alepha 0.20.6 → 0.20.8

package/dist/api/audits/index.d.ts

@@ -5,13 +5,14 @@ import { Page } from "alepha/orm";
 import * as _$alepha_server0 from "alepha/server";
 import { ServerRequest } from "alepha/server";
 import * as _$alepha_logger0 from "alepha/logger";
+import * as _$typebox from "typebox";
 import { BuildExtraConfigColumns, SQL } from "drizzle-orm";
 import { PgColumnBuilderBase, PgSequenceOptions, PgTableExtraConfigValue, UpdateDeleteAction } from "drizzle-orm/pg-core";
 //#region ../../src/api/audits/entities/audits.d.ts
 /**
  * Audit severity levels for categorizing events.
  */
-declare const auditSeveritySchema: _$alepha.TUnsafe<"info" | "warning" | "critical">;
+declare const auditSeveritySchema: _$typebox.TUnsafe<"info" | "warning" | "critical">;
 type AuditSeverity = Static<typeof auditSeveritySchema>;
 /**
  * Audit log entity for tracking important system events.
@@ -22,212 +23,215 @@ type AuditSeverity = Static<typeof auditSeveritySchema>;
  * - When it happened (createdAt)
  * - Context and details (metadata, ipAddress, userAgent)
  */
-declare const audits: _$alepha_orm0.EntityPrimitive<_$alepha.TObject<{
-  id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-  createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+declare const audits: _$alepha_orm0.EntityPrimitive<_$typebox.TObject<{
+  id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+  createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+  organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
   /**
    * Audit event type (e.g., "auth", "user", "payment", "system").
    * Used for categorizing and filtering audit events.
    */
-  type: _$alepha.TString;
+  type: _$typebox.TString;
   /**
    * Specific action performed (e.g., "login", "logout", "create", "update", "delete").
    */
-  action: _$alepha.TString;
+  action: _$typebox.TString;
   /**
    * Severity level of the event.
    */
-  severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+  severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
   /**
    * User ID who performed the action (null for system events).
    */
-  userId: _$alepha.TOptional<_$alepha.TString>;
+  userId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * User realm for multi-tenant support.
    */
-  userRealm: _$alepha.TOptional<_$alepha.TString>;
+  userRealm: _$typebox.TOptional<_$typebox.TString>;
   /**
    * User email at the time of the event (denormalized for history).
    */
-  userEmail: _$alepha.TOptional<_$alepha.TString>;
+  userEmail: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Resource type affected (e.g., "user", "order", "file").
    */
-  resourceType: _$alepha.TOptional<_$alepha.TString>;
+  resourceType: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Resource ID affected.
    */
-  resourceId: _$alepha.TOptional<_$alepha.TString>;
+  resourceId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Human-readable description of the event.
    */
-  description: _$alepha.TOptional<_$alepha.TString>;
+  description: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Additional metadata/context as JSON.
    */
-  metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
+  metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
   /**
    * Client IP address.
    */
-  ipAddress: _$alepha.TOptional<_$alepha.TString>;
+  ipAddress: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Client user agent.
    */
-  userAgent: _$alepha.TOptional<_$alepha.TString>;
+  userAgent: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Session ID if applicable.
    */
-  sessionId: _$alepha.TOptional<_$alepha.TString>;
+  sessionId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Request ID for correlation.
    */
-  requestId: _$alepha.TOptional<_$alepha.TString>;
+  requestId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Whether the action was successful.
    */
-  success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+  success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
   /**
    * Error message if the action failed.
    */
-  errorMessage: _$alepha.TOptional<_$alepha.TString>;
+  errorMessage: _$typebox.TOptional<_$typebox.TString>;
 }>>;
-declare const auditEntitySchema: _$alepha.TObject<{
-  id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-  createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+declare const auditEntitySchema: _$typebox.TObject<{
+  id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+  createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+  organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
   /**
    * Audit event type (e.g., "auth", "user", "payment", "system").
    * Used for categorizing and filtering audit events.
    */
-  type: _$alepha.TString;
+  type: _$typebox.TString;
   /**
    * Specific action performed (e.g., "login", "logout", "create", "update", "delete").
    */
-  action: _$alepha.TString;
+  action: _$typebox.TString;
   /**
    * Severity level of the event.
    */
-  severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+  severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
   /**
    * User ID who performed the action (null for system events).
    */
-  userId: _$alepha.TOptional<_$alepha.TString>;
+  userId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * User realm for multi-tenant support.
    */
-  userRealm: _$alepha.TOptional<_$alepha.TString>;
+  userRealm: _$typebox.TOptional<_$typebox.TString>;
   /**
    * User email at the time of the event (denormalized for history).
    */
-  userEmail: _$alepha.TOptional<_$alepha.TString>;
+  userEmail: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Resource type affected (e.g., "user", "order", "file").
    */
-  resourceType: _$alepha.TOptional<_$alepha.TString>;
+  resourceType: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Resource ID affected.
    */
-  resourceId: _$alepha.TOptional<_$alepha.TString>;
+  resourceId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Human-readable description of the event.
    */
-  description: _$alepha.TOptional<_$alepha.TString>;
+  description: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Additional metadata/context as JSON.
    */
-  metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
+  metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
   /**
    * Client IP address.
    */
-  ipAddress: _$alepha.TOptional<_$alepha.TString>;
+  ipAddress: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Client user agent.
    */
-  userAgent: _$alepha.TOptional<_$alepha.TString>;
+  userAgent: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Session ID if applicable.
    */
-  sessionId: _$alepha.TOptional<_$alepha.TString>;
+  sessionId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Request ID for correlation.
    */
-  requestId: _$alepha.TOptional<_$alepha.TString>;
+  requestId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Whether the action was successful.
    */
-  success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+  success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
   /**
    * Error message if the action failed.
    */
-  errorMessage: _$alepha.TOptional<_$alepha.TString>;
+  errorMessage: _$typebox.TOptional<_$typebox.TString>;
 }>;
-declare const auditEntityInsertSchema: _$alepha_orm0.TObjectInsert<_$alepha.TObject<{
-  id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-  createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+declare const auditEntityInsertSchema: _$alepha_orm0.TObjectInsert<_$typebox.TObject<{
+  id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+  createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+  organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
   /**
    * Audit event type (e.g., "auth", "user", "payment", "system").
    * Used for categorizing and filtering audit events.
    */
-  type: _$alepha.TString;
+  type: _$typebox.TString;
   /**
    * Specific action performed (e.g., "login", "logout", "create", "update", "delete").
    */
-  action: _$alepha.TString;
+  action: _$typebox.TString;
   /**
    * Severity level of the event.
    */
-  severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+  severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
   /**
    * User ID who performed the action (null for system events).
    */
-  userId: _$alepha.TOptional<_$alepha.TString>;
+  userId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * User realm for multi-tenant support.
    */
-  userRealm: _$alepha.TOptional<_$alepha.TString>;
+  userRealm: _$typebox.TOptional<_$typebox.TString>;
   /**
    * User email at the time of the event (denormalized for history).
    */
-  userEmail: _$alepha.TOptional<_$alepha.TString>;
+  userEmail: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Resource type affected (e.g., "user", "order", "file").
    */
-  resourceType: _$alepha.TOptional<_$alepha.TString>;
+  resourceType: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Resource ID affected.
    */
-  resourceId: _$alepha.TOptional<_$alepha.TString>;
+  resourceId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Human-readable description of the event.
    */
-  description: _$alepha.TOptional<_$alepha.TString>;
+  description: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Additional metadata/context as JSON.
    */
-  metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
+  metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
   /**
    * Client IP address.
    */
-  ipAddress: _$alepha.TOptional<_$alepha.TString>;
+  ipAddress: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Client user agent.
    */
-  userAgent: _$alepha.TOptional<_$alepha.TString>;
+  userAgent: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Session ID if applicable.
    */
-  sessionId: _$alepha.TOptional<_$alepha.TString>;
+  sessionId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Request ID for correlation.
    */
-  requestId: _$alepha.TOptional<_$alepha.TString>;
+  requestId: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Whether the action was successful.
    */
-  success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+  success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
   /**
    * Error message if the action failed.
    */
-  errorMessage: _$alepha.TOptional<_$alepha.TString>;
+  errorMessage: _$typebox.TOptional<_$typebox.TString>;
 }>>;
 type AuditEntity = Static<typeof audits.schema>;
 //#endregion
@@ -235,21 +239,21 @@ type AuditEntity = Static<typeof audits.schema>;
 /**
  * Query schema for searching and filtering audit logs.
  */
-declare const auditQuerySchema: _$alepha.TObject<{
-  page: _$alepha.TOptional<_$alepha.TInteger>;
-  size: _$alepha.TOptional<_$alepha.TInteger>;
-  sort: _$alepha.TOptional<_$alepha.TString>;
-  type: _$alepha.TOptional<_$alepha.TString>;
-  action: _$alepha.TOptional<_$alepha.TString>;
-  severity: _$alepha.TOptional<_$alepha.TUnsafe<"info" | "warning" | "critical">>;
-  userId: _$alepha.TOptional<_$alepha.TString>;
-  userRealm: _$alepha.TOptional<_$alepha.TString>;
-  resourceType: _$alepha.TOptional<_$alepha.TString>;
-  resourceId: _$alepha.TOptional<_$alepha.TString>;
-  success: _$alepha.TOptional<_$alepha.TBoolean>;
-  from: _$alepha.TOptional<_$alepha.TString>;
-  to: _$alepha.TOptional<_$alepha.TString>;
-  search: _$alepha.TOptional<_$alepha.TString>;
+declare const auditQuerySchema: _$typebox.TObject<{
+  page: _$typebox.TOptional<_$typebox.TInteger>;
+  size: _$typebox.TOptional<_$typebox.TInteger>;
+  sort: _$typebox.TOptional<_$typebox.TString>;
+  type: _$typebox.TOptional<_$typebox.TString>;
+  action: _$typebox.TOptional<_$typebox.TString>;
+  severity: _$typebox.TOptional<_$typebox.TUnsafe<"info" | "warning" | "critical">>;
+  userId: _$typebox.TOptional<_$typebox.TString>;
+  userRealm: _$typebox.TOptional<_$typebox.TString>;
+  resourceType: _$typebox.TOptional<_$typebox.TString>;
+  resourceId: _$typebox.TOptional<_$typebox.TString>;
+  success: _$typebox.TOptional<_$typebox.TBoolean>;
+  from: _$typebox.TOptional<_$typebox.TString>;
+  to: _$typebox.TOptional<_$typebox.TString>;
+  search: _$typebox.TOptional<_$typebox.TString>;
 }>;
 type AuditQuery = Static<typeof auditQuerySchema>;
 //#endregion
@@ -257,23 +261,23 @@ type AuditQuery = Static<typeof auditQuerySchema>;
 /**
  * Schema for creating a new audit log entry.
  */
-declare const createAuditSchema: _$alepha.TObject<{
-  type: _$alepha.TString;
-  action: _$alepha.TString;
-  severity: _$alepha.TOptional<_$alepha.TUnsafe<"info" | "warning" | "critical">>;
-  userId: _$alepha.TOptional<_$alepha.TString>;
-  userRealm: _$alepha.TOptional<_$alepha.TString>;
-  userEmail: _$alepha.TOptional<_$alepha.TString>;
-  resourceType: _$alepha.TOptional<_$alepha.TString>;
-  resourceId: _$alepha.TOptional<_$alepha.TString>;
-  description: _$alepha.TOptional<_$alepha.TString>;
-  metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-  ipAddress: _$alepha.TOptional<_$alepha.TString>;
-  userAgent: _$alepha.TOptional<_$alepha.TString>;
-  sessionId: _$alepha.TOptional<_$alepha.TString>;
-  requestId: _$alepha.TOptional<_$alepha.TString>;
-  success: _$alepha.TOptional<_$alepha.TBoolean>;
-  errorMessage: _$alepha.TOptional<_$alepha.TString>;
+declare const createAuditSchema: _$typebox.TObject<{
+  type: _$typebox.TString;
+  action: _$typebox.TString;
+  severity: _$typebox.TOptional<_$typebox.TUnsafe<"info" | "warning" | "critical">>;
+  userId: _$typebox.TOptional<_$typebox.TString>;
+  userRealm: _$typebox.TOptional<_$typebox.TString>;
+  userEmail: _$typebox.TOptional<_$typebox.TString>;
+  resourceType: _$typebox.TOptional<_$typebox.TString>;
+  resourceId: _$typebox.TOptional<_$typebox.TString>;
+  description: _$typebox.TOptional<_$typebox.TString>;
+  metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+  ipAddress: _$typebox.TOptional<_$typebox.TString>;
+  userAgent: _$typebox.TOptional<_$typebox.TString>;
+  sessionId: _$typebox.TOptional<_$typebox.TString>;
+  requestId: _$typebox.TOptional<_$typebox.TString>;
+  success: _$typebox.TOptional<_$typebox.TBoolean>;
+  errorMessage: _$typebox.TOptional<_$typebox.TString>;
 }>;
 type CreateAudit = Static<typeof createAuditSchema>;
 //#endregion
@@ -298,25 +302,26 @@ interface AuditTypeDefinition {
 declare class AuditService {
   protected readonly alepha: Alepha;
   protected readonly log: _$alepha_logger0.Logger;
-  protected readonly repo: _$alepha_orm0.Repository<_$alepha.TObject<{
-    id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-    createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-    type: _$alepha.TString;
-    action: _$alepha.TString;
-    severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-    userId: _$alepha.TOptional<_$alepha.TString>;
-    userRealm: _$alepha.TOptional<_$alepha.TString>;
-    userEmail: _$alepha.TOptional<_$alepha.TString>;
-    resourceType: _$alepha.TOptional<_$alepha.TString>;
-    resourceId: _$alepha.TOptional<_$alepha.TString>;
-    description: _$alepha.TOptional<_$alepha.TString>;
-    metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-    ipAddress: _$alepha.TOptional<_$alepha.TString>;
-    userAgent: _$alepha.TOptional<_$alepha.TString>;
-    sessionId: _$alepha.TOptional<_$alepha.TString>;
-    requestId: _$alepha.TOptional<_$alepha.TString>;
-    success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-    errorMessage: _$alepha.TOptional<_$alepha.TString>;
+  protected readonly repo: _$alepha_orm0.Repository<_$typebox.TObject<{
+    id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+    createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+    organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+    type: _$typebox.TString;
+    action: _$typebox.TString;
+    severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+    userId: _$typebox.TOptional<_$typebox.TString>;
+    userRealm: _$typebox.TOptional<_$typebox.TString>;
+    userEmail: _$typebox.TOptional<_$typebox.TString>;
+    resourceType: _$typebox.TOptional<_$typebox.TString>;
+    resourceId: _$typebox.TOptional<_$typebox.TString>;
+    description: _$typebox.TOptional<_$typebox.TString>;
+    metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+    ipAddress: _$typebox.TOptional<_$typebox.TString>;
+    userAgent: _$typebox.TOptional<_$typebox.TString>;
+    sessionId: _$typebox.TOptional<_$typebox.TString>;
+    requestId: _$typebox.TOptional<_$typebox.TString>;
+    success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+    errorMessage: _$typebox.TOptional<_$typebox.TString>;
   }>>;
   /**
    * Registry of audit types and their allowed actions.
@@ -417,93 +422,96 @@ declare class AdminAuditController {
   protected readonly url = "/audits";
   protected readonly group = "admin:audits";
   protected readonly auditService: AuditService;
-  protected readonly repo: _$alepha_orm0.Repository<_$alepha.TObject<{
-    id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-    createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-    type: _$alepha.TString;
-    action: _$alepha.TString;
-    severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-    userId: _$alepha.TOptional<_$alepha.TString>;
-    userRealm: _$alepha.TOptional<_$alepha.TString>;
-    userEmail: _$alepha.TOptional<_$alepha.TString>;
-    resourceType: _$alepha.TOptional<_$alepha.TString>;
-    resourceId: _$alepha.TOptional<_$alepha.TString>;
-    description: _$alepha.TOptional<_$alepha.TString>;
-    metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-    ipAddress: _$alepha.TOptional<_$alepha.TString>;
-    userAgent: _$alepha.TOptional<_$alepha.TString>;
-    sessionId: _$alepha.TOptional<_$alepha.TString>;
-    requestId: _$alepha.TOptional<_$alepha.TString>;
-    success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-    errorMessage: _$alepha.TOptional<_$alepha.TString>;
+  protected readonly repo: _$alepha_orm0.Repository<_$typebox.TObject<{
+    id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+    createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+    organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+    type: _$typebox.TString;
+    action: _$typebox.TString;
+    severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+    userId: _$typebox.TOptional<_$typebox.TString>;
+    userRealm: _$typebox.TOptional<_$typebox.TString>;
+    userEmail: _$typebox.TOptional<_$typebox.TString>;
+    resourceType: _$typebox.TOptional<_$typebox.TString>;
+    resourceId: _$typebox.TOptional<_$typebox.TString>;
+    description: _$typebox.TOptional<_$typebox.TString>;
+    metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+    ipAddress: _$typebox.TOptional<_$typebox.TString>;
+    userAgent: _$typebox.TOptional<_$typebox.TString>;
+    sessionId: _$typebox.TOptional<_$typebox.TString>;
+    requestId: _$typebox.TOptional<_$typebox.TString>;
+    success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+    errorMessage: _$typebox.TOptional<_$typebox.TString>;
   }>>;
   /**
    * Find audit entries with filtering and pagination.
    */
   readonly findAudits: _$alepha_server0.ActionPrimitiveFn<{
-    query: _$alepha.TObject<{
-      page: _$alepha.TOptional<_$alepha.TInteger>;
-      size: _$alepha.TOptional<_$alepha.TInteger>;
-      sort: _$alepha.TOptional<_$alepha.TString>;
-      type: _$alepha.TOptional<_$alepha.TString>;
-      action: _$alepha.TOptional<_$alepha.TString>;
-      severity: _$alepha.TOptional<_$alepha.TUnsafe<"info" | "warning" | "critical">>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha.TOptional<_$alepha.TBoolean>;
-      from: _$alepha.TOptional<_$alepha.TString>;
-      to: _$alepha.TOptional<_$alepha.TString>;
-      search: _$alepha.TOptional<_$alepha.TString>;
+    query: _$typebox.TObject<{
+      page: _$typebox.TOptional<_$typebox.TInteger>;
+      size: _$typebox.TOptional<_$typebox.TInteger>;
+      sort: _$typebox.TOptional<_$typebox.TString>;
+      type: _$typebox.TOptional<_$typebox.TString>;
+      action: _$typebox.TOptional<_$typebox.TString>;
+      severity: _$typebox.TOptional<_$typebox.TUnsafe<"info" | "warning" | "critical">>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$typebox.TOptional<_$typebox.TBoolean>;
+      from: _$typebox.TOptional<_$typebox.TString>;
+      to: _$typebox.TOptional<_$typebox.TString>;
+      search: _$typebox.TOptional<_$typebox.TString>;
     }>;
-    response: _$alepha.TPage<_$alepha.TObject<{
-      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-      type: _$alepha.TString;
-      action: _$alepha.TString;
-      severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      userEmail: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-      ipAddress: _$alepha.TOptional<_$alepha.TString>;
-      userAgent: _$alepha.TOptional<_$alepha.TString>;
-      sessionId: _$alepha.TOptional<_$alepha.TString>;
-      requestId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-      errorMessage: _$alepha.TOptional<_$alepha.TString>;
+    response: _$alepha.TPage<_$typebox.TObject<{
+      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+      organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+      type: _$typebox.TString;
+      action: _$typebox.TString;
+      severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      userEmail: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+      ipAddress: _$typebox.TOptional<_$typebox.TString>;
+      userAgent: _$typebox.TOptional<_$typebox.TString>;
+      sessionId: _$typebox.TOptional<_$typebox.TString>;
+      requestId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+      errorMessage: _$typebox.TOptional<_$typebox.TString>;
     }>>;
   }>;
   /**
    * Get a single audit entry by ID.
    */
   readonly getAudit: _$alepha_server0.ActionPrimitiveFn<{
-    params: _$alepha.TObject<{
-      id: _$alepha.TString;
+    params: _$typebox.TObject<{
+      id: _$typebox.TString;
     }>;
-    response: _$alepha.TObject<{
-      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-      type: _$alepha.TString;
-      action: _$alepha.TString;
-      severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      userEmail: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-      ipAddress: _$alepha.TOptional<_$alepha.TString>;
-      userAgent: _$alepha.TOptional<_$alepha.TString>;
-      sessionId: _$alepha.TOptional<_$alepha.TString>;
-      requestId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-      errorMessage: _$alepha.TOptional<_$alepha.TString>;
+    response: _$typebox.TObject<{
+      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+      organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+      type: _$typebox.TString;
+      action: _$typebox.TString;
+      severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      userEmail: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+      ipAddress: _$typebox.TOptional<_$typebox.TString>;
+      userAgent: _$typebox.TOptional<_$typebox.TString>;
+      sessionId: _$typebox.TOptional<_$typebox.TString>;
+      requestId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+      errorMessage: _$typebox.TOptional<_$typebox.TString>;
     }>;
   }>;
   /**
@@ -511,11 +519,11 @@ declare class AdminAuditController {
    * audit logs are usually retained for compliance reasons.
    */
   readonly deleteAudits: _$alepha_server0.ActionPrimitiveFn<{
-    body: _$alepha.TObject<{
-      ids: _$alepha.TArray<_$alepha.TString>;
+    body: _$typebox.TObject<{
+      ids: _$typebox.TArray<_$typebox.TString>;
     }>;
-    response: _$alepha.TObject<{
-      deleted: _$alepha.TArray<_$alepha.TString>;
+    response: _$typebox.TObject<{
+      deleted: _$typebox.TArray<_$typebox.TString>;
     }>;
   }>;
   /**
@@ -523,168 +531,172 @@ declare class AdminAuditController {
    * System-only — this permission should never be assigned to human roles.
    */
   readonly createAudit: _$alepha_server0.ActionPrimitiveFn<{
-    body: _$alepha.TObject<{
-      type: _$alepha.TString;
-      action: _$alepha.TString;
-      severity: _$alepha.TOptional<_$alepha.TUnsafe<"info" | "warning" | "critical">>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      userEmail: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-      ipAddress: _$alepha.TOptional<_$alepha.TString>;
-      userAgent: _$alepha.TOptional<_$alepha.TString>;
-      sessionId: _$alepha.TOptional<_$alepha.TString>;
-      requestId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha.TOptional<_$alepha.TBoolean>;
-      errorMessage: _$alepha.TOptional<_$alepha.TString>;
+    body: _$typebox.TObject<{
+      type: _$typebox.TString;
+      action: _$typebox.TString;
+      severity: _$typebox.TOptional<_$typebox.TUnsafe<"info" | "warning" | "critical">>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      userEmail: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+      ipAddress: _$typebox.TOptional<_$typebox.TString>;
+      userAgent: _$typebox.TOptional<_$typebox.TString>;
+      sessionId: _$typebox.TOptional<_$typebox.TString>;
+      requestId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$typebox.TOptional<_$typebox.TBoolean>;
+      errorMessage: _$typebox.TOptional<_$typebox.TString>;
     }>;
-    response: _$alepha.TObject<{
-      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-      type: _$alepha.TString;
-      action: _$alepha.TString;
-      severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      userEmail: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-      ipAddress: _$alepha.TOptional<_$alepha.TString>;
-      userAgent: _$alepha.TOptional<_$alepha.TString>;
-      sessionId: _$alepha.TOptional<_$alepha.TString>;
-      requestId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-      errorMessage: _$alepha.TOptional<_$alepha.TString>;
+    response: _$typebox.TObject<{
+      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+      organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+      type: _$typebox.TString;
+      action: _$typebox.TString;
+      severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      userEmail: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+      ipAddress: _$typebox.TOptional<_$typebox.TString>;
+      userAgent: _$typebox.TOptional<_$typebox.TString>;
+      sessionId: _$typebox.TOptional<_$typebox.TString>;
+      requestId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+      errorMessage: _$typebox.TOptional<_$typebox.TString>;
     }>;
   }>;
   /**
    * Get audit entries for a specific user.
    */
   readonly findByUser: _$alepha_server0.ActionPrimitiveFn<{
-    params: _$alepha.TObject<{
-      userId: _$alepha.TString;
+    params: _$typebox.TObject<{
+      userId: _$typebox.TString;
     }>;
-    query: _$alepha.TObject<{
-      type: _$alepha.TOptional<_$alepha.TString>;
-      action: _$alepha.TOptional<_$alepha.TString>;
-      severity: _$alepha.TOptional<_$alepha.TUnsafe<"info" | "warning" | "critical">>;
-      search: _$alepha.TOptional<_$alepha.TString>;
-      sort: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha.TOptional<_$alepha.TBoolean>;
-      page: _$alepha.TOptional<_$alepha.TInteger>;
-      size: _$alepha.TOptional<_$alepha.TInteger>;
-      from: _$alepha.TOptional<_$alepha.TString>;
-      to: _$alepha.TOptional<_$alepha.TString>;
+    query: _$typebox.TObject<{
+      type: _$typebox.TOptional<_$typebox.TString>;
+      search: _$typebox.TOptional<_$typebox.TString>;
+      action: _$typebox.TOptional<_$typebox.TString>;
+      severity: _$typebox.TOptional<_$typebox.TUnsafe<"info" | "warning" | "critical">>;
+      sort: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$typebox.TOptional<_$typebox.TBoolean>;
+      page: _$typebox.TOptional<_$typebox.TInteger>;
+      size: _$typebox.TOptional<_$typebox.TInteger>;
+      from: _$typebox.TOptional<_$typebox.TString>;
+      to: _$typebox.TOptional<_$typebox.TString>;
     }>;
-    response: _$alepha.TPage<_$alepha.TObject<{
-      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-      type: _$alepha.TString;
-      action: _$alepha.TString;
-      severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      userEmail: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-      ipAddress: _$alepha.TOptional<_$alepha.TString>;
-      userAgent: _$alepha.TOptional<_$alepha.TString>;
-      sessionId: _$alepha.TOptional<_$alepha.TString>;
-      requestId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-      errorMessage: _$alepha.TOptional<_$alepha.TString>;
+    response: _$alepha.TPage<_$typebox.TObject<{
+      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+      organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+      type: _$typebox.TString;
+      action: _$typebox.TString;
+      severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      userEmail: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+      ipAddress: _$typebox.TOptional<_$typebox.TString>;
+      userAgent: _$typebox.TOptional<_$typebox.TString>;
+      sessionId: _$typebox.TOptional<_$typebox.TString>;
+      requestId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+      errorMessage: _$typebox.TOptional<_$typebox.TString>;
     }>>;
   }>;
   /**
    * Get audit entries for a specific resource.
    */
   readonly findByResource: _$alepha_server0.ActionPrimitiveFn<{
-    params: _$alepha.TObject<{
-      resourceType: _$alepha.TString;
-      resourceId: _$alepha.TString;
+    params: _$typebox.TObject<{
+      resourceType: _$typebox.TString;
+      resourceId: _$typebox.TString;
     }>;
-    query: _$alepha.TObject<{
-      type: _$alepha.TOptional<_$alepha.TString>;
-      action: _$alepha.TOptional<_$alepha.TString>;
-      severity: _$alepha.TOptional<_$alepha.TUnsafe<"info" | "warning" | "critical">>;
-      search: _$alepha.TOptional<_$alepha.TString>;
-      sort: _$alepha.TOptional<_$alepha.TString>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha.TOptional<_$alepha.TBoolean>;
-      page: _$alepha.TOptional<_$alepha.TInteger>;
-      size: _$alepha.TOptional<_$alepha.TInteger>;
-      from: _$alepha.TOptional<_$alepha.TString>;
-      to: _$alepha.TOptional<_$alepha.TString>;
+    query: _$typebox.TObject<{
+      type: _$typebox.TOptional<_$typebox.TString>;
+      search: _$typebox.TOptional<_$typebox.TString>;
+      action: _$typebox.TOptional<_$typebox.TString>;
+      severity: _$typebox.TOptional<_$typebox.TUnsafe<"info" | "warning" | "critical">>;
+      sort: _$typebox.TOptional<_$typebox.TString>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      success: _$typebox.TOptional<_$typebox.TBoolean>;
+      page: _$typebox.TOptional<_$typebox.TInteger>;
+      size: _$typebox.TOptional<_$typebox.TInteger>;
+      from: _$typebox.TOptional<_$typebox.TString>;
+      to: _$typebox.TOptional<_$typebox.TString>;
     }>;
-    response: _$alepha.TPage<_$alepha.TObject<{
-      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-      type: _$alepha.TString;
-      action: _$alepha.TString;
-      severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-      userId: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
-      userEmail: _$alepha.TOptional<_$alepha.TString>;
-      resourceType: _$alepha.TOptional<_$alepha.TString>;
-      resourceId: _$alepha.TOptional<_$alepha.TString>;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-      ipAddress: _$alepha.TOptional<_$alepha.TString>;
-      userAgent: _$alepha.TOptional<_$alepha.TString>;
-      sessionId: _$alepha.TOptional<_$alepha.TString>;
-      requestId: _$alepha.TOptional<_$alepha.TString>;
-      success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-      errorMessage: _$alepha.TOptional<_$alepha.TString>;
+    response: _$alepha.TPage<_$typebox.TObject<{
+      id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+      createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+      organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+      type: _$typebox.TString;
+      action: _$typebox.TString;
+      severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+      userId: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
+      userEmail: _$typebox.TOptional<_$typebox.TString>;
+      resourceType: _$typebox.TOptional<_$typebox.TString>;
+      resourceId: _$typebox.TOptional<_$typebox.TString>;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+      ipAddress: _$typebox.TOptional<_$typebox.TString>;
+      userAgent: _$typebox.TOptional<_$typebox.TString>;
+      sessionId: _$typebox.TOptional<_$typebox.TString>;
+      requestId: _$typebox.TOptional<_$typebox.TString>;
+      success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+      errorMessage: _$typebox.TOptional<_$typebox.TString>;
     }>>;
   }>;
   /**
    * Get audit statistics.
    */
   readonly getAuditStats: _$alepha_server0.ActionPrimitiveFn<{
-    query: _$alepha.TObject<{
-      from: _$alepha.TOptional<_$alepha.TString>;
-      to: _$alepha.TOptional<_$alepha.TString>;
-      userRealm: _$alepha.TOptional<_$alepha.TString>;
+    query: _$typebox.TObject<{
+      from: _$typebox.TOptional<_$typebox.TString>;
+      to: _$typebox.TOptional<_$typebox.TString>;
+      userRealm: _$typebox.TOptional<_$typebox.TString>;
     }>;
-    response: _$alepha.TObject<{
-      total: _$alepha.TInteger;
-      byType: _$alepha.TRecord<"^.*$", _$alepha.TInteger>;
-      bySeverity: _$alepha.TObject<{
-        info: _$alepha.TInteger;
-        warning: _$alepha.TInteger;
-        critical: _$alepha.TInteger;
+    response: _$typebox.TObject<{
+      total: _$typebox.TInteger;
+      byType: _$typebox.TRecord<"^.*$", _$typebox.TInteger>;
+      bySeverity: _$typebox.TObject<{
+        info: _$typebox.TInteger;
+        warning: _$typebox.TInteger;
+        critical: _$typebox.TInteger;
       }>;
-      successRate: _$alepha.TNumber;
-      recentFailures: _$alepha.TArray<_$alepha.TObject<{
-        id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
-        createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$alepha.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
-        type: _$alepha.TString;
-        action: _$alepha.TString;
-        severity: _$alepha_orm0.PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
-        userId: _$alepha.TOptional<_$alepha.TString>;
-        userRealm: _$alepha.TOptional<_$alepha.TString>;
-        userEmail: _$alepha.TOptional<_$alepha.TString>;
-        resourceType: _$alepha.TOptional<_$alepha.TString>;
-        resourceId: _$alepha.TOptional<_$alepha.TString>;
-        description: _$alepha.TOptional<_$alepha.TString>;
-        metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-        ipAddress: _$alepha.TOptional<_$alepha.TString>;
-        userAgent: _$alepha.TOptional<_$alepha.TString>;
-        sessionId: _$alepha.TOptional<_$alepha.TString>;
-        requestId: _$alepha.TOptional<_$alepha.TString>;
-        success: _$alepha_orm0.PgAttr<_$alepha.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
-        errorMessage: _$alepha.TOptional<_$alepha.TString>;
+      successRate: _$typebox.TNumber;
+      recentFailures: _$typebox.TArray<_$typebox.TObject<{
+        id: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_PRIMARY_KEY>, typeof _$alepha_orm0.PG_DEFAULT>;
+        createdAt: _$alepha_orm0.PgAttr<_$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_CREATED_AT>, typeof _$alepha_orm0.PG_DEFAULT>;
+        organizationId: _$alepha_orm0.PgAttr<_$typebox.TString, typeof _$alepha_orm0.PG_ORGANIZATION>;
+        type: _$typebox.TString;
+        action: _$typebox.TString;
+        severity: _$alepha_orm0.PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof _$alepha_orm0.PG_DEFAULT>;
+        userId: _$typebox.TOptional<_$typebox.TString>;
+        userRealm: _$typebox.TOptional<_$typebox.TString>;
+        userEmail: _$typebox.TOptional<_$typebox.TString>;
+        resourceType: _$typebox.TOptional<_$typebox.TString>;
+        resourceId: _$typebox.TOptional<_$typebox.TString>;
+        description: _$typebox.TOptional<_$typebox.TString>;
+        metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+        ipAddress: _$typebox.TOptional<_$typebox.TString>;
+        userAgent: _$typebox.TOptional<_$typebox.TString>;
+        sessionId: _$typebox.TOptional<_$typebox.TString>;
+        requestId: _$typebox.TOptional<_$typebox.TString>;
+        success: _$alepha_orm0.PgAttr<_$typebox.TBoolean, typeof _$alepha_orm0.PG_DEFAULT>;
+        errorMessage: _$typebox.TOptional<_$typebox.TString>;
       }>>;
     }>;
   }>;
@@ -692,21 +704,21 @@ declare class AdminAuditController {
    * Get registered audit types.
    */
   readonly getTypes: _$alepha_server0.ActionPrimitiveFn<{
-    response: _$alepha.TArray<_$alepha.TObject<{
-      type: _$alepha.TString;
-      description: _$alepha.TOptional<_$alepha.TString>;
-      actions: _$alepha.TArray<_$alepha.TString>;
+    response: _$typebox.TArray<_$typebox.TObject<{
+      type: _$typebox.TString;
+      description: _$typebox.TOptional<_$typebox.TString>;
+      actions: _$typebox.TArray<_$typebox.TString>;
     }>>;
   }>;
   /**
    * Get distinct values for filters.
    */
   readonly getFilterOptions: _$alepha_server0.ActionPrimitiveFn<{
-    response: _$alepha.TObject<{
-      types: _$alepha.TArray<_$alepha.TString>;
-      actions: _$alepha.TArray<_$alepha.TString>;
-      resourceTypes: _$alepha.TArray<_$alepha.TString>;
-      userRealms: _$alepha.TArray<_$alepha.TString>;
+    response: _$typebox.TObject<{
+      types: _$typebox.TArray<_$typebox.TString>;
+      actions: _$typebox.TArray<_$typebox.TString>;
+      resourceTypes: _$typebox.TArray<_$typebox.TString>;
+      userRealms: _$typebox.TArray<_$typebox.TString>;
     }>;
   }>;
 }
@@ -838,6 +850,8 @@ type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"] as
   [PG_GENERATED]: any;
 } ? never : K]: T["properties"][K] extends {
   [PG_DEFAULT]: any;
+} | {
+  [PG_ORGANIZATION]: any;
 } | {
   "~optional": true;
 } ? TOptional<T["properties"][K]> : T["properties"][K] }>;
@@ -1113,8 +1127,8 @@ type PgAttr<T extends TSchema, TAttr extends PgSymbolKeys> = T & { [K in TAttr]:
  * - `d1://BINDING_NAME` — Cloudflare D1
  * - `hyperdrive://BINDING_NAME` — Cloudflare Hyperdrive
  */
-declare const databaseEnvSchema: _$alepha.TObject<{
-  DATABASE_URL: _$alepha.TOptional<_$alepha.TString>;
+declare const databaseEnvSchema: _$typebox.TObject<{
+  DATABASE_URL: _$typebox.TOptional<_$typebox.TString>;
   /**
    * Enable or disable push-based schema synchronization (drizzle-kit push).
    *
@@ -1122,7 +1136,7 @@ declare const databaseEnvSchema: _$alepha.TObject<{
    * Set to `false` in development to skip automatic schema sync
    * (e.g. when managing migrations manually).
    */
-  DATABASE_SYNC: _$alepha.TOptional<_$alepha.TBoolean>;
+  DATABASE_SYNC: _$typebox.TOptional<_$typebox.TBoolean>;
 }>;
 declare module "alepha" {
   interface Env extends Partial<Static<typeof databaseEnvSchema>> {}
@@ -1132,25 +1146,26 @@ declare module "alepha" {
 /**
  * Resource schema for audit log responses.
  */
-declare const auditResourceSchema: _$alepha.TObject<{
-  id: PgAttr<PgAttr<_$alepha.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-  createdAt: PgAttr<PgAttr<_$alepha.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
-  type: _$alepha.TString;
-  action: _$alepha.TString;
-  severity: PgAttr<_$alepha.TUnsafe<"info" | "warning" | "critical">, typeof PG_DEFAULT>;
-  userId: _$alepha.TOptional<_$alepha.TString>;
-  userRealm: _$alepha.TOptional<_$alepha.TString>;
-  userEmail: _$alepha.TOptional<_$alepha.TString>;
-  resourceType: _$alepha.TOptional<_$alepha.TString>;
-  resourceId: _$alepha.TOptional<_$alepha.TString>;
-  description: _$alepha.TOptional<_$alepha.TString>;
-  metadata: _$alepha.TOptional<_$alepha.TRecord<string, _$alepha.TAny>>;
-  ipAddress: _$alepha.TOptional<_$alepha.TString>;
-  userAgent: _$alepha.TOptional<_$alepha.TString>;
-  sessionId: _$alepha.TOptional<_$alepha.TString>;
-  requestId: _$alepha.TOptional<_$alepha.TString>;
-  success: PgAttr<_$alepha.TBoolean, typeof PG_DEFAULT>;
-  errorMessage: _$alepha.TOptional<_$alepha.TString>;
+declare const auditResourceSchema: _$typebox.TObject<{
+  id: PgAttr<PgAttr<_$typebox.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+  createdAt: PgAttr<PgAttr<_$typebox.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+  organizationId: PgAttr<_$typebox.TString, typeof PG_ORGANIZATION>;
+  type: _$typebox.TString;
+  action: _$typebox.TString;
+  severity: PgAttr<_$typebox.TUnsafe<"info" | "warning" | "critical">, typeof PG_DEFAULT>;
+  userId: _$typebox.TOptional<_$typebox.TString>;
+  userRealm: _$typebox.TOptional<_$typebox.TString>;
+  userEmail: _$typebox.TOptional<_$typebox.TString>;
+  resourceType: _$typebox.TOptional<_$typebox.TString>;
+  resourceId: _$typebox.TOptional<_$typebox.TString>;
+  description: _$typebox.TOptional<_$typebox.TString>;
+  metadata: _$typebox.TOptional<_$typebox.TRecord<string, _$typebox.TAny>>;
+  ipAddress: _$typebox.TOptional<_$typebox.TString>;
+  userAgent: _$typebox.TOptional<_$typebox.TString>;
+  sessionId: _$typebox.TOptional<_$typebox.TString>;
+  requestId: _$typebox.TOptional<_$typebox.TString>;
+  success: PgAttr<_$typebox.TBoolean, typeof PG_DEFAULT>;
+  errorMessage: _$typebox.TOptional<_$typebox.TString>;
 }>;
 type AuditResource = Static<typeof auditResourceSchema>;
 //#endregion