alepha 0.14.2 → 0.14.4

package/dist/api/users/index.d.ts

@@ -2,22 +2,19 @@ import * as alepha1 from "alepha";
 import { Alepha, AlephaError, Page, PageQuery, Primitive, Static, StaticEncode, TNull, TObject, TOptional, TSchema, TUnion } from "alepha";
 import * as alepha_api_notifications0 from "alepha/api/notifications";
 import { VerificationController } from "alepha/api/verifications";
-import * as alepha_orm179 from "alepha/orm";
+import * as alepha_server0 from "alepha/server";
+import * as alepha_orm0 from "alepha/orm";
 import { Page as Page$1, Repository } from "alepha/orm";
-import * as alepha_server14 from "alepha/server";
-import * as alepha_logger0 from "alepha/logger";
+import { AuditService } from "alepha/api/audits";
+import * as alepha_logger5 from "alepha/logger";
 import * as alepha_bucket0 from "alepha/bucket";
+import * as alepha_server_links2 from "alepha/server/links";
 import * as alepha_cache0 from "alepha/cache";
 import { DateTime, DateTimeProvider } from "alepha/datetime";
 import { CryptoProvider, RealmPrimitive, RealmPrimitiveOptions, UserAccount } from "alepha/security";
-import * as alepha_server_links0 from "alepha/server/links";
 import { OAuth2Profile, ServerAuthProvider, WithLinkFn, WithLoginFn } from "alepha/server/auth";
 import { FileSystemProvider } from "alepha/file";
 import { FileController } from "alepha/api/files";
-import "bun";
-import "bun:sqlite";
-import "drizzle-orm/bun-sql";
-import "drizzle-orm/bun-sqlite";
 import "drizzle-orm/d1";
 import * as drizzle_orm0 from "drizzle-orm";
 import { BuildExtraConfigColumns, SQL, SQLWrapper } from "drizzle-orm";
@@ -26,8 +23,8 @@ import { LockConfig, LockStrength, PgColumn, PgColumnBuilderBase, PgDatabase, Pg
 import { PgTransactionConfig } from "drizzle-orm/pg-core/session";
 import * as DrizzleKit from "drizzle-kit/api";
 import "alepha/retry";
-import "alepha/lock";
 import "drizzle-orm/sqlite-core";
+import "alepha/lock";
 import "drizzle-orm/postgres-js";
 import "postgres";
 
@@ -58,485 +55,91 @@ declare const realmAuthSettingsAtom: alepha1.Atom<alepha1.TObject<{
 }>, "alepha.api.users.realmAuthSettings">;
 type RealmAuthSettings = Static<typeof realmAuthSettingsAtom.schema>;
 //#endregion
-//#region ../../src/api/users/entities/identities.d.ts
-declare const identities: alepha_orm179.EntityPrimitive<alepha1.TObject<{
-  id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-  version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-  createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-  updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-  userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-  password: alepha1.TOptional<alepha1.TString>;
-  provider: alepha1.TString;
-  providerUserId: alepha1.TOptional<alepha1.TString>;
-  providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
-}>>;
-type IdentityEntity = Static<typeof identities.schema>;
-//#endregion
-//#region ../../src/api/users/entities/sessions.d.ts
-declare const sessions: alepha_orm179.EntityPrimitive<alepha1.TObject<{
-  id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-  version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-  createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-  updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-  refreshToken: alepha1.TString;
-  userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-  expiresAt: alepha1.TString;
-  ip: alepha1.TOptional<alepha1.TString>;
-  userAgent: alepha1.TOptional<alepha1.TObject<{
-    os: alepha1.TString;
-    browser: alepha1.TString;
-    device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-  }>>;
-}>>;
-type SessionEntity = Static<typeof sessions.schema>;
-//#endregion
-//#region ../../src/api/users/entities/users.d.ts
-declare const DEFAULT_USER_REALM_NAME = "default";
-declare const users: alepha_orm179.EntityPrimitive<alepha1.TObject<{
-  id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-  version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-  createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-  updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-  realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-  username: alepha1.TOptional<alepha1.TString>;
-  email: alepha1.TOptional<alepha1.TString>;
-  phoneNumber: alepha1.TOptional<alepha1.TString>;
-  roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-  firstName: alepha1.TOptional<alepha1.TString>;
-  lastName: alepha1.TOptional<alepha1.TString>;
-  picture: alepha1.TOptional<alepha1.TString>;
-  enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-  emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-}>>;
-type UserEntity = Static<typeof users.schema>;
-//#endregion
-//#region ../../src/api/users/primitives/$userRealm.d.ts
-type UserRealmPrimitive = RealmPrimitive & WithLinkFn & WithLoginFn;
+//#region ../../src/orm/schemas/insertSchema.d.ts
 /**
- * Already configured realm for user management.
- *
- * Realm contains two roles: `admin` and `user`.
- *
- * - `admin`: Has full access to all resources and permissions.
- * - `user`: Has access to their own resources and permissions, but cannot access admin-level resources.
- *
- * Realm uses session management for handling user sessions.
+ * Transforms a TObject schema for insert operations.
+ * All default properties at the root level are made optional.
  *
- * Environment Variables:
- * - `APP_SECRET`: Secret key for signing tokens (if not provided in options).
+ * @example
+ * Before: { name: string; age: number(default=0); }
+ * After:  { name: string; age?: number; }
  */
-declare const $userRealm: (options?: UserRealmOptions) => UserRealmPrimitive;
-interface UserRealmOptions {
-  /**
-   * Secret key for signing tokens.
-   *
-   * If not provided, the secret from the SecurityProvider will be used (usually from the APP_SECRET environment variable).
-   */
-  secret?: string;
-  /**
-   * Realm configuration options.
-   *
-   * It's already pre-configured for user management with admin and user roles.
-   */
-  realm?: Partial<RealmPrimitiveOptions>;
-  /**
-   * Override entities.
-   */
-  entities?: {
-    users?: Repository<typeof users.schema>;
-    identities?: Repository<typeof identities.schema>;
-    sessions?: Repository<typeof sessions.schema>;
-  };
-  settings?: Partial<RealmAuthSettings>;
-  identities?: {
-    credentials?: true;
-    google?: true;
-    github?: true;
-  };
-  modules?: {
-    files?: boolean;
-    audits?: boolean;
-    jobs?: boolean;
-  };
-}
-//#endregion
-//#region ../../src/api/users/providers/UserRealmProvider.d.ts
-interface UserRealmRepositories {
-  identities: Repository<typeof identities.schema>;
-  sessions: Repository<typeof sessions.schema>;
-  users: Repository<typeof users.schema>;
-}
-interface UserRealm {
-  name: string;
-  repositories: UserRealmRepositories;
-  settings: RealmAuthSettings;
-}
-declare class UserRealmProvider {
-  protected readonly alepha: Alepha;
-  protected readonly defaultIdentities: Repository<alepha1.TObject<{
-    id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-    version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-    createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-    password: alepha1.TOptional<alepha1.TString>;
-    provider: alepha1.TString;
-    providerUserId: alepha1.TOptional<alepha1.TString>;
-    providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
-  }>>;
-  protected readonly defaultSessions: Repository<alepha1.TObject<{
-    id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-    version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-    createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    refreshToken: alepha1.TString;
-    userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-    expiresAt: alepha1.TString;
-    ip: alepha1.TOptional<alepha1.TString>;
-    userAgent: alepha1.TOptional<alepha1.TObject<{
-      os: alepha1.TString;
-      browser: alepha1.TString;
-      device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-    }>>;
-  }>>;
-  protected readonly defaultUsers: Repository<alepha1.TObject<{
-    id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-    version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-    createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-    username: alepha1.TOptional<alepha1.TString>;
-    email: alepha1.TOptional<alepha1.TString>;
-    phoneNumber: alepha1.TOptional<alepha1.TString>;
-    roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-    firstName: alepha1.TOptional<alepha1.TString>;
-    lastName: alepha1.TOptional<alepha1.TString>;
-    picture: alepha1.TOptional<alepha1.TString>;
-    enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-  }>>;
-  protected realms: Map<string, UserRealm>;
-  avatars: alepha_bucket0.BucketPrimitive;
-  protected readonly onConfigure: alepha1.HookPrimitive<"configure">;
-  register(userRealmName: string, userRealmOptions?: UserRealmOptions): UserRealm;
-  /**
-   * Gets a registered realm by name, auto-creating default if needed.
-   */
-  getRealm(userRealmName?: string): UserRealm;
-  identityRepository(userRealmName?: string): Repository<typeof identities.schema>;
-  sessionRepository(userRealmName?: string): Repository<typeof sessions.schema>;
-  userRepository(userRealmName?: string): Repository<typeof users.schema>;
-}
+type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends {
+  [PG_DEFAULT]: any;
+} | {
+  "~optional": true;
+} ? TOptional<T["properties"][K]> : T["properties"][K] }>;
 //#endregion
-//#region ../../src/api/users/schemas/identityQuerySchema.d.ts
-declare const identityQuerySchema: alepha1.TObject<{
-  page: alepha1.TOptional<alepha1.TInteger>;
-  size: alepha1.TOptional<alepha1.TInteger>;
-  sort: alepha1.TOptional<alepha1.TString>;
-  userId: alepha1.TOptional<alepha1.TString>;
-  provider: alepha1.TOptional<alepha1.TString>;
-}>;
-type IdentityQuery = Static<typeof identityQuerySchema>;
+//#region ../../src/orm/schemas/updateSchema.d.ts
+/**
+ * Transforms a TObject schema for update operations.
+ * All optional properties at the root level are made nullable (i.e., `T | null`).
+ * This allows an API endpoint to explicitly accept `null` to clear an optional field in the database.
+ *
+ * @example
+ * Before: { name?: string; age: number; }
+ * After:  { name?: string | null; age: number; }
+ */
+type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
 //#endregion
-//#region ../../src/api/users/services/IdentityService.d.ts
-declare class IdentityService {
-  protected readonly log: alepha_logger0.Logger;
-  protected readonly userRealmProvider: UserRealmProvider;
-  identities(userRealmName?: string): alepha_orm179.Repository<alepha1.TObject<{
-    id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-    version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-    createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-    password: alepha1.TOptional<alepha1.TString>;
-    provider: alepha1.TString;
-    providerUserId: alepha1.TOptional<alepha1.TString>;
-    providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
-  }>>;
+//#region ../../src/orm/primitives/$entity.d.ts
+interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
   /**
-   * Find identities with pagination and filtering.
+   * The database table name that will be created for this entity.
+   * If not provided, name will be inferred from the $repository variable name.
    */
-  findIdentities(q?: IdentityQuery, userRealmName?: string): Promise<Page$1<IdentityEntity>>;
+  name: string;
   /**
-   * Get an identity by ID.
+   * TypeBox schema defining the table structure and column types.
    */
-  getIdentityById(id: string, userRealmName?: string): Promise<IdentityEntity>;
+  schema: T;
   /**
-   * Delete an identity by ID.
+   * Database indexes to create for query optimization.
    */
-  deleteIdentity(id: string, userRealmName?: string): Promise<void>;
-}
-//#endregion
-//#region ../../src/api/users/controllers/IdentityController.d.ts
-declare class IdentityController {
-  protected readonly url = "/identities";
-  protected readonly group = "identities";
-  protected readonly identityService: IdentityService;
+  indexes?: (Keys | {
+    /**
+     * Single column to index.
+     */
+    column: Keys;
+    /**
+     * Whether this should be a unique index (enforces uniqueness constraint).
+     */
+    unique?: boolean;
+    /**
+     * Custom name for the index. If not provided, generates name automatically.
+     */
+    name?: string;
+  } | {
+    /**
+     * Multiple columns for composite index (order matters for query optimization).
+     */
+    columns: Keys[];
+    /**
+     * Whether this should be a unique index (enforces uniqueness constraint).
+     */
+    unique?: boolean;
+    /**
+     * Custom name for the index. If not provided, generates name automatically.
+     */
+    name?: string;
+  })[];
   /**
-   * Find identities with pagination and filtering.
+   * Foreign key constraints to maintain referential integrity.
    */
-  readonly findIdentities: alepha_server14.ActionPrimitiveFn<{
-    query: alepha1.TObject<{
-      page: alepha1.TOptional<alepha1.TInteger>;
-      size: alepha1.TOptional<alepha1.TInteger>;
-      sort: alepha1.TOptional<alepha1.TString>;
-      userId: alepha1.TOptional<alepha1.TString>;
-      provider: alepha1.TOptional<alepha1.TString>;
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TPage<alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-      provider: alepha1.TString;
-      providerUserId: alepha1.TOptional<alepha1.TString>;
-      providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
-    }>>;
-  }>;
-  /**
-   * Get an identity by ID.
-   */
-  readonly getIdentity: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-      provider: alepha1.TString;
-      providerUserId: alepha1.TOptional<alepha1.TString>;
-      providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
-    }>;
-  }>;
-  /**
-   * Delete an identity.
-   */
-  readonly deleteIdentity: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TObject<{
-      ok: alepha1.TBoolean;
-      id: alepha1.TOptional<alepha1.TUnion<[alepha1.TString, alepha1.TInteger]>>;
-      count: alepha1.TOptional<alepha1.TNumber>;
-    }>;
-  }>;
-}
-//#endregion
-//#region ../../src/api/users/schemas/sessionQuerySchema.d.ts
-declare const sessionQuerySchema: alepha1.TObject<{
-  page: alepha1.TOptional<alepha1.TInteger>;
-  size: alepha1.TOptional<alepha1.TInteger>;
-  sort: alepha1.TOptional<alepha1.TString>;
-  userId: alepha1.TOptional<alepha1.TString>;
-}>;
-type SessionQuery = Static<typeof sessionQuerySchema>;
-//#endregion
-//#region ../../src/api/users/services/SessionCrudService.d.ts
-declare class SessionCrudService {
-  protected readonly log: alepha_logger0.Logger;
-  protected readonly userRealmProvider: UserRealmProvider;
-  sessions(userRealmName?: string): alepha_orm179.Repository<alepha1.TObject<{
-    id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-    version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-    createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    refreshToken: alepha1.TString;
-    userId: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_REF>;
-    expiresAt: alepha1.TString;
-    ip: alepha1.TOptional<alepha1.TString>;
-    userAgent: alepha1.TOptional<alepha1.TObject<{
-      os: alepha1.TString;
-      browser: alepha1.TString;
-      device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-    }>>;
-  }>>;
-  /**
-   * Find sessions with pagination and filtering.
-   */
-  findSessions(q?: SessionQuery, userRealmName?: string): Promise<Page$1<SessionEntity>>;
-  /**
-   * Get a session by ID.
-   */
-  getSessionById(id: string, userRealmName?: string): Promise<SessionEntity>;
-  /**
-   * Delete a session by ID.
-   */
-  deleteSession(id: string, userRealmName?: string): Promise<void>;
-}
-//#endregion
-//#region ../../src/api/users/controllers/SessionController.d.ts
-declare class SessionController {
-  protected readonly url = "/sessions";
-  protected readonly group = "sessions";
-  protected readonly sessionService: SessionCrudService;
-  /**
-   * Find sessions with pagination and filtering.
-   */
-  readonly findSessions: alepha_server14.ActionPrimitiveFn<{
-    query: alepha1.TObject<{
-      page: alepha1.TOptional<alepha1.TInteger>;
-      size: alepha1.TOptional<alepha1.TInteger>;
-      sort: alepha1.TOptional<alepha1.TString>;
-      userId: alepha1.TOptional<alepha1.TString>;
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TPage<alepha1.TObject<{
-      id: alepha1.TString;
-      version: alepha1.TNumber;
-      createdAt: alepha1.TString;
-      updatedAt: alepha1.TString;
-      refreshToken: alepha1.TString;
-      userId: alepha1.TString;
-      expiresAt: alepha1.TString;
-      ip: alepha1.TOptional<alepha1.TString>;
-      userAgent: alepha1.TOptional<alepha1.TObject<{
-        os: alepha1.TString;
-        browser: alepha1.TString;
-        device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-      }>>;
-    }>>;
-  }>;
-  /**
-   * Get a session by ID.
-   */
-  readonly getSession: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TObject<{
-      id: alepha1.TString;
-      version: alepha1.TNumber;
-      createdAt: alepha1.TString;
-      updatedAt: alepha1.TString;
-      refreshToken: alepha1.TString;
-      userId: alepha1.TString;
-      expiresAt: alepha1.TString;
-      ip: alepha1.TOptional<alepha1.TString>;
-      userAgent: alepha1.TOptional<alepha1.TObject<{
-        os: alepha1.TString;
-        browser: alepha1.TString;
-        device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
-      }>>;
-    }>;
-  }>;
-  /**
-   * Delete a session.
-   */
-  readonly deleteSession: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TObject<{
-      ok: alepha1.TBoolean;
-      id: alepha1.TOptional<alepha1.TUnion<[alepha1.TString, alepha1.TInteger]>>;
-      count: alepha1.TOptional<alepha1.TNumber>;
-    }>;
-  }>;
-}
-//#endregion
-//#region ../../src/orm/schemas/insertSchema.d.ts
-/**
- * Transforms a TObject schema for insert operations.
- * All default properties at the root level are made optional.
- *
- * @example
- * Before: { name: string; age: number(default=0); }
- * After:  { name: string; age?: number; }
- */
-type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends {
-  [PG_DEFAULT]: any;
-} | {
-  "~optional": true;
-} ? TOptional<T["properties"][K]> : T["properties"][K] }>;
-//#endregion
-//#region ../../src/orm/schemas/updateSchema.d.ts
-/**
- * Transforms a TObject schema for update operations.
- * All optional properties at the root level are made nullable (i.e., `T | null`).
- * This allows an API endpoint to explicitly accept `null` to clear an optional field in the database.
- *
- * @example
- * Before: { name?: string; age: number; }
- * After:  { name?: string | null; age: number; }
- */
-type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
-//#endregion
-//#region ../../src/orm/primitives/$entity.d.ts
-interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
-  /**
-   * The database table name that will be created for this entity.
-   * If not provided, name will be inferred from the $repository variable name.
-   */
-  name: string;
-  /**
-   * TypeBox schema defining the table structure and column types.
-   */
-  schema: T;
-  /**
-   * Database indexes to create for query optimization.
-   */
-  indexes?: (Keys | {
-    /**
-     * Single column to index.
-     */
-    column: Keys;
-    /**
-     * Whether this should be a unique index (enforces uniqueness constraint).
-     */
-    unique?: boolean;
-    /**
-     * Custom name for the index. If not provided, generates name automatically.
-     */
-    name?: string;
-  } | {
-    /**
-     * Multiple columns for composite index (order matters for query optimization).
-     */
-    columns: Keys[];
-    /**
-     * Whether this should be a unique index (enforces uniqueness constraint).
-     */
-    unique?: boolean;
-    /**
-     * Custom name for the index. If not provided, generates name automatically.
-     */
-    name?: string;
-  })[];
-  /**
-   * Foreign key constraints to maintain referential integrity.
-   */
-  foreignKeys?: Array<{
-    /**
-     * Optional name for the foreign key constraint.
-     */
-    name?: string;
-    /**
-     * Local columns that reference the foreign table.
-     */
-    columns: Array<keyof Static<T>>;
-    /**
-     * Referenced columns in the foreign table.
-     * Must be EntityColumn references from other entities.
-     */
-    foreignColumns: Array<() => EntityColumn<any>>;
+  foreignKeys?: Array<{
+    /**
+     * Optional name for the foreign key constraint.
+     */
+    name?: string;
+    /**
+     * Local columns that reference the foreign table.
+     */
+    columns: Array<keyof Static<T>>;
+    /**
+     * Referenced columns in the foreign table.
+     * Must be EntityColumn references from other entities.
+     */
+    foreignColumns: Array<() => EntityColumn<any>>;
   }>;
   /**
    * Additional table constraints for data validation.
@@ -1303,7 +906,7 @@ declare abstract class ModelBuilder {
 //#endregion
 //#region ../../src/orm/providers/DrizzleKitProvider.d.ts
 declare class DrizzleKitProvider {
-  protected readonly log: alepha_logger0.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly alepha: Alepha;
   /**
    * Synchronize database with current schema definitions.
@@ -1351,7 +954,7 @@ type DevMigrations = Static<typeof devMigrationsSchema>;
 type SQLLike = SQLWrapper | string;
 declare abstract class DatabaseProvider {
   protected readonly alepha: Alepha;
-  protected readonly log: alepha_logger0.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected abstract readonly builder: ModelBuilder;
   protected abstract readonly kit: DrizzleKitProvider;
   abstract readonly db: PgDatabase<any>;
@@ -1374,7 +977,7 @@ declare abstract class DatabaseProvider {
   /**
    * Base migration orchestration - handles environment logic
    */
-  protected migrateDatabase(): Promise<void>;
+  migrate(): Promise<void>;
   /**
    * Production: run migrations from folder
    */
@@ -1776,81 +1379,6 @@ interface StatementOptions {
   now?: DateTime | string;
 }
 //#endregion
-//#region ../../src/orm/providers/drivers/BunPostgresProvider.d.ts
-declare module "alepha" {
-  interface Env extends Partial<Static<typeof envSchema$1>> {}
-}
-declare const envSchema$1: alepha1.TObject<{
-  /**
-   * Main configuration for database connection.
-   * Accept a string in the format of a Postgres connection URL.
-   * Example: postgres://user:password@localhost:5432/database
-   * or
-   * Example: postgres://user:password@localhost:5432/database?sslmode=require
-   */
-  DATABASE_URL: alepha1.TOptional<alepha1.TString>;
-  /**
-   * In addition to the DATABASE_URL, you can specify the postgres schema name.
-   */
-  POSTGRES_SCHEMA: alepha1.TOptional<alepha1.TString>;
-}>;
-/**
- * Bun PostgreSQL provider using Drizzle ORM with Bun's native SQL client.
- *
- * This provider uses Bun's built-in SQL class for PostgreSQL connections,
- * which provides excellent performance on the Bun runtime.
- *
- * @example
- * ```ts
- * // Set DATABASE_URL environment variable
- * // DATABASE_URL=postgres://user:password@localhost:5432/database
- *
- * // Or configure programmatically
- * alepha.with({
- *   provide: DatabaseProvider,
- *   use: BunPostgresProvider,
- * });
- * ```
- */
-//#endregion
-//#region ../../src/orm/providers/drivers/BunSqliteProvider.d.ts
-/**
- * Configuration options for the Bun SQLite database provider.
- */
-declare const bunSqliteOptions: alepha1.Atom<alepha1.TObject<{
-  path: alepha1.TOptional<alepha1.TString>;
-}>, "alepha.postgres.bun-sqlite.options">;
-type BunSqliteProviderOptions = Static<typeof bunSqliteOptions.schema>;
-declare module "alepha" {
-  interface State {
-    [bunSqliteOptions.key]: BunSqliteProviderOptions;
-  }
-}
-/**
- * Bun SQLite provider using Drizzle ORM with Bun's native SQLite client.
- *
- * This provider uses Bun's built-in `bun:sqlite` for SQLite connections,
- * which provides excellent performance on the Bun runtime.
- *
- * @example
- * ```ts
- * // Set DATABASE_URL environment variable
- * // DATABASE_URL=sqlite://./my-database.db
- *
- * // Or configure programmatically
- * alepha.with({
- *   provide: DatabaseProvider,
- *   use: BunSqliteProvider,
- * });
- *
- * // Or use options atom
- * alepha.store.mut(bunSqliteOptions, (old) => ({
- *   ...old,
- *   path: ":memory:",
- * }));
- * ```
- */
-//#endregion
 //#region ../../src/orm/providers/drivers/NodePostgresProvider.d.ts
 declare module "alepha" {
   interface Env extends Partial<Static<typeof envSchema>> {}
@@ -1960,16 +1488,411 @@ declare module "alepha" {
   }
 }
 //#endregion
-//#region ../../src/api/users/notifications/UserNotifications.d.ts
-declare class UserNotifications {
-  readonly passwordReset: alepha_api_notifications0.NotificationPrimitive<alepha1.TObject<{
-    email: alepha1.TString;
-    code: alepha1.TString;
-    expiresInMinutes: alepha1.TNumber;
-  }>>;
-  readonly emailVerification: alepha_api_notifications0.NotificationPrimitive<alepha1.TObject<{
-    email: alepha1.TString;
-    code: alepha1.TString;
+//#region ../../src/api/users/entities/identities.d.ts
+declare const identities: alepha_orm0.EntityPrimitive<alepha1.TObject<{
+  id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+  version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+  createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+  updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+  userId: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_REF>;
+  password: alepha1.TOptional<alepha1.TString>;
+  provider: alepha1.TString;
+  providerUserId: alepha1.TOptional<alepha1.TString>;
+  providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
+}>>;
+type IdentityEntity = Static<typeof identities.schema>;
+//#endregion
+//#region ../../src/api/users/entities/sessions.d.ts
+declare const sessions: alepha_orm0.EntityPrimitive<alepha1.TObject<{
+  id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+  version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+  createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+  updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+  refreshToken: alepha1.TString;
+  userId: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_REF>;
+  expiresAt: alepha1.TString;
+  ip: alepha1.TOptional<alepha1.TString>;
+  userAgent: alepha1.TOptional<alepha1.TObject<{
+    os: alepha1.TString;
+    browser: alepha1.TString;
+    device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+  }>>;
+}>>;
+type SessionEntity = Static<typeof sessions.schema>;
+//#endregion
+//#region ../../src/api/users/entities/users.d.ts
+declare const DEFAULT_USER_REALM_NAME = "default";
+declare const users: alepha_orm0.EntityPrimitive<alepha1.TObject<{
+  id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+  version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+  createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+  updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+  realm: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_DEFAULT>;
+  username: alepha1.TOptional<alepha1.TString>;
+  email: alepha1.TOptional<alepha1.TString>;
+  phoneNumber: alepha1.TOptional<alepha1.TString>;
+  roles: alepha_orm0.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm0.PG_DEFAULT>;
+  firstName: alepha1.TOptional<alepha1.TString>;
+  lastName: alepha1.TOptional<alepha1.TString>;
+  picture: alepha1.TOptional<alepha1.TString>;
+  enabled: alepha_orm0.PgAttr<alepha1.TBoolean, typeof alepha_orm0.PG_DEFAULT>;
+  emailVerified: alepha_orm0.PgAttr<alepha1.TBoolean, typeof alepha_orm0.PG_DEFAULT>;
+}>>;
+type UserEntity = Static<typeof users.schema>;
+//#endregion
+//#region ../../src/api/users/primitives/$userRealm.d.ts
+type UserRealmPrimitive = RealmPrimitive & WithLinkFn & WithLoginFn;
+/**
+ * Already configured realm for user management.
+ *
+ * Realm contains two roles: `admin` and `user`.
+ *
+ * - `admin`: Has full access to all resources and permissions.
+ * - `user`: Has access to their own resources and permissions, but cannot access admin-level resources.
+ *
+ * Realm uses session management for handling user sessions.
+ *
+ * Environment Variables:
+ * - `APP_SECRET`: Secret key for signing tokens (if not provided in options).
+ */
+declare const $userRealm: (options?: UserRealmOptions) => UserRealmPrimitive;
+interface UserRealmOptions {
+  /**
+   * Secret key for signing tokens.
+   *
+   * If not provided, the secret from the SecurityProvider will be used (usually from the APP_SECRET environment variable).
+   */
+  secret?: string;
+  /**
+   * Realm configuration options.
+   *
+   * It's already pre-configured for user management with admin and user roles.
+   */
+  realm?: Partial<RealmPrimitiveOptions>;
+  /**
+   * Override entities.
+   */
+  entities?: {
+    users?: Repository<typeof users.schema>;
+    identities?: Repository<typeof identities.schema>;
+    sessions?: Repository<typeof sessions.schema>;
+  };
+  settings?: Partial<RealmAuthSettings>;
+  identities?: {
+    credentials?: true;
+    google?: true;
+    github?: true;
+  };
+  modules?: {
+    files?: boolean;
+    audits?: boolean;
+    jobs?: boolean;
+  };
+}
+//#endregion
+//#region ../../src/api/users/providers/UserRealmProvider.d.ts
+interface UserRealmRepositories {
+  identities: Repository<typeof identities.schema>;
+  sessions: Repository<typeof sessions.schema>;
+  users: Repository<typeof users.schema>;
+}
+interface UserRealm {
+  name: string;
+  repositories: UserRealmRepositories;
+  settings: RealmAuthSettings;
+}
+declare class UserRealmProvider {
+  protected readonly alepha: Alepha;
+  protected readonly defaultIdentities: Repository<alepha1.TObject<{
+    id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+    version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+    createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    userId: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_REF>;
+    password: alepha1.TOptional<alepha1.TString>;
+    provider: alepha1.TString;
+    providerUserId: alepha1.TOptional<alepha1.TString>;
+    providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
+  }>>;
+  protected readonly defaultSessions: Repository<alepha1.TObject<{
+    id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+    version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+    createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    refreshToken: alepha1.TString;
+    userId: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_REF>;
+    expiresAt: alepha1.TString;
+    ip: alepha1.TOptional<alepha1.TString>;
+    userAgent: alepha1.TOptional<alepha1.TObject<{
+      os: alepha1.TString;
+      browser: alepha1.TString;
+      device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+    }>>;
+  }>>;
+  protected readonly defaultUsers: Repository<alepha1.TObject<{
+    id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+    version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+    createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    realm: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_DEFAULT>;
+    username: alepha1.TOptional<alepha1.TString>;
+    email: alepha1.TOptional<alepha1.TString>;
+    phoneNumber: alepha1.TOptional<alepha1.TString>;
+    roles: alepha_orm0.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm0.PG_DEFAULT>;
+    firstName: alepha1.TOptional<alepha1.TString>;
+    lastName: alepha1.TOptional<alepha1.TString>;
+    picture: alepha1.TOptional<alepha1.TString>;
+    enabled: alepha_orm0.PgAttr<alepha1.TBoolean, typeof alepha_orm0.PG_DEFAULT>;
+    emailVerified: alepha_orm0.PgAttr<alepha1.TBoolean, typeof alepha_orm0.PG_DEFAULT>;
+  }>>;
+  protected realms: Map<string, UserRealm>;
+  avatars: alepha_bucket0.BucketPrimitive;
+  protected readonly onConfigure: alepha1.HookPrimitive<"configure">;
+  register(userRealmName: string, userRealmOptions?: UserRealmOptions): UserRealm;
+  /**
+   * Gets a registered realm by name, auto-creating default if needed.
+   */
+  getRealm(userRealmName?: string): UserRealm;
+  identityRepository(userRealmName?: string): Repository<typeof identities.schema>;
+  sessionRepository(userRealmName?: string): Repository<typeof sessions.schema>;
+  userRepository(userRealmName?: string): Repository<typeof users.schema>;
+}
+//#endregion
+//#region ../../src/api/users/schemas/identityQuerySchema.d.ts
+declare const identityQuerySchema: alepha1.TObject<{
+  page: alepha1.TOptional<alepha1.TInteger>;
+  size: alepha1.TOptional<alepha1.TInteger>;
+  sort: alepha1.TOptional<alepha1.TString>;
+  userId: alepha1.TOptional<alepha1.TString>;
+  provider: alepha1.TOptional<alepha1.TString>;
+}>;
+type IdentityQuery = Static<typeof identityQuerySchema>;
+//#endregion
+//#region ../../src/api/users/services/IdentityService.d.ts
+declare class IdentityService {
+  protected readonly log: alepha_logger5.Logger;
+  protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
+  identities(userRealmName?: string): alepha_orm0.Repository<alepha1.TObject<{
+    id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+    version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+    createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    userId: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_REF>;
+    password: alepha1.TOptional<alepha1.TString>;
+    provider: alepha1.TString;
+    providerUserId: alepha1.TOptional<alepha1.TString>;
+    providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
+  }>>;
+  /**
+   * Find identities with pagination and filtering.
+   */
+  findIdentities(q?: IdentityQuery, userRealmName?: string): Promise<Page$1<IdentityEntity>>;
+  /**
+   * Get an identity by ID.
+   */
+  getIdentityById(id: string, userRealmName?: string): Promise<IdentityEntity>;
+  /**
+   * Delete an identity by ID.
+   */
+  deleteIdentity(id: string, userRealmName?: string): Promise<void>;
+}
+//#endregion
+//#region ../../src/api/users/controllers/AdminIdentityController.d.ts
+declare class AdminIdentityController {
+  protected readonly url = "/identities";
+  protected readonly group = "admin:identities";
+  protected readonly identityService: IdentityService;
+  /**
+   * Find identities with pagination and filtering.
+   */
+  readonly findIdentities: alepha_server0.ActionPrimitiveFn<{
+    query: alepha1.TObject<{
+      page: alepha1.TOptional<alepha1.TInteger>;
+      size: alepha1.TOptional<alepha1.TInteger>;
+      sort: alepha1.TOptional<alepha1.TString>;
+      userId: alepha1.TOptional<alepha1.TString>;
+      provider: alepha1.TOptional<alepha1.TString>;
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TPage<alepha1.TObject<{
+      userId: PgAttr<alepha1.TString, typeof PG_REF>;
+      provider: alepha1.TString;
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      providerUserId: alepha1.TOptional<alepha1.TString>;
+      providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
+    }>>;
+  }>;
+  /**
+   * Get an identity by ID.
+   */
+  readonly getIdentity: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TObject<{
+      userId: PgAttr<alepha1.TString, typeof PG_REF>;
+      provider: alepha1.TString;
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      providerUserId: alepha1.TOptional<alepha1.TString>;
+      providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
+    }>;
+  }>;
+  /**
+   * Delete an identity.
+   */
+  readonly deleteIdentity: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TObject<{
+      ok: alepha1.TBoolean;
+      id: alepha1.TOptional<alepha1.TUnion<[alepha1.TString, alepha1.TInteger]>>;
+      count: alepha1.TOptional<alepha1.TNumber>;
+    }>;
+  }>;
+}
+//#endregion
+//#region ../../src/api/users/schemas/sessionQuerySchema.d.ts
+declare const sessionQuerySchema: alepha1.TObject<{
+  page: alepha1.TOptional<alepha1.TInteger>;
+  size: alepha1.TOptional<alepha1.TInteger>;
+  sort: alepha1.TOptional<alepha1.TString>;
+  userId: alepha1.TOptional<alepha1.TString>;
+}>;
+type SessionQuery = Static<typeof sessionQuerySchema>;
+//#endregion
+//#region ../../src/api/users/services/SessionCrudService.d.ts
+declare class SessionCrudService {
+  protected readonly log: alepha_logger5.Logger;
+  protected readonly userRealmProvider: UserRealmProvider;
+  sessions(userRealmName?: string): alepha_orm0.Repository<alepha1.TObject<{
+    id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+    version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+    createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    refreshToken: alepha1.TString;
+    userId: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_REF>;
+    expiresAt: alepha1.TString;
+    ip: alepha1.TOptional<alepha1.TString>;
+    userAgent: alepha1.TOptional<alepha1.TObject<{
+      os: alepha1.TString;
+      browser: alepha1.TString;
+      device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+    }>>;
+  }>>;
+  /**
+   * Find sessions with pagination and filtering.
+   */
+  findSessions(q?: SessionQuery, userRealmName?: string): Promise<Page$1<SessionEntity>>;
+  /**
+   * Get a session by ID.
+   */
+  getSessionById(id: string, userRealmName?: string): Promise<SessionEntity>;
+  /**
+   * Delete a session by ID.
+   */
+  deleteSession(id: string, userRealmName?: string): Promise<void>;
+}
+//#endregion
+//#region ../../src/api/users/controllers/AdminSessionController.d.ts
+declare class AdminSessionController {
+  protected readonly url = "/sessions";
+  protected readonly group = "admin:sessions";
+  protected readonly sessionService: SessionCrudService;
+  /**
+   * Find sessions with pagination and filtering.
+   */
+  readonly findSessions: alepha_server0.ActionPrimitiveFn<{
+    query: alepha1.TObject<{
+      page: alepha1.TOptional<alepha1.TInteger>;
+      size: alepha1.TOptional<alepha1.TInteger>;
+      sort: alepha1.TOptional<alepha1.TString>;
+      userId: alepha1.TOptional<alepha1.TString>;
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TPage<alepha1.TObject<{
+      id: alepha1.TString;
+      version: alepha1.TNumber;
+      createdAt: alepha1.TString;
+      updatedAt: alepha1.TString;
+      refreshToken: alepha1.TString;
+      userId: alepha1.TString;
+      expiresAt: alepha1.TString;
+      ip: alepha1.TOptional<alepha1.TString>;
+      userAgent: alepha1.TOptional<alepha1.TObject<{
+        os: alepha1.TString;
+        browser: alepha1.TString;
+        device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+      }>>;
+    }>>;
+  }>;
+  /**
+   * Get a session by ID.
+   */
+  readonly getSession: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TObject<{
+      id: alepha1.TString;
+      version: alepha1.TNumber;
+      createdAt: alepha1.TString;
+      updatedAt: alepha1.TString;
+      refreshToken: alepha1.TString;
+      userId: alepha1.TString;
+      expiresAt: alepha1.TString;
+      ip: alepha1.TOptional<alepha1.TString>;
+      userAgent: alepha1.TOptional<alepha1.TObject<{
+        os: alepha1.TString;
+        browser: alepha1.TString;
+        device: alepha1.TUnsafe<"MOBILE" | "DESKTOP" | "TABLET">;
+      }>>;
+    }>;
+  }>;
+  /**
+   * Delete a session.
+   */
+  readonly deleteSession: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TObject<{
+      ok: alepha1.TBoolean;
+      id: alepha1.TOptional<alepha1.TUnion<[alepha1.TString, alepha1.TInteger]>>;
+      count: alepha1.TOptional<alepha1.TNumber>;
+    }>;
+  }>;
+}
+//#endregion
+//#region ../../src/api/users/notifications/UserNotifications.d.ts
+declare class UserNotifications {
+  readonly passwordReset: alepha_api_notifications0.NotificationPrimitive<alepha1.TObject<{
+    email: alepha1.TString;
+    code: alepha1.TString;
+    expiresInMinutes: alepha1.TNumber;
+  }>>;
+  readonly emailVerification: alepha_api_notifications0.NotificationPrimitive<alepha1.TObject<{
+    email: alepha1.TString;
+    code: alepha1.TString;
     expiresInMinutes: alepha1.TNumber;
   }>>;
   readonly phoneVerification: alepha_api_notifications0.NotificationPrimitive<alepha1.TObject<{
@@ -1989,6 +1912,270 @@ declare class UserNotifications {
   }>>;
 }
 //#endregion
+//#region ../../src/api/users/schemas/createUserSchema.d.ts
+declare const createUserSchema: alepha1.TObject<{
+  id: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
+  version: alepha1.TOptional<PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
+  email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  createdAt: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
+  updatedAt: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
+  username: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
+  firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  enabled: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
+  emailVerified: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
+}>;
+type CreateUser = Static<typeof createUserSchema>;
+//#endregion
+//#region ../../src/api/users/schemas/updateUserSchema.d.ts
+declare const updateUserSchema: alepha1.TObject<{
+  email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  realm: alepha1.TOptional<PgAttr<alepha1.TString, typeof PG_DEFAULT>>;
+  phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
+  firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+  enabled: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
+}>;
+type UpdateUser = Static<typeof updateUserSchema>;
+//#endregion
+//#region ../../src/api/users/schemas/userQuerySchema.d.ts
+declare const userQuerySchema: alepha1.TObject<{
+  page: alepha1.TOptional<alepha1.TInteger>;
+  size: alepha1.TOptional<alepha1.TInteger>;
+  sort: alepha1.TOptional<alepha1.TString>;
+  email: alepha1.TOptional<alepha1.TString>;
+  enabled: alepha1.TOptional<alepha1.TBoolean>;
+  emailVerified: alepha1.TOptional<alepha1.TBoolean>;
+  roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
+  query: alepha1.TOptional<alepha1.TString>;
+}>;
+type UserQuery = Static<typeof userQuerySchema>;
+//#endregion
+//#region ../../src/api/users/services/UserService.d.ts
+declare class UserService {
+  protected readonly log: alepha_logger5.Logger;
+  protected readonly verificationController: alepha_server_links2.HttpVirtualClient<VerificationController>;
+  protected readonly userNotifications: UserNotifications;
+  protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
+  users(userRealmName?: string): alepha_orm0.Repository<alepha1.TObject<{
+    id: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_PRIMARY_KEY>, typeof alepha_orm0.PG_DEFAULT>;
+    version: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TInteger, typeof alepha_orm0.PG_VERSION>, typeof alepha_orm0.PG_DEFAULT>;
+    createdAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_CREATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    updatedAt: alepha_orm0.PgAttr<alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_UPDATED_AT>, typeof alepha_orm0.PG_DEFAULT>;
+    realm: alepha_orm0.PgAttr<alepha1.TString, typeof alepha_orm0.PG_DEFAULT>;
+    username: alepha1.TOptional<alepha1.TString>;
+    email: alepha1.TOptional<alepha1.TString>;
+    phoneNumber: alepha1.TOptional<alepha1.TString>;
+    roles: alepha_orm0.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm0.PG_DEFAULT>;
+    firstName: alepha1.TOptional<alepha1.TString>;
+    lastName: alepha1.TOptional<alepha1.TString>;
+    picture: alepha1.TOptional<alepha1.TString>;
+    enabled: alepha_orm0.PgAttr<alepha1.TBoolean, typeof alepha_orm0.PG_DEFAULT>;
+    emailVerified: alepha_orm0.PgAttr<alepha1.TBoolean, typeof alepha_orm0.PG_DEFAULT>;
+  }>>;
+  /**
+   * Request email verification for a user.
+   * @param email - The email address to verify.
+   * @param userRealmName - Optional realm name.
+   * @param method - The verification method: "code" (default) or "link".
+   * @param verifyUrl - Base URL for verification link (required when method is "link").
+   */
+  requestEmailVerification(email: string, userRealmName?: string, method?: "code" | "link", verifyUrl?: string): Promise<boolean>;
+  /**
+   * Verify a user's email using a valid verification token.
+   * Supports both code (6-digit) and link (UUID) verification tokens.
+   */
+  verifyEmail(email: string, token: string, userRealmName?: string): Promise<void>;
+  /**
+   * Check if an email is verified.
+   */
+  isEmailVerified(email: string, userRealmName?: string): Promise<boolean>;
+  /**
+   * Find users with pagination and filtering.
+   */
+  findUsers(q?: UserQuery, userRealmName?: string): Promise<Page$1<UserEntity>>;
+  /**
+   * Get a user by ID.
+   */
+  getUserById(id: string, userRealmName?: string): Promise<UserEntity>;
+  /**
+   * Create a new user.
+   */
+  createUser(data: CreateUser, userRealmName?: string): Promise<UserEntity>;
+  /**
+   * Update an existing user.
+   */
+  updateUser(id: string, data: UpdateUser, userRealmName?: string): Promise<UserEntity>;
+  /**
+   * Delete a user by ID.
+   */
+  deleteUser(id: string, userRealmName?: string): Promise<void>;
+}
+//#endregion
+//#region ../../src/api/users/controllers/AdminUserController.d.ts
+declare class AdminUserController {
+  protected readonly url = "/users";
+  protected readonly group = "admin:users";
+  protected readonly userService: UserService;
+  /**
+   * Find users with pagination and filtering.
+   */
+  readonly findUsers: alepha_server0.ActionPrimitiveFn<{
+    query: alepha1.TObject<{
+      page: alepha1.TOptional<alepha1.TInteger>;
+      size: alepha1.TOptional<alepha1.TInteger>;
+      sort: alepha1.TOptional<alepha1.TString>;
+      email: alepha1.TOptional<alepha1.TString>;
+      enabled: alepha1.TOptional<alepha1.TBoolean>;
+      emailVerified: alepha1.TOptional<alepha1.TBoolean>;
+      roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
+      query: alepha1.TOptional<alepha1.TString>;
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TPage<alepha1.TObject<{
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha1.TString, typeof PG_DEFAULT>;
+      username: alepha1.TOptional<alepha1.TString>;
+      email: alepha1.TOptional<alepha1.TString>;
+      phoneNumber: alepha1.TOptional<alepha1.TString>;
+      roles: PgAttr<alepha1.TArray<alepha1.TString>, typeof PG_DEFAULT>;
+      firstName: alepha1.TOptional<alepha1.TString>;
+      lastName: alepha1.TOptional<alepha1.TString>;
+      picture: alepha1.TOptional<alepha1.TString>;
+      enabled: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+    }>>;
+  }>;
+  /**
+   * Get a user by ID.
+   */
+  readonly getUser: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TObject<{
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha1.TString, typeof PG_DEFAULT>;
+      username: alepha1.TOptional<alepha1.TString>;
+      email: alepha1.TOptional<alepha1.TString>;
+      phoneNumber: alepha1.TOptional<alepha1.TString>;
+      roles: PgAttr<alepha1.TArray<alepha1.TString>, typeof PG_DEFAULT>;
+      firstName: alepha1.TOptional<alepha1.TString>;
+      lastName: alepha1.TOptional<alepha1.TString>;
+      picture: alepha1.TOptional<alepha1.TString>;
+      enabled: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+    }>;
+  }>;
+  /**
+   * Create a new user.
+   */
+  readonly createUser: alepha_server0.ActionPrimitiveFn<{
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    body: alepha1.TObject<{
+      id: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
+      version: alepha1.TOptional<PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
+      email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      createdAt: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
+      updatedAt: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
+      username: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
+      firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      enabled: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
+      emailVerified: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
+    }>;
+    response: alepha1.TObject<{
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha1.TString, typeof PG_DEFAULT>;
+      username: alepha1.TOptional<alepha1.TString>;
+      email: alepha1.TOptional<alepha1.TString>;
+      phoneNumber: alepha1.TOptional<alepha1.TString>;
+      roles: PgAttr<alepha1.TArray<alepha1.TString>, typeof PG_DEFAULT>;
+      firstName: alepha1.TOptional<alepha1.TString>;
+      lastName: alepha1.TOptional<alepha1.TString>;
+      picture: alepha1.TOptional<alepha1.TString>;
+      enabled: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+    }>;
+  }>;
+  /**
+   * Update a user.
+   */
+  readonly updateUser: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    body: alepha1.TObject<{
+      email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      realm: alepha1.TOptional<PgAttr<alepha1.TString, typeof PG_DEFAULT>>;
+      phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
+      firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
+      enabled: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
+    }>;
+    response: alepha1.TObject<{
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha1.TString, typeof PG_DEFAULT>;
+      username: alepha1.TOptional<alepha1.TString>;
+      email: alepha1.TOptional<alepha1.TString>;
+      phoneNumber: alepha1.TOptional<alepha1.TString>;
+      roles: PgAttr<alepha1.TArray<alepha1.TString>, typeof PG_DEFAULT>;
+      firstName: alepha1.TOptional<alepha1.TString>;
+      lastName: alepha1.TOptional<alepha1.TString>;
+      picture: alepha1.TOptional<alepha1.TString>;
+      enabled: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+    }>;
+  }>;
+  /**
+   * Delete a user.
+   */
+  readonly deleteUser: alepha_server0.ActionPrimitiveFn<{
+    params: alepha1.TObject<{
+      id: alepha1.TString;
+    }>;
+    query: alepha1.TObject<{
+      userRealmName: alepha1.TOptional<alepha1.TString>;
+    }>;
+    response: alepha1.TObject<{
+      ok: alepha1.TBoolean;
+      id: alepha1.TOptional<alepha1.TUnion<[alepha1.TString, alepha1.TInteger]>>;
+      count: alepha1.TOptional<alepha1.TNumber>;
+    }>;
+  }>;
+}
+//#endregion
 //#region ../../src/api/users/schemas/completePasswordResetRequestSchema.d.ts
 /**
  * Request schema for completing a password reset.
@@ -2028,12 +2215,13 @@ interface PasswordResetIntent {
   expiresAt: string;
 }
 declare class CredentialService {
-  protected readonly log: alepha_logger0.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly cryptoProvider: CryptoProvider;
   protected readonly dateTimeProvider: DateTimeProvider;
-  protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
+  protected readonly verificationController: alepha_server_links2.HttpVirtualClient<VerificationController>;
   protected readonly userNotifications: UserNotifications;
   protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
   protected readonly intentCache: alepha_cache0.CachePrimitiveFn<PasswordResetIntent, any[]>;
   users(userRealmName?: string): Repository$1<alepha1.TObject<{
     id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
@@ -2169,12 +2357,13 @@ interface RegistrationIntent {
   expiresAt: string;
 }
 declare class RegistrationService {
-  protected readonly log: alepha_logger0.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly cryptoProvider: CryptoProvider;
-  protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
+  protected readonly verificationController: alepha_server_links2.HttpVirtualClient<VerificationController>;
   protected readonly userNotifications: UserNotifications;
   protected readonly userRealmProvider: UserRealmProvider;
+  protected readonly auditService: AuditService;
   protected readonly intentCache: alepha_cache0.CachePrimitiveFn<RegistrationIntent, any[]>;
   /**
    * Phase 1: Create a registration intent.
@@ -2212,111 +2401,6 @@ declare class RegistrationService {
   protected verifyPhoneCode(phoneNumber: string, code: string): Promise<void>;
 }
 //#endregion
-//#region ../../src/api/users/schemas/createUserSchema.d.ts
-declare const createUserSchema: alepha1.TObject<{
-  username: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  enabled: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
-  emailVerified: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
-  roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
-  id: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
-  version: alepha1.TOptional<PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
-  createdAt: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
-  updatedAt: alepha1.TOptional<PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
-}>;
-type CreateUser = Static<typeof createUserSchema>;
-//#endregion
-//#region ../../src/api/users/schemas/updateUserSchema.d.ts
-declare const updateUserSchema: alepha1.TObject<{
-  email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-  enabled: alepha1.TOptional<PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>>;
-  roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
-  realm: alepha1.TOptional<PgAttr<alepha1.TString, typeof PG_DEFAULT>>;
-}>;
-type UpdateUser = Static<typeof updateUserSchema>;
-//#endregion
-//#region ../../src/api/users/schemas/userQuerySchema.d.ts
-declare const userQuerySchema: alepha1.TObject<{
-  page: alepha1.TOptional<alepha1.TInteger>;
-  size: alepha1.TOptional<alepha1.TInteger>;
-  sort: alepha1.TOptional<alepha1.TString>;
-  email: alepha1.TOptional<alepha1.TString>;
-  enabled: alepha1.TOptional<alepha1.TBoolean>;
-  emailVerified: alepha1.TOptional<alepha1.TBoolean>;
-  roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
-  query: alepha1.TOptional<alepha1.TString>;
-}>;
-type UserQuery = Static<typeof userQuerySchema>;
-//#endregion
-//#region ../../src/api/users/services/UserService.d.ts
-declare class UserService {
-  protected readonly log: alepha_logger0.Logger;
-  protected readonly verificationController: alepha_server_links0.HttpVirtualClient<VerificationController>;
-  protected readonly userNotifications: UserNotifications;
-  protected readonly userRealmProvider: UserRealmProvider;
-  users(userRealmName?: string): alepha_orm179.Repository<alepha1.TObject<{
-    id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-    version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-    createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-    realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-    username: alepha1.TOptional<alepha1.TString>;
-    email: alepha1.TOptional<alepha1.TString>;
-    phoneNumber: alepha1.TOptional<alepha1.TString>;
-    roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-    firstName: alepha1.TOptional<alepha1.TString>;
-    lastName: alepha1.TOptional<alepha1.TString>;
-    picture: alepha1.TOptional<alepha1.TString>;
-    enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-  }>>;
-  /**
-   * Request email verification for a user.
-   * @param email - The email address to verify.
-   * @param userRealmName - Optional realm name.
-   * @param method - The verification method: "code" (default) or "link".
-   * @param verifyUrl - Base URL for verification link (required when method is "link").
-   */
-  requestEmailVerification(email: string, userRealmName?: string, method?: "code" | "link", verifyUrl?: string): Promise<boolean>;
-  /**
-   * Verify a user's email using a valid verification token.
-   * Supports both code (6-digit) and link (UUID) verification tokens.
-   */
-  verifyEmail(email: string, token: string, userRealmName?: string): Promise<void>;
-  /**
-   * Check if an email is verified.
-   */
-  isEmailVerified(email: string, userRealmName?: string): Promise<boolean>;
-  /**
-   * Find users with pagination and filtering.
-   */
-  findUsers(q?: UserQuery, userRealmName?: string): Promise<Page$1<UserEntity>>;
-  /**
-   * Get a user by ID.
-   */
-  getUserById(id: string, userRealmName?: string): Promise<UserEntity>;
-  /**
-   * Create a new user.
-   */
-  createUser(data: CreateUser, userRealmName?: string): Promise<UserEntity>;
-  /**
-   * Update an existing user.
-   */
-  updateUser(id: string, data: UpdateUser, userRealmName?: string): Promise<UserEntity>;
-  /**
-   * Delete a user by ID.
-   */
-  deleteUser(id: string, userRealmName?: string): Promise<void>;
-}
-//#endregion
 //#region ../../src/api/users/controllers/UserController.d.ts
 declare class UserController {
   protected readonly url = "/users";
@@ -2328,7 +2412,7 @@ declare class UserController {
    * Phase 1: Create a registration intent.
    * Validates data, creates verification sessions, and stores intent in cache.
    */
-  readonly createRegistrationIntent: alepha_server14.ActionPrimitiveFn<{
+  readonly createRegistrationIntent: alepha_server0.ActionPrimitiveFn<{
     body: alepha1.TObject<{
       password: alepha1.TString;
       username: alepha1.TOptional<alepha1.TString>;
@@ -2349,109 +2433,11 @@ declare class UserController {
       expiresAt: alepha1.TString;
     }>;
   }>;
-  /**
-   * Find users with pagination and filtering.
-   */
-  readonly findUsers: alepha_server14.ActionPrimitiveFn<{
-    query: alepha1.TObject<{
-      page: alepha1.TOptional<alepha1.TInteger>;
-      size: alepha1.TOptional<alepha1.TInteger>;
-      sort: alepha1.TOptional<alepha1.TString>;
-      email: alepha1.TOptional<alepha1.TString>;
-      enabled: alepha1.TOptional<alepha1.TBoolean>;
-      emailVerified: alepha1.TOptional<alepha1.TBoolean>;
-      roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
-      query: alepha1.TOptional<alepha1.TString>;
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TPage<alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-      username: alepha1.TOptional<alepha1.TString>;
-      email: alepha1.TOptional<alepha1.TString>;
-      phoneNumber: alepha1.TOptional<alepha1.TString>;
-      roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-      firstName: alepha1.TOptional<alepha1.TString>;
-      lastName: alepha1.TOptional<alepha1.TString>;
-      picture: alepha1.TOptional<alepha1.TString>;
-      enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-      emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    }>>;
-  }>;
-  /**
-   * Get a user by ID.
-   */
-  readonly getUser: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-      username: alepha1.TOptional<alepha1.TString>;
-      email: alepha1.TOptional<alepha1.TString>;
-      phoneNumber: alepha1.TOptional<alepha1.TString>;
-      roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-      firstName: alepha1.TOptional<alepha1.TString>;
-      lastName: alepha1.TOptional<alepha1.TString>;
-      picture: alepha1.TOptional<alepha1.TString>;
-      enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-      emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    }>;
-  }>;
-  /**
-   * Create a new user.
-   */
-  readonly createUser: alepha_server14.ActionPrimitiveFn<{
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    body: alepha1.TObject<{
-      username: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      enabled: alepha1.TOptional<alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>>;
-      emailVerified: alepha1.TOptional<alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>>;
-      roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
-      id: alepha1.TOptional<alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>>;
-      version: alepha1.TOptional<alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>>;
-      createdAt: alepha1.TOptional<alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>>;
-      updatedAt: alepha1.TOptional<alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>>;
-    }>;
-    response: alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-      username: alepha1.TOptional<alepha1.TString>;
-      email: alepha1.TOptional<alepha1.TString>;
-      phoneNumber: alepha1.TOptional<alepha1.TString>;
-      roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-      firstName: alepha1.TOptional<alepha1.TString>;
-      lastName: alepha1.TOptional<alepha1.TString>;
-      picture: alepha1.TOptional<alepha1.TString>;
-      enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-      emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    }>;
-  }>;
   /**
    * Phase 2: Complete registration using an intent.
    * Validates verification codes and creates the user.
    */
-  readonly createUserFromIntent: alepha_server14.ActionPrimitiveFn<{
+  readonly createUserFromIntent: alepha_server0.ActionPrimitiveFn<{
     body: alepha1.TObject<{
       intentId: alepha1.TString;
       emailCode: alepha1.TOptional<alepha1.TString>;
@@ -2459,80 +2445,27 @@ declare class UserController {
       captchaToken: alepha1.TOptional<alepha1.TString>;
     }>;
     response: alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
-      username: alepha1.TOptional<alepha1.TString>;
-      email: alepha1.TOptional<alepha1.TString>;
-      phoneNumber: alepha1.TOptional<alepha1.TString>;
-      roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
-      firstName: alepha1.TOptional<alepha1.TString>;
-      lastName: alepha1.TOptional<alepha1.TString>;
-      picture: alepha1.TOptional<alepha1.TString>;
-      enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-      emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    }>;
-  }>;
-  /**
-   * Update a user.
-   */
-  readonly updateUser: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    body: alepha1.TObject<{
-      email: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      phoneNumber: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      firstName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      lastName: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      picture: alepha1.TOptional<alepha1.TOptional<alepha1.TString>>;
-      enabled: alepha1.TOptional<alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>>;
-      roles: alepha1.TOptional<alepha1.TArray<alepha1.TString>>;
-      realm: alepha1.TOptional<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>>;
-    }>;
-    response: alepha1.TObject<{
-      id: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_PRIMARY_KEY>, typeof alepha_orm179.PG_DEFAULT>;
-      version: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TInteger, typeof alepha_orm179.PG_VERSION>, typeof alepha_orm179.PG_DEFAULT>;
-      createdAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_CREATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      updatedAt: alepha_orm179.PgAttr<alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_UPDATED_AT>, typeof alepha_orm179.PG_DEFAULT>;
-      realm: alepha_orm179.PgAttr<alepha1.TString, typeof alepha_orm179.PG_DEFAULT>;
+      id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      realm: PgAttr<alepha1.TString, typeof PG_DEFAULT>;
       username: alepha1.TOptional<alepha1.TString>;
       email: alepha1.TOptional<alepha1.TString>;
       phoneNumber: alepha1.TOptional<alepha1.TString>;
-      roles: alepha_orm179.PgAttr<alepha1.TArray<alepha1.TString>, typeof alepha_orm179.PG_DEFAULT>;
+      roles: PgAttr<alepha1.TArray<alepha1.TString>, typeof PG_DEFAULT>;
       firstName: alepha1.TOptional<alepha1.TString>;
       lastName: alepha1.TOptional<alepha1.TString>;
       picture: alepha1.TOptional<alepha1.TString>;
-      enabled: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-      emailVerified: alepha_orm179.PgAttr<alepha1.TBoolean, typeof alepha_orm179.PG_DEFAULT>;
-    }>;
-  }>;
-  /**
-   * Delete a user.
-   */
-  readonly deleteUser: alepha_server14.ActionPrimitiveFn<{
-    params: alepha1.TObject<{
-      id: alepha1.TString;
-    }>;
-    query: alepha1.TObject<{
-      userRealmName: alepha1.TOptional<alepha1.TString>;
-    }>;
-    response: alepha1.TObject<{
-      ok: alepha1.TBoolean;
-      id: alepha1.TOptional<alepha1.TUnion<[alepha1.TString, alepha1.TInteger]>>;
-      count: alepha1.TOptional<alepha1.TNumber>;
+      enabled: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
+      emailVerified: PgAttr<alepha1.TBoolean, typeof PG_DEFAULT>;
     }>;
   }>;
   /**
    * Phase 1: Create a password reset intent.
    * Validates email, sends verification code, and stores intent in cache.
    */
-  readonly createPasswordResetIntent: alepha_server14.ActionPrimitiveFn<{
+  readonly createPasswordResetIntent: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
     }>;
@@ -2548,7 +2481,7 @@ declare class UserController {
    * Phase 2: Complete password reset using an intent.
    * Validates verification code, updates password, and invalidates sessions.
    */
-  readonly completePasswordReset: alepha_server14.ActionPrimitiveFn<{
+  readonly completePasswordReset: alepha_server0.ActionPrimitiveFn<{
     body: alepha1.TObject<{
       intentId: alepha1.TString;
       code: alepha1.TString;
@@ -2563,7 +2496,7 @@ declare class UserController {
   /**
    * @deprecated Use createPasswordResetIntent instead
    */
-  requestPasswordReset: alepha_server14.ActionPrimitiveFn<{
+  requestPasswordReset: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
     }>;
@@ -2578,7 +2511,7 @@ declare class UserController {
   /**
    * @deprecated Use completePasswordReset instead
    */
-  validateResetToken: alepha_server14.ActionPrimitiveFn<{
+  validateResetToken: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       email: alepha1.TString;
       token: alepha1.TString;
@@ -2592,7 +2525,7 @@ declare class UserController {
   /**
    * @deprecated Use completePasswordReset instead
    */
-  resetPassword: alepha_server14.ActionPrimitiveFn<{
+  resetPassword: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
     }>;
@@ -2612,7 +2545,7 @@ declare class UserController {
    * @param method - The verification method: "code" (default) sends a 6-digit code, "link" sends a clickable verification link.
    * @param verifyUrl - Required when method is "link". The base URL for the verification link. Token and email will be appended as query params.
    */
-  requestEmailVerification: alepha_server14.ActionPrimitiveFn<{
+  requestEmailVerification: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
       method: alepha1.TOptional<alepha1.TUnsafe<"link" | "code">>;
@@ -2630,7 +2563,7 @@ declare class UserController {
    * Verify email with a valid token.
    * Updates the user's emailVerified status.
    */
-  verifyEmail: alepha_server14.ActionPrimitiveFn<{
+  verifyEmail: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
     }>;
@@ -2646,7 +2579,7 @@ declare class UserController {
   /**
    * Check if an email is verified.
    */
-  checkEmailVerification: alepha_server14.ActionPrimitiveFn<{
+  checkEmailVerification: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       email: alepha1.TString;
       userRealmName: alepha1.TOptional<alepha1.TString>;
@@ -2664,13 +2597,14 @@ declare class UserController {
  */
 declare class UserRealmController {
   protected readonly url = "/realms";
+  protected readonly group = "realms";
   protected readonly userRealmProvider: UserRealmProvider;
   protected readonly serverAuthProvider: ServerAuthProvider;
   /**
    * Get realm configuration settings.
    * This endpoint is not exposed in the API documentation.
    */
-  readonly getRealmConfig: alepha_server14.ActionPrimitiveFn<{
+  readonly getRealmConfig: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
     }>;
@@ -2706,7 +2640,7 @@ declare class UserRealmController {
       }>>;
     }>;
   }>;
-  readonly checkUsernameAvailability: alepha_server14.ActionPrimitiveFn<{
+  readonly checkUsernameAvailability: alepha_server0.ActionPrimitiveFn<{
     query: alepha1.TObject<{
       userRealmName: alepha1.TOptional<alepha1.TString>;
     }>;
@@ -2721,12 +2655,12 @@ declare class UserRealmController {
 //#endregion
 //#region ../../src/api/users/schemas/identityResourceSchema.d.ts
 declare const identityResourceSchema: alepha1.TObject<{
+  userId: PgAttr<alepha1.TString, typeof PG_REF>;
+  provider: alepha1.TString;
   id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
   version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
   createdAt: PgAttr<PgAttr<alepha1.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
   updatedAt: PgAttr<PgAttr<alepha1.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-  userId: PgAttr<alepha1.TString, typeof PG_REF>;
-  provider: alepha1.TString;
   providerUserId: alepha1.TOptional<alepha1.TString>;
   providerData: alepha1.TOptional<alepha1.TRecord<string, alepha1.TAny>>;
 }>;
@@ -2839,9 +2773,10 @@ declare class SessionService {
   protected readonly fsp: FileSystemProvider;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly cryptoProvider: CryptoProvider;
-  protected readonly log: alepha_logger0.Logger;
+  protected readonly log: alepha_logger5.Logger;
   protected readonly userRealmProvider: UserRealmProvider;
-  protected readonly fileController: alepha_server_links0.HttpVirtualClient<FileController>;
+  protected readonly fileController: alepha_server_links2.HttpVirtualClient<FileController>;
+  protected readonly auditService: AuditService;
   users(userRealmName?: string): Repository$1<alepha1.TObject<{
     id: PgAttr<PgAttr<alepha1.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
     version: PgAttr<PgAttr<alepha1.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
@@ -2934,20 +2869,20 @@ declare class SessionService {
   }>;
   deleteSession(refreshToken: string, userRealmName?: string): Promise<void>;
   link(provider: string, profile: OAuth2Profile, userRealmName?: string): Promise<{
-    username?: string | undefined;
     email?: string | undefined;
+    username?: string | undefined;
     phoneNumber?: string | undefined;
     firstName?: string | undefined;
     lastName?: string | undefined;
     picture?: string | undefined;
-    enabled: boolean;
-    emailVerified: boolean;
-    roles: string[];
     id: string;
     version: number;
     createdAt: string;
     updatedAt: string;
     realm: string;
+    roles: string[];
+    enabled: boolean;
+    emailVerified: boolean;
   } | {
     sub: string;
     email?: string;
@@ -2991,5 +2926,5 @@ declare class SessionService {
  */
 declare const AlephaApiUsers: alepha1.Service<alepha1.Module>;
 //#endregion
-export { $userRealm, AlephaApiUsers, CompletePasswordResetRequest, CompleteRegistrationRequest, CreateUser, CredentialService, DEFAULT_USER_REALM_NAME, IdentityController, IdentityEntity, IdentityQuery, IdentityResource, IdentityService, LoginInput, PasswordResetIntentResponse, RealmAuthSettings, RegisterInput, RegistrationIntentResponse, RegistrationService, ResetPasswordInput, ResetPasswordRequest, SessionController, SessionCrudService, SessionEntity, SessionQuery, SessionResource, SessionService, UpdateUser, UserController, UserEntity, UserQuery, UserRealm, UserRealmConfig, UserRealmController, UserRealmOptions, UserRealmPrimitive, UserRealmProvider, UserRealmRepositories, UserResource, UserService, completePasswordResetRequestSchema, completeRegistrationRequestSchema, createUserSchema, identities, identityQuerySchema, identityResourceSchema, loginSchema, passwordResetIntentResponseSchema, realmAuthSettingsAtom, registerSchema, registrationIntentResponseSchema, resetPasswordRequestSchema, resetPasswordSchema, sessionQuerySchema, sessionResourceSchema, sessions, updateUserSchema, userQuerySchema, userRealmConfigSchema, userResourceSchema, users };
+export { $userRealm, AdminIdentityController, AdminSessionController, AdminUserController, AlephaApiUsers, CompletePasswordResetRequest, CompleteRegistrationRequest, CreateUser, CredentialService, DEFAULT_USER_REALM_NAME, IdentityEntity, IdentityQuery, IdentityResource, IdentityService, LoginInput, PasswordResetIntentResponse, RealmAuthSettings, RegisterInput, RegistrationIntentResponse, RegistrationService, ResetPasswordInput, ResetPasswordRequest, SessionCrudService, SessionEntity, SessionQuery, SessionResource, SessionService, UpdateUser, UserController, UserEntity, UserQuery, UserRealm, UserRealmConfig, UserRealmController, UserRealmOptions, UserRealmPrimitive, UserRealmProvider, UserRealmRepositories, UserResource, UserService, completePasswordResetRequestSchema, completeRegistrationRequestSchema, createUserSchema, identities, identityQuerySchema, identityResourceSchema, loginSchema, passwordResetIntentResponseSchema, realmAuthSettingsAtom, registerSchema, registrationIntentResponseSchema, resetPasswordRequestSchema, resetPasswordSchema, sessionQuerySchema, sessionResourceSchema, sessions, updateUserSchema, userQuerySchema, userRealmConfigSchema, userResourceSchema, users };
 //# sourceMappingURL=index.d.ts.map