alepha 0.14.1 → 0.14.3

package/dist/api/users/index.d.ts

@@ -2,15 +2,16 @@ import * as alepha23 from "alepha";
 import { Alepha, AlephaError, Page, PageQuery, Primitive, Static, StaticEncode, TNull, TObject, TOptional, TSchema, TUnion } from "alepha";
 import * as alepha_api_notifications0 from "alepha/api/notifications";
 import { VerificationController } from "alepha/api/verifications";
-import * as alepha_orm204 from "alepha/orm";
-import { Page as Page$1, Repository } from "alepha/orm";
 import * as alepha_server0 from "alepha/server";
-import * as alepha_logger1 from "alepha/logger";
+import * as alepha_orm24 from "alepha/orm";
+import { Page as Page$1, Repository } from "alepha/orm";
+import { AuditService } from "alepha/api/audits";
+import * as alepha_logger5 from "alepha/logger";
 import * as alepha_bucket0 from "alepha/bucket";
+import * as alepha_server_links0 from "alepha/server/links";
 import * as alepha_cache0 from "alepha/cache";
 import { DateTime, DateTimeProvider } from "alepha/datetime";
 import { CryptoProvider, RealmPrimitive, RealmPrimitiveOptions, UserAccount } from "alepha/security";
-import * as alepha_server_links0 from "alepha/server/links";
 import { OAuth2Profile, ServerAuthProvider, WithLinkFn, WithLoginFn } from "alepha/server/auth";
 import { FileSystemProvider } from "alepha/file";
 import { FileController } from "alepha/api/files";
@@ -58,485 +59,91 @@ declare const realmAuthSettingsAtom: alepha23.Atom<alepha23.TObject<{
 }>, "alepha.api.users.realmAuthSettings">;
 type RealmAuthSettings = Static<typeof realmAuthSettingsAtom.schema>;
 //#endregion
-//#region ../../src/api/users/entities/identities.d.ts
-declare const identities: alepha_orm204.EntityPrimitive<alepha23.TObject<{
-  id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-  version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-  createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-  updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-  userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-  password: alepha23.TOptional<alepha23.TString>;
-  provider: alepha23.TString;
-  providerUserId: alepha23.TOptional<alepha23.TString>;
-  providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
-}>>;
-type IdentityEntity = Static<typeof identities.schema>;
-//#endregion
-//#region ../../src/api/users/entities/sessions.d.ts
-declare const sessions: alepha_orm204.EntityPrimitive<alepha23.TObject<{
-  id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-  version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-  createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-  updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-  refreshToken: alepha23.TString;
-  userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-  expiresAt: alepha23.TString;
-  ip: alepha23.TOptional<alepha23.TString>;
-  userAgent: alepha23.TOptional<alepha23.TObject<{
-    os: alepha23.TString;
-    browser: alepha23.TString;
-    device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-  }>>;
-}>>;
-type SessionEntity = Static<typeof sessions.schema>;
-//#endregion
-//#region ../../src/api/users/entities/users.d.ts
-declare const DEFAULT_USER_REALM_NAME = "default";
-declare const users: alepha_orm204.EntityPrimitive<alepha23.TObject<{
-  id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-  version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-  createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-  updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-  realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-  username: alepha23.TOptional<alepha23.TString>;
-  email: alepha23.TOptional<alepha23.TString>;
-  phoneNumber: alepha23.TOptional<alepha23.TString>;
-  roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-  firstName: alepha23.TOptional<alepha23.TString>;
-  lastName: alepha23.TOptional<alepha23.TString>;
-  picture: alepha23.TOptional<alepha23.TString>;
-  enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-  emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-}>>;
-type UserEntity = Static<typeof users.schema>;
-//#endregion
-//#region ../../src/api/users/primitives/$userRealm.d.ts
-type UserRealmPrimitive = RealmPrimitive & WithLinkFn & WithLoginFn;
+//#region ../../src/orm/schemas/insertSchema.d.ts
 /**
- * Already configured realm for user management.
- *
- * Realm contains two roles: `admin` and `user`.
- *
- * - `admin`: Has full access to all resources and permissions.
- * - `user`: Has access to their own resources and permissions, but cannot access admin-level resources.
- *
- * Realm uses session management for handling user sessions.
+ * Transforms a TObject schema for insert operations.
+ * All default properties at the root level are made optional.
  *
- * Environment Variables:
- * - `APP_SECRET`: Secret key for signing tokens (if not provided in options).
+ * @example
+ * Before: { name: string; age: number(default=0); }
+ * After:  { name: string; age?: number; }
  */
-declare const $userRealm: (options?: UserRealmOptions) => UserRealmPrimitive;
-interface UserRealmOptions {
-  /**
-   * Secret key for signing tokens.
-   *
-   * If not provided, the secret from the SecurityProvider will be used (usually from the APP_SECRET environment variable).
-   */
-  secret?: string;
-  /**
-   * Realm configuration options.
-   *
-   * It's already pre-configured for user management with admin and user roles.
-   */
-  realm?: Partial<RealmPrimitiveOptions>;
-  /**
-   * Override entities.
-   */
-  entities?: {
-    users?: Repository<typeof users.schema>;
-    identities?: Repository<typeof identities.schema>;
-    sessions?: Repository<typeof sessions.schema>;
-  };
-  settings?: Partial<RealmAuthSettings>;
-  identities?: {
-    credentials?: true;
-    google?: true;
-    github?: true;
-  };
-  modules?: {
-    files?: boolean;
-    audits?: boolean;
-    jobs?: boolean;
-  };
-}
-//#endregion
-//#region ../../src/api/users/providers/UserRealmProvider.d.ts
-interface UserRealmRepositories {
-  identities: Repository<typeof identities.schema>;
-  sessions: Repository<typeof sessions.schema>;
-  users: Repository<typeof users.schema>;
-}
-interface UserRealm {
-  name: string;
-  repositories: UserRealmRepositories;
-  settings: RealmAuthSettings;
-}
-declare class UserRealmProvider {
-  protected readonly alepha: Alepha;
-  protected readonly defaultIdentities: Repository<alepha23.TObject<{
-    id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-    version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-    createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-    password: alepha23.TOptional<alepha23.TString>;
-    provider: alepha23.TString;
-    providerUserId: alepha23.TOptional<alepha23.TString>;
-    providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
-  }>>;
-  protected readonly defaultSessions: Repository<alepha23.TObject<{
-    id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-    version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-    createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    refreshToken: alepha23.TString;
-    userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-    expiresAt: alepha23.TString;
-    ip: alepha23.TOptional<alepha23.TString>;
-    userAgent: alepha23.TOptional<alepha23.TObject<{
-      os: alepha23.TString;
-      browser: alepha23.TString;
-      device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-    }>>;
-  }>>;
-  protected readonly defaultUsers: Repository<alepha23.TObject<{
-    id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-    version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-    createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-    username: alepha23.TOptional<alepha23.TString>;
-    email: alepha23.TOptional<alepha23.TString>;
-    phoneNumber: alepha23.TOptional<alepha23.TString>;
-    roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-    firstName: alepha23.TOptional<alepha23.TString>;
-    lastName: alepha23.TOptional<alepha23.TString>;
-    picture: alepha23.TOptional<alepha23.TString>;
-    enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-  }>>;
-  protected realms: Map<string, UserRealm>;
-  avatars: alepha_bucket0.BucketPrimitive;
-  protected readonly onConfigure: alepha23.HookPrimitive<"configure">;
-  register(userRealmName: string, userRealmOptions?: UserRealmOptions): UserRealm;
-  /**
-   * Gets a registered realm by name, auto-creating default if needed.
-   */
-  getRealm(userRealmName?: string): UserRealm;
-  identityRepository(userRealmName?: string): Repository<typeof identities.schema>;
-  sessionRepository(userRealmName?: string): Repository<typeof sessions.schema>;
-  userRepository(userRealmName?: string): Repository<typeof users.schema>;
-}
+type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends {
+  [PG_DEFAULT]: any;
+} | {
+  "~optional": true;
+} ? TOptional<T["properties"][K]> : T["properties"][K] }>;
 //#endregion
-//#region ../../src/api/users/schemas/identityQuerySchema.d.ts
-declare const identityQuerySchema: alepha23.TObject<{
-  page: alepha23.TOptional<alepha23.TInteger>;
-  size: alepha23.TOptional<alepha23.TInteger>;
-  sort: alepha23.TOptional<alepha23.TString>;
-  userId: alepha23.TOptional<alepha23.TString>;
-  provider: alepha23.TOptional<alepha23.TString>;
-}>;
-type IdentityQuery = Static<typeof identityQuerySchema>;
+//#region ../../src/orm/schemas/updateSchema.d.ts
+/**
+ * Transforms a TObject schema for update operations.
+ * All optional properties at the root level are made nullable (i.e., `T | null`).
+ * This allows an API endpoint to explicitly accept `null` to clear an optional field in the database.
+ *
+ * @example
+ * Before: { name?: string; age: number; }
+ * After:  { name?: string | null; age: number; }
+ */
+type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
 //#endregion
-//#region ../../src/api/users/services/IdentityService.d.ts
-declare class IdentityService {
-  protected readonly log: alepha_logger1.Logger;
-  protected readonly userRealmProvider: UserRealmProvider;
-  identities(userRealmName?: string): alepha_orm204.Repository<alepha23.TObject<{
-    id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-    version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-    createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-    password: alepha23.TOptional<alepha23.TString>;
-    provider: alepha23.TString;
-    providerUserId: alepha23.TOptional<alepha23.TString>;
-    providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
-  }>>;
+//#region ../../src/orm/primitives/$entity.d.ts
+interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
   /**
-   * Find identities with pagination and filtering.
+   * The database table name that will be created for this entity.
+   * If not provided, name will be inferred from the $repository variable name.
    */
-  findIdentities(q?: IdentityQuery, userRealmName?: string): Promise<Page$1<IdentityEntity>>;
+  name: string;
   /**
-   * Get an identity by ID.
+   * TypeBox schema defining the table structure and column types.
    */
-  getIdentityById(id: string, userRealmName?: string): Promise<IdentityEntity>;
+  schema: T;
   /**
-   * Delete an identity by ID.
+   * Database indexes to create for query optimization.
    */
-  deleteIdentity(id: string, userRealmName?: string): Promise<void>;
-}
-//#endregion
-//#region ../../src/api/users/controllers/IdentityController.d.ts
-declare class IdentityController {
-  protected readonly url = "/identities";
-  protected readonly group = "identities";
-  protected readonly identityService: IdentityService;
+  indexes?: (Keys | {
+    /**
+     * Single column to index.
+     */
+    column: Keys;
+    /**
+     * Whether this should be a unique index (enforces uniqueness constraint).
+     */
+    unique?: boolean;
+    /**
+     * Custom name for the index. If not provided, generates name automatically.
+     */
+    name?: string;
+  } | {
+    /**
+     * Multiple columns for composite index (order matters for query optimization).
+     */
+    columns: Keys[];
+    /**
+     * Whether this should be a unique index (enforces uniqueness constraint).
+     */
+    unique?: boolean;
+    /**
+     * Custom name for the index. If not provided, generates name automatically.
+     */
+    name?: string;
+  })[];
   /**
-   * Find identities with pagination and filtering.
+   * Foreign key constraints to maintain referential integrity.
    */
-  readonly findIdentities: alepha_server0.ActionPrimitiveFn<{
-    query: alepha23.TObject<{
-      page: alepha23.TOptional<alepha23.TInteger>;
-      size: alepha23.TOptional<alepha23.TInteger>;
-      sort: alepha23.TOptional<alepha23.TString>;
-      userId: alepha23.TOptional<alepha23.TString>;
-      provider: alepha23.TOptional<alepha23.TString>;
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TPage<alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-      provider: alepha23.TString;
-      providerUserId: alepha23.TOptional<alepha23.TString>;
-      providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
-    }>>;
-  }>;
-  /**
-   * Get an identity by ID.
-   */
-  readonly getIdentity: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-      provider: alepha23.TString;
-      providerUserId: alepha23.TOptional<alepha23.TString>;
-      providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
-    }>;
-  }>;
-  /**
-   * Delete an identity.
-   */
-  readonly deleteIdentity: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TObject<{
-      ok: alepha23.TBoolean;
-      id: alepha23.TOptional<alepha23.TUnion<[alepha23.TString, alepha23.TInteger]>>;
-      count: alepha23.TOptional<alepha23.TNumber>;
-    }>;
-  }>;
-}
-//#endregion
-//#region ../../src/api/users/schemas/sessionQuerySchema.d.ts
-declare const sessionQuerySchema: alepha23.TObject<{
-  page: alepha23.TOptional<alepha23.TInteger>;
-  size: alepha23.TOptional<alepha23.TInteger>;
-  sort: alepha23.TOptional<alepha23.TString>;
-  userId: alepha23.TOptional<alepha23.TString>;
-}>;
-type SessionQuery = Static<typeof sessionQuerySchema>;
-//#endregion
-//#region ../../src/api/users/services/SessionCrudService.d.ts
-declare class SessionCrudService {
-  protected readonly log: alepha_logger1.Logger;
-  protected readonly userRealmProvider: UserRealmProvider;
-  sessions(userRealmName?: string): alepha_orm204.Repository<alepha23.TObject<{
-    id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-    version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-    createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    refreshToken: alepha23.TString;
-    userId: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_REF>;
-    expiresAt: alepha23.TString;
-    ip: alepha23.TOptional<alepha23.TString>;
-    userAgent: alepha23.TOptional<alepha23.TObject<{
-      os: alepha23.TString;
-      browser: alepha23.TString;
-      device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-    }>>;
-  }>>;
-  /**
-   * Find sessions with pagination and filtering.
-   */
-  findSessions(q?: SessionQuery, userRealmName?: string): Promise<Page$1<SessionEntity>>;
-  /**
-   * Get a session by ID.
-   */
-  getSessionById(id: string, userRealmName?: string): Promise<SessionEntity>;
-  /**
-   * Delete a session by ID.
-   */
-  deleteSession(id: string, userRealmName?: string): Promise<void>;
-}
-//#endregion
-//#region ../../src/api/users/controllers/SessionController.d.ts
-declare class SessionController {
-  protected readonly url = "/sessions";
-  protected readonly group = "sessions";
-  protected readonly sessionService: SessionCrudService;
-  /**
-   * Find sessions with pagination and filtering.
-   */
-  readonly findSessions: alepha_server0.ActionPrimitiveFn<{
-    query: alepha23.TObject<{
-      page: alepha23.TOptional<alepha23.TInteger>;
-      size: alepha23.TOptional<alepha23.TInteger>;
-      sort: alepha23.TOptional<alepha23.TString>;
-      userId: alepha23.TOptional<alepha23.TString>;
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TPage<alepha23.TObject<{
-      id: alepha23.TString;
-      version: alepha23.TNumber;
-      createdAt: alepha23.TString;
-      updatedAt: alepha23.TString;
-      refreshToken: alepha23.TString;
-      userId: alepha23.TString;
-      expiresAt: alepha23.TString;
-      ip: alepha23.TOptional<alepha23.TString>;
-      userAgent: alepha23.TOptional<alepha23.TObject<{
-        os: alepha23.TString;
-        browser: alepha23.TString;
-        device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-      }>>;
-    }>>;
-  }>;
-  /**
-   * Get a session by ID.
-   */
-  readonly getSession: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TObject<{
-      id: alepha23.TString;
-      version: alepha23.TNumber;
-      createdAt: alepha23.TString;
-      updatedAt: alepha23.TString;
-      refreshToken: alepha23.TString;
-      userId: alepha23.TString;
-      expiresAt: alepha23.TString;
-      ip: alepha23.TOptional<alepha23.TString>;
-      userAgent: alepha23.TOptional<alepha23.TObject<{
-        os: alepha23.TString;
-        browser: alepha23.TString;
-        device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-      }>>;
-    }>;
-  }>;
-  /**
-   * Delete a session.
-   */
-  readonly deleteSession: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TObject<{
-      ok: alepha23.TBoolean;
-      id: alepha23.TOptional<alepha23.TUnion<[alepha23.TString, alepha23.TInteger]>>;
-      count: alepha23.TOptional<alepha23.TNumber>;
-    }>;
-  }>;
-}
-//#endregion
-//#region ../../src/orm/schemas/insertSchema.d.ts
-/**
- * Transforms a TObject schema for insert operations.
- * All default properties at the root level are made optional.
- *
- * @example
- * Before: { name: string; age: number(default=0); }
- * After:  { name: string; age?: number; }
- */
-type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends {
-  [PG_DEFAULT]: any;
-} | {
-  "~optional": true;
-} ? TOptional<T["properties"][K]> : T["properties"][K] }>;
-//#endregion
-//#region ../../src/orm/schemas/updateSchema.d.ts
-/**
- * Transforms a TObject schema for update operations.
- * All optional properties at the root level are made nullable (i.e., `T | null`).
- * This allows an API endpoint to explicitly accept `null` to clear an optional field in the database.
- *
- * @example
- * Before: { name?: string; age: number; }
- * After:  { name?: string | null; age: number; }
- */
-type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
-//#endregion
-//#region ../../src/orm/primitives/$entity.d.ts
-interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
-  /**
-   * The database table name that will be created for this entity.
-   * If not provided, name will be inferred from the $repository variable name.
-   */
-  name: string;
-  /**
-   * TypeBox schema defining the table structure and column types.
-   */
-  schema: T;
-  /**
-   * Database indexes to create for query optimization.
-   */
-  indexes?: (Keys | {
-    /**
-     * Single column to index.
-     */
-    column: Keys;
-    /**
-     * Whether this should be a unique index (enforces uniqueness constraint).
-     */
-    unique?: boolean;
-    /**
-     * Custom name for the index. If not provided, generates name automatically.
-     */
-    name?: string;
-  } | {
-    /**
-     * Multiple columns for composite index (order matters for query optimization).
-     */
-    columns: Keys[];
-    /**
-     * Whether this should be a unique index (enforces uniqueness constraint).
-     */
-    unique?: boolean;
-    /**
-     * Custom name for the index. If not provided, generates name automatically.
-     */
-    name?: string;
-  })[];
-  /**
-   * Foreign key constraints to maintain referential integrity.
-   */
-  foreignKeys?: Array<{
-    /**
-     * Optional name for the foreign key constraint.
-     */
-    name?: string;
-    /**
-     * Local columns that reference the foreign table.
-     */
-    columns: Array<keyof Static<T>>;
-    /**
-     * Referenced columns in the foreign table.
-     * Must be EntityColumn references from other entities.
-     */
-    foreignColumns: Array<() => EntityColumn<any>>;
+  foreignKeys?: Array<{
+    /**
+     * Optional name for the foreign key constraint.
+     */
+    name?: string;
+    /**
+     * Local columns that reference the foreign table.
+     */
+    columns: Array<keyof Static<T>>;
+    /**
+     * Referenced columns in the foreign table.
+     * Must be EntityColumn references from other entities.
+     */
+    foreignColumns: Array<() => EntityColumn<any>>;
   }>;
   /**
    * Additional table constraints for data validation.
@@ -1303,7 +910,7 @@ declare abstract class ModelBuilder {
 //#endregion
 //#region ../../src/orm/providers/DrizzleKitProvider.d.ts
 declare class DrizzleKitProvider {
-  protected readonly log: alepha_logger1.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly alepha: Alepha;
   /**
    * Synchronize database with current schema definitions.
@@ -1351,7 +958,7 @@ type DevMigrations = Static<typeof devMigrationsSchema>;
 type SQLLike = SQLWrapper | string;
 declare abstract class DatabaseProvider {
   protected readonly alepha: Alepha;
-  protected readonly log: alepha_logger1.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected abstract readonly builder: ModelBuilder;
   protected abstract readonly kit: DrizzleKitProvider;
   abstract readonly db: PgDatabase<any>;
@@ -1374,7 +981,7 @@ declare abstract class DatabaseProvider {
   /**
    * Base migration orchestration - handles environment logic
    */
-  protected migrateDatabase(): Promise<void>;
+  migrate(): Promise<void>;
   /**
    * Production: run migrations from folder
    */
@@ -1960,35 +1567,694 @@ declare module "alepha" {
   }
 }
 //#endregion
-//#region ../../src/api/users/notifications/UserNotifications.d.ts
-declare class UserNotifications {
-  readonly passwordReset: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
-    email: alepha23.TString;
-    code: alepha23.TString;
-    expiresInMinutes: alepha23.TNumber;
-  }>>;
-  readonly emailVerification: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
-    email: alepha23.TString;
-    code: alepha23.TString;
-    expiresInMinutes: alepha23.TNumber;
-  }>>;
-  readonly phoneVerification: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
-    phoneNumber: alepha23.TString;
-    code: alepha23.TString;
-    expiresInMinutes: alepha23.TNumber;
-  }>>;
-  readonly passwordResetLink: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
-    email: alepha23.TString;
-    resetUrl: alepha23.TString;
-    expiresInMinutes: alepha23.TNumber;
+//#region ../../src/api/users/entities/identities.d.ts
+declare const identities: alepha_orm24.EntityPrimitive<alepha23.TObject<{
+  id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+  version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+  createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+  updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+  userId: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_REF>;
+  password: alepha23.TOptional<alepha23.TString>;
+  provider: alepha23.TString;
+  providerUserId: alepha23.TOptional<alepha23.TString>;
+  providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
+}>>;
+type IdentityEntity = Static<typeof identities.schema>;
+//#endregion
+//#region ../../src/api/users/entities/sessions.d.ts
+declare const sessions: alepha_orm24.EntityPrimitive<alepha23.TObject<{
+  id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+  version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+  createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+  updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+  refreshToken: alepha23.TString;
+  userId: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_REF>;
+  expiresAt: alepha23.TString;
+  ip: alepha23.TOptional<alepha23.TString>;
+  userAgent: alepha23.TOptional<alepha23.TObject<{
+    os: alepha23.TString;
+    browser: alepha23.TString;
+    device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
   }>>;
-  readonly emailVerificationLink: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
-    email: alepha23.TString;
+}>>;
+type SessionEntity = Static<typeof sessions.schema>;
+//#endregion
+//#region ../../src/api/users/entities/users.d.ts
+declare const DEFAULT_USER_REALM_NAME = "default";
+declare const users: alepha_orm24.EntityPrimitive<alepha23.TObject<{
+  id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+  version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+  createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+  updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+  realm: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_DEFAULT>;
+  username: alepha23.TOptional<alepha23.TString>;
+  email: alepha23.TOptional<alepha23.TString>;
+  phoneNumber: alepha23.TOptional<alepha23.TString>;
+  roles: alepha_orm24.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm24.PG_DEFAULT>;
+  firstName: alepha23.TOptional<alepha23.TString>;
+  lastName: alepha23.TOptional<alepha23.TString>;
+  picture: alepha23.TOptional<alepha23.TString>;
+  enabled: alepha_orm24.PgAttr<alepha23.TBoolean, typeof alepha_orm24.PG_DEFAULT>;
+  emailVerified: alepha_orm24.PgAttr<alepha23.TBoolean, typeof alepha_orm24.PG_DEFAULT>;
+}>>;
+type UserEntity = Static<typeof users.schema>;
+//#endregion
+//#region ../../src/api/users/primitives/$userRealm.d.ts
+type UserRealmPrimitive = RealmPrimitive & WithLinkFn & WithLoginFn;
+/**
+ * Already configured realm for user management.
+ *
+ * Realm contains two roles: `admin` and `user`.
+ *
+ * - `admin`: Has full access to all resources and permissions.
+ * - `user`: Has access to their own resources and permissions, but cannot access admin-level resources.
+ *
+ * Realm uses session management for handling user sessions.
+ *
+ * Environment Variables:
+ * - `APP_SECRET`: Secret key for signing tokens (if not provided in options).
+ */
+declare const $userRealm: (options?: UserRealmOptions) => UserRealmPrimitive;
+interface UserRealmOptions {
+  /**
+   * Secret key for signing tokens.
+   *
+   * If not provided, the secret from the SecurityProvider will be used (usually from the APP_SECRET environment variable).
+   */
+  secret?: string;
+  /**
+   * Realm configuration options.
+   *
+   * It's already pre-configured for user management with admin and user roles.
+   */
+  realm?: Partial<RealmPrimitiveOptions>;
+  /**
+   * Override entities.
+   */
+  entities?: {
+    users?: Repository<typeof users.schema>;
+    identities?: Repository<typeof identities.schema>;
+    sessions?: Repository<typeof sessions.schema>;
+  };
+  settings?: Partial<RealmAuthSettings>;
+  identities?: {
+    credentials?: true;
+    google?: true;
+    github?: true;
+  };
+  modules?: {
+    files?: boolean;
+    audits?: boolean;
+    jobs?: boolean;
+  };
+}
+//#endregion
+//#region ../../src/api/users/providers/UserRealmProvider.d.ts
+interface UserRealmRepositories {
+  identities: Repository<typeof identities.schema>;
+  sessions: Repository<typeof sessions.schema>;
+  users: Repository<typeof users.schema>;
+}
+interface UserRealm {
+  name: string;
+  repositories: UserRealmRepositories;
+  settings: RealmAuthSettings;
+}
+declare class UserRealmProvider {
+  protected readonly alepha: Alepha;
+  protected readonly defaultIdentities: Repository<alepha23.TObject<{
+    id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+    version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+    createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    userId: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_REF>;
+    password: alepha23.TOptional<alepha23.TString>;
+    provider: alepha23.TString;
+    providerUserId: alepha23.TOptional<alepha23.TString>;
+    providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
+  }>>;
+  protected readonly defaultSessions: Repository<alepha23.TObject<{
+    id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+    version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+    createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    refreshToken: alepha23.TString;
+    userId: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_REF>;
+    expiresAt: alepha23.TString;
+    ip: alepha23.TOptional<alepha23.TString>;
+    userAgent: alepha23.TOptional<alepha23.TObject<{
+      os: alepha23.TString;
+      browser: alepha23.TString;
+      device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+    }>>;
+  }>>;
+  protected readonly defaultUsers: Repository<alepha23.TObject<{
+    id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+    version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+    createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    realm: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_DEFAULT>;
+    username: alepha23.TOptional<alepha23.TString>;
+    email: alepha23.TOptional<alepha23.TString>;
+    phoneNumber: alepha23.TOptional<alepha23.TString>;
+    roles: alepha_orm24.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm24.PG_DEFAULT>;
+    firstName: alepha23.TOptional<alepha23.TString>;
+    lastName: alepha23.TOptional<alepha23.TString>;
+    picture: alepha23.TOptional<alepha23.TString>;
+    enabled: alepha_orm24.PgAttr<alepha23.TBoolean, typeof alepha_orm24.PG_DEFAULT>;
+    emailVerified: alepha_orm24.PgAttr<alepha23.TBoolean, typeof alepha_orm24.PG_DEFAULT>;
+  }>>;
+  protected realms: Map<string, UserRealm>;
+  avatars: alepha_bucket0.BucketPrimitive;
+  protected readonly onConfigure: alepha23.HookPrimitive<"configure">;
+  register(userRealmName: string, userRealmOptions?: UserRealmOptions): UserRealm;
+  /**
+   * Gets a registered realm by name, auto-creating default if needed.
+   */
+  getRealm(userRealmName?: string): UserRealm;
+  identityRepository(userRealmName?: string): Repository<typeof identities.schema>;
+  sessionRepository(userRealmName?: string): Repository<typeof sessions.schema>;
+  userRepository(userRealmName?: string): Repository<typeof users.schema>;
+}
+//#endregion
+//#region ../../src/api/users/schemas/identityQuerySchema.d.ts
+declare const identityQuerySchema: alepha23.TObject<{
+  page: alepha23.TOptional<alepha23.TInteger>;
+  size: alepha23.TOptional<alepha23.TInteger>;
+  sort: alepha23.TOptional<alepha23.TString>;
+  userId: alepha23.TOptional<alepha23.TString>;
+  provider: alepha23.TOptional<alepha23.TString>;
+}>;
+type IdentityQuery = Static<typeof identityQuerySchema>;
+//#endregion
+//#region ../../src/api/users/services/IdentityService.d.ts
+declare class IdentityService {
+  protected readonly log: alepha_logger5.Logger;
+  protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
+  identities(userRealmName?: string): alepha_orm24.Repository<alepha23.TObject<{
+    id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+    version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+    createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    userId: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_REF>;
+    password: alepha23.TOptional<alepha23.TString>;
+    provider: alepha23.TString;
+    providerUserId: alepha23.TOptional<alepha23.TString>;
+    providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
+  }>>;
+  /**
+   * Find identities with pagination and filtering.
+   */
+  findIdentities(q?: IdentityQuery, userRealmName?: string): Promise<Page$1<IdentityEntity>>;
+  /**
+   * Get an identity by ID.
+   */
+  getIdentityById(id: string, userRealmName?: string): Promise<IdentityEntity>;
+  /**
+   * Delete an identity by ID.
+   */
+  deleteIdentity(id: string, userRealmName?: string): Promise<void>;
+}
+//#endregion
+//#region ../../src/api/users/controllers/AdminIdentityController.d.ts
+declare class AdminIdentityController {
+  protected readonly url = "/identities";
+  protected readonly group = "admin:identities";
+  protected readonly identityService: IdentityService;
+  /**
+   * Find identities with pagination and filtering.
+   */
+  readonly findIdentities: alepha_server0.ActionPrimitiveFn<{
+    query: alepha23.TObject<{
+      page: alepha23.TOptional<alepha23.TInteger>;
+      size: alepha23.TOptional<alepha23.TInteger>;
+      sort: alepha23.TOptional<alepha23.TString>;
+      userId: alepha23.TOptional<alepha23.TString>;
+      provider: alepha23.TOptional<alepha23.TString>;
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TPage<alepha23.TObject<{
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      userId: PgAttr<alepha23.TString, typeof PG_REF>;
+      provider: alepha23.TString;
+      providerUserId: alepha23.TOptional<alepha23.TString>;
+      providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
+    }>>;
+  }>;
+  /**
+   * Get an identity by ID.
+   */
+  readonly getIdentity: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TObject<{
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      userId: PgAttr<alepha23.TString, typeof PG_REF>;
+      provider: alepha23.TString;
+      providerUserId: alepha23.TOptional<alepha23.TString>;
+      providerData: alepha23.TOptional<alepha23.TRecord<string, alepha23.TAny>>;
+    }>;
+  }>;
+  /**
+   * Delete an identity.
+   */
+  readonly deleteIdentity: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TObject<{
+      ok: alepha23.TBoolean;
+      id: alepha23.TOptional<alepha23.TUnion<[alepha23.TString, alepha23.TInteger]>>;
+      count: alepha23.TOptional<alepha23.TNumber>;
+    }>;
+  }>;
+}
+//#endregion
+//#region ../../src/api/users/schemas/sessionQuerySchema.d.ts
+declare const sessionQuerySchema: alepha23.TObject<{
+  page: alepha23.TOptional<alepha23.TInteger>;
+  size: alepha23.TOptional<alepha23.TInteger>;
+  sort: alepha23.TOptional<alepha23.TString>;
+  userId: alepha23.TOptional<alepha23.TString>;
+}>;
+type SessionQuery = Static<typeof sessionQuerySchema>;
+//#endregion
+//#region ../../src/api/users/services/SessionCrudService.d.ts
+declare class SessionCrudService {
+  protected readonly log: alepha_logger5.Logger;
+  protected readonly userRealmProvider: UserRealmProvider;
+  sessions(userRealmName?: string): alepha_orm24.Repository<alepha23.TObject<{
+    id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+    version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+    createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    refreshToken: alepha23.TString;
+    userId: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_REF>;
+    expiresAt: alepha23.TString;
+    ip: alepha23.TOptional<alepha23.TString>;
+    userAgent: alepha23.TOptional<alepha23.TObject<{
+      os: alepha23.TString;
+      browser: alepha23.TString;
+      device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+    }>>;
+  }>>;
+  /**
+   * Find sessions with pagination and filtering.
+   */
+  findSessions(q?: SessionQuery, userRealmName?: string): Promise<Page$1<SessionEntity>>;
+  /**
+   * Get a session by ID.
+   */
+  getSessionById(id: string, userRealmName?: string): Promise<SessionEntity>;
+  /**
+   * Delete a session by ID.
+   */
+  deleteSession(id: string, userRealmName?: string): Promise<void>;
+}
+//#endregion
+//#region ../../src/api/users/controllers/AdminSessionController.d.ts
+declare class AdminSessionController {
+  protected readonly url = "/sessions";
+  protected readonly group = "admin:sessions";
+  protected readonly sessionService: SessionCrudService;
+  /**
+   * Find sessions with pagination and filtering.
+   */
+  readonly findSessions: alepha_server0.ActionPrimitiveFn<{
+    query: alepha23.TObject<{
+      page: alepha23.TOptional<alepha23.TInteger>;
+      size: alepha23.TOptional<alepha23.TInteger>;
+      sort: alepha23.TOptional<alepha23.TString>;
+      userId: alepha23.TOptional<alepha23.TString>;
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TPage<alepha23.TObject<{
+      id: alepha23.TString;
+      version: alepha23.TNumber;
+      createdAt: alepha23.TString;
+      updatedAt: alepha23.TString;
+      refreshToken: alepha23.TString;
+      userId: alepha23.TString;
+      expiresAt: alepha23.TString;
+      ip: alepha23.TOptional<alepha23.TString>;
+      userAgent: alepha23.TOptional<alepha23.TObject<{
+        os: alepha23.TString;
+        browser: alepha23.TString;
+        device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+      }>>;
+    }>>;
+  }>;
+  /**
+   * Get a session by ID.
+   */
+  readonly getSession: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TObject<{
+      id: alepha23.TString;
+      version: alepha23.TNumber;
+      createdAt: alepha23.TString;
+      updatedAt: alepha23.TString;
+      refreshToken: alepha23.TString;
+      userId: alepha23.TString;
+      expiresAt: alepha23.TString;
+      ip: alepha23.TOptional<alepha23.TString>;
+      userAgent: alepha23.TOptional<alepha23.TObject<{
+        os: alepha23.TString;
+        browser: alepha23.TString;
+        device: alepha23.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+      }>>;
+    }>;
+  }>;
+  /**
+   * Delete a session.
+   */
+  readonly deleteSession: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TObject<{
+      ok: alepha23.TBoolean;
+      id: alepha23.TOptional<alepha23.TUnion<[alepha23.TString, alepha23.TInteger]>>;
+      count: alepha23.TOptional<alepha23.TNumber>;
+    }>;
+  }>;
+}
+//#endregion
+//#region ../../src/api/users/notifications/UserNotifications.d.ts
+declare class UserNotifications {
+  readonly passwordReset: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
+    email: alepha23.TString;
+    code: alepha23.TString;
+    expiresInMinutes: alepha23.TNumber;
+  }>>;
+  readonly emailVerification: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
+    email: alepha23.TString;
+    code: alepha23.TString;
+    expiresInMinutes: alepha23.TNumber;
+  }>>;
+  readonly phoneVerification: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
+    phoneNumber: alepha23.TString;
+    code: alepha23.TString;
+    expiresInMinutes: alepha23.TNumber;
+  }>>;
+  readonly passwordResetLink: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
+    email: alepha23.TString;
+    resetUrl: alepha23.TString;
+    expiresInMinutes: alepha23.TNumber;
+  }>>;
+  readonly emailVerificationLink: alepha_api_notifications0.NotificationPrimitive<alepha23.TObject<{
+    email: alepha23.TString;
     verifyUrl: alepha23.TString;
     expiresInMinutes: alepha23.TNumber;
   }>>;
 }
 //#endregion
+//#region ../../src/api/users/schemas/createUserSchema.d.ts
+declare const createUserSchema: alepha23.TObject<{
+  id: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
+  version: alepha23.TOptional<PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
+  email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  createdAt: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
+  updatedAt: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
+  username: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
+  firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  enabled: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
+  emailVerified: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
+}>;
+type CreateUser = Static<typeof createUserSchema>;
+//#endregion
+//#region ../../src/api/users/schemas/updateUserSchema.d.ts
+declare const updateUserSchema: alepha23.TObject<{
+  email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  realm: alepha23.TOptional<PgAttr<alepha23.TString, typeof PG_DEFAULT>>;
+  phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
+  firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+  enabled: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
+}>;
+type UpdateUser = Static<typeof updateUserSchema>;
+//#endregion
+//#region ../../src/api/users/schemas/userQuerySchema.d.ts
+declare const userQuerySchema: alepha23.TObject<{
+  page: alepha23.TOptional<alepha23.TInteger>;
+  size: alepha23.TOptional<alepha23.TInteger>;
+  sort: alepha23.TOptional<alepha23.TString>;
+  email: alepha23.TOptional<alepha23.TString>;
+  enabled: alepha23.TOptional<alepha23.TBoolean>;
+  emailVerified: alepha23.TOptional<alepha23.TBoolean>;
+  roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
+  query: alepha23.TOptional<alepha23.TString>;
+}>;
+type UserQuery = Static<typeof userQuerySchema>;
+//#endregion
+//#region ../../src/api/users/services/UserService.d.ts
+declare class UserService {
+  protected readonly log: alepha_logger5.Logger;
+  protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
+  protected readonly userNotifications: UserNotifications;
+  protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
+  users(userRealmName?: string): alepha_orm24.Repository<alepha23.TObject<{
+    id: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_PRIMARY_KEY>, typeof alepha_orm24.PG_DEFAULT>;
+    version: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TInteger, typeof alepha_orm24.PG_VERSION>, typeof alepha_orm24.PG_DEFAULT>;
+    createdAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_CREATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    updatedAt: alepha_orm24.PgAttr<alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_UPDATED_AT>, typeof alepha_orm24.PG_DEFAULT>;
+    realm: alepha_orm24.PgAttr<alepha23.TString, typeof alepha_orm24.PG_DEFAULT>;
+    username: alepha23.TOptional<alepha23.TString>;
+    email: alepha23.TOptional<alepha23.TString>;
+    phoneNumber: alepha23.TOptional<alepha23.TString>;
+    roles: alepha_orm24.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm24.PG_DEFAULT>;
+    firstName: alepha23.TOptional<alepha23.TString>;
+    lastName: alepha23.TOptional<alepha23.TString>;
+    picture: alepha23.TOptional<alepha23.TString>;
+    enabled: alepha_orm24.PgAttr<alepha23.TBoolean, typeof alepha_orm24.PG_DEFAULT>;
+    emailVerified: alepha_orm24.PgAttr<alepha23.TBoolean, typeof alepha_orm24.PG_DEFAULT>;
+  }>>;
+  /**
+   * Request email verification for a user.
+   * @param email - The email address to verify.
+   * @param userRealmName - Optional realm name.
+   * @param method - The verification method: "code" (default) or "link".
+   * @param verifyUrl - Base URL for verification link (required when method is "link").
+   */
+  requestEmailVerification(email: string, userRealmName?: string, method?: "code" | "link", verifyUrl?: string): Promise<boolean>;
+  /**
+   * Verify a user's email using a valid verification token.
+   * Supports both code (6-digit) and link (UUID) verification tokens.
+   */
+  verifyEmail(email: string, token: string, userRealmName?: string): Promise<void>;
+  /**
+   * Check if an email is verified.
+   */
+  isEmailVerified(email: string, userRealmName?: string): Promise<boolean>;
+  /**
+   * Find users with pagination and filtering.
+   */
+  findUsers(q?: UserQuery, userRealmName?: string): Promise<Page$1<UserEntity>>;
+  /**
+   * Get a user by ID.
+   */
+  getUserById(id: string, userRealmName?: string): Promise<UserEntity>;
+  /**
+   * Create a new user.
+   */
+  createUser(data: CreateUser, userRealmName?: string): Promise<UserEntity>;
+  /**
+   * Update an existing user.
+   */
+  updateUser(id: string, data: UpdateUser, userRealmName?: string): Promise<UserEntity>;
+  /**
+   * Delete a user by ID.
+   */
+  deleteUser(id: string, userRealmName?: string): Promise<void>;
+}
+//#endregion
+//#region ../../src/api/users/controllers/AdminUserController.d.ts
+declare class AdminUserController {
+  protected readonly url = "/users";
+  protected readonly group = "admin:users";
+  protected readonly userService: UserService;
+  /**
+   * Find users with pagination and filtering.
+   */
+  readonly findUsers: alepha_server0.ActionPrimitiveFn<{
+    query: alepha23.TObject<{
+      page: alepha23.TOptional<alepha23.TInteger>;
+      size: alepha23.TOptional<alepha23.TInteger>;
+      sort: alepha23.TOptional<alepha23.TString>;
+      email: alepha23.TOptional<alepha23.TString>;
+      enabled: alepha23.TOptional<alepha23.TBoolean>;
+      emailVerified: alepha23.TOptional<alepha23.TBoolean>;
+      roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
+      query: alepha23.TOptional<alepha23.TString>;
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TPage<alepha23.TObject<{
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha23.TString, typeof PG_DEFAULT>;
+      username: alepha23.TOptional<alepha23.TString>;
+      email: alepha23.TOptional<alepha23.TString>;
+      phoneNumber: alepha23.TOptional<alepha23.TString>;
+      roles: PgAttr<alepha23.TArray<alepha23.TString>, typeof PG_DEFAULT>;
+      firstName: alepha23.TOptional<alepha23.TString>;
+      lastName: alepha23.TOptional<alepha23.TString>;
+      picture: alepha23.TOptional<alepha23.TString>;
+      enabled: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+    }>>;
+  }>;
+  /**
+   * Get a user by ID.
+   */
+  readonly getUser: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TObject<{
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha23.TString, typeof PG_DEFAULT>;
+      username: alepha23.TOptional<alepha23.TString>;
+      email: alepha23.TOptional<alepha23.TString>;
+      phoneNumber: alepha23.TOptional<alepha23.TString>;
+      roles: PgAttr<alepha23.TArray<alepha23.TString>, typeof PG_DEFAULT>;
+      firstName: alepha23.TOptional<alepha23.TString>;
+      lastName: alepha23.TOptional<alepha23.TString>;
+      picture: alepha23.TOptional<alepha23.TString>;
+      enabled: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+    }>;
+  }>;
+  /**
+   * Create a new user.
+   */
+  readonly createUser: alepha_server0.ActionPrimitiveFn<{
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    body: alepha23.TObject<{
+      id: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
+      version: alepha23.TOptional<PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
+      email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      createdAt: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
+      updatedAt: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
+      username: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
+      firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      enabled: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
+      emailVerified: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
+    }>;
+    response: alepha23.TObject<{
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha23.TString, typeof PG_DEFAULT>;
+      username: alepha23.TOptional<alepha23.TString>;
+      email: alepha23.TOptional<alepha23.TString>;
+      phoneNumber: alepha23.TOptional<alepha23.TString>;
+      roles: PgAttr<alepha23.TArray<alepha23.TString>, typeof PG_DEFAULT>;
+      firstName: alepha23.TOptional<alepha23.TString>;
+      lastName: alepha23.TOptional<alepha23.TString>;
+      picture: alepha23.TOptional<alepha23.TString>;
+      enabled: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+    }>;
+  }>;
+  /**
+   * Update a user.
+   */
+  readonly updateUser: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    body: alepha23.TObject<{
+      email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      realm: alepha23.TOptional<PgAttr<alepha23.TString, typeof PG_DEFAULT>>;
+      phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
+      firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
+      enabled: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
+    }>;
+    response: alepha23.TObject<{
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha23.TString, typeof PG_DEFAULT>;
+      username: alepha23.TOptional<alepha23.TString>;
+      email: alepha23.TOptional<alepha23.TString>;
+      phoneNumber: alepha23.TOptional<alepha23.TString>;
+      roles: PgAttr<alepha23.TArray<alepha23.TString>, typeof PG_DEFAULT>;
+      firstName: alepha23.TOptional<alepha23.TString>;
+      lastName: alepha23.TOptional<alepha23.TString>;
+      picture: alepha23.TOptional<alepha23.TString>;
+      enabled: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+    }>;
+  }>;
+  /**
+   * Delete a user.
+   */
+  readonly deleteUser: alepha_server0.ActionPrimitiveFn<{
+    params: alepha23.TObject<{
+      id: alepha23.TString;
+    }>;
+    query: alepha23.TObject<{
+      userRealmName: alepha23.TOptional<alepha23.TString>;
+    }>;
+    response: alepha23.TObject<{
+      ok: alepha23.TBoolean;
+      id: alepha23.TOptional<alepha23.TUnion<[alepha23.TString, alepha23.TInteger]>>;
+      count: alepha23.TOptional<alepha23.TNumber>;
+    }>;
+  }>;
+}
+//#endregion
 //#region ../../src/api/users/schemas/completePasswordResetRequestSchema.d.ts
 /**
  * Request schema for completing a password reset.
@@ -2028,12 +2294,13 @@ interface PasswordResetIntent {
   expiresAt: string;
 }
 declare class CredentialService {
-  protected readonly log: alepha_logger1.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly cryptoProvider: CryptoProvider;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
   protected readonly userNotifications: UserNotifications;
   protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
   protected readonly intentCache: alepha_cache0.CachePrimitiveFn<PasswordResetIntent, any[]>;
   users(userRealmName?: string): Repository$1<alepha23.TObject<{
     id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
@@ -2169,12 +2436,13 @@ interface RegistrationIntent {
   expiresAt: string;
 }
 declare class RegistrationService {
-  protected readonly log: alepha_logger1.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly cryptoProvider: CryptoProvider;
   protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
   protected readonly userNotifications: UserNotifications;
   protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
   protected readonly intentCache: alepha_cache0.CachePrimitiveFn<RegistrationIntent, any[]>;
   /**
    * Phase 1: Create a registration intent.
@@ -2212,111 +2480,6 @@ declare class RegistrationService {
   protected verifyPhoneCode(phoneNumber: string, code: string): Promise<void>;
 }
 //#endregion
-//#region ../../src/api/users/schemas/createUserSchema.d.ts
-declare const createUserSchema: alepha23.TObject<{
-  id: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
-  version: alepha23.TOptional<PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
-  email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  createdAt: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
-  updatedAt: alepha23.TOptional<PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
-  username: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
-  firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  enabled: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
-  emailVerified: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
-}>;
-type CreateUser = Static<typeof createUserSchema>;
-//#endregion
-//#region ../../src/api/users/schemas/updateUserSchema.d.ts
-declare const updateUserSchema: alepha23.TObject<{
-  email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  realm: alepha23.TOptional<PgAttr<alepha23.TString, typeof PG_DEFAULT>>;
-  phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
-  firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-  enabled: alepha23.TOptional<PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>>;
-}>;
-type UpdateUser = Static<typeof updateUserSchema>;
-//#endregion
-//#region ../../src/api/users/schemas/userQuerySchema.d.ts
-declare const userQuerySchema: alepha23.TObject<{
-  page: alepha23.TOptional<alepha23.TInteger>;
-  size: alepha23.TOptional<alepha23.TInteger>;
-  sort: alepha23.TOptional<alepha23.TString>;
-  email: alepha23.TOptional<alepha23.TString>;
-  enabled: alepha23.TOptional<alepha23.TBoolean>;
-  emailVerified: alepha23.TOptional<alepha23.TBoolean>;
-  roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
-  query: alepha23.TOptional<alepha23.TString>;
-}>;
-type UserQuery = Static<typeof userQuerySchema>;
-//#endregion
-//#region ../../src/api/users/services/UserService.d.ts
-declare class UserService {
-  protected readonly log: alepha_logger1.Logger;
-  protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
-  protected readonly userNotifications: UserNotifications;
-  protected readonly userRealmProvider: UserRealmProvider;
-  users(userRealmName?: string): alepha_orm204.Repository<alepha23.TObject<{
-    id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-    version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-    createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-    realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-    username: alepha23.TOptional<alepha23.TString>;
-    email: alepha23.TOptional<alepha23.TString>;
-    phoneNumber: alepha23.TOptional<alepha23.TString>;
-    roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-    firstName: alepha23.TOptional<alepha23.TString>;
-    lastName: alepha23.TOptional<alepha23.TString>;
-    picture: alepha23.TOptional<alepha23.TString>;
-    enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-  }>>;
-  /**
-   * Request email verification for a user.
-   * @param email - The email address to verify.
-   * @param userRealmName - Optional realm name.
-   * @param method - The verification method: "code" (default) or "link".
-   * @param verifyUrl - Base URL for verification link (required when method is "link").
-   */
-  requestEmailVerification(email: string, userRealmName?: string, method?: "code" | "link", verifyUrl?: string): Promise<boolean>;
-  /**
-   * Verify a user's email using a valid verification token.
-   * Supports both code (6-digit) and link (UUID) verification tokens.
-   */
-  verifyEmail(email: string, token: string, userRealmName?: string): Promise<void>;
-  /**
-   * Check if an email is verified.
-   */
-  isEmailVerified(email: string, userRealmName?: string): Promise<boolean>;
-  /**
-   * Find users with pagination and filtering.
-   */
-  findUsers(q?: UserQuery, userRealmName?: string): Promise<Page$1<UserEntity>>;
-  /**
-   * Get a user by ID.
-   */
-  getUserById(id: string, userRealmName?: string): Promise<UserEntity>;
-  /**
-   * Create a new user.
-   */
-  createUser(data: CreateUser, userRealmName?: string): Promise<UserEntity>;
-  /**
-   * Update an existing user.
-   */
-  updateUser(id: string, data: UpdateUser, userRealmName?: string): Promise<UserEntity>;
-  /**
-   * Delete a user by ID.
-   */
-  deleteUser(id: string, userRealmName?: string): Promise<void>;
-}
-//#endregion
 //#region ../../src/api/users/controllers/UserController.d.ts
 declare class UserController {
   protected readonly url = "/users";
@@ -2349,104 +2512,6 @@ declare class UserController {
       expiresAt: alepha23.TString;
     }>;
   }>;
-  /**
-   * Find users with pagination and filtering.
-   */
-  readonly findUsers: alepha_server0.ActionPrimitiveFn<{
-    query: alepha23.TObject<{
-      page: alepha23.TOptional<alepha23.TInteger>;
-      size: alepha23.TOptional<alepha23.TInteger>;
-      sort: alepha23.TOptional<alepha23.TString>;
-      email: alepha23.TOptional<alepha23.TString>;
-      enabled: alepha23.TOptional<alepha23.TBoolean>;
-      emailVerified: alepha23.TOptional<alepha23.TBoolean>;
-      roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
-      query: alepha23.TOptional<alepha23.TString>;
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TPage<alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-      username: alepha23.TOptional<alepha23.TString>;
-      email: alepha23.TOptional<alepha23.TString>;
-      phoneNumber: alepha23.TOptional<alepha23.TString>;
-      roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-      firstName: alepha23.TOptional<alepha23.TString>;
-      lastName: alepha23.TOptional<alepha23.TString>;
-      picture: alepha23.TOptional<alepha23.TString>;
-      enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-      emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    }>>;
-  }>;
-  /**
-   * Get a user by ID.
-   */
-  readonly getUser: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-      username: alepha23.TOptional<alepha23.TString>;
-      email: alepha23.TOptional<alepha23.TString>;
-      phoneNumber: alepha23.TOptional<alepha23.TString>;
-      roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-      firstName: alepha23.TOptional<alepha23.TString>;
-      lastName: alepha23.TOptional<alepha23.TString>;
-      picture: alepha23.TOptional<alepha23.TString>;
-      enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-      emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    }>;
-  }>;
-  /**
-   * Create a new user.
-   */
-  readonly createUser: alepha_server0.ActionPrimitiveFn<{
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    body: alepha23.TObject<{
-      id: alepha23.TOptional<alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>>;
-      version: alepha23.TOptional<alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>>;
-      email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      createdAt: alepha23.TOptional<alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>>;
-      updatedAt: alepha23.TOptional<alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>>;
-      username: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
-      firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      enabled: alepha23.TOptional<alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>>;
-      emailVerified: alepha23.TOptional<alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>>;
-    }>;
-    response: alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-      username: alepha23.TOptional<alepha23.TString>;
-      email: alepha23.TOptional<alepha23.TString>;
-      phoneNumber: alepha23.TOptional<alepha23.TString>;
-      roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-      firstName: alepha23.TOptional<alepha23.TString>;
-      lastName: alepha23.TOptional<alepha23.TString>;
-      picture: alepha23.TOptional<alepha23.TString>;
-      enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-      emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    }>;
-  }>;
   /**
    * Phase 2: Complete registration using an intent.
    * Validates verification codes and creates the user.
@@ -2459,73 +2524,20 @@ declare class UserController {
       captchaToken: alepha23.TOptional<alepha23.TString>;
     }>;
     response: alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
-      username: alepha23.TOptional<alepha23.TString>;
-      email: alepha23.TOptional<alepha23.TString>;
-      phoneNumber: alepha23.TOptional<alepha23.TString>;
-      roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
-      firstName: alepha23.TOptional<alepha23.TString>;
-      lastName: alepha23.TOptional<alepha23.TString>;
-      picture: alepha23.TOptional<alepha23.TString>;
-      enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-      emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    }>;
-  }>;
-  /**
-   * Update a user.
-   */
-  readonly updateUser: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    body: alepha23.TObject<{
-      email: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      realm: alepha23.TOptional<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>>;
-      phoneNumber: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      roles: alepha23.TOptional<alepha23.TArray<alepha23.TString>>;
-      firstName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      lastName: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      picture: alepha23.TOptional<alepha23.TOptional<alepha23.TString>>;
-      enabled: alepha23.TOptional<alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>>;
-    }>;
-    response: alepha23.TObject<{
-      id: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_PRIMARY_KEY>, typeof alepha_orm204.PG_DEFAULT>;
-      version: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TInteger, typeof alepha_orm204.PG_VERSION>, typeof alepha_orm204.PG_DEFAULT>;
-      createdAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_CREATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      updatedAt: alepha_orm204.PgAttr<alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_UPDATED_AT>, typeof alepha_orm204.PG_DEFAULT>;
-      realm: alepha_orm204.PgAttr<alepha23.TString, typeof alepha_orm204.PG_DEFAULT>;
+      id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha23.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha23.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha23.TString, typeof PG_DEFAULT>;
       username: alepha23.TOptional<alepha23.TString>;
       email: alepha23.TOptional<alepha23.TString>;
       phoneNumber: alepha23.TOptional<alepha23.TString>;
-      roles: alepha_orm204.PgAttr<alepha23.TArray<alepha23.TString>, typeof alepha_orm204.PG_DEFAULT>;
+      roles: PgAttr<alepha23.TArray<alepha23.TString>, typeof PG_DEFAULT>;
       firstName: alepha23.TOptional<alepha23.TString>;
       lastName: alepha23.TOptional<alepha23.TString>;
       picture: alepha23.TOptional<alepha23.TString>;
-      enabled: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-      emailVerified: alepha_orm204.PgAttr<alepha23.TBoolean, typeof alepha_orm204.PG_DEFAULT>;
-    }>;
-  }>;
-  /**
-   * Delete a user.
-   */
-  readonly deleteUser: alepha_server0.ActionPrimitiveFn<{
-    params: alepha23.TObject<{
-      id: alepha23.TString;
-    }>;
-    query: alepha23.TObject<{
-      userRealmName: alepha23.TOptional<alepha23.TString>;
-    }>;
-    response: alepha23.TObject<{
-      ok: alepha23.TBoolean;
-      id: alepha23.TOptional<alepha23.TUnion<[alepha23.TString, alepha23.TInteger]>>;
-      count: alepha23.TOptional<alepha23.TNumber>;
+      enabled: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha23.TBoolean, typeof PG_DEFAULT>;
     }>;
   }>;
   /**
@@ -2664,6 +2676,7 @@ declare class UserController {
  */
 declare class UserRealmController {
   protected readonly url = "/realms";
+  protected readonly group = "realms";
   protected readonly userRealmProvider: UserRealmProvider;
   protected readonly serverAuthProvider: ServerAuthProvider;
   /**
@@ -2839,9 +2852,10 @@ declare class SessionService {
   protected readonly fsp: FileSystemProvider;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly cryptoProvider: CryptoProvider;
-  protected readonly log: alepha_logger1.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly userRealmProvider: UserRealmProvider;
   protected readonly fileController: alepha_server_links0.HttpVirtualClient<FileController>;
+  protected readonly auditService: AuditService;
   users(userRealmName?: string): Repository$1<alepha23.TObject<{
     id: PgAttr<PgAttr<alepha23.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
     version: PgAttr<PgAttr<alepha23.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
@@ -2991,5 +3005,5 @@ declare class SessionService {
  */
 declare const AlephaApiUsers: alepha23.Service<alepha23.Module>;
 //#endregion
-export { $userRealm, AlephaApiUsers, CompletePasswordResetRequest, CompleteRegistrationRequest, CreateUser, CredentialService, DEFAULT_USER_REALM_NAME, IdentityController, IdentityEntity, IdentityQuery, IdentityResource, IdentityService, LoginInput, PasswordResetIntentResponse, RealmAuthSettings, RegisterInput, RegistrationIntentResponse, RegistrationService, ResetPasswordInput, ResetPasswordRequest, SessionController, SessionCrudService, SessionEntity, SessionQuery, SessionResource, SessionService, UpdateUser, UserController, UserEntity, UserQuery, UserRealm, UserRealmConfig, UserRealmController, UserRealmOptions, UserRealmPrimitive, UserRealmProvider, UserRealmRepositories, UserResource, UserService, completePasswordResetRequestSchema, completeRegistrationRequestSchema, createUserSchema, identities, identityQuerySchema, identityResourceSchema, loginSchema, passwordResetIntentResponseSchema, realmAuthSettingsAtom, registerSchema, registrationIntentResponseSchema, resetPasswordRequestSchema, resetPasswordSchema, sessionQuerySchema, sessionResourceSchema, sessions, updateUserSchema, userQuerySchema, userRealmConfigSchema, userResourceSchema, users };
+export { $userRealm, AdminIdentityController, AdminSessionController, AdminUserController, AlephaApiUsers, CompletePasswordResetRequest, CompleteRegistrationRequest, CreateUser, CredentialService, DEFAULT_USER_REALM_NAME, IdentityEntity, IdentityQuery, IdentityResource, IdentityService, LoginInput, PasswordResetIntentResponse, RealmAuthSettings, RegisterInput, RegistrationIntentResponse, RegistrationService, ResetPasswordInput, ResetPasswordRequest, SessionCrudService, SessionEntity, SessionQuery, SessionResource, SessionService, UpdateUser, UserController, UserEntity, UserQuery, UserRealm, UserRealmConfig, UserRealmController, UserRealmOptions, UserRealmPrimitive, UserRealmProvider, UserRealmRepositories, UserResource, UserService, completePasswordResetRequestSchema, completeRegistrationRequestSchema, createUserSchema, identities, identityQuerySchema, identityResourceSchema, loginSchema, passwordResetIntentResponseSchema, realmAuthSettingsAtom, registerSchema, registrationIntentResponseSchema, resetPasswordRequestSchema, resetPasswordSchema, sessionQuerySchema, sessionResourceSchema, sessions, updateUserSchema, userQuerySchema, userRealmConfigSchema, userResourceSchema, users };
 //# sourceMappingURL=index.d.ts.map