConfigService === "undefined" ? Object : import_config10.ConfigService
+  (0, import_common42.Injectable)(),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof import_config11.ConfigService === "undefined" ? Object : import_config11.ConfigService
   ])
 ], EmailService);
 
@@ -3066,10 +2830,10 @@ var EmailModule = class {
   }
 };
 EmailModule = _ts_decorate17([
-  (0, import_common46.Global)(),
-  (0, import_common46.Module)({
+  (0, import_common43.Global)(),
+  (0, import_common43.Module)({
     imports: [
-      import_config11.ConfigModule
+      import_config12.ConfigModule
     ],
     providers: [
       EmailService
@@ -3081,7 +2845,7 @@ EmailModule = _ts_decorate17([
 ], EmailModule);
 
 // src/filters/http-exception.filter.ts
-var import_common47 = require("@nestjs/common");
+var import_common44 = require("@nestjs/common");
 function _ts_decorate18(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -3090,7 +2854,7 @@ function _ts_decorate18(decorators, target, key, desc2) {
 }
 __name(_ts_decorate18, "_ts_decorate");
 function getHttpStatusTitle(status) {
-  const enumKey = Object.entries(import_common47.HttpStatus).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
+  const enumKey = Object.entries(import_common44.HttpStatus).find(([key, value]) => value === status && Number.isNaN(Number(key)))?.[0];
   if (!enumKey) {
     return "Error";
   }
@@ -3101,12 +2865,12 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
   static {
     __name(this, "HttpExceptionFilter");
   }
-  logger = new import_common47.Logger(_HttpExceptionFilter.name);
+  logger = new import_common44.Logger(_HttpExceptionFilter.name);
   catch(exception, host) {
     const ctx = host.switchToHttp();
     const response = ctx.getResponse();
     const request = ctx.getRequest();
-    let status = import_common47.HttpStatus.INTERNAL_SERVER_ERROR;
+    let status = import_common44.HttpStatus.INTERNAL_SERVER_ERROR;
     let type = "about:blank";
     let label;
     let detail = "Internal server error";
@@ -3145,7 +2909,7 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
       const axiosStatus = exception.response?.status;
       const axiosDetail = exception.response?.data?.message || exception.response?.data?.detail || exception.message;
       const url = exception.config?.url;
-      status = import_common47.HttpStatus.BAD_GATEWAY;
+      status = import_common44.HttpStatus.BAD_GATEWAY;
       detail = `Upstream service error${axiosStatus ? ` (${axiosStatus})` : ""}: ${axiosDetail}`;
       this.logger.error(`Upstream API error [${axiosStatus}]: ${axiosDetail} \u2014 URL: ${url}`, exception.stack);
     } else {
@@ -3174,15 +2938,15 @@ var HttpExceptionFilter = class _HttpExceptionFilter {
   }
 };
 HttpExceptionFilter = _ts_decorate18([
-  (0, import_common47.Catch)()
+  (0, import_common44.Catch)()
 ], HttpExceptionFilter);
 
 // src/logger/interceptors/http-logger.interceptor.ts
-var import_common49 = require("@nestjs/common");
+var import_common46 = require("@nestjs/common");
 var import_operators = require("rxjs/operators");
 
 // src/logger/services/logger.service.ts
-var import_common48 = require("@nestjs/common");
+var import_common45 = require("@nestjs/common");
 var import_winston = require("winston");
 var import_winston_daily_rotate_file = __toESM(require("winston-daily-rotate-file"), 1);
 
@@ -3227,16 +2991,16 @@ function _ts_decorate19(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate19, "_ts_decorate");
-function _ts_metadata12(k, v) {
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param4, "_ts_param");
 var LoggerService = class _LoggerService {
   static {
     __name(this, "LoggerService");
@@ -3429,11 +3193,11 @@ ${trace}`;
   }
 };
 LoggerService = _ts_decorate19([
-  (0, import_common48.Injectable)(),
-  _ts_param5(0, (0, import_common48.Optional)()),
-  _ts_param5(1, (0, import_common48.Optional)()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  (0, import_common45.Injectable)(),
+  _ts_param4(0, (0, import_common45.Optional)()),
+  _ts_param4(1, (0, import_common45.Optional)()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof LoggerModuleOptions === "undefined" ? Object : LoggerModuleOptions,
     typeof Logger === "undefined" ? Object : Logger
   ])
@@ -3447,16 +3211,16 @@ function _ts_decorate20(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate20, "_ts_decorate");
-function _ts_metadata13(k, v) {
+function _ts_metadata14(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var HttpLoggerInterceptor = class {
   static {
     __name(this, "HttpLoggerInterceptor");
@@ -3560,20 +3324,20 @@ var HttpLoggerInterceptor = class {
   }
 };
 HttpLoggerInterceptor = _ts_decorate20([
-  (0, import_common49.Injectable)(),
-  _ts_param6(1, (0, import_common49.Optional)()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  (0, import_common46.Injectable)(),
+  _ts_param5(1, (0, import_common46.Optional)()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof LoggerService === "undefined" ? Object : LoggerService,
     typeof HttpLoggerOptions === "undefined" ? Object : HttpLoggerOptions
   ])
 ], HttpLoggerInterceptor);
 
 // src/logger/logger.module.ts
-var import_common51 = require("@nestjs/common");
+var import_common48 = require("@nestjs/common");
 
 // src/logger/middleware/correlation-id.middleware.ts
-var import_common50 = require("@nestjs/common");
+var import_common47 = require("@nestjs/common");
 function _ts_decorate21(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -3581,10 +3345,10 @@ function _ts_decorate21(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate21, "_ts_decorate");
-function _ts_metadata14(k, v) {
+function _ts_metadata15(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata14, "_ts_metadata");
+__name(_ts_metadata15, "_ts_metadata");
 var CorrelationIdMiddleware = class {
   static {
     __name(this, "CorrelationIdMiddleware");
@@ -3622,9 +3386,9 @@ var CorrelationIdMiddleware = class {
   }
 };
 CorrelationIdMiddleware = _ts_decorate21([
-  (0, import_common50.Injectable)(),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+  (0, import_common47.Injectable)(),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof CorrelationIdMiddlewareOptions === "undefined" ? Object : CorrelationIdMiddlewareOptions
   ])
 ], CorrelationIdMiddleware);
@@ -3713,9 +3477,9 @@ function mergeWithDefaults(options = {}) {
 __name(mergeWithDefaults, "mergeWithDefaults");
 function createDefaultLoggerProvider(options) {
   return {
-    provide: import_common51.Logger,
+    provide: import_common48.Logger,
     useFactory: /* @__PURE__ */ __name(() => {
-      const logger = new import_common51.Logger();
+      const logger = new import_common48.Logger();
       if (options.level) {
         const levels = getLevelsUpTo(options.level);
         logger.setLogLevels?.(levels);
@@ -3745,7 +3509,7 @@ function createLoggerProviders(options = {}) {
     inject: [
       LOGGER_MODULE_OPTIONS,
       {
-        token: import_common51.Logger,
+        token: import_common48.Logger,
         optional: true
       }
     ]
@@ -3824,10 +3588,10 @@ var LoggerModule = class _LoggerModule {
         ...asyncProviders,
         // Default logger provider
         {
-          provide: import_common51.Logger,
+          provide: import_common48.Logger,
           useFactory: /* @__PURE__ */ __name((opts) => {
             if (opts.provider === "default") {
-              const logger = new import_common51.Logger();
+              const logger = new import_common48.Logger();
               if (opts.level) {
                 const levels = getLevelsUpTo(opts.level);
                 logger.setLogLevels?.(levels);
@@ -3849,7 +3613,7 @@ var LoggerModule = class _LoggerModule {
           inject: [
             LOGGER_MODULE_OPTIONS,
             {
-              token: import_common51.Logger,
+              token: import_common48.Logger,
               optional: true
             }
           ]
@@ -3949,24 +3713,24 @@ var LoggerModule = class _LoggerModule {
   }
 };
 LoggerModule = _ts_decorate22([
-  (0, import_common51.Global)(),
-  (0, import_common51.Module)({})
+  (0, import_common48.Global)(),
+  (0, import_common48.Module)({})
 ], LoggerModule);
 
 // src/root/root.module.ts
-var import_common57 = require("@nestjs/common");
+var import_common54 = require("@nestjs/common");
 
 // src/root/controllers/app.controller.ts
-var import_common54 = require("@nestjs/common");
-var import_swagger5 = require("@nestjs/swagger");
+var import_common51 = require("@nestjs/common");
+var import_swagger7 = require("@nestjs/swagger");
 
 // src/root/docs/app.docs.ts
-var import_common52 = require("@nestjs/common");
-var import_swagger4 = require("@nestjs/swagger");
+var import_common49 = require("@nestjs/common");
+var import_swagger6 = require("@nestjs/swagger");
 function ApiHealthCheck() {
-  return (0, import_common52.applyDecorators)((0, import_swagger4.ApiOperation)({
+  return (0, import_common49.applyDecorators)((0, import_swagger6.ApiOperation)({
     summary: "Health check endpoint"
-  }), (0, import_swagger4.ApiResponse)({
+  }), (0, import_swagger6.ApiResponse)({
     status: 200,
     description: "Returns a welcome message indicating the API is running",
     type: String
@@ -3975,7 +3739,7 @@ function ApiHealthCheck() {
 __name(ApiHealthCheck, "ApiHealthCheck");
 
 // src/root/services/app.service.ts
-var import_common53 = require("@nestjs/common");
+var import_common50 = require("@nestjs/common");
 function _ts_decorate23(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -3993,7 +3757,7 @@ var AppService = class {
   }
 };
 AppService = _ts_decorate23([
-  (0, import_common53.Injectable)()
+  (0, import_common50.Injectable)()
 ], AppService);
 
 // src/root/controllers/app.controller.ts
@@ -4004,10 +3768,10 @@ function _ts_decorate24(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate24, "_ts_decorate");
-function _ts_metadata15(k, v) {
+function _ts_metadata16(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata15, "_ts_metadata");
+__name(_ts_metadata16, "_ts_metadata");
 var AppController = class {
   static {
     __name(this, "AppController");
@@ -4022,34 +3786,34 @@ var AppController = class {
   }
 };
 _ts_decorate24([
-  (0, import_common54.Get)(),
+  (0, import_common51.Get)(),
   Public(),
   ApiHealthCheck(),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", []),
-  _ts_metadata15("design:returntype", String)
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", []),
+  _ts_metadata16("design:returntype", String)
 ], AppController.prototype, "getHello", null);
 AppController = _ts_decorate24([
-  (0, import_swagger5.ApiTags)("Health"),
-  (0, import_common54.Controller)(),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", [
+  (0, import_swagger7.ApiTags)("Health"),
+  (0, import_common51.Controller)(),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof AppService === "undefined" ? Object : AppService
   ])
 ], AppController);
 
 // src/root/controllers/csrf.controller.ts
-var import_common56 = require("@nestjs/common");
-var import_swagger7 = require("@nestjs/swagger");
+var import_common53 = require("@nestjs/common");
+var import_swagger9 = require("@nestjs/swagger");
 
 // src/root/docs/csrf.docs.ts
-var import_common55 = require("@nestjs/common");
-var import_swagger6 = require("@nestjs/swagger");
+var import_common52 = require("@nestjs/common");
+var import_swagger8 = require("@nestjs/swagger");
 function ApiGetCsrfToken() {
-  return (0, import_common55.applyDecorators)((0, import_swagger6.ApiOperation)({
+  return (0, import_common52.applyDecorators)((0, import_swagger8.ApiOperation)({
     summary: "Get CSRF token",
     description: "Generates and returns a CSRF token that must be included in all state-changing requests (POST, PUT, PATCH, DELETE). The token should be sent in the X-CSRF-Token header."
-  }), (0, import_swagger6.ApiResponse)({
+  }), (0, import_swagger8.ApiResponse)({
     status: 200,
     description: "CSRF token generated successfully",
     schema: {
@@ -4077,16 +3841,16 @@ function _ts_decorate25(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate25, "_ts_decorate");
-function _ts_metadata16(k, v) {
+function _ts_metadata17(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata16, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var CsrfController = class {
   static {
     __name(this, "CsrfController");
@@ -4100,22 +3864,22 @@ var CsrfController = class {
   }
 };
 _ts_decorate25([
-  (0, import_common56.Get)("token"),
+  (0, import_common53.Get)("token"),
   Public(),
-  (0, import_common56.HttpCode)(import_common56.HttpStatus.OK),
+  (0, import_common53.HttpCode)(import_common53.HttpStatus.OK),
   ApiGetCsrfToken(),
-  _ts_param7(0, (0, import_common56.Res)({
+  _ts_param6(0, (0, import_common53.Res)({
     passthrough: true
   })),
-  _ts_metadata16("design:type", Function),
-  _ts_metadata16("design:paramtypes", [
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
     typeof FastifyReply === "undefined" ? Object : FastifyReply
   ]),
-  _ts_metadata16("design:returntype", Object)
+  _ts_metadata17("design:returntype", Object)
 ], CsrfController.prototype, "getToken", null);
 CsrfController = _ts_decorate25([
-  (0, import_swagger7.ApiTags)("CSRF"),
-  (0, import_common56.Controller)("csrf")
+  (0, import_swagger9.ApiTags)("CSRF"),
+  (0, import_common53.Controller)("csrf")
 ], CsrfController);
 
 // src/root/root.module.ts
@@ -4132,7 +3896,7 @@ var RootModule = class {
   }
 };
 RootModule = _ts_decorate26([
-  (0, import_common57.Module)({
+  (0, import_common54.Module)({
     controllers: [
       AppController,
       CsrfController
@@ -4354,22 +4118,22 @@ function normalizePhoneNumber(phone) {
 __name(normalizePhoneNumber, "normalizePhoneNumber");
 
 // src/data-table/data-table.module.ts
-var import_common65 = require("@nestjs/common");
-var import_config14 = require("@nestjs/config");
+var import_common62 = require("@nestjs/common");
+var import_config15 = require("@nestjs/config");
 
 // src/data-table/data-table.constants.ts
 var DATA_TABLE_VIEWS_TABLE = Symbol("DATA_TABLE_VIEWS_TABLE");
 
 // src/data-table/state/controllers/data-table-state.controller.ts
-var import_common60 = require("@nestjs/common");
-var import_swagger10 = require("@nestjs/swagger");
+var import_common57 = require("@nestjs/common");
+var import_swagger12 = require("@nestjs/swagger");
 
 // src/data-table/state/docs/data-table-state.docs.ts
-var import_common58 = require("@nestjs/common");
-var import_swagger9 = require("@nestjs/swagger");
+var import_common55 = require("@nestjs/common");
+var import_swagger11 = require("@nestjs/swagger");
 
 // src/data-table/state/dto/request/upsert-data-table-state.dto.ts
-var import_swagger8 = require("@nestjs/swagger");
+var import_swagger10 = require("@nestjs/swagger");
 var import_class_validator3 = require("class-validator");
 function _ts_decorate27(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -4378,10 +4142,10 @@ function _ts_decorate27(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate27, "_ts_decorate");
-function _ts_metadata17(k, v) {
+function _ts_metadata18(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata17, "_ts_metadata");
+__name(_ts_metadata18, "_ts_metadata");
 var UpsertDataTableStateDto = class {
   static {
     __name(this, "UpsertDataTableStateDto");
@@ -4391,42 +4155,42 @@ var UpsertDataTableStateDto = class {
   activeViewId;
 };
 _ts_decorate27([
-  (0, import_swagger8.ApiProperty)({
+  (0, import_swagger10.ApiProperty)({
     description: "Unique slug identifying the table",
     example: "cloud-providers"
   }),
   (0, import_class_validator3.IsString)(),
   (0, import_class_validator3.MaxLength)(100),
-  _ts_metadata17("design:type", String)
+  _ts_metadata18("design:type", String)
 ], UpsertDataTableStateDto.prototype, "tableSlug", void 0);
 _ts_decorate27([
-  (0, import_swagger8.ApiProperty)({
+  (0, import_swagger10.ApiProperty)({
     description: "Full table view state including filters, sort, and column visibility"
   }),
   (0, import_class_validator3.IsObject)(),
-  _ts_metadata17("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+  _ts_metadata18("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
 ], UpsertDataTableStateDto.prototype, "state", void 0);
 _ts_decorate27([
-  (0, import_swagger8.ApiPropertyOptional)(),
+  (0, import_swagger10.ApiPropertyOptional)(),
   (0, import_class_validator3.IsOptional)(),
   (0, import_class_validator3.IsUUID)(),
-  _ts_metadata17("design:type", Object)
+  _ts_metadata18("design:type", Object)
 ], UpsertDataTableStateDto.prototype, "activeViewId", void 0);
 
 // src/data-table/state/docs/data-table-state.docs.ts
 function ApiUpsertDataTableState() {
-  return (0, import_common58.applyDecorators)((0, import_swagger9.ApiOperation)({
+  return (0, import_common55.applyDecorators)((0, import_swagger11.ApiOperation)({
     summary: "Save live table state",
     description: "Stores the current filter, sort, and column visibility state in Redis cache. Called on filter Apply and sort column click. State expires after TABLE_STATE_CACHE_TTL seconds."
-  }), (0, import_swagger9.ApiBody)({
+  }), (0, import_swagger11.ApiBody)({
     type: UpsertDataTableStateDto
-  }), (0, import_swagger9.ApiResponse)({
+  }), (0, import_swagger11.ApiResponse)({
     status: 200,
     description: "Live state cached."
-  }), (0, import_swagger9.ApiResponse)({
+  }), (0, import_swagger11.ApiResponse)({
     status: 400,
     description: "Invalid request body."
-  }), (0, import_swagger9.ApiResponse)({
+  }), (0, import_swagger11.ApiResponse)({
     status: 401,
     description: "Unauthorized."
   }));
@@ -4434,8 +4198,8 @@ function ApiUpsertDataTableState() {
 __name(ApiUpsertDataTableState, "ApiUpsertDataTableState");
 
 // src/data-table/state/services/data-table-state.service.ts
-var import_common59 = require("@nestjs/common");
-var import_config12 = require("@nestjs/config");
+var import_common56 = require("@nestjs/common");
+var import_config13 = require("@nestjs/config");
 function _ts_decorate28(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -4443,10 +4207,10 @@ function _ts_decorate28(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate28, "_ts_decorate");
-function _ts_metadata18(k, v) {
+function _ts_metadata19(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata18, "_ts_metadata");
+__name(_ts_metadata19, "_ts_metadata");
 var EMPTY_TABLE_STATE = {
   filters: [],
   sort: [],
@@ -4472,7 +4236,7 @@ var DataTableStateService = class _DataTableStateService {
   }
   cacheService;
   configService;
-  logger = new import_common59.Logger(_DataTableStateService.name);
+  logger = new import_common56.Logger(_DataTableStateService.name);
   constructor(cacheService, configService) {
     this.cacheService = cacheService;
     this.configService = configService;
@@ -4501,11 +4265,11 @@ var DataTableStateService = class _DataTableStateService {
   }
 };
 DataTableStateService = _ts_decorate28([
-  (0, import_common59.Injectable)(),
-  _ts_metadata18("design:type", Function),
-  _ts_metadata18("design:paramtypes", [
+  (0, import_common56.Injectable)(),
+  _ts_metadata19("design:type", Function),
+  _ts_metadata19("design:paramtypes", [
     typeof CacheService === "undefined" ? Object : CacheService,
-    typeof import_config12.ConfigService === "undefined" ? Object : import_config12.ConfigService
+    typeof import_config13.ConfigService === "undefined" ? Object : import_config13.ConfigService
   ])
 ], DataTableStateService);
 
@@ -4517,22 +4281,22 @@ function _ts_decorate29(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate29, "_ts_decorate");
-function _ts_metadata19(k, v) {
+function _ts_metadata20(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata19, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata20, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var DataTableStateController = class _DataTableStateController {
   static {
     __name(this, "DataTableStateController");
   }
   dataTableStateService;
-  logger = new import_common60.Logger(_DataTableStateController.name);
+  logger = new import_common57.Logger(_DataTableStateController.name);
   constructor(dataTableStateService) {
     this.dataTableStateService = dataTableStateService;
   }
@@ -4543,38 +4307,39 @@ var DataTableStateController = class _DataTableStateController {
   }
 };
 _ts_decorate29([
-  (0, import_common60.Post)(),
-  (0, import_common60.HttpCode)(import_common60.HttpStatus.OK),
+  (0, import_common57.Post)(),
+  (0, import_common57.HttpCode)(import_common57.HttpStatus.OK),
   ApiUpsertDataTableState(),
-  _ts_param8(0, UserId()),
-  _ts_param8(1, (0, import_common60.Body)()),
-  _ts_metadata19("design:type", Function),
-  _ts_metadata19("design:paramtypes", [
+  _ts_param7(0, UserId()),
+  _ts_param7(1, (0, import_common57.Body)()),
+  _ts_metadata20("design:type", Function),
+  _ts_metadata20("design:paramtypes", [
     String,
     typeof UpsertDataTableStateDto === "undefined" ? Object : UpsertDataTableStateDto
   ]),
-  _ts_metadata19("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata20("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableStateController.prototype, "upsertCurrentState", null);
 DataTableStateController = _ts_decorate29([
-  (0, import_swagger10.ApiTags)("Table States"),
-  (0, import_swagger10.ApiBearerAuth)(),
-  (0, import_common60.Controller)("table-states"),
-  _ts_metadata19("design:type", Function),
-  _ts_metadata19("design:paramtypes", [
+  (0, import_swagger12.ApiTags)("Table States"),
+  (0, import_swagger12.ApiBearerAuth)(),
+  RequireSession("CLOUD", "ADMIN"),
+  (0, import_common57.Controller)("table-states"),
+  _ts_metadata20("design:type", Function),
+  _ts_metadata20("design:paramtypes", [
     typeof DataTableStateService === "undefined" ? Object : DataTableStateService
   ])
 ], DataTableStateController);
 
 // src/data-table/views/controllers/data-table-views.controller.ts
-var import_common64 = require("@nestjs/common");
-var import_swagger17 = require("@nestjs/swagger");
+var import_common61 = require("@nestjs/common");
+var import_swagger19 = require("@nestjs/swagger");
 
 // src/data-table/views/docs/data-table-views.docs.ts
-var import_common61 = require("@nestjs/common");
-var import_swagger16 = require("@nestjs/swagger");
+var import_common58 = require("@nestjs/common");
+var import_swagger18 = require("@nestjs/swagger");
 
 // src/data-table/views/dto/entity/data-table-view.dto.ts
-var import_swagger11 = require("@nestjs/swagger");
+var import_swagger13 = require("@nestjs/swagger");
 function _ts_decorate30(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -4582,10 +4347,10 @@ function _ts_decorate30(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate30, "_ts_decorate");
-function _ts_metadata20(k, v) {
+function _ts_metadata21(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata20, "_ts_metadata");
+__name(_ts_metadata21, "_ts_metadata");
 var DataTableViewDto = class _DataTableViewDto {
   static {
     __name(this, "DataTableViewDto");
@@ -4613,61 +4378,61 @@ var DataTableViewDto = class _DataTableViewDto {
   }
 };
 _ts_decorate30([
-  (0, import_swagger11.ApiProperty)({
+  (0, import_swagger13.ApiProperty)({
     description: "View unique identifier"
   }),
-  _ts_metadata20("design:type", String)
+  _ts_metadata21("design:type", String)
 ], DataTableViewDto.prototype, "id", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiPropertyOptional)({
+  (0, import_swagger13.ApiPropertyOptional)({
     description: "Display name of the view",
     nullable: true
   }),
-  _ts_metadata20("design:type", Object)
+  _ts_metadata21("design:type", Object)
 ], DataTableViewDto.prototype, "name", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiProperty)({
+  (0, import_swagger13.ApiProperty)({
     description: "Slug of the table this view belongs to",
     example: "cloud-providers"
   }),
-  _ts_metadata20("design:type", String)
+  _ts_metadata21("design:type", String)
 ], DataTableViewDto.prototype, "tableSlug", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiProperty)({
+  (0, import_swagger13.ApiProperty)({
     description: "Stored filter, sort, and column visibility state"
   }),
-  _ts_metadata20("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+  _ts_metadata21("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
 ], DataTableViewDto.prototype, "state", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiProperty)({
+  (0, import_swagger13.ApiProperty)({
     description: "Whether the view is visible to all users",
     example: false
   }),
-  _ts_metadata20("design:type", Boolean)
+  _ts_metadata21("design:type", Boolean)
 ], DataTableViewDto.prototype, "isShared", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiProperty)({
+  (0, import_swagger13.ApiProperty)({
     description: "Whether the requesting user owns this view",
     example: true
   }),
-  _ts_metadata20("design:type", Boolean)
+  _ts_metadata21("design:type", Boolean)
 ], DataTableViewDto.prototype, "isOwn", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiProperty)({
+  (0, import_swagger13.ApiProperty)({
     description: "Creation timestamp"
   }),
-  _ts_metadata20("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata21("design:type", typeof Date === "undefined" ? Object : Date)
 ], DataTableViewDto.prototype, "createdAt", void 0);
 _ts_decorate30([
-  (0, import_swagger11.ApiPropertyOptional)({
+  (0, import_swagger13.ApiPropertyOptional)({
     description: "Last updated timestamp",
     nullable: true
   }),
-  _ts_metadata20("design:type", Object)
+  _ts_metadata21("design:type", Object)
 ], DataTableViewDto.prototype, "updatedAt", void 0);
 
 // src/data-table/views/dto/request/create-data-table-view.dto.ts
-var import_swagger12 = require("@nestjs/swagger");
+var import_swagger14 = require("@nestjs/swagger");
 var import_class_validator4 = require("class-validator");
 function _ts_decorate31(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -4676,10 +4441,10 @@ function _ts_decorate31(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate31, "_ts_decorate");
-function _ts_metadata21(k, v) {
+function _ts_metadata22(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata21, "_ts_metadata");
+__name(_ts_metadata22, "_ts_metadata");
 var CreateDataTableViewDto = class {
   static {
     __name(this, "CreateDataTableViewDto");
@@ -4690,42 +4455,42 @@ var CreateDataTableViewDto = class {
   isShared;
 };
 _ts_decorate31([
-  (0, import_swagger12.ApiProperty)({
+  (0, import_swagger14.ApiProperty)({
     description: "Display name for the saved view",
     example: "AWS Only"
   }),
   (0, import_class_validator4.IsString)(),
   (0, import_class_validator4.MaxLength)(100),
-  _ts_metadata21("design:type", String)
+  _ts_metadata22("design:type", String)
 ], CreateDataTableViewDto.prototype, "name", void 0);
 _ts_decorate31([
-  (0, import_swagger12.ApiProperty)({
+  (0, import_swagger14.ApiProperty)({
     description: "Unique slug identifying the table",
     example: "cloud-providers"
   }),
   (0, import_class_validator4.IsString)(),
   (0, import_class_validator4.MaxLength)(100),
-  _ts_metadata21("design:type", String)
+  _ts_metadata22("design:type", String)
 ], CreateDataTableViewDto.prototype, "tableSlug", void 0);
 _ts_decorate31([
-  (0, import_swagger12.ApiProperty)({
+  (0, import_swagger14.ApiProperty)({
     description: "Full table view state including filters, sort, and column visibility"
   }),
   (0, import_class_validator4.IsObject)(),
-  _ts_metadata21("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+  _ts_metadata22("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
 ], CreateDataTableViewDto.prototype, "state", void 0);
 _ts_decorate31([
-  (0, import_swagger12.ApiPropertyOptional)({
+  (0, import_swagger14.ApiPropertyOptional)({
     description: "Whether this view is visible to all users",
     example: false
   }),
   (0, import_class_validator4.IsBoolean)(),
   (0, import_class_validator4.IsOptional)(),
-  _ts_metadata21("design:type", Boolean)
+  _ts_metadata22("design:type", Boolean)
 ], CreateDataTableViewDto.prototype, "isShared", void 0);
 
 // src/data-table/views/dto/request/rename-data-table-view.dto.ts
-var import_swagger13 = require("@nestjs/swagger");
+var import_swagger15 = require("@nestjs/swagger");
 var import_class_validator5 = require("class-validator");
 function _ts_decorate32(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -4734,10 +4499,10 @@ function _ts_decorate32(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate32, "_ts_decorate");
-function _ts_metadata22(k, v) {
+function _ts_metadata23(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata22, "_ts_metadata");
+__name(_ts_metadata23, "_ts_metadata");
 var RenameDataTableViewDto = class {
   static {
     __name(this, "RenameDataTableViewDto");
@@ -4745,18 +4510,18 @@ var RenameDataTableViewDto = class {
   name;
 };
 _ts_decorate32([
-  (0, import_swagger13.ApiProperty)({
+  (0, import_swagger15.ApiProperty)({
     description: "New display name for the view",
     example: "AWS Only"
   }),
   (0, import_class_validator5.IsString)(),
   (0, import_class_validator5.MinLength)(1),
   (0, import_class_validator5.MaxLength)(100),
-  _ts_metadata22("design:type", String)
+  _ts_metadata23("design:type", String)
 ], RenameDataTableViewDto.prototype, "name", void 0);
 
 // src/data-table/views/dto/request/toggle-share-data-table-view.dto.ts
-var import_swagger14 = require("@nestjs/swagger");
+var import_swagger16 = require("@nestjs/swagger");
 var import_class_validator6 = require("class-validator");
 function _ts_decorate33(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -4765,10 +4530,10 @@ function _ts_decorate33(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate33, "_ts_decorate");
-function _ts_metadata23(k, v) {
+function _ts_metadata24(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata23, "_ts_metadata");
+__name(_ts_metadata24, "_ts_metadata");
 var ToggleShareDataTableViewDto = class {
   static {
     __name(this, "ToggleShareDataTableViewDto");
@@ -4776,16 +4541,16 @@ var ToggleShareDataTableViewDto = class {
   isShared;
 };
 _ts_decorate33([
-  (0, import_swagger14.ApiProperty)({
+  (0, import_swagger16.ApiProperty)({
     description: "Whether the view should be visible to all users",
     example: true
   }),
   (0, import_class_validator6.IsBoolean)(),
-  _ts_metadata23("design:type", Boolean)
+  _ts_metadata24("design:type", Boolean)
 ], ToggleShareDataTableViewDto.prototype, "isShared", void 0);
 
 // src/data-table/views/dto/request/update-data-table-view.dto.ts
-var import_swagger15 = require("@nestjs/swagger");
+var import_swagger17 = require("@nestjs/swagger");
 var import_class_validator7 = require("class-validator");
 function _ts_decorate34(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
@@ -4794,10 +4559,10 @@ function _ts_decorate34(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate34, "_ts_decorate");
-function _ts_metadata24(k, v) {
+function _ts_metadata25(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata24, "_ts_metadata");
+__name(_ts_metadata25, "_ts_metadata");
 var UpdateDataTableViewDto = class {
   static {
     __name(this, "UpdateDataTableViewDto");
@@ -4805,150 +4570,150 @@ var UpdateDataTableViewDto = class {
   state;
 };
 _ts_decorate34([
-  (0, import_swagger15.ApiProperty)({
+  (0, import_swagger17.ApiProperty)({
     description: "Updated filter, sort, and column visibility state"
   }),
   (0, import_class_validator7.IsObject)(),
-  _ts_metadata24("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
+  _ts_metadata25("design:type", typeof TableViewState === "undefined" ? Object : TableViewState)
 ], UpdateDataTableViewDto.prototype, "state", void 0);
 
 // src/data-table/views/docs/data-table-views.docs.ts
 function ApiListDataTableViews() {
-  return (0, import_common61.applyDecorators)((0, import_swagger16.ApiOperation)({
+  return (0, import_common58.applyDecorators)((0, import_swagger18.ApiOperation)({
     summary: "List named table views",
     description: "Returns the authenticated user's own named views plus all shared views for the given table slug."
-  }), (0, import_swagger16.ApiQuery)({
+  }), (0, import_swagger18.ApiQuery)({
     name: "tableSlug",
     description: "Slug of the table to fetch views for",
     example: "cloud-providers",
     required: true
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 200,
     description: "Named views retrieved.",
     type: [
       DataTableViewDto
     ]
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 401,
     description: "Unauthorized."
   }));
 }
 __name(ApiListDataTableViews, "ApiListDataTableViews");
 function ApiCreateDataTableView() {
-  return (0, import_common61.applyDecorators)((0, import_swagger16.ApiOperation)({
+  return (0, import_common58.applyDecorators)((0, import_swagger18.ApiOperation)({
     summary: "Create named table view",
     description: "Saves the current table state as a named view snapshot. The name must be unique per user+table."
-  }), (0, import_swagger16.ApiBody)({
+  }), (0, import_swagger18.ApiBody)({
     type: CreateDataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 201,
     description: "Named view created.",
     type: DataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 400,
     description: "Invalid request body."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 401,
     description: "Unauthorized."
   }));
 }
 __name(ApiCreateDataTableView, "ApiCreateDataTableView");
 function ApiUpdateDataTableView() {
-  return (0, import_common61.applyDecorators)((0, import_swagger16.ApiOperation)({
+  return (0, import_common58.applyDecorators)((0, import_swagger18.ApiOperation)({
     summary: "Update named table view",
     description: "Updates the state of an existing named view. Only the owner can update."
-  }), (0, import_swagger16.ApiParam)({
+  }), (0, import_swagger18.ApiParam)({
     name: "id",
     description: "UUID of the table view to update"
-  }), (0, import_swagger16.ApiBody)({
+  }), (0, import_swagger18.ApiBody)({
     type: UpdateDataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 200,
     description: "View updated.",
     type: DataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 400,
     description: "Validation failed or not owned by caller."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 401,
     description: "Unauthorized."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 404,
     description: "View not found."
   }));
 }
 __name(ApiUpdateDataTableView, "ApiUpdateDataTableView");
 function ApiRenameDataTableView() {
-  return (0, import_common61.applyDecorators)((0, import_swagger16.ApiOperation)({
+  return (0, import_common58.applyDecorators)((0, import_swagger18.ApiOperation)({
     summary: "Rename a named table view",
     description: "Updates the display name of an existing view. The new name must be unique per user+table. Only the owner can rename."
-  }), (0, import_swagger16.ApiParam)({
+  }), (0, import_swagger18.ApiParam)({
     name: "id",
     description: "UUID of the table view to rename"
-  }), (0, import_swagger16.ApiBody)({
+  }), (0, import_swagger18.ApiBody)({
     type: RenameDataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 200,
     description: "View renamed.",
     type: DataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 400,
     description: "Not owned by caller."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 401,
     description: "Unauthorized."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 404,
     description: "View not found."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 409,
     description: "A view with this name already exists."
   }));
 }
 __name(ApiRenameDataTableView, "ApiRenameDataTableView");
 function ApiToggleShareDataTableView() {
-  return (0, import_common61.applyDecorators)((0, import_swagger16.ApiOperation)({
+  return (0, import_common58.applyDecorators)((0, import_swagger18.ApiOperation)({
     summary: "Toggle view sharing",
     description: "Makes a view visible to all users (shared) or restricts it to the owner only (private). Only the owner can toggle sharing."
-  }), (0, import_swagger16.ApiParam)({
+  }), (0, import_swagger18.ApiParam)({
     name: "id",
     description: "UUID of the table view"
-  }), (0, import_swagger16.ApiBody)({
+  }), (0, import_swagger18.ApiBody)({
     type: ToggleShareDataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 200,
     description: "Sharing status updated.",
     type: DataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 400,
     description: "Not owned by caller."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 401,
     description: "Unauthorized."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 404,
     description: "View not found."
   }));
 }
 __name(ApiToggleShareDataTableView, "ApiToggleShareDataTableView");
 function ApiDeleteDataTableView() {
-  return (0, import_common61.applyDecorators)((0, import_swagger16.ApiOperation)({
+  return (0, import_common58.applyDecorators)((0, import_swagger18.ApiOperation)({
     summary: "Delete named table view",
     description: "Permanently deletes a named view. Only the owner can delete their own views."
-  }), (0, import_swagger16.ApiParam)({
+  }), (0, import_swagger18.ApiParam)({
     name: "id",
     description: "UUID of the table view to delete"
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 200,
     description: "View deleted.",
     type: DataTableViewDto
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 400,
     description: "Not owned by caller."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 401,
     description: "Unauthorized."
-  }), (0, import_swagger16.ApiResponse)({
+  }), (0, import_swagger18.ApiResponse)({
     status: 404,
     description: "View not found."
   }));
@@ -4957,12 +4722,12 @@ __name(ApiDeleteDataTableView, "ApiDeleteDataTableView");
 
 // src/data-table/views/services/data-table-views.service.ts
 var import_node_crypto2 = require("crypto");
-var import_common63 = require("@nestjs/common");
-var import_config13 = require("@nestjs/config");
+var import_common60 = require("@nestjs/common");
+var import_config14 = require("@nestjs/config");
 
 // src/data-table/views/repositories/data-table-views.repository.ts
-var import_common62 = require("@nestjs/common");
-var import_drizzle_orm5 = require("drizzle-orm");
+var import_common59 = require("@nestjs/common");
+var import_drizzle_orm3 = require("drizzle-orm");
 function _ts_decorate35(decorators, target, key, desc2) {
   var c = arguments.length, r = c < 3 ? target : desc2 === null ? desc2 = Object.getOwnPropertyDescriptor(target, key) : desc2, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc2);
@@ -4970,16 +4735,16 @@ function _ts_decorate35(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate35, "_ts_decorate");
-function _ts_metadata25(k, v) {
+function _ts_metadata26(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata25, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata26, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param8, "_ts_param");
 var NAMED_VIEWS_LIMIT = 100;
 var DataTableViewsRepository = class extends PrimaryBaseRepository {
   static {
@@ -4991,19 +4756,19 @@ var DataTableViewsRepository = class extends PrimaryBaseRepository {
   // Returns personal (non-shared) named views owned by the user for a given table
   async findPersonalViewsBySlug(userId, tableSlug) {
     const t = this.table;
-    return this.db.select().from(this.table).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(t.tableSlug, tableSlug), (0, import_drizzle_orm5.eq)(t.userId, userId), (0, import_drizzle_orm5.eq)(t.isShared, false))).orderBy(t.createdAt).limit(NAMED_VIEWS_LIMIT);
+    return this.db.select().from(this.table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(t.tableSlug, tableSlug), (0, import_drizzle_orm3.eq)(t.userId, userId), (0, import_drizzle_orm3.eq)(t.isShared, false))).orderBy(t.createdAt).limit(NAMED_VIEWS_LIMIT);
   }
   // Returns all shared named views for a given table — visible to all users
   async findSharedViewsBySlug(tableSlug) {
     const t = this.table;
-    return this.db.select().from(this.table).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(t.tableSlug, tableSlug), (0, import_drizzle_orm5.eq)(t.isShared, true))).orderBy(t.createdAt).limit(NAMED_VIEWS_LIMIT);
+    return this.db.select().from(this.table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(t.tableSlug, tableSlug), (0, import_drizzle_orm3.eq)(t.isShared, true))).orderBy(t.createdAt).limit(NAMED_VIEWS_LIMIT);
   }
 };
 DataTableViewsRepository = _ts_decorate35([
-  (0, import_common62.Injectable)(),
-  _ts_param9(1, (0, import_common62.Inject)(DATA_TABLE_VIEWS_TABLE)),
-  _ts_metadata25("design:type", Function),
-  _ts_metadata25("design:paramtypes", [
+  (0, import_common59.Injectable)(),
+  _ts_param8(1, (0, import_common59.Inject)(DATA_TABLE_VIEWS_TABLE)),
+  _ts_metadata26("design:type", Function),
+  _ts_metadata26("design:paramtypes", [
     typeof PrimaryDatabaseService === "undefined" ? Object : PrimaryDatabaseService,
     typeof PgTable === "undefined" ? Object : PgTable
   ])
@@ -5017,10 +4782,10 @@ function _ts_decorate36(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate36, "_ts_decorate");
-function _ts_metadata26(k, v) {
+function _ts_metadata27(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata26, "_ts_metadata");
+__name(_ts_metadata27, "_ts_metadata");
 function computeChecksum(value) {
   return (0, import_node_crypto2.createHash)("sha256").update(JSON.stringify(value)).digest("hex");
 }
@@ -5032,7 +4797,7 @@ var DataTableViewsService = class _DataTableViewsService {
   dataTableViewsRepository;
   cacheService;
   configService;
-  logger = new import_common63.Logger(_DataTableViewsService.name);
+  logger = new import_common60.Logger(_DataTableViewsService.name);
   constructor(dataTableViewsRepository, cacheService, configService) {
     this.dataTableViewsRepository = dataTableViewsRepository;
     this.cacheService = cacheService;
@@ -5176,12 +4941,12 @@ var DataTableViewsService = class _DataTableViewsService {
   }
 };
 DataTableViewsService = _ts_decorate36([
-  (0, import_common63.Injectable)(),
-  _ts_metadata26("design:type", Function),
-  _ts_metadata26("design:paramtypes", [
+  (0, import_common60.Injectable)(),
+  _ts_metadata27("design:type", Function),
+  _ts_metadata27("design:paramtypes", [
     typeof DataTableViewsRepository === "undefined" ? Object : DataTableViewsRepository,
     typeof CacheService === "undefined" ? Object : CacheService,
-    typeof import_config13.ConfigService === "undefined" ? Object : import_config13.ConfigService
+    typeof import_config14.ConfigService === "undefined" ? Object : import_config14.ConfigService
   ])
 ], DataTableViewsService);
 
@@ -5193,22 +4958,22 @@ function _ts_decorate37(decorators, target, key, desc2) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate37, "_ts_decorate");
-function _ts_metadata27(k, v) {
+function _ts_metadata28(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata27, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata28, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var DataTableViewsController = class _DataTableViewsController {
   static {
     __name(this, "DataTableViewsController");
   }
   dataTableViewsService;
-  logger = new import_common64.Logger(_DataTableViewsController.name);
+  logger = new import_common61.Logger(_DataTableViewsController.name);
   constructor(dataTableViewsService) {
     this.dataTableViewsService = dataTableViewsService;
   }
@@ -5244,90 +5009,91 @@ var DataTableViewsController = class _DataTableViewsController {
   }
 };
 _ts_decorate37([
-  (0, import_common64.Get)(),
+  (0, import_common61.Get)(),
   ApiListDataTableViews(),
-  _ts_param10(0, UserId()),
-  _ts_param10(1, (0, import_common64.Query)("tableSlug")),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_param9(0, UserId()),
+  _ts_param9(1, (0, import_common61.Query)("tableSlug")),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     String,
     String
   ]),
-  _ts_metadata27("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata28("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableViewsController.prototype, "findViews", null);
 _ts_decorate37([
-  (0, import_common64.Post)(),
-  (0, import_common64.HttpCode)(import_common64.HttpStatus.CREATED),
+  (0, import_common61.Post)(),
+  (0, import_common61.HttpCode)(import_common61.HttpStatus.CREATED),
   ApiCreateDataTableView(),
-  _ts_param10(0, UserId()),
-  _ts_param10(1, (0, import_common64.Body)()),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_param9(0, UserId()),
+  _ts_param9(1, (0, import_common61.Body)()),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     String,
     typeof CreateDataTableViewDto === "undefined" ? Object : CreateDataTableViewDto
   ]),
-  _ts_metadata27("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata28("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableViewsController.prototype, "createView", null);
 _ts_decorate37([
-  (0, import_common64.Patch)(":id"),
+  (0, import_common61.Patch)(":id"),
   ApiUpdateDataTableView(),
-  _ts_param10(0, UserId()),
-  _ts_param10(1, (0, import_common64.Param)("id")),
-  _ts_param10(2, (0, import_common64.Body)()),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_param9(0, UserId()),
+  _ts_param9(1, (0, import_common61.Param)("id")),
+  _ts_param9(2, (0, import_common61.Body)()),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     String,
     String,
     typeof UpdateDataTableViewDto === "undefined" ? Object : UpdateDataTableViewDto
   ]),
-  _ts_metadata27("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata28("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableViewsController.prototype, "updateView", null);
 _ts_decorate37([
-  (0, import_common64.Patch)(":id/rename"),
+  (0, import_common61.Patch)(":id/rename"),
   ApiRenameDataTableView(),
-  _ts_param10(0, UserId()),
-  _ts_param10(1, (0, import_common64.Param)("id")),
-  _ts_param10(2, (0, import_common64.Body)()),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_param9(0, UserId()),
+  _ts_param9(1, (0, import_common61.Param)("id")),
+  _ts_param9(2, (0, import_common61.Body)()),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     String,
     String,
     typeof RenameDataTableViewDto === "undefined" ? Object : RenameDataTableViewDto
   ]),
-  _ts_metadata27("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata28("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableViewsController.prototype, "renameView", null);
 _ts_decorate37([
-  (0, import_common64.Patch)(":id/share"),
+  (0, import_common61.Patch)(":id/share"),
   ApiToggleShareDataTableView(),
-  _ts_param10(0, UserId()),
-  _ts_param10(1, (0, import_common64.Param)("id")),
-  _ts_param10(2, (0, import_common64.Body)()),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_param9(0, UserId()),
+  _ts_param9(1, (0, import_common61.Param)("id")),
+  _ts_param9(2, (0, import_common61.Body)()),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     String,
     String,
     typeof ToggleShareDataTableViewDto === "undefined" ? Object : ToggleShareDataTableViewDto
   ]),
-  _ts_metadata27("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata28("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableViewsController.prototype, "toggleShareView", null);
 _ts_decorate37([
-  (0, import_common64.Delete)(":id"),
+  (0, import_common61.Delete)(":id"),
   ApiDeleteDataTableView(),
-  _ts_param10(0, UserId()),
-  _ts_param10(1, (0, import_common64.Param)("id")),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  _ts_param9(0, UserId()),
+  _ts_param9(1, (0, import_common61.Param)("id")),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     String,
     String
   ]),
-  _ts_metadata27("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  _ts_metadata28("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], DataTableViewsController.prototype, "deleteView", null);
 DataTableViewsController = _ts_decorate37([
-  (0, import_swagger17.ApiTags)("Table Views"),
-  (0, import_swagger17.ApiBearerAuth)(),
-  (0, import_common64.Controller)("table-views"),
-  _ts_metadata27("design:type", Function),
-  _ts_metadata27("design:paramtypes", [
+  (0, import_swagger19.ApiTags)("Table Views"),
+  (0, import_swagger19.ApiBearerAuth)(),
+  RequireSession("CLOUD", "ADMIN"),
+  (0, import_common61.Controller)("table-views"),
+  _ts_metadata28("design:type", Function),
+  _ts_metadata28("design:paramtypes", [
     typeof DataTableViewsService === "undefined" ? Object : DataTableViewsService
   ])
 ], DataTableViewsController);
@@ -5349,7 +5115,7 @@ var DataTableModule = class _DataTableModule {
       global: true,
       module: _DataTableModule,
       imports: [
-        import_config14.ConfigModule,
+        import_config15.ConfigModule,
         CacheModule
       ],
       controllers: [
@@ -5373,7 +5139,7 @@ var DataTableModule = class _DataTableModule {
   }
 };
 DataTableModule = _ts_decorate38([
-  (0, import_common65.Module)({})
+  (0, import_common62.Module)({})
 ], DataTableModule);
 
 // src/drizzle-pg-core.ts
@@ -5423,6 +5189,7 @@ __name(dataTableViewsIndexes, "dataTableViewsIndexes");
   CookieDomain,
   CorrelationIdMiddleware,
   CreateDataTableViewDto,
+  CreateResponseDto,
   DATA_TABLE_VIEWS_TABLE,
   DEFAULT_CORRELATION_HEADER,
   DataTableModule,
@@ -5438,6 +5205,8 @@ __name(dataTableViewsIndexes, "dataTableViewsIndexes");
   HttpExceptionFilter,
   HttpLoggerInterceptor,
   HttpProblemException,
+  ImportResponseDto,
+  ImportSummaryDto,
   InternalServerErrorException,
   JwtAuthService,
   LOGGER_MODULE_OPTIONS,
@@ -5447,30 +5216,26 @@ __name(dataTableViewsIndexes, "dataTableViewsIndexes");
   NotAcceptableException,
   NotFoundException,
   NotImplementedException,
-  Onboarding,
   PayloadTooLargeException,
   PrimaryBaseRepository,
   PrimaryDatabaseService,
   Public,
-  RESET_KEY,
+  REQUIRE_SESSION_KEY,
   RedisCacheProvider,
   RefreshCookieOptions,
   RefreshTokenCookie,
   RenameDataTableViewDto,
   RequestTimeoutException,
-  Reset,
+  RequireSession,
   RootModule,
   SKIP_CSRF_KEY,
   SelectOptionsQueryDto,
   ServiceUnavailableException,
   SessionData,
   SkipCsrf,
+  Subdomain,
   SuccessResponseDto,
   TableResponseDto,
-  Tenant,
-  TenantBaseRepository,
-  TenantContextService,
-  TenantDatabaseService,
   ToggleShareDataTableViewDto,
   TokenType,
   TooManyRequestsException,
@@ -5478,8 +5243,10 @@ __name(dataTableViewsIndexes, "dataTableViewsIndexes");
   UnprocessableEntityException,
   UnsupportedMediaTypeException,
   UpdateDataTableViewDto,
+  UploadedFile,
   UpsertDataTableStateDto,
   UserId,
+  ValidatedRowDto,
   ValidationException,
   VrittiAuthGuard,
   addCorrelationIdToResponse,