commit 2fbddd7dbc3af60c5378cc9a37c022fb7d5ea1b1
Author: root <root@LAPTOP-7DVOR6NC>
Date:   Sun Dec 21 10:09:54 2025 -0500

    Initial Version

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..9f6a527
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,37 @@
+# Frontend development
+node_modules/
+*.local
+.env.local
+.env.*.local
+.cache/
+.vite/
+.temp/
+.tmp/
+
+# Frontend build
+/public/
+/static/
+
+# Backend development
+/vendor/
+coverage/
+phpunit.xml.cache
+.phpunit.result.cache
+.php-cs-fixer.cache
+.phpstan.cache
+.phpactor/
+
+# Editors
+.DS_Store
+.vscode/
+.idea/
+
+# Logs
+logs
+*.log
+*.log*
+
+# Runtime
+/modules/
+/storage/
+/var/
\ No newline at end of file
diff --git a/.stubs/mongodb.stub.php b/.stubs/mongodb.stub.php
new file mode 100644
index 0000000..80ed022
--- /dev/null
+++ b/.stubs/mongodb.stub.php
@@ -0,0 +1,143 @@
+<?php
+/**
+ * Stub file for MongoDB extension types
+ * This file provides type information for the PHP language server
+ * It should never be executed - it's only for IDE/static analysis
+ */
+
+namespace MongoDB\BSON {
+
+    /**
+     * BSON type for the "ObjectId" type
+     */
+    class ObjectId implements \Stringable, \JsonSerializable, \MongoDB\BSON\Type
+    {
+        /**
+         * Construct a new ObjectId
+         * @param string|null $id A 24-character hexadecimal string. If not provided, the driver will generate an ObjectId.
+         */
+        final public function __construct(?string $id = null) {}
+
+        /**
+         * Returns the hexadecimal representation of this ObjectId
+         */
+        final public function __toString(): string {}
+
+        /**
+         * Returns the timestamp component of this ObjectId
+         */
+        final public function getTimestamp(): int {}
+
+        /**
+         * Returns a representation that can be converted to JSON
+         */
+        final public function jsonSerialize(): mixed {}
+
+        /**
+         * Checks if a value is a valid ObjectId
+         */
+        final public static function isValid(string $id): bool {}
+    }
+
+    /**
+     * BSON type for the "UTCDateTime" type
+     */
+    class UTCDateTime implements \JsonSerializable, \MongoDB\BSON\Type
+    {
+        /**
+         * Construct a new UTCDateTime
+         * @param int|\DateTimeInterface|null $milliseconds Number of milliseconds since the Unix epoch (1970-01-01 00:00:00 UTC)
+         */
+        final public function __construct(int|\DateTimeInterface|null $milliseconds = null) {}
+
+        /**
+         * Returns the string representation of this UTCDateTime
+         */
+        final public function __toString(): string {}
+
+        /**
+         * Returns the DateTime representation of this UTCDateTime
+         */
+        final public function toDateTime(): \DateTime {}
+
+        /**
+         * Returns a representation that can be converted to JSON
+         */
+        final public function jsonSerialize(): mixed {}
+    }
+
+    /**
+     * This interface is implemented by BSON types
+     */
+    interface Type {}
+}
+
+namespace MongoDB\Driver {
+
+    /**
+     * The MongoDB\Driver\CursorInterface interface
+     */
+    interface CursorInterface extends \Traversable
+    {
+        /**
+         * Returns the MongoDB\Driver\CursorId associated with this cursor
+         */
+        public function getId(): CursorId;
+
+        /**
+         * Returns the MongoDB\Driver\Server associated with this cursor
+         */
+        public function getServer(): Server;
+
+        /**
+         * Checks if the cursor may have additional results
+         */
+        public function isDead(): bool;
+
+        /**
+         * Sets a type map to use for BSON unserialization
+         */
+        public function setTypeMap(array $typemap): void;
+
+        /**
+         * Returns an array containing all results for this cursor
+         */
+        public function toArray(): array;
+    }
+
+    /**
+     * The MongoDB\Driver\Cursor class
+     */
+    final class Cursor implements CursorInterface, \Iterator
+    {
+        private function __construct() {}
+
+        public function current(): array|object|null {}
+        public function getId(): CursorId {}
+        public function getServer(): Server {}
+        public function isDead(): bool {}
+        public function key(): ?int {}
+        public function next(): void {}
+        public function rewind(): void {}
+        public function setTypeMap(array $typemap): void {}
+        public function toArray(): array {}
+        public function valid(): bool {}
+    }
+
+    /**
+     * The MongoDB\Driver\CursorId class
+     */
+    final class CursorId
+    {
+        private function __construct() {}
+        public function __toString(): string {}
+    }
+
+    /**
+     * The MongoDB\Driver\Server class
+     */
+    final class Server
+    {
+        private function __construct() {}
+    }
+}
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..e69de29
diff --git a/bin/console b/bin/console
new file mode 100755
index 0000000..f70ba97
--- /dev/null
+++ b/bin/console
@@ -0,0 +1,17 @@
+#!/usr/bin/env php
+<?php
+
+/**
+ * Console entry point - Symfony console has been removed.
+ * Add your own CLI commands here or integrate an alternative CLI library.
+ */
+
+if (!is_dir(dirname(__DIR__).'/vendor')) {
+    throw new LogicException('Dependencies are missing. Try running "composer install".');
+}
+
+require_once dirname(__DIR__).'/vendor/autoload.php';
+
+echo "Console commands not available. Symfony console has been removed.\n";
+echo "To add CLI functionality, integrate an alternative CLI library.\n";
+exit(0);
diff --git a/bin/phpunit b/bin/phpunit
new file mode 100755
index 0000000..ac5eef1
--- /dev/null
+++ b/bin/phpunit
@@ -0,0 +1,4 @@
+#!/usr/bin/env php
+<?php
+
+require dirname(__DIR__).'/vendor/phpunit/phpunit/phpunit';
diff --git a/composer.json b/composer.json
new file mode 100644
index 0000000..ec78a02
--- /dev/null
+++ b/composer.json
@@ -0,0 +1,42 @@
+{
+    "type": "project",
+    "license": "proprietary",
+    "minimum-stability": "stable",
+    "prefer-stable": true,
+    "require": {
+        "php": ">=8.2",
+        "ext-ctype": "*",
+        "ext-iconv": "*",
+        "mongodb/mongodb": "^2.1",
+        "php-di/php-di": "*",
+        "phpseclib/phpseclib": "^3.0"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "^11.0"
+    },
+    "config": {
+        "allow-plugins": {
+            "php-http/discovery": true
+        },
+        "bump-after-update": true,
+        "sort-packages": true
+    },
+    "autoload": {
+        "psr-4": {
+            "KTXC\\": "core/lib/",
+            "KTXF\\": "shared/lib/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "KTXT\\": "tests/php/"
+        }
+    },
+    "scripts": {
+        "post-install-cmd": [
+        ],
+        "post-update-cmd": [
+        ],
+        "test": "phpunit --colors=always --testdox"
+    }
+}
diff --git a/composer.lock b/composer.lock
new file mode 100644
index 0000000..44b9483
--- /dev/null
+++ b/composer.lock
@@ -0,0 +1,2470 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "9b9f3e5ee2fe48f2f736eb5d0a74be7c",
+    "packages": [
+        {
+            "name": "laravel/serializable-closure",
+            "version": "v2.0.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/laravel/serializable-closure.git",
+                "reference": "cb291e4c998ac50637c7eeb58189c14f5de5b9dd"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/laravel/serializable-closure/zipball/cb291e4c998ac50637c7eeb58189c14f5de5b9dd",
+                "reference": "cb291e4c998ac50637c7eeb58189c14f5de5b9dd",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.1"
+            },
+            "require-dev": {
+                "illuminate/support": "^10.0|^11.0|^12.0",
+                "nesbot/carbon": "^2.67|^3.0",
+                "pestphp/pest": "^2.36|^3.0|^4.0",
+                "phpstan/phpstan": "^2.0",
+                "symfony/var-dumper": "^6.2.0|^7.0.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Laravel\\SerializableClosure\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylor@laravel.com"
+                },
+                {
+                    "name": "Nuno Maduro",
+                    "email": "nuno@laravel.com"
+                }
+            ],
+            "description": "Laravel Serializable Closure provides an easy and secure way to serialize closures in PHP.",
+            "keywords": [
+                "closure",
+                "laravel",
+                "serializable"
+            ],
+            "support": {
+                "issues": "https://github.com/laravel/serializable-closure/issues",
+                "source": "https://github.com/laravel/serializable-closure"
+            },
+            "time": "2025-11-21T20:52:36+00:00"
+        },
+        {
+            "name": "mongodb/mongodb",
+            "version": "2.1.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/mongodb/mongo-php-library.git",
+                "reference": "0a2472ba9cbb932f7e43a8770aedb2fc30612a67"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/mongodb/mongo-php-library/zipball/0a2472ba9cbb932f7e43a8770aedb2fc30612a67",
+                "reference": "0a2472ba9cbb932f7e43a8770aedb2fc30612a67",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": "^2.0",
+                "ext-mongodb": "^2.1",
+                "php": "^8.1",
+                "psr/log": "^1.1.4|^2|^3",
+                "symfony/polyfill-php85": "^1.32"
+            },
+            "replace": {
+                "mongodb/builder": "*"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^12.0",
+                "phpunit/phpunit": "^10.5.35",
+                "rector/rector": "^2.1.4",
+                "squizlabs/php_codesniffer": "^3.7",
+                "vimeo/psalm": "6.5.*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "src/functions.php"
+                ],
+                "psr-4": {
+                    "MongoDB\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "Apache-2.0"
+            ],
+            "authors": [
+                {
+                    "name": "Andreas Braun",
+                    "email": "andreas.braun@mongodb.com"
+                },
+                {
+                    "name": "Jeremy Mikola",
+                    "email": "jmikola@gmail.com"
+                },
+                {
+                    "name": "Jérôme Tamarelle",
+                    "email": "jerome.tamarelle@mongodb.com"
+                }
+            ],
+            "description": "MongoDB driver library",
+            "homepage": "https://jira.mongodb.org/browse/PHPLIB",
+            "keywords": [
+                "database",
+                "driver",
+                "mongodb",
+                "persistence"
+            ],
+            "support": {
+                "issues": "https://github.com/mongodb/mongo-php-library/issues",
+                "source": "https://github.com/mongodb/mongo-php-library/tree/2.1.2"
+            },
+            "time": "2025-10-06T12:12:40+00:00"
+        },
+        {
+            "name": "paragonie/constant_time_encoding",
+            "version": "v3.1.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/paragonie/constant_time_encoding.git",
+                "reference": "d5b01a39b3415c2cd581d3bd3a3575c1ebbd8e77"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/paragonie/constant_time_encoding/zipball/d5b01a39b3415c2cd581d3bd3a3575c1ebbd8e77",
+                "reference": "d5b01a39b3415c2cd581d3bd3a3575c1ebbd8e77",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8"
+            },
+            "require-dev": {
+                "infection/infection": "^0",
+                "nikic/php-fuzzer": "^0",
+                "phpunit/phpunit": "^9|^10|^11",
+                "vimeo/psalm": "^4|^5|^6"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "ParagonIE\\ConstantTime\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Paragon Initiative Enterprises",
+                    "email": "security@paragonie.com",
+                    "homepage": "https://paragonie.com",
+                    "role": "Maintainer"
+                },
+                {
+                    "name": "Steve 'Sc00bz' Thomas",
+                    "email": "steve@tobtu.com",
+                    "homepage": "https://www.tobtu.com",
+                    "role": "Original Developer"
+                }
+            ],
+            "description": "Constant-time Implementations of RFC 4648 Encoding (Base-64, Base-32, Base-16)",
+            "keywords": [
+                "base16",
+                "base32",
+                "base32_decode",
+                "base32_encode",
+                "base64",
+                "base64_decode",
+                "base64_encode",
+                "bin2hex",
+                "encoding",
+                "hex",
+                "hex2bin",
+                "rfc4648"
+            ],
+            "support": {
+                "email": "info@paragonie.com",
+                "issues": "https://github.com/paragonie/constant_time_encoding/issues",
+                "source": "https://github.com/paragonie/constant_time_encoding"
+            },
+            "time": "2025-09-24T15:06:41+00:00"
+        },
+        {
+            "name": "paragonie/random_compat",
+            "version": "v9.99.100",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/paragonie/random_compat.git",
+                "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/paragonie/random_compat/zipball/996434e5492cb4c3edcb9168db6fbb1359ef965a",
+                "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">= 7"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "4.*|5.*",
+                "vimeo/psalm": "^1"
+            },
+            "suggest": {
+                "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes."
+            },
+            "type": "library",
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Paragon Initiative Enterprises",
+                    "email": "security@paragonie.com",
+                    "homepage": "https://paragonie.com"
+                }
+            ],
+            "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7",
+            "keywords": [
+                "csprng",
+                "polyfill",
+                "pseudorandom",
+                "random"
+            ],
+            "support": {
+                "email": "info@paragonie.com",
+                "issues": "https://github.com/paragonie/random_compat/issues",
+                "source": "https://github.com/paragonie/random_compat"
+            },
+            "time": "2020-10-15T08:29:30+00:00"
+        },
+        {
+            "name": "php-di/invoker",
+            "version": "2.3.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/PHP-DI/Invoker.git",
+                "reference": "3c1ddfdef181431fbc4be83378f6d036d59e81e1"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/PHP-DI/Invoker/zipball/3c1ddfdef181431fbc4be83378f6d036d59e81e1",
+                "reference": "3c1ddfdef181431fbc4be83378f6d036d59e81e1",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "psr/container": "^1.0|^2.0"
+            },
+            "require-dev": {
+                "athletic/athletic": "~0.1.8",
+                "mnapoli/hard-mode": "~0.3.0",
+                "phpunit/phpunit": "^9.0 || ^10 || ^11 || ^12"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Invoker\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Generic and extensible callable invoker",
+            "homepage": "https://github.com/PHP-DI/Invoker",
+            "keywords": [
+                "callable",
+                "dependency",
+                "dependency-injection",
+                "injection",
+                "invoke",
+                "invoker"
+            ],
+            "support": {
+                "issues": "https://github.com/PHP-DI/Invoker/issues",
+                "source": "https://github.com/PHP-DI/Invoker/tree/2.3.7"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/mnapoli",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-08-30T10:22:22+00:00"
+        },
+        {
+            "name": "php-di/php-di",
+            "version": "7.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/PHP-DI/PHP-DI.git",
+                "reference": "f88054cc052e40dbe7b383c8817c19442d480352"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/PHP-DI/PHP-DI/zipball/f88054cc052e40dbe7b383c8817c19442d480352",
+                "reference": "f88054cc052e40dbe7b383c8817c19442d480352",
+                "shasum": ""
+            },
+            "require": {
+                "laravel/serializable-closure": "^1.0 || ^2.0",
+                "php": ">=8.0",
+                "php-di/invoker": "^2.0",
+                "psr/container": "^1.1 || ^2.0"
+            },
+            "provide": {
+                "psr/container-implementation": "^1.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^3",
+                "friendsofphp/proxy-manager-lts": "^1",
+                "mnapoli/phpunit-easymock": "^1.3",
+                "phpunit/phpunit": "^9.6 || ^10 || ^11",
+                "vimeo/psalm": "^5|^6"
+            },
+            "suggest": {
+                "friendsofphp/proxy-manager-lts": "Install it if you want to use lazy injection (version ^1)"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/functions.php"
+                ],
+                "psr-4": {
+                    "DI\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "The dependency injection container for humans",
+            "homepage": "https://php-di.org/",
+            "keywords": [
+                "PSR-11",
+                "container",
+                "container-interop",
+                "dependency injection",
+                "di",
+                "ioc",
+                "psr11"
+            ],
+            "support": {
+                "issues": "https://github.com/PHP-DI/PHP-DI/issues",
+                "source": "https://github.com/PHP-DI/PHP-DI/tree/7.1.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/mnapoli",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/php-di/php-di",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-16T11:10:48+00:00"
+        },
+        {
+            "name": "phpseclib/phpseclib",
+            "version": "3.0.48",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phpseclib/phpseclib.git",
+                "reference": "64065a5679c50acb886e82c07aa139b0f757bb89"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/64065a5679c50acb886e82c07aa139b0f757bb89",
+                "reference": "64065a5679c50acb886e82c07aa139b0f757bb89",
+                "shasum": ""
+            },
+            "require": {
+                "paragonie/constant_time_encoding": "^1|^2|^3",
+                "paragonie/random_compat": "^1.4|^2.0|^9.99.99",
+                "php": ">=5.6.1"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "*"
+            },
+            "suggest": {
+                "ext-dom": "Install the DOM extension to load XML formatted public keys.",
+                "ext-gmp": "Install the GMP (GNU Multiple Precision) extension in order to speed up arbitrary precision integer arithmetic operations.",
+                "ext-libsodium": "SSH2/SFTP can make use of some algorithms provided by the libsodium-php extension.",
+                "ext-mcrypt": "Install the Mcrypt extension in order to speed up a few other cryptographic operations.",
+                "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations."
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "phpseclib/bootstrap.php"
+                ],
+                "psr-4": {
+                    "phpseclib3\\": "phpseclib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jim Wigginton",
+                    "email": "terrafrost@php.net",
+                    "role": "Lead Developer"
+                },
+                {
+                    "name": "Patrick Monnerat",
+                    "email": "pm@datasphere.ch",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Andreas Fischer",
+                    "email": "bantu@phpbb.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Hans-Jürgen Petrich",
+                    "email": "petrich@tronic-media.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Graham Campbell",
+                    "email": "graham@alt-three.com",
+                    "role": "Developer"
+                }
+            ],
+            "description": "PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.",
+            "homepage": "http://phpseclib.sourceforge.net",
+            "keywords": [
+                "BigInteger",
+                "aes",
+                "asn.1",
+                "asn1",
+                "blowfish",
+                "crypto",
+                "cryptography",
+                "encryption",
+                "rsa",
+                "security",
+                "sftp",
+                "signature",
+                "signing",
+                "ssh",
+                "twofish",
+                "x.509",
+                "x509"
+            ],
+            "support": {
+                "issues": "https://github.com/phpseclib/phpseclib/issues",
+                "source": "https://github.com/phpseclib/phpseclib/tree/3.0.48"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/terrafrost",
+                    "type": "github"
+                },
+                {
+                    "url": "https://www.patreon.com/phpseclib",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpseclib/phpseclib",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-12-15T11:51:42+00:00"
+        },
+        {
+            "name": "psr/container",
+            "version": "2.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/container.git",
+                "reference": "c71ecc56dfe541dbd90c5360474fbc405f8d5963"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/container/zipball/c71ecc56dfe541dbd90c5360474fbc405f8d5963",
+                "reference": "c71ecc56dfe541dbd90c5360474fbc405f8d5963",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.4.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Container\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "https://www.php-fig.org/"
+                }
+            ],
+            "description": "Common Container Interface (PHP FIG PSR-11)",
+            "homepage": "https://github.com/php-fig/container",
+            "keywords": [
+                "PSR-11",
+                "container",
+                "container-interface",
+                "container-interop",
+                "psr"
+            ],
+            "support": {
+                "issues": "https://github.com/php-fig/container/issues",
+                "source": "https://github.com/php-fig/container/tree/2.0.2"
+            },
+            "time": "2021-11-05T16:47:00+00:00"
+        },
+        {
+            "name": "psr/log",
+            "version": "3.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/log.git",
+                "reference": "f16e1d5863e37f8d8c2a01719f5b34baa2b714d3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/log/zipball/f16e1d5863e37f8d8c2a01719f5b34baa2b714d3",
+                "reference": "f16e1d5863e37f8d8c2a01719f5b34baa2b714d3",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.0.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Log\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "https://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for logging libraries",
+            "homepage": "https://github.com/php-fig/log",
+            "keywords": [
+                "log",
+                "psr",
+                "psr-3"
+            ],
+            "support": {
+                "source": "https://github.com/php-fig/log/tree/3.0.2"
+            },
+            "time": "2024-09-11T13:17:53+00:00"
+        },
+        {
+            "name": "symfony/polyfill-php85",
+            "version": "v1.33.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-php85.git",
+                "reference": "d4e5fcd4ab3d998ab16c0db48e6cbb9a01993f91"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-php85/zipball/d4e5fcd4ab3d998ab16c0db48e6cbb9a01993f91",
+                "reference": "d4e5fcd4ab3d998ab16c0db48e6cbb9a01993f91",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Php85\\": ""
+                },
+                "classmap": [
+                    "Resources/stubs"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill backporting some PHP 8.5+ features to lower PHP versions",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-php85/tree/v1.33.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-06-23T16:12:55+00:00"
+        }
+    ],
+    "packages-dev": [
+        {
+            "name": "myclabs/deep-copy",
+            "version": "1.13.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/myclabs/DeepCopy.git",
+                "reference": "07d290f0c47959fd5eed98c95ee5602db07e0b6a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/myclabs/DeepCopy/zipball/07d290f0c47959fd5eed98c95ee5602db07e0b6a",
+                "reference": "07d290f0c47959fd5eed98c95ee5602db07e0b6a",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1 || ^8.0"
+            },
+            "conflict": {
+                "doctrine/collections": "<1.6.8",
+                "doctrine/common": "<2.13.3 || >=3 <3.2.2"
+            },
+            "require-dev": {
+                "doctrine/collections": "^1.6.8",
+                "doctrine/common": "^2.13.3 || ^3.2.2",
+                "phpspec/prophecy": "^1.10",
+                "phpunit/phpunit": "^7.5.20 || ^8.5.23 || ^9.5.13"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/DeepCopy/deep_copy.php"
+                ],
+                "psr-4": {
+                    "DeepCopy\\": "src/DeepCopy/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Create deep copies (clones) of your objects",
+            "keywords": [
+                "clone",
+                "copy",
+                "duplicate",
+                "object",
+                "object graph"
+            ],
+            "support": {
+                "issues": "https://github.com/myclabs/DeepCopy/issues",
+                "source": "https://github.com/myclabs/DeepCopy/tree/1.13.4"
+            },
+            "funding": [
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/myclabs/deep-copy",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-01T08:46:24+00:00"
+        },
+        {
+            "name": "nikic/php-parser",
+            "version": "v5.7.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/nikic/PHP-Parser.git",
+                "reference": "dca41cd15c2ac9d055ad70dbfd011130757d1f82"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/nikic/PHP-Parser/zipball/dca41cd15c2ac9d055ad70dbfd011130757d1f82",
+                "reference": "dca41cd15c2ac9d055ad70dbfd011130757d1f82",
+                "shasum": ""
+            },
+            "require": {
+                "ext-ctype": "*",
+                "ext-json": "*",
+                "ext-tokenizer": "*",
+                "php": ">=7.4"
+            },
+            "require-dev": {
+                "ircmaxell/php-yacc": "^0.0.7",
+                "phpunit/phpunit": "^9.0"
+            },
+            "bin": [
+                "bin/php-parse"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "PhpParser\\": "lib/PhpParser"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Nikita Popov"
+                }
+            ],
+            "description": "A PHP parser written in PHP",
+            "keywords": [
+                "parser",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/nikic/PHP-Parser/issues",
+                "source": "https://github.com/nikic/PHP-Parser/tree/v5.7.0"
+            },
+            "time": "2025-12-06T11:56:16+00:00"
+        },
+        {
+            "name": "phar-io/manifest",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/manifest.git",
+                "reference": "54750ef60c58e43759730615a392c31c80e23176"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/manifest/zipball/54750ef60c58e43759730615a392c31c80e23176",
+                "reference": "54750ef60c58e43759730615a392c31c80e23176",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-phar": "*",
+                "ext-xmlwriter": "*",
+                "phar-io/version": "^3.0.1",
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Component for reading phar.io manifest information from a PHP Archive (PHAR)",
+            "support": {
+                "issues": "https://github.com/phar-io/manifest/issues",
+                "source": "https://github.com/phar-io/manifest/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-03T12:33:53+00:00"
+        },
+        {
+            "name": "phar-io/version",
+            "version": "3.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/version.git",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/version/zipball/4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Library for handling version information and constraints",
+            "support": {
+                "issues": "https://github.com/phar-io/version/issues",
+                "source": "https://github.com/phar-io/version/tree/3.2.1"
+            },
+            "time": "2022-02-21T01:04:05+00:00"
+        },
+        {
+            "name": "phpunit/php-code-coverage",
+            "version": "11.0.11",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-code-coverage.git",
+                "reference": "4f7722aa9a7b76aa775e2d9d4e95d1ea16eeeef4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/4f7722aa9a7b76aa775e2d9d4e95d1ea16eeeef4",
+                "reference": "4f7722aa9a7b76aa775e2d9d4e95d1ea16eeeef4",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-xmlwriter": "*",
+                "nikic/php-parser": "^5.4.0",
+                "php": ">=8.2",
+                "phpunit/php-file-iterator": "^5.1.0",
+                "phpunit/php-text-template": "^4.0.1",
+                "sebastian/code-unit-reverse-lookup": "^4.0.1",
+                "sebastian/complexity": "^4.0.1",
+                "sebastian/environment": "^7.2.0",
+                "sebastian/lines-of-code": "^3.0.1",
+                "sebastian/version": "^5.0.2",
+                "theseer/tokenizer": "^1.2.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.5.2"
+            },
+            "suggest": {
+                "ext-pcov": "PHP extension that provides line coverage",
+                "ext-xdebug": "PHP extension that provides line coverage as well as branch and path coverage"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "11.0.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library that provides collection, processing, and rendering functionality for PHP code coverage information.",
+            "homepage": "https://github.com/sebastianbergmann/php-code-coverage",
+            "keywords": [
+                "coverage",
+                "testing",
+                "xunit"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-code-coverage/issues",
+                "security": "https://github.com/sebastianbergmann/php-code-coverage/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-code-coverage/tree/11.0.11"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpunit/php-code-coverage",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-27T14:37:49+00:00"
+        },
+        {
+            "name": "phpunit/php-file-iterator",
+            "version": "5.1.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-file-iterator.git",
+                "reference": "118cfaaa8bc5aef3287bf315b6060b1174754af6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/118cfaaa8bc5aef3287bf315b6060b1174754af6",
+                "reference": "118cfaaa8bc5aef3287bf315b6060b1174754af6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "FilterIterator implementation that filters files based on a list of suffixes.",
+            "homepage": "https://github.com/sebastianbergmann/php-file-iterator/",
+            "keywords": [
+                "filesystem",
+                "iterator"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-file-iterator/issues",
+                "security": "https://github.com/sebastianbergmann/php-file-iterator/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-file-iterator/tree/5.1.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-08-27T05:02:59+00:00"
+        },
+        {
+            "name": "phpunit/php-invoker",
+            "version": "5.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-invoker.git",
+                "reference": "c1ca3814734c07492b3d4c5f794f4b0995333da2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-invoker/zipball/c1ca3814734c07492b3d4c5f794f4b0995333da2",
+                "reference": "c1ca3814734c07492b3d4c5f794f4b0995333da2",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "ext-pcntl": "*",
+                "phpunit/phpunit": "^11.0"
+            },
+            "suggest": {
+                "ext-pcntl": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Invoke callables with a timeout",
+            "homepage": "https://github.com/sebastianbergmann/php-invoker/",
+            "keywords": [
+                "process"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-invoker/issues",
+                "security": "https://github.com/sebastianbergmann/php-invoker/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-invoker/tree/5.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T05:07:44+00:00"
+        },
+        {
+            "name": "phpunit/php-text-template",
+            "version": "4.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-text-template.git",
+                "reference": "3e0404dc6b300e6bf56415467ebcb3fe4f33e964"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-text-template/zipball/3e0404dc6b300e6bf56415467ebcb3fe4f33e964",
+                "reference": "3e0404dc6b300e6bf56415467ebcb3fe4f33e964",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Simple template engine.",
+            "homepage": "https://github.com/sebastianbergmann/php-text-template/",
+            "keywords": [
+                "template"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-text-template/issues",
+                "security": "https://github.com/sebastianbergmann/php-text-template/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-text-template/tree/4.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T05:08:43+00:00"
+        },
+        {
+            "name": "phpunit/php-timer",
+            "version": "7.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-timer.git",
+                "reference": "3b415def83fbcb41f991d9ebf16ae4ad8b7837b3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/3b415def83fbcb41f991d9ebf16ae4ad8b7837b3",
+                "reference": "3b415def83fbcb41f991d9ebf16ae4ad8b7837b3",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "7.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Utility class for timing",
+            "homepage": "https://github.com/sebastianbergmann/php-timer/",
+            "keywords": [
+                "timer"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-timer/issues",
+                "security": "https://github.com/sebastianbergmann/php-timer/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-timer/tree/7.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T05:09:35+00:00"
+        },
+        {
+            "name": "phpunit/phpunit",
+            "version": "11.5.46",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/phpunit.git",
+                "reference": "75dfe79a2aa30085b7132bb84377c24062193f33"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/75dfe79a2aa30085b7132bb84377c24062193f33",
+                "reference": "75dfe79a2aa30085b7132bb84377c24062193f33",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-json": "*",
+                "ext-libxml": "*",
+                "ext-mbstring": "*",
+                "ext-xml": "*",
+                "ext-xmlwriter": "*",
+                "myclabs/deep-copy": "^1.13.4",
+                "phar-io/manifest": "^2.0.4",
+                "phar-io/version": "^3.2.1",
+                "php": ">=8.2",
+                "phpunit/php-code-coverage": "^11.0.11",
+                "phpunit/php-file-iterator": "^5.1.0",
+                "phpunit/php-invoker": "^5.0.1",
+                "phpunit/php-text-template": "^4.0.1",
+                "phpunit/php-timer": "^7.0.1",
+                "sebastian/cli-parser": "^3.0.2",
+                "sebastian/code-unit": "^3.0.3",
+                "sebastian/comparator": "^6.3.2",
+                "sebastian/diff": "^6.0.2",
+                "sebastian/environment": "^7.2.1",
+                "sebastian/exporter": "^6.3.2",
+                "sebastian/global-state": "^7.0.2",
+                "sebastian/object-enumerator": "^6.0.1",
+                "sebastian/type": "^5.1.3",
+                "sebastian/version": "^5.0.2",
+                "staabm/side-effects-detector": "^1.0.5"
+            },
+            "suggest": {
+                "ext-soap": "To be able to generate mocks based on WSDL files"
+            },
+            "bin": [
+                "phpunit"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "11.5-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "src/Framework/Assert/Functions.php"
+                ],
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "The PHP Unit Testing framework.",
+            "homepage": "https://phpunit.de/",
+            "keywords": [
+                "phpunit",
+                "testing",
+                "xunit"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/phpunit/issues",
+                "security": "https://github.com/sebastianbergmann/phpunit/security/policy",
+                "source": "https://github.com/sebastianbergmann/phpunit/tree/11.5.46"
+            },
+            "funding": [
+                {
+                    "url": "https://phpunit.de/sponsors.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpunit/phpunit",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-12-06T08:01:15+00:00"
+        },
+        {
+            "name": "sebastian/cli-parser",
+            "version": "3.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/cli-parser.git",
+                "reference": "15c5dd40dc4f38794d383bb95465193f5e0ae180"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/cli-parser/zipball/15c5dd40dc4f38794d383bb95465193f5e0ae180",
+                "reference": "15c5dd40dc4f38794d383bb95465193f5e0ae180",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for parsing CLI options",
+            "homepage": "https://github.com/sebastianbergmann/cli-parser",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/cli-parser/issues",
+                "security": "https://github.com/sebastianbergmann/cli-parser/security/policy",
+                "source": "https://github.com/sebastianbergmann/cli-parser/tree/3.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T04:41:36+00:00"
+        },
+        {
+            "name": "sebastian/code-unit",
+            "version": "3.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/code-unit.git",
+                "reference": "54391c61e4af8078e5b276ab082b6d3c54c9ad64"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/code-unit/zipball/54391c61e4af8078e5b276ab082b6d3c54c9ad64",
+                "reference": "54391c61e4af8078e5b276ab082b6d3c54c9ad64",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Collection of value objects that represent the PHP code units",
+            "homepage": "https://github.com/sebastianbergmann/code-unit",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/code-unit/issues",
+                "security": "https://github.com/sebastianbergmann/code-unit/security/policy",
+                "source": "https://github.com/sebastianbergmann/code-unit/tree/3.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-03-19T07:56:08+00:00"
+        },
+        {
+            "name": "sebastian/code-unit-reverse-lookup",
+            "version": "4.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/code-unit-reverse-lookup.git",
+                "reference": "183a9b2632194febd219bb9246eee421dad8d45e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/code-unit-reverse-lookup/zipball/183a9b2632194febd219bb9246eee421dad8d45e",
+                "reference": "183a9b2632194febd219bb9246eee421dad8d45e",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Looks up which function or method a line of code belongs to",
+            "homepage": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/issues",
+                "security": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/security/policy",
+                "source": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/tree/4.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T04:45:54+00:00"
+        },
+        {
+            "name": "sebastian/comparator",
+            "version": "6.3.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/comparator.git",
+                "reference": "85c77556683e6eee4323e4c5468641ca0237e2e8"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/85c77556683e6eee4323e4c5468641ca0237e2e8",
+                "reference": "85c77556683e6eee4323e4c5468641ca0237e2e8",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-mbstring": "*",
+                "php": ">=8.2",
+                "sebastian/diff": "^6.0",
+                "sebastian/exporter": "^6.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.4"
+            },
+            "suggest": {
+                "ext-bcmath": "For comparing BcMath\\Number objects"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "6.3-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Volker Dusch",
+                    "email": "github@wallbash.com"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@2bepublished.at"
+                }
+            ],
+            "description": "Provides the functionality to compare PHP values for equality",
+            "homepage": "https://github.com/sebastianbergmann/comparator",
+            "keywords": [
+                "comparator",
+                "compare",
+                "equality"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/comparator/issues",
+                "security": "https://github.com/sebastianbergmann/comparator/security/policy",
+                "source": "https://github.com/sebastianbergmann/comparator/tree/6.3.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/comparator",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-10T08:07:46+00:00"
+        },
+        {
+            "name": "sebastian/complexity",
+            "version": "4.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/complexity.git",
+                "reference": "ee41d384ab1906c68852636b6de493846e13e5a0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/complexity/zipball/ee41d384ab1906c68852636b6de493846e13e5a0",
+                "reference": "ee41d384ab1906c68852636b6de493846e13e5a0",
+                "shasum": ""
+            },
+            "require": {
+                "nikic/php-parser": "^5.0",
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for calculating the complexity of PHP code units",
+            "homepage": "https://github.com/sebastianbergmann/complexity",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/complexity/issues",
+                "security": "https://github.com/sebastianbergmann/complexity/security/policy",
+                "source": "https://github.com/sebastianbergmann/complexity/tree/4.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T04:49:50+00:00"
+        },
+        {
+            "name": "sebastian/diff",
+            "version": "6.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/diff.git",
+                "reference": "b4ccd857127db5d41a5b676f24b51371d76d8544"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/b4ccd857127db5d41a5b676f24b51371d76d8544",
+                "reference": "b4ccd857127db5d41a5b676f24b51371d76d8544",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0",
+                "symfony/process": "^4.2 || ^5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "6.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Kore Nordmann",
+                    "email": "mail@kore-nordmann.de"
+                }
+            ],
+            "description": "Diff implementation",
+            "homepage": "https://github.com/sebastianbergmann/diff",
+            "keywords": [
+                "diff",
+                "udiff",
+                "unidiff",
+                "unified diff"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/diff/issues",
+                "security": "https://github.com/sebastianbergmann/diff/security/policy",
+                "source": "https://github.com/sebastianbergmann/diff/tree/6.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T04:53:05+00:00"
+        },
+        {
+            "name": "sebastian/environment",
+            "version": "7.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/environment.git",
+                "reference": "a5c75038693ad2e8d4b6c15ba2403532647830c4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/environment/zipball/a5c75038693ad2e8d4b6c15ba2403532647830c4",
+                "reference": "a5c75038693ad2e8d4b6c15ba2403532647830c4",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.3"
+            },
+            "suggest": {
+                "ext-posix": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "7.2-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Provides functionality to handle HHVM/PHP environments",
+            "homepage": "https://github.com/sebastianbergmann/environment",
+            "keywords": [
+                "Xdebug",
+                "environment",
+                "hhvm"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/environment/issues",
+                "security": "https://github.com/sebastianbergmann/environment/security/policy",
+                "source": "https://github.com/sebastianbergmann/environment/tree/7.2.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/environment",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-05-21T11:55:47+00:00"
+        },
+        {
+            "name": "sebastian/exporter",
+            "version": "6.3.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/exporter.git",
+                "reference": "70a298763b40b213ec087c51c739efcaa90bcd74"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/exporter/zipball/70a298763b40b213ec087c51c739efcaa90bcd74",
+                "reference": "70a298763b40b213ec087c51c739efcaa90bcd74",
+                "shasum": ""
+            },
+            "require": {
+                "ext-mbstring": "*",
+                "php": ">=8.2",
+                "sebastian/recursion-context": "^6.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "6.3-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Volker Dusch",
+                    "email": "github@wallbash.com"
+                },
+                {
+                    "name": "Adam Harvey",
+                    "email": "aharvey@php.net"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@gmail.com"
+                }
+            ],
+            "description": "Provides the functionality to export PHP variables for visualization",
+            "homepage": "https://www.github.com/sebastianbergmann/exporter",
+            "keywords": [
+                "export",
+                "exporter"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/exporter/issues",
+                "security": "https://github.com/sebastianbergmann/exporter/security/policy",
+                "source": "https://github.com/sebastianbergmann/exporter/tree/6.3.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/exporter",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-09-24T06:12:51+00:00"
+        },
+        {
+            "name": "sebastian/global-state",
+            "version": "7.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/global-state.git",
+                "reference": "3be331570a721f9a4b5917f4209773de17f747d7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/global-state/zipball/3be331570a721f9a4b5917f4209773de17f747d7",
+                "reference": "3be331570a721f9a4b5917f4209773de17f747d7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2",
+                "sebastian/object-reflector": "^4.0",
+                "sebastian/recursion-context": "^6.0"
+            },
+            "require-dev": {
+                "ext-dom": "*",
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "7.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Snapshotting of global state",
+            "homepage": "https://www.github.com/sebastianbergmann/global-state",
+            "keywords": [
+                "global state"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/global-state/issues",
+                "security": "https://github.com/sebastianbergmann/global-state/security/policy",
+                "source": "https://github.com/sebastianbergmann/global-state/tree/7.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T04:57:36+00:00"
+        },
+        {
+            "name": "sebastian/lines-of-code",
+            "version": "3.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/lines-of-code.git",
+                "reference": "d36ad0d782e5756913e42ad87cb2890f4ffe467a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/lines-of-code/zipball/d36ad0d782e5756913e42ad87cb2890f4ffe467a",
+                "reference": "d36ad0d782e5756913e42ad87cb2890f4ffe467a",
+                "shasum": ""
+            },
+            "require": {
+                "nikic/php-parser": "^5.0",
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for counting the lines of code in PHP source code",
+            "homepage": "https://github.com/sebastianbergmann/lines-of-code",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/lines-of-code/issues",
+                "security": "https://github.com/sebastianbergmann/lines-of-code/security/policy",
+                "source": "https://github.com/sebastianbergmann/lines-of-code/tree/3.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T04:58:38+00:00"
+        },
+        {
+            "name": "sebastian/object-enumerator",
+            "version": "6.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-enumerator.git",
+                "reference": "f5b498e631a74204185071eb41f33f38d64608aa"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-enumerator/zipball/f5b498e631a74204185071eb41f33f38d64608aa",
+                "reference": "f5b498e631a74204185071eb41f33f38d64608aa",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2",
+                "sebastian/object-reflector": "^4.0",
+                "sebastian/recursion-context": "^6.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "6.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Traverses array structures and object graphs to enumerate all referenced objects",
+            "homepage": "https://github.com/sebastianbergmann/object-enumerator/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/object-enumerator/issues",
+                "security": "https://github.com/sebastianbergmann/object-enumerator/security/policy",
+                "source": "https://github.com/sebastianbergmann/object-enumerator/tree/6.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T05:00:13+00:00"
+        },
+        {
+            "name": "sebastian/object-reflector",
+            "version": "4.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-reflector.git",
+                "reference": "6e1a43b411b2ad34146dee7524cb13a068bb35f9"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-reflector/zipball/6e1a43b411b2ad34146dee7524cb13a068bb35f9",
+                "reference": "6e1a43b411b2ad34146dee7524cb13a068bb35f9",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Allows reflection of object attributes, including inherited and non-public ones",
+            "homepage": "https://github.com/sebastianbergmann/object-reflector/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/object-reflector/issues",
+                "security": "https://github.com/sebastianbergmann/object-reflector/security/policy",
+                "source": "https://github.com/sebastianbergmann/object-reflector/tree/4.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-07-03T05:01:32+00:00"
+        },
+        {
+            "name": "sebastian/recursion-context",
+            "version": "6.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/recursion-context.git",
+                "reference": "f6458abbf32a6c8174f8f26261475dc133b3d9dc"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/recursion-context/zipball/f6458abbf32a6c8174f8f26261475dc133b3d9dc",
+                "reference": "f6458abbf32a6c8174f8f26261475dc133b3d9dc",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "6.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Adam Harvey",
+                    "email": "aharvey@php.net"
+                }
+            ],
+            "description": "Provides functionality to recursively process PHP variables",
+            "homepage": "https://github.com/sebastianbergmann/recursion-context",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/recursion-context/issues",
+                "security": "https://github.com/sebastianbergmann/recursion-context/security/policy",
+                "source": "https://github.com/sebastianbergmann/recursion-context/tree/6.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/recursion-context",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-13T04:42:22+00:00"
+        },
+        {
+            "name": "sebastian/type",
+            "version": "5.1.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/type.git",
+                "reference": "f77d2d4e78738c98d9a68d2596fe5e8fa380f449"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/type/zipball/f77d2d4e78738c98d9a68d2596fe5e8fa380f449",
+                "reference": "f77d2d4e78738c98d9a68d2596fe5e8fa380f449",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^11.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "5.1-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Collection of value objects that represent the types of the PHP type system",
+            "homepage": "https://github.com/sebastianbergmann/type",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/type/issues",
+                "security": "https://github.com/sebastianbergmann/type/security/policy",
+                "source": "https://github.com/sebastianbergmann/type/tree/5.1.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/type",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-09T06:55:48+00:00"
+        },
+        {
+            "name": "sebastian/version",
+            "version": "5.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/version.git",
+                "reference": "c687e3387b99f5b03b6caa64c74b63e2936ff874"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/version/zipball/c687e3387b99f5b03b6caa64c74b63e2936ff874",
+                "reference": "c687e3387b99f5b03b6caa64c74b63e2936ff874",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.2"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library that helps with managing the version number of Git-hosted PHP projects",
+            "homepage": "https://github.com/sebastianbergmann/version",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/version/issues",
+                "security": "https://github.com/sebastianbergmann/version/security/policy",
+                "source": "https://github.com/sebastianbergmann/version/tree/5.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-10-09T05:16:32+00:00"
+        },
+        {
+            "name": "staabm/side-effects-detector",
+            "version": "1.0.5",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/staabm/side-effects-detector.git",
+                "reference": "d8334211a140ce329c13726d4a715adbddd0a163"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/staabm/side-effects-detector/zipball/d8334211a140ce329c13726d4a715adbddd0a163",
+                "reference": "d8334211a140ce329c13726d4a715adbddd0a163",
+                "shasum": ""
+            },
+            "require": {
+                "ext-tokenizer": "*",
+                "php": "^7.4 || ^8.0"
+            },
+            "require-dev": {
+                "phpstan/extension-installer": "^1.4.3",
+                "phpstan/phpstan": "^1.12.6",
+                "phpunit/phpunit": "^9.6.21",
+                "symfony/var-dumper": "^5.4.43",
+                "tomasvotruba/type-coverage": "1.0.0",
+                "tomasvotruba/unused-public": "1.0.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "lib/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "A static analysis tool to detect side effects in PHP code",
+            "keywords": [
+                "static analysis"
+            ],
+            "support": {
+                "issues": "https://github.com/staabm/side-effects-detector/issues",
+                "source": "https://github.com/staabm/side-effects-detector/tree/1.0.5"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/staabm",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-10-20T05:08:20+00:00"
+        },
+        {
+            "name": "theseer/tokenizer",
+            "version": "1.3.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/theseer/tokenizer.git",
+                "reference": "b7489ce515e168639d17feec34b8847c326b0b3c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/theseer/tokenizer/zipball/b7489ce515e168639d17feec34b8847c326b0b3c",
+                "reference": "b7489ce515e168639d17feec34b8847c326b0b3c",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-tokenizer": "*",
+                "ext-xmlwriter": "*",
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "A small library for converting tokenized PHP source code into XML and potentially other formats",
+            "support": {
+                "issues": "https://github.com/theseer/tokenizer/issues",
+                "source": "https://github.com/theseer/tokenizer/tree/1.3.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-11-17T20:03:58+00:00"
+        }
+    ],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": [],
+    "prefer-stable": true,
+    "prefer-lowest": false,
+    "platform": {
+        "php": ">=8.2",
+        "ext-ctype": "*",
+        "ext-iconv": "*"
+    },
+    "platform-dev": [],
+    "plugin-api-version": "2.3.0"
+}
diff --git a/config/system.php b/config/system.php
new file mode 100644
index 0000000..18b3160
--- /dev/null
+++ b/config/system.php
@@ -0,0 +1,49 @@
+<?php
+
+return [
+    // Database Configuration
+    'database' => [
+        // MongoDB connection URI (include credentials if needed)
+        'uri' => 'mongodb://ktrix:ktrix@127.0.0.1:27017/?authSource=ktrix&tls=false',
+        'database' => 'ktrix',
+        // optional driver options
+        'options' => [],
+        'driverOptions' => [],
+    ],
+    
+    /**
+     * Cache Configuration
+     * 
+     * Set the cache store classes for different cache types.
+     * Uncomment and adjust the class names as needed.
+     * 
+     * Available Cache Stores:
+     * - Ephemeral Cache: Short-lived, in-memory or file-based cache for sessions, rate limits, etc.
+     * - Persistent Cache: Long-lived cache for routes, modules, compiled configs, etc.
+     * - Blob Cache: Large binary objects storage.
+     * 
+     * Predefined cache types:
+     * file - File-based cache store
+     * redis - Redis-based cache store
+     * memcached - Memcached-based cache store
+     */
+    //'cache.ephemeral' => 'file',
+    //'cache.persistent' => 'file',
+    //'cache.blob' => 'file',
+
+    // Security Configuration
+    'security.salt' => 'a5418ed8c120b9d12c793ccea10571b74d0dcd4a4db7ca2f75e80fbdafb2bd9b',
+    
+    // Application Configuration
+    'app' => [
+        'environment' => 'dev',
+        'debug' => true,
+        'name' => 'Ktrix',
+    ],
+    
+    // Domain Configuration
+    //'domain' => [
+    //    'default' => 'ktrix',
+    //],
+
+];
diff --git a/core/lib/Controllers/AuthenticationController.php b/core/lib/Controllers/AuthenticationController.php
new file mode 100644
index 0000000..aebce0b
--- /dev/null
+++ b/core/lib/Controllers/AuthenticationController.php
@@ -0,0 +1,361 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Controllers;
+
+use KTXC\Http\Cookie;
+use KTXC\Http\Request\Request;
+use KTXC\Http\Response\JsonResponse;
+use KTXC\Http\Response\RedirectResponse;
+use KTXC\Security\Authentication\AuthenticationRequest;
+use KTXC\Security\Authentication\AuthenticationResponse;
+use KTXC\Security\AuthenticationManager;
+use KTXF\Controller\ControllerAbstract;
+use KTXF\Routing\Attributes\AnonymousRoute;
+use KTXF\Routing\Attributes\AuthenticatedRoute;
+
+/**
+ * Authentication Controller
+ */
+class AuthenticationController extends ControllerAbstract
+{
+    public function __construct(
+        private readonly AuthenticationManager $authManager
+    ) {}
+
+    // =========================================================================
+    // Authentication Operations
+    // =========================================================================
+
+    /**
+     * Start authentication session
+     */
+    #[AnonymousRoute('/auth/start', name: 'auth.start', methods: ['GET'])]
+    public function start(): JsonResponse
+    {
+        $request = AuthenticationRequest::start();
+        $response = $this->authManager->handle($request);
+
+        return $this->buildJsonResponse($response);
+    }
+
+    /**
+     * Identify user for identity-first login flow
+     */
+    #[AnonymousRoute('/auth/identify', name: 'auth.identify', methods: ['POST'])]
+    public function identify(string $session, string $identity): JsonResponse
+    {
+        if (empty($session) || empty($identity)) {
+            return new JsonResponse(
+                ['error' => 'Session and identity are required', 'error_code' => 'invalid_request'],
+                JsonResponse::HTTP_BAD_REQUEST
+            );
+        }
+
+        $request = AuthenticationRequest::identify($session, trim($identity));
+        $response = $this->authManager->handle($request);
+
+        return $this->buildJsonResponse($response);
+    }
+
+    /**
+     * Start a challenge for methods that require it (SMS, email, TOTP)
+     */
+    #[AnonymousRoute('/auth/challenge', name: 'auth.challenge', methods: ['POST'])]
+    public function challenge(string $session, string $method): JsonResponse
+    {
+        if (empty($session) || empty($method)) {
+            return new JsonResponse(
+                ['error' => 'Session ID and method are required', 'error_code' => 'invalid_request'],
+                JsonResponse::HTTP_BAD_REQUEST
+            );
+        }
+
+        $request = AuthenticationRequest::challenge($session, $method);
+        $response = $this->authManager->handle($request);
+
+        return $this->buildJsonResponse($response);
+    }
+
+    /**
+     * Verify a credential or challenge response
+     */
+    #[AnonymousRoute('/auth/verify', name: 'auth.verify', methods: ['POST'])]
+    public function verify(string $session, string $method, string $response): JsonResponse
+    {
+        if (empty($session) || empty($method)) {
+            return new JsonResponse(
+                ['error' => 'Session ID and method are required', 'error_code' => 'invalid_request'],
+                JsonResponse::HTTP_BAD_REQUEST
+            );
+        }
+
+        $request = AuthenticationRequest::verify($session, $method, $response);
+        $authResponse = $this->authManager->handle($request);
+
+        return $this->buildJsonResponse($authResponse);
+    }
+
+    /**
+     * Begin redirect-based authentication (OIDC/SAML)
+     */
+    #[AnonymousRoute('/auth/redirect', name: 'auth.redirect', methods: ['POST'])]
+    public function redirect(Request $request): JsonResponse
+    {
+        $data = $this->getRequestData($request);
+        
+        $sessionId = $data['session'] ?? '';
+        $method = $data['method'] ?? '';
+        $returnUrl = $data['return_url'] ?? '/';
+
+        if (empty($sessionId) || empty($method)) {
+            return new JsonResponse(
+                ['error' => 'Session ID and method are required', 'error_code' => 'invalid_request'],
+                JsonResponse::HTTP_BAD_REQUEST
+            );
+        }
+
+        $scheme = $request->isSecure() ? 'https' : 'http';
+        $host = $request->getHost();
+        $callbackUrl = "{$scheme}://{$host}/auth/callback/{$method}";
+
+        $authRequest = AuthenticationRequest::redirect($sessionId, $method, $callbackUrl, $returnUrl);
+        $response = $this->authManager->handle($authRequest);
+
+        return $this->buildJsonResponse($response);
+    }
+
+    /**
+     * Handle callback from identity provider (OIDC/SAML)
+     */
+    #[AnonymousRoute('/auth/callback/{provider}', name: 'auth.callback', methods: ['GET', 'POST'])]
+    public function callback(Request $request, string $provider): JsonResponse|RedirectResponse
+    {
+        $params = $request->isMethod('POST')
+            ? $request->request->all()
+            : $request->query->all();
+
+        $sessionId = $params['state'] ?? null;
+        
+        if (!$sessionId) {
+            return $this->redirectWithError('Missing state parameter');
+        }
+
+        $authRequest = AuthenticationRequest::callback($sessionId, $provider, $params);
+        $response = $this->authManager->handle($authRequest);
+
+        if ($response->isSuccess()) {
+            $returnUrl = $response->returnUrl ?? '/';
+            $httpResponse = new RedirectResponse($returnUrl);
+            
+            if ($response->hasTokens()) {
+                return $this->setTokenCookies($httpResponse, $response->tokens, $request->isSecure());
+            }
+            
+            return $httpResponse;
+        }
+
+        if ($response->isPending()) {
+            return new RedirectResponse('/login/mfa?session=' . urlencode($response->sessionId));
+        }
+
+        return $this->redirectWithError($response->errorMessage ?? 'Authentication failed');
+    }
+
+    /**
+     * Get current session status
+     */
+    #[AnonymousRoute('/auth/status', name: 'auth.status', methods: ['GET'])]
+    public function status(Request $request): JsonResponse
+    {
+        $sessionId = $request->query->get('session', '');
+
+        if (empty($sessionId)) {
+            return new JsonResponse(
+                ['error' => 'Session ID is required', 'error_code' => 'invalid_request'],
+                JsonResponse::HTTP_BAD_REQUEST
+            );
+        }
+
+        $authRequest = AuthenticationRequest::status($sessionId);
+        $response = $this->authManager->handle($authRequest);
+
+        return $this->buildJsonResponse($response);
+    }
+
+    /**
+     * Cancel authentication session
+     */
+    #[AnonymousRoute('/auth/session', name: 'auth.session.cancel', methods: ['DELETE'])]
+    public function cancel(Request $request): JsonResponse
+    {
+        $sessionId = $request->query->get('session', '');
+        
+        $authRequest = AuthenticationRequest::cancel($sessionId);
+        $this->authManager->handle($authRequest);
+
+        return new JsonResponse(['status' => 'cancelled', 'message' => 'Session cancelled']);
+    }
+
+    // =========================================================================
+    // Token Operations
+    // =========================================================================
+
+    /**
+     * Refresh access token
+     */
+    #[AnonymousRoute('/auth/refresh', name: 'auth.refresh', methods: ['POST'])]
+    public function refresh(Request $request): JsonResponse
+    {
+        $refreshToken = $request->cookies->get('refreshToken');
+        
+        if (!$refreshToken) {
+            return new JsonResponse(
+                ['error' => 'Refresh token required', 'error_code' => 'missing_token'],
+                JsonResponse::HTTP_UNAUTHORIZED
+            );
+        }
+
+        $authRequest = AuthenticationRequest::refresh($refreshToken);
+        $response = $this->authManager->handle($authRequest);
+
+        if ($response->isFailed()) {
+            $httpResponse = new JsonResponse($response->toArray(), $response->httpStatus);
+            return $this->clearTokenCookies($httpResponse);
+        }
+
+        $httpResponse = new JsonResponse(['status' => 'success', 'message' => 'Token refreshed']);
+
+        if ($response->tokens && isset($response->tokens['access'])) {
+            $httpResponse->headers->setCookie(
+                Cookie::create('accessToken')
+                    ->withValue($response->tokens['access'])
+                    ->withExpires(time() + 900)
+                    ->withPath('/')
+                    ->withSecure($request->isSecure())
+                    ->withHttpOnly(true)
+                    ->withSameSite(Cookie::SAMESITE_STRICT)
+            );
+        }
+
+        return $httpResponse;
+    }
+
+    /**
+     * Logout current device
+     */
+    #[AuthenticatedRoute('/auth/logout', name: 'auth.logout', methods: ['POST'])]
+    public function logout(Request $request): JsonResponse
+    {
+        $token = $request->cookies->get('accessToken');
+        
+        $authRequest = AuthenticationRequest::logout($token, false);
+        $this->authManager->handle($authRequest);
+
+        $response = new JsonResponse(['status' => 'success', 'message' => 'Logged out successfully']);
+        return $this->clearTokenCookies($response);
+    }
+
+    /**
+     * Logout all devices
+     */
+    #[AuthenticatedRoute('/auth/logout-all', name: 'auth.logout.all', methods: ['POST'])]
+    public function logoutAll(Request $request): JsonResponse
+    {
+        $token = $request->cookies->get('accessToken');
+        
+        $authRequest = AuthenticationRequest::logout($token, true);
+        $this->authManager->handle($authRequest);
+
+        $response = new JsonResponse(['status' => 'success', 'message' => 'Logged out from all devices']);
+        return $this->clearTokenCookies($response);
+    }
+
+    // =========================================================================
+    // Response Helpers
+    // =========================================================================
+
+    /**
+     * Build JSON response from AuthenticationResponse
+     */
+    private function buildJsonResponse(AuthenticationResponse $response): JsonResponse
+    {
+        $httpResponse = new JsonResponse($response->toArray(), $response->httpStatus);
+
+        // Set token cookies if present
+        if ($response->hasTokens()) {
+            return $this->setTokenCookies($httpResponse, $response->tokens, true);
+        }
+
+        return $httpResponse;
+    }
+
+    /**
+     * Set authentication token cookies
+     */
+    private function setTokenCookies(JsonResponse|RedirectResponse $response, array $tokens, bool $secure = true): JsonResponse|RedirectResponse
+    {
+        if (isset($tokens['access'])) {
+            $response->headers->setCookie(
+                Cookie::create('accessToken')
+                    ->withValue($tokens['access'])
+                    ->withExpires(time() + 900)
+                    ->withPath('/')
+                    ->withSecure($secure)
+                    ->withHttpOnly(true)
+                    ->withSameSite(Cookie::SAMESITE_STRICT)
+            );
+        }
+
+        if (isset($tokens['refresh'])) {
+            $response->headers->setCookie(
+                Cookie::create('refreshToken')
+                    ->withValue($tokens['refresh'])
+                    ->withExpires(time() + 604800)
+                    ->withPath('/auth/refresh')
+                    ->withSecure($secure)
+                    ->withHttpOnly(true)
+                    ->withSameSite(Cookie::SAMESITE_STRICT)
+            );
+        }
+
+        return $response;
+    }
+
+    /**
+     * Clear authentication token cookies
+     */
+    private function clearTokenCookies(JsonResponse $response): JsonResponse
+    {
+        $response->headers->clearCookie('accessToken', '/');
+        $response->headers->clearCookie('refreshToken', '/auth/refresh');
+        return $response;
+    }
+
+    /**
+     * Redirect with error message
+     */
+    private function redirectWithError(string $error): RedirectResponse
+    {
+        return new RedirectResponse('/login?error=' . urlencode($error));
+    }
+
+    /**
+     * Get request data from JSON body or form data
+     */
+    private function getRequestData(Request $request): array
+    {
+        $contentType = $request->headers->get('Content-Type', '');
+        
+        if (str_contains($contentType, 'application/json')) {
+            try {
+                return $request->toArray();
+            } catch (\Throwable) {
+                return [];
+            }
+        }
+        
+        return $request->request->all();
+    }
+}
diff --git a/core/lib/Controllers/DefaultController.php b/core/lib/Controllers/DefaultController.php
new file mode 100644
index 0000000..248a3d4
--- /dev/null
+++ b/core/lib/Controllers/DefaultController.php
@@ -0,0 +1,145 @@
+<?php
+
+namespace KTXC\Controllers;
+
+use KTXC\Http\Response\Response;
+use KTXC\Http\Response\FileResponse;
+use KTXC\Http\Response\JsonResponse;
+use KTXC\Http\Response\RedirectResponse;
+use KTXC\Server;
+use KTXF\Controller\ControllerAbstract;
+use KTXF\Routing\Attributes\AnonymousRoute;
+use KTXC\Service\SecurityService;
+use KTXC\SessionIdentity;
+use KTXC\SessionTenant;
+use KTXC\Http\Request\Request;
+
+class DefaultController extends ControllerAbstract
+{
+    public function __construct(
+        private readonly SecurityService $securityService,
+        private readonly SessionTenant $tenant,
+        private readonly SessionIdentity $identity,
+    ) {}
+
+    #[AnonymousRoute('/', name: 'root', methods: ['GET'])]
+    public function home(Request $request): Response
+    {
+        // If an authenticated identity is available, serve the private app
+        if ($this->identity->identifier()) {
+            return new FileResponse(
+                Server::runtimeRootLocation() . '/public/private.html',
+                Response::HTTP_OK,
+                ['Content-Type' => 'text/html']
+            );
+        }
+
+        // User is not authenticated - serve the public app
+        // If there's an accessToken cookie present but invalid, clear it
+        $response = new FileResponse(
+            Server::runtimeRootLocation() . '/public/public.html',
+            Response::HTTP_OK,
+            ['Content-Type' => 'text/html']
+        );
+        
+        // Clear any stale auth cookies since the user is not authenticated
+        if ($request->cookies->has('accessToken')) {
+            $response->headers->clearCookie('accessToken', '/');
+        }
+        if ($request->cookies->has('refreshToken')) {
+            $response->headers->clearCookie('refreshToken', '/security/refresh');
+        }
+        
+        return $response;
+    }
+
+    #[AnonymousRoute('/login', name: 'login', methods: ['GET'])]
+    public function login(): Response
+    {
+        return new FileResponse(
+            Server::runtimeRootLocation() . '/public/public.html',
+            Response::HTTP_OK,
+            ['Content-Type' => 'text/html']
+        );
+    }
+
+    #[AnonymousRoute('/logout', name: 'logout_get', methods: ['GET'])]
+    public function logoutGet(Request $request): Response
+    {
+        // Blacklist the current access token if present
+        $accessToken = $request->cookies->get('accessToken');
+        if ($accessToken) {
+            $claims = $this->securityService->extractTokenClaims($accessToken);
+            if ($claims && isset($claims['jti'])) {
+                $this->securityService->logout($claims['jti'], $claims['exp'] ?? null);
+            }
+        }
+
+        $response = new RedirectResponse(
+            '/login',
+            Response::HTTP_SEE_OTHER
+        );
+
+        // Clear both authentication cookies
+        $response->headers->clearCookie('accessToken', '/');
+        $response->headers->clearCookie('refreshToken', '/security/refresh');
+
+        return $response;
+    }
+
+    #[AnonymousRoute('/logout', name: 'logout_post', methods: ['POST'])]
+    public function logoutPost(Request $request): Response
+    {
+        // Blacklist the current access token if present
+        $accessToken = $request->cookies->get('accessToken');
+        if ($accessToken) {
+            $claims = $this->securityService->extractTokenClaims($accessToken);
+            if ($claims && isset($claims['jti'])) {
+                $this->securityService->logout($claims['jti'], $claims['exp'] ?? null);
+            }
+        }
+
+        $response = new JsonResponse(['message' => 'Logged out successfully']);
+        
+        // Clear both authentication cookies
+        $response->headers->clearCookie('accessToken', '/');
+        $response->headers->clearCookie('refreshToken', '/security/refresh');
+        
+        return $response;
+    }
+
+    /**
+     * Catch-all route for SPA routing.
+     * Serves the appropriate HTML based on authentication status,
+     * allowing client-side routing to handle the actual path.
+     */
+    #[AnonymousRoute('/{path}', name: 'spa_catchall', methods: ['GET'])]
+    public function catchAll(Request $request, string $path = ''): Response
+    {
+        // If an authenticated identity is available, serve the private app
+        if ($this->identity->identifier()) {
+            return new FileResponse(
+                Server::runtimeRootLocation() . '/public/private.html',
+                Response::HTTP_OK,
+                ['Content-Type' => 'text/html']
+            );
+        }
+
+        // User is not authenticated - serve the public app
+        $response = new FileResponse(
+            Server::runtimeRootLocation() . '/public/public.html',
+            Response::HTTP_OK,
+            ['Content-Type' => 'text/html']
+        );
+        
+        // Clear any stale auth cookies since the user is not authenticated
+        if ($request->cookies->has('accessToken')) {
+            $response->headers->clearCookie('accessToken', '/');
+        }
+        if ($request->cookies->has('refreshToken')) {
+            $response->headers->clearCookie('refreshToken', '/security/refresh');
+        }
+        
+        return $response;
+    }
+}
diff --git a/core/lib/Controllers/InitController.php b/core/lib/Controllers/InitController.php
new file mode 100644
index 0000000..d6ff660
--- /dev/null
+++ b/core/lib/Controllers/InitController.php
@@ -0,0 +1,43 @@
+<?php
+
+namespace KTXC\Controllers;
+
+use KTXC\Http\Response\JsonResponse;
+use KTXC\Module\ModuleManager;
+use KTXF\Controller\ControllerAbstract;
+use KTXC\SessionTenant;
+use KTXF\Routing\Attributes\AuthenticatedRoute;
+
+class InitController extends ControllerAbstract
+{
+    public function __construct(
+        private readonly SessionTenant $tenant,
+        private readonly ModuleManager $moduleManager,
+    ) {}
+
+    #[AuthenticatedRoute('/init', name: 'init', methods: ['GET'])]
+    public function index(): JsonResponse {
+        
+        $configuration = [];
+
+        // modules
+        $configuration['modules'] = [];
+        foreach ($this->moduleManager->list() as $module) {
+            if (!method_exists($module, 'bootUi')) {
+                continue;
+            }
+            $configuration['modules'][$module->handle()] = $module->bootUi();
+        }
+
+        // tenant
+        $configuration['tenant'] = [
+            'id' => $this->tenant->identifier(),
+            'domain' => $this->tenant->domain(),
+            'label' => $this->tenant->label(),
+        ];
+
+        return new JsonResponse($configuration);
+
+    }
+
+}
diff --git a/core/lib/Controllers/ModuleController.php b/core/lib/Controllers/ModuleController.php
new file mode 100644
index 0000000..8291c48
--- /dev/null
+++ b/core/lib/Controllers/ModuleController.php
@@ -0,0 +1,58 @@
+<?php
+
+namespace KTXC\Controllers;
+
+use KTXC\Module\ModuleManager;
+use KTXF\Controller\ControllerAbstract;
+use KTXF\Routing\Attributes\AuthenticatedRoute;
+use KTXC\Http\Response\JsonResponse;
+
+class ModuleController extends ControllerAbstract
+{
+    public function __construct(
+        private readonly ModuleManager $moduleManager
+    ) { }
+
+    #[AuthenticatedRoute('/modules/list', name: 'modules.index', methods: ['GET'])]
+    public function index(): JsonResponse
+    {
+        $modules = $this->moduleManager->list(false);
+        
+        return new JsonResponse(['modules' => $modules]);
+    }
+
+    #[AuthenticatedRoute('/modules/manage', name: 'modules.manage', methods: ['POST'])]
+    public function manage(string $handle, string $action): JsonResponse
+    {
+        // Verify module exists
+        $moduleInstance = $this->moduleManager->moduleInstance($handle, null);
+        if (!$moduleInstance) {
+            return new JsonResponse(['error' => 'Module "' . $handle . '" not found.'], 404);
+        }
+
+        switch ($action) {
+            case 'install':
+                $this->moduleManager->install($handle);
+                return new JsonResponse(['message' => 'Module "' . $handle . '" installed successfully.']);
+                
+            case 'uninstall':
+                $this->moduleManager->uninstall($handle);
+                return new JsonResponse(['message' => 'Module "' . $handle . '" uninstalled successfully.']);
+                
+            case 'enable':
+                $this->moduleManager->enable($handle);
+                return new JsonResponse(['message' => 'Module "' . $handle . '" enabled successfully.']);
+                
+            case 'disable':
+                $this->moduleManager->disable($handle);
+                return new JsonResponse(['message' => 'Module "' . $handle . '" disabled successfully.']);
+                
+            case 'upgrade':
+                $this->moduleManager->upgrade($handle);
+                return new JsonResponse(['message' => 'Module "' . $handle . '" upgraded successfully.']);
+                
+            default:
+                return new JsonResponse(['error' => 'Invalid action.'], 400);
+        }
+    }
+}
diff --git a/core/lib/Controllers/UserSettingsController.php b/core/lib/Controllers/UserSettingsController.php
new file mode 100644
index 0000000..0a673d0
--- /dev/null
+++ b/core/lib/Controllers/UserSettingsController.php
@@ -0,0 +1,58 @@
+<?php
+
+namespace KTXC\Controllers;
+
+use KTXC\Http\Response\JsonResponse;
+use KTXC\Service\UserService;
+use KTXC\SessionIdentity;
+use KTXC\SessionTenant;
+use KTXF\Controller\ControllerAbstract;
+use KTXF\Routing\Attributes\AuthenticatedRoute;
+
+class UserSettingsController extends ControllerAbstract
+{
+    public function __construct(
+        private readonly SessionTenant $tenantIdentity,
+		private readonly SessionIdentity $userIdentity,
+        private readonly UserService $userService
+    ) {}
+
+
+    /** 
+     * retrieve user settings
+     * 
+     * @param array $settings list of settings to retrieve
+     * 
+     * @example request body:
+     * {
+     *   "settings": ["key1", "key2"]
+     * }
+     */
+    #[AuthenticatedRoute('/user/settings/read', name: 'user.settings.read', methods: ['PUT', 'PATCH'])]
+    public function read(array $settings = []): JsonResponse
+    {
+        // authorize request
+		$tenantId = $this->tenantIdentity->identifier();
+		$userId = $this->userIdentity->identifier();
+
+        return $this->userService->fetchSettings($tenantId, $userId, $settings);
+    }
+
+    /** 
+     * store user settings
+     * 
+     * @param array $settings key-value pairs of settings to store
+     * 
+     * @example request body:
+     * {
+     *   "key1": "value1",
+     *   "key2": "value2"
+     * }
+     */
+    #[AuthenticatedRoute('/user/settings/write', name: 'user.settings.write', methods: ['PUT', 'PATCH'])]
+    public function write(array $settings): JsonResponse
+    {
+        return new JsonResponse(['status' => 'not_implemented'], JsonResponse::HTTP_NOT_IMPLEMENTED);
+    }
+    
+}
diff --git a/core/lib/Db/Client.php b/core/lib/Db/Client.php
new file mode 100644
index 0000000..a2f7a3d
--- /dev/null
+++ b/core/lib/Db/Client.php
@@ -0,0 +1,76 @@
+<?php
+
+namespace KTXC\Db;
+
+use MongoDB\Client as MongoClient;
+
+/**
+ * Wrapper for MongoDB\Client
+ * Provides abstraction layer for MongoDB client operations
+ */
+class Client
+{
+    private MongoClient $client;
+
+    /**
+     * Create a new MongoDB client
+     * 
+     * @param string $uri Connection URI
+     * @param array $uriOptions URI options
+     * @param array $driverOptions Driver options
+     */
+    public function __construct(string $uri = 'mongodb://localhost:27017', array $uriOptions = [], array $driverOptions = [])
+    {
+        $this->client = new MongoClient($uri, $uriOptions, $driverOptions);
+    }
+
+    /**
+     * Select a database
+     * 
+     * @param string $databaseName Database name
+     * @param array $options Database options
+     * @return Database
+     */
+    public function selectDatabase(string $databaseName, array $options = []): Database
+    {
+        $mongoDatabase = $this->client->selectDatabase($databaseName, $options);
+        return new Database($mongoDatabase);
+    }
+
+    /**
+     * List databases
+     */
+    public function listDatabases(array $options = []): array
+    {
+        $databases = [];
+        foreach ($this->client->listDatabases($options) as $databaseInfo) {
+            $databases[] = $databaseInfo;
+        }
+        return $databases;
+    }
+
+    /**
+     * Drop a database
+     */
+    public function dropDatabase(string $databaseName, array $options = []): array|object|null
+    {
+        return $this->client->dropDatabase($databaseName, $options);
+    }
+
+    /**
+     * Get the underlying MongoDB Client
+     * Use sparingly - prefer using wrapper methods
+     */
+    public function getMongoClient(): MongoClient
+    {
+        return $this->client;
+    }
+
+    /**
+     * Magic method to access database as property
+     */
+    public function __get(string $databaseName): Database
+    {
+        return $this->selectDatabase($databaseName);
+    }
+}
diff --git a/core/lib/Db/Collection.php b/core/lib/Db/Collection.php
new file mode 100644
index 0000000..857e8ef
--- /dev/null
+++ b/core/lib/Db/Collection.php
@@ -0,0 +1,295 @@
+<?php
+
+namespace KTXC\Db;
+
+use MongoDB\Collection as MongoCollection;
+use MongoDB\InsertOneResult;
+use MongoDB\UpdateResult;
+use MongoDB\DeleteResult;
+
+/**
+ * Wrapper for MongoDB\Collection
+ * Provides abstraction layer for MongoDB collection operations
+ */
+class Collection
+{
+    private MongoCollection $collection;
+
+    public function __construct(MongoCollection $collection)
+    {
+        $this->collection = $collection;
+        
+        // Set type map to return plain arrays instead of objects
+        // This converts BSON types to PHP native types
+        $this->collection = $collection->withOptions([
+            'typeMap' => [
+                'root' => 'array',
+                'document' => 'array',
+                'array' => 'array'
+            ]
+        ]);
+    }
+
+    /**
+     * Find documents in the collection
+     * 
+     * @param array $filter Query filter
+     * @param array $options Query options
+     * @return Cursor
+     */
+    public function find(array $filter = [], array $options = []): Cursor
+    {
+        $filter = $this->convertFilter($filter);
+        /** @var \Iterator $cursor */
+        $cursor = $this->collection->find($filter, $options);
+        return new Cursor($cursor);
+    }
+
+    /**
+     * Find a single document
+     * 
+     * @param array $filter Query filter
+     * @param array $options Query options
+     * @return array|null Returns array with _id as string
+     */
+    public function findOne(array $filter = [], array $options = []): ?array
+    {
+        $filter = $this->convertFilter($filter);
+        $result = $this->collection->findOne($filter, $options);
+        
+        if ($result === null) {
+            return null;
+        }
+        
+        // Convert to array if it's an object
+        if (is_object($result)) {
+            $result = (array) $result;
+        }
+        
+        return $this->convertBsonToNative($result);
+    }
+
+    /**
+     * Insert a single document
+     * 
+     * @param array|object $document Document to insert
+     * @param array $options Insert options
+     * @return InsertOneResult
+     */
+    public function insertOne(array|object $document, array $options = []): InsertOneResult
+    {
+        $document = $this->convertDocument($document);
+        return $this->collection->insertOne($document, $options);
+    }
+
+    /**
+     * Insert multiple documents
+     * 
+     * @param array $documents Documents to insert
+     * @param array $options Insert options
+     */
+    public function insertMany(array $documents, array $options = []): mixed
+    {
+        $documents = array_map(fn($doc) => $this->convertDocument($doc), $documents);
+        return $this->collection->insertMany($documents, $options);
+    }
+
+    /**
+     * Update a single document
+     * 
+     * @param array $filter Query filter
+     * @param array $update Update operations
+     * @param array $options Update options
+     * @return UpdateResult
+     */
+    public function updateOne(array $filter, array $update, array $options = []): UpdateResult
+    {
+        $filter = $this->convertFilter($filter);
+        $update = $this->convertDocument($update);
+        return $this->collection->updateOne($filter, $update, $options);
+    }
+
+    /**
+     * Update multiple documents
+     * 
+     * @param array $filter Query filter
+     * @param array $update Update operations
+     * @param array $options Update options
+     * @return UpdateResult
+     */
+    public function updateMany(array $filter, array $update, array $options = []): UpdateResult
+    {
+        $filter = $this->convertFilter($filter);
+        $update = $this->convertDocument($update);
+        return $this->collection->updateMany($filter, $update, $options);
+    }
+
+    /**
+     * Delete a single document
+     * 
+     * @param array $filter Query filter
+     * @param array $options Delete options
+     * @return DeleteResult
+     */
+    public function deleteOne(array $filter, array $options = []): DeleteResult
+    {
+        $filter = $this->convertFilter($filter);
+        return $this->collection->deleteOne($filter, $options);
+    }
+
+    /**
+     * Delete multiple documents
+     * 
+     * @param array $filter Query filter
+     * @param array $options Delete options
+     * @return DeleteResult
+     */
+    public function deleteMany(array $filter, array $options = []): DeleteResult
+    {
+        $filter = $this->convertFilter($filter);
+        return $this->collection->deleteMany($filter, $options);
+    }
+
+    /**
+     * Count documents matching filter
+     * 
+     * @param array $filter Query filter
+     * @param array $options Count options
+     * @return int
+     */
+    public function countDocuments(array $filter = [], array $options = []): int
+    {
+        $filter = $this->convertFilter($filter);
+        return $this->collection->countDocuments($filter, $options);
+    }
+
+    /**
+     * Execute aggregation pipeline
+     * 
+     * @param array $pipeline Aggregation pipeline
+     * @param array $options Aggregation options
+     * @return Cursor
+     */
+    public function aggregate(array $pipeline, array $options = []): Cursor
+    {
+        /** @var \Iterator $cursor */
+        $cursor = $this->collection->aggregate($pipeline, $options);
+        return new Cursor($cursor);
+    }
+
+    /**
+     * Create an index
+     * 
+     * @param array $key Index specification
+     * @param array $options Index options
+     * @return string Index name
+     */
+    public function createIndex(array $key, array $options = []): string
+    {
+        return $this->collection->createIndex($key, $options);
+    }
+
+    /**
+     * Drop the collection
+     */
+    public function drop(): array|object|null
+    {
+        return $this->collection->drop();
+    }
+
+    /**
+     * Get collection name
+     */
+    public function getCollectionName(): string
+    {
+        return $this->collection->getCollectionName();
+    }
+
+    /**
+     * Get database name
+     */
+    public function getDatabaseName(): string
+    {
+        return $this->collection->getDatabaseName();
+    }
+
+    /**
+     * Convert ObjectId instances in filter to MongoDB ObjectId
+     */
+    private function convertFilter(array $filter): array
+    {
+        return $this->convertArray($filter);
+    }
+
+    /**
+     * Convert ObjectId instances in document to MongoDB ObjectId
+     */
+    private function convertDocument(array|object $document): array|object
+    {
+        if (is_array($document)) {
+            return $this->convertArray($document);
+        }
+        return $document;
+    }
+
+    /**
+     * Recursively convert ObjectId and UTCDateTime instances
+     */
+    private function convertArray(array $data): array
+    {
+        foreach ($data as $key => $value) {
+            if ($value instanceof ObjectId) {
+                $data[$key] = $value->toBSON();
+            } elseif ($value instanceof UTCDateTime) {
+                $data[$key] = $value->toBSON();
+            } elseif (is_array($value)) {
+                $data[$key] = $this->convertArray($value);
+            }
+        }
+        return $data;
+    }
+
+    /**
+     * Get the underlying MongoDB Collection
+     * Use sparingly - prefer using wrapper methods
+     */
+    public function getMongoCollection(): MongoCollection
+    {
+        return $this->collection;
+    }
+    
+    /**
+     * Convert BSON objects to native PHP types
+     * Handles ObjectId, UTCDateTime, and other BSON types
+     */
+    private function convertBsonToNative(mixed $data): mixed
+    {
+        if (is_array($data)) {
+            foreach ($data as $key => $value) {
+                $data[$key] = $this->convertBsonToNative($value);
+            }
+            return $data;
+        }
+        
+        if (is_object($data)) {
+            // Convert MongoDB BSON ObjectId to string
+            if ($data instanceof \MongoDB\BSON\ObjectId) {
+                return (string) $data;
+            }
+            
+            // Convert MongoDB BSON UTCDateTime to string or DateTime
+            if ($data instanceof \MongoDB\BSON\UTCDateTime) {
+                return (string) $data->toDateTime()->format('c');
+            }
+            
+            // Convert other objects to arrays recursively
+            if (method_exists($data, 'bsonSerialize')) {
+                return $this->convertBsonToNative($data->bsonSerialize());
+            }
+            
+            return (array) $data;
+        }
+        
+        return $data;
+    }
+}
diff --git a/core/lib/Db/Cursor.php b/core/lib/Db/Cursor.php
new file mode 100644
index 0000000..13ef296
--- /dev/null
+++ b/core/lib/Db/Cursor.php
@@ -0,0 +1,86 @@
+<?php
+
+namespace KTXC\Db;
+
+use Iterator;
+use IteratorAggregate;
+use Traversable;
+
+/**
+ * Wrapper for MongoDB Cursor
+ * Provides abstraction layer for MongoDB cursor operations
+ * Automatically converts BSON types to native PHP types
+ */
+class Cursor implements IteratorAggregate
+{
+    private Iterator $cursor;
+
+    public function __construct(Iterator $cursor)
+    {
+        $this->cursor = $cursor;
+    }
+
+    /**
+     * Convert cursor to array with BSON types converted to native PHP types
+     */
+    public function toArray(): array
+    {
+        $result = iterator_to_array($this->cursor);
+        return $this->convertBsonToNative($result);
+    }
+
+    /**
+     * Get iterator for foreach loops
+     * Note: Items will be returned as-is (may contain BSON objects)
+     * Use toArray() if you need full conversion
+     */
+    public function getIterator(): Traversable
+    {
+        return $this->cursor;
+    }
+
+    /**
+     * Get underlying MongoDB cursor
+     */
+    public function getMongoCursor(): Iterator
+    {
+        return $this->cursor;
+    }
+    
+    /**
+     * Convert BSON objects to native PHP types
+     * Handles ObjectId, UTCDateTime, and other BSON types
+     */
+    private function convertBsonToNative(mixed $data): mixed
+    {
+        if (is_array($data)) {
+            foreach ($data as $key => $value) {
+                $data[$key] = $this->convertBsonToNative($value);
+            }
+            return $data;
+        }
+        
+        if (is_object($data)) {
+            // Convert MongoDB BSON ObjectId to string
+            if ($data instanceof \MongoDB\BSON\ObjectId) {
+                return (string) $data;
+            }
+            
+            // Convert MongoDB BSON UTCDateTime to ISO8601 string
+            if ($data instanceof \MongoDB\BSON\UTCDateTime) {
+                return $data->toDateTime()->format('c');
+            }
+            
+            // Convert other objects to arrays recursively
+            if (method_exists($data, 'bsonSerialize')) {
+                return $this->convertBsonToNative($data->bsonSerialize());
+            }
+            
+            // Convert stdClass and other objects to array
+            $array = (array) $data;
+            return $this->convertBsonToNative($array);
+        }
+        
+        return $data;
+    }
+}
diff --git a/core/lib/Db/DataStore.php b/core/lib/Db/DataStore.php
new file mode 100644
index 0000000..2bbbccf
--- /dev/null
+++ b/core/lib/Db/DataStore.php
@@ -0,0 +1,97 @@
+<?php
+
+namespace KTXC\Db;
+
+use DI\Attribute\Inject;
+
+/**
+ * DataStore provides access to MongoDB database operations
+ * Uses composition pattern with Database wrapper
+ */
+class DataStore
+{
+    protected array $configuration;
+    protected Client $client;
+    protected Database $database;
+
+    public function __construct(#[Inject('database')] array $configuration)
+    {
+        $this->configuration = $configuration;
+        
+        $uri = $configuration['uri'];
+        $databaseName = $configuration['database'];
+        $options = $configuration['options'] ?? [];
+        $driverOptions = $configuration['driverOptions'] ?? [];
+
+        $this->client = new Client($uri, $options, $driverOptions);
+        $this->database = $this->client->selectDatabase($databaseName, $options);
+    }
+
+    /**
+     * Select a collection from the database
+     * 
+     * @param string $collectionName Collection name
+     * @param array $options Collection options
+     * @return Collection
+     */
+    public function selectCollection(string $collectionName, array $options = []): Collection
+    {
+        return $this->database->selectCollection($collectionName, $options);
+    }
+
+    /**
+     * Get the underlying Database instance
+     */
+    public function getDatabase(): Database
+    {
+        return $this->database;
+    }
+
+    /**
+     * Get the Client instance
+     */
+    public function getClient(): Client
+    {
+        return $this->client;
+    }
+
+    /**
+     * List all collections
+     */
+    public function listCollections(array $options = []): array
+    {
+        return $this->database->listCollections($options);
+    }
+
+    /**
+     * Create a collection
+     */
+    public function createCollection(string $collectionName, array $options = []): Collection
+    {
+        return $this->database->createCollection($collectionName, $options);
+    }
+
+    /**
+     * Drop a collection
+     */
+    public function dropCollection(string $collectionName, array $options = []): array|object
+    {
+        return $this->database->dropCollection($collectionName, $options);
+    }
+
+    /**
+     * Get database name
+     */
+    public function getDatabaseName(): string
+    {
+        return $this->database->getDatabaseName();
+    }
+
+    /**
+     * Magic method to access collection as property
+     */
+    public function __get(string $collectionName): Collection
+    {
+        return $this->selectCollection($collectionName);
+    }
+}
diff --git a/core/lib/Db/Database.php b/core/lib/Db/Database.php
new file mode 100644
index 0000000..02db600
--- /dev/null
+++ b/core/lib/Db/Database.php
@@ -0,0 +1,104 @@
+<?php
+
+namespace KTXC\Db;
+
+use MongoDB\Database as MongoDatabase;
+
+/**
+ * Wrapper for MongoDB\Database
+ * Provides abstraction layer for MongoDB database operations
+ */
+class Database
+{
+    private MongoDatabase $database;
+
+    public function __construct(MongoDatabase $database)
+    {
+        $this->database = $database;
+    }
+
+    /**
+     * Select a collection
+     * 
+     * @param string $collectionName Collection name
+     * @param array $options Collection options
+     * @return Collection
+     */
+    public function selectCollection(string $collectionName, array $options = []): Collection
+    {
+        $mongoCollection = $this->database->selectCollection($collectionName, $options);
+        return new Collection($mongoCollection);
+    }
+
+    /**
+     * List collections
+     */
+    public function listCollections(array $options = []): array
+    {
+        $collections = [];
+        foreach ($this->database->listCollections($options) as $collectionInfo) {
+            $collections[] = $collectionInfo;
+        }
+        return $collections;
+    }
+
+    /**
+     * Drop the database
+     */
+    public function drop(array $options = []): array|object|null
+    {
+        return $this->database->drop($options);
+    }
+
+    /**
+     * Get database name
+     */
+    public function getDatabaseName(): string
+    {
+        return $this->database->getDatabaseName();
+    }
+
+    /**
+     * Create a collection
+     */
+    public function createCollection(string $collectionName, array $options = []): Collection|null
+    {
+        $mongoCollection = $this->database->createCollection($collectionName, $options);
+        return $mongoCollection ? new Collection($mongoCollection) : null;
+    }
+
+    /**
+     * Drop a collection
+     */
+    public function dropCollection(string $collectionName, array $options = []): array|object|null
+    {
+        return $this->database->dropCollection($collectionName, $options);
+    }
+
+    /**
+     * Execute a database command
+     */
+    public function command(array|object $command, array $options = []): Cursor
+    {
+        /** @var \Iterator $cursor */
+        $cursor = $this->database->command($command, $options);
+        return new Cursor($cursor);
+    }
+
+    /**
+     * Get the underlying MongoDB Database
+     * Use sparingly - prefer using wrapper methods
+     */
+    public function getMongoDatabase(): MongoDatabase
+    {
+        return $this->database;
+    }
+
+    /**
+     * Magic method to access collection as property
+     */
+    public function __get(string $collectionName): Collection
+    {
+        return $this->selectCollection($collectionName);
+    }
+}
diff --git a/core/lib/Db/ObjectId.php b/core/lib/Db/ObjectId.php
new file mode 100644
index 0000000..4b53e49
--- /dev/null
+++ b/core/lib/Db/ObjectId.php
@@ -0,0 +1,71 @@
+<?php
+
+namespace KTXC\Db;
+
+use MongoDB\BSON\ObjectId as MongoObjectId;
+
+/**
+ * Wrapper for MongoDB\BSON\ObjectId
+ * Provides abstraction layer for MongoDB ObjectId handling
+ */
+class ObjectId
+{
+    private MongoObjectId $objectId;
+
+    /**
+     * Create a new ObjectId
+     * 
+     * @param string|MongoObjectId|null $id Optional ID string or MongoDB ObjectId
+     */
+    public function __construct(string|MongoObjectId|null $id = null)
+    {
+        if ($id instanceof MongoObjectId) {
+            $this->objectId = $id;
+        } elseif (is_string($id)) {
+            $this->objectId = new MongoObjectId($id);
+        } else {
+            $this->objectId = new MongoObjectId();
+        }
+    }
+
+    /**
+     * Get the string representation of the ObjectId
+     */
+    public function __toString(): string
+    {
+        return (string) $this->objectId;
+    }
+
+    /**
+     * Get the underlying MongoDB ObjectId
+     * Used internally when interacting with MongoDB driver
+     */
+    public function toBSON(): MongoObjectId
+    {
+        return $this->objectId;
+    }
+
+    /**
+     * Get the timestamp from the ObjectId
+     */
+    public function getTimestamp(): int
+    {
+        return $this->objectId->getTimestamp();
+    }
+
+    /**
+     * Create ObjectId from string
+     */
+    public static function fromString(string $id): self
+    {
+        return new self($id);
+    }
+
+    /**
+     * Check if a string is a valid ObjectId
+     */
+    public static function isValid(string $id): bool
+    {
+        return MongoObjectId::isValid($id);
+    }
+}
diff --git a/core/lib/Db/UTCDateTime.php b/core/lib/Db/UTCDateTime.php
new file mode 100644
index 0000000..d83afbf
--- /dev/null
+++ b/core/lib/Db/UTCDateTime.php
@@ -0,0 +1,89 @@
+<?php
+
+namespace KTXC\Db;
+
+use MongoDB\BSON\UTCDateTime as MongoUTCDateTime;
+use DateTimeInterface;
+
+/**
+ * Wrapper for MongoDB\BSON\UTCDateTime
+ * Provides abstraction layer for MongoDB datetime handling
+ */
+class UTCDateTime
+{
+    private MongoUTCDateTime|string $dateTime;
+
+    /**
+     * Create a new UTCDateTime
+     * 
+     * @param int|DateTimeInterface|null $milliseconds Milliseconds since epoch, or DateTime object
+     */
+    public function __construct(int|DateTimeInterface|null $milliseconds = null)
+    {
+        // Check if MongoDB extension is loaded
+        if (class_exists(MongoUTCDateTime::class)) {
+            $this->dateTime = new MongoUTCDateTime($milliseconds);
+        } else {
+            // Fallback for environments without MongoDB extension (testing, linting)
+            $this->dateTime = (new \DateTimeImmutable('now', new \DateTimeZone('UTC')))->format(DATE_ATOM);
+        }
+    }
+
+    /**
+     * Get the string representation
+     */
+    public function __toString(): string
+    {
+        if ($this->dateTime instanceof MongoUTCDateTime) {
+            return $this->dateTime->toDateTime()->format(DATE_ATOM);
+        }
+        return $this->dateTime;
+    }
+
+    /**
+     * Get the underlying MongoDB UTCDateTime or fallback string
+     * Used internally when interacting with MongoDB driver
+     */
+    public function toBSON(): MongoUTCDateTime|string
+    {
+        return $this->dateTime;
+    }
+
+    /**
+     * Convert to PHP DateTime
+     */
+    public function toDateTime(): \DateTimeImmutable
+    {
+        if ($this->dateTime instanceof MongoUTCDateTime) {
+            return \DateTimeImmutable::createFromMutable($this->dateTime->toDateTime());
+        }
+        return new \DateTimeImmutable($this->dateTime);
+    }
+
+    /**
+     * Get milliseconds since epoch
+     */
+    public function toMilliseconds(): int
+    {
+        if ($this->dateTime instanceof MongoUTCDateTime) {
+            return (int) $this->dateTime;
+        }
+        return (int) ((new \DateTimeImmutable($this->dateTime))->getTimestamp() * 1000);
+    }
+
+    /**
+     * Create from DateTime
+     */
+    public static function fromDateTime(DateTimeInterface $dateTime): self
+    {
+        return new self($dateTime);
+    }
+
+    /**
+     * Create current timestamp
+     */
+    public static function now(): self
+    {
+        return new self();
+    }
+}
diff --git a/core/lib/Http/Cookie.php b/core/lib/Http/Cookie.php
new file mode 100644
index 0000000..1e0cc99
--- /dev/null
+++ b/core/lib/Http/Cookie.php
@@ -0,0 +1,407 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http;
+
+/**
+ * Represents a cookie.
+ *
+ * @author Johannes M. Schmitt <schmittjoh@gmail.com>
+ */
+class Cookie
+{
+    public const SAMESITE_NONE = 'none';
+    public const SAMESITE_LAX = 'lax';
+    public const SAMESITE_STRICT = 'strict';
+
+    protected int $expire;
+    protected string $path;
+
+    private ?string $sameSite = null;
+    private bool $secureDefault = false;
+
+    private const RESERVED_CHARS_LIST = "=,; \t\r\n\v\f";
+    private const RESERVED_CHARS_FROM = ['=', ',', ';', ' ', "\t", "\r", "\n", "\v", "\f"];
+    private const RESERVED_CHARS_TO = ['%3D', '%2C', '%3B', '%20', '%09', '%0D', '%0A', '%0B', '%0C'];
+
+    /**
+     * Creates cookie from raw header string.
+     */
+    public static function fromString(string $cookie, bool $decode = false): static
+    {
+        $data = [
+            'expires' => 0,
+            'path' => '/',
+            'domain' => null,
+            'secure' => false,
+            'httponly' => false,
+            'raw' => !$decode,
+            'samesite' => null,
+            'partitioned' => false,
+        ];
+
+        $parts = HeaderUtils::split($cookie, ';=');
+        $part = array_shift($parts);
+
+        $name = $decode ? urldecode($part[0]) : $part[0];
+        $value = isset($part[1]) ? ($decode ? urldecode($part[1]) : $part[1]) : null;
+
+        $data = HeaderUtils::combine($parts) + $data;
+        $data['expires'] = self::expiresTimestamp($data['expires']);
+
+        if (isset($data['max-age']) && ($data['max-age'] > 0 || $data['expires'] > time())) {
+            $data['expires'] = time() + (int) $data['max-age'];
+        }
+
+        return new static($name, $value, $data['expires'], $data['path'], $data['domain'], $data['secure'], $data['httponly'], $data['raw'], $data['samesite'], $data['partitioned']);
+    }
+
+    /**
+     * @see self::__construct
+     *
+     * @param self::SAMESITE_*|''|null $sameSite
+     */
+    public static function create(string $name, ?string $value = null, int|string|\DateTimeInterface $expire = 0, ?string $path = '/', ?string $domain = null, ?bool $secure = null, bool $httpOnly = true, bool $raw = false, ?string $sameSite = self::SAMESITE_LAX, bool $partitioned = false): self
+    {
+        return new self($name, $value, $expire, $path, $domain, $secure, $httpOnly, $raw, $sameSite, $partitioned);
+    }
+
+    /**
+     * @param string                        $name     The name of the cookie
+     * @param string|null                   $value    The value of the cookie
+     * @param int|string|\DateTimeInterface $expire   The time the cookie expires
+     * @param string|null                   $path     The path on the server in which the cookie will be available on
+     * @param string|null                   $domain   The domain that the cookie is available to
+     * @param bool|null                     $secure   Whether the client should send back the cookie only over HTTPS or null to auto-enable this when the request is already using HTTPS
+     * @param bool                          $httpOnly Whether the cookie will be made accessible only through the HTTP protocol
+     * @param bool                          $raw      Whether the cookie value should be sent with no url encoding
+     * @param self::SAMESITE_*|''|null      $sameSite Whether the cookie will be available for cross-site requests
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function __construct(
+        protected string $name,
+        protected ?string $value = null,
+        int|string|\DateTimeInterface $expire = 0,
+        ?string $path = '/',
+        protected ?string $domain = null,
+        protected ?bool $secure = null,
+        protected bool $httpOnly = true,
+        private bool $raw = false,
+        ?string $sameSite = self::SAMESITE_LAX,
+        private bool $partitioned = false,
+    ) {
+        // from PHP source code
+        if ($raw && false !== strpbrk($name, self::RESERVED_CHARS_LIST)) {
+            throw new \InvalidArgumentException(\sprintf('The cookie name "%s" contains invalid characters.', $name));
+        }
+
+        if (!$name) {
+            throw new \InvalidArgumentException('The cookie name cannot be empty.');
+        }
+
+        $this->expire = self::expiresTimestamp($expire);
+        $this->path = $path ?: '/';
+        $this->sameSite = $this->withSameSite($sameSite)->sameSite;
+    }
+
+    /**
+     * Creates a cookie copy with a new value.
+     */
+    public function withValue(?string $value): static
+    {
+        $cookie = clone $this;
+        $cookie->value = $value;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy with a new domain that the cookie is available to.
+     */
+    public function withDomain(?string $domain): static
+    {
+        $cookie = clone $this;
+        $cookie->domain = $domain;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy with a new time the cookie expires.
+     */
+    public function withExpires(int|string|\DateTimeInterface $expire = 0): static
+    {
+        $cookie = clone $this;
+        $cookie->expire = self::expiresTimestamp($expire);
+
+        return $cookie;
+    }
+
+    /**
+     * Converts expires formats to a unix timestamp.
+     */
+    private static function expiresTimestamp(int|string|\DateTimeInterface $expire = 0): int
+    {
+        // convert expiration time to a Unix timestamp
+        if ($expire instanceof \DateTimeInterface) {
+            $expire = $expire->format('U');
+        } elseif (!is_numeric($expire)) {
+            $expire = strtotime($expire);
+
+            if (false === $expire) {
+                throw new \InvalidArgumentException('The cookie expiration time is not valid.');
+            }
+        }
+
+        return 0 < $expire ? (int) $expire : 0;
+    }
+
+    /**
+     * Creates a cookie copy with a new path on the server in which the cookie will be available on.
+     */
+    public function withPath(string $path): static
+    {
+        $cookie = clone $this;
+        $cookie->path = '' === $path ? '/' : $path;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy that only be transmitted over a secure HTTPS connection from the client.
+     */
+    public function withSecure(bool $secure = true): static
+    {
+        $cookie = clone $this;
+        $cookie->secure = $secure;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy that be accessible only through the HTTP protocol.
+     */
+    public function withHttpOnly(bool $httpOnly = true): static
+    {
+        $cookie = clone $this;
+        $cookie->httpOnly = $httpOnly;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy that uses no url encoding.
+     */
+    public function withRaw(bool $raw = true): static
+    {
+        if ($raw && false !== strpbrk($this->name, self::RESERVED_CHARS_LIST)) {
+            throw new \InvalidArgumentException(\sprintf('The cookie name "%s" contains invalid characters.', $this->name));
+        }
+
+        $cookie = clone $this;
+        $cookie->raw = $raw;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy with SameSite attribute.
+     *
+     * @param self::SAMESITE_*|''|null $sameSite
+     */
+    public function withSameSite(?string $sameSite): static
+    {
+        if ('' === $sameSite) {
+            $sameSite = null;
+        } elseif (null !== $sameSite) {
+            $sameSite = strtolower($sameSite);
+        }
+
+        if (!\in_array($sameSite, [self::SAMESITE_LAX, self::SAMESITE_STRICT, self::SAMESITE_NONE, null], true)) {
+            throw new \InvalidArgumentException('The "sameSite" parameter value is not valid.');
+        }
+
+        $cookie = clone $this;
+        $cookie->sameSite = $sameSite;
+
+        return $cookie;
+    }
+
+    /**
+     * Creates a cookie copy that is tied to the top-level site in cross-site context.
+     */
+    public function withPartitioned(bool $partitioned = true): static
+    {
+        $cookie = clone $this;
+        $cookie->partitioned = $partitioned;
+
+        return $cookie;
+    }
+
+    /**
+     * Returns the cookie as a string.
+     */
+    public function __toString(): string
+    {
+        if ($this->isRaw()) {
+            $str = $this->getName();
+        } else {
+            $str = str_replace(self::RESERVED_CHARS_FROM, self::RESERVED_CHARS_TO, $this->getName());
+        }
+
+        $str .= '=';
+
+        if ('' === (string) $this->getValue()) {
+            $str .= 'deleted; expires='.gmdate('D, d M Y H:i:s T', time() - 31536001).'; Max-Age=0';
+        } else {
+            $str .= $this->isRaw() ? $this->getValue() : rawurlencode($this->getValue());
+
+            if (0 !== $this->getExpiresTime()) {
+                $str .= '; expires='.gmdate('D, d M Y H:i:s T', $this->getExpiresTime()).'; Max-Age='.$this->getMaxAge();
+            }
+        }
+
+        if ($this->getPath()) {
+            $str .= '; path='.$this->getPath();
+        }
+
+        if ($this->getDomain()) {
+            $str .= '; domain='.$this->getDomain();
+        }
+
+        if ($this->isSecure()) {
+            $str .= '; secure';
+        }
+
+        if ($this->isHttpOnly()) {
+            $str .= '; httponly';
+        }
+
+        if (null !== $this->getSameSite()) {
+            $str .= '; samesite='.$this->getSameSite();
+        }
+
+        if ($this->isPartitioned()) {
+            $str .= '; partitioned';
+        }
+
+        return $str;
+    }
+
+    /**
+     * Gets the name of the cookie.
+     */
+    public function getName(): string
+    {
+        return $this->name;
+    }
+
+    /**
+     * Gets the value of the cookie.
+     */
+    public function getValue(): ?string
+    {
+        return $this->value;
+    }
+
+    /**
+     * Gets the domain that the cookie is available to.
+     */
+    public function getDomain(): ?string
+    {
+        return $this->domain;
+    }
+
+    /**
+     * Gets the time the cookie expires.
+     */
+    public function getExpiresTime(): int
+    {
+        return $this->expire;
+    }
+
+    /**
+     * Gets the max-age attribute.
+     */
+    public function getMaxAge(): int
+    {
+        $maxAge = $this->expire - time();
+
+        return max(0, $maxAge);
+    }
+
+    /**
+     * Gets the path on the server in which the cookie will be available on.
+     */
+    public function getPath(): string
+    {
+        return $this->path;
+    }
+
+    /**
+     * Checks whether the cookie should only be transmitted over a secure HTTPS connection from the client.
+     */
+    public function isSecure(): bool
+    {
+        return $this->secure ?? $this->secureDefault;
+    }
+
+    /**
+     * Checks whether the cookie will be made accessible only through the HTTP protocol.
+     */
+    public function isHttpOnly(): bool
+    {
+        return $this->httpOnly;
+    }
+
+    /**
+     * Whether this cookie is about to be cleared.
+     */
+    public function isCleared(): bool
+    {
+        return 0 !== $this->expire && $this->expire < time();
+    }
+
+    /**
+     * Checks if the cookie value should be sent with no url encoding.
+     */
+    public function isRaw(): bool
+    {
+        return $this->raw;
+    }
+
+    /**
+     * Checks whether the cookie should be tied to the top-level site in cross-site context.
+     */
+    public function isPartitioned(): bool
+    {
+        return $this->partitioned;
+    }
+
+    /**
+     * @return self::SAMESITE_*|null
+     */
+    public function getSameSite(): ?string
+    {
+        return $this->sameSite;
+    }
+
+    /**
+     * @param bool $default The default value of the "secure" flag when it is set to null
+     */
+    public function setSecureDefault(bool $default): void
+    {
+        $this->secureDefault = $default;
+    }
+}
diff --git a/core/lib/Http/Exception/BadRequestException.php b/core/lib/Http/Exception/BadRequestException.php
new file mode 100644
index 0000000..7f55cce
--- /dev/null
+++ b/core/lib/Http/Exception/BadRequestException.php
@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types = 1);
+
+namespace KTXC\Http\Exception;
+
+use KTXF\Exception\BaseException;
+
+class BadRequestException extends BaseException
+{
+}
diff --git a/core/lib/Http/Exception/ConflictingHeadersException.php b/core/lib/Http/Exception/ConflictingHeadersException.php
new file mode 100644
index 0000000..eece2fb
--- /dev/null
+++ b/core/lib/Http/Exception/ConflictingHeadersException.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Http\Exception;
+
+/**
+ * Exception thrown when request headers conflict with each other.
+ */
+class ConflictingHeadersException extends \UnexpectedValueException
+{
+}
diff --git a/core/lib/Http/Exception/JsonException.php b/core/lib/Http/Exception/JsonException.php
new file mode 100644
index 0000000..954d53a
--- /dev/null
+++ b/core/lib/Http/Exception/JsonException.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Http\Exception;
+
+/**
+ * Exception thrown when JSON decoding/encoding fails in HTTP context.
+ */
+class JsonException extends \UnexpectedValueException
+{
+}
diff --git a/core/lib/Http/Exception/SessionNotFoundException.php b/core/lib/Http/Exception/SessionNotFoundException.php
new file mode 100644
index 0000000..6eb81cd
--- /dev/null
+++ b/core/lib/Http/Exception/SessionNotFoundException.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Http\Exception;
+
+/**
+ * Exception thrown when a session is expected but not available.
+ */
+class SessionNotFoundException extends \LogicException
+{
+}
diff --git a/core/lib/Http/Exception/SuspiciousOperationException.php b/core/lib/Http/Exception/SuspiciousOperationException.php
new file mode 100644
index 0000000..8bdb443
--- /dev/null
+++ b/core/lib/Http/Exception/SuspiciousOperationException.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Http\Exception;
+
+/**
+ * Exception thrown when a suspicious operation is detected (e.g., invalid host).
+ */
+class SuspiciousOperationException extends \UnexpectedValueException
+{
+}
diff --git a/core/lib/Http/Exception/UnexpectedValueException.php b/core/lib/Http/Exception/UnexpectedValueException.php
new file mode 100644
index 0000000..e412d6b
--- /dev/null
+++ b/core/lib/Http/Exception/UnexpectedValueException.php
@@ -0,0 +1,9 @@
+<?php
+
+declare(strict_types = 1);
+
+namespace KTXC\Http\Exception;
+
+use KTXF\Exception\RuntimeException;
+
+class UnexpectedValueException extends RuntimeException {}
diff --git a/core/lib/Http/File/UploadedFile.php b/core/lib/Http/File/UploadedFile.php
new file mode 100644
index 0000000..8d8e278
--- /dev/null
+++ b/core/lib/Http/File/UploadedFile.php
@@ -0,0 +1,288 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Http\File;
+
+/**
+ * Represents a file uploaded through an HTTP request.
+ */
+class UploadedFile extends \SplFileInfo
+{
+    private string $originalName;
+    private ?string $mimeType;
+    private int $error;
+    private bool $test;
+
+    /**
+     * Accepts the information of the uploaded file as provided by the PHP global $_FILES.
+     *
+     * @param string      $path         The full temporary path to the file
+     * @param string      $originalName The original file name of the uploaded file
+     * @param string|null $mimeType     The type of the file as provided by PHP; null defaults to application/octet-stream
+     * @param int|null    $error        The error constant of the upload (one of PHP's UPLOAD_ERR_XXX constants); null defaults to UPLOAD_ERR_OK
+     * @param bool        $test         Whether the test mode is active (used for testing)
+     *
+     * @throws \InvalidArgumentException If the file is not readable
+     */
+    public function __construct(
+        string $path,
+        string $originalName,
+        ?string $mimeType = null,
+        ?int $error = null,
+        bool $test = false
+    ) {
+        $this->originalName = $this->getName($originalName);
+        $this->mimeType = $mimeType ?? 'application/octet-stream';
+        $this->error = $error ?? \UPLOAD_ERR_OK;
+        $this->test = $test;
+
+        parent::__construct($path);
+    }
+
+    /**
+     * Returns the original file name.
+     *
+     * It is extracted from the request from which the file has been uploaded.
+     * This should not be considered as a safe value to use for a file name on your servers.
+     *
+     * @return string The original name
+     */
+    public function getClientOriginalName(): string
+    {
+        return $this->originalName;
+    }
+
+    /**
+     * Returns the original file extension.
+     *
+     * It is extracted from the original file name that was uploaded.
+     * This should not be considered as a safe value to use for a file name on your servers.
+     *
+     * @return string The extension
+     */
+    public function getClientOriginalExtension(): string
+    {
+        return pathinfo($this->originalName, \PATHINFO_EXTENSION);
+    }
+
+    /**
+     * Returns the file mime type.
+     *
+     * The client mime type is extracted from the request from which the file was uploaded,
+     * so it should not be considered as a safe value.
+     *
+     * @return string The mime type
+     */
+    public function getClientMimeType(): string
+    {
+        return $this->mimeType;
+    }
+
+    /**
+     * Returns the extension based on the client mime type.
+     *
+     * If the mime type is unknown, returns null.
+     *
+     * This method uses a built-in list of mime type / extension pairs.
+     *
+     * @return string|null The guessed extension or null if it cannot be guessed
+     */
+    public function guessClientExtension(): ?string
+    {
+        return self::mimeToExtension($this->mimeType);
+    }
+
+    /**
+     * Returns the upload error.
+     *
+     * If the upload was successful, the constant UPLOAD_ERR_OK is returned.
+     * Otherwise one of the other UPLOAD_ERR_XXX constants is returned.
+     *
+     * @return int The upload error
+     */
+    public function getError(): int
+    {
+        return $this->error;
+    }
+
+    /**
+     * Returns whether the file has been uploaded with HTTP and no error occurred.
+     *
+     * @return bool True if the file is valid, false otherwise
+     */
+    public function isValid(): bool
+    {
+        $isOk = \UPLOAD_ERR_OK === $this->error;
+
+        return $this->test ? $isOk : $isOk && is_uploaded_file($this->getPathname());
+    }
+
+    /**
+     * Moves the file to a new location.
+     *
+     * @param string $directory The destination folder
+     * @param string|null $name The new file name
+     *
+     * @return \SplFileInfo A SplFileInfo object for the new file
+     *
+     * @throws \RuntimeException if the file cannot be moved
+     */
+    public function move(string $directory, ?string $name = null): \SplFileInfo
+    {
+        if ($this->isValid()) {
+            if ($this->test) {
+                return $this->doMove($directory, $name);
+            }
+
+            $target = $this->getTargetFile($directory, $name);
+
+            if (!@move_uploaded_file($this->getPathname(), $target)) {
+                $error = error_get_last();
+                throw new \RuntimeException(sprintf('Could not move the file "%s" to "%s" (%s).', $this->getPathname(), $target, strip_tags($error['message'] ?? 'unknown error')));
+            }
+
+            @chmod($target, 0666 & ~umask());
+
+            return new \SplFileInfo($target);
+        }
+
+        throw new \RuntimeException($this->getErrorMessage());
+    }
+
+    /**
+     * Returns the maximum size of an uploaded file as configured in php.ini.
+     *
+     * @return int|float The maximum size of an uploaded file in bytes (returns float on 32-bit for large values)
+     */
+    public static function getMaxFilesize(): int|float
+    {
+        $sizePostMax = self::parseFilesize(\ini_get('post_max_size'));
+        $sizeUploadMax = self::parseFilesize(\ini_get('upload_max_filesize'));
+
+        return min($sizePostMax ?: \PHP_INT_MAX, $sizeUploadMax ?: \PHP_INT_MAX);
+    }
+
+    /**
+     * Returns an informative upload error message.
+     *
+     * @return string The error message regarding the specified error code
+     */
+    public function getErrorMessage(): string
+    {
+        return match ($this->error) {
+            \UPLOAD_ERR_INI_SIZE => 'The file "%s" exceeds your upload_max_filesize ini directive.',
+            \UPLOAD_ERR_FORM_SIZE => 'The file "%s" exceeds the upload limit defined in your form.',
+            \UPLOAD_ERR_PARTIAL => 'The file "%s" was only partially uploaded.',
+            \UPLOAD_ERR_NO_FILE => 'No file was uploaded.',
+            \UPLOAD_ERR_CANT_WRITE => 'The file "%s" could not be written on disk.',
+            \UPLOAD_ERR_NO_TMP_DIR => 'File could not be uploaded: missing temporary directory.',
+            \UPLOAD_ERR_EXTENSION => 'File upload was stopped by a PHP extension.',
+            default => 'The file "%s" was not uploaded due to an unknown error.',
+        };
+    }
+
+    /**
+     * Returns locale independent base name of the given path.
+     *
+     * @param string $name The new file name
+     *
+     * @return string The base name
+     */
+    protected function getName(string $name): string
+    {
+        $originalName = str_replace('\\', '/', $name);
+        $pos = strrpos($originalName, '/');
+        $originalName = false === $pos ? $originalName : substr($originalName, $pos + 1);
+
+        return $originalName;
+    }
+
+    protected function getTargetFile(string $directory, ?string $name = null): string
+    {
+        if (!is_dir($directory)) {
+            if (false === @mkdir($directory, 0777, true) && !is_dir($directory)) {
+                throw new \RuntimeException(sprintf('Unable to create the "%s" directory.', $directory));
+            }
+        } elseif (!is_writable($directory)) {
+            throw new \RuntimeException(sprintf('Unable to write in the "%s" directory.', $directory));
+        }
+
+        $target = rtrim($directory, '/\\') . \DIRECTORY_SEPARATOR . (null === $name ? $this->getBasename() : $this->getName($name));
+
+        return $target;
+    }
+
+    /**
+     * Moves the file to a new location (used in test mode).
+     */
+    protected function doMove(string $directory, ?string $name = null): \SplFileInfo
+    {
+        $target = $this->getTargetFile($directory, $name);
+
+        if (!@rename($this->getPathname(), $target)) {
+            $error = error_get_last();
+            throw new \RuntimeException(sprintf('Could not move the file "%s" to "%s" (%s).', $this->getPathname(), $target, strip_tags($error['message'] ?? 'unknown error')));
+        }
+
+        @chmod($target, 0666 & ~umask());
+
+        return new \SplFileInfo($target);
+    }
+
+    private static function parseFilesize(string $size): int|float
+    {
+        if ('' === $size) {
+            return 0;
+        }
+
+        $size = strtolower($size);
+
+        $max = ltrim($size, '+');
+        if (str_starts_with($max, '0x')) {
+            $max = \intval($max, 16);
+        } elseif (str_starts_with($max, '0')) {
+            $max = \intval($max, 8);
+        } else {
+            $max = (int) $max;
+        }
+
+        switch (substr($size, -1)) {
+            case 't': $max *= 1024;
+            // no break
+            case 'g': $max *= 1024;
+            // no break
+            case 'm': $max *= 1024;
+            // no break
+            case 'k': $max *= 1024;
+        }
+
+        return $max;
+    }
+
+    private static function mimeToExtension(string $mimeType): ?string
+    {
+        $map = [
+            'application/pdf' => 'pdf',
+            'application/zip' => 'zip',
+            'application/json' => 'json',
+            'application/xml' => 'xml',
+            'application/octet-stream' => 'bin',
+            'image/jpeg' => 'jpg',
+            'image/png' => 'png',
+            'image/gif' => 'gif',
+            'image/webp' => 'webp',
+            'image/svg+xml' => 'svg',
+            'text/plain' => 'txt',
+            'text/html' => 'html',
+            'text/css' => 'css',
+            'text/javascript' => 'js',
+            'audio/mpeg' => 'mp3',
+            'audio/wav' => 'wav',
+            'video/mp4' => 'mp4',
+            'video/webm' => 'webm',
+        ];
+
+        return $map[$mimeType] ?? null;
+    }
+}
diff --git a/core/lib/Http/HeaderParameters.php b/core/lib/Http/HeaderParameters.php
new file mode 100644
index 0000000..21b216e
--- /dev/null
+++ b/core/lib/Http/HeaderParameters.php
@@ -0,0 +1,275 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http;
+
+/**
+ * HeaderBag is a container for HTTP headers.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ *
+ * @implements \IteratorAggregate<string, list<string|null>>
+ */
+class HeaderParameters implements \IteratorAggregate, \Countable, \Stringable
+{
+    protected const UPPER = '_ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+    protected const LOWER = '-abcdefghijklmnopqrstuvwxyz';
+
+    /**
+     * @var array<string, list<string|null>>
+     */
+    protected array $headers = [];
+    protected array $cacheControl = [];
+
+    public function __construct(array $headers = [])
+    {
+        foreach ($headers as $key => $values) {
+            $this->set($key, $values);
+        }
+    }
+
+    /**
+     * Returns the headers as a string.
+     */
+    public function __toString(): string
+    {
+        if (!$headers = $this->all()) {
+            return '';
+        }
+
+        ksort($headers);
+        $max = max(array_map('strlen', array_keys($headers))) + 1;
+        $content = '';
+        foreach ($headers as $name => $values) {
+            $name = ucwords($name, '-');
+            foreach ($values as $value) {
+                $content .= \sprintf("%-{$max}s %s\r\n", $name.':', $value);
+            }
+        }
+
+        return $content;
+    }
+
+    /**
+     * Returns the headers.
+     *
+     * @param string|null $key The name of the headers to return or null to get them all
+     *
+     * @return ($key is null ? array<string, list<string|null>> : list<string|null>)
+     */
+    public function all(?string $key = null): array
+    {
+        if (null !== $key) {
+            return $this->headers[strtr($key, self::UPPER, self::LOWER)] ?? [];
+        }
+
+        return $this->headers;
+    }
+
+    /**
+     * Returns the parameter keys.
+     *
+     * @return string[]
+     */
+    public function keys(): array
+    {
+        return array_keys($this->all());
+    }
+
+    /**
+     * Replaces the current HTTP headers by a new set.
+     */
+    public function replace(array $headers = []): void
+    {
+        $this->headers = [];
+        $this->add($headers);
+    }
+
+    /**
+     * Adds new headers the current HTTP headers set.
+     */
+    public function add(array $headers): void
+    {
+        foreach ($headers as $key => $values) {
+            $this->set($key, $values);
+        }
+    }
+
+    /**
+     * Returns the first header by name or the default one.
+     */
+    public function get(string $key, ?string $default = null): ?string
+    {
+        $headers = $this->all($key);
+
+        if (!$headers) {
+            return $default;
+        }
+
+        if (null === $headers[0]) {
+            return null;
+        }
+
+        return $headers[0];
+    }
+
+    /**
+     * Sets a header by name.
+     *
+     * @param string|string[]|null $values  The value or an array of values
+     * @param bool                 $replace Whether to replace the actual value or not (true by default)
+     */
+    public function set(string $key, string|array|null $values, bool $replace = true): void
+    {
+        $key = strtr($key, self::UPPER, self::LOWER);
+
+        if (\is_array($values)) {
+            $values = array_values($values);
+
+            if (true === $replace || !isset($this->headers[$key])) {
+                $this->headers[$key] = $values;
+            } else {
+                $this->headers[$key] = array_merge($this->headers[$key], $values);
+            }
+        } else {
+            if (true === $replace || !isset($this->headers[$key])) {
+                $this->headers[$key] = [$values];
+            } else {
+                $this->headers[$key][] = $values;
+            }
+        }
+
+        if ('cache-control' === $key) {
+            $this->cacheControl = $this->parseCacheControl(implode(', ', $this->headers[$key]));
+        }
+    }
+
+    /**
+     * Returns true if the HTTP header is defined.
+     */
+    public function has(string $key): bool
+    {
+        return \array_key_exists(strtr($key, self::UPPER, self::LOWER), $this->all());
+    }
+
+    /**
+     * Returns true if the given HTTP header contains the given value.
+     */
+    public function contains(string $key, string $value): bool
+    {
+        return \in_array($value, $this->all($key), true);
+    }
+
+    /**
+     * Removes a header.
+     */
+    public function remove(string $key): void
+    {
+        $key = strtr($key, self::UPPER, self::LOWER);
+
+        unset($this->headers[$key]);
+
+        if ('cache-control' === $key) {
+            $this->cacheControl = [];
+        }
+    }
+
+    /**
+     * Returns the HTTP header value converted to a date.
+     *
+     * @throws \RuntimeException When the HTTP header is not parseable
+     */
+    public function getDate(string $key, ?\DateTimeInterface $default = null): ?\DateTimeImmutable
+    {
+        if (null === $value = $this->get($key)) {
+            return null !== $default ? \DateTimeImmutable::createFromInterface($default) : null;
+        }
+
+        if (false === $date = \DateTimeImmutable::createFromFormat(\DATE_RFC2822, $value)) {
+            throw new \RuntimeException(\sprintf('The "%s" HTTP header is not parseable (%s).', $key, $value));
+        }
+
+        return $date;
+    }
+
+    /**
+     * Adds a custom Cache-Control directive.
+     */
+    public function addCacheControlDirective(string $key, bool|string $value = true): void
+    {
+        $this->cacheControl[$key] = $value;
+
+        $this->set('Cache-Control', $this->getCacheControlHeader());
+    }
+
+    /**
+     * Returns true if the Cache-Control directive is defined.
+     */
+    public function hasCacheControlDirective(string $key): bool
+    {
+        return \array_key_exists($key, $this->cacheControl);
+    }
+
+    /**
+     * Returns a Cache-Control directive value by name.
+     */
+    public function getCacheControlDirective(string $key): bool|string|null
+    {
+        return $this->cacheControl[$key] ?? null;
+    }
+
+    /**
+     * Removes a Cache-Control directive.
+     */
+    public function removeCacheControlDirective(string $key): void
+    {
+        unset($this->cacheControl[$key]);
+
+        $this->set('Cache-Control', $this->getCacheControlHeader());
+    }
+
+    /**
+     * Returns an iterator for headers.
+     *
+     * @return \ArrayIterator<string, list<string|null>>
+     */
+    public function getIterator(): \ArrayIterator
+    {
+        return new \ArrayIterator($this->headers);
+    }
+
+    /**
+     * Returns the number of headers.
+     */
+    public function count(): int
+    {
+        return \count($this->headers);
+    }
+
+    protected function getCacheControlHeader(): string
+    {
+        ksort($this->cacheControl);
+
+        return HeaderUtils::toString($this->cacheControl, ',');
+    }
+
+    /**
+     * Parses a Cache-Control HTTP header.
+     */
+    protected function parseCacheControl(string $header): array
+    {
+        $parts = HeaderUtils::split($header, ',=');
+
+        return HeaderUtils::combine($parts);
+    }
+}
diff --git a/core/lib/Http/HeaderUtils.php b/core/lib/Http/HeaderUtils.php
new file mode 100644
index 0000000..f57d261
--- /dev/null
+++ b/core/lib/Http/HeaderUtils.php
@@ -0,0 +1,298 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http;
+
+/**
+ * HTTP header utility functions.
+ *
+ * @author Christian Schmidt <github@chsc.dk>
+ */
+class HeaderUtils
+{
+    public const DISPOSITION_ATTACHMENT = 'attachment';
+    public const DISPOSITION_INLINE = 'inline';
+
+    /**
+     * This class should not be instantiated.
+     */
+    private function __construct()
+    {
+    }
+
+    /**
+     * Splits an HTTP header by one or more separators.
+     *
+     * Example:
+     *
+     *     HeaderUtils::split('da, en-gb;q=0.8', ',;')
+     *     # returns [['da'], ['en-gb', 'q=0.8']]
+     *
+     * @param string $separators List of characters to split on, ordered by
+     *                           precedence, e.g. ',', ';=', or ',;='
+     *
+     * @return array Nested array with as many levels as there are characters in
+     *               $separators
+     */
+    public static function split(string $header, string $separators): array
+    {
+        if ('' === $separators) {
+            throw new \InvalidArgumentException('At least one separator must be specified.');
+        }
+
+        $quotedSeparators = preg_quote($separators, '/');
+
+        preg_match_all('
+            /
+                (?!\s)
+                    (?:
+                        # quoted-string
+                        "(?:[^"\\\\]|\\\\.)*(?:"|\\\\|$)
+                    |
+                        # token
+                        [^"'.$quotedSeparators.']+
+                    )+
+                (?<!\s)
+            |
+                # separator
+                \s*
+                (?<separator>['.$quotedSeparators.'])
+                \s*
+            /x', trim($header), $matches, \PREG_SET_ORDER);
+
+        return self::groupParts($matches, $separators);
+    }
+
+    /**
+     * Combines an array of arrays into one associative array.
+     *
+     * Each of the nested arrays should have one or two elements. The first
+     * value will be used as the keys in the associative array, and the second
+     * will be used as the values, or true if the nested array only contains one
+     * element. Array keys are lowercased.
+     *
+     * Example:
+     *
+     *     HeaderUtils::combine([['foo', 'abc'], ['bar']])
+     *     // => ['foo' => 'abc', 'bar' => true]
+     */
+    public static function combine(array $parts): array
+    {
+        $assoc = [];
+        foreach ($parts as $part) {
+            $name = strtolower($part[0]);
+            $value = $part[1] ?? true;
+            $assoc[$name] = $value;
+        }
+
+        return $assoc;
+    }
+
+    /**
+     * Joins an associative array into a string for use in an HTTP header.
+     *
+     * The key and value of each entry are joined with '=', and all entries
+     * are joined with the specified separator and an additional space (for
+     * readability). Values are quoted if necessary.
+     *
+     * Example:
+     *
+     *     HeaderUtils::toString(['foo' => 'abc', 'bar' => true, 'baz' => 'a b c'], ',')
+     *     // => 'foo=abc, bar, baz="a b c"'
+     */
+    public static function toString(array $assoc, string $separator): string
+    {
+        $parts = [];
+        foreach ($assoc as $name => $value) {
+            if (true === $value) {
+                $parts[] = $name;
+            } else {
+                $parts[] = $name.'='.self::quote($value);
+            }
+        }
+
+        return implode($separator.' ', $parts);
+    }
+
+    /**
+     * Encodes a string as a quoted string, if necessary.
+     *
+     * If a string contains characters not allowed by the "token" construct in
+     * the HTTP specification, it is backslash-escaped and enclosed in quotes
+     * to match the "quoted-string" construct.
+     */
+    public static function quote(string $s): string
+    {
+        if (preg_match('/^[a-z0-9!#$%&\'*.^_`|~-]+$/i', $s)) {
+            return $s;
+        }
+
+        return '"'.addcslashes($s, '"\\"').'"';
+    }
+
+    /**
+     * Decodes a quoted string.
+     *
+     * If passed an unquoted string that matches the "token" construct (as
+     * defined in the HTTP specification), it is passed through verbatim.
+     */
+    public static function unquote(string $s): string
+    {
+        return preg_replace('/\\\\(.)|"/', '$1', $s);
+    }
+
+    /**
+     * Generates an HTTP Content-Disposition field-value.
+     *
+     * @param string $disposition      One of "inline" or "attachment"
+     * @param string $filename         A unicode string
+     * @param string $filenameFallback A string containing only ASCII characters that
+     *                                 is semantically equivalent to $filename. If the filename is already ASCII,
+     *                                 it can be omitted, or just copied from $filename
+     *
+     * @throws \InvalidArgumentException
+     *
+     * @see RFC 6266
+     */
+    public static function makeDisposition(string $disposition, string $filename, string $filenameFallback = ''): string
+    {
+        if (!\in_array($disposition, [self::DISPOSITION_ATTACHMENT, self::DISPOSITION_INLINE])) {
+            throw new \InvalidArgumentException(\sprintf('The disposition must be either "%s" or "%s".', self::DISPOSITION_ATTACHMENT, self::DISPOSITION_INLINE));
+        }
+
+        if ('' === $filenameFallback) {
+            $filenameFallback = $filename;
+        }
+
+        // filenameFallback is not ASCII.
+        if (!preg_match('/^[\x20-\x7e]*$/', $filenameFallback)) {
+            throw new \InvalidArgumentException('The filename fallback must only contain ASCII characters.');
+        }
+
+        // percent characters aren't safe in fallback.
+        if (str_contains($filenameFallback, '%')) {
+            throw new \InvalidArgumentException('The filename fallback cannot contain the "%" character.');
+        }
+
+        // path separators aren't allowed in either.
+        if (str_contains($filename, '/') || str_contains($filename, '\\') || str_contains($filenameFallback, '/') || str_contains($filenameFallback, '\\')) {
+            throw new \InvalidArgumentException('The filename and the fallback cannot contain the "/" and "\\" characters.');
+        }
+
+        $params = ['filename' => $filenameFallback];
+        if ($filename !== $filenameFallback) {
+            $params['filename*'] = "utf-8''".rawurlencode($filename);
+        }
+
+        return $disposition.'; '.self::toString($params, ';');
+    }
+
+    /**
+     * Like parse_str(), but preserves dots in variable names.
+     */
+    public static function parseQuery(string $query, bool $ignoreBrackets = false, string $separator = '&'): array
+    {
+        $q = [];
+
+        foreach (explode($separator, $query) as $v) {
+            if (false !== $i = strpos($v, "\0")) {
+                $v = substr($v, 0, $i);
+            }
+
+            if (false === $i = strpos($v, '=')) {
+                $k = urldecode($v);
+                $v = '';
+            } else {
+                $k = urldecode(substr($v, 0, $i));
+                $v = substr($v, $i);
+            }
+
+            if (false !== $i = strpos($k, "\0")) {
+                $k = substr($k, 0, $i);
+            }
+
+            $k = ltrim($k, ' ');
+
+            if ($ignoreBrackets) {
+                $q[$k][] = urldecode(substr($v, 1));
+
+                continue;
+            }
+
+            if (false === $i = strpos($k, '[')) {
+                $q[] = bin2hex($k).$v;
+            } else {
+                $q[] = bin2hex(substr($k, 0, $i)).rawurlencode(substr($k, $i)).$v;
+            }
+        }
+
+        if ($ignoreBrackets) {
+            return $q;
+        }
+
+        parse_str(implode('&', $q), $q);
+
+        $query = [];
+
+        foreach ($q as $k => $v) {
+            if (false !== $i = strpos($k, '_')) {
+                $query[substr_replace($k, hex2bin(substr($k, 0, $i)).'[', 0, 1 + $i)] = $v;
+            } else {
+                $query[hex2bin($k)] = $v;
+            }
+        }
+
+        return $query;
+    }
+
+    private static function groupParts(array $matches, string $separators, bool $first = true): array
+    {
+        $separator = $separators[0];
+        $separators = substr($separators, 1) ?: '';
+        $i = 0;
+
+        if ('' === $separators && !$first) {
+            $parts = [''];
+
+            foreach ($matches as $match) {
+                if (!$i && isset($match['separator'])) {
+                    $i = 1;
+                    $parts[1] = '';
+                } else {
+                    $parts[$i] .= self::unquote($match[0]);
+                }
+            }
+
+            return $parts;
+        }
+
+        $parts = [];
+        $partMatches = [];
+
+        foreach ($matches as $match) {
+            if (($match['separator'] ?? null) === $separator) {
+                ++$i;
+            } else {
+                $partMatches[$i][] = $match;
+            }
+        }
+
+        foreach ($partMatches as $matches) {
+            if ('' === $separators && '' !== $unquoted = self::unquote($matches[0][0])) {
+                $parts[] = $unquoted;
+            } elseif ($groupedParts = self::groupParts($matches, $separators, false)) {
+                $parts[] = $groupedParts;
+            }
+        }
+
+        return $parts;
+    }
+}
diff --git a/core/lib/Http/Request/Request.php b/core/lib/Http/Request/Request.php
new file mode 100644
index 0000000..892144f
--- /dev/null
+++ b/core/lib/Http/Request/Request.php
@@ -0,0 +1,2107 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\Exception\BadRequestException;
+use KTXC\Http\Exception\ConflictingHeadersException;
+use KTXC\Http\Exception\JsonException;
+use KTXC\Http\Exception\SessionNotFoundException;
+use KTXC\Http\Exception\SuspiciousOperationException;
+use KTXC\Http\HeaderUtils;
+use KTXC\Http\Session\SessionInterface;
+use KTXF\IpUtils;
+
+// Help opcache.preload discover always-needed symbols
+class_exists(RequestHeaderAccept::class);
+class_exists(RequestFileCollection::class);
+class_exists(RequestHeaderParameters::class);
+class_exists(HeaderUtils::class);
+class_exists(RequestInputParameters::class);
+class_exists(RequestServerParameters::class);
+
+/**
+ * Request represents an HTTP request.
+ *
+ * The methods dealing with URL accept / return a raw path (% encoded):
+ *   * getBasePath
+ *   * getBaseUrl
+ *   * getPathInfo
+ *   * getRequestUri
+ *   * getUri
+ *   * getUriForPath
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ */
+class Request
+{
+    public const HEADER_FORWARDED = 0b000001; // When using RFC 7239
+    public const HEADER_X_FORWARDED_FOR = 0b000010;
+    public const HEADER_X_FORWARDED_HOST = 0b000100;
+    public const HEADER_X_FORWARDED_PROTO = 0b001000;
+    public const HEADER_X_FORWARDED_PORT = 0b010000;
+    public const HEADER_X_FORWARDED_PREFIX = 0b100000;
+
+    public const HEADER_X_FORWARDED_AWS_ELB = 0b0011010; // AWS ELB doesn't send X-Forwarded-Host
+    public const HEADER_X_FORWARDED_TRAEFIK = 0b0111110; // All "X-Forwarded-*" headers sent by Traefik reverse proxy
+
+    public const METHOD_HEAD = 'HEAD';
+    public const METHOD_GET = 'GET';
+    public const METHOD_POST = 'POST';
+    public const METHOD_PUT = 'PUT';
+    public const METHOD_PATCH = 'PATCH';
+    public const METHOD_DELETE = 'DELETE';
+    public const METHOD_PURGE = 'PURGE';
+    public const METHOD_OPTIONS = 'OPTIONS';
+    public const METHOD_TRACE = 'TRACE';
+    public const METHOD_CONNECT = 'CONNECT';
+
+    /**
+     * @var string[]
+     */
+    protected static array $trustedProxies = [];
+
+    /**
+     * @var string[]
+     */
+    protected static array $trustedHostPatterns = [];
+
+    /**
+     * @var string[]
+     */
+    protected static array $trustedHosts = [];
+
+    protected static bool $httpMethodParameterOverride = false;
+
+    /**
+     * Custom parameters.
+     */
+    public RequestParameters $attributes;
+
+    /**
+     * Request body parameters ($_POST).
+     *
+     * @see getPayload() for portability between content types
+     */
+    public RequestInputParameters $request;
+
+    /**
+     * Query string parameters ($_GET).
+     */
+    public RequestInputParameters $query;
+
+    /**
+     * Server and execution environment parameters ($_SERVER).
+     */
+    public RequestServerParameters $server;
+
+    /**
+     * Uploaded files ($_FILES).
+     */
+    public RequestFileCollection $files;
+
+    /**
+     * Cookies ($_COOKIE).
+     */
+    public RequestInputParameters $cookies;
+
+    /**
+     * Headers (taken from the $_SERVER).
+     */
+    public RequestHeaderParameters $headers;
+
+    /**
+     * @var string|resource|false|null
+     */
+    protected $content;
+
+    /**
+     * @var string[]|null
+     */
+    protected ?array $languages = null;
+
+    /**
+     * @var string[]|null
+     */
+    protected ?array $charsets = null;
+
+    /**
+     * @var string[]|null
+     */
+    protected ?array $encodings = null;
+
+    /**
+     * @var string[]|null
+     */
+    protected ?array $acceptableContentTypes = null;
+
+    protected ?string $pathInfo = null;
+    protected ?string $requestUri = null;
+    protected ?string $baseUrl = null;
+    protected ?string $basePath = null;
+    protected ?string $method = null;
+    protected ?string $format = null;
+    protected SessionInterface|\Closure|null $session = null;
+    protected ?string $locale = null;
+    protected string $defaultLocale = 'en';
+
+    /**
+     * @var array<string, string[]>|null
+     */
+    protected static ?array $formats = null;
+
+    protected static ?\Closure $requestFactory = null;
+
+    private ?string $preferredFormat = null;
+
+    private bool $isHostValid = true;
+    private bool $isForwardedValid = true;
+    private bool $isSafeContentPreferred;
+
+    private array $trustedValuesCache = [];
+
+    private static int $trustedHeaderSet = -1;
+
+    private const FORWARDED_PARAMS = [
+        self::HEADER_X_FORWARDED_FOR => 'for',
+        self::HEADER_X_FORWARDED_HOST => 'host',
+        self::HEADER_X_FORWARDED_PROTO => 'proto',
+        self::HEADER_X_FORWARDED_PORT => 'host',
+    ];
+
+    /**
+     * Names for headers that can be trusted when
+     * using trusted proxies.
+     *
+     * The FORWARDED header is the standard as of rfc7239.
+     *
+     * The other headers are non-standard, but widely used
+     * by popular reverse proxies (like Apache mod_proxy or Amazon EC2).
+     */
+    private const TRUSTED_HEADERS = [
+        self::HEADER_FORWARDED => 'FORWARDED',
+        self::HEADER_X_FORWARDED_FOR => 'X_FORWARDED_FOR',
+        self::HEADER_X_FORWARDED_HOST => 'X_FORWARDED_HOST',
+        self::HEADER_X_FORWARDED_PROTO => 'X_FORWARDED_PROTO',
+        self::HEADER_X_FORWARDED_PORT => 'X_FORWARDED_PORT',
+        self::HEADER_X_FORWARDED_PREFIX => 'X_FORWARDED_PREFIX',
+    ];
+
+    private bool $isIisRewrite = false;
+
+    /**
+     * @param array                $query      The GET parameters
+     * @param array                $request    The POST parameters
+     * @param array                $attributes The request attributes (parameters parsed from the PATH_INFO, ...)
+     * @param array                $cookies    The COOKIE parameters
+     * @param array                $files      The FILES parameters
+     * @param array                $server     The SERVER parameters
+     * @param string|resource|null $content    The raw body data
+     */
+    public function __construct(array $query = [], array $request = [], array $attributes = [], array $cookies = [], array $files = [], array $server = [], $content = null)
+    {
+        $this->initialize($query, $request, $attributes, $cookies, $files, $server, $content);
+    }
+
+    /**
+     * Sets the parameters for this request.
+     *
+     * This method also re-initializes all properties.
+     *
+     * @param array                $query      The GET parameters
+     * @param array                $request    The POST parameters
+     * @param array                $attributes The request attributes (parameters parsed from the PATH_INFO, ...)
+     * @param array                $cookies    The COOKIE parameters
+     * @param array                $files      The FILES parameters
+     * @param array                $server     The SERVER parameters
+     * @param string|resource|null $content    The raw body data
+     */
+    public function initialize(array $query = [], array $request = [], array $attributes = [], array $cookies = [], array $files = [], array $server = [], $content = null): void
+    {
+        $this->request = new RequestInputParameters($request);
+        $this->query = new RequestInputParameters($query);
+        $this->attributes = new RequestParameters($attributes);
+        $this->cookies = new RequestInputParameters($cookies);
+        $this->files = new RequestFileCollection($files);
+        $this->server = new RequestServerParameters($server);
+        $this->headers = new RequestHeaderParameters($this->server->getHeaders());
+
+        $this->content = $content;
+        $this->languages = null;
+        $this->charsets = null;
+        $this->encodings = null;
+        $this->acceptableContentTypes = null;
+        $this->pathInfo = null;
+        $this->requestUri = null;
+        $this->baseUrl = null;
+        $this->basePath = null;
+        $this->method = null;
+        $this->format = null;
+    }
+
+    /**
+     * Creates a new request with values from PHP's super globals.
+     */
+    public static function createFromGlobals(): static
+    {
+        $request = self::createRequestFromFactory($_GET, $_POST, [], $_COOKIE, $_FILES, $_SERVER);
+
+        if (str_starts_with($request->headers->get('CONTENT_TYPE', ''), 'application/x-www-form-urlencoded')
+            && \in_array(strtoupper($request->server->get('REQUEST_METHOD', 'GET')), ['PUT', 'DELETE', 'PATCH'], true)
+        ) {
+            parse_str($request->getContent(), $data);
+            $request->request = new RequestInputParameters($data);
+        }
+
+        return $request;
+    }
+
+    /**
+     * Creates a Request based on a given URI and configuration.
+     *
+     * The information contained in the URI always take precedence
+     * over the other information (server and parameters).
+     *
+     * @param string               $uri        The URI
+     * @param string               $method     The HTTP method
+     * @param array                $parameters The query (GET) or request (POST) parameters
+     * @param array                $cookies    The request cookies ($_COOKIE)
+     * @param array                $files      The request files ($_FILES)
+     * @param array                $server     The server parameters ($_SERVER)
+     * @param string|resource|null $content    The raw body data
+     *
+     * @throws BadRequestException When the URI is invalid
+     */
+    public static function create(string $uri, string $method = 'GET', array $parameters = [], array $cookies = [], array $files = [], array $server = [], $content = null): static
+    {
+        $server = array_replace([
+            'SERVER_NAME' => 'localhost',
+            'SERVER_PORT' => 80,
+            'HTTP_HOST' => 'localhost',
+            'HTTP_USER_AGENT' => 'Symfony',
+            'HTTP_ACCEPT' => 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+            'HTTP_ACCEPT_LANGUAGE' => 'en-us,en;q=0.5',
+            'HTTP_ACCEPT_CHARSET' => 'ISO-8859-1,utf-8;q=0.7,*;q=0.7',
+            'REMOTE_ADDR' => '127.0.0.1',
+            'SCRIPT_NAME' => '',
+            'SCRIPT_FILENAME' => '',
+            'SERVER_PROTOCOL' => 'HTTP/1.1',
+            'REQUEST_TIME' => time(),
+            'REQUEST_TIME_FLOAT' => microtime(true),
+        ], $server);
+
+        $server['PATH_INFO'] = '';
+        $server['REQUEST_METHOD'] = strtoupper($method);
+
+        if (false === $components = parse_url(\strlen($uri) !== strcspn($uri, '?#') ? $uri : $uri.'#')) {
+            throw new BadRequestException('Invalid URI.');
+        }
+
+        if (false !== ($i = strpos($uri, '\\')) && $i < strcspn($uri, '?#')) {
+            throw new BadRequestException('Invalid URI: A URI cannot contain a backslash.');
+        }
+        if (\strlen($uri) !== strcspn($uri, "\r\n\t")) {
+            throw new BadRequestException('Invalid URI: A URI cannot contain CR/LF/TAB characters.');
+        }
+        if ('' !== $uri && (\ord($uri[0]) <= 32 || \ord($uri[-1]) <= 32)) {
+            throw new BadRequestException('Invalid URI: A URI must not start nor end with ASCII control characters or spaces.');
+        }
+
+        if (isset($components['host'])) {
+            $server['SERVER_NAME'] = $components['host'];
+            $server['HTTP_HOST'] = $components['host'];
+        }
+
+        if (isset($components['scheme'])) {
+            if ('https' === $components['scheme']) {
+                $server['HTTPS'] = 'on';
+                $server['SERVER_PORT'] = 443;
+            } else {
+                unset($server['HTTPS']);
+                $server['SERVER_PORT'] = 80;
+            }
+        }
+
+        if (isset($components['port'])) {
+            $server['SERVER_PORT'] = $components['port'];
+            $server['HTTP_HOST'] .= ':'.$components['port'];
+        }
+
+        if (isset($components['user'])) {
+            $server['PHP_AUTH_USER'] = $components['user'];
+        }
+
+        if (isset($components['pass'])) {
+            $server['PHP_AUTH_PW'] = $components['pass'];
+        }
+
+        if (!isset($components['path'])) {
+            $components['path'] = '/';
+        }
+
+        switch (strtoupper($method)) {
+            case 'POST':
+            case 'PUT':
+            case 'DELETE':
+                if (!isset($server['CONTENT_TYPE'])) {
+                    $server['CONTENT_TYPE'] = 'application/x-www-form-urlencoded';
+                }
+                // no break
+            case 'PATCH':
+                $request = $parameters;
+                $query = [];
+                break;
+            default:
+                $request = [];
+                $query = $parameters;
+                break;
+        }
+
+        $queryString = '';
+        if (isset($components['query'])) {
+            parse_str(html_entity_decode($components['query']), $qs);
+
+            if ($query) {
+                $query = array_replace($qs, $query);
+                $queryString = http_build_query($query, '', '&');
+            } else {
+                $query = $qs;
+                $queryString = $components['query'];
+            }
+        } elseif ($query) {
+            $queryString = http_build_query($query, '', '&');
+        }
+
+        $server['REQUEST_URI'] = $components['path'].('' !== $queryString ? '?'.$queryString : '');
+        $server['QUERY_STRING'] = $queryString;
+
+        return self::createRequestFromFactory($query, $request, [], $cookies, $files, $server, $content);
+    }
+
+    /**
+     * Sets a callable able to create a Request instance.
+     *
+     * This is mainly useful when you need to override the Request class
+     * to keep BC with an existing system. It should not be used for any
+     * other purpose.
+     */
+    public static function setFactory(?callable $callable): void
+    {
+        self::$requestFactory = null === $callable ? null : $callable(...);
+    }
+
+    /**
+     * Clones a request and overrides some of its parameters.
+     *
+     * @param array|null $query      The GET parameters
+     * @param array|null $request    The POST parameters
+     * @param array|null $attributes The request attributes (parameters parsed from the PATH_INFO, ...)
+     * @param array|null $cookies    The COOKIE parameters
+     * @param array|null $files      The FILES parameters
+     * @param array|null $server     The SERVER parameters
+     */
+    public function duplicate(?array $query = null, ?array $request = null, ?array $attributes = null, ?array $cookies = null, ?array $files = null, ?array $server = null): static
+    {
+        $dup = clone $this;
+        if (null !== $query) {
+            $dup->query = new RequestInputParameters($query);
+        }
+        if (null !== $request) {
+            $dup->request = new RequestInputParameters($request);
+        }
+        if (null !== $attributes) {
+            $dup->attributes = new RequestParameters($attributes);
+        }
+        if (null !== $cookies) {
+            $dup->cookies = new RequestInputParameters($cookies);
+        }
+        if (null !== $files) {
+            $dup->files = new RequestFileCollection($files);
+        }
+        if (null !== $server) {
+            $dup->server = new RequestServerParameters($server);
+            $dup->headers = new RequestHeaderParameters($dup->server->getHeaders());
+        }
+        $dup->languages = null;
+        $dup->charsets = null;
+        $dup->encodings = null;
+        $dup->acceptableContentTypes = null;
+        $dup->pathInfo = null;
+        $dup->requestUri = null;
+        $dup->baseUrl = null;
+        $dup->basePath = null;
+        $dup->method = null;
+        $dup->format = null;
+
+        if (!$dup->get('_format') && $this->get('_format')) {
+            $dup->attributes->set('_format', $this->get('_format'));
+        }
+
+        if (!$dup->getRequestFormat(null)) {
+            $dup->setRequestFormat($this->getRequestFormat(null));
+        }
+
+        return $dup;
+    }
+
+    /**
+     * Clones the current request.
+     *
+     * Note that the session is not cloned as duplicated requests
+     * are most of the time sub-requests of the main one.
+     */
+    public function __clone()
+    {
+        $this->query = clone $this->query;
+        $this->request = clone $this->request;
+        $this->attributes = clone $this->attributes;
+        $this->cookies = clone $this->cookies;
+        $this->files = clone $this->files;
+        $this->server = clone $this->server;
+        $this->headers = clone $this->headers;
+    }
+
+    public function __toString(): string
+    {
+        $content = $this->getContent();
+
+        $cookieHeader = '';
+        $cookies = [];
+
+        foreach ($this->cookies as $k => $v) {
+            $cookies[] = \is_array($v) ? http_build_query([$k => $v], '', '; ', \PHP_QUERY_RFC3986) : "$k=$v";
+        }
+
+        if ($cookies) {
+            $cookieHeader = 'Cookie: '.implode('; ', $cookies)."\r\n";
+        }
+
+        return
+            \sprintf('%s %s %s', $this->getMethod(), $this->getRequestUri(), $this->server->get('SERVER_PROTOCOL'))."\r\n".
+            $this->headers.
+            $cookieHeader."\r\n".
+            $content;
+    }
+
+    /**
+     * Overrides the PHP global variables according to this request instance.
+     *
+     * It overrides $_GET, $_POST, $_REQUEST, $_SERVER, $_COOKIE.
+     * $_FILES is never overridden, see rfc1867
+     */
+    public function overrideGlobals(): void
+    {
+        $this->server->set('QUERY_STRING', static::normalizeQueryString(http_build_query($this->query->all(), '', '&')));
+
+        $_GET = $this->query->all();
+        $_POST = $this->request->all();
+        $_SERVER = $this->server->all();
+        $_COOKIE = $this->cookies->all();
+
+        foreach ($this->headers->all() as $key => $value) {
+            $key = strtoupper(str_replace('-', '_', $key));
+            if (\in_array($key, ['CONTENT_TYPE', 'CONTENT_LENGTH', 'CONTENT_MD5'], true)) {
+                $_SERVER[$key] = implode(', ', $value);
+            } else {
+                $_SERVER['HTTP_'.$key] = implode(', ', $value);
+            }
+        }
+
+        $request = ['g' => $_GET, 'p' => $_POST, 'c' => $_COOKIE];
+
+        $requestOrder = \ini_get('request_order') ?: \ini_get('variables_order');
+        $requestOrder = preg_replace('#[^cgp]#', '', strtolower($requestOrder)) ?: 'gp';
+
+        $_REQUEST = [[]];
+
+        foreach (str_split($requestOrder) as $order) {
+            $_REQUEST[] = $request[$order];
+        }
+
+        $_REQUEST = array_merge(...$_REQUEST);
+    }
+
+    /**
+     * Sets a list of trusted proxies.
+     *
+     * You should only list the reverse proxies that you manage directly.
+     *
+     * @param array                          $proxies          A list of trusted proxies, the string 'REMOTE_ADDR' will be replaced with $_SERVER['REMOTE_ADDR'] and 'PRIVATE_SUBNETS' by IpUtils::PRIVATE_SUBNETS
+     * @param int-mask-of<Request::HEADER_*> $trustedHeaderSet A bit field to set which headers to trust from your proxies
+     */
+    public static function setTrustedProxies(array $proxies, int $trustedHeaderSet): void
+    {
+        if (false !== $i = array_search('REMOTE_ADDR', $proxies, true)) {
+            if (isset($_SERVER['REMOTE_ADDR'])) {
+                $proxies[$i] = $_SERVER['REMOTE_ADDR'];
+            } else {
+                unset($proxies[$i]);
+                $proxies = array_values($proxies);
+            }
+        }
+
+        if (false !== ($i = array_search('PRIVATE_SUBNETS', $proxies, true)) || false !== ($i = array_search('private_ranges', $proxies, true))) {
+            unset($proxies[$i]);
+            $proxies = array_merge($proxies, IpUtils::PRIVATE_SUBNETS);
+        }
+
+        self::$trustedProxies = $proxies;
+        self::$trustedHeaderSet = $trustedHeaderSet;
+    }
+
+    /**
+     * Gets the list of trusted proxies.
+     *
+     * @return string[]
+     */
+    public static function getTrustedProxies(): array
+    {
+        return self::$trustedProxies;
+    }
+
+    /**
+     * Gets the set of trusted headers from trusted proxies.
+     *
+     * @return int A bit field of Request::HEADER_* that defines which headers are trusted from your proxies
+     */
+    public static function getTrustedHeaderSet(): int
+    {
+        return self::$trustedHeaderSet;
+    }
+
+    /**
+     * Sets a list of trusted host patterns.
+     *
+     * You should only list the hosts you manage using regexs.
+     *
+     * @param array $hostPatterns A list of trusted host patterns
+     */
+    public static function setTrustedHosts(array $hostPatterns): void
+    {
+        self::$trustedHostPatterns = array_map(fn ($hostPattern) => \sprintf('{%s}i', $hostPattern), $hostPatterns);
+        // we need to reset trusted hosts on trusted host patterns change
+        self::$trustedHosts = [];
+    }
+
+    /**
+     * Gets the list of trusted host patterns.
+     *
+     * @return string[]
+     */
+    public static function getTrustedHosts(): array
+    {
+        return self::$trustedHostPatterns;
+    }
+
+    /**
+     * Normalizes a query string.
+     *
+     * It builds a normalized query string, where keys/value pairs are alphabetized,
+     * have consistent escaping and unneeded delimiters are removed.
+     */
+    public static function normalizeQueryString(?string $qs): string
+    {
+        if ('' === ($qs ?? '')) {
+            return '';
+        }
+
+        $qs = HeaderUtils::parseQuery($qs);
+        ksort($qs);
+
+        return http_build_query($qs, '', '&', \PHP_QUERY_RFC3986);
+    }
+
+    /**
+     * Enables support for the _method request parameter to determine the intended HTTP method.
+     *
+     * Be warned that enabling this feature might lead to CSRF issues in your code.
+     * Check that you are using CSRF tokens when required.
+     * If the HTTP method parameter override is enabled, an html-form with method "POST" can be altered
+     * and used to send a "PUT" or "DELETE" request via the _method request parameter.
+     * If these methods are not protected against CSRF, this presents a possible vulnerability.
+     *
+     * The HTTP method can only be overridden when the real HTTP method is POST.
+     */
+    public static function enableHttpMethodParameterOverride(): void
+    {
+        self::$httpMethodParameterOverride = true;
+    }
+
+    /**
+     * Checks whether support for the _method request parameter is enabled.
+     */
+    public static function getHttpMethodParameterOverride(): bool
+    {
+        return self::$httpMethodParameterOverride;
+    }
+
+    /**
+     * Gets a "parameter" value from any bag.
+     *
+     * This method is mainly useful for libraries that want to provide some flexibility. If you don't need the
+     * flexibility in controllers, it is better to explicitly get request parameters from the appropriate
+     * public property instead (attributes, query, request).
+     *
+     * Order of precedence: PATH (routing placeholders or custom attributes), GET, POST
+     *
+     * @internal use explicit input sources instead
+     */
+    public function get(string $key, mixed $default = null): mixed
+    {
+        if ($this !== $result = $this->attributes->get($key, $this)) {
+            return $result;
+        }
+
+        if ($this->query->has($key)) {
+            return $this->query->all()[$key];
+        }
+
+        if ($this->request->has($key)) {
+            return $this->request->all()[$key];
+        }
+
+        return $default;
+    }
+
+    /**
+     * Gets the Session.
+     *
+     * @throws SessionNotFoundException When session is not set properly
+     */
+    public function getSession(): SessionInterface
+    {
+        $session = $this->session;
+        if (!$session instanceof SessionInterface && null !== $session) {
+            $this->setSession($session = $session());
+        }
+
+        if (null === $session) {
+            throw new SessionNotFoundException('Session has not been set.');
+        }
+
+        return $session;
+    }
+
+    /**
+     * Whether the request contains a Session which was started in one of the
+     * previous requests.
+     */
+    public function hasPreviousSession(): bool
+    {
+        // the check for $this->session avoids malicious users trying to fake a session cookie with proper name
+        return $this->hasSession() && $this->cookies->has($this->getSession()->getName());
+    }
+
+    /**
+     * Whether the request contains a Session object.
+     *
+     * This method does not give any information about the state of the session object,
+     * like whether the session is started or not. It is just a way to check if this Request
+     * is associated with a Session instance.
+     *
+     * @param bool $skipIfUninitialized When true, ignores factories injected by `setSessionFactory`
+     */
+    public function hasSession(bool $skipIfUninitialized = false): bool
+    {
+        return null !== $this->session && (!$skipIfUninitialized || $this->session instanceof SessionInterface);
+    }
+
+    public function setSession(SessionInterface $session): void
+    {
+        $this->session = $session;
+    }
+
+    /**
+     * @internal
+     *
+     * @param callable(): SessionInterface $factory
+     */
+    public function setSessionFactory(callable $factory): void
+    {
+        $this->session = $factory(...);
+    }
+
+    /**
+     * Returns the client IP addresses.
+     *
+     * In the returned array the most trusted IP address is first, and the
+     * least trusted one last. The "real" client IP address is the last one,
+     * but this is also the least trusted one. Trusted proxies are stripped.
+     *
+     * Use this method carefully; you should use getClientIp() instead.
+     *
+     * @see getClientIp()
+     */
+    public function getClientIps(): array
+    {
+        $ip = $this->server->get('REMOTE_ADDR');
+
+        if (!$this->isFromTrustedProxy()) {
+            return [$ip];
+        }
+
+        return $this->getTrustedValues(self::HEADER_X_FORWARDED_FOR, $ip) ?: [$ip];
+    }
+
+    /**
+     * Returns the client IP address.
+     *
+     * This method can read the client IP address from the "X-Forwarded-For" header
+     * when trusted proxies were set via "setTrustedProxies()". The "X-Forwarded-For"
+     * header value is a comma+space separated list of IP addresses, the left-most
+     * being the original client, and each successive proxy that passed the request
+     * adding the IP address where it received the request from.
+     *
+     * If your reverse proxy uses a different header name than "X-Forwarded-For",
+     * ("Client-Ip" for instance), configure it via the $trustedHeaderSet
+     * argument of the Request::setTrustedProxies() method instead.
+     *
+     * @see getClientIps()
+     * @see https://wikipedia.org/wiki/X-Forwarded-For
+     */
+    public function getClientIp(): ?string
+    {
+        return $this->getClientIps()[0];
+    }
+
+    /**
+     * Returns current script name.
+     */
+    public function getScriptName(): string
+    {
+        return $this->server->get('SCRIPT_NAME', $this->server->get('ORIG_SCRIPT_NAME', ''));
+    }
+
+    /**
+     * Returns the path being requested relative to the executed script.
+     *
+     * The path info always starts with a /.
+     *
+     * Suppose this request is instantiated from /mysite on localhost:
+     *
+     *  * http://localhost/mysite              returns an empty string
+     *  * http://localhost/mysite/about        returns '/about'
+     *  * http://localhost/mysite/enco%20ded   returns '/enco%20ded'
+     *  * http://localhost/mysite/about?var=1  returns '/about'
+     *
+     * @return string The raw path (i.e. not urldecoded)
+     */
+    public function getPathInfo(): string
+    {
+        return $this->pathInfo ??= $this->preparePathInfo();
+    }
+
+    /**
+     * Returns the root path from which this request is executed.
+     *
+     * Suppose that an index.php file instantiates this request object:
+     *
+     *  * http://localhost/index.php         returns an empty string
+     *  * http://localhost/index.php/page    returns an empty string
+     *  * http://localhost/web/index.php     returns '/web'
+     *  * http://localhost/we%20b/index.php  returns '/we%20b'
+     *
+     * @return string The raw path (i.e. not urldecoded)
+     */
+    public function getBasePath(): string
+    {
+        return $this->basePath ??= $this->prepareBasePath();
+    }
+
+    /**
+     * Returns the root URL from which this request is executed.
+     *
+     * The base URL never ends with a /.
+     *
+     * This is similar to getBasePath(), except that it also includes the
+     * script filename (e.g. index.php) if one exists.
+     *
+     * @return string The raw URL (i.e. not urldecoded)
+     */
+    public function getBaseUrl(): string
+    {
+        $trustedPrefix = '';
+
+        // the proxy prefix must be prepended to any prefix being needed at the webserver level
+        if ($this->isFromTrustedProxy() && $trustedPrefixValues = $this->getTrustedValues(self::HEADER_X_FORWARDED_PREFIX)) {
+            $trustedPrefix = rtrim($trustedPrefixValues[0], '/');
+        }
+
+        return $trustedPrefix.$this->getBaseUrlReal();
+    }
+
+    /**
+     * Returns the real base URL received by the webserver from which this request is executed.
+     * The URL does not include trusted reverse proxy prefix.
+     *
+     * @return string The raw URL (i.e. not urldecoded)
+     */
+    private function getBaseUrlReal(): string
+    {
+        return $this->baseUrl ??= $this->prepareBaseUrl();
+    }
+
+    /**
+     * Gets the request's scheme.
+     */
+    public function getScheme(): string
+    {
+        return $this->isSecure() ? 'https' : 'http';
+    }
+
+    /**
+     * Returns the port on which the request is made.
+     *
+     * This method can read the client port from the "X-Forwarded-Port" header
+     * when trusted proxies were set via "setTrustedProxies()".
+     *
+     * The "X-Forwarded-Port" header must contain the client port.
+     *
+     * @return int|string|null Can be a string if fetched from the server bag
+     */
+    public function getPort(): int|string|null
+    {
+        if ($this->isFromTrustedProxy() && $host = $this->getTrustedValues(self::HEADER_X_FORWARDED_PORT)) {
+            $host = $host[0];
+        } elseif ($this->isFromTrustedProxy() && $host = $this->getTrustedValues(self::HEADER_X_FORWARDED_HOST)) {
+            $host = $host[0];
+        } elseif (!$host = $this->headers->get('HOST')) {
+            return $this->server->get('SERVER_PORT');
+        }
+
+        if ('[' === $host[0]) {
+            $pos = strpos($host, ':', strrpos($host, ']'));
+        } else {
+            $pos = strrpos($host, ':');
+        }
+
+        if (false !== $pos && $port = substr($host, $pos + 1)) {
+            return (int) $port;
+        }
+
+        return 'https' === $this->getScheme() ? 443 : 80;
+    }
+
+    /**
+     * Returns the user.
+     */
+    public function getUser(): ?string
+    {
+        return $this->headers->get('PHP_AUTH_USER');
+    }
+
+    /**
+     * Returns the password.
+     */
+    public function getPassword(): ?string
+    {
+        return $this->headers->get('PHP_AUTH_PW');
+    }
+
+    /**
+     * Gets the user info.
+     *
+     * @return string|null A user name if any and, optionally, scheme-specific information about how to gain authorization to access the server
+     */
+    public function getUserInfo(): ?string
+    {
+        $userinfo = $this->getUser();
+
+        $pass = $this->getPassword();
+        if ('' != $pass) {
+            $userinfo .= ":$pass";
+        }
+
+        return $userinfo;
+    }
+
+    /**
+     * Returns the HTTP host being requested.
+     *
+     * The port name will be appended to the host if it's non-standard.
+     */
+    public function getHttpHost(): string
+    {
+        $scheme = $this->getScheme();
+        $port = $this->getPort();
+
+        if (('http' === $scheme && 80 == $port) || ('https' === $scheme && 443 == $port)) {
+            return $this->getHost();
+        }
+
+        return $this->getHost().':'.$port;
+    }
+
+    /**
+     * Returns the requested URI (path and query string).
+     *
+     * @return string The raw URI (i.e. not URI decoded)
+     */
+    public function getRequestUri(): string
+    {
+        return $this->requestUri ??= $this->prepareRequestUri();
+    }
+
+    /**
+     * Gets the scheme and HTTP host.
+     *
+     * If the URL was called with basic authentication, the user
+     * and the password are not added to the generated string.
+     */
+    public function getSchemeAndHttpHost(): string
+    {
+        return $this->getScheme().'://'.$this->getHttpHost();
+    }
+
+    /**
+     * Generates a normalized URI (URL) for the Request.
+     *
+     * @see getQueryString()
+     */
+    public function getUri(): string
+    {
+        if (null !== $qs = $this->getQueryString()) {
+            $qs = '?'.$qs;
+        }
+
+        return $this->getSchemeAndHttpHost().$this->getBaseUrl().$this->getPathInfo().$qs;
+    }
+
+    /**
+     * Generates a normalized URI for the given path.
+     *
+     * @param string $path A path to use instead of the current one
+     */
+    public function getUriForPath(string $path): string
+    {
+        return $this->getSchemeAndHttpHost().$this->getBaseUrl().$path;
+    }
+
+    /**
+     * Returns the path as relative reference from the current Request path.
+     *
+     * Only the URIs path component (no schema, host etc.) is relevant and must be given.
+     * Both paths must be absolute and not contain relative parts.
+     * Relative URLs from one resource to another are useful when generating self-contained downloadable document archives.
+     * Furthermore, they can be used to reduce the link size in documents.
+     *
+     * Example target paths, given a base path of "/a/b/c/d":
+     * - "/a/b/c/d"     -> ""
+     * - "/a/b/c/"      -> "./"
+     * - "/a/b/"        -> "../"
+     * - "/a/b/c/other" -> "other"
+     * - "/a/x/y"       -> "../../x/y"
+     */
+    public function getRelativeUriForPath(string $path): string
+    {
+        // be sure that we are dealing with an absolute path
+        if (!isset($path[0]) || '/' !== $path[0]) {
+            return $path;
+        }
+
+        if ($path === $basePath = $this->getPathInfo()) {
+            return '';
+        }
+
+        $sourceDirs = explode('/', isset($basePath[0]) && '/' === $basePath[0] ? substr($basePath, 1) : $basePath);
+        $targetDirs = explode('/', substr($path, 1));
+        array_pop($sourceDirs);
+        $targetFile = array_pop($targetDirs);
+
+        foreach ($sourceDirs as $i => $dir) {
+            if (isset($targetDirs[$i]) && $dir === $targetDirs[$i]) {
+                unset($sourceDirs[$i], $targetDirs[$i]);
+            } else {
+                break;
+            }
+        }
+
+        $targetDirs[] = $targetFile;
+        $path = str_repeat('../', \count($sourceDirs)).implode('/', $targetDirs);
+
+        // A reference to the same base directory or an empty subdirectory must be prefixed with "./".
+        // This also applies to a segment with a colon character (e.g., "file:colon") that cannot be used
+        // as the first segment of a relative-path reference, as it would be mistaken for a scheme name
+        // (see https://tools.ietf.org/html/rfc3986#section-4.2).
+        return !isset($path[0]) || '/' === $path[0]
+            || false !== ($colonPos = strpos($path, ':')) && ($colonPos < ($slashPos = strpos($path, '/')) || false === $slashPos)
+            ? "./$path" : $path;
+    }
+
+    /**
+     * Generates the normalized query string for the Request.
+     *
+     * It builds a normalized query string, where keys/value pairs are alphabetized
+     * and have consistent escaping.
+     */
+    public function getQueryString(): ?string
+    {
+        $qs = static::normalizeQueryString($this->server->get('QUERY_STRING'));
+
+        return '' === $qs ? null : $qs;
+    }
+
+    /**
+     * Checks whether the request is secure or not.
+     *
+     * This method can read the client protocol from the "X-Forwarded-Proto" header
+     * when trusted proxies were set via "setTrustedProxies()".
+     *
+     * The "X-Forwarded-Proto" header must contain the protocol: "https" or "http".
+     */
+    public function isSecure(): bool
+    {
+        if ($this->isFromTrustedProxy() && $proto = $this->getTrustedValues(self::HEADER_X_FORWARDED_PROTO)) {
+            return \in_array(strtolower($proto[0]), ['https', 'on', 'ssl', '1'], true);
+        }
+
+        $https = $this->server->get('HTTPS');
+
+        return $https && 'off' !== strtolower($https);
+    }
+
+    /**
+     * Returns the host name.
+     *
+     * This method can read the client host name from the "X-Forwarded-Host" header
+     * when trusted proxies were set via "setTrustedProxies()".
+     *
+     * The "X-Forwarded-Host" header must contain the client host name.
+     *
+     * @throws SuspiciousOperationException when the host name is invalid or not trusted
+     */
+    public function getHost(): string
+    {
+        if ($this->isFromTrustedProxy() && $host = $this->getTrustedValues(self::HEADER_X_FORWARDED_HOST)) {
+            $host = $host[0];
+        } elseif (!$host = $this->headers->get('HOST')) {
+            if (!$host = $this->server->get('SERVER_NAME')) {
+                $host = $this->server->get('SERVER_ADDR', '');
+            }
+        }
+
+        // trim and remove port number from host
+        // host is lowercase as per RFC 952/2181
+        $host = strtolower(preg_replace('/:\d+$/', '', trim($host)));
+
+        // as the host can come from the user (HTTP_HOST and depending on the configuration, SERVER_NAME too can come from the user)
+        // check that it does not contain forbidden characters (see RFC 952 and RFC 2181)
+        // use preg_replace() instead of preg_match() to prevent DoS attacks with long host names
+        if ($host && '' !== preg_replace('/(?:^\[)?[a-zA-Z0-9-:\]_]+\.?/', '', $host)) {
+            if (!$this->isHostValid) {
+                return '';
+            }
+            $this->isHostValid = false;
+
+            throw new SuspiciousOperationException(\sprintf('Invalid Host "%s".', $host));
+        }
+
+        if (\count(self::$trustedHostPatterns) > 0) {
+            // to avoid host header injection attacks, you should provide a list of trusted host patterns
+
+            if (\in_array($host, self::$trustedHosts, true)) {
+                return $host;
+            }
+
+            foreach (self::$trustedHostPatterns as $pattern) {
+                if (preg_match($pattern, $host)) {
+                    self::$trustedHosts[] = $host;
+
+                    return $host;
+                }
+            }
+
+            if (!$this->isHostValid) {
+                return '';
+            }
+            $this->isHostValid = false;
+
+            throw new SuspiciousOperationException(\sprintf('Untrusted Host "%s".', $host));
+        }
+
+        return $host;
+    }
+
+    /**
+     * Sets the request method.
+     */
+    public function setMethod(string $method): void
+    {
+        $this->method = null;
+        $this->server->set('REQUEST_METHOD', $method);
+    }
+
+    /**
+     * Gets the request "intended" method.
+     *
+     * If the X-HTTP-Method-Override header is set, and if the method is a POST,
+     * then it is used to determine the "real" intended HTTP method.
+     *
+     * The _method request parameter can also be used to determine the HTTP method,
+     * but only if enableHttpMethodParameterOverride() has been called.
+     *
+     * The method is always an uppercased string.
+     *
+     * @see getRealMethod()
+     */
+    public function getMethod(): string
+    {
+        if (null !== $this->method) {
+            return $this->method;
+        }
+
+        $this->method = strtoupper($this->server->get('REQUEST_METHOD', 'GET'));
+
+        if ('POST' !== $this->method) {
+            return $this->method;
+        }
+
+        $method = $this->headers->get('X-HTTP-METHOD-OVERRIDE');
+
+        if (!$method && self::$httpMethodParameterOverride) {
+            $method = $this->request->get('_method', $this->query->get('_method', 'POST'));
+        }
+
+        if (!\is_string($method)) {
+            return $this->method;
+        }
+
+        $method = strtoupper($method);
+
+        if (\in_array($method, ['GET', 'HEAD', 'POST', 'PUT', 'DELETE', 'CONNECT', 'OPTIONS', 'PATCH', 'PURGE', 'TRACE'], true)) {
+            return $this->method = $method;
+        }
+
+        if (!preg_match('/^[A-Z]++$/D', $method)) {
+            throw new SuspiciousOperationException('Invalid HTTP method override.');
+        }
+
+        return $this->method = $method;
+    }
+
+    /**
+     * Gets the "real" request method.
+     *
+     * @see getMethod()
+     */
+    public function getRealMethod(): string
+    {
+        return strtoupper($this->server->get('REQUEST_METHOD', 'GET'));
+    }
+
+    /**
+     * Gets the mime type associated with the format.
+     */
+    public function getMimeType(string $format): ?string
+    {
+        if (null === static::$formats) {
+            static::initializeFormats();
+        }
+
+        return isset(static::$formats[$format]) ? static::$formats[$format][0] : null;
+    }
+
+    /**
+     * Gets the mime types associated with the format.
+     *
+     * @return string[]
+     */
+    public static function getMimeTypes(string $format): array
+    {
+        if (null === static::$formats) {
+            static::initializeFormats();
+        }
+
+        return static::$formats[$format] ?? [];
+    }
+
+    /**
+     * Gets the format associated with the mime type.
+     */
+    public function getFormat(?string $mimeType): ?string
+    {
+        $canonicalMimeType = null;
+        if ($mimeType && false !== $pos = strpos($mimeType, ';')) {
+            $canonicalMimeType = trim(substr($mimeType, 0, $pos));
+        }
+
+        if (null === static::$formats) {
+            static::initializeFormats();
+        }
+
+        foreach (static::$formats as $format => $mimeTypes) {
+            if (\in_array($mimeType, (array) $mimeTypes, true)) {
+                return $format;
+            }
+            if (null !== $canonicalMimeType && \in_array($canonicalMimeType, (array) $mimeTypes, true)) {
+                return $format;
+            }
+        }
+
+        return null;
+    }
+
+    /**
+     * Associates a format with mime types.
+     *
+     * @param string|string[] $mimeTypes The associated mime types (the preferred one must be the first as it will be used as the content type)
+     */
+    public function setFormat(?string $format, string|array $mimeTypes): void
+    {
+        if (null === static::$formats) {
+            static::initializeFormats();
+        }
+
+        static::$formats[$format] = \is_array($mimeTypes) ? $mimeTypes : [$mimeTypes];
+    }
+
+    /**
+     * Gets the request format.
+     *
+     * Here is the process to determine the format:
+     *
+     *  * format defined by the user (with setRequestFormat())
+     *  * _format request attribute
+     *  * $default
+     *
+     * @see getPreferredFormat
+     */
+    public function getRequestFormat(?string $default = 'html'): ?string
+    {
+        $this->format ??= $this->attributes->get('_format');
+
+        return $this->format ?? $default;
+    }
+
+    /**
+     * Sets the request format.
+     */
+    public function setRequestFormat(?string $format): void
+    {
+        $this->format = $format;
+    }
+
+    /**
+     * Gets the usual name of the format associated with the request's media type (provided in the Content-Type header).
+     *
+     * @see Request::$formats
+     */
+    public function getContentTypeFormat(): ?string
+    {
+        return $this->getFormat($this->headers->get('CONTENT_TYPE', ''));
+    }
+
+    /**
+     * Sets the default locale.
+     */
+    public function setDefaultLocale(string $locale): void
+    {
+        $this->defaultLocale = $locale;
+
+        if (null === $this->locale) {
+            $this->setPhpDefaultLocale($locale);
+        }
+    }
+
+    /**
+     * Get the default locale.
+     */
+    public function getDefaultLocale(): string
+    {
+        return $this->defaultLocale;
+    }
+
+    /**
+     * Sets the locale.
+     */
+    public function setLocale(string $locale): void
+    {
+        $this->setPhpDefaultLocale($this->locale = $locale);
+    }
+
+    /**
+     * Get the locale.
+     */
+    public function getLocale(): string
+    {
+        return $this->locale ?? $this->defaultLocale;
+    }
+
+    /**
+     * Checks if the request method is of specified type.
+     *
+     * @param string $method Uppercase request method (GET, POST etc)
+     */
+    public function isMethod(string $method): bool
+    {
+        return $this->getMethod() === strtoupper($method);
+    }
+
+    /**
+     * Checks whether or not the method is safe.
+     *
+     * @see https://tools.ietf.org/html/rfc7231#section-4.2.1
+     */
+    public function isMethodSafe(): bool
+    {
+        return \in_array($this->getMethod(), ['GET', 'HEAD', 'OPTIONS', 'TRACE']);
+    }
+
+    /**
+     * Checks whether or not the method is idempotent.
+     */
+    public function isMethodIdempotent(): bool
+    {
+        return \in_array($this->getMethod(), ['HEAD', 'GET', 'PUT', 'DELETE', 'TRACE', 'OPTIONS', 'PURGE']);
+    }
+
+    /**
+     * Checks whether the method is cacheable or not.
+     *
+     * @see https://tools.ietf.org/html/rfc7231#section-4.2.3
+     */
+    public function isMethodCacheable(): bool
+    {
+        return \in_array($this->getMethod(), ['GET', 'HEAD']);
+    }
+
+    /**
+     * Returns the protocol version.
+     *
+     * If the application is behind a proxy, the protocol version used in the
+     * requests between the client and the proxy and between the proxy and the
+     * server might be different. This returns the former (from the "Via" header)
+     * if the proxy is trusted (see "setTrustedProxies()"), otherwise it returns
+     * the latter (from the "SERVER_PROTOCOL" server parameter).
+     */
+    public function getProtocolVersion(): ?string
+    {
+        if ($this->isFromTrustedProxy()) {
+            preg_match('~^(HTTP/)?([1-9]\.[0-9])\b~', $this->headers->get('Via') ?? '', $matches);
+
+            if ($matches) {
+                return 'HTTP/'.$matches[2];
+            }
+        }
+
+        return $this->server->get('SERVER_PROTOCOL');
+    }
+
+    /**
+     * Returns the request body content.
+     *
+     * @param bool $asResource If true, a resource will be returned
+     *
+     * @return string|resource
+     *
+     * @psalm-return ($asResource is true ? resource : string)
+     */
+    public function getContent(bool $asResource = false)
+    {
+        $currentContentIsResource = \is_resource($this->content);
+
+        if (true === $asResource) {
+            if ($currentContentIsResource) {
+                rewind($this->content);
+
+                return $this->content;
+            }
+
+            // Content passed in parameter (test)
+            if (\is_string($this->content)) {
+                $resource = fopen('php://temp', 'r+');
+                fwrite($resource, $this->content);
+                rewind($resource);
+
+                return $resource;
+            }
+
+            $this->content = false;
+
+            return fopen('php://input', 'r');
+        }
+
+        if ($currentContentIsResource) {
+            rewind($this->content);
+
+            return stream_get_contents($this->content);
+        }
+
+        if (null === $this->content || false === $this->content) {
+            $this->content = file_get_contents('php://input');
+        }
+
+        return $this->content;
+    }
+
+    /**
+     * Gets the decoded form or json request body.
+     *
+     * @throws JsonException When the body cannot be decoded to an array
+     */
+    public function getPayload(): RequestInputParameters
+    {
+        if ($this->request->count()) {
+            return clone $this->request;
+        }
+
+        if ('' === $content = $this->getContent()) {
+            return new RequestInputParameters([]);
+        }
+
+        try {
+            $content = json_decode($content, true, 512, \JSON_BIGINT_AS_STRING | \JSON_THROW_ON_ERROR);
+        } catch (\JsonException $e) {
+            throw new JsonException('Could not decode request body.', $e->getCode(), $e);
+        }
+
+        if (!\is_array($content)) {
+            throw new JsonException(\sprintf('JSON content was expected to decode to an array, "%s" returned.', get_debug_type($content)));
+        }
+
+        return new RequestInputParameters($content);
+    }
+
+    /**
+     * Gets the request body decoded as array, typically from a JSON payload.
+     *
+     * @see getPayload() for portability between content types
+     *
+     * @throws JsonException When the body cannot be decoded to an array
+     */
+    public function toArray(): array
+    {
+        if ('' === $content = $this->getContent()) {
+            throw new JsonException('Request body is empty.');
+        }
+
+        try {
+            $content = json_decode($content, true, 512, \JSON_BIGINT_AS_STRING | \JSON_THROW_ON_ERROR);
+        } catch (\JsonException $e) {
+            throw new JsonException('Could not decode request body.', $e->getCode(), $e);
+        }
+
+        if (!\is_array($content)) {
+            throw new JsonException(\sprintf('JSON content was expected to decode to an array, "%s" returned.', get_debug_type($content)));
+        }
+
+        return $content;
+    }
+
+    /**
+     * Gets the Etags.
+     */
+    public function getETags(): array
+    {
+        return preg_split('/\s*,\s*/', $this->headers->get('If-None-Match', ''), -1, \PREG_SPLIT_NO_EMPTY);
+    }
+
+    public function isNoCache(): bool
+    {
+        return $this->headers->hasCacheControlDirective('no-cache') || 'no-cache' == $this->headers->get('Pragma');
+    }
+
+    /**
+     * Gets the preferred format for the response by inspecting, in the following order:
+     *   * the request format set using setRequestFormat;
+     *   * the values of the Accept HTTP header.
+     *
+     * Note that if you use this method, you should send the "Vary: Accept" header
+     * in the response to prevent any issues with intermediary HTTP caches.
+     */
+    public function getPreferredFormat(?string $default = 'html'): ?string
+    {
+        if (!isset($this->preferredFormat) && null !== $preferredFormat = $this->getRequestFormat(null)) {
+            $this->preferredFormat = $preferredFormat;
+        }
+
+        if ($this->preferredFormat ?? null) {
+            return $this->preferredFormat;
+        }
+
+        foreach ($this->getAcceptableContentTypes() as $mimeType) {
+            if ($this->preferredFormat = $this->getFormat($mimeType)) {
+                return $this->preferredFormat;
+            }
+        }
+
+        return $default;
+    }
+
+    /**
+     * Returns the preferred language.
+     *
+     * @param string[] $locales An array of ordered available locales
+     */
+    public function getPreferredLanguage(?array $locales = null): ?string
+    {
+        $preferredLanguages = $this->getLanguages();
+
+        if (!$locales) {
+            return $preferredLanguages[0] ?? null;
+        }
+
+        $locales = array_map($this->formatLocale(...), $locales);
+        if (!$preferredLanguages) {
+            return $locales[0];
+        }
+
+        $combinations = array_merge(...array_map($this->getLanguageCombinations(...), $preferredLanguages));
+        foreach ($combinations as $combination) {
+            foreach ($locales as $locale) {
+                if (str_starts_with($locale, $combination)) {
+                    return $locale;
+                }
+            }
+        }
+
+        return $locales[0];
+    }
+
+    /**
+     * Gets a list of languages acceptable by the client browser ordered in the user browser preferences.
+     *
+     * @return string[]
+     */
+    public function getLanguages(): array
+    {
+        if (null !== $this->languages) {
+            return $this->languages;
+        }
+
+        $languages = RequestHeaderAccept::fromString($this->headers->get('Accept-Language'))->all();
+        $this->languages = [];
+        foreach ($languages as $item) {
+            $lang = $item->getValue();
+            $this->languages[] = self::formatLocale($lang);
+        }
+        $this->languages = array_unique($this->languages);
+
+        return $this->languages;
+    }
+
+    /**
+     * Strips the locale to only keep the canonicalized language value.
+     *
+     * Depending on the $locale value, this method can return values like :
+     * - language_Script_REGION: "fr_Latn_FR", "zh_Hans_TW"
+     * - language_Script: "fr_Latn", "zh_Hans"
+     * - language_REGION: "fr_FR", "zh_TW"
+     * - language: "fr", "zh"
+     *
+     * Invalid locale values are returned as is.
+     *
+     * @see https://wikipedia.org/wiki/IETF_language_tag
+     * @see https://datatracker.ietf.org/doc/html/rfc5646
+     */
+    private static function formatLocale(string $locale): string
+    {
+        [$language, $script, $region] = self::getLanguageComponents($locale);
+
+        return implode('_', array_filter([$language, $script, $region]));
+    }
+
+    /**
+     * Returns an array of all possible combinations of the language components.
+     *
+     * For instance, if the locale is "fr_Latn_FR", this method will return:
+     * - "fr_Latn_FR"
+     * - "fr_Latn"
+     * - "fr_FR"
+     * - "fr"
+     *
+     * @return string[]
+     */
+    private static function getLanguageCombinations(string $locale): array
+    {
+        [$language, $script, $region] = self::getLanguageComponents($locale);
+
+        return array_unique([
+            implode('_', array_filter([$language, $script, $region])),
+            implode('_', array_filter([$language, $script])),
+            implode('_', array_filter([$language, $region])),
+            $language,
+        ]);
+    }
+
+    /**
+     * Returns an array with the language components of the locale.
+     *
+     * For example:
+     * - If the locale is "fr_Latn_FR", this method will return "fr", "Latn", "FR"
+     * - If the locale is "fr_FR", this method will return "fr", null, "FR"
+     * - If the locale is "zh_Hans", this method will return "zh", "Hans", null
+     *
+     * @see https://wikipedia.org/wiki/IETF_language_tag
+     * @see https://datatracker.ietf.org/doc/html/rfc5646
+     *
+     * @return array{string, string|null, string|null}
+     */
+    private static function getLanguageComponents(string $locale): array
+    {
+        $locale = str_replace('_', '-', strtolower($locale));
+        $pattern = '/^([a-zA-Z]{2,3}|i-[a-zA-Z]{5,})(?:-([a-zA-Z]{4}))?(?:-([a-zA-Z]{2}))?(?:-(.+))?$/';
+        if (!preg_match($pattern, $locale, $matches)) {
+            return [$locale, null, null];
+        }
+        if (str_starts_with($matches[1], 'i-')) {
+            // Language not listed in ISO 639 that are not variants
+            // of any listed language, which can be registered with the
+            // i-prefix, such as i-cherokee
+            $matches[1] = substr($matches[1], 2);
+        }
+
+        return [
+            $matches[1],
+            isset($matches[2]) ? ucfirst(strtolower($matches[2])) : null,
+            isset($matches[3]) ? strtoupper($matches[3]) : null,
+        ];
+    }
+
+    /**
+     * Gets a list of charsets acceptable by the client browser in preferable order.
+     *
+     * @return string[]
+     */
+    public function getCharsets(): array
+    {
+        return $this->charsets ??= array_map('strval', array_keys(RequestHeaderAccept::fromString($this->headers->get('Accept-Charset'))->all()));
+    }
+
+    /**
+     * Gets a list of encodings acceptable by the client browser in preferable order.
+     *
+     * @return string[]
+     */
+    public function getEncodings(): array
+    {
+        return $this->encodings ??= array_map('strval', array_keys(RequestHeaderAccept::fromString($this->headers->get('Accept-Encoding'))->all()));
+    }
+
+    /**
+     * Gets a list of content types acceptable by the client browser in preferable order.
+     *
+     * @return string[]
+     */
+    public function getAcceptableContentTypes(): array
+    {
+        return $this->acceptableContentTypes ??= array_map('strval', array_keys(RequestHeaderAccept::fromString($this->headers->get('Accept'))->all()));
+    }
+
+    /**
+     * Returns true if the request is an XMLHttpRequest.
+     *
+     * It works if your JavaScript library sets an X-Requested-With HTTP header.
+     * It is known to work with common JavaScript frameworks:
+     *
+     * @see https://wikipedia.org/wiki/List_of_Ajax_frameworks#JavaScript
+     */
+    public function isXmlHttpRequest(): bool
+    {
+        return 'XMLHttpRequest' == $this->headers->get('X-Requested-With');
+    }
+
+    /**
+     * Checks whether the client browser prefers safe content or not according to RFC8674.
+     *
+     * @see https://tools.ietf.org/html/rfc8674
+     */
+    public function preferSafeContent(): bool
+    {
+        if (isset($this->isSafeContentPreferred)) {
+            return $this->isSafeContentPreferred;
+        }
+
+        if (!$this->isSecure()) {
+            // see https://tools.ietf.org/html/rfc8674#section-3
+            return $this->isSafeContentPreferred = false;
+        }
+
+        return $this->isSafeContentPreferred = RequestHeaderAccept::fromString($this->headers->get('Prefer'))->has('safe');
+    }
+
+    /*
+     * The following methods are derived from code of the Zend Framework (1.10dev - 2010-01-24)
+     *
+     * Code subject to the new BSD license (https://framework.zend.com/license).
+     *
+     * Copyright (c) 2005-2010 Zend Technologies USA Inc. (https://www.zend.com/)
+     */
+
+    protected function prepareRequestUri(): string
+    {
+        $requestUri = '';
+
+        if ($this->isIisRewrite() && '' != $this->server->get('UNENCODED_URL')) {
+            // IIS7 with URL Rewrite: make sure we get the unencoded URL (double slash problem)
+            $requestUri = $this->server->get('UNENCODED_URL');
+            $this->server->remove('UNENCODED_URL');
+        } elseif ($this->server->has('REQUEST_URI')) {
+            $requestUri = $this->server->get('REQUEST_URI');
+
+            if ('' !== $requestUri && '/' === $requestUri[0]) {
+                // To only use path and query remove the fragment.
+                if (false !== $pos = strpos($requestUri, '#')) {
+                    $requestUri = substr($requestUri, 0, $pos);
+                }
+            } else {
+                // HTTP proxy reqs setup request URI with scheme and host [and port] + the URL path,
+                // only use URL path.
+                $uriComponents = parse_url($requestUri);
+
+                if (isset($uriComponents['path'])) {
+                    $requestUri = $uriComponents['path'];
+                }
+
+                if (isset($uriComponents['query'])) {
+                    $requestUri .= '?'.$uriComponents['query'];
+                }
+            }
+        } elseif ($this->server->has('ORIG_PATH_INFO')) {
+            // IIS 5.0, PHP as CGI
+            $requestUri = $this->server->get('ORIG_PATH_INFO');
+            if ('' != $this->server->get('QUERY_STRING')) {
+                $requestUri .= '?'.$this->server->get('QUERY_STRING');
+            }
+            $this->server->remove('ORIG_PATH_INFO');
+        }
+
+        // normalize the request URI to ease creating sub-requests from this request
+        $this->server->set('REQUEST_URI', $requestUri);
+
+        return $requestUri;
+    }
+
+    /**
+     * Prepares the base URL.
+     */
+    protected function prepareBaseUrl(): string
+    {
+        $filename = basename($this->server->get('SCRIPT_FILENAME', ''));
+
+        if (basename($this->server->get('SCRIPT_NAME', '')) === $filename) {
+            $baseUrl = $this->server->get('SCRIPT_NAME');
+        } elseif (basename($this->server->get('PHP_SELF', '')) === $filename) {
+            $baseUrl = $this->server->get('PHP_SELF');
+        } elseif (basename($this->server->get('ORIG_SCRIPT_NAME', '')) === $filename) {
+            $baseUrl = $this->server->get('ORIG_SCRIPT_NAME'); // 1and1 shared hosting compatibility
+        } else {
+            // Backtrack up the script_filename to find the portion matching
+            // php_self
+            $path = $this->server->get('PHP_SELF', '');
+            $file = $this->server->get('SCRIPT_FILENAME', '');
+            $segs = explode('/', trim($file, '/'));
+            $segs = array_reverse($segs);
+            $index = 0;
+            $last = \count($segs);
+            $baseUrl = '';
+            do {
+                $seg = $segs[$index];
+                $baseUrl = '/'.$seg.$baseUrl;
+                ++$index;
+            } while ($last > $index && (false !== $pos = strpos($path, $baseUrl)) && 0 != $pos);
+        }
+
+        // Does the baseUrl have anything in common with the request_uri?
+        $requestUri = $this->getRequestUri();
+        if ('' !== $requestUri && '/' !== $requestUri[0]) {
+            $requestUri = '/'.$requestUri;
+        }
+
+        if ($baseUrl && null !== $prefix = $this->getUrlencodedPrefix($requestUri, $baseUrl)) {
+            // full $baseUrl matches
+            return $prefix;
+        }
+
+        if ($baseUrl && null !== $prefix = $this->getUrlencodedPrefix($requestUri, rtrim(\dirname($baseUrl), '/'.\DIRECTORY_SEPARATOR).'/')) {
+            // directory portion of $baseUrl matches
+            return rtrim($prefix, '/'.\DIRECTORY_SEPARATOR);
+        }
+
+        $truncatedRequestUri = $requestUri;
+        if (false !== $pos = strpos($requestUri, '?')) {
+            $truncatedRequestUri = substr($requestUri, 0, $pos);
+        }
+
+        $basename = basename($baseUrl ?? '');
+        if (!$basename || !strpos(rawurldecode($truncatedRequestUri), $basename)) {
+            // no match whatsoever; set it blank
+            return '';
+        }
+
+        // If using mod_rewrite or ISAPI_Rewrite strip the script filename
+        // out of baseUrl. $pos !== 0 makes sure it is not matching a value
+        // from PATH_INFO or QUERY_STRING
+        if (\strlen($requestUri) >= \strlen($baseUrl) && (false !== $pos = strpos($requestUri, $baseUrl)) && 0 !== $pos) {
+            $baseUrl = substr($requestUri, 0, $pos + \strlen($baseUrl));
+        }
+
+        return rtrim($baseUrl, '/'.\DIRECTORY_SEPARATOR);
+    }
+
+    /**
+     * Prepares the base path.
+     */
+    protected function prepareBasePath(): string
+    {
+        $baseUrl = $this->getBaseUrl();
+        if (!$baseUrl) {
+            return '';
+        }
+
+        $filename = basename($this->server->get('SCRIPT_FILENAME'));
+        if (basename($baseUrl) === $filename) {
+            $basePath = \dirname($baseUrl);
+        } else {
+            $basePath = $baseUrl;
+        }
+
+        if ('\\' === \DIRECTORY_SEPARATOR) {
+            $basePath = str_replace('\\', '/', $basePath);
+        }
+
+        return rtrim($basePath, '/');
+    }
+
+    /**
+     * Prepares the path info.
+     */
+    protected function preparePathInfo(): string
+    {
+        if (null === ($requestUri = $this->getRequestUri())) {
+            return '/';
+        }
+
+        // Remove the query string from REQUEST_URI
+        if (false !== $pos = strpos($requestUri, '?')) {
+            $requestUri = substr($requestUri, 0, $pos);
+        }
+        if ('' !== $requestUri && '/' !== $requestUri[0]) {
+            $requestUri = '/'.$requestUri;
+        }
+
+        if (null === ($baseUrl = $this->getBaseUrlReal())) {
+            return $requestUri;
+        }
+
+        $pathInfo = substr($requestUri, \strlen($baseUrl));
+        if ('' === $pathInfo) {
+            // If substr() returns false then PATH_INFO is set to an empty string
+            return '/';
+        }
+
+        return $pathInfo;
+    }
+
+    /**
+     * Initializes HTTP request formats.
+     */
+    protected static function initializeFormats(): void
+    {
+        static::$formats = [
+            'html' => ['text/html', 'application/xhtml+xml'],
+            'txt' => ['text/plain'],
+            'js' => ['application/javascript', 'application/x-javascript', 'text/javascript'],
+            'css' => ['text/css'],
+            'json' => ['application/json', 'application/x-json'],
+            'jsonld' => ['application/ld+json'],
+            'xml' => ['text/xml', 'application/xml', 'application/x-xml'],
+            'rdf' => ['application/rdf+xml'],
+            'atom' => ['application/atom+xml'],
+            'rss' => ['application/rss+xml'],
+            'form' => ['application/x-www-form-urlencoded', 'multipart/form-data'],
+        ];
+    }
+
+    private function setPhpDefaultLocale(string $locale): void
+    {
+        // if either the class Locale doesn't exist, or an exception is thrown when
+        // setting the default locale, the intl module is not installed, and
+        // the call can be ignored:
+        try {
+            if (class_exists(\Locale::class, false)) {
+                \Locale::setDefault($locale);
+            }
+        } catch (\Exception) {
+        }
+    }
+
+    /**
+     * Returns the prefix as encoded in the string when the string starts with
+     * the given prefix, null otherwise.
+     */
+    private function getUrlencodedPrefix(string $string, string $prefix): ?string
+    {
+        if ($this->isIisRewrite()) {
+            // ISS with UrlRewriteModule might report SCRIPT_NAME/PHP_SELF with wrong case
+            // see https://github.com/php/php-src/issues/11981
+            if (0 !== stripos(rawurldecode($string), $prefix)) {
+                return null;
+            }
+        } elseif (!str_starts_with(rawurldecode($string), $prefix)) {
+            return null;
+        }
+
+        $len = \strlen($prefix);
+
+        if (preg_match(\sprintf('#^(%%[[:xdigit:]]{2}|.){%d}#', $len), $string, $match)) {
+            return $match[0];
+        }
+
+        return null;
+    }
+
+    private static function createRequestFromFactory(array $query = [], array $request = [], array $attributes = [], array $cookies = [], array $files = [], array $server = [], $content = null): static
+    {
+        if (self::$requestFactory) {
+            $request = (self::$requestFactory)($query, $request, $attributes, $cookies, $files, $server, $content);
+
+            if (!$request instanceof self) {
+                throw new \LogicException('The Request factory must return an instance of Symfony\Component\HttpFoundation\Request.');
+            }
+
+            return $request;
+        }
+
+        return new static($query, $request, $attributes, $cookies, $files, $server, $content);
+    }
+
+    /**
+     * Indicates whether this request originated from a trusted proxy.
+     *
+     * This can be useful to determine whether or not to trust the
+     * contents of a proxy-specific header.
+     */
+    public function isFromTrustedProxy(): bool
+    {
+        return self::$trustedProxies && IpUtils::checkIp($this->server->get('REMOTE_ADDR', ''), self::$trustedProxies);
+    }
+
+    /**
+     * This method is rather heavy because it splits and merges headers, and it's called by many other methods such as
+     * getPort(), isSecure(), getHost(), getClientIps(), getBaseUrl() etc. Thus, we try to cache the results for
+     * best performance.
+     */
+    private function getTrustedValues(int $type, ?string $ip = null): array
+    {
+        $cacheKey = $type."\0".((self::$trustedHeaderSet & $type) ? $this->headers->get(self::TRUSTED_HEADERS[$type]) : '');
+        $cacheKey .= "\0".$ip."\0".$this->headers->get(self::TRUSTED_HEADERS[self::HEADER_FORWARDED]);
+
+        if (isset($this->trustedValuesCache[$cacheKey])) {
+            return $this->trustedValuesCache[$cacheKey];
+        }
+
+        $clientValues = [];
+        $forwardedValues = [];
+
+        if ((self::$trustedHeaderSet & $type) && $this->headers->has(self::TRUSTED_HEADERS[$type])) {
+            foreach (explode(',', $this->headers->get(self::TRUSTED_HEADERS[$type])) as $v) {
+                $clientValues[] = (self::HEADER_X_FORWARDED_PORT === $type ? '0.0.0.0:' : '').trim($v);
+            }
+        }
+
+        if ((self::$trustedHeaderSet & self::HEADER_FORWARDED) && (isset(self::FORWARDED_PARAMS[$type])) && $this->headers->has(self::TRUSTED_HEADERS[self::HEADER_FORWARDED])) {
+            $forwarded = $this->headers->get(self::TRUSTED_HEADERS[self::HEADER_FORWARDED]);
+            $parts = HeaderUtils::split($forwarded, ',;=');
+            $param = self::FORWARDED_PARAMS[$type];
+            foreach ($parts as $subParts) {
+                if (null === $v = HeaderUtils::combine($subParts)[$param] ?? null) {
+                    continue;
+                }
+                if (self::HEADER_X_FORWARDED_PORT === $type) {
+                    if (str_ends_with($v, ']') || false === $v = strrchr($v, ':')) {
+                        $v = $this->isSecure() ? ':443' : ':80';
+                    }
+                    $v = '0.0.0.0'.$v;
+                }
+                $forwardedValues[] = $v;
+            }
+        }
+
+        if (null !== $ip) {
+            $clientValues = $this->normalizeAndFilterClientIps($clientValues, $ip);
+            $forwardedValues = $this->normalizeAndFilterClientIps($forwardedValues, $ip);
+        }
+
+        if ($forwardedValues === $clientValues || !$clientValues) {
+            return $this->trustedValuesCache[$cacheKey] = $forwardedValues;
+        }
+
+        if (!$forwardedValues) {
+            return $this->trustedValuesCache[$cacheKey] = $clientValues;
+        }
+
+        if (!$this->isForwardedValid) {
+            return $this->trustedValuesCache[$cacheKey] = null !== $ip ? ['0.0.0.0', $ip] : [];
+        }
+        $this->isForwardedValid = false;
+
+        throw new ConflictingHeadersException(\sprintf('The request has both a trusted "%s" header and a trusted "%s" header, conflicting with each other. You should either configure your proxy to remove one of them, or configure your project to distrust the offending one.', self::TRUSTED_HEADERS[self::HEADER_FORWARDED], self::TRUSTED_HEADERS[$type]));
+    }
+
+    private function normalizeAndFilterClientIps(array $clientIps, string $ip): array
+    {
+        if (!$clientIps) {
+            return [];
+        }
+        $clientIps[] = $ip; // Complete the IP chain with the IP the request actually came from
+        $firstTrustedIp = null;
+
+        foreach ($clientIps as $key => $clientIp) {
+            if (strpos($clientIp, '.')) {
+                // Strip :port from IPv4 addresses. This is allowed in Forwarded
+                // and may occur in X-Forwarded-For.
+                $i = strpos($clientIp, ':');
+                if ($i) {
+                    $clientIps[$key] = $clientIp = substr($clientIp, 0, $i);
+                }
+            } elseif (str_starts_with($clientIp, '[')) {
+                // Strip brackets and :port from IPv6 addresses.
+                $i = strpos($clientIp, ']', 1);
+                $clientIps[$key] = $clientIp = substr($clientIp, 1, $i - 1);
+            }
+
+            if (!filter_var($clientIp, \FILTER_VALIDATE_IP)) {
+                unset($clientIps[$key]);
+
+                continue;
+            }
+
+            if (IpUtils::checkIp($clientIp, self::$trustedProxies)) {
+                unset($clientIps[$key]);
+
+                // Fallback to this when the client IP falls into the range of trusted proxies
+                $firstTrustedIp ??= $clientIp;
+            }
+        }
+
+        // Now the IP chain contains only untrusted proxies and the client IP
+        return $clientIps ? array_reverse($clientIps) : [$firstTrustedIp];
+    }
+
+    /**
+     * Is this IIS with UrlRewriteModule?
+     *
+     * This method consumes, caches and removed the IIS_WasUrlRewritten env var,
+     * so we don't inherit it to sub-requests.
+     */
+    private function isIisRewrite(): bool
+    {
+        if (1 === $this->server->getInt('IIS_WasUrlRewritten')) {
+            $this->isIisRewrite = true;
+            $this->server->remove('IIS_WasUrlRewritten');
+        }
+
+        return $this->isIisRewrite;
+    }
+}
diff --git a/core/lib/Http/Request/RequestFileCollection.php b/core/lib/Http/Request/RequestFileCollection.php
new file mode 100644
index 0000000..a4c64cc
--- /dev/null
+++ b/core/lib/Http/Request/RequestFileCollection.php
@@ -0,0 +1,129 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\File\UploadedFile;
+
+/**
+ * FileBag is a container for uploaded files.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ * @author Bulat Shakirzyanov <mallluhuct@gmail.com>
+ */
+class RequestFileCollection extends RequestParameters
+{
+    private const FILE_KEYS = ['error', 'full_path', 'name', 'size', 'tmp_name', 'type'];
+
+    /**
+     * @param array|UploadedFile[] $parameters An array of HTTP files
+     */
+    public function __construct(array $parameters = [])
+    {
+        $this->replace($parameters);
+    }
+
+    public function replace(array $files = []): void
+    {
+        $this->parameters = [];
+        $this->add($files);
+    }
+
+    public function set(string $key, mixed $value): void
+    {
+        if (!\is_array($value) && !$value instanceof UploadedFile) {
+            throw new \InvalidArgumentException('An uploaded file must be an array or an instance of UploadedFile.');
+        }
+
+        parent::set($key, $this->convertFileInformation($value));
+    }
+
+    public function add(array $files = []): void
+    {
+        foreach ($files as $key => $file) {
+            $this->set($key, $file);
+        }
+    }
+
+    /**
+     * Converts uploaded files to UploadedFile instances.
+     *
+     * @return UploadedFile[]|UploadedFile|null
+     */
+    protected function convertFileInformation(array|UploadedFile $file): array|UploadedFile|null
+    {
+        if ($file instanceof UploadedFile) {
+            return $file;
+        }
+
+        $file = $this->fixPhpFilesArray($file);
+        $keys = array_keys($file + ['full_path' => null]);
+        sort($keys);
+
+        if (self::FILE_KEYS === $keys) {
+            if (\UPLOAD_ERR_NO_FILE === $file['error']) {
+                $file = null;
+            } else {
+                $file = new UploadedFile($file['tmp_name'], $file['full_path'] ?? $file['name'], $file['type'], $file['error'], false);
+            }
+        } else {
+            $file = array_map(fn ($v) => $v instanceof UploadedFile || \is_array($v) ? $this->convertFileInformation($v) : $v, $file);
+            if (array_is_list($file)) {
+                $file = array_filter($file);
+            }
+        }
+
+        return $file;
+    }
+
+    /**
+     * Fixes a malformed PHP $_FILES array.
+     *
+     * PHP has a bug that the format of the $_FILES array differs, depending on
+     * whether the uploaded file fields had normal field names or array-like
+     * field names ("normal" vs. "parent[child]").
+     *
+     * This method fixes the array to look like the "normal" $_FILES array.
+     *
+     * It's safe to pass an already converted array, in which case this method
+     * just returns the original array unmodified.
+     */
+    protected function fixPhpFilesArray(array $data): array
+    {
+        $keys = array_keys($data + ['full_path' => null]);
+        sort($keys);
+
+        if (self::FILE_KEYS !== $keys || !isset($data['name']) || !\is_array($data['name'])) {
+            return $data;
+        }
+
+        $files = $data;
+        foreach (self::FILE_KEYS as $k) {
+            unset($files[$k]);
+        }
+
+        foreach ($data['name'] as $key => $name) {
+            $files[$key] = $this->fixPhpFilesArray([
+                'error' => $data['error'][$key],
+                'name' => $name,
+                'type' => $data['type'][$key],
+                'tmp_name' => $data['tmp_name'][$key],
+                'size' => $data['size'][$key],
+            ] + (isset($data['full_path'][$key]) ? [
+                'full_path' => $data['full_path'][$key],
+            ] : []));
+        }
+
+        return $files;
+    }
+}
diff --git a/core/lib/Http/Request/RequestHeaderAccept.php b/core/lib/Http/Request/RequestHeaderAccept.php
new file mode 100644
index 0000000..47746d3
--- /dev/null
+++ b/core/lib/Http/Request/RequestHeaderAccept.php
@@ -0,0 +1,154 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\HeaderUtils;
+
+// Help opcache.preload discover always-needed symbols
+class_exists(RequestHeaderAcceptItem::class);
+
+/**
+ * Represents an Accept-* header.
+ *
+ * An accept header is compound with a list of items,
+ * sorted by descending quality.
+ *
+ * @author Jean-François Simon <contact@jfsimon.fr>
+ */
+class RequestHeaderAccept
+{
+    /**
+     * @var RequestHeaderAcceptItem[]
+     */
+    private array $items = [];
+
+    private bool $sorted = true;
+
+    /**
+     * @param RequestHeaderAcceptItem[] $items
+     */
+    public function __construct(array $items)
+    {
+        foreach ($items as $item) {
+            $this->add($item);
+        }
+    }
+
+    /**
+     * Builds an AcceptHeader instance from a string.
+     */
+    public static function fromString(?string $headerValue): self
+    {
+        $parts = HeaderUtils::split($headerValue ?? '', ',;=');
+
+        return new self(array_map(function ($subParts) {
+            static $index = 0;
+            $part = array_shift($subParts);
+            $attributes = HeaderUtils::combine($subParts);
+
+            $item = new RequestHeaderAcceptItem($part[0], $attributes);
+            $item->setIndex($index++);
+
+            return $item;
+        }, $parts));
+    }
+
+    /**
+     * Returns header value's string representation.
+     */
+    public function __toString(): string
+    {
+        return implode(',', $this->items);
+    }
+
+    /**
+     * Tests if header has given value.
+     */
+    public function has(string $value): bool
+    {
+        return isset($this->items[$value]);
+    }
+
+    /**
+     * Returns given value's item, if exists.
+     */
+    public function get(string $value): ?RequestHeaderAcceptItem
+    {
+        return $this->items[$value] ?? $this->items[explode('/', $value)[0].'/*'] ?? $this->items['*/*'] ?? $this->items['*'] ?? null;
+    }
+
+    /**
+     * Adds an item.
+     *
+     * @return $this
+     */
+    public function add(RequestHeaderAcceptItem $item): static
+    {
+        $this->items[$item->getValue()] = $item;
+        $this->sorted = false;
+
+        return $this;
+    }
+
+    /**
+     * Returns all items.
+     *
+     * @return RequestHeaderAcceptItem[]
+     */
+    public function all(): array
+    {
+        $this->sort();
+
+        return $this->items;
+    }
+
+    /**
+     * Filters items on their value using given regex.
+     */
+    public function filter(string $pattern): self
+    {
+        return new self(array_filter($this->items, fn (RequestHeaderAcceptItem $item) => preg_match($pattern, $item->getValue())));
+    }
+
+    /**
+     * Returns first item.
+     */
+    public function first(): ?RequestHeaderAcceptItem
+    {
+        $this->sort();
+
+        return $this->items ? reset($this->items) : null;
+    }
+
+    /**
+     * Sorts items by descending quality.
+     */
+    private function sort(): void
+    {
+        if (!$this->sorted) {
+            uasort($this->items, function (RequestHeaderAcceptItem $a, RequestHeaderAcceptItem $b) {
+                $qA = $a->getQuality();
+                $qB = $b->getQuality();
+
+                if ($qA === $qB) {
+                    return $a->getIndex() > $b->getIndex() ? 1 : -1;
+                }
+
+                return $qA > $qB ? -1 : 1;
+            });
+
+            $this->sorted = true;
+        }
+    }
+}
diff --git a/core/lib/Http/Request/RequestHeaderAcceptItem.php b/core/lib/Http/Request/RequestHeaderAcceptItem.php
new file mode 100644
index 0000000..6455ffe
--- /dev/null
+++ b/core/lib/Http/Request/RequestHeaderAcceptItem.php
@@ -0,0 +1,163 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\HeaderUtils;
+
+/**
+ * Represents an Accept-* header item.
+ *
+ * @author Jean-François Simon <contact@jfsimon.fr>
+ */
+class RequestHeaderAcceptItem
+{
+    private float $quality = 1.0;
+    private int $index = 0;
+    private array $attributes = [];
+
+    public function __construct(
+        private string $value,
+        array $attributes = [],
+    ) {
+        foreach ($attributes as $name => $value) {
+            $this->setAttribute($name, $value);
+        }
+    }
+
+    /**
+     * Builds an AcceptHeaderInstance instance from a string.
+     */
+    public static function fromString(?string $itemValue): self
+    {
+        $parts = HeaderUtils::split($itemValue ?? '', ';=');
+
+        $part = array_shift($parts);
+        $attributes = HeaderUtils::combine($parts);
+
+        return new self($part[0], $attributes);
+    }
+
+    /**
+     * Returns header value's string representation.
+     */
+    public function __toString(): string
+    {
+        $string = $this->value.($this->quality < 1 ? ';q='.$this->quality : '');
+        if (\count($this->attributes) > 0) {
+            $string .= '; '.HeaderUtils::toString($this->attributes, ';');
+        }
+
+        return $string;
+    }
+
+    /**
+     * Set the item value.
+     *
+     * @return $this
+     */
+    public function setValue(string $value): static
+    {
+        $this->value = $value;
+
+        return $this;
+    }
+
+    /**
+     * Returns the item value.
+     */
+    public function getValue(): string
+    {
+        return $this->value;
+    }
+
+    /**
+     * Set the item quality.
+     *
+     * @return $this
+     */
+    public function setQuality(float $quality): static
+    {
+        $this->quality = $quality;
+
+        return $this;
+    }
+
+    /**
+     * Returns the item quality.
+     */
+    public function getQuality(): float
+    {
+        return $this->quality;
+    }
+
+    /**
+     * Set the item index.
+     *
+     * @return $this
+     */
+    public function setIndex(int $index): static
+    {
+        $this->index = $index;
+
+        return $this;
+    }
+
+    /**
+     * Returns the item index.
+     */
+    public function getIndex(): int
+    {
+        return $this->index;
+    }
+
+    /**
+     * Tests if an attribute exists.
+     */
+    public function hasAttribute(string $name): bool
+    {
+        return isset($this->attributes[$name]);
+    }
+
+    /**
+     * Returns an attribute by its name.
+     */
+    public function getAttribute(string $name, mixed $default = null): mixed
+    {
+        return $this->attributes[$name] ?? $default;
+    }
+
+    /**
+     * Returns all attributes.
+     */
+    public function getAttributes(): array
+    {
+        return $this->attributes;
+    }
+
+    /**
+     * Set an attribute.
+     *
+     * @return $this
+     */
+    public function setAttribute(string $name, string $value): static
+    {
+        if ('q' === $name) {
+            $this->quality = (float) $value;
+        } else {
+            $this->attributes[$name] = $value;
+        }
+
+        return $this;
+    }
+}
diff --git a/core/lib/Http/Request/RequestHeaderParameters.php b/core/lib/Http/Request/RequestHeaderParameters.php
new file mode 100644
index 0000000..3f3e4bd
--- /dev/null
+++ b/core/lib/Http/Request/RequestHeaderParameters.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types = 1);
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\HeaderParameters;
+
+/**
+ * HeaderBag is a container for HTTP headers.
+ */
+class RequestHeaderParameters extends HeaderParameters {}
diff --git a/core/lib/Http/Request/RequestInputParameters.php b/core/lib/Http/Request/RequestInputParameters.php
new file mode 100644
index 0000000..f199e3f
--- /dev/null
+++ b/core/lib/Http/Request/RequestInputParameters.php
@@ -0,0 +1,155 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\Exception\BadRequestException;
+use KTXC\Http\Exception\UnexpectedValueException;
+
+/**
+ * InputBag is a container for user input values such as $_GET, $_POST, $_REQUEST, and $_COOKIE.
+ *
+ * @author Saif Eddin Gmati <azjezz@protonmail.com>
+ */
+final class RequestInputParameters extends RequestParameters
+{
+    /**
+     * Returns an input value by name (scalar, Stringable, or array).
+     *
+     * Arrays are now allowed. (Previously only scalar values were permitted.)
+     * No deep validation of array contents is performed here; callers should
+     * sanitize nested values as needed.
+     *
+     * @param string|int|float|bool|array|null $default The default value if the key does not exist
+     *
+     * @return string|int|float|bool|array|null
+     *
+     * @throws BadRequestException if the stored input value is of an unsupported type
+     * @throws \InvalidArgumentException if the provided default is of an unsupported type
+     */
+    public function get(string $key, mixed $default = null): string|int|float|bool|array|null
+    {
+        if (null !== $default && !\is_scalar($default) && !$default instanceof \Stringable && !\is_array($default)) {
+            throw new \InvalidArgumentException(\sprintf('Expected a scalar or array value as a 2nd argument to "%s()", "%s" given.', __METHOD__, get_debug_type($default)));
+        }
+
+        $value = parent::get($key, $this);
+
+        if (null !== $value && $this !== $value && !\is_scalar($value) && !$value instanceof \Stringable && !\is_array($value)) {
+            throw new BadRequestException(\sprintf('Input value "%s" contains an invalid (non-scalar, non-array, non-Stringable) value.', $key));
+        }
+
+        return $this === $value ? $default : $value;
+    }
+
+    /**
+     * Replaces the current input values by a new set.
+     */
+    public function replace(array $inputs = []): void
+    {
+        $this->parameters = [];
+        $this->add($inputs);
+    }
+
+    /**
+     * Adds input values.
+     */
+    public function add(array $inputs = []): void
+    {
+        foreach ($inputs as $input => $value) {
+            $this->set($input, $value);
+        }
+    }
+
+    /**
+     * Sets an input by name.
+     *
+     * @param string|int|float|bool|array|null $value
+     */
+    public function set(string $key, mixed $value): void
+    {
+        if (null !== $value && !\is_scalar($value) && !\is_array($value) && !$value instanceof \Stringable) {
+            throw new \InvalidArgumentException(\sprintf('Expected a scalar, or an array as a 2nd argument to "%s()", "%s" given.', __METHOD__, get_debug_type($value)));
+        }
+
+        $this->parameters[$key] = $value;
+    }
+
+    /**
+     * Returns the parameter value converted to an enum.
+     *
+     * @template T of \BackedEnum
+     *
+     * @param class-string<T> $class
+     * @param ?T              $default
+     *
+     * @return ?T
+     *
+     * @psalm-return ($default is null ? T|null : T)
+     *
+     * @throws BadRequestException if the input cannot be converted to an enum
+     */
+    public function getEnum(string $key, string $class, ?\BackedEnum $default = null): ?\BackedEnum
+    {
+        try {
+            return parent::getEnum($key, $class, $default);
+        } catch (UnexpectedValueException $e) {
+            throw new BadRequestException($e->getMessage(), $e->getCode(), $e);
+        }
+    }
+
+    /**
+     * Returns the parameter value converted to string.
+     *
+     * @throws BadRequestException if the input contains a non-scalar value
+     */
+    public function getString(string $key, string $default = ''): string
+    {
+        // Shortcuts the parent method because the validation on scalar is already done in get().
+        return (string) $this->get($key, $default);
+    }
+
+    /**
+     * @throws BadRequestException if the input value is an array and \FILTER_REQUIRE_ARRAY or \FILTER_FORCE_ARRAY is not set
+     * @throws BadRequestException if the input value is invalid and \FILTER_NULL_ON_FAILURE is not set
+     */
+    public function filter(string $key, mixed $default = null, int $filter = \FILTER_DEFAULT, mixed $options = []): mixed
+    {
+        $value = $this->has($key) ? $this->all()[$key] : $default;
+
+        // Always turn $options into an array - this allows filter_var option shortcuts.
+        if (!\is_array($options) && $options) {
+            $options = ['flags' => $options];
+        }
+
+        if (\is_array($value) && !(($options['flags'] ?? 0) & (\FILTER_REQUIRE_ARRAY | \FILTER_FORCE_ARRAY))) {
+            throw new BadRequestException(\sprintf('Input value "%s" contains an array, but "FILTER_REQUIRE_ARRAY" or "FILTER_FORCE_ARRAY" flags were not set.', $key));
+        }
+
+        if ((\FILTER_CALLBACK & $filter) && !(($options['options'] ?? null) instanceof \Closure)) {
+            throw new \InvalidArgumentException(\sprintf('A Closure must be passed to "%s()" when FILTER_CALLBACK is used, "%s" given.', __METHOD__, get_debug_type($options['options'] ?? null)));
+        }
+
+        $options['flags'] ??= 0;
+        $nullOnFailure = $options['flags'] & \FILTER_NULL_ON_FAILURE;
+        $options['flags'] |= \FILTER_NULL_ON_FAILURE;
+
+        $value = filter_var($value, $filter, $options);
+
+        if (null !== $value || $nullOnFailure) {
+            return $value;
+        }
+
+        throw new BadRequestException(\sprintf('Input value "%s" is invalid and flag "FILTER_NULL_ON_FAILURE" was not set.', $key));
+    }
+}
diff --git a/core/lib/Http/Request/RequestParameters.php b/core/lib/Http/Request/RequestParameters.php
new file mode 100644
index 0000000..2ed484c
--- /dev/null
+++ b/core/lib/Http/Request/RequestParameters.php
@@ -0,0 +1,260 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+use KTXC\Http\Exception\BadRequestException;
+use KTXC\Http\Exception\UnexpectedValueException;
+
+/**
+ * ParameterBag is a container for key/value pairs.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ *
+ * @implements \IteratorAggregate<string, mixed>
+ */
+class RequestParameters implements \IteratorAggregate, \Countable
+{
+    public function __construct(
+        protected array $parameters = [],
+    ) {
+    }
+
+    /**
+     * Returns the parameters.
+     *
+     * @param string|null $key The name of the parameter to return or null to get them all
+     *
+     * @throws BadRequestException if the value is not an array
+     */
+    public function all(?string $key = null): array
+    {
+        if (null === $key) {
+            return $this->parameters;
+        }
+
+        if (!\is_array($value = $this->parameters[$key] ?? [])) {
+            throw new BadRequestException(\sprintf('Unexpected value for parameter "%s": expecting "array", got "%s".', $key, get_debug_type($value)));
+        }
+
+        return $value;
+    }
+
+    /**
+     * Returns the parameter keys.
+     */
+    public function keys(): array
+    {
+        return array_keys($this->parameters);
+    }
+
+    /**
+     * Replaces the current parameters by a new set.
+     */
+    public function replace(array $parameters = []): void
+    {
+        $this->parameters = $parameters;
+    }
+
+    /**
+     * Adds parameters.
+     */
+    public function add(array $parameters = []): void
+    {
+        $this->parameters = array_replace($this->parameters, $parameters);
+    }
+
+    public function get(string $key, mixed $default = null): mixed
+    {
+        return \array_key_exists($key, $this->parameters) ? $this->parameters[$key] : $default;
+    }
+
+    public function set(string $key, mixed $value): void
+    {
+        $this->parameters[$key] = $value;
+    }
+
+    /**
+     * Returns true if the parameter is defined.
+     */
+    public function has(string $key): bool
+    {
+        return \array_key_exists($key, $this->parameters);
+    }
+
+    /**
+     * Removes a parameter.
+     */
+    public function remove(string $key): void
+    {
+        unset($this->parameters[$key]);
+    }
+
+    /**
+     * Returns the alphabetic characters of the parameter value.
+     *
+     * @throws UnexpectedValueException if the value cannot be converted to string
+     */
+    public function getAlpha(string $key, string $default = ''): string
+    {
+        return preg_replace('/[^[:alpha:]]/', '', $this->getString($key, $default));
+    }
+
+    /**
+     * Returns the alphabetic characters and digits of the parameter value.
+     *
+     * @throws UnexpectedValueException if the value cannot be converted to string
+     */
+    public function getAlnum(string $key, string $default = ''): string
+    {
+        return preg_replace('/[^[:alnum:]]/', '', $this->getString($key, $default));
+    }
+
+    /**
+     * Returns the digits of the parameter value.
+     *
+     * @throws UnexpectedValueException if the value cannot be converted to string
+     */
+    public function getDigits(string $key, string $default = ''): string
+    {
+        return preg_replace('/[^[:digit:]]/', '', $this->getString($key, $default));
+    }
+
+    /**
+     * Returns the parameter as string.
+     *
+     * @throws UnexpectedValueException if the value cannot be converted to string
+     */
+    public function getString(string $key, string $default = ''): string
+    {
+        $value = $this->get($key, $default);
+        if (!\is_scalar($value) && !$value instanceof \Stringable) {
+            throw new UnexpectedValueException(\sprintf('Parameter value "%s" cannot be converted to "string".', $key));
+        }
+
+        return (string) $value;
+    }
+
+    /**
+     * Returns the parameter value converted to integer.
+     *
+     * @throws UnexpectedValueException if the value cannot be converted to integer
+     */
+    public function getInt(string $key, int $default = 0): int
+    {
+        return $this->filter($key, $default, \FILTER_VALIDATE_INT, ['flags' => \FILTER_REQUIRE_SCALAR]);
+    }
+
+    /**
+     * Returns the parameter value converted to boolean.
+     *
+     * @throws UnexpectedValueException if the value cannot be converted to a boolean
+     */
+    public function getBoolean(string $key, bool $default = false): bool
+    {
+        return $this->filter($key, $default, \FILTER_VALIDATE_BOOL, ['flags' => \FILTER_REQUIRE_SCALAR]);
+    }
+
+    /**
+     * Returns the parameter value converted to an enum.
+     *
+     * @template T of \BackedEnum
+     *
+     * @param class-string<T> $class
+     * @param ?T              $default
+     *
+     * @return ?T
+     *
+     * @psalm-return ($default is null ? T|null : T)
+     *
+     * @throws UnexpectedValueException if the parameter value cannot be converted to an enum
+     */
+    public function getEnum(string $key, string $class, ?\BackedEnum $default = null): ?\BackedEnum
+    {
+        $value = $this->get($key);
+
+        if (null === $value) {
+            return $default;
+        }
+
+        try {
+            return $class::from($value);
+        } catch (\ValueError|\TypeError $e) {
+            throw new UnexpectedValueException(\sprintf('Parameter "%s" cannot be converted to enum: %s.', $key, $e->getMessage()), $e->getCode(), $e);
+        }
+    }
+
+    /**
+     * Filter key.
+     *
+     * @param int                                     $filter  FILTER_* constant
+     * @param int|array{flags?: int, options?: array} $options Flags from FILTER_* constants
+     *
+     * @see https://php.net/filter-var
+     *
+     * @throws UnexpectedValueException if the parameter value is a non-stringable object
+     * @throws UnexpectedValueException if the parameter value is invalid and \FILTER_NULL_ON_FAILURE is not set
+     */
+    public function filter(string $key, mixed $default = null, int $filter = \FILTER_DEFAULT, mixed $options = []): mixed
+    {
+        $value = $this->get($key, $default);
+
+        // Always turn $options into an array - this allows filter_var option shortcuts.
+        if (!\is_array($options) && $options) {
+            $options = ['flags' => $options];
+        }
+
+        // Add a convenience check for arrays.
+        if (\is_array($value) && !isset($options['flags'])) {
+            $options['flags'] = \FILTER_REQUIRE_ARRAY;
+        }
+
+        if (\is_object($value) && !$value instanceof \Stringable) {
+            throw new UnexpectedValueException(\sprintf('Parameter value "%s" cannot be filtered.', $key));
+        }
+
+        if ((\FILTER_CALLBACK & $filter) && !(($options['options'] ?? null) instanceof \Closure)) {
+            throw new \InvalidArgumentException(\sprintf('A Closure must be passed to "%s()" when FILTER_CALLBACK is used, "%s" given.', __METHOD__, get_debug_type($options['options'] ?? null)));
+        }
+
+        $options['flags'] ??= 0;
+        $nullOnFailure = $options['flags'] & \FILTER_NULL_ON_FAILURE;
+        $options['flags'] |= \FILTER_NULL_ON_FAILURE;
+
+        $value = filter_var($value, $filter, $options);
+
+        if (null !== $value || $nullOnFailure) {
+            return $value;
+        }
+
+        throw new \UnexpectedValueException(\sprintf('Parameter value "%s" is invalid and flag "FILTER_NULL_ON_FAILURE" was not set.', $key));
+    }
+
+    /**
+     * Returns an iterator for parameters.
+     *
+     * @return \ArrayIterator<string, mixed>
+     */
+    public function getIterator(): \ArrayIterator
+    {
+        return new \ArrayIterator($this->parameters);
+    }
+
+    /**
+     * Returns the number of parameters.
+     */
+    public function count(): int
+    {
+        return \count($this->parameters);
+    }
+}
diff --git a/core/lib/Http/Request/RequestServerParameters.php b/core/lib/Http/Request/RequestServerParameters.php
new file mode 100644
index 0000000..66ba4b6
--- /dev/null
+++ b/core/lib/Http/Request/RequestServerParameters.php
@@ -0,0 +1,99 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Request;
+
+/**
+ * ServerBag is a container for HTTP headers from the $_SERVER variable.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ * @author Bulat Shakirzyanov <mallluhuct@gmail.com>
+ * @author Robert Kiss <kepten@gmail.com>
+ */
+class RequestServerParameters extends RequestParameters
+{
+    /**
+     * Gets the HTTP headers.
+     */
+    public function getHeaders(): array
+    {
+        $headers = [];
+        foreach ($this->parameters as $key => $value) {
+            if (str_starts_with($key, 'HTTP_')) {
+                $headers[substr($key, 5)] = $value;
+            } elseif (\in_array($key, ['CONTENT_TYPE', 'CONTENT_LENGTH', 'CONTENT_MD5'], true) && '' !== $value) {
+                $headers[$key] = $value;
+            }
+        }
+
+        if (isset($this->parameters['PHP_AUTH_USER'])) {
+            $headers['PHP_AUTH_USER'] = $this->parameters['PHP_AUTH_USER'];
+            $headers['PHP_AUTH_PW'] = $this->parameters['PHP_AUTH_PW'] ?? '';
+        } else {
+            /*
+             * php-cgi under Apache does not pass HTTP Basic user/pass to PHP by default
+             * For this workaround to work, add these lines to your .htaccess file:
+             * RewriteCond %{HTTP:Authorization} .+
+             * RewriteRule ^ - [E=HTTP_AUTHORIZATION:%0]
+             *
+             * A sample .htaccess file:
+             * RewriteEngine On
+             * RewriteCond %{HTTP:Authorization} .+
+             * RewriteRule ^ - [E=HTTP_AUTHORIZATION:%0]
+             * RewriteCond %{REQUEST_FILENAME} !-f
+             * RewriteRule ^(.*)$ index.php [QSA,L]
+             */
+
+            $authorizationHeader = null;
+            if (isset($this->parameters['HTTP_AUTHORIZATION'])) {
+                $authorizationHeader = $this->parameters['HTTP_AUTHORIZATION'];
+            } elseif (isset($this->parameters['REDIRECT_HTTP_AUTHORIZATION'])) {
+                $authorizationHeader = $this->parameters['REDIRECT_HTTP_AUTHORIZATION'];
+            }
+
+            if (null !== $authorizationHeader) {
+                if (0 === stripos($authorizationHeader, 'basic ')) {
+                    // Decode AUTHORIZATION header into PHP_AUTH_USER and PHP_AUTH_PW when authorization header is basic
+                    $exploded = explode(':', base64_decode(substr($authorizationHeader, 6)), 2);
+                    if (2 == \count($exploded)) {
+                        [$headers['PHP_AUTH_USER'], $headers['PHP_AUTH_PW']] = $exploded;
+                    }
+                } elseif (empty($this->parameters['PHP_AUTH_DIGEST']) && (0 === stripos($authorizationHeader, 'digest '))) {
+                    // In some circumstances PHP_AUTH_DIGEST needs to be set
+                    $headers['PHP_AUTH_DIGEST'] = $authorizationHeader;
+                    $this->parameters['PHP_AUTH_DIGEST'] = $authorizationHeader;
+                } elseif (0 === stripos($authorizationHeader, 'bearer ')) {
+                    /*
+                     * XXX: Since there is no PHP_AUTH_BEARER in PHP predefined variables,
+                     *      I'll just set $headers['AUTHORIZATION'] here.
+                     *      https://php.net/reserved.variables.server
+                     */
+                    $headers['AUTHORIZATION'] = $authorizationHeader;
+                }
+            }
+        }
+
+        if (isset($headers['AUTHORIZATION'])) {
+            return $headers;
+        }
+
+        // PHP_AUTH_USER/PHP_AUTH_PW
+        if (isset($headers['PHP_AUTH_USER'])) {
+            $headers['AUTHORIZATION'] = 'Basic '.base64_encode($headers['PHP_AUTH_USER'].':'.($headers['PHP_AUTH_PW'] ?? ''));
+        } elseif (isset($headers['PHP_AUTH_DIGEST'])) {
+            $headers['AUTHORIZATION'] = $headers['PHP_AUTH_DIGEST'];
+        }
+
+        return $headers;
+    }
+}
diff --git a/core/lib/Http/Response/FileResponse.php b/core/lib/Http/Response/FileResponse.php
new file mode 100644
index 0000000..de3b389
--- /dev/null
+++ b/core/lib/Http/Response/FileResponse.php
@@ -0,0 +1,78 @@
+<?php
+
+declare(strict_types = 1);
+
+namespace KTXC\Http\Response;
+
+/**
+ * Simple file response that reads a file from disk and serves it.
+ *
+ * Only supports sending full file contents (no range / streaming for now).
+ */
+class FileResponse extends Response
+{
+    private string $filePath;
+
+    public function __construct(string $filePath, int $status = 200, array $headers = [])
+    {
+        if (!is_file($filePath) || !is_readable($filePath)) {
+            throw new \InvalidArgumentException(sprintf('FileResponse: file not found or not readable: %s', $filePath));
+        }
+
+        $this->filePath = $filePath;
+
+        // Determine content type (very small helper; rely on common extensions)
+        $mime = self::guessMimeType($filePath) ?? 'application/octet-stream';
+        $headers['Content-Type'] = $headers['Content-Type'] ?? $mime;
+        $headers['Content-Length'] = (string) filesize($filePath);
+        $headers['Last-Modified'] = gmdate('D, d M Y H:i:s', filemtime($filePath)) . ' GMT';
+        $headers['Cache-Control'] = $headers['Cache-Control'] ?? 'public, max-age=60';
+
+        parent::__construct('', $status, $headers);
+
+        // Defer reading file until sendContent to avoid memory usage.
+    }
+
+    public function getFilePath(): string
+    {
+        return $this->filePath;
+    }
+
+    public function sendContent(): static
+    {
+        // Output file contents directly
+        readfile($this->filePath);
+        return $this;
+    }
+
+    private static function guessMimeType(string $filePath): ?string
+    {
+        $ext = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
+        return match ($ext) {
+            'html', 'htm' => 'text/html; charset=UTF-8',
+            'css' => 'text/css; charset=UTF-8',
+            'js' => 'application/javascript; charset=UTF-8',
+            'json' => 'application/json; charset=UTF-8',
+            'png' => 'image/png',
+            'jpg', 'jpeg' => 'image/jpeg',
+            'gif' => 'image/gif',
+            'svg' => 'image/svg+xml',
+            'txt' => 'text/plain; charset=UTF-8',
+            'xml' => 'application/xml; charset=UTF-8',
+            default => self::finfoMime($filePath),
+        };
+    }
+
+    private static function finfoMime(string $filePath): ?string
+    {
+        if (function_exists('finfo_open')) {
+            $f = finfo_open(FILEINFO_MIME_TYPE);
+            if ($f) {
+                $mime = finfo_file($f, $filePath) ?: null;
+                finfo_close($f);
+                return $mime;
+            }
+        }
+        return null;
+    }
+}
diff --git a/core/lib/Http/Response/JsonResponse.php b/core/lib/Http/Response/JsonResponse.php
new file mode 100644
index 0000000..45c04de
--- /dev/null
+++ b/core/lib/Http/Response/JsonResponse.php
@@ -0,0 +1,189 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Response;
+
+/**
+ * Response represents an HTTP response in JSON format.
+ *
+ * Note that this class does not force the returned JSON content to be an
+ * object. It is however recommended that you do return an object as it
+ * protects yourself against XSSI and JSON-JavaScript Hijacking.
+ *
+ * @see https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/AJAX_Security_Cheat_Sheet.md#always-return-json-with-an-object-on-the-outside
+ *
+ * @author Igor Wiedler <igor@wiedler.ch>
+ */
+class JsonResponse extends Response
+{
+    protected mixed $data;
+    protected ?string $callback = null;
+
+    // Encode <, >, ', &, and " characters in the JSON, making it also safe to be embedded into HTML.
+    // 15 === JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_AMP | JSON_HEX_QUOT
+    public const DEFAULT_ENCODING_OPTIONS = 15;
+
+    protected int $encodingOptions = self::DEFAULT_ENCODING_OPTIONS;
+
+    /**
+     * @param bool $json If the data is already a JSON string
+     */
+    public function __construct(mixed $data = null, int $status = 200, array $headers = [], bool $json = false)
+    {
+        parent::__construct('', $status, $headers);
+
+        if ($json && !\is_string($data) && !is_numeric($data) && !$data instanceof \Stringable) {
+            throw new \TypeError(\sprintf('"%s": If $json is set to true, argument $data must be a string or object implementing __toString(), "%s" given.', __METHOD__, get_debug_type($data)));
+        }
+
+        $data ??= new \ArrayObject();
+
+        $json ? $this->setJson($data) : $this->setData($data);
+    }
+
+    /**
+     * Factory method for chainability.
+     *
+     * Example:
+     *
+     *     return JsonResponse::fromJsonString('{"key": "value"}')
+     *         ->setSharedMaxAge(300);
+     *
+     * @param string $data    The JSON response string
+     * @param int    $status  The response status code (200 "OK" by default)
+     * @param array  $headers An array of response headers
+     */
+    public static function fromJsonString(string $data, int $status = 200, array $headers = []): static
+    {
+        return new static($data, $status, $headers, true);
+    }
+
+    /**
+     * Sets the JSONP callback.
+     *
+     * @param string|null $callback The JSONP callback or null to use none
+     *
+     * @return $this
+     *
+     * @throws \InvalidArgumentException When the callback name is not valid
+     */
+    public function setCallback(?string $callback): static
+    {
+        if (null !== $callback) {
+            // partially taken from https://geekality.net/2011/08/03/valid-javascript-identifier/
+            // partially taken from https://github.com/willdurand/JsonpCallbackValidator
+            //      JsonpCallbackValidator is released under the MIT License. See https://github.com/willdurand/JsonpCallbackValidator/blob/v1.1.0/LICENSE for details.
+            //      (c) William Durand <william.durand1@gmail.com>
+            $pattern = '/^[$_\p{L}][$_\p{L}\p{Mn}\p{Mc}\p{Nd}\p{Pc}\x{200C}\x{200D}]*(?:\[(?:"(?:\\\.|[^"\\\])*"|\'(?:\\\.|[^\'\\\])*\'|\d+)\])*?$/u';
+            $reserved = [
+                'break', 'do', 'instanceof', 'typeof', 'case', 'else', 'new', 'var', 'catch', 'finally', 'return', 'void', 'continue', 'for', 'switch', 'while',
+                'debugger', 'function', 'this', 'with', 'default', 'if', 'throw', 'delete', 'in', 'try', 'class', 'enum', 'extends', 'super',  'const', 'export',
+                'import', 'implements', 'let', 'private', 'public', 'yield', 'interface', 'package', 'protected', 'static', 'null', 'true', 'false',
+            ];
+            $parts = explode('.', $callback);
+            foreach ($parts as $part) {
+                if (!preg_match($pattern, $part) || \in_array($part, $reserved, true)) {
+                    throw new \InvalidArgumentException('The callback name is not valid.');
+                }
+            }
+        }
+
+        $this->callback = $callback;
+
+        return $this->update();
+    }
+
+    /**
+     * Sets a raw string containing a JSON document to be sent.
+     *
+     * @return $this
+     */
+    public function setJson(string $json): static
+    {
+        $this->data = $json;
+
+        return $this->update();
+    }
+
+    /**
+     * Sets the data to be sent as JSON.
+     *
+     * @return $this
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function setData(mixed $data = []): static
+    {
+        try {
+            $data = json_encode($data, $this->encodingOptions);
+        } catch (\Exception $e) {
+            if ('Exception' === $e::class && str_starts_with($e->getMessage(), 'Failed calling ')) {
+                throw $e->getPrevious() ?: $e;
+            }
+            throw $e;
+        }
+
+        if (\JSON_THROW_ON_ERROR & $this->encodingOptions) {
+            return $this->setJson($data);
+        }
+
+        if (\JSON_ERROR_NONE !== json_last_error()) {
+            throw new \InvalidArgumentException(json_last_error_msg());
+        }
+
+        return $this->setJson($data);
+    }
+
+    /**
+     * Returns options used while encoding data to JSON.
+     */
+    public function getEncodingOptions(): int
+    {
+        return $this->encodingOptions;
+    }
+
+    /**
+     * Sets options used while encoding data to JSON.
+     *
+     * @return $this
+     */
+    public function setEncodingOptions(int $encodingOptions): static
+    {
+        $this->encodingOptions = $encodingOptions;
+
+        return $this->setData(json_decode($this->data));
+    }
+
+    /**
+     * Updates the content and headers according to the JSON data and callback.
+     *
+     * @return $this
+     */
+    protected function update(): static
+    {
+        if (null !== $this->callback) {
+            // Not using application/javascript for compatibility reasons with older browsers.
+            $this->headers->set('Content-Type', 'text/javascript');
+
+            return $this->setContent(\sprintf('/**/%s(%s);', $this->callback, $this->data));
+        }
+
+        // Only set the header when there is none or when it equals 'text/javascript' (from a previous update with callback)
+        // in order to not overwrite a custom definition.
+        if (!$this->headers->has('Content-Type') || 'text/javascript' === $this->headers->get('Content-Type')) {
+            $this->headers->set('Content-Type', 'application/json');
+        }
+
+        return $this->setContent($this->data);
+    }
+}
diff --git a/core/lib/Http/Response/RedirectResponse.php b/core/lib/Http/Response/RedirectResponse.php
new file mode 100644
index 0000000..7c6f802
--- /dev/null
+++ b/core/lib/Http/Response/RedirectResponse.php
@@ -0,0 +1,94 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Response;
+
+/**
+ * RedirectResponse represents an HTTP response doing a redirect.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ */
+class RedirectResponse extends Response
+{
+    protected string $targetUrl;
+
+    /**
+     * Creates a redirect response so that it conforms to the rules defined for a redirect status code.
+     *
+     * @param string $url     The URL to redirect to. The URL should be a full URL, with schema etc.,
+     *                        but practically every browser redirects on paths only as well
+     * @param int    $status  The HTTP status code (302 "Found" by default)
+     * @param array  $headers The headers (Location is always set to the given URL)
+     *
+     * @throws \InvalidArgumentException
+     *
+     * @see https://tools.ietf.org/html/rfc2616#section-10.3
+     */
+    public function __construct(string $url, int $status = 302, array $headers = [])
+    {
+        parent::__construct('', $status, $headers);
+
+        $this->setTargetUrl($url);
+
+        if (!$this->isRedirect()) {
+            throw new \InvalidArgumentException(\sprintf('The HTTP status code is not a redirect ("%s" given).', $status));
+        }
+
+        if (301 == $status && !\array_key_exists('cache-control', array_change_key_case($headers, \CASE_LOWER))) {
+            $this->headers->remove('cache-control');
+        }
+    }
+
+    /**
+     * Returns the target URL.
+     */
+    public function getTargetUrl(): string
+    {
+        return $this->targetUrl;
+    }
+
+    /**
+     * Sets the redirect target of this response.
+     *
+     * @return $this
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function setTargetUrl(string $url): static
+    {
+        if ('' === $url) {
+            throw new \InvalidArgumentException('Cannot redirect to an empty URL.');
+        }
+
+        $this->targetUrl = $url;
+
+        $this->setContent(
+            \sprintf('<!DOCTYPE html>
+<html>
+    <head>
+        <meta charset="UTF-8" />
+        <meta http-equiv="refresh" content="0;url=\'%1$s\'" />
+
+        <title>Redirecting to %1$s</title>
+    </head>
+    <body>
+        Redirecting to <a href="%1$s">%1$s</a>.
+    </body>
+</html>', htmlspecialchars($url, \ENT_QUOTES, 'UTF-8')));
+
+        $this->headers->set('Location', $url);
+        $this->headers->set('Content-Type', 'text/html; charset=utf-8');
+
+        return $this;
+    }
+}
diff --git a/core/lib/Http/Response/Response.php b/core/lib/Http/Response/Response.php
new file mode 100644
index 0000000..8ea97e7
--- /dev/null
+++ b/core/lib/Http/Response/Response.php
@@ -0,0 +1,1336 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Response;
+
+use KTXC\Http\Request\Request;
+
+// Help opcache.preload discover always-needed symbols
+class_exists(ResponseHeaderParameters::class);
+
+/**
+ * Response represents an HTTP response.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ */
+class Response
+{
+    public const HTTP_CONTINUE = 100;
+    public const HTTP_SWITCHING_PROTOCOLS = 101;
+    public const HTTP_PROCESSING = 102;            // RFC2518
+    public const HTTP_EARLY_HINTS = 103;           // RFC8297
+    public const HTTP_OK = 200;
+    public const HTTP_CREATED = 201;
+    public const HTTP_ACCEPTED = 202;
+    public const HTTP_NON_AUTHORITATIVE_INFORMATION = 203;
+    public const HTTP_NO_CONTENT = 204;
+    public const HTTP_RESET_CONTENT = 205;
+    public const HTTP_PARTIAL_CONTENT = 206;
+    public const HTTP_MULTI_STATUS = 207;          // RFC4918
+    public const HTTP_ALREADY_REPORTED = 208;      // RFC5842
+    public const HTTP_IM_USED = 226;               // RFC3229
+    public const HTTP_MULTIPLE_CHOICES = 300;
+    public const HTTP_MOVED_PERMANENTLY = 301;
+    public const HTTP_FOUND = 302;
+    public const HTTP_SEE_OTHER = 303;
+    public const HTTP_NOT_MODIFIED = 304;
+    public const HTTP_USE_PROXY = 305;
+    public const HTTP_RESERVED = 306;
+    public const HTTP_TEMPORARY_REDIRECT = 307;
+    public const HTTP_PERMANENTLY_REDIRECT = 308;  // RFC7238
+    public const HTTP_BAD_REQUEST = 400;
+    public const HTTP_UNAUTHORIZED = 401;
+    public const HTTP_PAYMENT_REQUIRED = 402;
+    public const HTTP_FORBIDDEN = 403;
+    public const HTTP_NOT_FOUND = 404;
+    public const HTTP_METHOD_NOT_ALLOWED = 405;
+    public const HTTP_NOT_ACCEPTABLE = 406;
+    public const HTTP_PROXY_AUTHENTICATION_REQUIRED = 407;
+    public const HTTP_REQUEST_TIMEOUT = 408;
+    public const HTTP_CONFLICT = 409;
+    public const HTTP_GONE = 410;
+    public const HTTP_LENGTH_REQUIRED = 411;
+    public const HTTP_PRECONDITION_FAILED = 412;
+    public const HTTP_REQUEST_ENTITY_TOO_LARGE = 413;
+    public const HTTP_REQUEST_URI_TOO_LONG = 414;
+    public const HTTP_UNSUPPORTED_MEDIA_TYPE = 415;
+    public const HTTP_REQUESTED_RANGE_NOT_SATISFIABLE = 416;
+    public const HTTP_EXPECTATION_FAILED = 417;
+    public const HTTP_I_AM_A_TEAPOT = 418;                                               // RFC2324
+    public const HTTP_MISDIRECTED_REQUEST = 421;                                         // RFC7540
+    public const HTTP_UNPROCESSABLE_ENTITY = 422;                                        // RFC4918
+    public const HTTP_LOCKED = 423;                                                      // RFC4918
+    public const HTTP_FAILED_DEPENDENCY = 424;                                           // RFC4918
+    public const HTTP_TOO_EARLY = 425;                                                   // RFC-ietf-httpbis-replay-04
+    public const HTTP_UPGRADE_REQUIRED = 426;                                            // RFC2817
+    public const HTTP_PRECONDITION_REQUIRED = 428;                                       // RFC6585
+    public const HTTP_TOO_MANY_REQUESTS = 429;                                           // RFC6585
+    public const HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE = 431;                             // RFC6585
+    public const HTTP_UNAVAILABLE_FOR_LEGAL_REASONS = 451;                               // RFC7725
+    public const HTTP_INTERNAL_SERVER_ERROR = 500;
+    public const HTTP_NOT_IMPLEMENTED = 501;
+    public const HTTP_BAD_GATEWAY = 502;
+    public const HTTP_SERVICE_UNAVAILABLE = 503;
+    public const HTTP_GATEWAY_TIMEOUT = 504;
+    public const HTTP_VERSION_NOT_SUPPORTED = 505;
+    public const HTTP_VARIANT_ALSO_NEGOTIATES_EXPERIMENTAL = 506;                        // RFC2295
+    public const HTTP_INSUFFICIENT_STORAGE = 507;                                        // RFC4918
+    public const HTTP_LOOP_DETECTED = 508;                                               // RFC5842
+    public const HTTP_NOT_EXTENDED = 510;                                                // RFC2774
+    public const HTTP_NETWORK_AUTHENTICATION_REQUIRED = 511;                             // RFC6585
+
+    /**
+     * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
+     */
+    private const HTTP_RESPONSE_CACHE_CONTROL_DIRECTIVES = [
+        'must_revalidate' => false,
+        'no_cache' => false,
+        'no_store' => false,
+        'no_transform' => false,
+        'public' => false,
+        'private' => false,
+        'proxy_revalidate' => false,
+        'max_age' => true,
+        's_maxage' => true,
+        'stale_if_error' => true,         // RFC5861
+        'stale_while_revalidate' => true, // RFC5861
+        'immutable' => false,
+        'last_modified' => true,
+        'etag' => true,
+    ];
+    
+    /**
+     * Default security headers applied to all responses.
+     * Can be overridden by passing headers to the constructor or setting them after.
+     */
+    private const DEFAULT_SECURITY_HEADERS = [
+        'X-Frame-Options' => 'DENY',
+        'X-Content-Type-Options' => 'nosniff',
+        'X-XSS-Protection' => '1; mode=block',
+        'Referrer-Policy' => 'strict-origin-when-cross-origin',
+        'Permissions-Policy' => 'geolocation=(), microphone=(), camera=()',
+    ];
+
+    public ResponseHeaderParameters $headers;
+
+    protected string $content;
+    protected string $version;
+    protected int $statusCode;
+    protected string $statusText;
+    protected ?string $charset = null;
+
+    /**
+     * Status codes translation table.
+     *
+     * The list of codes is complete according to the
+     * {@link https://www.iana.org/assignments/http-status-codes/http-status-codes.xhtml Hypertext Transfer Protocol (HTTP) Status Code Registry}
+     * (last updated 2021-10-01).
+     *
+     * Unless otherwise noted, the status code is defined in RFC2616.
+     *
+     * @var array<int, string>
+     */
+    public static array $statusTexts = [
+        100 => 'Continue',
+        101 => 'Switching Protocols',
+        102 => 'Processing',            // RFC2518
+        103 => 'Early Hints',
+        200 => 'OK',
+        201 => 'Created',
+        202 => 'Accepted',
+        203 => 'Non-Authoritative Information',
+        204 => 'No Content',
+        205 => 'Reset Content',
+        206 => 'Partial Content',
+        207 => 'Multi-Status',          // RFC4918
+        208 => 'Already Reported',      // RFC5842
+        226 => 'IM Used',               // RFC3229
+        300 => 'Multiple Choices',
+        301 => 'Moved Permanently',
+        302 => 'Found',
+        303 => 'See Other',
+        304 => 'Not Modified',
+        305 => 'Use Proxy',
+        307 => 'Temporary Redirect',
+        308 => 'Permanent Redirect',    // RFC7238
+        400 => 'Bad Request',
+        401 => 'Unauthorized',
+        402 => 'Payment Required',
+        403 => 'Forbidden',
+        404 => 'Not Found',
+        405 => 'Method Not Allowed',
+        406 => 'Not Acceptable',
+        407 => 'Proxy Authentication Required',
+        408 => 'Request Timeout',
+        409 => 'Conflict',
+        410 => 'Gone',
+        411 => 'Length Required',
+        412 => 'Precondition Failed',
+        413 => 'Content Too Large',                                           // RFC-ietf-httpbis-semantics
+        414 => 'URI Too Long',
+        415 => 'Unsupported Media Type',
+        416 => 'Range Not Satisfiable',
+        417 => 'Expectation Failed',
+        418 => 'I\'m a teapot',                                               // RFC2324
+        421 => 'Misdirected Request',                                         // RFC7540
+        422 => 'Unprocessable Content',                                       // RFC-ietf-httpbis-semantics
+        423 => 'Locked',                                                      // RFC4918
+        424 => 'Failed Dependency',                                           // RFC4918
+        425 => 'Too Early',                                                   // RFC-ietf-httpbis-replay-04
+        426 => 'Upgrade Required',                                            // RFC2817
+        428 => 'Precondition Required',                                       // RFC6585
+        429 => 'Too Many Requests',                                           // RFC6585
+        431 => 'Request Header Fields Too Large',                             // RFC6585
+        451 => 'Unavailable For Legal Reasons',                               // RFC7725
+        500 => 'Internal Server Error',
+        501 => 'Not Implemented',
+        502 => 'Bad Gateway',
+        503 => 'Service Unavailable',
+        504 => 'Gateway Timeout',
+        505 => 'HTTP Version Not Supported',
+        506 => 'Variant Also Negotiates',                                     // RFC2295
+        507 => 'Insufficient Storage',                                        // RFC4918
+        508 => 'Loop Detected',                                               // RFC5842
+        510 => 'Not Extended',                                                // RFC2774
+        511 => 'Network Authentication Required',                             // RFC6585
+    ];
+
+    /**
+     * Tracks headers already sent in informational responses.
+     */
+    private array $sentHeaders;
+
+    /**
+     * @param int $status The HTTP status code (200 "OK" by default)
+     *
+     * @throws \InvalidArgumentException When the HTTP status code is not valid
+     */
+    public function __construct(?string $content = '', int $status = 200, array $headers = [])
+    {
+        // Merge default security headers with provided headers (provided headers take precedence)
+        $headers = array_merge(self::DEFAULT_SECURITY_HEADERS, $headers);
+        
+        $this->headers = new ResponseHeaderParameters($headers);
+        $this->setContent($content);
+        $this->setStatusCode($status);
+        $this->setProtocolVersion('1.0');
+    }
+
+    /**
+     * Returns the Response as an HTTP string.
+     *
+     * The string representation of the Response is the same as the
+     * one that will be sent to the client only if the prepare() method
+     * has been called before.
+     *
+     * @see prepare()
+     */
+    public function __toString(): string
+    {
+        return
+            \sprintf('HTTP/%s %s %s', $this->version, $this->statusCode, $this->statusText)."\r\n".
+            $this->headers."\r\n".
+            $this->getContent();
+    }
+
+    /**
+     * Clones the current Response instance.
+     */
+    public function __clone()
+    {
+        $this->headers = clone $this->headers;
+    }
+
+    /**
+     * Prepares the Response before it is sent to the client.
+     *
+     * This method tweaks the Response to ensure that it is
+     * compliant with RFC 2616. Most of the changes are based on
+     * the Request that is "associated" with this Response.
+     *
+     * @return $this
+     */
+    public function prepare(Request $request): static
+    {
+        $headers = $this->headers;
+
+        if ($this->isInformational() || $this->isEmpty()) {
+            $this->setContent(null);
+            $headers->remove('Content-Type');
+            $headers->remove('Content-Length');
+            // prevent PHP from sending the Content-Type header based on default_mimetype
+            ini_set('default_mimetype', '');
+        } else {
+            // Content-type based on the Request
+            if (!$headers->has('Content-Type')) {
+                $format = $request->getRequestFormat(null);
+                if (null !== $format && $mimeType = $request->getMimeType($format)) {
+                    $headers->set('Content-Type', $mimeType);
+                }
+            }
+
+            // Fix Content-Type
+            $charset = $this->charset ?: 'UTF-8';
+            if (!$headers->has('Content-Type')) {
+                $headers->set('Content-Type', 'text/html; charset='.$charset);
+            } elseif (0 === stripos($headers->get('Content-Type') ?? '', 'text/') && false === stripos($headers->get('Content-Type') ?? '', 'charset')) {
+                // add the charset
+                $headers->set('Content-Type', $headers->get('Content-Type').'; charset='.$charset);
+            }
+
+            // Fix Content-Length
+            if ($headers->has('Transfer-Encoding')) {
+                $headers->remove('Content-Length');
+            }
+
+            if ($request->isMethod('HEAD')) {
+                // cf. RFC2616 14.13
+                $length = $headers->get('Content-Length');
+                $this->setContent(null);
+                if ($length) {
+                    $headers->set('Content-Length', $length);
+                }
+            }
+        }
+
+        // Fix protocol
+        if ('HTTP/1.0' != $request->server->get('SERVER_PROTOCOL')) {
+            $this->setProtocolVersion('1.1');
+        }
+
+        // Check if we need to send extra expire info headers
+        if ('1.0' == $this->getProtocolVersion() && str_contains($headers->get('Cache-Control', ''), 'no-cache')) {
+            $headers->set('pragma', 'no-cache');
+            $headers->set('expires', (string)-1);
+        }
+
+        $this->ensureIEOverSSLCompatibility($request);
+
+        if ($request->isSecure()) {
+            foreach ($headers->getCookies() as $cookie) {
+                $cookie->setSecureDefault(true);
+            }
+        }
+
+        return $this;
+    }
+
+    /**
+     * Sends HTTP headers.
+     *
+     * @param positive-int|null $statusCode The status code to use, override the statusCode property if set and not null
+     *
+     * @return $this
+     */
+    public function sendHeaders(?int $statusCode = null): static
+    {
+        // headers have already been sent by the developer
+        if (headers_sent()) {
+            return $this;
+        }
+
+        $informationalResponse = $statusCode >= 100 && $statusCode < 200;
+        if ($informationalResponse && !\function_exists('headers_send')) {
+            // skip informational responses if not supported by the SAPI
+            return $this;
+        }
+
+        // headers
+        foreach ($this->headers->allPreserveCaseWithoutCookies() as $name => $values) {
+            // As recommended by RFC 8297, PHP automatically copies headers from previous 103 responses, we need to deal with that if headers changed
+            $previousValues = $this->sentHeaders[$name] ?? null;
+            if ($previousValues === $values) {
+                // Header already sent in a previous response, it will be automatically copied in this response by PHP
+                continue;
+            }
+
+            $replace = 0 === strcasecmp($name, 'Content-Type');
+
+            if (null !== $previousValues && array_diff($previousValues, $values)) {
+                header_remove($name);
+                $previousValues = null;
+            }
+
+            $newValues = null === $previousValues ? $values : array_diff($values, $previousValues);
+
+            foreach ($newValues as $value) {
+                header($name.': '.$value, $replace, $this->statusCode);
+            }
+
+            if ($informationalResponse) {
+                $this->sentHeaders[$name] = $values;
+            }
+        }
+
+        // cookies
+        foreach ($this->headers->getCookies() as $cookie) {
+            header('Set-Cookie: '.$cookie, false, $this->statusCode);
+        }
+
+        if ($informationalResponse) {
+            headers_send($statusCode);
+
+            return $this;
+        }
+
+        $statusCode ??= $this->statusCode;
+
+        // status
+        header(\sprintf('HTTP/%s %s %s', $this->version, $statusCode, $this->statusText), true, $statusCode);
+
+        return $this;
+    }
+
+    /**
+     * Sends content for the current web response.
+     *
+     * @return $this
+     */
+    public function sendContent(): static
+    {
+        echo $this->content;
+
+        return $this;
+    }
+
+    /**
+     * Sends HTTP headers and content.
+     *
+     * @param bool $flush Whether output buffers should be flushed
+     *
+     * @return $this
+     */
+    public function send(bool $flush = true): static
+    {
+        $this->sendHeaders();
+        $this->sendContent();
+
+        if (!$flush) {
+            return $this;
+        }
+
+        if (\function_exists('fastcgi_finish_request')) {
+            fastcgi_finish_request();
+        } elseif (\function_exists('litespeed_finish_request')) {
+            litespeed_finish_request();
+        } elseif (!\in_array(\PHP_SAPI, ['cli', 'phpdbg', 'embed'], true)) {
+            static::closeOutputBuffers(0, true);
+            flush();
+        }
+
+        return $this;
+    }
+
+    /**
+     * Sets the response content.
+     *
+     * @return $this
+     */
+    public function setContent(?string $content): static
+    {
+        $this->content = $content ?? '';
+
+        return $this;
+    }
+
+    /**
+     * Gets the current response content.
+     */
+    public function getContent(): string|false
+    {
+        return $this->content;
+    }
+
+    /**
+     * Sets the HTTP protocol version (1.0 or 1.1).
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setProtocolVersion(string $version): static
+    {
+        $this->version = $version;
+
+        return $this;
+    }
+
+    /**
+     * Gets the HTTP protocol version.
+     *
+     * @final
+     */
+    public function getProtocolVersion(): string
+    {
+        return $this->version;
+    }
+
+    /**
+     * Sets the response status code.
+     *
+     * If the status text is null it will be automatically populated for the known
+     * status codes and left empty otherwise.
+     *
+     * @return $this
+     *
+     * @throws \InvalidArgumentException When the HTTP status code is not valid
+     *
+     * @final
+     */
+    public function setStatusCode(int $code, ?string $text = null): static
+    {
+        $this->statusCode = $code;
+        if ($this->isInvalid()) {
+            throw new \InvalidArgumentException(\sprintf('The HTTP status code "%s" is not valid.', $code));
+        }
+
+        if (null === $text) {
+            $this->statusText = self::$statusTexts[$code] ?? 'unknown status';
+
+            return $this;
+        }
+
+        $this->statusText = $text;
+
+        return $this;
+    }
+
+    /**
+     * Retrieves the status code for the current web response.
+     *
+     * @final
+     */
+    public function getStatusCode(): int
+    {
+        return $this->statusCode;
+    }
+
+    /**
+     * Sets the response charset.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setCharset(string $charset): static
+    {
+        $this->charset = $charset;
+
+        return $this;
+    }
+
+    /**
+     * Retrieves the response charset.
+     *
+     * @final
+     */
+    public function getCharset(): ?string
+    {
+        return $this->charset;
+    }
+
+    /**
+     * Returns true if the response may safely be kept in a shared (surrogate) cache.
+     *
+     * Responses marked "private" with an explicit Cache-Control directive are
+     * considered uncacheable.
+     *
+     * Responses with neither a freshness lifetime (Expires, max-age) nor cache
+     * validator (Last-Modified, ETag) are considered uncacheable because there is
+     * no way to tell when or how to remove them from the cache.
+     *
+     * Note that RFC 7231 and RFC 7234 possibly allow for a more permissive implementation,
+     * for example "status codes that are defined as cacheable by default [...]
+     * can be reused by a cache with heuristic expiration unless otherwise indicated"
+     * (https://tools.ietf.org/html/rfc7231#section-6.1)
+     *
+     * @final
+     */
+    public function isCacheable(): bool
+    {
+        if (!\in_array($this->statusCode, [200, 203, 300, 301, 302, 404, 410])) {
+            return false;
+        }
+
+        if ($this->headers->hasCacheControlDirective('no-store') || $this->headers->getCacheControlDirective('private')) {
+            return false;
+        }
+
+        return $this->isValidateable() || $this->isFresh();
+    }
+
+    /**
+     * Returns true if the response is "fresh".
+     *
+     * Fresh responses may be served from cache without any interaction with the
+     * origin. A response is considered fresh when it includes a Cache-Control/max-age
+     * indicator or Expires header and the calculated age is less than the freshness lifetime.
+     *
+     * @final
+     */
+    public function isFresh(): bool
+    {
+        return $this->getTtl() > 0;
+    }
+
+    /**
+     * Returns true if the response includes headers that can be used to validate
+     * the response with the origin server using a conditional GET request.
+     *
+     * @final
+     */
+    public function isValidateable(): bool
+    {
+        return $this->headers->has('Last-Modified') || $this->headers->has('ETag');
+    }
+
+    /**
+     * Marks the response as "private".
+     *
+     * It makes the response ineligible for serving other clients.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setPrivate(): static
+    {
+        $this->headers->removeCacheControlDirective('public');
+        $this->headers->addCacheControlDirective('private');
+
+        return $this;
+    }
+
+    /**
+     * Marks the response as "public".
+     *
+     * It makes the response eligible for serving other clients.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setPublic(): static
+    {
+        $this->headers->addCacheControlDirective('public');
+        $this->headers->removeCacheControlDirective('private');
+
+        return $this;
+    }
+
+    /**
+     * Marks the response as "immutable".
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setImmutable(bool $immutable = true): static
+    {
+        if ($immutable) {
+            $this->headers->addCacheControlDirective('immutable');
+        } else {
+            $this->headers->removeCacheControlDirective('immutable');
+        }
+
+        return $this;
+    }
+
+    /**
+     * Returns true if the response is marked as "immutable".
+     *
+     * @final
+     */
+    public function isImmutable(): bool
+    {
+        return $this->headers->hasCacheControlDirective('immutable');
+    }
+
+    /**
+     * Returns true if the response must be revalidated by shared caches once it has become stale.
+     *
+     * This method indicates that the response must not be served stale by a
+     * cache in any circumstance without first revalidating with the origin.
+     * When present, the TTL of the response should not be overridden to be
+     * greater than the value provided by the origin.
+     *
+     * @final
+     */
+    public function mustRevalidate(): bool
+    {
+        return $this->headers->hasCacheControlDirective('must-revalidate') || $this->headers->hasCacheControlDirective('proxy-revalidate');
+    }
+
+    /**
+     * Returns the Date header as a DateTime instance.
+     *
+     * @throws \RuntimeException When the header is not parseable
+     *
+     * @final
+     */
+    public function getDate(): ?\DateTimeImmutable
+    {
+        return $this->headers->getDate('Date');
+    }
+
+    /**
+     * Sets the Date header.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setDate(\DateTimeInterface $date): static
+    {
+        $date = \DateTimeImmutable::createFromInterface($date);
+        $date = $date->setTimezone(new \DateTimeZone('UTC'));
+        $this->headers->set('Date', $date->format('D, d M Y H:i:s').' GMT');
+
+        return $this;
+    }
+
+    /**
+     * Returns the age of the response in seconds.
+     *
+     * @final
+     */
+    public function getAge(): int
+    {
+        if (null !== $age = $this->headers->get('Age')) {
+            return (int) $age;
+        }
+
+        return max(time() - (int) $this->getDate()->format('U'), 0);
+    }
+
+    /**
+     * Marks the response stale by setting the Age header to be equal to the maximum age of the response.
+     *
+     * @return $this
+     */
+    public function expire(): static
+    {
+        if ($this->isFresh()) {
+            $this->headers->set('Age', $this->getMaxAge());
+            $this->headers->remove('Expires');
+        }
+
+        return $this;
+    }
+
+    /**
+     * Returns the value of the Expires header as a DateTime instance.
+     *
+     * @final
+     */
+    public function getExpires(): ?\DateTimeImmutable
+    {
+        try {
+            return $this->headers->getDate('Expires');
+        } catch (\RuntimeException) {
+            // according to RFC 2616 invalid date formats (e.g. "0" and "-1") must be treated as in the past
+            return \DateTimeImmutable::createFromFormat('U', (string)(time() - 172800));
+        }
+    }
+
+    /**
+     * Sets the Expires HTTP header with a DateTime instance.
+     *
+     * Passing null as value will remove the header.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setExpires(?\DateTimeInterface $date): static
+    {
+        if (null === $date) {
+            $this->headers->remove('Expires');
+
+            return $this;
+        }
+
+        $date = \DateTimeImmutable::createFromInterface($date);
+        $date = $date->setTimezone(new \DateTimeZone('UTC'));
+        $this->headers->set('Expires', $date->format('D, d M Y H:i:s').' GMT');
+
+        return $this;
+    }
+
+    /**
+     * Returns the number of seconds after the time specified in the response's Date
+     * header when the response should no longer be considered fresh.
+     *
+     * First, it checks for a s-maxage directive, then a max-age directive, and then it falls
+     * back on an expires header. It returns null when no maximum age can be established.
+     *
+     * @final
+     */
+    public function getMaxAge(): ?int
+    {
+        if ($this->headers->hasCacheControlDirective('s-maxage')) {
+            return (int) $this->headers->getCacheControlDirective('s-maxage');
+        }
+
+        if ($this->headers->hasCacheControlDirective('max-age')) {
+            return (int) $this->headers->getCacheControlDirective('max-age');
+        }
+
+        if (null !== $expires = $this->getExpires()) {
+            $maxAge = (int) $expires->format('U') - (int) $this->getDate()->format('U');
+
+            return max($maxAge, 0);
+        }
+
+        return null;
+    }
+
+    /**
+     * Sets the number of seconds after which the response should no longer be considered fresh.
+     *
+     * This method sets the Cache-Control max-age directive.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setMaxAge(int $value): static
+    {
+        $this->headers->addCacheControlDirective('max-age', (string)$value);
+
+        return $this;
+    }
+
+    /**
+     * Sets the number of seconds after which the response should no longer be returned by shared caches when backend is down.
+     *
+     * This method sets the Cache-Control stale-if-error directive.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setStaleIfError(int $value): static
+    {
+        $this->headers->addCacheControlDirective('stale-if-error', (string)$value);
+
+        return $this;
+    }
+
+    /**
+     * Sets the number of seconds after which the response should no longer return stale content by shared caches.
+     *
+     * This method sets the Cache-Control stale-while-revalidate directive.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setStaleWhileRevalidate(int $value): static
+    {
+        $this->headers->addCacheControlDirective('stale-while-revalidate', (string)$value);
+
+        return $this;
+    }
+
+    /**
+     * Sets the number of seconds after which the response should no longer be considered fresh by shared caches.
+     *
+     * This method sets the Cache-Control s-maxage directive.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setSharedMaxAge(int $value): static
+    {
+        $this->setPublic();
+        $this->headers->addCacheControlDirective('s-maxage', (string)$value);
+
+        return $this;
+    }
+
+    /**
+     * Returns the response's time-to-live in seconds.
+     *
+     * It returns null when no freshness information is present in the response.
+     *
+     * When the response's TTL is 0, the response may not be served from cache without first
+     * revalidating with the origin.
+     *
+     * @final
+     */
+    public function getTtl(): ?int
+    {
+        $maxAge = $this->getMaxAge();
+
+        return null !== $maxAge ? max($maxAge - $this->getAge(), 0) : null;
+    }
+
+    /**
+     * Sets the response's time-to-live for shared caches in seconds.
+     *
+     * This method adjusts the Cache-Control/s-maxage directive.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setTtl(int $seconds): static
+    {
+        $this->setSharedMaxAge($this->getAge() + $seconds);
+
+        return $this;
+    }
+
+    /**
+     * Sets the response's time-to-live for private/client caches in seconds.
+     *
+     * This method adjusts the Cache-Control/max-age directive.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setClientTtl(int $seconds): static
+    {
+        $this->setMaxAge($this->getAge() + $seconds);
+
+        return $this;
+    }
+
+    /**
+     * Returns the Last-Modified HTTP header as a DateTime instance.
+     *
+     * @throws \RuntimeException When the HTTP header is not parseable
+     *
+     * @final
+     */
+    public function getLastModified(): ?\DateTimeImmutable
+    {
+        return $this->headers->getDate('Last-Modified');
+    }
+
+    /**
+     * Sets the Last-Modified HTTP header with a DateTime instance.
+     *
+     * Passing null as value will remove the header.
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setLastModified(?\DateTimeInterface $date): static
+    {
+        if (null === $date) {
+            $this->headers->remove('Last-Modified');
+
+            return $this;
+        }
+
+        $date = \DateTimeImmutable::createFromInterface($date);
+        $date = $date->setTimezone(new \DateTimeZone('UTC'));
+        $this->headers->set('Last-Modified', $date->format('D, d M Y H:i:s').' GMT');
+
+        return $this;
+    }
+
+    /**
+     * Returns the literal value of the ETag HTTP header.
+     *
+     * @final
+     */
+    public function getEtag(): ?string
+    {
+        return $this->headers->get('ETag');
+    }
+
+    /**
+     * Sets the ETag value.
+     *
+     * @param string|null $etag The ETag unique identifier or null to remove the header
+     * @param bool        $weak Whether you want a weak ETag or not
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setEtag(?string $etag, bool $weak = false): static
+    {
+        if (null === $etag) {
+            $this->headers->remove('Etag');
+        } else {
+            if (!str_starts_with($etag, '"')) {
+                $etag = '"'.$etag.'"';
+            }
+
+            $this->headers->set('ETag', (true === $weak ? 'W/' : '').$etag);
+        }
+
+        return $this;
+    }
+
+    /**
+     * Sets the response's cache headers (validation and/or expiration).
+     *
+     * Available options are: must_revalidate, no_cache, no_store, no_transform, public, private, proxy_revalidate, max_age, s_maxage, immutable, last_modified and etag.
+     *
+     * @return $this
+     *
+     * @throws \InvalidArgumentException
+     *
+     * @final
+     */
+    public function setCache(array $options): static
+    {
+        if ($diff = array_diff(array_keys($options), array_keys(self::HTTP_RESPONSE_CACHE_CONTROL_DIRECTIVES))) {
+            throw new \InvalidArgumentException(\sprintf('Response does not support the following options: "%s".', implode('", "', $diff)));
+        }
+
+        if (isset($options['etag'])) {
+            $this->setEtag($options['etag']);
+        }
+
+        if (isset($options['last_modified'])) {
+            $this->setLastModified($options['last_modified']);
+        }
+
+        if (isset($options['max_age'])) {
+            $this->setMaxAge($options['max_age']);
+        }
+
+        if (isset($options['s_maxage'])) {
+            $this->setSharedMaxAge($options['s_maxage']);
+        }
+
+        if (isset($options['stale_while_revalidate'])) {
+            $this->setStaleWhileRevalidate($options['stale_while_revalidate']);
+        }
+
+        if (isset($options['stale_if_error'])) {
+            $this->setStaleIfError($options['stale_if_error']);
+        }
+
+        foreach (self::HTTP_RESPONSE_CACHE_CONTROL_DIRECTIVES as $directive => $hasValue) {
+            if (!$hasValue && isset($options[$directive])) {
+                if ($options[$directive]) {
+                    $this->headers->addCacheControlDirective(str_replace('_', '-', $directive));
+                } else {
+                    $this->headers->removeCacheControlDirective(str_replace('_', '-', $directive));
+                }
+            }
+        }
+
+        if (isset($options['public'])) {
+            if ($options['public']) {
+                $this->setPublic();
+            } else {
+                $this->setPrivate();
+            }
+        }
+
+        if (isset($options['private'])) {
+            if ($options['private']) {
+                $this->setPrivate();
+            } else {
+                $this->setPublic();
+            }
+        }
+
+        return $this;
+    }
+
+    /**
+     * Modifies the response so that it conforms to the rules defined for a 304 status code.
+     *
+     * This sets the status, removes the body, and discards any headers
+     * that MUST NOT be included in 304 responses.
+     *
+     * @return $this
+     *
+     * @see https://tools.ietf.org/html/rfc2616#section-10.3.5
+     *
+     * @final
+     */
+    public function setNotModified(): static
+    {
+        $this->setStatusCode(304);
+        $this->setContent(null);
+
+        // remove headers that MUST NOT be included with 304 Not Modified responses
+        foreach (['Allow', 'Content-Encoding', 'Content-Language', 'Content-Length', 'Content-MD5', 'Content-Type', 'Last-Modified'] as $header) {
+            $this->headers->remove($header);
+        }
+
+        return $this;
+    }
+
+    /**
+     * Returns true if the response includes a Vary header.
+     *
+     * @final
+     */
+    public function hasVary(): bool
+    {
+        return null !== $this->headers->get('Vary');
+    }
+
+    /**
+     * Returns an array of header names given in the Vary header.
+     *
+     * @final
+     */
+    public function getVary(): array
+    {
+        if (!$vary = $this->headers->all('Vary')) {
+            return [];
+        }
+
+        $ret = [];
+        foreach ($vary as $item) {
+            $ret[] = preg_split('/[\s,]+/', $item);
+        }
+
+        return array_merge([], ...$ret);
+    }
+
+    /**
+     * Sets the Vary header.
+     *
+     * @param bool $replace Whether to replace the actual value or not (true by default)
+     *
+     * @return $this
+     *
+     * @final
+     */
+    public function setVary(string|array $headers, bool $replace = true): static
+    {
+        $this->headers->set('Vary', $headers, $replace);
+
+        return $this;
+    }
+
+    /**
+     * Determines if the Response validators (ETag, Last-Modified) match
+     * a conditional value specified in the Request.
+     *
+     * If the Response is not modified, it sets the status code to 304 and
+     * removes the actual content by calling the setNotModified() method.
+     *
+     * @final
+     */
+    public function isNotModified(Request $request): bool
+    {
+        if (!$request->isMethodCacheable()) {
+            return false;
+        }
+
+        $notModified = false;
+        $lastModified = $this->headers->get('Last-Modified');
+        $modifiedSince = $request->headers->get('If-Modified-Since');
+
+        if (($ifNoneMatchEtags = $request->getETags()) && (null !== $etag = $this->getEtag())) {
+            if (0 == strncmp($etag, 'W/', 2)) {
+                $etag = substr($etag, 2);
+            }
+
+            // Use weak comparison as per https://tools.ietf.org/html/rfc7232#section-3.2.
+            foreach ($ifNoneMatchEtags as $ifNoneMatchEtag) {
+                if (0 == strncmp($ifNoneMatchEtag, 'W/', 2)) {
+                    $ifNoneMatchEtag = substr($ifNoneMatchEtag, 2);
+                }
+
+                if ($ifNoneMatchEtag === $etag || '*' === $ifNoneMatchEtag) {
+                    $notModified = true;
+                    break;
+                }
+            }
+        }
+        // Only do If-Modified-Since date comparison when If-None-Match is not present as per https://tools.ietf.org/html/rfc7232#section-3.3.
+        elseif ($modifiedSince && $lastModified) {
+            $notModified = strtotime($modifiedSince) >= strtotime($lastModified);
+        }
+
+        if ($notModified) {
+            $this->setNotModified();
+        }
+
+        return $notModified;
+    }
+
+    /**
+     * Is response invalid?
+     *
+     * @see https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html
+     *
+     * @final
+     */
+    public function isInvalid(): bool
+    {
+        return $this->statusCode < 100 || $this->statusCode >= 600;
+    }
+
+    /**
+     * Is response informative?
+     *
+     * @final
+     */
+    public function isInformational(): bool
+    {
+        return $this->statusCode >= 100 && $this->statusCode < 200;
+    }
+
+    /**
+     * Is response successful?
+     *
+     * @final
+     */
+    public function isSuccessful(): bool
+    {
+        return $this->statusCode >= 200 && $this->statusCode < 300;
+    }
+
+    /**
+     * Is the response a redirect?
+     *
+     * @final
+     */
+    public function isRedirection(): bool
+    {
+        return $this->statusCode >= 300 && $this->statusCode < 400;
+    }
+
+    /**
+     * Is there a client error?
+     *
+     * @final
+     */
+    public function isClientError(): bool
+    {
+        return $this->statusCode >= 400 && $this->statusCode < 500;
+    }
+
+    /**
+     * Was there a server side error?
+     *
+     * @final
+     */
+    public function isServerError(): bool
+    {
+        return $this->statusCode >= 500 && $this->statusCode < 600;
+    }
+
+    /**
+     * Is the response OK?
+     *
+     * @final
+     */
+    public function isOk(): bool
+    {
+        return 200 === $this->statusCode;
+    }
+
+    /**
+     * Is the response forbidden?
+     *
+     * @final
+     */
+    public function isForbidden(): bool
+    {
+        return 403 === $this->statusCode;
+    }
+
+    /**
+     * Is the response a not found error?
+     *
+     * @final
+     */
+    public function isNotFound(): bool
+    {
+        return 404 === $this->statusCode;
+    }
+
+    /**
+     * Is the response a redirect of some form?
+     *
+     * @final
+     */
+    public function isRedirect(?string $location = null): bool
+    {
+        return \in_array($this->statusCode, [201, 301, 302, 303, 307, 308]) && (null === $location ?: $location == $this->headers->get('Location'));
+    }
+
+    /**
+     * Is the response empty?
+     *
+     * @final
+     */
+    public function isEmpty(): bool
+    {
+        return \in_array($this->statusCode, [204, 304]);
+    }
+
+    /**
+     * Cleans or flushes output buffers up to target level.
+     *
+     * Resulting level can be greater than target level if a non-removable buffer has been encountered.
+     *
+     * @final
+     */
+    public static function closeOutputBuffers(int $targetLevel, bool $flush): void
+    {
+        $status = ob_get_status(true);
+        $level = \count($status);
+        $flags = \PHP_OUTPUT_HANDLER_REMOVABLE | ($flush ? \PHP_OUTPUT_HANDLER_FLUSHABLE : \PHP_OUTPUT_HANDLER_CLEANABLE);
+
+        while ($level-- > $targetLevel && ($s = $status[$level]) && (!isset($s['del']) ? !isset($s['flags']) || ($s['flags'] & $flags) === $flags : $s['del'])) {
+            if ($flush) {
+                ob_end_flush();
+            } else {
+                ob_end_clean();
+            }
+        }
+    }
+
+    /**
+     * Marks a response as safe according to RFC8674.
+     *
+     * @see https://tools.ietf.org/html/rfc8674
+     */
+    public function setContentSafe(bool $safe = true): void
+    {
+        if ($safe) {
+            $this->headers->set('Preference-Applied', 'safe');
+        } elseif ('safe' === $this->headers->get('Preference-Applied')) {
+            $this->headers->remove('Preference-Applied');
+        }
+
+        $this->setVary('Prefer', false);
+    }
+
+    /**
+     * Checks if we need to remove Cache-Control for SSL encrypted downloads when using IE < 9.
+     *
+     * @see http://support.microsoft.com/kb/323308
+     *
+     * @final
+     */
+    protected function ensureIEOverSSLCompatibility(Request $request): void
+    {
+        if (false !== stripos($this->headers->get('Content-Disposition') ?? '', 'attachment') && 1 == preg_match('/MSIE (.*?);/i', $request->server->get('HTTP_USER_AGENT') ?? '', $match) && true === $request->isSecure()) {
+            if ((int) preg_replace('/(MSIE )(.*?);/', '$2', $match[0]) < 9) {
+                $this->headers->remove('Cache-Control');
+            }
+        }
+    }
+}
diff --git a/core/lib/Http/Response/ResponseHeaderParameters.php b/core/lib/Http/Response/ResponseHeaderParameters.php
new file mode 100644
index 0000000..155b3ec
--- /dev/null
+++ b/core/lib/Http/Response/ResponseHeaderParameters.php
@@ -0,0 +1,275 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Response;
+
+use KTXC\Http\Cookie;
+use KTXC\Http\HeaderParameters;
+use KTXC\Http\HeaderUtils;
+
+/**
+ * ResponseHeaderBag is a container for Response HTTP headers.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ */
+class ResponseHeaderParameters extends HeaderParameters
+{
+    public const COOKIES_FLAT = 'flat';
+    public const COOKIES_ARRAY = 'array';
+
+    public const DISPOSITION_ATTACHMENT = 'attachment';
+    public const DISPOSITION_INLINE = 'inline';
+
+    protected array $computedCacheControl = [];
+    protected array $cookies = [];
+    protected array $headerNames = [];
+
+    public function __construct(array $headers = [])
+    {
+        parent::__construct($headers);
+
+        if (!isset($this->headers['cache-control'])) {
+            $this->set('Cache-Control', '');
+        }
+
+        /* RFC2616 - 14.18 says all Responses need to have a Date */
+        if (!isset($this->headers['date'])) {
+            $this->initDate();
+        }
+    }
+
+    /**
+     * Returns the headers, with original capitalizations.
+     */
+    public function allPreserveCase(): array
+    {
+        $headers = [];
+        foreach ($this->all() as $name => $value) {
+            $headers[$this->headerNames[$name] ?? $name] = $value;
+        }
+
+        return $headers;
+    }
+
+    public function allPreserveCaseWithoutCookies(): array
+    {
+        $headers = $this->allPreserveCase();
+        if (isset($this->headerNames['set-cookie'])) {
+            unset($headers[$this->headerNames['set-cookie']]);
+        }
+
+        return $headers;
+    }
+
+    public function replace(array $headers = []): void
+    {
+        $this->headerNames = [];
+
+        parent::replace($headers);
+
+        if (!isset($this->headers['cache-control'])) {
+            $this->set('Cache-Control', '');
+        }
+
+        if (!isset($this->headers['date'])) {
+            $this->initDate();
+        }
+    }
+
+    public function all(?string $key = null): array
+    {
+        $headers = parent::all();
+
+        if (null !== $key) {
+            $key = strtr($key, self::UPPER, self::LOWER);
+
+            return 'set-cookie' !== $key ? $headers[$key] ?? [] : array_map('strval', $this->getCookies());
+        }
+
+        foreach ($this->getCookies() as $cookie) {
+            $headers['set-cookie'][] = (string) $cookie;
+        }
+
+        return $headers;
+    }
+
+    public function set(string $key, string|array|null $values, bool $replace = true): void
+    {
+        $uniqueKey = strtr($key, self::UPPER, self::LOWER);
+
+        if ('set-cookie' === $uniqueKey) {
+            if ($replace) {
+                $this->cookies = [];
+            }
+            foreach ((array) $values as $cookie) {
+                $this->setCookie(Cookie::fromString($cookie));
+            }
+            $this->headerNames[$uniqueKey] = $key;
+
+            return;
+        }
+
+        $this->headerNames[$uniqueKey] = $key;
+
+        parent::set($key, $values, $replace);
+
+        // ensure the cache-control header has sensible defaults
+        if (\in_array($uniqueKey, ['cache-control', 'etag', 'last-modified', 'expires'], true) && '' !== $computed = $this->computeCacheControlValue()) {
+            $this->headers['cache-control'] = [$computed];
+            $this->headerNames['cache-control'] = 'Cache-Control';
+            $this->computedCacheControl = $this->parseCacheControl($computed);
+        }
+    }
+
+    public function remove(string $key): void
+    {
+        $uniqueKey = strtr($key, self::UPPER, self::LOWER);
+        unset($this->headerNames[$uniqueKey]);
+
+        if ('set-cookie' === $uniqueKey) {
+            $this->cookies = [];
+
+            return;
+        }
+
+        parent::remove($key);
+
+        if ('cache-control' === $uniqueKey) {
+            $this->computedCacheControl = [];
+        }
+
+        if ('date' === $uniqueKey) {
+            $this->initDate();
+        }
+    }
+
+    public function hasCacheControlDirective(string $key): bool
+    {
+        return \array_key_exists($key, $this->computedCacheControl);
+    }
+
+    public function getCacheControlDirective(string $key): bool|string|null
+    {
+        return $this->computedCacheControl[$key] ?? null;
+    }
+
+    public function setCookie(Cookie $cookie): void
+    {
+        $this->cookies[$cookie->getDomain()][$cookie->getPath()][$cookie->getName()] = $cookie;
+        $this->headerNames['set-cookie'] = 'Set-Cookie';
+    }
+
+    /**
+     * Removes a cookie from the array, but does not unset it in the browser.
+     */
+    public function removeCookie(string $name, ?string $path = '/', ?string $domain = null): void
+    {
+        $path ??= '/';
+
+        unset($this->cookies[$domain][$path][$name]);
+
+        if (empty($this->cookies[$domain][$path])) {
+            unset($this->cookies[$domain][$path]);
+
+            if (empty($this->cookies[$domain])) {
+                unset($this->cookies[$domain]);
+            }
+        }
+
+        if (!$this->cookies) {
+            unset($this->headerNames['set-cookie']);
+        }
+    }
+
+    /**
+     * Returns an array with all cookies.
+     *
+     * @return Cookie[]
+     *
+     * @throws \InvalidArgumentException When the $format is invalid
+     */
+    public function getCookies(string $format = self::COOKIES_FLAT): array
+    {
+        if (!\in_array($format, [self::COOKIES_FLAT, self::COOKIES_ARRAY])) {
+            throw new \InvalidArgumentException(\sprintf('Format "%s" invalid (%s).', $format, implode(', ', [self::COOKIES_FLAT, self::COOKIES_ARRAY])));
+        }
+
+        if (self::COOKIES_ARRAY === $format) {
+            return $this->cookies;
+        }
+
+        $flattenedCookies = [];
+        foreach ($this->cookies as $path) {
+            foreach ($path as $cookies) {
+                foreach ($cookies as $cookie) {
+                    $flattenedCookies[] = $cookie;
+                }
+            }
+        }
+
+        return $flattenedCookies;
+    }
+
+    /**
+     * Clears a cookie in the browser.
+     *
+     * @param bool $partitioned
+     */
+    public function clearCookie(string $name, ?string $path = '/', ?string $domain = null, bool $secure = false, bool $httpOnly = true, ?string $sameSite = null /* , bool $partitioned = false */): void
+    {
+        $partitioned = 6 < \func_num_args() ? func_get_arg(6) : false;
+
+        $this->setCookie(new Cookie($name, null, 1, $path, $domain, $secure, $httpOnly, false, $sameSite, $partitioned));
+    }
+
+    /**
+     * @see HeaderUtils::makeDisposition()
+     */
+    public function makeDisposition(string $disposition, string $filename, string $filenameFallback = ''): string
+    {
+        return HeaderUtils::makeDisposition($disposition, $filename, $filenameFallback);
+    }
+
+    /**
+     * Returns the calculated value of the cache-control header.
+     *
+     * This considers several other headers and calculates or modifies the
+     * cache-control header to a sensible, conservative value.
+     */
+    protected function computeCacheControlValue(): string
+    {
+        if (!$this->cacheControl) {
+            if ($this->has('Last-Modified') || $this->has('Expires')) {
+                return 'private, must-revalidate'; // allows for heuristic expiration (RFC 7234 Section 4.2.2) in the case of "Last-Modified"
+            }
+
+            // conservative by default
+            return 'no-cache, private';
+        }
+
+        $header = $this->getCacheControlHeader();
+        if (isset($this->cacheControl['public']) || isset($this->cacheControl['private'])) {
+            return $header;
+        }
+
+        // public if s-maxage is defined, private otherwise
+        if (!isset($this->cacheControl['s-maxage'])) {
+            return $header.', private';
+        }
+
+        return $header;
+    }
+
+    private function initDate(): void
+    {
+        $this->set('Date', gmdate('D, d M Y H:i:s').' GMT');
+    }
+}
diff --git a/core/lib/Http/Response/StreamedJsonResponse.php b/core/lib/Http/Response/StreamedJsonResponse.php
new file mode 100644
index 0000000..225ffbf
--- /dev/null
+++ b/core/lib/Http/Response/StreamedJsonResponse.php
@@ -0,0 +1,164 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Response;
+
+/**
+ * StreamedJsonResponse represents a streamed HTTP response for JSON.
+ *
+ * A StreamedJsonResponse uses a structure and generics to create an
+ * efficient resource-saving JSON response.
+ *
+ * It is recommended to use flush() function after a specific number of items to directly stream the data.
+ *
+ * @see flush()
+ *
+ * @author Alexander Schranz <alexander@sulu.io>
+ *
+ * Example usage:
+ *
+ *     function loadArticles(): \Generator
+ *         // some streamed loading
+ *         yield ['title' => 'Article 1'];
+ *         yield ['title' => 'Article 2'];
+ *         yield ['title' => 'Article 3'];
+ *         // recommended to use flush() after every specific number of items
+ *     }),
+ *
+ *     $response = new StreamedJsonResponse(
+ *         // json structure with generators in which will be streamed
+ *         [
+ *             '_embedded' => [
+ *                 'articles' => loadArticles(), // any generator which you want to stream as list of data
+ *             ],
+ *         ],
+ *     );
+ */
+class StreamedJsonResponse extends StreamedResponse
+{
+    private const PLACEHOLDER = '__symfony_json__';
+
+    /**
+     * @param mixed[]                        $data            JSON Data containing PHP generators which will be streamed as list of data or a Generator
+     * @param int                            $status          The HTTP status code (200 "OK" by default)
+     * @param array<string, string|string[]> $headers         An array of HTTP headers
+     * @param int                            $encodingOptions Flags for the json_encode() function
+     */
+    public function __construct(
+        private readonly iterable $data,
+        int $status = 200,
+        array $headers = [],
+        private int $encodingOptions = JsonResponse::DEFAULT_ENCODING_OPTIONS,
+    ) {
+        parent::__construct($this->stream(...), $status, $headers);
+
+        if (!$this->headers->get('Content-Type')) {
+            $this->headers->set('Content-Type', 'application/json');
+        }
+    }
+
+    private function stream(): void
+    {
+        $jsonEncodingOptions = \JSON_THROW_ON_ERROR | $this->encodingOptions;
+        $keyEncodingOptions = $jsonEncodingOptions & ~\JSON_NUMERIC_CHECK;
+
+        $this->streamData($this->data, $jsonEncodingOptions, $keyEncodingOptions);
+    }
+
+    private function streamData(mixed $data, int $jsonEncodingOptions, int $keyEncodingOptions): void
+    {
+        if (\is_array($data)) {
+            $this->streamArray($data, $jsonEncodingOptions, $keyEncodingOptions);
+
+            return;
+        }
+
+        if (is_iterable($data) && !$data instanceof \JsonSerializable) {
+            $this->streamIterable($data, $jsonEncodingOptions, $keyEncodingOptions);
+
+            return;
+        }
+
+        echo json_encode($data, $jsonEncodingOptions);
+    }
+
+    private function streamArray(array $data, int $jsonEncodingOptions, int $keyEncodingOptions): void
+    {
+        $generators = [];
+
+        array_walk_recursive($data, function (&$item, $key) use (&$generators) {
+            if (self::PLACEHOLDER === $key) {
+                // if the placeholder is already in the structure it should be replaced with a new one that explode
+                // works like expected for the structure
+                $generators[] = $key;
+            }
+
+            // generators should be used but for better DX all kind of Traversable and objects are supported
+            if (\is_object($item)) {
+                $generators[] = $item;
+                $item = self::PLACEHOLDER;
+            } elseif (self::PLACEHOLDER === $item) {
+                // if the placeholder is already in the structure it should be replaced with a new one that explode
+                // works like expected for the structure
+                $generators[] = $item;
+            }
+        });
+
+        $jsonParts = explode('"'.self::PLACEHOLDER.'"', json_encode($data, $jsonEncodingOptions));
+
+        foreach ($generators as $index => $generator) {
+            // send first and between parts of the structure
+            echo $jsonParts[$index];
+
+            $this->streamData($generator, $jsonEncodingOptions, $keyEncodingOptions);
+        }
+
+        // send last part of the structure
+        echo $jsonParts[array_key_last($jsonParts)];
+    }
+
+    private function streamIterable(iterable $iterable, int $jsonEncodingOptions, int $keyEncodingOptions): void
+    {
+        $isFirstItem = true;
+        $startTag = '[';
+
+        foreach ($iterable as $key => $item) {
+            if ($isFirstItem) {
+                $isFirstItem = false;
+                // depending on the first elements key the generator is detected as a list or map
+                // we can not check for a whole list or map because that would hurt the performance
+                // of the streamed response which is the main goal of this response class
+                if (0 !== $key) {
+                    $startTag = '{';
+                }
+
+                echo $startTag;
+            } else {
+                // if not first element of the generic, a separator is required between the elements
+                echo ',';
+            }
+
+            if ('{' === $startTag) {
+                echo json_encode((string) $key, $keyEncodingOptions).':';
+            }
+
+            $this->streamData($item, $jsonEncodingOptions, $keyEncodingOptions);
+        }
+
+        if ($isFirstItem) { // indicates that the generator was empty
+            echo '[';
+        }
+
+        echo '[' === $startTag ? ']' : '}';
+    }
+}
diff --git a/core/lib/Http/Response/StreamedResponse.php b/core/lib/Http/Response/StreamedResponse.php
new file mode 100644
index 0000000..15f926e
--- /dev/null
+++ b/core/lib/Http/Response/StreamedResponse.php
@@ -0,0 +1,152 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC\Http\Response;
+
+/**
+ * StreamedResponse represents a streamed HTTP response.
+ *
+ * A StreamedResponse uses a callback or an iterable of strings for its content.
+ *
+ * The callback should use the standard PHP functions like echo
+ * to stream the response back to the client. The flush() function
+ * can also be used if needed.
+ *
+ * @see flush()
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ */
+class StreamedResponse extends Response
+{
+    protected ?\Closure $callback = null;
+    protected bool $streamed = false;
+
+    private bool $headersSent = false;
+
+    /**
+     * @param callable|iterable<string>|null $callbackOrChunks
+     * @param int                            $status           The HTTP status code (200 "OK" by default)
+     */
+    public function __construct(callable|iterable|null $callbackOrChunks = null, int $status = 200, array $headers = [])
+    {
+        parent::__construct(null, $status, $headers);
+
+        if (\is_callable($callbackOrChunks)) {
+            $this->setCallback($callbackOrChunks);
+        } elseif ($callbackOrChunks) {
+            $this->setChunks($callbackOrChunks);
+        }
+        $this->streamed = false;
+        $this->headersSent = false;
+    }
+
+    /**
+     * @param iterable<string> $chunks
+     */
+    public function setChunks(iterable $chunks): static
+    {
+        $this->callback = static function () use ($chunks): void {
+            foreach ($chunks as $chunk) {
+                echo $chunk;
+                @ob_flush();
+                flush();
+            }
+        };
+
+        return $this;
+    }
+
+    /**
+     * Sets the PHP callback associated with this Response.
+     *
+     * @return $this
+     */
+    public function setCallback(callable $callback): static
+    {
+        $this->callback = $callback(...);
+
+        return $this;
+    }
+
+    public function getCallback(): ?\Closure
+    {
+        if (!isset($this->callback)) {
+            return null;
+        }
+
+        return ($this->callback)(...);
+    }
+
+    /**
+     * This method only sends the headers once.
+     *
+     * @param positive-int|null $statusCode The status code to use, override the statusCode property if set and not null
+     *
+     * @return $this
+     */
+    public function sendHeaders(?int $statusCode = null): static
+    {
+        if ($this->headersSent) {
+            return $this;
+        }
+
+        if ($statusCode < 100 || $statusCode >= 200) {
+            $this->headersSent = true;
+        }
+
+        return parent::sendHeaders($statusCode);
+    }
+
+    /**
+     * This method only sends the content once.
+     *
+     * @return $this
+     */
+    public function sendContent(): static
+    {
+        if ($this->streamed) {
+            return $this;
+        }
+
+        $this->streamed = true;
+
+        if (!isset($this->callback)) {
+            throw new \LogicException('The Response callback must be set.');
+        }
+
+        ($this->callback)();
+
+        return $this;
+    }
+
+    /**
+     * @return $this
+     *
+     * @throws \LogicException when the content is not null
+     */
+    public function setContent(?string $content): static
+    {
+        if (null !== $content) {
+            throw new \LogicException('The content cannot be set on a StreamedResponse instance.');
+        }
+
+        $this->streamed = true;
+
+        return $this;
+    }
+
+    public function getContent(): string|false
+    {
+        return false;
+    }
+}
diff --git a/core/lib/Http/Session/SessionInterface.php b/core/lib/Http/Session/SessionInterface.php
new file mode 100644
index 0000000..b99c033
--- /dev/null
+++ b/core/lib/Http/Session/SessionInterface.php
@@ -0,0 +1,148 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Http\Session;
+
+/**
+ * Interface for session storage.
+ */
+interface SessionInterface
+{
+    /**
+     * Starts the session storage.
+     *
+     * @return bool True if session started
+     *
+     * @throws \RuntimeException if session fails to start
+     */
+    public function start(): bool;
+
+    /**
+     * Returns the session ID.
+     *
+     * @return string The session ID
+     */
+    public function getId(): string;
+
+    /**
+     * Sets the session ID.
+     *
+     * @param string $id The session ID
+     */
+    public function setId(string $id): void;
+
+    /**
+     * Returns the session name.
+     *
+     * @return string The session name
+     */
+    public function getName(): string;
+
+    /**
+     * Sets the session name.
+     *
+     * @param string $name The session name
+     */
+    public function setName(string $name): void;
+
+    /**
+     * Invalidates the current session.
+     *
+     * Clears all session attributes and flashes and regenerates the
+     * session and deletes the old session from persistence.
+     *
+     * @param int|null $lifetime Sets the cookie lifetime for the session cookie.
+     *                           A null value will leave the system settings unchanged,
+     *                           0 sets the cookie to expire with browser session.
+     *                           Time is in seconds, and is not a Unix timestamp.
+     *
+     * @return bool True if session invalidated, false if error
+     */
+    public function invalidate(?int $lifetime = null): bool;
+
+    /**
+     * Migrates the current session to a new session id while maintaining all
+     * session attributes.
+     *
+     * @param bool     $destroy  Whether to delete the old session or leave it to garbage collection
+     * @param int|null $lifetime Sets the cookie lifetime for the session cookie.
+     *                           A null value will leave the system settings unchanged,
+     *                           0 sets the cookie to expire with browser session.
+     *                           Time is in seconds, and is not a Unix timestamp.
+     *
+     * @return bool True if session migrated, false if error
+     */
+    public function migrate(bool $destroy = false, ?int $lifetime = null): bool;
+
+    /**
+     * Force the session to be saved and closed.
+     *
+     * This method is generally not required for real sessions as
+     * the session will be automatically saved at the end of
+     * code execution.
+     */
+    public function save(): void;
+
+    /**
+     * Checks if an attribute is defined.
+     *
+     * @param string $name The attribute name
+     *
+     * @return bool True if the attribute is defined, false otherwise
+     */
+    public function has(string $name): bool;
+
+    /**
+     * Returns an attribute.
+     *
+     * @param string $name    The attribute name
+     * @param mixed  $default The default value if not found
+     *
+     * @return mixed
+     */
+    public function get(string $name, mixed $default = null): mixed;
+
+    /**
+     * Sets an attribute.
+     *
+     * @param string $name  The attribute name
+     * @param mixed  $value The attribute value
+     */
+    public function set(string $name, mixed $value): void;
+
+    /**
+     * Returns attributes.
+     *
+     * @return array<string, mixed> Attributes
+     */
+    public function all(): array;
+
+    /**
+     * Sets attributes.
+     *
+     * @param array<string, mixed> $attributes Attributes
+     */
+    public function replace(array $attributes): void;
+
+    /**
+     * Removes an attribute.
+     *
+     * @param string $name The attribute name
+     *
+     * @return mixed The removed value or null when it does not exist
+     */
+    public function remove(string $name): mixed;
+
+    /**
+     * Clears all attributes.
+     */
+    public function clear(): void;
+
+    /**
+     * Checks if the session was started.
+     *
+     * @return bool True if started, false otherwise
+     */
+    public function isStarted(): bool;
+}
diff --git a/core/lib/Injection/Builder.php b/core/lib/Injection/Builder.php
new file mode 100644
index 0000000..0a9d544
--- /dev/null
+++ b/core/lib/Injection/Builder.php
@@ -0,0 +1,5 @@
+<?php
+
+namespace KTXC\Injection;
+
+class Builder extends \DI\ContainerBuilder {}
diff --git a/core/lib/Injection/Container.php b/core/lib/Injection/Container.php
new file mode 100644
index 0000000..a5eeea9
--- /dev/null
+++ b/core/lib/Injection/Container.php
@@ -0,0 +1,5 @@
+<?php
+
+namespace KTXC\Injection;
+
+class Container extends \DI\Container {}
diff --git a/core/lib/Kernel.php b/core/lib/Kernel.php
new file mode 100644
index 0000000..4fcfd05
--- /dev/null
+++ b/core/lib/Kernel.php
@@ -0,0 +1,421 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXC;
+
+use KTXC\Http\Request\Request;
+use KTXC\Http\Response\JsonResponse;
+use KTXC\Http\Response\RedirectResponse;
+use KTXC\Http\Response\Response;
+use KTXC\Injection\Builder;
+use KTXC\Injection\Container;
+use Psr\Container\ContainerInterface;
+use KTXC\Module\ModuleManager;
+use Psr\Log\LoggerInterface;
+use KTXC\Logger\FileLogger;
+use KTXC\Routing\Router;
+use KTXC\Routing\Route;
+use KTXC\Service\SecurityService;
+use KTXC\Service\FirewallService;
+use KTXF\Event\EventBus;
+use KTXF\Cache\EphemeralCacheInterface;
+use KTXF\Cache\PersistentCacheInterface;
+use KTXF\Cache\BlobCacheInterface;
+use KTXF\Cache\Store\FileEphemeralCache;
+use KTXF\Cache\Store\FilePersistentCache;
+use KTXF\Cache\Store\FileBlobCache;
+use KTXM\MailManager\Queue\MailQueue;
+use KTXM\MailManager\Queue\MailQueueFile;
+
+class Kernel
+{
+    public const VERSION = '1.0.0';
+    public const VERSION_ID = 10000;
+    public const MAJOR_VERSION = 1;
+    public const MINOR_VERSION = 0;
+    public const RELEASE_VERSION = 0;
+    public const EXTRA_VERSION = '';
+
+    protected bool $initialized = false;
+    protected bool $booted = false;
+    protected ?float $startTime = null;
+    protected ?ContainerInterface $container = null;
+
+    private string $projectDir;
+
+    public function __construct(
+        protected string $environment = 'prod',
+        protected bool $debug = false,
+    ) {
+        if (!$environment) {
+            throw new \InvalidArgumentException(\sprintf('Invalid environment provided to "%s": the environment cannot be empty.', get_debug_type($this)));
+        }
+    }
+
+    public function __clone()
+    {
+        $this->initialized = false;
+        $this->booted = false;
+        $this->container = null;
+    }
+    
+    private function initialize(): void
+    {
+        if ($this->debug) {
+            $this->startTime = microtime(true);
+        }
+        if ($this->debug && !isset($_ENV['SHELL_VERBOSITY']) && !isset($_SERVER['SHELL_VERBOSITY'])) {
+            if (\function_exists('putenv')) {
+                putenv('SHELL_VERBOSITY=3');
+            }
+            $_ENV['SHELL_VERBOSITY'] = 3;
+            $_SERVER['SHELL_VERBOSITY'] = 3;
+        }
+
+        $container = $this->initializeContainer();
+
+        $this->container = $container;
+        $this->initialized = true;
+    }
+
+    public function boot(): void
+    {
+        if (!$this->initialized) {
+            $this->initialize();
+        }
+
+        if (!$this->booted) {
+            /** @var ModuleManager $moduleManager */
+            $moduleManager = $this->container->get(ModuleManager::class);
+            $moduleManager->modulesBoot();
+            $this->booted = true;
+        }
+    }
+
+    public function reboot(): void
+    {
+        $this->shutdown();
+        $this->boot();
+    }
+
+    public function shutdown(): void
+    {
+        if (false === $this->initialized) {
+            return;
+        }
+
+        $this->initialized = false;
+        $this->booted = false;
+        $this->container = null;
+    }
+
+    public function handle(Request $request): Response
+    {
+        if (!$this->booted) {
+            $this->boot();
+        }
+
+        /** @var SessionTenant $sessionTenant */
+        $sessionTenant = $this->container->get(SessionTenant::class);
+        $sessionTenant->configure($request->getHost());
+        if (!$sessionTenant->configured() && !$sessionTenant->enabled()) {
+            return new Response(Response::$statusTexts[Response::HTTP_UNAUTHORIZED], Response::HTTP_UNAUTHORIZED);
+        }
+
+        /** @var FirewallService $firewall */
+        $firewall = $this->container->get(FirewallService::class);
+        if (!$firewall->authorized($request)) {
+            return new Response(Response::$statusTexts[Response::HTTP_FORBIDDEN], Response::HTTP_FORBIDDEN);
+        }
+
+        /** @var Router $router */
+        $router = $this->container->get(Router::class);
+        if ($router) {
+            $match = $router->match($request);
+            if ($match instanceof Route) {
+                /** @var SecurityService $securityService */
+                $securityService = $this->container->get(SecurityService::class);
+                $identity = $securityService->authenticate($request);
+                
+                if ($match->authenticated && $identity === null) {  
+                    return new Response(Response::$statusTexts[Response::HTTP_UNAUTHORIZED], Response::HTTP_UNAUTHORIZED);
+                }
+
+                if ($identity) {
+                    /** @var SessionIdentity $sessionIdentity */
+                    $sessionIdentity = $this->container->get(SessionIdentity::class);
+                    $sessionIdentity->initialize($identity, true);
+                }
+                
+                $response = $router->dispatch($match, $request);
+                if ($response instanceof Response) {
+                    return $response;
+                }
+            }
+        }
+
+        return new Response(Response::$statusTexts[Response::HTTP_NOT_FOUND], Response::HTTP_NOT_FOUND);
+    }
+
+    /**
+     * Process deferred events at the end of the request
+     */
+    public function processEvents(): void
+    {
+        try {
+            if ($this->container && $this->container->has(EventBus::class)) {
+                /** @var EventBus $eventBus */
+                $eventBus = $this->container->get(EventBus::class);
+                $eventBus->processDeferred();
+            }
+        } catch (\Throwable $e) {
+            error_log('Event processing error: ' . $e->getMessage());
+        }
+    }
+
+    /**
+     * Returns the kernel parameters.
+     *
+     * @return array<string, array|bool|string|int|float|\UnitEnum|null>
+     */
+    protected function parameters(): array
+    {
+        return [
+            'kernel.project_dir' => realpath($this->folderRoot()) ?: $this->folderRoot(),
+            'kernel.environment' => $this->environment,
+            'kernel.runtime_environment' => '%env(default:kernel.environment:APP_RUNTIME_ENV)%',
+            'kernel.runtime_mode' => '%env(query_string:default:container.runtime_mode:APP_RUNTIME_MODE)%',
+            'kernel.runtime_mode.web' => '%env(bool:default::key:web:default:kernel.runtime_mode:)%',
+            'kernel.runtime_mode.cli' => '%env(not:default:kernel.runtime_mode.web:)%',
+            'kernel.runtime_mode.worker' => '%env(bool:default::key:worker:default:kernel.runtime_mode:)%',
+            'kernel.debug' => $this->debug,
+            'kernel.build_dir' => realpath($this->getBuildDir()) ?: $this->getBuildDir(),
+            'kernel.cache_dir' => realpath($this->getCacheDir()) ?: $this->getCacheDir(),
+            'kernel.logs_dir' => realpath($this->getLogDir()) ?: $this->getLogDir(),
+            'kernel.charset' => $this->getCharset(),
+        ];
+    }
+
+    public function environment(): string
+    {
+        return $this->environment;
+    }
+
+    public function debug(): bool
+    {
+        return $this->debug;
+    }
+
+    public function container(): ContainerInterface
+    {
+        if (!$this->container) {
+            throw new \LogicException('Cannot retrieve the container from a non-booted kernel.');
+        }
+
+        return $this->container;
+    }
+
+    public function getStartTime(): float
+    {
+        return $this->debug && null !== $this->startTime ? $this->startTime : -\INF;
+    }
+
+    /**
+     * Gets the application root dir (path of the project's composer file).
+     */
+    public function folderRoot(): string
+    {
+        if (!isset($this->projectDir)) {
+            $r = new \ReflectionObject($this);
+
+            if (!is_file($dir = $r->getFileName())) {
+                throw new \LogicException(\sprintf('Cannot auto-detect project dir for kernel of class "%s".', $r->name));
+            }
+
+            $dir = $rootDir = \dirname($dir);
+            while (!is_file($dir.'/composer.json')) {
+                if ($dir === \dirname($dir)) {
+                    return $this->projectDir = $rootDir;
+                }
+                $dir = \dirname($dir);
+            }
+            $this->projectDir = $dir;
+        }
+
+        return $this->projectDir;
+    }
+
+    
+    /**
+     * Gets the path to the configuration directory.
+     */
+    private function getConfigDir(): string
+    {
+        return $this->folderRoot().'/config';
+    }
+
+    public function getCacheDir(): string
+    {
+        return $this->folderRoot().'/var/cache/'.$this->environment;
+    }
+
+    public function getBuildDir(): string
+    {
+        // Returns $this->getCacheDir() for backward compatibility
+        return $this->getCacheDir();
+    }
+
+    public function getLogDir(): string
+    {
+        return $this->folderRoot().'/var/log';
+    }
+
+    public function getCharset(): string
+    {
+        return 'UTF-8';
+    }
+
+    /**
+     * Gets a new container builder instance used to build the service container.
+     */
+    protected function containerBuilder(): Builder
+    {
+        return new Builder(Container::class);
+    }
+
+    /**
+     * Initializes the service container
+     */
+    protected function initializeContainer(): Container
+    {
+        $container = $this->buildContainer();
+        $container->set('kernel', $this);
+
+        return $container;
+    }
+
+    /**
+     * Builds the service container.
+     *
+     * @throws \RuntimeException
+     */
+    protected function buildContainer(): Container
+    {
+        $builder = $this->containerBuilder();
+        $builder->useAutowiring(true);
+        $builder->useAttributes(true);
+        $builder->addDefinitions($this->parameters());
+        $this->configureContainer($builder);
+
+        return $builder->build();
+    }
+
+    protected function configureContainer(Builder $builder): void
+    {
+        $builder->addDefinitions($this->getConfigDir() . '/system.php');
+        // Service definitions
+        $logDir = $this->getLogDir();
+        $projectDir = $this->folderRoot();
+        $builder->addDefinitions([
+            LoggerInterface::class => function() use ($logDir) {
+                return new FileLogger($logDir);
+            },
+            // EventBus as singleton for consistent event handling
+            EventBus::class => \DI\create(EventBus::class),
+            // Ephemeral Cache - for short-lived data (sessions, rate limits, challenges)
+            EphemeralCacheInterface::class => function(ContainerInterface $c) use ($projectDir) {
+                $storeType = $c->has('cache.ephemeral') ? $c->get('cache.ephemeral') : 'file';
+                
+                $storeMap = [
+                    'file' => FileEphemeralCache::class,
+                    // 'redis' => RedisEphemeralCache::class,
+                ];
+                
+                $storeClass = $storeMap[$storeType] ?? $storeType;
+                
+                if (!class_exists($storeClass)) {
+                    throw new \RuntimeException("Ephemeral cache store not found: {$storeClass}");
+                }
+                
+                $cache = new $storeClass($projectDir);
+                
+                // Set tenant/user context if available
+                if ($c->has(SessionTenant::class)) {
+                    $tenant = $c->get(SessionTenant::class);
+                    $cache->setTenantContext($tenant->identifier());
+                }
+                if ($c->has(SessionIdentity::class)) {
+                    $identity = $c->get(SessionIdentity::class);
+                    $cache->setUserContext($identity->identifier());
+                }
+                
+                return $cache;
+            },
+            // Persistent Cache - for long-lived data (routes, modules, compiled configs)
+            PersistentCacheInterface::class => function(ContainerInterface $c) use ($projectDir) {
+                $storeType = $c->has('cache.persistent') ? $c->get('cache.persistent') : 'file';
+                
+                $storeMap = [
+                    'file' => FilePersistentCache::class,
+                    // 'database' => DatabasePersistentCache::class,
+                ];
+                
+                $storeClass = $storeMap[$storeType] ?? $storeType;
+                
+                if (!class_exists($storeClass)) {
+                    throw new \RuntimeException("Persistent cache store not found: {$storeClass}");
+                }
+                
+                $cache = new $storeClass($projectDir);
+                
+                // Set tenant/user context if available
+                if ($c->has(SessionTenant::class)) {
+                    $tenant = $c->get(SessionTenant::class);
+                    $cache->setTenantContext($tenant->identifier());
+                }
+                if ($c->has(SessionIdentity::class)) {
+                    $identity = $c->get(SessionIdentity::class);
+                    $cache->setUserContext($identity->identifier());
+                }
+                
+                return $cache;
+            },
+            // Blob Cache - for binary/media data (previews, thumbnails)
+            BlobCacheInterface::class => function(ContainerInterface $c) use ($projectDir) {
+                $storeType = $c->has('cache.blob') ? $c->get('cache.blob') : 'file';
+                
+                $storeMap = [
+                    'file' => FileBlobCache::class,
+                    // 's3' => S3BlobCache::class,
+                ];
+                
+                $storeClass = $storeMap[$storeType] ?? $storeType;
+                
+                if (!class_exists($storeClass)) {
+                    throw new \RuntimeException("Blob cache store not found: {$storeClass}");
+                }
+                
+                $cache = new $storeClass($projectDir);
+                
+                // Set tenant/user context if available
+                if ($c->has(SessionTenant::class)) {
+                    $tenant = $c->get(SessionTenant::class);
+                    $cache->setTenantContext($tenant->identifier());
+                }
+                if ($c->has(SessionIdentity::class)) {
+                    $identity = $c->get(SessionIdentity::class);
+                    $cache->setUserContext($identity->identifier());
+                }
+                
+                return $cache;
+            },
+        ]);
+    }
+
+}
diff --git a/core/lib/Logger/FileLogger.php b/core/lib/Logger/FileLogger.php
new file mode 100644
index 0000000..b3d2988
--- /dev/null
+++ b/core/lib/Logger/FileLogger.php
@@ -0,0 +1,125 @@
+<?php
+
+namespace KTXC\Logger;
+
+use Psr\Log\LoggerInterface;
+use Psr\Log\LogLevel;
+
+/**
+ * Simple file-based PSR-3 logger.
+ */
+class FileLogger implements LoggerInterface
+{
+    private string $logFile;
+    private bool $useMicroseconds;
+    private string $channel;
+
+    /**
+     * @param string $logDir Directory where log files are written
+     * @param string $channel Logical channel name (used in filename)
+     * @param bool $useMicroseconds Whether to include microseconds in timestamp
+     */
+    public function __construct(string $logDir, string $channel = 'app', bool $useMicroseconds = true)
+    {
+        $this->useMicroseconds = $useMicroseconds;
+        $this->channel = $channel;
+        if (!is_dir($logDir)) {
+            @mkdir($logDir, 0775, true);
+        }
+        $this->logFile = rtrim($logDir, '/').'/'.$channel.'.log';
+    }
+
+    public function emergency($message, array $context = []): void { $this->log(LogLevel::EMERGENCY, $message, $context); }
+    public function alert($message, array $context = []): void { $this->log(LogLevel::ALERT, $message, $context); }
+    public function critical($message, array $context = []): void { $this->log(LogLevel::CRITICAL, $message, $context); }
+    public function error($message, array $context = []): void { $this->log(LogLevel::ERROR, $message, $context); }
+    public function warning($message, array $context = []): void { $this->log(LogLevel::WARNING, $message, $context); }
+    public function notice($message, array $context = []): void { $this->log(LogLevel::NOTICE, $message, $context); }
+    public function info($message, array $context = []): void { $this->log(LogLevel::INFO, $message, $context); }
+    public function debug($message, array $context = []): void { $this->log(LogLevel::DEBUG, $message, $context); }
+
+    public function log($level, $message, array $context = []): void
+    {
+        $timestamp = $this->formatTimestamp();
+        $interpolated = $this->interpolate((string)$message, $context);
+        $payload = [
+            'time' => $timestamp,
+            'level' => strtolower((string)$level),
+            'channel' => $this->channel,
+            'message' => $interpolated,
+            'context' => $this->sanitizeContext($context),
+        ];
+        $json = json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+        if ($json === false) {
+            // Fallback stringify if encoding fails (should be rare)
+            $json = json_encode([
+                'time' => $timestamp,
+                'level' => strtolower((string)$level),
+                'channel' => $this->channel,
+                'message' => $interpolated,
+                'context_error' => 'failed to encode context: '.json_last_error_msg(),
+            ], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) ?: '{"error":"logging failure"}';
+        }
+        $this->write($json);
+    }
+
+    private function formatTimestamp(): string
+    {
+        if ($this->useMicroseconds) {
+            $dt = \DateTimeImmutable::createFromFormat('U.u', sprintf('%.6F', microtime(true)));
+            return $dt?->format('Y-m-d H:i:s.u') ?? date('Y-m-d H:i:s');
+        }
+        return date('Y-m-d H:i:s');
+    }
+
+    private function interpolate(string $message, array $context): string
+    {
+        if (!str_contains($message, '{')) {
+            return $message;
+        }
+        $replace = [];
+        foreach ($context as $key => $val) {
+            if (is_array($val) || is_object($val)) {
+                continue; // don't inline complex values
+            }
+            $replace['{'.$key.'}'] = (string)$val;
+        }
+        return strtr($message, $replace);
+    }
+
+    private function sanitizeContext(array $context): array
+    {
+        if (empty($context)) { return []; }
+        $clean = [];
+        foreach ($context as $k => $v) {
+            if ($v instanceof \Throwable) {
+                $clean[$k] = [
+                    'type' => get_class($v),
+                    'message' => $v->getMessage(),
+                    'code' => $v->getCode(),
+                    'file' => $v->getFile(),
+                    'line' => $v->getLine(),
+                    'trace' => explode("\n", $v->getTraceAsString()),
+                ];
+            } elseif (is_resource($v)) {
+                $clean[$k] = 'resource('.get_resource_type($v).')';
+            } elseif (is_object($v)) {
+                // Try to extract serializable data
+                if (method_exists($v, '__toString')) {
+                    $clean[$k] = (string)$v;
+                } else {
+                    $clean[$k] = ['object' => get_class($v)];
+                }
+            } else {
+                $clean[$k] = $v;
+            }
+        }
+        return $clean;
+    }
+
+    private function write(string $line): void
+    {
+        $line = rtrim($line)."\n"; // newline-delimited JSON (JSONL)
+        @file_put_contents($this->logFile, $line, FILE_APPEND | LOCK_EX);
+    }
+}
diff --git a/core/lib/Models/Firewall/FirewallLogObject.php b/core/lib/Models/Firewall/FirewallLogObject.php
new file mode 100644
index 0000000..43dbdea
--- /dev/null
+++ b/core/lib/Models/Firewall/FirewallLogObject.php
@@ -0,0 +1,255 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Models\Firewall;
+
+use KTXF\Json\JsonDeserializable;
+
+/**
+ * Represents a firewall access log entry for tracking blocked/allowed requests
+ */
+class FirewallLogObject implements \JsonSerializable, JsonDeserializable
+{
+    public const RESULT_ALLOWED = 'allowed';
+    public const RESULT_BLOCKED = 'blocked';
+    
+    public const EVENT_AUTH_FAILURE = 'auth_failure';
+    public const EVENT_RATE_LIMIT = 'rate_limit';
+    public const EVENT_BRUTE_FORCE = 'brute_force';
+    public const EVENT_SUSPICIOUS = 'suspicious';
+    public const EVENT_RULE_MATCH = 'rule_match';
+    public const EVENT_ACCESS_CHECK = 'access_check';
+
+    private ?string $id = null;
+    private ?string $tenantId = null;
+    private ?string $ipAddress = null;
+    private ?string $deviceFingerprint = null;
+    private ?string $userAgent = null;
+    private ?string $requestPath = null;
+    private ?string $requestMethod = null;
+    private ?string $eventType = null;
+    private ?string $result = null;          // allowed, blocked
+    private ?string $ruleId = null;          // Which rule triggered (if any)
+    private ?string $identityId = null;      // User ID if authenticated
+    private ?\DateTimeImmutable $timestamp = null;
+    private ?array $metadata = null;         // Additional context
+
+    public function jsonDeserialize(array|string $data): static
+    {
+        if (is_string($data)) {
+            $data = json_decode($data, true);
+        }
+
+        if (array_key_exists('_id', $data)) {
+            $this->id = $data['_id'] !== null ? (string)$data['_id'] : null;
+        } elseif (array_key_exists('id', $data)) {
+            $this->id = $data['id'] !== null ? (string)$data['id'] : null;
+        }
+        
+        if (array_key_exists('tenantId', $data)) {
+            $this->tenantId = $data['tenantId'] !== null ? (string)$data['tenantId'] : null;
+        }
+        if (array_key_exists('ipAddress', $data)) {
+            $this->ipAddress = $data['ipAddress'] !== null ? (string)$data['ipAddress'] : null;
+        }
+        if (array_key_exists('deviceFingerprint', $data)) {
+            $this->deviceFingerprint = $data['deviceFingerprint'] !== null ? (string)$data['deviceFingerprint'] : null;
+        }
+        if (array_key_exists('userAgent', $data)) {
+            $this->userAgent = $data['userAgent'] !== null ? (string)$data['userAgent'] : null;
+        }
+        if (array_key_exists('requestPath', $data)) {
+            $this->requestPath = $data['requestPath'] !== null ? (string)$data['requestPath'] : null;
+        }
+        if (array_key_exists('requestMethod', $data)) {
+            $this->requestMethod = $data['requestMethod'] !== null ? (string)$data['requestMethod'] : null;
+        }
+        if (array_key_exists('eventType', $data)) {
+            $this->eventType = $data['eventType'] !== null ? (string)$data['eventType'] : null;
+        }
+        if (array_key_exists('result', $data)) {
+            $this->result = $data['result'] !== null ? (string)$data['result'] : null;
+        }
+        if (array_key_exists('ruleId', $data)) {
+            $this->ruleId = $data['ruleId'] !== null ? (string)$data['ruleId'] : null;
+        }
+        if (array_key_exists('identityId', $data)) {
+            $this->identityId = $data['identityId'] !== null ? (string)$data['identityId'] : null;
+        }
+        if (array_key_exists('timestamp', $data)) {
+            $this->timestamp = $data['timestamp'] !== null 
+                ? new \DateTimeImmutable($data['timestamp']) 
+                : null;
+        }
+        if (array_key_exists('metadata', $data)) {
+            $this->metadata = $data['metadata'] !== null ? (array)$data['metadata'] : null;
+        }
+
+        return $this;
+    }
+
+    public function jsonSerialize(): array
+    {
+        return [
+            'id' => $this->id,
+            'tenantId' => $this->tenantId,
+            'ipAddress' => $this->ipAddress,
+            'deviceFingerprint' => $this->deviceFingerprint,
+            'userAgent' => $this->userAgent,
+            'requestPath' => $this->requestPath,
+            'requestMethod' => $this->requestMethod,
+            'eventType' => $this->eventType,
+            'result' => $this->result,
+            'ruleId' => $this->ruleId,
+            'identityId' => $this->identityId,
+            'timestamp' => $this->timestamp?->format(\DateTimeInterface::ATOM),
+            'metadata' => $this->metadata,
+        ];
+    }
+
+    // Getters and setters
+
+    public function getId(): ?string
+    {
+        return $this->id;
+    }
+
+    public function setId(?string $id): self
+    {
+        $this->id = $id;
+        return $this;
+    }
+
+    public function getTenantId(): ?string
+    {
+        return $this->tenantId;
+    }
+
+    public function setTenantId(?string $tenantId): self
+    {
+        $this->tenantId = $tenantId;
+        return $this;
+    }
+
+    public function getIpAddress(): ?string
+    {
+        return $this->ipAddress;
+    }
+
+    public function setIpAddress(?string $ipAddress): self
+    {
+        $this->ipAddress = $ipAddress;
+        return $this;
+    }
+
+    public function getDeviceFingerprint(): ?string
+    {
+        return $this->deviceFingerprint;
+    }
+
+    public function setDeviceFingerprint(?string $deviceFingerprint): self
+    {
+        $this->deviceFingerprint = $deviceFingerprint;
+        return $this;
+    }
+
+    public function getUserAgent(): ?string
+    {
+        return $this->userAgent;
+    }
+
+    public function setUserAgent(?string $userAgent): self
+    {
+        $this->userAgent = $userAgent;
+        return $this;
+    }
+
+    public function getRequestPath(): ?string
+    {
+        return $this->requestPath;
+    }
+
+    public function setRequestPath(?string $requestPath): self
+    {
+        $this->requestPath = $requestPath;
+        return $this;
+    }
+
+    public function getRequestMethod(): ?string
+    {
+        return $this->requestMethod;
+    }
+
+    public function setRequestMethod(?string $requestMethod): self
+    {
+        $this->requestMethod = $requestMethod;
+        return $this;
+    }
+
+    public function getEventType(): ?string
+    {
+        return $this->eventType;
+    }
+
+    public function setEventType(?string $eventType): self
+    {
+        $this->eventType = $eventType;
+        return $this;
+    }
+
+    public function getResult(): ?string
+    {
+        return $this->result;
+    }
+
+    public function setResult(?string $result): self
+    {
+        $this->result = $result;
+        return $this;
+    }
+
+    public function getRuleId(): ?string
+    {
+        return $this->ruleId;
+    }
+
+    public function setRuleId(?string $ruleId): self
+    {
+        $this->ruleId = $ruleId;
+        return $this;
+    }
+
+    public function getIdentityId(): ?string
+    {
+        return $this->identityId;
+    }
+
+    public function setIdentityId(?string $identityId): self
+    {
+        $this->identityId = $identityId;
+        return $this;
+    }
+
+    public function getTimestamp(): ?\DateTimeImmutable
+    {
+        return $this->timestamp;
+    }
+
+    public function setTimestamp(?\DateTimeImmutable $timestamp): self
+    {
+        $this->timestamp = $timestamp;
+        return $this;
+    }
+
+    public function getMetadata(): ?array
+    {
+        return $this->metadata;
+    }
+
+    public function setMetadata(?array $metadata): self
+    {
+        $this->metadata = $metadata;
+        return $this;
+    }
+}
diff --git a/core/lib/Models/Firewall/FirewallRuleObject.php b/core/lib/Models/Firewall/FirewallRuleObject.php
new file mode 100644
index 0000000..3636242
--- /dev/null
+++ b/core/lib/Models/Firewall/FirewallRuleObject.php
@@ -0,0 +1,241 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Models\Firewall;
+
+use KTXF\Json\JsonDeserializable;
+
+/**
+ * Represents a firewall rule for IP/device access control
+ */
+class FirewallRuleObject implements \JsonSerializable, JsonDeserializable
+{
+    public const TYPE_IP = 'ip';
+    public const TYPE_IP_RANGE = 'ip_range';
+    public const TYPE_DEVICE = 'device';
+    
+    public const ACTION_ALLOW = 'allow';
+    public const ACTION_BLOCK = 'block';
+
+    private ?string $id = null;
+    private ?string $tenantId = null;
+    private ?string $type = null;        // ip, ip_range, device
+    private ?string $action = null;      // allow, block
+    private ?string $value = null;       // IP address, CIDR range, or device fingerprint
+    private ?string $reason = null;      // Why this rule was created
+    private ?string $createdBy = null;   // User ID who created the rule
+    private ?\DateTimeImmutable $createdAt = null;
+    private ?\DateTimeImmutable $expiresAt = null;  // null = permanent
+    private bool $enabled = true;
+    private ?array $metadata = null;     // Additional context (user agent, country, etc.)
+
+    public function jsonDeserialize(array|string $data): static
+    {
+        if (is_string($data)) {
+            $data = json_decode($data, true);
+        }
+
+        if (array_key_exists('_id', $data)) {
+            $this->id = $data['_id'] !== null ? (string)$data['_id'] : null;
+        } elseif (array_key_exists('id', $data)) {
+            $this->id = $data['id'] !== null ? (string)$data['id'] : null;
+        }
+        
+        if (array_key_exists('tenantId', $data)) {
+            $this->tenantId = $data['tenantId'] !== null ? (string)$data['tenantId'] : null;
+        }
+        if (array_key_exists('type', $data)) {
+            $this->type = $data['type'] !== null ? (string)$data['type'] : null;
+        }
+        if (array_key_exists('action', $data)) {
+            $this->action = $data['action'] !== null ? (string)$data['action'] : null;
+        }
+        if (array_key_exists('value', $data)) {
+            $this->value = $data['value'] !== null ? (string)$data['value'] : null;
+        }
+        if (array_key_exists('reason', $data)) {
+            $this->reason = $data['reason'] !== null ? (string)$data['reason'] : null;
+        }
+        if (array_key_exists('createdBy', $data)) {
+            $this->createdBy = $data['createdBy'] !== null ? (string)$data['createdBy'] : null;
+        }
+        if (array_key_exists('createdAt', $data)) {
+            $this->createdAt = $data['createdAt'] !== null 
+                ? new \DateTimeImmutable($data['createdAt']) 
+                : null;
+        }
+        if (array_key_exists('expiresAt', $data)) {
+            $this->expiresAt = $data['expiresAt'] !== null 
+                ? new \DateTimeImmutable($data['expiresAt']) 
+                : null;
+        }
+        if (array_key_exists('enabled', $data)) {
+            $this->enabled = (bool)$data['enabled'];
+        }
+        if (array_key_exists('metadata', $data)) {
+            $this->metadata = $data['metadata'] !== null ? (array)$data['metadata'] : null;
+        }
+
+        return $this;
+    }
+
+    public function jsonSerialize(): array
+    {
+        return [
+            'id' => $this->id,
+            'tenantId' => $this->tenantId,
+            'type' => $this->type,
+            'action' => $this->action,
+            'value' => $this->value,
+            'reason' => $this->reason,
+            'createdBy' => $this->createdBy,
+            'createdAt' => $this->createdAt?->format(\DateTimeInterface::ATOM),
+            'expiresAt' => $this->expiresAt?->format(\DateTimeInterface::ATOM),
+            'enabled' => $this->enabled,
+            'metadata' => $this->metadata,
+        ];
+    }
+
+    /**
+     * Check if this rule has expired
+     */
+    public function isExpired(): bool
+    {
+        if ($this->expiresAt === null) {
+            return false;
+        }
+        return $this->expiresAt < new \DateTimeImmutable();
+    }
+
+    /**
+     * Check if this rule is currently active (enabled and not expired)
+     */
+    public function isActive(): bool
+    {
+        return $this->enabled && !$this->isExpired();
+    }
+
+    // Getters and setters
+
+    public function getId(): ?string
+    {
+        return $this->id;
+    }
+
+    public function setId(?string $id): self
+    {
+        $this->id = $id;
+        return $this;
+    }
+
+    public function getTenantId(): ?string
+    {
+        return $this->tenantId;
+    }
+
+    public function setTenantId(?string $tenantId): self
+    {
+        $this->tenantId = $tenantId;
+        return $this;
+    }
+
+    public function getType(): ?string
+    {
+        return $this->type;
+    }
+
+    public function setType(?string $type): self
+    {
+        $this->type = $type;
+        return $this;
+    }
+
+    public function getAction(): ?string
+    {
+        return $this->action;
+    }
+
+    public function setAction(?string $action): self
+    {
+        $this->action = $action;
+        return $this;
+    }
+
+    public function getValue(): ?string
+    {
+        return $this->value;
+    }
+
+    public function setValue(?string $value): self
+    {
+        $this->value = $value;
+        return $this;
+    }
+
+    public function getReason(): ?string
+    {
+        return $this->reason;
+    }
+
+    public function setReason(?string $reason): self
+    {
+        $this->reason = $reason;
+        return $this;
+    }
+
+    public function getCreatedBy(): ?string
+    {
+        return $this->createdBy;
+    }
+
+    public function setCreatedBy(?string $createdBy): self
+    {
+        $this->createdBy = $createdBy;
+        return $this;
+    }
+
+    public function getCreatedAt(): ?\DateTimeImmutable
+    {
+        return $this->createdAt;
+    }
+
+    public function setCreatedAt(?\DateTimeImmutable $createdAt): self
+    {
+        $this->createdAt = $createdAt;
+        return $this;
+    }
+
+    public function getExpiresAt(): ?\DateTimeImmutable
+    {
+        return $this->expiresAt;
+    }
+
+    public function setExpiresAt(?\DateTimeImmutable $expiresAt): self
+    {
+        $this->expiresAt = $expiresAt;
+        return $this;
+    }
+
+    public function isEnabled(): bool
+    {
+        return $this->enabled;
+    }
+
+    public function setEnabled(bool $enabled): self
+    {
+        $this->enabled = $enabled;
+        return $this;
+    }
+
+    public function getMetadata(): ?array
+    {
+        return $this->metadata;
+    }
+
+    public function setMetadata(?array $metadata): self
+    {
+        $this->metadata = $metadata;
+        return $this;
+    }
+}
diff --git a/core/lib/Models/Identity/User.php b/core/lib/Models/Identity/User.php
new file mode 100644
index 0000000..1ae0e83
--- /dev/null
+++ b/core/lib/Models/Identity/User.php
@@ -0,0 +1,156 @@
+<?php
+
+namespace KTXC\Models\Identity;
+
+class User
+{
+    private ?string $id = null;
+    private ?string $identity = null;
+    private ?string $label = null;
+    private ?array $roles = [];
+    private array $permissions = [];
+    private ?bool $enabled = null;
+    private ?string $provider = null;
+    private ?string $externalSubject = null;
+    private ?int $initialLogin = null;
+    private ?int $recentLogin = null;
+
+    public function populate(array $data, string $source): void
+    {
+        if ($source === 'users') {
+            $this->id = $data['uid'] ?? null; // 'uid' maps to 'id'
+            $this->identity = $data['identity'] ?? null;
+            $this->label = $data['label'] ?? null;
+            $this->roles = (array)$data['roles'] ?? [];
+            $this->enabled = $data['enabled'] ?? null;
+            $this->provider = $data['provider'] ?? null;
+            $this->externalSubject = $data['external_subject'] ?? null;
+            $this->initialLogin = $data['initial_login'] ?? null;
+            $this->recentLogin = $data['recent_login'] ?? null;
+            $this->permissions = (array)$data['permissions'] ?? [];
+        }
+
+        if ($source === 'jwt') {
+            $this->id = $data['identifier'] ?? null;
+            $this->identity = $data['identity'] ?? null;
+            $this->label = $data['label'] ?? null;
+            $this->roles = (array)$data['role'] ?? [];
+            $this->permissions = (array)$data['permissions'] ?? [];
+            $this->enabled = true;
+        }
+
+        if ($source === 'external') {
+            $this->identity = $data['identity'] ?? null;
+            $this->label = $data['label'] ?? null;
+            $this->externalSubject = $data['external_subject'] ?? null;
+            $this->provider = $data['provider'] ?? null;
+        }
+        
+    }
+
+    public function getId(): ?string
+    {
+        return $this->id;
+    }
+
+    public function setId(string $value): void
+    {
+        $this->id = $value;
+    }
+
+    public function getIdentity(): ?string
+    {
+        return $this->identity;
+    }
+
+    public function setIdentity(string $value): void
+    {
+        $this->identity = $value;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(?string $value): void
+    {
+        $this->label = $value;
+    }
+
+    public function getRoles(): array
+    {
+        return $this->roles;
+    }
+
+    public function setRoles(array $values): void
+    {
+        $this->roles = $values;
+    }
+
+    public function getEnabled(): ?bool
+    {
+        return $this->enabled;
+    }
+
+    public function setEnabled(?bool $value): void
+    {
+        $this->enabled = $value;
+    }
+
+    public function getProvider(): ?string
+    {
+        return $this->provider;
+    }
+
+    public function setProvider(?string $value): void
+    {
+        $this->provider = $value;
+    }
+
+    public function getExternalSubject(): ?string
+    {
+        return $this->externalSubject;
+    }
+
+    public function setExternalSubject(?string $value): void
+    {
+        $this->externalSubject = $value;
+    }
+
+    public function getInitialLogin(): ?int
+    {
+        return $this->initialLogin;
+    }
+
+    public function setInitialLogin(?int $value): void
+    {
+        $this->initialLogin = $value;
+    }
+
+    public function getRecentLogin(): ?int
+    {
+        return $this->recentLogin;
+    }
+
+    public function setRecentLogin(?int $value): void
+    {
+        $this->recentLogin = $value;
+    }
+
+    public function getPermissions(): array
+    {
+        return $this->permissions;
+    }
+
+    public function setPermissions(array $permissions): void
+    {
+        $this->permissions = $permissions;
+    }
+
+    public function hasPermission(string $permission): bool
+    {
+        return in_array($permission, $this->permissions, true);
+    }
+
+}
diff --git a/core/lib/Models/Tenant/DomainCollection.php b/core/lib/Models/Tenant/DomainCollection.php
new file mode 100644
index 0000000..2a241cf
--- /dev/null
+++ b/core/lib/Models/Tenant/DomainCollection.php
@@ -0,0 +1,13 @@
+<?php
+
+namespace KTXC\Models\Tenant;
+
+use KTXF\Utile\Collection\CollectionAbstract;
+
+class DomainCollection extends CollectionAbstract
+{
+    public function __construct(array $items = [])
+    {
+        parent::__construct($items, CollectionAbstract::TYPE_STRING);
+    }
+}
diff --git a/core/lib/Models/Tenant/TenantAuthentication.php b/core/lib/Models/Tenant/TenantAuthentication.php
new file mode 100644
index 0000000..59d78fb
--- /dev/null
+++ b/core/lib/Models/Tenant/TenantAuthentication.php
@@ -0,0 +1,22 @@
+<?php
+
+namespace KTXC\Models\Tenant;
+
+use KTXF\Json\JsonSerializableObject;
+
+/**
+ * Tenant Configuration
+ */
+class TenantAuthentication extends JsonSerializableObject
+{
+    protected array $providers = [];
+    protected int $methodsMinimal = 1;
+
+    public function providers(): array {
+        return $this->providers;
+    }
+
+    public function methodsMinimal(): int {
+        return $this->methodsMinimal;
+    }
+}
diff --git a/core/lib/Models/Tenant/TenantCollection.php b/core/lib/Models/Tenant/TenantCollection.php
new file mode 100644
index 0000000..0d56dda
--- /dev/null
+++ b/core/lib/Models/Tenant/TenantCollection.php
@@ -0,0 +1,13 @@
+<?php
+
+namespace KTXC\Models\Tenant;
+
+use KTXF\Utile\Collection\CollectionAbstract;
+
+class TenantCollection extends CollectionAbstract
+{
+    public function __construct(array $items = [])
+    {
+        parent::__construct($items, TenantObject::class, CollectionAbstract::TYPE_STRING);
+    }
+}
diff --git a/core/lib/Models/Tenant/TenantConfiguration.php b/core/lib/Models/Tenant/TenantConfiguration.php
new file mode 100644
index 0000000..182d91e
--- /dev/null
+++ b/core/lib/Models/Tenant/TenantConfiguration.php
@@ -0,0 +1,29 @@
+<?php
+
+namespace KTXC\Models\Tenant;
+
+use KTXF\Json\JsonSerializableObject;
+
+/**
+ * Tenant Configuration
+ */
+class TenantConfiguration extends JsonSerializableObject
+{
+    protected TenantAuthentication $authentication;
+    protected TenantSecurity $security;
+
+    public function __construct()
+    {
+        $this->authentication = new TenantAuthentication();
+        $this->security = new TenantSecurity();
+    }
+
+    public function authentication(): TenantAuthentication {
+        return $this->authentication;
+    }
+
+    public function security(): TenantSecurity {
+        return $this->security;
+    }
+
+}
diff --git a/core/lib/Models/Tenant/TenantObject.php b/core/lib/Models/Tenant/TenantObject.php
new file mode 100644
index 0000000..50373d5
--- /dev/null
+++ b/core/lib/Models/Tenant/TenantObject.php
@@ -0,0 +1,148 @@
+<?php
+
+namespace KTXC\Models\Tenant;
+
+use KTXF\Json\JsonSerializableObject;
+
+/**
+ * Tenant entity representing a tenant
+ */
+class TenantObject extends JsonSerializableObject
+{
+    private ?string $id = null;
+    private ?string $identifier = null;
+    private bool $enabled = false;
+    private ?string $label = null;
+    private ?string $description = null;
+    private ?DomainCollection  $domains = null;
+    private ?TenantConfiguration $configuration = null;
+
+    /**
+     * Deserialize from associative array.
+     */
+    public function jsonDeserialize(array|string $data): static
+    {
+        if (is_string($data)) {
+            $data = json_decode($data, true);
+        }
+        // Map only if key exists to avoid notices and allow partial input
+        if (array_key_exists('_id', $data)) $this->id = $data['_id'] !== null ? (string)$data['_id'] : null;
+        elseif (array_key_exists('id', $data)) $this->id = $data['id'] !== null ? (string)$data['id'] : null;
+        if (array_key_exists('identifier', $data)) $this->identifier = $data['identifier'] !== null ? (string)$data['identifier'] : null;
+        if (array_key_exists('enabled', $data)) $this->enabled = $data['enabled'] !== null ? (bool)$data['enabled'] : null;
+        if (array_key_exists('label', $data)) $this->label = $data['label'] !== null ? (string)$data['label'] : null;
+        if (array_key_exists('description', $data)) $this->description = $data['description'] !== null ? (string)$data['description'] : null;
+        if (array_key_exists('domains', $data)) {
+            $this->domains = (new DomainCollection((array)$data['domains']));
+        }
+        if (array_key_exists('configuration', $data)) {
+            $this->configuration = (new TenantConfiguration)->jsonDeserialize($data['configuration']);
+        }
+        return $this;
+    }
+
+    /**
+     * Serialize to JSON-friendly structure.
+     */
+    public function jsonSerialize(): array
+    {
+        return [
+            'id' => $this->id,
+            'identifier' => $this->identifier,
+            'enabled' => $this->enabled,
+            'label' => $this->label,
+            'description' => $this->description,
+            'domains' => $this->domains,
+            'configuration' => $this->configuration,
+        ];
+    }
+
+    public function getId(): ?string
+    {
+        return $this->id;
+    }
+
+    public function setId(string $value): self
+    {
+        $this->id = $value;
+        return $this;
+    }
+
+    public function getIdentifier(): ?string
+    {
+        return $this->identifier;
+    }
+
+    public function setIdentifier(string $value): self
+    {
+        $this->identifier = $value;
+        return $this;
+    }
+
+    public function getEnabled(): bool
+    {
+        return $this->enabled;
+    }
+
+    public function setEnabled(bool $value): self
+    {
+        $this->enabled = $value;
+        return $this;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(string $value): self
+    {
+        $this->label = $value;
+        return $this;
+    }
+
+    public function getDescription(): ?string
+    {
+        return $this->description;
+    }
+
+    public function setDescription(string $value): self
+    {
+        $this->description = $value;
+        return $this;
+    }
+
+    public function getDomains(): ?DomainCollection
+    {
+        return $this->domains;
+    }
+
+    public function setDomains(DomainCollection $value): self
+    {
+        $this->domains = $value;
+        return $this;
+    }
+
+    public function getConfiguration(): TenantConfiguration
+    {
+        return $this->configuration;
+    }
+
+    public function setConfiguration(TenantConfiguration $value): self
+    {
+        $this->configuration = $value;
+        return $this;
+    }
+
+    public function getSettings(): array
+    {
+        return $this->configuration['settings'] ?? [];
+    }
+
+    public function setSettings(array $value): self
+    {
+        $this->configuration['settings'] = $value;
+        return $this;
+    }
+
+}
diff --git a/core/lib/Models/Tenant/TenantSecurity.php b/core/lib/Models/Tenant/TenantSecurity.php
new file mode 100644
index 0000000..e85e429
--- /dev/null
+++ b/core/lib/Models/Tenant/TenantSecurity.php
@@ -0,0 +1,22 @@
+<?php
+
+namespace KTXC\Models\Tenant;
+
+use KTXF\Json\JsonSerializableObject;
+
+/**
+ * Tenant Configuration
+ */
+class TenantSecurity extends JsonSerializableObject
+{
+    protected string $code = '';
+
+    public function __construct()
+    {
+        $this->code = uniqid();
+    }
+
+    public function code(): string {
+        return $this->code;
+    }
+}
diff --git a/core/lib/Module/ModuleAutoloader.php b/core/lib/Module/ModuleAutoloader.php
new file mode 100644
index 0000000..30f50c6
--- /dev/null
+++ b/core/lib/Module/ModuleAutoloader.php
@@ -0,0 +1,182 @@
+<?php
+
+namespace KTXC\Module;
+
+/**
+ * Custom autoloader for modules that allows PascalCase namespaces
+ * with lowercase folder names.
+ * 
+ * This breaks from PSR-4 convention to allow:
+ * - Folder: modules/contacts_manager/
+ * - Namespace: KTXM\ContactsManager\
+ * 
+ * The autoloader scans lazily - only when a KTXM class is first requested.
+ */
+class ModuleAutoloader
+{
+    private string $modulesRoot;
+    private array $namespaceMap = [];
+    private bool $scanned = false;
+    
+    public function __construct(string $modulesRoot)
+    {
+        $this->modulesRoot = rtrim($modulesRoot, '/');
+    }
+    
+    /**
+     * Register the autoloader
+     */
+    public function register(): void
+    {
+        spl_autoload_register([$this, 'loadClass']);
+    }
+    
+    /**
+     * Unregister the autoloader
+     */
+    public function unregister(): void
+    {
+        spl_autoload_unregister([$this, 'loadClass']);
+    }
+    
+    /**
+     * Scan the modules directory and build a map of namespaces to folder paths
+     * This is called lazily on the first KTXM class request
+     */
+    private function scan(): void
+    {
+        if ($this->scanned) {
+            return;
+        }
+        
+        $this->namespaceMap = [];
+        
+        if (!is_dir($this->modulesRoot)) {
+            $this->scanned = true;
+            return;
+        }
+        
+        $moduleDirs = glob($this->modulesRoot . '/*', GLOB_ONLYDIR);
+        foreach ($moduleDirs as $moduleDir) {
+            $moduleFile = $moduleDir . '/lib/Module.php';
+            if (!file_exists($moduleFile)) {
+                continue;
+            }
+            
+            // Extract the namespace from Module.php
+            $namespace = $this->extractNamespace($moduleFile);
+            if ($namespace) {
+                $this->namespaceMap[$namespace] = basename($moduleDir);
+            }
+        }
+        
+        $this->scanned = true;
+    }
+    
+    /**
+     * Load a class by its fully qualified name
+     * 
+     * @param string $className Fully qualified class name (e.g., KTXM\ContactsManager\Module)
+     * @return bool True if the class was loaded, false otherwise
+     */
+    public function loadClass(string $className): bool
+    {
+        try {
+            // Only handle classes in the KTXM namespace
+            if (!str_starts_with($className, 'KTXM\\')) {
+                return false;
+            }
+            
+            // Extract the namespace segment (e.g., ContactsManager from KTXM\ContactsManager\Module)
+            $parts = explode('\\', $className);
+            if (count($parts) < 2) {
+                $this->logError("Invalid class name format: $className (expected at least 2 namespace parts)");
+                return false;
+            }
+            
+            $namespaceSegment = $parts[1];
+            
+            // Check if we already have a mapping for this namespace
+            if (!isset($this->namespaceMap[$namespaceSegment])) {
+                // Scan only if we haven't scanned yet (this happens once, on first module access)
+                if (!$this->scanned) {
+                    $this->scan();
+                    
+                    // Check again after scanning
+                    if (!isset($this->namespaceMap[$namespaceSegment])) {
+                        $this->logError("No module found for namespace segment: $namespaceSegment (class: $className)");
+                        return false;
+                    }
+                } else {
+                    $this->logError("Module not found after scan: $namespaceSegment (class: $className)");
+                    return false;
+                }
+            }
+            
+            $folderName = $this->namespaceMap[$namespaceSegment];
+            
+            // Reconstruct the relative path
+            // KTXM\ContactsManager\Module -> contacts_manager/lib/Module.php
+            // KTXM\ContactsManager\Something -> contacts_manager/lib/Something.php
+            $relativePath = 'lib/' . implode('/', array_slice($parts, 2)) . '.php';
+            $filePath = $this->modulesRoot . '/' . $folderName . '/' . $relativePath;
+            
+            if (file_exists($filePath)) {
+                require_once $filePath;
+                return true;
+            }
+            
+            $this->logError("File not found for class $className at path: $filePath");
+            return false;
+            
+        } catch (\Throwable $e) {
+            $this->logError("Exception in ModuleAutoloader while loading $className: " . $e->getMessage(), [
+                'exception' => $e,
+                'file' => $e->getFile(),
+                'line' => $e->getLine(),
+            ]);
+            return false;
+        }
+    }
+    
+    /**
+     * Log an error from the autoloader
+     * 
+     * @param string $message Error message
+     * @param array $context Additional context
+     */
+    private function logError(string $message, array $context = []): void
+    {
+        // Log to PHP error log
+        error_log('[ModuleAutoloader] ' . $message);
+        
+        if (!empty($context)) {
+            error_log('[ModuleAutoloader Context] ' . json_encode($context));
+        }
+    }
+    
+    /**
+     * Extract namespace from a Module.php file
+     * 
+     * @param string $filePath Path to the Module.php file (at modules/{handle}/lib/Module.php)
+     * @return string|null The namespace segment (e.g., 'ContactsManager')
+     */
+    private function extractNamespace(string $filePath): ?string
+    {
+        if (!file_exists($filePath)) {
+            return null;
+        }
+        
+        $content = file_get_contents($filePath);
+        if ($content === false) {
+            return null;
+        }
+        
+        // Match namespace declaration: namespace KTXM\<Namespace>;
+        if (preg_match('/^\s*namespace\s+KTXM\\\\([a-zA-Z0-9_]+)\s*;/m', $content, $matches)) {
+            return $matches[1];
+        }
+        
+        return null;
+    }
+}
diff --git a/core/lib/Module/ModuleCollection.php b/core/lib/Module/ModuleCollection.php
new file mode 100644
index 0000000..24a0502
--- /dev/null
+++ b/core/lib/Module/ModuleCollection.php
@@ -0,0 +1,23 @@
+<?php
+
+namespace KTXC\Module;
+
+use JsonSerializable;
+use KTXF\Utile\Collection\CollectionAbstract;
+
+class ModuleCollection extends CollectionAbstract implements JsonSerializable
+{
+    public function __construct(array $items = [])
+    {
+        parent::__construct($items, ModuleObject::class, CollectionAbstract::TYPE_STRING);
+    }
+
+    public function jsonSerialize(): array
+    {
+        $result = [];
+        foreach ($this as $key => $item) {
+            $result[$key] = $item;
+        }
+        return $result;
+    }
+}
diff --git a/core/lib/Module/ModuleManager.php b/core/lib/Module/ModuleManager.php
new file mode 100644
index 0000000..297e2de
--- /dev/null
+++ b/core/lib/Module/ModuleManager.php
@@ -0,0 +1,464 @@
+<?php
+
+namespace KTXC\Module;
+
+use Exception;
+use KTXC\Module\Store\ModuleStore;
+use KTXC\Module\Store\ModuleEntry;
+use KTXC\Server;
+use KTXF\Module\ModuleInstanceInterface;
+use Psr\Log\LoggerInterface;
+use ReflectionClass;
+
+class ModuleManager
+{
+    private string $serverRoot = '';
+    private array $moduleInstances = [];
+
+    public function __construct(
+        private readonly ModuleStore $repository,
+        private readonly LoggerInterface $logger
+    ) {
+        // Initialize server root path
+        $this->serverRoot = Server::runtimeRootLocation();
+    }
+
+    /**
+     * List all modules as unified Module objects
+     * 
+     * @param bool $installedOnly If true, only return modules that are in the database
+     * @param bool $enabledOnly If true, only return modules that are enabled (implies installedOnly)
+     * @return Module[]
+     */
+    public function list(bool $installedOnly = true, $enabledOnly = true): ModuleCollection
+    {
+        $modules = New ModuleCollection();     
+        // load all modules from store
+        $entries = $this->repository->list();
+        foreach ($entries as $entry) {
+            if ($enabledOnly && !$entry->getEnabled()) {
+                continue; // Skip disabled modules if filtering for enabled only
+            }
+            // instance module
+            $handle = $entry->getHandle();
+            if (isset($this->moduleInstances[$entry->getHandle()])) {
+                $modules[$handle] = new ModuleObject($this->moduleInstances[$handle], $entry);
+            } else {
+                $moduleInstance = $this->moduleInstance($handle, $entry->getNamespace());
+                $modules[$handle] = new ModuleObject($moduleInstance, $entry);
+                $this->moduleInstances[$handle] = $moduleInstance;
+            }
+        }
+        // load all modules from filesystem
+        if ($installedOnly === false) {
+            $discovered = $this->modulesDiscover();
+            foreach ($discovered as $moduleInstance) {
+                $handle = $moduleInstance->handle();
+                if (!isset($modules[$handle])) {
+                    $modules[$handle] = new ModuleObject($moduleInstance, null);
+                }
+            }
+        }
+        
+        return $modules;
+    }
+    
+    public function install(string $handle): void
+    {
+        // First, try to find the module by scanning the filesystem
+        $modulesDir = $this->serverRoot . '/modules';
+        $namespace = null;
+        
+        // Scan for the module by checking if handle matches any folder or module's handle() method
+        if (is_dir($modulesDir)) {
+            $moduleDirs = glob($modulesDir . '/*', GLOB_ONLYDIR);
+            foreach ($moduleDirs as $moduleDir) {
+                $testModuleFile = $moduleDir . '/lib/Module.php';
+                if (!file_exists($testModuleFile)) {
+                    continue;
+                }
+                
+                // Extract namespace from the Module.php file
+                $testNamespace = $this->extractNamespaceFromFile($testModuleFile);
+                if (!$testNamespace) {
+                    continue;
+                }
+                
+                // Try to instantiate with a temporary handle to check if it matches
+                $folderName = basename($moduleDir);
+                $testInstance = $this->moduleInstance($folderName, $testNamespace);
+                
+                if ($testInstance && $testInstance->handle() === $handle) {
+                    $namespace = $testNamespace;
+                    break;
+                }
+            }
+        }
+        
+        if (!$namespace) {
+            $this->logger->error('Module not found for installation', ['handle' => $handle]);
+            return;
+        }
+        
+        $moduleInstance = $this->moduleInstance($handle, $namespace);
+        if (!$moduleInstance) {
+            return;
+        }
+        
+        try {
+            $moduleInstance->install();
+        } catch (Exception $e) {
+            $this->logger->error('Module installation failed: ' . $handle, [
+                'exception' => [
+                    'code' => $e->getCode(),
+                    'message' => $e->getMessage(),
+                ]
+            ]);
+            return;
+        }
+        
+        $module = new ModuleEntry();
+        $module->setHandle($handle);
+        $module->setVersion($moduleInstance->version());
+        $module->setEnabled(false);
+        $module->setInstalled(true);
+        // Store the namespace we found
+        $module->setNamespace($namespace);
+        $this->repository->deposit($module);
+    }
+
+    public function uninstall(string $handle): void
+    {
+        $moduleEntry = $this->repository->fetch($handle);
+        if (!$moduleEntry || !$moduleEntry->getInstalled()) {
+            $this->logger->warning('Attempted to uninstall non-installed module: ' . $handle);
+            throw new Exception('Module not installed: ' . $handle);
+        }
+
+        $moduleInstance = $this->moduleInstance($moduleEntry->getHandle(), $moduleEntry->getNamespace());
+        if (!$moduleInstance) {
+            return;
+        }
+        
+        try {
+            $moduleInstance->uninstall();
+        } catch (Exception $e) {
+            $this->logger->error('Module uninstallation failed: ' . $moduleEntry->getHandle(), [
+                'exception' => [
+                    'code' => $e->getCode(),
+                    'message' => $e->getMessage(),
+                ]
+            ]);
+            return;
+        }
+        
+        $this->repository->destroy($moduleEntry);
+    }
+
+    public function enable(string $handle): void
+    {
+        $moduleEntry = $this->repository->fetch($handle);
+        if (!$moduleEntry || !$moduleEntry->getInstalled()) {
+            $this->logger->warning('Attempted to uninstall non-installed module: ' . $handle);
+            throw new Exception('Module not installed: ' . $handle);
+        }
+
+        $moduleInstance = $this->moduleInstance($moduleEntry->getHandle(), $moduleEntry->getNamespace());
+        if (!$moduleInstance) {
+            return;
+        }
+        
+        try {
+            $moduleInstance->enable();
+        } catch (Exception $e) {
+            $this->logger->error('Module enabling failed: ' . $moduleEntry->getHandle(), [
+                'exception' => [
+                    'code' => $e->getCode(),
+                    'message' => $e->getMessage(),
+                ]
+            ]);
+            return;
+        }
+
+        $moduleEntry->setEnabled(true);
+        $this->repository->deposit($moduleEntry);
+    }
+
+    public function disable(string $handle): void
+    {
+        $moduleEntry = $this->repository->fetch($handle);
+        if (!$moduleEntry || !$moduleEntry->getInstalled()) {
+            $this->logger->warning('Attempted to uninstall non-installed module: ' . $handle);
+            throw new Exception('Module not installed: ' . $handle);
+        }
+
+        $moduleInstance = $this->moduleInstance($moduleEntry->getHandle(), $moduleEntry->getNamespace());
+        if (!$moduleInstance) {
+            return;
+        }
+        
+        try {
+            $moduleInstance->disable();
+        } catch (Exception $e) {
+            $this->logger->error('Module disabling failed: ' . $moduleEntry->getHandle(), [
+                'exception' => [
+                    'code' => $e->getCode(),
+                    'message' => $e->getMessage(),
+                ]
+            ]);
+            return;
+        }
+
+        $moduleEntry->setEnabled(false);
+        $this->repository->deposit($moduleEntry);
+    }
+
+    public function upgrade(string $handle): void
+    {
+        $moduleEntry = $this->repository->fetch($handle);
+        if (!$moduleEntry || !$moduleEntry->getInstalled()) {
+            $this->logger->warning('Attempted to uninstall non-installed module: ' . $handle);
+            throw new Exception('Module not installed: ' . $handle);
+        }
+
+        $moduleInstance = $this->moduleInstance($moduleEntry->getHandle(), $moduleEntry->getNamespace());
+        if (!$moduleInstance) {
+            return;
+        }
+        
+        try {
+            $moduleInstance->upgrade();
+        } catch (Exception $e) {
+            $this->logger->error('Module upgrade failed: ' . $moduleEntry->getHandle(), [
+                'exception' => [
+                    'code' => $e->getCode(),
+                    'message' => $e->getMessage(),
+                ]
+            ]);
+            return;
+        }
+        
+        $moduleEntry->setVersion($moduleInstance->version());
+        $this->repository->deposit($moduleEntry);
+    }
+
+    /**
+     * Scan filesystem for module directories and return module instances
+     * 
+     * @return array<string, ModuleInstanceInterface> Map of handle => ModuleInstanceInterface
+     */
+    private function modulesDiscover(): array
+    {
+        $modules = [];
+        $modulesDir = $this->serverRoot . '/modules';
+        
+        if (!is_dir($modulesDir)) {
+            return $modules;
+        }
+
+        // Get list of installed module handles to skip
+        $installedHandles = [];
+        foreach ($this->repository->list() as $entry) {
+            $installedHandles[] = $entry->getHandle();
+        }
+
+        // Scan for module directories
+        $moduleDirs = glob($modulesDir . '/*', GLOB_ONLYDIR);
+        foreach ($moduleDirs as $moduleDir) {
+            $moduleFile = $moduleDir . '/lib/Module.php';
+            if (!file_exists($moduleFile)) {
+                continue;
+            }
+            
+            // Extract namespace from the Module.php file
+            $namespace = $this->extractNamespaceFromFile($moduleFile);
+            if (!$namespace) {
+                $this->logger->warning('Could not extract namespace from Module.php', [
+                    'file' => $moduleFile
+                ]);
+                continue;
+            }
+            
+            // Use the folder name as a temporary handle to instantiate the module
+            $folderName = basename($moduleDir);
+            $moduleInstance = $this->moduleInstance($folderName, $namespace);
+            if (!$moduleInstance) {
+                continue;
+            }
+            
+            // Get the actual handle from the module instance
+            $handle = $moduleInstance->handle();
+            
+            // Skip if already installed
+            if (in_array($handle, $installedHandles)) {
+                continue;
+            }
+            
+            // Re-cache with the correct handle if different from folder name
+            if ($handle !== $folderName) {
+                unset($this->moduleInstances[$folderName]);
+                $this->moduleInstances[$handle] = $moduleInstance;
+            }
+            
+            $modules[$handle] = $moduleInstance;
+        }
+        
+        return $modules;
+    }
+    
+    /**
+     * Boot all enabled modules (must be called after container is ready).
+     */
+    public function modulesBoot(): void
+    {
+        // Only load modules that are enabled in the database
+        $modules = $this->list();
+        $this->logger->debug('Booting enabled modules', ['count' => count($modules)]);
+        foreach ($modules as $module) {
+            $handle = $module->handle();
+            try {
+                $module->boot();
+                $this->logger->debug('Module booted', ['handle' => $handle]);
+            } catch (Exception $e) {
+                $this->logger->error('Module boot failed: ' . $handle, [
+                    'exception' => $e,
+                    'message' => $e->getMessage(),
+                    'code' => $e->getCode(),
+                ]);
+            }
+        }
+    }
+
+    public function moduleInstance(string $handle, ?string $namespace = null): ?ModuleInstanceInterface
+    {
+        // Return from cache if already instantiated
+        if (isset($this->moduleInstances[$handle])) {
+            return $this->moduleInstances[$handle];
+        }
+        
+        // Determine the namespace segment
+        // If namespace is provided, use it; otherwise derive from handle
+        $nsSegment = $namespace ?: $this->studly($handle);
+        
+        $className = 'KTXM\\' . $nsSegment . '\\Module';
+
+        if (!class_exists($className)) {
+            $this->logger->error('Module class not found', [
+                'handle' => $handle,
+                'namespace' => $namespace,
+                'resolved' => $className
+            ]);
+            return null;
+        }
+        
+        if (!in_array(ModuleInstanceInterface::class, class_implements($className))) {
+            $this->logger->error('Module class does not implement ModuleInstanceInterface', [
+                'class' => $className
+            ]);
+            return null;
+        }
+        
+        try {
+            $module = $this->moduleLoad($className);
+        } catch (Exception $e) {
+            $this->logger->error('Failed to lazily create module instance', [
+                'handle' => $handle,
+                'namespace' => $namespace,
+                'exception' => $e->getMessage()
+            ]);
+            return null;
+        }
+
+        // Cache by handle
+        if ($module) {
+            $this->moduleInstances[$handle] = $module;
+        }
+
+        return $module;
+    }
+
+    private function moduleLoad(string $className): ?ModuleInstanceInterface
+    {
+        try {
+            // Use reflection to check constructor requirements
+            $reflectionClass = new ReflectionClass($className);
+            $constructor = $reflectionClass->getConstructor();
+            
+            if (!$constructor || $constructor->getNumberOfRequiredParameters() === 0) {
+                // Simple instantiation for modules without dependencies
+                return new $className();
+            }
+            
+            // For modules with dependencies, try to resolve them from the container
+            $container = Server::runtimeContainer();
+            $parameters = $constructor->getParameters();
+            $args = [];
+            
+            foreach ($parameters as $parameter) {
+                $type = $parameter->getType();
+                if ($type && !$type->isBuiltin()) {
+                    $typeName = $type->getName();
+                    
+                    // Try to get service from container
+                    if ($container->has($typeName)) {
+                        $args[] = $container->get($typeName);
+                    } elseif ($parameter->isDefaultValueAvailable()) {
+                        $args[] = $parameter->getDefaultValue();
+                    } else {
+                        // Cannot resolve dependency
+                        $this->logger->warning('Cannot resolve dependency for module: ' . $className, [
+                            'dependency' => $typeName
+                        ]);
+                        return null;
+                    }
+                } elseif ($parameter->isDefaultValueAvailable()) {
+                    $args[] = $parameter->getDefaultValue();
+                } else {
+                    // Cannot resolve primitive dependency
+                    return null;
+                }
+            }
+            
+            return $reflectionClass->newInstanceArgs($args);
+            
+        } catch (Exception $e) {
+            $this->logger->error('Failed to instantiate module: ' . $className, [
+                'exception' => $e->getMessage()
+            ]);
+            return null;
+        }
+    }
+
+    private function studly(string $value): string
+    {
+        $value = str_replace(['-', '_'], ' ', strtolower($value));
+        $value = ucwords($value);
+        return str_replace(' ', '', $value);
+    }
+
+    /**
+     * Extract the PHP namespace from a Module.php file by parsing its contents
+     * 
+     * @param string $moduleFilePath Absolute path to the Module.php file (located at /modules/{handle}/lib/Module.php)
+     * @return string|null The namespace segment (e.g., 'ContactsManager' from 'KTXM\ContactsManager')
+     */
+    private function extractNamespaceFromFile(string $moduleFilePath): ?string
+    {
+        if (!file_exists($moduleFilePath)) {
+            return null;
+        }
+        
+        $content = file_get_contents($moduleFilePath);
+        if ($content === false) {
+            return null;
+        }
+        
+        // Match namespace declaration: namespace KTXM\<Namespace>;
+        if (preg_match('/^\s*namespace\s+KTXM\\\\([a-zA-Z0-9_]+)\s*;/m', $content, $matches)) {
+            return $matches[1];
+        }
+        
+        return null;
+    }
+
+}
diff --git a/core/lib/Module/ModuleObject.php b/core/lib/Module/ModuleObject.php
new file mode 100644
index 0000000..56e3fdb
--- /dev/null
+++ b/core/lib/Module/ModuleObject.php
@@ -0,0 +1,161 @@
+<?php
+
+namespace KTXC\Module;
+
+use JsonSerializable;
+use KTXC\Module\Store\ModuleEntry;
+use KTXF\Module\ModuleInstanceInterface;
+
+/**
+ * Module is a unified wrapper that combines both the ModuleInterface instance
+ * (from filesystem) and ModuleEntry (from database) into a single object.
+ * 
+ * This provides a single source of truth for all module information.
+ */
+class ModuleObject implements JsonSerializable
+{
+    private ?ModuleInstanceInterface $instance = null;
+    private ?ModuleEntry $entry = null;
+
+    public function __construct(?ModuleInstanceInterface $instance = null, ?ModuleEntry $entry = null)
+    {
+        $this->instance = $instance;
+        $this->entry = $entry;
+    }
+
+    // ===== Serialization =====
+    
+    public function jsonSerialize(): array
+    {
+        return [
+            'id' => $this->id(),
+            'handle' => $this->handle(),
+            'version' => $this->version(),
+            'namespace' => $this->namespace(),
+            'installed' => $this->installed(),
+            'enabled' => $this->enabled(),
+            'needsUpgrade' => $this->needsUpgrade(),
+        ];
+    }
+
+    // ===== State from ModuleEntry (database) =====
+    
+    public function id(): ?string
+    {
+        return $this->entry?->getId();
+    }
+    
+    public function installed(): bool
+    {
+        return $this->entry?->getInstalled() ?? false;
+    }
+
+    public function enabled(): bool
+    {
+        return $this->entry?->getEnabled() ?? false;
+    }
+
+    // ===== Information from ModuleInterface (filesystem) =====
+    
+    public function handle(): string
+    {
+        if ($this->instance) {
+            return $this->instance->handle();
+        }
+        if ($this->entry) {
+            return $this->entry->getHandle();
+        }
+        throw new \RuntimeException('Module has neither instance nor entry');
+    }
+
+    public function namespace(): ?string
+    {
+        if ($this->entry) {
+            return $this->entry->getNamespace();
+        }
+        if ($this->instance) {
+            // Extract namespace from class name
+            $className = get_class($this->instance);
+            $parts = explode('\\', $className);
+            if (count($parts) >= 2 && $parts[0] === 'KTXM') {
+                return $parts[1];
+            }
+        }
+        return null;
+    }
+
+    public function version(): string
+    {
+        // Prefer current version from filesystem
+        if ($this->instance) {
+            return $this->instance->version();
+        }
+        // Fallback to stored version
+        if ($this->entry) {
+            return $this->entry->getVersion();
+        }
+        return '0.0.0';
+    }
+
+    // ===== Computed properties =====
+
+    public function needsUpgrade(): bool
+    {
+        if (!$this->instance || !$this->entry || !$this->installed()) {
+            return false;
+        }
+        $currentVersion = $this->instance->version();
+        $storedVersion = $this->entry->getVersion();
+        return version_compare($currentVersion, $storedVersion, '>');
+    }
+
+    // ===== Access to underlying objects =====
+    
+    public function instance(): ?ModuleInstanceInterface
+    {
+        return $this->instance;
+    }
+
+    public function entry(): ?ModuleEntry
+    {
+        return $this->entry;
+    }
+
+    // ===== Lifecycle methods (delegate to instance) =====
+    
+    public function boot(): void
+    {
+        $this->instance?->boot();
+    }
+
+    public function install(): void
+    {
+        $this->instance?->install();
+    }
+
+    public function uninstall(): void
+    {
+        $this->instance?->uninstall();
+    }
+
+    public function enable(): void
+    {
+        $this->instance?->enable();
+    }
+
+    public function disable(): void
+    {
+        $this->instance?->disable();
+    }
+
+    public function upgrade(): void
+    {
+        $this->instance?->upgrade();
+    }
+
+    public function bootUi(): array | null
+    {
+        return $this->instance?->bootUi() ?? null;
+    }
+
+}
diff --git a/core/lib/Module/Store/ModuleEntry.php b/core/lib/Module/Store/ModuleEntry.php
new file mode 100644
index 0000000..04b9a2e
--- /dev/null
+++ b/core/lib/Module/Store/ModuleEntry.php
@@ -0,0 +1,119 @@
+<?php
+
+namespace KTXC\Module\Store;
+
+use KTXF\Json\JsonDeserializable;
+
+/**
+ * Module entity representing an installed module
+ */
+class ModuleEntry implements \JsonSerializable, JsonDeserializable
+{
+    private ?string $id = null;
+    private ?string $namespace = null;
+    private ?string $handle = null;
+    private bool $installed = false;
+    private bool $enabled = false;
+    private string $version = '0.0.1';
+
+    /**
+     * Deserialize from associative array.
+     */
+    public function jsonDeserialize(array|string $data): static
+    {
+        if (is_string($data)) {
+            $data = json_decode($data, true);
+        }
+        // Map only if key exists to avoid notices and allow partial input
+        if (array_key_exists('_id', $data)) $this->id = $data['_id'] !== null ? (string)$data['_id'] : null;
+        elseif (array_key_exists('id', $data)) $this->id = $data['id'] !== null ? (string)$data['id'] : null;
+        if (array_key_exists('namespace', $data)) $this->namespace = $data['namespace'] !== null ? (string)$data['namespace'] : null;
+        if (array_key_exists('handle', $data)) $this->handle = $data['handle'] !== null ? (string)$data['handle'] : null;
+        if (array_key_exists('installed', $data)) $this->installed = (bool)$data['installed'];
+        if (array_key_exists('enabled', $data)) $this->enabled = (bool)$data['enabled'];
+        if (array_key_exists('version', $data)) $this->version = (string)$data['version'];
+
+        return $this;
+    }
+
+    /**
+     * Serialize to JSON-friendly structure.
+     */
+    public function jsonSerialize(): array
+    {
+        return [
+            'id' => $this->id,
+            'namespace' => $this->namespace,
+            'handle' => $this->handle,
+            'installed' => $this->installed,
+            'enabled' => $this->enabled,
+            'version' => $this->version,
+        ];
+    }
+
+    public function getId(): ?string
+    {
+        return $this->id;
+    }
+
+    public function setId(string $value): self
+    {
+        $this->id = $value;
+        return $this;
+    }
+
+    public function getNamespace(): ?string
+    {
+        return $this->namespace;
+    }
+
+    public function setNamespace(string $value): self
+    {
+        $this->namespace = $value;
+        return $this;
+    }
+
+    public function getHandle(): ?string
+    {
+        return $this->handle;
+    }
+
+    public function setHandle(string $value): self
+    {
+        $this->handle = $value;
+        return $this;
+    }
+
+    public function getInstalled(): bool
+    {
+        return $this->installed;
+    }
+
+    public function setInstalled(bool $value): self
+    {
+        $this->installed = $value;
+        return $this;
+    }
+
+    public function getEnabled(): bool
+    {
+        return $this->enabled;
+    }
+
+    public function setEnabled(bool $value): self
+    {
+        $this->enabled = $value;
+        return $this;
+    }
+
+    public function getVersion(): string
+    {
+        return $this->version;
+    }
+
+    public function setVersion(string $value): self
+    {
+        $this->version = $value;
+        return $this;
+    }
+}
diff --git a/core/lib/Module/Store/ModuleStore.php b/core/lib/Module/Store/ModuleStore.php
new file mode 100644
index 0000000..749cf3a
--- /dev/null
+++ b/core/lib/Module/Store/ModuleStore.php
@@ -0,0 +1,66 @@
+<?php
+
+namespace KTXC\Module\Store;
+
+use KTXC\Db\DataStore;
+
+class ModuleStore
+{
+
+    protected const COLLECTION_NAME = 'modules';
+
+    public function __construct(
+        protected readonly DataStore $dataStore
+    ) { }
+
+    public function list(): array
+    {
+        $cursor = $this->dataStore->selectCollection(self::COLLECTION_NAME)->find(['enabled' => true, 'installed' => true]);
+        $modules = [];
+        foreach ($cursor as $entry) {
+            $entity = new ModuleEntry();
+            $entity->jsonDeserialize((array)$entry);
+            $modules[$entity->getId()] = $entity;
+        }
+        return $modules;
+    }
+
+    public function fetch(string $handle): ?ModuleEntry
+    {
+        $entry = $this->dataStore->selectCollection(self::COLLECTION_NAME)->findOne(['handle' => $handle]);
+        if (!$entry) { return null; }
+        return (new ModuleEntry())->jsonDeserialize((array)$entry);
+    }
+
+    public function deposit(ModuleEntry $entry): ?ModuleEntry
+    {
+        if ($entry->getId()) {
+            return $this->update($entry);
+        } else {
+            return $this->create($entry);
+        }
+    }
+
+    private function create(ModuleEntry $entry): ?ModuleEntry
+    {
+        $result = $this->dataStore->selectCollection(self::COLLECTION_NAME)->insertOne($entry->jsonSerialize());
+        $entry->setId((string)$result->getInsertedId());
+        return $entry;
+    }
+
+    private function update(ModuleEntry $entry): ?ModuleEntry
+    {
+        $id = $entry->getId();
+        if (!$id) { return null; }
+        $this->dataStore->selectCollection(self::COLLECTION_NAME)->updateOne(['_id' => $id], ['$set' => $entry->jsonSerialize()]);
+        return $entry;
+    }
+
+    public function destroy(ModuleEntry $entry): void
+    {
+        $id = $entry->getId();
+        if (!$id) { return; }
+        $this->dataStore->selectCollection(self::COLLECTION_NAME)->deleteOne([ '_id' => $id]);
+    }
+
+}
diff --git a/core/lib/Resolver.php b/core/lib/Resolver.php
new file mode 100644
index 0000000..41e08db
--- /dev/null
+++ b/core/lib/Resolver.php
@@ -0,0 +1,253 @@
+<?php
+
+namespace Ktrix;
+
+use ReflectionClass;
+use ReflectionParameter;
+use KTXC\Server;
+
+/**
+ * Dynamic Class Resolver
+ * Resolves and instantiates classes with their dependencies dynamically
+ */
+class Resolver
+{
+    private array $instanceCache = [];
+    private array $contextInstances = [];
+    private static array $globalContext = [];
+
+    /**
+     * Set a global context instance that will be used for all resolutions
+     */
+    public static function setGlobalContext(string $className, object $instance): void
+    {
+        self::$globalContext[$className] = $instance;
+    }
+
+    /**
+     * Clear global context
+     */
+    public static function clearGlobalContext(): void
+    {
+        self::$globalContext = [];
+    }
+
+    /**
+     * Resolve and instantiate a class with its dependencies
+     */
+    public function resolve(string $className): object
+    {
+        return $this->resolveWithContext($className, []);
+    }
+
+    /**
+     * Resolve and instantiate a class with specific context instances
+     */
+    public function resolveWithContext(string $className, array $contextInstances = []): object
+    {
+        // Store context instances temporarily
+        $originalContext = $this->contextInstances;
+        $this->contextInstances = array_merge($this->contextInstances, $contextInstances);
+
+        try {
+            // Check cache first (but not when we have context overrides)
+            if (empty($contextInstances) && isset($this->instanceCache[$className])) {
+                return $this->instanceCache[$className];
+            }
+
+            // Check if class exists
+            if (!class_exists($className)) {
+                throw new \InvalidArgumentException("Class {$className} does not exist");
+            }
+
+            $reflectionClass = new ReflectionClass($className);
+
+            // If class cannot be instantiated
+            if (!$reflectionClass->isInstantiable()) {
+                throw new \InvalidArgumentException("Class {$className} is not instantiable");
+            }
+
+            $constructor = $reflectionClass->getConstructor();
+
+            // If no constructor, just instantiate
+            if ($constructor === null) {
+                $instance = new $className();
+                if (empty($contextInstances)) {
+                    $this->instanceCache[$className] = $instance;
+                }
+                return $instance;
+            }
+
+            // Resolve constructor dependencies
+            $dependencies = [];
+            foreach ($constructor->getParameters() as $parameter) {
+                $dependencies[] = $this->resolveParameter($parameter);
+            }
+
+            // Create instance with resolved dependencies
+            $instance = $reflectionClass->newInstanceArgs($dependencies);
+            
+            // Only cache if no context overrides
+            if (empty($contextInstances)) {
+                $this->instanceCache[$className] = $instance;
+            }
+
+            return $instance;
+        } finally {
+            // Restore original context
+            $this->contextInstances = $originalContext;
+        }
+    }
+
+    /**
+     * Resolve a single parameter dependency
+     */
+    private function resolveParameter(ReflectionParameter $parameter): mixed
+    {
+        $type = $parameter->getType();
+
+        // If no type hint, check if it has a default value
+        if ($type === null) {
+            if ($parameter->isDefaultValueAvailable()) {
+                return $parameter->getDefaultValue();
+            }
+            throw new \InvalidArgumentException("Cannot resolve parameter {$parameter->getName()} without type hint");
+        }
+
+        // Handle union types (PHP 8+)
+        if ($type instanceof \ReflectionUnionType) {
+            throw new \InvalidArgumentException("Union types are not supported for parameter {$parameter->getName()}");
+        }
+
+        $typeName = $type->getName();
+
+        // Check if we have a context instance for this type
+        if (isset($this->contextInstances[$typeName])) {
+            return $this->contextInstances[$typeName];
+        }
+
+        // Check global context
+        if (isset(self::$globalContext[$typeName])) {
+            return self::$globalContext[$typeName];
+        }
+
+        // Handle built-in types
+        if ($type->isBuiltin()) {
+            if ($parameter->isDefaultValueAvailable()) {
+                return $parameter->getDefaultValue();
+            }
+            throw new \InvalidArgumentException("Cannot resolve built-in type {$typeName} for parameter {$parameter->getName()}");
+        }
+
+        // Always try to get from container first for all non-builtin types
+        try {
+            $container = Server::getContainer();
+            if ($container->has($typeName)) {
+                return $container->get($typeName);
+            }
+        } catch (\Exception $e) {
+            // Fall through to manual resolution
+        }
+
+        // Only try manual resolution for classes in our namespace
+        if (strpos($typeName, 'KTXC\\') === 0) {
+            try {
+                return $this->resolve($typeName);
+            } catch (\Exception $e) {
+                // If still can't resolve and has default value, use it
+                if ($parameter->isDefaultValueAvailable()) {
+                    return $parameter->getDefaultValue();
+                }
+
+                // If parameter is nullable, return null
+                if ($parameter->allowsNull()) {
+                    return null;
+                }
+
+                throw new \InvalidArgumentException("Cannot resolve dependency {$typeName} for parameter {$parameter->getName()}: " . $e->getMessage());
+            }
+        }
+
+        // For non-Ktrix classes that aren't in the container, fail gracefully
+        if ($parameter->isDefaultValueAvailable()) {
+            return $parameter->getDefaultValue();
+        }
+
+        if ($parameter->allowsNull()) {
+            return null;
+        }
+
+        throw new \InvalidArgumentException("Cannot resolve external dependency {$typeName} for parameter {$parameter->getName()}. This service should be registered in the container.");
+    }
+
+    /**
+     * Resolve and instantiate a class with automatic context detection
+     */
+    public function resolveWithAutoContext(string $className, object $contextSource = null): object
+    {
+        $contextInstances = [];
+        
+        if ($contextSource !== null) {
+            // Use reflection to get all properties of the context source
+            $reflection = new ReflectionClass($contextSource);
+            $properties = $reflection->getProperties();
+            
+            foreach ($properties as $property) {
+                $property->setAccessible(true);
+                $value = $property->getValue($contextSource);
+                
+                if (is_object($value)) {
+                    $contextInstances[get_class($value)] = $value;
+                }
+            }
+        }
+        
+        return $this->resolveWithContext($className, $contextInstances);
+    }
+
+    /**
+     * Smart resolve - automatically finds dependencies from the call stack
+     */
+    public function smartResolve(string $className): object
+    {
+        $contextInstances = [];
+        
+        // Get the call stack to find potential context sources
+        $backtrace = debug_backtrace(DEBUG_BACKTRACE_PROVIDE_OBJECT, 10);
+        
+        foreach ($backtrace as $frame) {
+            if (isset($frame['object']) && is_object($frame['object'])) {
+                $sourceObject = $frame['object'];
+                $reflection = new ReflectionClass($sourceObject);
+                $properties = $reflection->getProperties();
+                
+                foreach ($properties as $property) {
+                    $property->setAccessible(true);
+                    $value = $property->getValue($sourceObject);
+                    
+                    if (is_object($value)) {
+                        $contextInstances[get_class($value)] = $value;
+                    }
+                }
+            }
+        }
+        
+        return $this->resolveWithContext($className, $contextInstances);
+    }
+
+    /**
+     * Clear the instance cache
+     */
+    public function clearCache(): void
+    {
+        $this->instanceCache = [];
+    }
+
+    /**
+     * Check if a class is cached
+     */
+    public function isCached(string $className): bool
+    {
+        return isset($this->instanceCache[$className]);
+    }
+}
diff --git a/core/lib/Resource/ProviderManager.php b/core/lib/Resource/ProviderManager.php
new file mode 100644
index 0000000..f4847aa
--- /dev/null
+++ b/core/lib/Resource/ProviderManager.php
@@ -0,0 +1,88 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Resource;
+
+use KTXC\Server;
+use KTXF\Resource\Provider\ProviderInterface;
+
+/**
+ * Provider Registry
+ * 
+ * Manages registration and resolution of authentication providers.
+ */
+class ProviderManager
+{
+    private array $registeredProviders = [];
+    private array $resolvedProviders = [];
+
+    public function __construct(
+    ) {}
+
+    /**
+     * Register an authentication provider (called from module boot)
+     *
+     * @param string $type Provider type (e.g., 'authentication', 'storage', 'notification')
+     * @param string $identifier Provider ID (e.g., 'default', 'oidc', 'totp')
+     * @param string $class Fully qualified class name
+     */
+    public function register(string $type, string $identifier, string $class): void
+    {
+        $this->registeredProviders[$type][$identifier] = $class;
+    }
+
+    /**
+     * Unregister a provider
+     */
+    public function unregister(string $type, string $identifier): void
+    {
+        unset($this->registeredProviders[$type][$identifier]);
+        unset($this->resolvedProviders[$type][$identifier]);
+    }
+
+    /**
+     * Resolve a provider by ID
+     */
+    public function resolve(string $type, string $identifier): ?ProviderInterface
+    {
+        if (isset($this->resolvedProviders[$type][$identifier])) {
+            return $this->resolvedProviders[$type][$identifier];
+        }
+
+        if (!isset($this->registeredProviders[$type][$identifier])) {
+            return null;
+        }
+
+        try {
+            $provider = Server::runtimeContainer()->get($this->registeredProviders[$type][$identifier]);
+            $this->resolvedProviders[$type][$identifier] = $provider;
+            return $provider;
+        } catch (\Exception $e) {
+            error_log("Failed to resolve provider {$identifier}: " . $e->getMessage());
+            return null;
+        }
+    }
+
+    /**
+     * Resolve multiple providers
+     *
+     * @param array|null $filter Optional list of provider IDs to return
+     * @return array<string, ProviderInterface>
+     */
+    public function providers(string $type, ?array $filter = null): array
+    {
+        $requestedProviders = $filter ?? array_keys($this->registeredProviders[$type] ?? []);
+        $result = [];
+
+        foreach ($requestedProviders as $identifier) {
+            $provider = $this->resolve($type, $identifier);
+            if ($provider !== null) {
+                $result[$identifier] = $provider;
+            }
+        }
+
+        return $result;
+    }
+
+}
diff --git a/core/lib/Routing/Route.php b/core/lib/Routing/Route.php
new file mode 100644
index 0000000..bfa96e3
--- /dev/null
+++ b/core/lib/Routing/Route.php
@@ -0,0 +1,29 @@
+<?php
+
+namespace KTXC\Routing;
+
+/**
+ * Value object representing a resolved route.
+ */
+class Route
+{
+    /** @var array<string, string> Route parameters extracted from path */
+    public array $params = [];
+
+    public function __construct(
+        public readonly string $name,
+        public readonly string $method,
+        public readonly string $path,
+        public readonly bool $authenticated,
+        public readonly string $className,
+        public readonly string $classMethodName,
+        public readonly array $classMethodParameters = [],
+    ) {}
+
+    public function withParams(array $params): self
+    {
+        $clone = clone $this;
+        $clone->params = $params;
+        return $clone;
+    }
+}
diff --git a/core/lib/Routing/Router.php b/core/lib/Routing/Router.php
new file mode 100644
index 0000000..be0e7f9
--- /dev/null
+++ b/core/lib/Routing/Router.php
@@ -0,0 +1,248 @@
+<?php
+
+namespace KTXC\Routing;
+
+use KTXC\Http\Request\Request;
+use KTXC\Http\Response\Response;
+use KTXC\Injection\Container;
+use KTXC\Module\ModuleManager;
+use KTXF\Routing\Attributes\AnonymousRoute;
+use KTXF\Routing\Attributes\AuthenticatedRoute;
+use Psr\Log\LoggerInterface;
+use ReflectionClass;
+use ReflectionMethod;
+use KTXC\Server;
+use KTXF\Json\JsonDeserializable;
+
+class Router
+{
+    private Container $container;
+    /** @var array<string,array<string,Route>> */
+    private array $routes = []; // [method][path] => Route
+    private bool $initialized = false;
+    private string $cacheFile;
+
+    public function __construct(
+        private readonly LoggerInterface $logger,
+        private readonly ModuleManager $moduleManager
+    )
+    {
+        $this->container = Server::runtimeContainer();
+        $this->cacheFile = Server::runtimeRootLocation() . '/var/cache/routes.cache.php';
+    }
+
+    private function initialize(): void
+    {
+        // load cached routes in production
+        if (Server::environment() === Server::ENVIRONMENT_PROD && file_exists($this->cacheFile)) {
+            $data = include $this->cacheFile;
+            if (is_array($data)) {
+                $this->routes = $data;
+                $this->initialized = true;
+                return;
+            }
+        }
+        // otherwise scan for routes
+        $this->scan();
+        $this->initialized = true;
+        // write cache
+        $dir = dirname($this->cacheFile);
+        if (!is_dir($dir)) @mkdir($dir, 0775, true);
+        file_put_contents($this->cacheFile, '<?php return ' . var_export($this->routes, true) . ';');
+    }
+
+    
+    private function scan(): void
+    {
+        // load core controllers
+        foreach (glob(Server::runtimeRootLocation() . '/core/lib/Controllers/*.php') as $file) {
+            $this->extract($file);
+        }
+        
+        // load module controllers
+        foreach ($this->moduleManager->list(true, true) as $module) {
+            $path = Server::runtimeModuleLocation() . '/' . $module->handle() . '/lib/Controllers';
+            if (is_dir($path)) {
+                foreach (glob($path . '/*.php') as $file) {
+                    $this->extract($file, '/m/' . $module->handle());
+                }
+            }
+        }
+    }
+
+    private function extract(string $file, string $routePrefix = ''): void
+    {
+        $contents = file_get_contents($file);
+        if ($contents === false) return;
+        // extract namespace
+        if (!preg_match('#namespace\\s+([^;]+);#', $contents, $nsM)) return;
+        $ns = trim($nsM[1]);
+        // extract class names
+        if (!preg_match_all('#class\\s+(\\w+)#', $contents, $cM)) return;
+        foreach ($cM[1] as $class) {
+            $fqcn = $ns . '\\' . $class;
+            try {
+                if (!class_exists($fqcn)) {
+                    continue;
+                }
+                require_once $file;
+                $reflectionClass = new ReflectionClass($fqcn);
+                if ($reflectionClass->isAbstract()) continue;
+                foreach ($reflectionClass->getMethods(ReflectionMethod::IS_PUBLIC) as $reflectionMethod) {
+                    $attributes = array_merge(
+                        $reflectionMethod->getAttributes(AnonymousRoute::class),
+                        $reflectionMethod->getAttributes(AuthenticatedRoute::class)
+                    );
+                    foreach ($attributes as $attribute) {
+                        $route = $attribute->newInstance();
+                        $httpPath = $routePrefix . $route->path;
+                        foreach ($route->methods as $httpMethod) {
+                            $this->routes[$httpMethod][$httpPath] = new Route(
+                                method: $httpMethod,
+                                path: $httpPath,
+                                name: $route->name,
+                                authenticated: $route instanceof AuthenticatedRoute,
+                                className: $reflectionClass->getName(),
+                                classMethodName: $reflectionMethod->getName(),
+                                classMethodParameters: $reflectionMethod->getParameters(),
+                            );
+                        }
+                    }
+                }
+            } catch (\Throwable $e) {
+                $this->logger->error('Route collection failed', ['file' => $file, 'error' => $e->getMessage()]);
+            }
+        }
+    }
+
+    /**
+     * Match a Request to a Route, or return null if no match.
+     * Supports exact matches and simple {param} patterns.
+     * Prioritizes: 1) exact matches, 2) specific patterns, 3) catch-all patterns
+     */
+    public function match(Request $request): ?Route
+    {
+        if (!$this->initialized) {
+            $this->initialize();
+        }
+        $method = $request->getMethod();
+        $path = $request->getPathInfo();
+        // Exact match first
+        if (isset($this->routes[$method][$path])) {
+            return $this->routes[$method][$path];
+        }
+        // Pattern matching - separate catch-all from specific patterns
+        $specificPatterns = [];
+        $catchAllPattern = null;
+        foreach ($this->routes[$method] ?? [] as $routePath => $routeObj) {
+            if (str_contains($routePath, '{')) {
+                // Check if this is a catch-all pattern (e.g., /{path})
+                if (preg_match('#^/\{[^/]+\}$#', $routePath)) {
+                    $catchAllPattern = [$routePath, $routeObj];
+                } else {
+                    $specificPatterns[] = [$routePath, $routeObj];
+                }
+            }
+        }
+        // Try specific patterns first
+        foreach ($specificPatterns as [$routePath, $routeObj]) {
+            $pattern = preg_replace('#\{([a-zA-Z_][a-zA-Z0-9_]*)\}#', '(?P<$1>[^/]+)', $routePath);
+            $pattern = '#^' . $pattern . '$#';
+            if (preg_match($pattern, $path, $m)) {
+                $params = [];
+                foreach ($m as $k => $v) {
+                    if (is_string($k)) { $params[$k] = $v; }
+                }
+                return $routeObj->withParams($params);
+            }
+        }
+        // Try catch-all pattern last
+        if ($catchAllPattern !== null) {
+            [$routePath, $routeObj] = $catchAllPattern;
+            $pattern = preg_replace('#\{([a-zA-Z_][a-zA-Z0-9_]*)\}#', '(?P<$1>.*)', $routePath);
+            $pattern = '#^' . $pattern . '$#';
+            if (preg_match($pattern, $path, $m)) {
+                $params = [];
+                foreach ($m as $k => $v) {
+                    if (is_string($k)) { $params[$k] = $v; }
+                }
+                return $routeObj->withParams($params);
+            }
+        }
+        return null;
+    }
+
+    /**
+     * Dispatch a matched route meta and return a Response (or null if controller does not return one).
+     * Performs light argument resolution: Request object, route params, body fields, full body for array params.
+     */
+    public function dispatch(Route $route, Request $request): ?Response
+    {
+        // extract controller and method
+        $routeControllerName = $route->className;
+        $routeControllerMethod = $route->classMethodName;
+        $routeControllerParameters = $route->classMethodParameters;
+        //try {
+            // instantiate controller
+            if ($this->container->has($routeControllerName)) {
+                $instance = $this->container->get($routeControllerName);
+            } else {
+                $instance = new $routeControllerName();
+            }
+            try {
+                $requestParameters = $request->getPayload();
+            } catch (\Throwable) {
+                // ignore payload errors
+            }
+            $reflectionMethod = new \ReflectionMethod($routeControllerName, $routeControllerMethod);
+            $routeParams = $route->params ?? [];
+            $callArgs = [];
+            foreach ($reflectionMethod->getParameters() as $reflectionParameter) {
+                $reflectionParameterName = $reflectionParameter->getName();
+                $reflectionParameterType = $reflectionParameter->getType();
+                // if parameter matches request class, use current request
+                if ($reflectionParameterType && $reflectionParameterType instanceof \ReflectionNamedType && !$reflectionParameterType->isBuiltin() && is_a($reflectionParameterType->getName(), Request::class, true)) {
+                    $callArgs[] = $request;
+                    continue;
+                }
+                // if method parameter matches a route path param, use that (highest priority)
+                if (array_key_exists($reflectionParameterName, $routeParams)) {
+                    $callArgs[] = $routeParams[$reflectionParameterName];
+                    continue;
+                }
+                // if method parameter matches a request param, use that
+                if ($requestParameters->has($reflectionParameterName)) {
+                    // if parameter is a class implementing JsonDeserializable, call jsonDeserialize on it
+                    if ($reflectionParameterType && $reflectionParameterType instanceof \ReflectionNamedType && !$reflectionParameterType->isBuiltin() && is_a($reflectionParameterType->getName(), JsonDeserializable::class, true)) {
+                        $type = $reflectionParameterType->getName();
+                        $object = new $type();
+                        if ($object instanceof JsonDeserializable) {
+                            $object->jsonDeserialize($requestParameters->get($reflectionParameterName));
+                            $callArgs[] = $object;
+                            continue;
+                        }
+                    }
+                    // otherwise, use the raw value
+                    $callArgs[] = $requestParameters->get($reflectionParameterName);
+                    continue;
+                }
+                // if method parameter did not match, but has a default value, use that
+                if ($reflectionParameter->isDefaultValueAvailable()) {
+                    $callArgs[] = $reflectionParameter->getDefaultValue();
+                    continue;
+                }
+                $callArgs[] = null;
+            }
+            $result = $instance->$routeControllerMethod(...$callArgs);
+            return $result instanceof Response ? $result : null;
+        //} catch (\Throwable $e) {
+        //    $this->logger->error('Route dispatch failed', [
+        //        'controller' => $routeControllerName,
+        //        'method' => $routeControllerMethod,
+        //        'error' => $e->getMessage(),
+        //   ]);
+        //    throw $e;
+        //}
+    }
+
+}
diff --git a/core/lib/Security/Authentication/AuthenticationRequest.php b/core/lib/Security/Authentication/AuthenticationRequest.php
new file mode 100644
index 0000000..040c3e1
--- /dev/null
+++ b/core/lib/Security/Authentication/AuthenticationRequest.php
@@ -0,0 +1,180 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Security\Authentication;
+
+/**
+ * Authentication Request
+ * 
+ * Request DTO from controller to AuthenticationManager.
+ * Encapsulates all input data for authentication operations.
+ */
+readonly class AuthenticationRequest
+{
+    // Action types
+    public const ACTION_START = 'start';
+    public const ACTION_IDENTIFY = 'identify';
+    public const ACTION_VERIFY = 'verify';
+    public const ACTION_CHALLENGE = 'challenge';
+    public const ACTION_REDIRECT = 'redirect';
+    public const ACTION_CALLBACK = 'callback';
+    public const ACTION_STATUS = 'status';
+    public const ACTION_CANCEL = 'cancel';
+    public const ACTION_REFRESH = 'refresh';
+    public const ACTION_LOGOUT = 'logout';
+
+    public function __construct(
+        /** Action to perform */
+        public string $action,
+        
+        /** Session ID (for ongoing auth flows) */
+        public ?string $sessionId = null,
+        
+        /** User identity (email/username) */
+        public ?string $identity = null,
+        
+        /** Authentication method/provider ID */
+        public ?string $method = null,
+        
+        /** Secret/code/password */
+        public ?string $secret = null,
+        
+        /** Callback URL for redirect flows */
+        public ?string $callbackUrl = null,
+        
+        /** Return URL after authentication */
+        public ?string $returnUrl = null,
+        
+        /** Additional parameters (OIDC callback params, etc.) */
+        public array $params = [],
+        
+        /** Token for refresh/logout operations */
+        public ?string $token = null,
+    ) {}
+
+    // =========================================================================
+    // Factory Methods
+    // =========================================================================
+
+    /**
+     * Create a start request
+     */
+    public static function start(): self
+    {
+        return new self(action: self::ACTION_START);
+    }
+
+    /**
+     * Create an identify request
+     */
+    public static function identify(string $sessionId, string $identity): self
+    {
+        return new self(
+            action: self::ACTION_IDENTIFY,
+            sessionId: $sessionId,
+            identity: $identity,
+        );
+    }
+
+    /**
+     * Create a verify request (password, TOTP code, etc.)
+     */
+    public static function verify(string $sessionId, string $method, string $secret): self
+    {
+        return new self(
+            action: self::ACTION_VERIFY,
+            sessionId: $sessionId,
+            method: $method,
+            secret: $secret,
+        );
+    }
+
+    /**
+     * Create a begin challenge request
+     */
+    public static function challenge(string $sessionId, string $method): self
+    {
+        return new self(
+            action: self::ACTION_CHALLENGE,
+            sessionId: $sessionId,
+            method: $method,
+        );
+    }
+
+    /**
+     * Create a begin redirect request
+     */
+    public static function redirect(
+        string $sessionId,
+        string $method,
+        string $callbackUrl,
+        ?string $returnUrl = null
+    ): self {
+        return new self(
+            action: self::ACTION_REDIRECT,
+            sessionId: $sessionId,
+            method: $method,
+            callbackUrl: $callbackUrl,
+            returnUrl: $returnUrl,
+        );
+    }
+
+    /**
+     * Create a callback request (OIDC/SAML return)
+     */
+    public static function callback(string $sessionId, string $method, array $params): self
+    {
+        return new self(
+            action: self::ACTION_CALLBACK,
+            sessionId: $sessionId,
+            method: $method,
+            params: $params,
+        );
+    }
+
+    /**
+     * Create a status request
+     */
+    public static function status(string $sessionId): self
+    {
+        return new self(
+            action: self::ACTION_STATUS,
+            sessionId: $sessionId,
+        );
+    }
+
+    /**
+     * Create a cancel request
+     */
+    public static function cancel(string $sessionId): self
+    {
+        return new self(
+            action: self::ACTION_CANCEL,
+            sessionId: $sessionId,
+        );
+    }
+
+    /**
+     * Create a refresh token request
+     */
+    public static function refresh(string $token): self
+    {
+        return new self(
+            action: self::ACTION_REFRESH,
+            token: $token,
+        );
+    }
+
+    /**
+     * Create a logout request
+     */
+    public static function logout(?string $token = null, bool $allDevices = false): self
+    {
+        return new self(
+            action: self::ACTION_LOGOUT,
+            token: $token,
+            params: ['all_devices' => $allDevices],
+        );
+    }
+}
diff --git a/core/lib/Security/Authentication/AuthenticationResponse.php b/core/lib/Security/Authentication/AuthenticationResponse.php
new file mode 100644
index 0000000..63a8074
--- /dev/null
+++ b/core/lib/Security/Authentication/AuthenticationResponse.php
@@ -0,0 +1,272 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Security\Authentication;
+
+/**
+ * Authentication Response
+ * 
+ * Response DTO from AuthenticationManager to controller.
+ * Contains all data needed to build the HTTP response.
+ */
+readonly class AuthenticationResponse
+{
+    // Status constants
+    public const STATUS_SUCCESS = 'success';
+    public const STATUS_PENDING = 'pending';
+    public const STATUS_CHALLENGE = 'challenge';
+    public const STATUS_REDIRECT = 'redirect';
+    public const STATUS_FAILED = 'failed';
+    public const STATUS_CANCELLED = 'cancelled';
+
+    // Error codes
+    public const ERROR_INVALID_REQUEST = 'invalid_request';
+    public const ERROR_INVALID_CREDENTIALS = 'invalid_credentials';
+    public const ERROR_INVALID_PROVIDER = 'invalid_provider';
+    public const ERROR_INVALID_SESSION = 'invalid_session';
+    public const ERROR_SESSION_EXPIRED = 'session_expired';
+    public const ERROR_USER_NOT_FOUND = 'user_not_found';
+    public const ERROR_USER_DISABLED = 'user_disabled';
+    public const ERROR_ACCOUNT_LOCKED = 'account_locked';
+    public const ERROR_RATE_LIMITED = 'rate_limited';
+    public const ERROR_INTERNAL = 'internal_error';
+
+    public function __construct(
+        /** Response status */
+        public string $status,
+        
+        /** Suggested HTTP status code */
+        public int $httpStatus = 200,
+        
+        /** Session ID (for ongoing flows) */
+        public ?string $sessionId = null,
+        
+        /** Current session state */
+        public ?string $sessionState = null,
+        
+        /** Serialized user data (on success) */
+        public ?array $user = null,
+        
+        /** Auth tokens (on success) */
+        public ?array $tokens = null,
+        
+        /** Available authentication methods */
+        public ?array $methods = null,
+        
+        /** Challenge information */
+        public ?array $challenge = null,
+        
+        /** Redirect URL (for OIDC/SAML) */
+        public ?string $redirectUrl = null,
+        
+        /** Return URL (after redirect auth) */
+        public ?string $returnUrl = null,
+        
+        /** Error code */
+        public ?string $errorCode = null,
+        
+        /** Error message */
+        public ?string $errorMessage = null,
+    ) {}
+
+    // =========================================================================
+    // Factory Methods
+    // =========================================================================
+
+    /**
+     * Session started response
+     */
+    public static function started(string $sessionId, array $methods): self
+    {
+        return new self(
+            status: self::STATUS_SUCCESS,
+            sessionId: $sessionId,
+            methods: $methods,
+        );
+    }
+
+    /**
+     * User identified response
+     */
+    public static function identified(string $sessionId, string $state, array $methods): self
+    {
+        return new self(
+            status: self::STATUS_SUCCESS,
+            sessionId: $sessionId,
+            sessionState: $state,
+            methods: $methods,
+        );
+    }
+
+    /**
+     * Authentication successful
+     */
+    public static function success(array $user, array $tokens): self
+    {
+        return new self(
+            status: self::STATUS_SUCCESS,
+            user: $user,
+            tokens: $tokens,
+        );
+    }
+
+    /**
+     * MFA/additional factor required
+     */
+    public static function pending(string $sessionId, array $methods): self
+    {
+        return new self(
+            status: self::STATUS_PENDING,
+            sessionId: $sessionId,
+            methods: $methods,
+        );
+    }
+
+    /**
+     * Challenge sent (SMS, email, etc.)
+     */
+    public static function challenge(string $sessionId, array $challengeInfo): self
+    {
+        return new self(
+            status: self::STATUS_CHALLENGE,
+            sessionId: $sessionId,
+            challenge: $challengeInfo,
+        );
+    }
+
+    /**
+     * Redirect required (OIDC/SAML)
+     */
+    public static function redirect(string $sessionId, string $redirectUrl): self
+    {
+        return new self(
+            status: self::STATUS_REDIRECT,
+            sessionId: $sessionId,
+            redirectUrl: $redirectUrl,
+        );
+    }
+
+    /**
+     * Authentication failed
+     */
+    public static function failed(
+        string $errorCode,
+        ?string $errorMessage = null,
+        int $httpStatus = 401
+    ): self {
+        return new self(
+            status: self::STATUS_FAILED,
+            httpStatus: $httpStatus,
+            errorCode: $errorCode,
+            errorMessage: $errorMessage,
+        );
+    }
+
+    /**
+     * Session cancelled
+     */
+    public static function cancelled(): self
+    {
+        return new self(
+            status: self::STATUS_CANCELLED,
+        );
+    }
+
+    /**
+     * Status check response
+     */
+    public static function status(
+        string $sessionId,
+        string $state,
+        array $methods,
+        ?string $identity = null
+    ): self {
+        return new self(
+            status: self::STATUS_SUCCESS,
+            sessionId: $sessionId,
+            sessionState: $state,
+            methods: $methods,
+            user: $identity ? ['identity' => $identity] : null,
+        );
+    }
+
+    // =========================================================================
+    // Status Checks
+    // =========================================================================
+
+    public function isSuccess(): bool
+    {
+        return $this->status === self::STATUS_SUCCESS;
+    }
+
+    public function isPending(): bool
+    {
+        return $this->status === self::STATUS_PENDING;
+    }
+
+    public function isRedirect(): bool
+    {
+        return $this->status === self::STATUS_REDIRECT;
+    }
+
+    public function isFailed(): bool
+    {
+        return $this->status === self::STATUS_FAILED;
+    }
+
+    public function hasTokens(): bool
+    {
+        return $this->tokens !== null && !empty($this->tokens);
+    }
+
+    // =========================================================================
+    // Serialization
+    // =========================================================================
+
+    /**
+     * Convert to array for JSON response
+     */
+    public function toArray(): array
+    {
+        $result = ['status' => $this->status];
+
+        if ($this->sessionId !== null) {
+            $result['session'] = $this->sessionId;
+        }
+
+        if ($this->sessionState !== null) {
+            $result['state'] = $this->sessionState;
+        }
+
+        if ($this->user !== null) {
+            $result['user'] = $this->user;
+        }
+
+        if ($this->methods !== null) {
+            $result['methods'] = $this->methods;
+        }
+
+        if ($this->challenge !== null) {
+            $result['challenge'] = $this->challenge;
+        }
+
+        if ($this->redirectUrl !== null) {
+            $result['redirect_url'] = $this->redirectUrl;
+        }
+
+        if ($this->returnUrl !== null) {
+            $result['return_url'] = $this->returnUrl;
+        }
+
+        if ($this->errorCode !== null) {
+            $result['error_code'] = $this->errorCode;
+        }
+
+        if ($this->errorMessage !== null) {
+            $result['error'] = $this->errorMessage;
+        }
+
+        return $result;
+    }
+}
diff --git a/core/lib/Security/AuthenticationManager.php b/core/lib/Security/AuthenticationManager.php
new file mode 100644
index 0000000..9e5cea1
--- /dev/null
+++ b/core/lib/Security/AuthenticationManager.php
@@ -0,0 +1,793 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Security;
+
+use KTXC\Models\Identity\User;
+use KTXC\Resource\ProviderManager;
+use KTXC\Security\Authentication\AuthenticationRequest;
+use KTXC\Security\Authentication\AuthenticationResponse;
+use KTXC\Service\TokenService;
+use KTXC\Service\UserService;
+use KTXC\Service\UserProvisioningService;
+use KTXC\SessionTenant;
+use KTXF\Cache\CacheScope;
+use KTXF\Cache\EphemeralCacheInterface;
+use KTXF\Security\Authentication\AuthenticationProviderInterface;
+use KTXF\Security\Authentication\AuthenticationSession;
+use KTXF\Security\Authentication\ProviderContext;
+
+/**
+ * Authentication Manager
+ */
+class AuthenticationManager
+{
+    private const CACHE_USAGE = 'auth';
+    private string $securityCode;
+
+    public function __construct(
+        private readonly SessionTenant $tenant,
+        private readonly EphemeralCacheInterface $cache,
+        private readonly ProviderManager $providerManager,
+        private readonly TokenService $tokenService,
+        private readonly UserService $userService,
+        private readonly UserProvisioningService $provisioningService,
+    ) {
+        $this->securityCode = $this->tenant->configuration()->security()->code();
+    }
+
+    // =========================================================================
+    // Main Entry Point
+    // =========================================================================
+
+    /**
+     * Handle an authentication request
+     */
+    public function handle(AuthenticationRequest $request): AuthenticationResponse
+    {
+        return match ($request->action) {
+            AuthenticationRequest::ACTION_START => $this->handleStart(),
+            AuthenticationRequest::ACTION_IDENTIFY => $this->handleIdentify($request),
+            AuthenticationRequest::ACTION_VERIFY => $this->handleVerify($request),
+            AuthenticationRequest::ACTION_CHALLENGE => $this->handleChallenge($request),
+            AuthenticationRequest::ACTION_REDIRECT => $this->handleRedirect($request),
+            AuthenticationRequest::ACTION_CALLBACK => $this->handleCallback($request),
+            AuthenticationRequest::ACTION_STATUS => $this->handleStatus($request),
+            AuthenticationRequest::ACTION_CANCEL => $this->handleCancel($request),
+            AuthenticationRequest::ACTION_REFRESH => $this->handleRefresh($request),
+            AuthenticationRequest::ACTION_LOGOUT => $this->handleLogout($request),
+            default => AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_REQUEST,
+                'Unknown action',
+                400
+            ),
+        };
+    }
+
+    // =========================================================================
+    // Action Handlers
+    // =========================================================================
+
+    /**
+     * Start a new authentication session
+     */
+    private function handleStart(): AuthenticationResponse
+    {
+        $methods = $this->methodsConfigured();
+
+        $session = AuthenticationSession::create(
+            $this->tenant->identifier(),
+            AuthenticationSession::STATE_FRESH
+        );
+        
+        $this->saveSession($session);
+
+        return AuthenticationResponse::started($session->id, $methods);
+    }
+
+    /**
+     * Identify user (identity-first flow)
+     */
+    private function handleIdentify(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $session = $this->retrieveSession($request->sessionId);
+        
+        if ($session === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_SESSION_EXPIRED,
+                'Invalid or expired session',
+                401
+            );
+        }
+
+        // Return all tenant methods to prevent enumeration
+        // Filter to non-redirect methods since redirects don't need identity first
+        $methods = $this->methodsConfigured();
+        $methods = array_values(array_filter($methods, fn($m) => $m['method'] !== 'redirect'));
+        $require = $this->tenant->configuration()->authentication()->methodsMinimal();
+
+        // Store identity in session without validating to prevent enumeration
+        $session->setMethods(array_column($methods, 'id'), $require);
+        $session->setIdentity($request->identity);
+        $this->saveSession($session);
+
+        return AuthenticationResponse::identified($session->id, $session->state(), $methods);
+    }
+
+    /**
+     * Verify credentials or challenge response
+     */
+    private function handleVerify(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $session = $this->retrieveSession($request->sessionId);
+        
+        if ($session === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_SESSION_EXPIRED,
+                'Invalid or expired session',
+                401
+            );
+        }
+
+        if (empty($session->userIdentity)) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_SESSION,
+                'Identity is required',
+                400
+            );
+        }
+
+        $method = $request->method;
+
+        if (!$session->methodEligible($method)) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_REQUEST,
+                'Method not available',
+                400
+            );
+        }
+
+        $provider = $this->providerManager->resolve('authentication', $method);
+        if (!$provider instanceof AuthenticationProviderInterface) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_PROVIDER,
+                'Provider not available',
+                400
+            );
+        }
+
+        // Build provider context
+        $context = $this->buildProviderContext($session, $method);
+
+        // Call appropriate provider method based on provider type
+        $providerMethod = $provider->method();
+        
+        if ($providerMethod === AuthenticationProviderInterface::METHOD_CREDENTIAL) {
+            $result = $provider->verify($context, $request->secret);
+        } elseif ($providerMethod === AuthenticationProviderInterface::METHOD_CHALLENGE) {
+            $result = $provider->verifyChallenge($context, $request->secret);
+        } else {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_PROVIDER,
+                'Provider cannot be used for direct verification',
+                400
+            );
+        }
+
+        // Store any session data from provider
+        if (!empty($result->sessionData)) {
+            $session->setMeta("provider:{$method}", $result->sessionData);
+        }
+
+        if (!$result->isSuccess()) {
+            $this->saveSession($session);
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_CREDENTIALS,
+                'Authentication failed. If you haven\'t set up this method, try another option.',
+                401
+            );
+        }
+
+        // Resolve user if not yet set
+        if ($session->userIdentifier === null) {
+            $user = $this->userService->fetchByIdentity($session->userIdentity);
+            if ($user === null) {
+                return AuthenticationResponse::failed(
+                    AuthenticationResponse::ERROR_USER_NOT_FOUND,
+                    'User not found',
+                    401
+                );
+            }
+            $session->userIdentifier = $user->getId();
+        }
+
+        // Mark method complete
+        $session->methodCompleted($method);
+        $this->saveSession($session);
+
+        // Check if all required factors are complete
+        if ($session->state() !== AuthenticationSession::STATE_COMPLETE) {
+            $remainingMethods = $this->methodsConfigured($session->methodsCompleted);
+            // Filter out redirect methods - they can't be used as secondary factors
+            $remainingMethods = array_values(array_filter(
+                $remainingMethods,
+                fn($m) => $m['method'] !== 'redirect'
+            ));
+            return AuthenticationResponse::pending($session->id, $remainingMethods);
+        }
+
+        // Authentication complete - issue tokens
+        return $this->completeAuthentication($session);
+    }
+
+    /**
+     * Begin a challenge (SMS, email, TOTP preparation)
+     */
+    private function handleChallenge(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $session = $this->retrieveSession($request->sessionId);
+        
+        if ($session === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_SESSION_EXPIRED,
+                'Invalid or expired session',
+                401
+            );
+        }
+
+        $method = $request->method;
+
+        // Resolve user identifier if needed
+        if ($session->userIdentifier === null && $session->userIdentity) {
+            $user = $this->userService->fetchByIdentity($session->userIdentity);
+            if ($user) {
+                $session->userIdentifier = $user->getId();
+                $this->saveSession($session);
+            }
+        }
+
+        $provider = $this->providerManager->resolve('authentication', $method);
+        if (!$provider instanceof AuthenticationProviderInterface) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_PROVIDER,
+                'Provider not available',
+                400
+            );
+        }
+
+        $context = $this->buildProviderContext($session, $method);
+        $result = $provider->beginChallenge($context);
+
+        // Store any session data from provider
+        if (!empty($result->sessionData)) {
+            $session->setMeta("provider:{$method}", $result->sessionData);
+            $this->saveSession($session);
+        }
+
+        if ($result->isChallenge()) {
+            return AuthenticationResponse::challenge(
+                $session->id,
+                $result->getClientData('challenge', [])
+            );
+        }
+
+        if ($result->isFailed()) {
+            // Generic error to prevent enumeration
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_CREDENTIALS,
+                'Authentication failed. If you haven\'t set up this method, try another option.',
+                401
+            );
+        }
+
+        // Unexpected result
+        return AuthenticationResponse::failed(
+            AuthenticationResponse::ERROR_INTERNAL,
+            'Unexpected provider response',
+            500
+        );
+    }
+
+    /**
+     * Begin redirect-based authentication (OIDC/SAML)
+     */
+    private function handleRedirect(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $session = $this->retrieveSession($request->sessionId);
+        
+        if ($session === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_SESSION_EXPIRED,
+                'Invalid or expired session',
+                401
+            );
+        }
+
+        $method = $request->method;
+
+        $provider = $this->providerManager->resolve('authentication', $method);
+        if (!$provider instanceof AuthenticationProviderInterface) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_PROVIDER,
+                'Provider not available',
+                400
+            );
+        }
+
+        if ($provider->method() !== AuthenticationProviderInterface::METHOD_REDIRECT) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_PROVIDER,
+                'Provider does not support redirect authentication',
+                400
+            );
+        }
+
+        $context = $this->buildProviderContext($session, $method);
+        $result = $provider->beginRedirect($context, $request->callbackUrl, $request->returnUrl);
+
+        if ($result->isFailed()) {
+            return AuthenticationResponse::failed(
+                $result->errorCode ?? AuthenticationResponse::ERROR_INTERNAL,
+                $result->errorMessage ?? 'Failed to initiate redirect authentication',
+                500
+            );
+        }
+
+        // Store provider session data (state, nonce, etc.)
+        $session->setMeta("provider:{$method}", $result->sessionData);
+        $session->setMeta('redirect_method', $method);
+        $this->saveSession($session);
+
+        return AuthenticationResponse::redirect(
+            $session->id,
+            $result->getClientData('redirect_url')
+        );
+    }
+
+    /**
+     * Complete redirect-based authentication (callback from IdP)
+     */
+    private function handleCallback(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $session = $this->retrieveSession($request->sessionId);
+        
+        if ($session === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_SESSION_EXPIRED,
+                'Invalid or expired session',
+                401
+            );
+        }
+
+        $method = $request->method;
+        $expectedMethod = $session->getMeta('redirect_method');
+
+        if ($expectedMethod !== $method) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_SESSION,
+                'Provider mismatch',
+                400
+            );
+        }
+
+        $provider = $this->providerManager->resolve('authentication', $method);
+        if (!$provider instanceof AuthenticationProviderInterface) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_PROVIDER,
+                'Provider not available',
+                400
+            );
+        }
+
+        $context = $this->buildProviderContext($session, $method);
+        $result = $provider->completeRedirect($context, $request->params);
+
+        if ($result->isFailed()) {
+            $this->deleteSession($session->id);
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_CREDENTIALS,
+                $result->errorMessage ?? 'Authentication failed',
+                401
+            );
+        }
+
+        // Find or provision user from external identity
+        $providerConfig = $this->getProviderConfig($method);
+        $user = $this->findOrProvisionUser($method, $result->identity, $providerConfig);
+
+        if ($user === null) {
+            $this->deleteSession($session->id);
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_USER_NOT_FOUND,
+                'User not found and auto-provisioning is disabled',
+                401
+            );
+        }
+
+        // Set user in session
+        $session->userIdentifier = $user->getId();
+        $session->userIdentity = $user->getIdentity();
+        $session->methodCompleted($method);
+
+        // Check if MFA is required
+        $require = $this->tenant->configuration()->authentication()->methodsMinimal();
+        if ($require > 1) {
+            $remainingMethods = $this->methodsConfigured([$method]);
+            // Filter out redirect methods - they can't be used as secondary factors
+            $remainingMethods = array_values(array_filter(
+                $remainingMethods,
+                fn($m) => $m['method'] !== 'redirect'
+            ));
+            $session->setMethods(array_column($remainingMethods, 'id'), $require);
+            $this->saveSession($session);
+            
+            return AuthenticationResponse::pending($session->id, $remainingMethods);
+        }
+
+        // Authentication complete
+        return $this->completeAuthentication($session);
+    }
+
+    /**
+     * Get session status
+     */
+    private function handleStatus(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $session = $this->retrieveSession($request->sessionId);
+        
+        if ($session === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_SESSION_EXPIRED,
+                'Session not found or expired',
+                404
+            );
+        }
+
+        $methods = $this->methodsConfigured($session->methodsCompleted);
+
+        return AuthenticationResponse::status(
+            $session->id,
+            $session->state(),
+            $methods,
+            $session->userIdentity
+        );
+    }
+
+    /**
+     * Cancel session
+     */
+    private function handleCancel(AuthenticationRequest $request): AuthenticationResponse
+    {
+        if ($request->sessionId) {
+            $this->deleteSession($request->sessionId);
+        }
+
+        return AuthenticationResponse::cancelled();
+    }
+
+    /**
+     * Refresh access token
+     */
+    private function handleRefresh(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $payload = $this->tokenService->validateToken($request->token, $this->securityCode);
+        
+        if (!$payload) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_CREDENTIALS,
+                'Invalid or expired refresh token',
+                401
+            );
+        }
+
+        if (($payload['type'] ?? null) !== 'refresh') {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_INVALID_CREDENTIALS,
+                'Invalid token type',
+                401
+            );
+        }
+
+        $identifier = $payload['identifier'] ?? null;
+        $userData = $this->userService->fetchByIdentifier($identifier);
+        
+        if ($userData === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_USER_NOT_FOUND,
+                'User not found',
+                401
+            );
+        }
+
+        $user = new User();
+        $user->populate($userData, 'users');
+
+        $accessToken = $this->tokenService->createToken(
+            [
+                'tenant' => $this->tenant->identifier(),
+                'identifier' => $user->getId(),
+                'identity' => $user->getIdentity(),
+                'label' => $user->getLabel(),
+                'permissions' => $user->getPermissions(),
+                'mfa_verified' => true,
+            ],
+            $this->securityCode,
+            900
+        );
+
+        return AuthenticationResponse::success(
+            $this->buildUserData($user),
+            ['access' => $accessToken]
+        );
+    }
+
+    /**
+     * Logout
+     */
+    private function handleLogout(AuthenticationRequest $request): AuthenticationResponse
+    {
+        $allDevices = $request->params['all_devices'] ?? false;
+
+        if ($request->token) {
+            $payload = $this->tokenService->validateToken($request->token, $this->securityCode);
+            
+            if ($payload) {
+                if ($allDevices && isset($payload['identity'])) {
+                    $this->tokenService->blacklistUserTokensBefore($payload['identity'], time());
+                } elseif (isset($payload['jti'], $payload['exp'])) {
+                    $this->tokenService->blacklist($payload['jti'], $payload['exp']);
+                }
+            }
+        }
+
+        return AuthenticationResponse::cancelled();
+    }
+
+    // =========================================================================
+    // Helper Methods
+    // =========================================================================
+
+    /**
+     * Build provider context from session
+     */
+    private function buildProviderContext(AuthenticationSession $session, string $method): ProviderContext
+    {
+        return new ProviderContext(
+            tenantId: $session->tenantIdentifier,
+            userIdentifier: $session->userIdentifier,
+            userIdentity: $session->userIdentity,
+            metadata: $session->getMeta("provider:{$method}") ?? [],
+            config: $this->getProviderConfig($method),
+        );
+    }
+
+    /**
+     * Get provider configuration
+     */
+    private function getProviderConfig(string $method): array
+    {
+        $providers = $this->tenant->configuration()->authentication()->providers();
+        return $providers[$method]['config'] ?? [];
+    }
+
+    /**
+     * Complete authentication and issue tokens
+     */
+    private function completeAuthentication(AuthenticationSession $session): AuthenticationResponse
+    {
+        $userData = $this->userService->fetchByIdentifier($session->userIdentifier);
+        
+        if ($userData === null) {
+            return AuthenticationResponse::failed(
+                AuthenticationResponse::ERROR_USER_NOT_FOUND,
+                'User not found',
+                401
+            );
+        }
+
+        $user = new User();
+        $user->populate($userData, 'users');
+
+        $tokens = $this->createTokens($user, count($session->methodsCompleted) > 1);
+
+        $this->deleteSession($session->id);
+
+        return AuthenticationResponse::success(
+            $this->buildUserData($user),
+            $tokens
+        );
+    }
+
+    /**
+     * Build user data for response
+     */
+    private function buildUserData(User $user): array
+    {
+        return [
+            'identifier' => $user->getId(),
+            'identity' => $user->getIdentity(),
+            'label' => $user->getLabel(),
+            'permissions' => $user->getPermissions(),
+        ];
+    }
+
+    /**
+     * Get configured authentication methods
+     */
+    private function methodsConfigured(array $methodsCompleted = []): array
+    {
+        $tenantProviders = $this->tenant->configuration()->authentication()->providers();
+        $methods = [];
+
+        foreach ($tenantProviders as $providerId => $providerConfiguration) {
+            if (!($providerConfiguration['enabled'] ?? false)) {
+                continue;
+            }
+
+            if (in_array($providerId, $methodsCompleted, true)) {
+                continue;
+            }
+
+            $provider = $this->providerManager->resolve('authentication', $providerId);
+            if (!$provider instanceof AuthenticationProviderInterface) {
+                continue;
+            }
+
+            $methods[] = [
+                'id' => $providerId,
+                'method' => $provider->method(),
+                'label' => $providerConfiguration['label'] ?? $provider->label(),
+                'icon' => $providerConfiguration['icon'] ?? $provider->icon() ?? null,
+            ];
+        }
+
+        return $methods;
+    }
+
+    /**
+     * Create JWT tokens
+     */
+    private function createTokens(User $user, bool $mfaVerified = false): array
+    {
+        $payload = [
+            'tenant' => $this->tenant->identifier(),
+            'identifier' => $user->getId(),
+            'identity' => $user->getIdentity(),
+            'label' => $user->getLabel(),
+            'permissions' => $user->getPermissions(),
+            'mfa_verified' => $mfaVerified,
+        ];
+
+        return [
+            'access' => $this->tokenService->createToken($payload, $this->securityCode, 900),
+            'refresh' => $this->tokenService->createToken(
+                [
+                    'tenant' => $payload['tenant'],
+                    'identifier' => $payload['identifier'],
+                    'identity' => $payload['identity'],
+                    'type' => 'refresh',
+                ],
+                $this->securityCode,
+                604800
+            ),
+        ];
+    }
+
+    /**
+     * Find or provision user from external identity
+     */
+    private function findOrProvisionUser(
+        string $providerId,
+        array $identity,
+        array $providerConfig
+    ): ?User {
+        $userIdentity = $identity['email'] ?? $identity['identity'] ?? null;
+        $externalSubject = $identity['subject'] ?? $identity['sub'] ?? null;
+        $attributes = $identity['attributes'] ?? [];
+        $attributes['identity'] = $userIdentity;
+        $attributes['external_subject'] = $externalSubject;
+
+        // Try to find by external subject first
+        if ($externalSubject) {
+            $user = $this->provisioningService->findByExternalIdentity($providerId, $externalSubject);
+            if ($user) {
+                $this->provisioningService->syncProfile(
+                    $user,
+                    $attributes,
+                    $providerConfig['attribute_map'] ?? []
+                );
+                return $user;
+            }
+        }
+
+        // Try to find by identity
+        if ($userIdentity) {
+            $existingUser = $this->userService->fetchByIdentity($userIdentity);
+            if ($existingUser) {
+                if ($existingUser->getProvider() === $providerId) {
+                    if ($externalSubject) {
+                        $this->provisioningService->linkExternalIdentity(
+                            $existingUser,
+                            $providerId,
+                            $externalSubject,
+                            $attributes
+                        );
+                    }
+                    $this->provisioningService->syncProfile(
+                        $existingUser,
+                        $attributes,
+                        $providerConfig['attribute_map'] ?? []
+                    );
+                    return $existingUser;
+                }
+                return null;
+            }
+        }
+
+        // Auto-provision if enabled
+        if ($this->provisioningService->isAutoProvisioningEnabled($providerId)) {
+            return $this->provisioningService->provisionUser(
+                $providerId,
+                $attributes,
+                $providerConfig
+            );
+        }
+
+        return null;
+    }
+
+    // =========================================================================
+    // Session Cache Helpers
+    // =========================================================================
+
+    /**
+     * Retrieve authentication session from cache
+     */
+    private function retrieveSession(?string $sessionId): ?AuthenticationSession
+    {
+        if (empty($sessionId)) {
+            return null;
+        }
+
+        $data = $this->cache->get($sessionId, CacheScope::Tenant, self::CACHE_USAGE);
+        
+        if ($data === null) {
+            return null;
+        }
+
+        if ($data instanceof AuthenticationSession) {
+            if ($data->isExpired()) {
+                $this->deleteSession($sessionId);
+                return null;
+            }
+            return $data;
+        }
+
+        return null;
+    }
+
+    /**
+     * Save authentication session to cache
+     */
+    private function saveSession(AuthenticationSession $session): bool
+    {
+        $ttl = $session->expiresAt > 0 ? $session->expiresAt - time() : AuthenticationSession::DEFAULT_TTL;
+        
+        return $this->cache->set(
+            $session->id,
+            $session,
+            CacheScope::Tenant,
+            self::CACHE_USAGE,
+            max($ttl, 60)
+        );
+    }
+
+    /**
+     * Delete authentication session from cache
+     */
+    private function deleteSession(string $sessionId): bool
+    {
+        return $this->cache->delete($sessionId, CacheScope::Tenant, self::CACHE_USAGE);
+    }
+}
diff --git a/core/lib/Server.php b/core/lib/Server.php
new file mode 100644
index 0000000..729e2ea
--- /dev/null
+++ b/core/lib/Server.php
@@ -0,0 +1,183 @@
+<?php
+
+namespace KTXC;
+
+use ErrorException;
+use KTXC\Http\Request\Request;
+use KTXC\Http\Response\Response;
+use KTXC\Injection\Container;
+use Psr\Log\LoggerInterface;
+use Throwable;
+
+/**
+ * Provides static access to the server container
+ */
+class Server
+{
+    public const ENVIRONMENT_DEV = 'dev';
+    public const ENVIRONMENT_PROD = 'prod';
+
+    protected static $kernel;
+
+    public static function run() {
+        // Set up global error handler before anything else
+        self::setupErrorHandlers();
+        
+        try {
+            self::$kernel = new Kernel(self::ENVIRONMENT_DEV, true);
+            $request = Request::createFromGlobals();
+            $response = self::$kernel->handle($request);
+            if ($response instanceof Response) {
+                $response->send();
+            }
+        } catch (\Throwable $e) {
+            self::logException($e);
+            $content = self::debug()
+                ? '<pre>' . htmlspecialchars((string) $e) . '</pre>'
+                : 'An error occurred. Please try again later.';
+            $response = new Response($content, Response::HTTP_INTERNAL_SERVER_ERROR, [
+                'Content-Type' => 'text/html; charset=UTF-8',
+            ]);
+            $response->send();
+            exit(1);
+        }
+    }
+
+    public static function environment(): string {
+        return self::$kernel->environment();
+    }
+
+    public static function debug(): bool {
+        return self::$kernel->debug();
+    }
+
+    public static function runtimeKernel(): Kernel {
+        return self::$kernel;
+    }
+
+    public static function runtimeContainer(): Container {
+        return self::$kernel->container();
+    }
+
+    public static function runtimeRootLocation(): string {
+        return self::$kernel->folderRoot();
+    }
+
+    public static function runtimeModuleLocation(): string {
+        return self::$kernel->folderRoot() . '/modules';
+    }
+
+    /**
+     * Set up global error and exception handlers
+     */
+    protected static function setupErrorHandlers(): void {
+        // Convert PHP errors to exceptions
+        set_error_handler(function ($errno, $errstr, $errfile, $errline) {
+            // Don't throw exception if error reporting is turned off
+            if (!(error_reporting() & $errno)) {
+                return false;
+            }
+            
+            $message = sprintf(
+                "PHP Error [%d]: %s in %s:%d",
+                $errno,
+                $errstr,
+                $errfile,
+                $errline
+            );
+            
+            self::logError($message, [
+                'errno' => $errno,
+                'file' => $errfile,
+                'line' => $errline,
+            ]);
+            
+            // Throw exception for fatal errors
+            if ($errno === E_ERROR || $errno === E_CORE_ERROR || $errno === E_COMPILE_ERROR || $errno === E_USER_ERROR) {
+                throw new ErrorException($errstr, 0, $errno, $errfile, $errline);
+            }
+            
+            return true;
+        });
+
+        // Handle uncaught exceptions
+        set_exception_handler(function (Throwable $exception) {
+            self::logException($exception);
+            
+            if (self::debug()) {
+                echo '<pre>Uncaught Exception: ' . $exception . '</pre>';
+            } else {
+                echo 'An unexpected error occurred. Please try again later.';
+            }
+            
+            exit(1);
+        });
+
+        // Handle fatal errors
+        register_shutdown_function(function () {
+            $error = error_get_last();
+            if ($error !== null && in_array($error['type'], [E_ERROR, E_CORE_ERROR, E_COMPILE_ERROR, E_PARSE])) {
+                $message = sprintf(
+                    "Fatal Error [%d]: %s in %s:%d",
+                    $error['type'],
+                    $error['message'],
+                    $error['file'],
+                    $error['line']
+                );
+                
+                self::logError($message, $error);
+                
+                if (self::debug()) {
+                    echo '<pre>' . $message . '</pre>';
+                } else {
+                    echo 'A fatal error occurred. Please try again later.';
+                }
+            }
+        });
+    }
+
+    /**
+     * Log an error message
+     */
+    protected static function logError(string $message, array $context = []): void {
+        try {
+            if (self::$kernel && self::$kernel->container()->has(LoggerInterface::class)) {
+                $logger = self::$kernel->container()->get(LoggerInterface::class);
+                $logger->error($message, $context);
+            } else {
+                // Fallback to error_log if logger not available
+                error_log($message . ' ' . json_encode($context));
+            }
+        } catch (Throwable $e) {
+            // Last resort fallback
+            error_log('Error logging failed: ' . $e->getMessage());
+            error_log($message . ' ' . json_encode($context));
+        }
+    }
+
+    /**
+     * Log an exception
+     */
+    protected static function logException(Throwable $exception): void {
+        try {
+            if (self::$kernel && self::$kernel->container()->has(LoggerInterface::class)) {
+                $logger = self::$kernel->container()->get(LoggerInterface::class);
+                $logger->error('Exception caught: ' . $exception->getMessage(), [
+                    'exception' => $exception,
+                    'file' => $exception->getFile(),
+                    'line' => $exception->getLine(),
+                    'trace' => $exception->getTraceAsString(),
+                ]);
+            } else {
+                // Fallback to error_log if logger not available
+                error_log('Exception: ' . $exception->getMessage() . ' in ' . $exception->getFile() . ':' . $exception->getLine());
+                error_log($exception->getTraceAsString());
+            }
+        } catch (Throwable $e) {
+            // Last resort fallback
+            error_log('Exception logging failed: ' . $e->getMessage());
+            error_log('Original exception: ' . $exception->getMessage());
+        }
+    }
+
+}
diff --git a/core/lib/Service/ConfigurationService.php b/core/lib/Service/ConfigurationService.php
new file mode 100644
index 0000000..a5ea6b8
--- /dev/null
+++ b/core/lib/Service/ConfigurationService.php
@@ -0,0 +1,228 @@
+<?php
+
+namespace KTXC\Service;
+
+use KTXC\Db\DataStore;
+use KTXC\Db\Collection;
+use KTXC\Db\UTCDateTime;
+use KTXC\SessionTenant;
+
+class ConfigurationService
+{
+    // Service constants
+    private const TABLE_NAME = 'system_configuration';
+    // Type constants for configuration values
+    public const TYPE_NULL = 0;
+    public const TYPE_STRING = 1;
+    public const TYPE_INTEGER = 2;
+    public const TYPE_FLOAT = 3;
+    public const TYPE_BOOLEAN = 4;
+    public const TYPE_ARRAY = 5;
+    public const TYPE_JSON = 6;
+
+    private Collection $collection;
+
+    public function __construct(
+    DataStore $store,
+        private readonly SessionTenant $tenant
+    ) {
+    // DataStore provides selectCollection method
+    $this->collection = $store->selectCollection(self::TABLE_NAME);
+        $this->collection->createIndex(['did' => 1, 'path' => 1, 'key' => 1], ['unique' => true]);
+    }
+
+    /**
+     * Get a configuration value by path and key
+     */
+    public function get(string $path, string $key, mixed $default = null, ?string $tenant = null): mixed
+    {
+        if ($tenant === null && !$this->tenant->isConfigured()) {
+            throw new \InvalidArgumentException('Tenant must be configured or provided explicitly.');
+        } elseif ($tenant === null) {
+            $tenant = $this->tenant->identifier();
+        }
+
+    $doc = $this->collection->findOne(['did' => $tenant, 'path' => $path, 'key' => $key]);
+    if (!$doc) { return $default; }
+    $value = $doc['value'] ?? ($doc['default'] ?? null);
+    if ($value === null) { return $default; }
+    return $this->convertFromDatabase((string)$value, (int)$doc['type']);
+    }
+
+    /**
+     * Set a configuration value
+     */
+    public function set(string $path, string $key, mixed $value, mixed $default = null, ?string $tenant = null): bool
+    {
+        if ($tenant === null && !$this->tenant->isConfigured()) {
+            throw new \InvalidArgumentException('Tenant must be configured or provided explicitly.');
+        } elseif ($tenant === null) {
+            $tenant = $this->tenant->identifier();
+        }
+
+        $type = $this->determineType($value);
+        $serializedValue = $this->convertToDatabase($value, $type);
+        $serializedDefault = $default !== null ? $this->convertToDatabase($default, $type) : null;
+        $this->collection->updateOne(
+            ['did' => $tenant, 'path' => $path, 'key' => $key],
+                ['$set' => [
+                    'did' => $tenant,
+                    'path' => $path,
+                    'key' => $key,
+                    'value' => $serializedValue,
+                    'type' => $type,
+                    'default' => $serializedDefault,
+                    'updated_at' => $this->bsonUtcDateTime()
+                ], '$setOnInsert' => [ 'created_at' => $this->bsonUtcDateTime() ]],
+            ['upsert' => true]
+        );
+        return true;
+    }
+
+    /**
+     * Get all configuration values for a specific path
+     */
+    public function getByPath(?string $path = null, bool $subset = false, ?string $tenant = null): array
+    {
+        if ($tenant === null && !$this->tenant->isConfigured()) {
+            throw new \InvalidArgumentException('Tenant must be configured or provided explicitly.');
+        } elseif ($tenant === null) {
+            $tenant = $this->tenant->identifier();
+        }
+
+        $filter = ['did' => $tenant];
+        if ($path !== null) {
+            if ($subset) {
+                $filter['$or'] = [
+                    ['path' => $path],
+                    ['path' => ['$regex' => '^' . preg_quote($path, '/') . '/']]
+                ];
+            } else {
+                $filter['path'] = $path;
+            }
+        }
+        $cursor = $this->collection->find($filter);
+        $configurations = [];
+        foreach ($cursor as $doc) {
+            $value = $doc['value'] ?? ($doc['default'] ?? null);
+            $convertedValue = $value !== null ? $this->convertFromDatabase((string)$value, (int)$doc['type']) : null;
+            $configurations[$doc['path']] = [$doc['key'] => $convertedValue];
+        }
+        return $configurations;
+    }
+
+    /**
+     * Delete a configuration value
+     */
+    public function delete(string $path, string $key, ?string $tenant = null): bool
+    {
+        if ($tenant === null && !$this->tenant->isConfigured()) {
+            throw new \InvalidArgumentException('Tenant must be configured or provided explicitly.');
+        } elseif ($tenant === null) {
+            $tenant = $this->tenant->identifier();
+        }
+
+    $this->collection->deleteOne(['did' => $tenant, 'path' => $path, 'key' => $key]);
+    return true;
+    }
+
+    /**
+     * Delete all configuration values for a specific path
+     */
+    public function deleteByPath(string $path, bool $includeSubPaths = false, ?string $tenant = null): bool
+    {
+        if ($tenant === null && !$this->tenant->isConfigured()) {
+            throw new \InvalidArgumentException('Tenant must be configured or provided explicitly.');
+        } elseif ($tenant === null) {
+            $tenant = $this->tenant->identifier();
+        }
+
+        $filter = ['did' => $tenant];
+        if ($includeSubPaths) {
+            $filter['$or'] = [
+                ['path' => $path],
+                ['path' => ['$regex' => '^' . preg_quote($path, '/') . '/']]
+            ];
+        } else {
+            $filter['path'] = $path;
+        }
+        $this->collection->deleteMany($filter);
+        return true;
+    }
+
+    /**
+     * Check if a configuration exists
+     */
+    public function exists(string $path, string $key, ?string $tenant = null): bool
+    {
+        if ($tenant === null && !$this->tenant->isConfigured()) {
+            throw new \InvalidArgumentException('Tenant must be configured or provided explicitly.');
+        } elseif ($tenant === null) {
+            $tenant = $this->tenant->identifier();
+        }
+
+    return $this->collection->countDocuments(['did' => $tenant, 'path' => $path, 'key' => $key]) > 0;
+    }
+
+    /**
+     * Determine the type of a PHP value
+     */
+    private function determineType(mixed $value): int
+    {
+        return match (true) {
+            is_null($value) => self::TYPE_NULL,
+            is_bool($value) => self::TYPE_BOOLEAN,
+            is_int($value) => self::TYPE_INTEGER,
+            is_float($value) => self::TYPE_FLOAT,
+            is_array($value) => self::TYPE_ARRAY,
+            is_string($value) && $this->isJson($value) => self::TYPE_JSON,
+            default => self::TYPE_STRING
+        };
+    }
+
+    /**
+     * Convert a PHP value to database format
+     */
+    private function convertToDatabase(mixed $value, int $type): string
+    {
+        return match ($type) {
+            self::TYPE_NULL => '',
+            self::TYPE_BOOLEAN => $value ? '1' : '0',
+            self::TYPE_INTEGER => (string)$value,
+            self::TYPE_FLOAT => (string)$value,
+            self::TYPE_ARRAY, self::TYPE_JSON => json_encode($value),
+            default => (string)$value
+        };
+    }
+
+    /**
+     * Convert a database value to PHP format
+     */
+    private function convertFromDatabase(string $value, int $type): mixed
+    {
+        return match ($type) {
+            self::TYPE_NULL => null,
+            self::TYPE_BOOLEAN => $value === '1',
+            self::TYPE_INTEGER => (int)$value,
+            self::TYPE_FLOAT => (float)$value,
+            self::TYPE_ARRAY, self::TYPE_JSON => json_decode($value, true),
+            default => $value
+        };
+    }
+
+    /**
+     * Check if a string is valid JSON
+     */
+    private function isJson(string $string): bool
+    {
+        json_decode($string);
+        return json_last_error() === JSON_ERROR_NONE;
+    }
+    /**
+     * Create a UTCDateTime for timestamp fields
+     */
+    private function bsonUtcDateTime(): UTCDateTime
+    {
+        return UTCDateTime::now();
+    }
+}
diff --git a/core/lib/Service/FirewallService.php b/core/lib/Service/FirewallService.php
new file mode 100644
index 0000000..da872f5
--- /dev/null
+++ b/core/lib/Service/FirewallService.php
@@ -0,0 +1,630 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Service;
+
+use KTXC\Http\Request\Request;
+use KTXC\Models\Firewall\FirewallRuleObject;
+use KTXC\Models\Firewall\FirewallLogObject;
+use KTXC\Stores\FirewallStore;
+use KTXC\SessionTenant;
+use KTXF\Event\EventBus;
+use KTXF\Event\SecurityEvent;
+use KTXF\IpUtils;
+
+/**
+ * Firewall service for IP/device-based access control
+ * 
+ * Features:
+ * - IP allow/block lists per tenant
+ * - CIDR range support
+ * - Device fingerprint blocking
+ * - Automatic blocking on brute force detection
+ * - Event-driven integration
+ */
+class FirewallService
+{
+    // Default thresholds for auto-blocking
+    private const DEFAULT_MAX_AUTH_FAILURES = 5;
+    private const DEFAULT_AUTH_FAILURE_WINDOW = 300; // 5 minutes
+    private const DEFAULT_AUTO_BLOCK_DURATION = 3600; // 1 hour
+    
+    // Configuration keys
+    private const CONFIG_MAX_FAILURES = 'firewall.maxAuthFailures';
+    private const CONFIG_FAILURE_WINDOW = 'firewall.authFailureWindow';
+    private const CONFIG_AUTO_BLOCK_DURATION = 'firewall.autoBlockDuration';
+    private const CONFIG_ENABLED = 'firewall.enabled';
+
+    /** @var FirewallRuleObject[]|null */
+    private ?array $rulesCache = null;
+
+    public function __construct(
+        private readonly FirewallStore $store,
+        private readonly SessionTenant $tenant,
+        private readonly EventBus $eventBus
+    ) {
+        // Listen for auth failures to detect brute force
+        $this->eventBus->subscribe(
+            SecurityEvent::AUTH_FAILURE,
+            [$this, 'handleAuthFailure'],
+            100 // High priority
+        );
+
+        // Log all security events asynchronously
+        $this->eventBus->subscribeAsync(
+            SecurityEvent::AUTH_FAILURE,
+            [$this, 'logSecurityEvent']
+        );
+        $this->eventBus->subscribeAsync(
+            SecurityEvent::AUTH_SUCCESS,
+            [$this, 'logSecurityEvent']
+        );
+        $this->eventBus->subscribeAsync(
+            SecurityEvent::ACCESS_DENIED,
+            [$this, 'logSecurityEvent']
+        );
+        $this->eventBus->subscribeAsync(
+            SecurityEvent::BRUTE_FORCE_DETECTED,
+            [$this, 'logSecurityEvent']
+        );
+    }
+
+    /**
+     * Check firewall rules for a request
+     * Returns a Response if blocked, null if allowed
+     */
+    public function authorized(Request $request): bool
+    {
+        $ipAddress = $request->getClientIp() ?? '0.0.0.0';
+        $deviceFingerprint = $request->headers->get('X-Device-Fingerprint');
+        
+        $result = $this->analyze($ipAddress, $deviceFingerprint);
+        
+        if ($result->isBlocked()) {
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * Check if a request is allowed based on IP and device fingerprint
+     */
+    public function analyze(
+        string $ipAddress,
+        ?string $deviceFingerprint = null
+    ): FirewallAnalyzeResult {
+        // Check if firewall is enabled for this tenant
+        if (!$this->isEnabled()) {
+            return new FirewallAnalyzeResult(true);
+        }
+
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            return new FirewallAnalyzeResult(true);
+        }
+
+        $rules = $this->getActiveRules();
+
+        // First check for explicit allow rules (whitelist takes precedence)
+        foreach ($rules as $rule) {
+            if ($rule->getAction() !== FirewallRuleObject::ACTION_ALLOW) {
+                continue;
+            }
+            
+            if ($this->ruleMatchesRequest($rule, $ipAddress, $deviceFingerprint)) {
+                return new FirewallAnalyzeResult(true, $rule->getId(), 'Explicitly allowed');
+            }
+        }
+
+        // Then check for block rules
+        foreach ($rules as $rule) {
+            if ($rule->getAction() !== FirewallRuleObject::ACTION_BLOCK) {
+                continue;
+            }
+            
+            if ($this->ruleMatchesRequest($rule, $ipAddress, $deviceFingerprint)) {
+                $this->publishAccessDenied($ipAddress, $deviceFingerprint, $rule);
+                return new FirewallAnalyzeResult(false, $rule->getId(), $rule->getReason());
+            }
+        }
+
+        return new FirewallAnalyzeResult(true);
+    }
+
+    /**
+     * Check if a rule matches the request
+     */
+    private function ruleMatchesRequest(
+        FirewallRuleObject $rule,
+        string $ipAddress,
+        ?string $deviceFingerprint
+    ): bool {
+        $type = $rule->getType();
+        $value = $rule->getValue();
+
+        return match ($type) {
+            FirewallRuleObject::TYPE_IP => $ipAddress === $value,
+            FirewallRuleObject::TYPE_IP_RANGE => IpUtils::checkIp($ipAddress, $value),
+            FirewallRuleObject::TYPE_DEVICE => $deviceFingerprint !== null && $deviceFingerprint === $value,
+            default => false,
+        };
+    }
+
+    /**
+     * Handle authentication failure event
+     */
+    public function handleAuthFailure(SecurityEvent $event): void
+    {
+        $ipAddress = $event->getIpAddress();
+        $tenantId = $event->getTenantId() ?? $this->tenant->identifier();
+
+        if (!$ipAddress || !$tenantId) {
+            return;
+        }
+
+        // Check for brute force
+        $windowSeconds = $this->getConfig(
+            self::CONFIG_FAILURE_WINDOW,
+            self::DEFAULT_AUTH_FAILURE_WINDOW
+        );
+        $maxFailures = $this->getConfig(
+            self::CONFIG_MAX_FAILURES,
+            self::DEFAULT_MAX_AUTH_FAILURES
+        );
+
+        $failureCount = $this->store->countRecentFailures(
+            $tenantId,
+            $ipAddress,
+            $windowSeconds
+        );
+
+        // Include current failure in count
+        $failureCount++;
+
+        if ($failureCount >= $maxFailures) {
+            $this->handleBruteForce($ipAddress, $failureCount, $windowSeconds);
+        }
+    }
+
+    /**
+     * Handle detected brute force attack
+     */
+    private function handleBruteForce(
+        string $ipAddress,
+        int $failureCount,
+        int $windowSeconds
+    ): void {
+        // Publish brute force event
+        $event = SecurityEvent::bruteForceDetected($ipAddress, $failureCount, $windowSeconds);
+        $event->setTenantId($this->tenant->identifier());
+        $this->eventBus->publish($event);
+
+        // Auto-block the IP
+        $blockDuration = $this->getConfig(
+            self::CONFIG_AUTO_BLOCK_DURATION,
+            self::DEFAULT_AUTO_BLOCK_DURATION
+        );
+
+        $this->blockIp(
+            $ipAddress,
+            sprintf('Auto-blocked: %d failed auth attempts in %d seconds', $failureCount, $windowSeconds),
+            null, // System-created
+            $blockDuration
+        );
+    }
+
+    /**
+     * Log security event to firewall logs
+     */
+    public function logSecurityEvent(SecurityEvent $event): void
+    {
+        $tenantId = $event->getTenantId() ?? $this->tenant->identifier();
+        if (!$tenantId) {
+            return;
+        }
+
+        $log = new FirewallLogObject();
+        $log->setTenantId($tenantId)
+            ->setIpAddress($event->getIpAddress())
+            ->setDeviceFingerprint($event->getDeviceFingerprint())
+            ->setUserAgent($event->getUserAgent())
+            ->setRequestPath($event->getRequestPath())
+            ->setRequestMethod($event->getRequestMethod())
+            ->setEventType($this->mapEventToLogType($event->getName()))
+            ->setResult($this->mapEventToResult($event->getName()))
+            ->setIdentityId($event->getUserId())
+            ->setTimestamp(new \DateTimeImmutable())
+            ->setMetadata($event->getData());
+
+        $this->store->createLog($log);
+    }
+
+    /**
+     * Map security event name to log event type
+     */
+    private function mapEventToLogType(string $eventName): string
+    {
+        return match ($eventName) {
+            SecurityEvent::AUTH_FAILURE => FirewallLogObject::EVENT_AUTH_FAILURE,
+            SecurityEvent::AUTH_SUCCESS => FirewallLogObject::EVENT_ACCESS_CHECK,
+            SecurityEvent::BRUTE_FORCE_DETECTED => FirewallLogObject::EVENT_BRUTE_FORCE,
+            SecurityEvent::RATE_LIMIT_EXCEEDED => FirewallLogObject::EVENT_RATE_LIMIT,
+            SecurityEvent::ACCESS_DENIED => FirewallLogObject::EVENT_RULE_MATCH,
+            SecurityEvent::SUSPICIOUS_ACTIVITY => FirewallLogObject::EVENT_SUSPICIOUS,
+            default => FirewallLogObject::EVENT_ACCESS_CHECK,
+        };
+    }
+
+    /**
+     * Map security event to result
+     */
+    private function mapEventToResult(string $eventName): string
+    {
+        return match ($eventName) {
+            SecurityEvent::AUTH_SUCCESS,
+            SecurityEvent::ACCESS_GRANTED => FirewallLogObject::RESULT_ALLOWED,
+            default => FirewallLogObject::RESULT_BLOCKED,
+        };
+    }
+
+    /**
+     * Publish access denied event
+     */
+    private function publishAccessDenied(
+        string $ipAddress,
+        ?string $deviceFingerprint,
+        FirewallRuleObject $rule
+    ): void {
+        $event = SecurityEvent::accessDenied(
+            $ipAddress,
+            $deviceFingerprint,
+            $rule->getId(),
+            $rule->getReason()
+        );
+        $event->setTenantId($this->tenant->identifier());
+        $this->eventBus->publish($event);
+    }
+
+    // ========================================
+    // Rule Management
+    // ========================================
+
+    /**
+     * Block an IP address
+     */
+    public function blockIp(
+        string $ipAddress,
+        ?string $reason = null,
+        ?string $createdBy = null,
+        ?int $durationSeconds = null
+    ): FirewallRuleObject {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            throw new \RuntimeException('Cannot create firewall rule: no tenant configured');
+        }
+
+        // Check if already blocked
+        $existing = $this->store->findExactIpRule(
+            $tenantId,
+            $ipAddress,
+            FirewallRuleObject::ACTION_BLOCK
+        );
+        
+        if ($existing) {
+            return $existing;
+        }
+
+        $rule = new FirewallRuleObject();
+        $rule->setTenantId($tenantId)
+            ->setType(FirewallRuleObject::TYPE_IP)
+            ->setAction(FirewallRuleObject::ACTION_BLOCK)
+            ->setValue($ipAddress)
+            ->setReason($reason ?? 'Blocked by administrator')
+            ->setCreatedBy($createdBy)
+            ->setCreatedAt(new \DateTimeImmutable())
+            ->setEnabled(true);
+
+        if ($durationSeconds !== null) {
+            $rule->setExpiresAt(
+                (new \DateTimeImmutable())->modify("+{$durationSeconds} seconds")
+            );
+        }
+
+        $this->store->depositRule($rule);
+        $this->clearRulesCache();
+
+        // Publish event
+        $event = new SecurityEvent(SecurityEvent::IP_BLOCKED, ['ip' => $ipAddress, 'reason' => $reason]);
+        $event->setIpAddress($ipAddress)
+            ->setReason($reason)
+            ->setTenantId($tenantId);
+        $this->eventBus->publish($event);
+
+        return $rule;
+    }
+
+    /**
+     * Allow an IP address (whitelist)
+     */
+    public function allowIp(
+        string $ipAddress,
+        ?string $reason = null,
+        ?string $createdBy = null
+    ): FirewallRuleObject {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            throw new \RuntimeException('Cannot create firewall rule: no tenant configured');
+        }
+
+        $rule = new FirewallRuleObject();
+        $rule->setTenantId($tenantId)
+            ->setType(FirewallRuleObject::TYPE_IP)
+            ->setAction(FirewallRuleObject::ACTION_ALLOW)
+            ->setValue($ipAddress)
+            ->setReason($reason ?? 'Allowed by administrator')
+            ->setCreatedBy($createdBy)
+            ->setCreatedAt(new \DateTimeImmutable())
+            ->setEnabled(true);
+
+        $this->store->depositRule($rule);
+        $this->clearRulesCache();
+
+        // Publish event
+        $event = new SecurityEvent(SecurityEvent::IP_ALLOWED, ['ip' => $ipAddress, 'reason' => $reason]);
+        $event->setIpAddress($ipAddress)
+            ->setReason($reason)
+            ->setTenantId($tenantId);
+        $this->eventBus->publish($event);
+
+        return $rule;
+    }
+
+    /**
+     * Block an IP range (CIDR notation)
+     */
+    public function blockIpRange(
+        string $cidr,
+        ?string $reason = null,
+        ?string $createdBy = null
+    ): FirewallRuleObject {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            throw new \RuntimeException('Cannot create firewall rule: no tenant configured');
+        }
+
+        $rule = new FirewallRuleObject();
+        $rule->setTenantId($tenantId)
+            ->setType(FirewallRuleObject::TYPE_IP_RANGE)
+            ->setAction(FirewallRuleObject::ACTION_BLOCK)
+            ->setValue($cidr)
+            ->setReason($reason ?? 'Range blocked by administrator')
+            ->setCreatedBy($createdBy)
+            ->setCreatedAt(new \DateTimeImmutable())
+            ->setEnabled(true);
+
+        $this->store->depositRule($rule);
+        $this->clearRulesCache();
+
+        return $rule;
+    }
+
+    /**
+     * Block a device fingerprint
+     */
+    public function blockDevice(
+        string $fingerprint,
+        ?string $reason = null,
+        ?string $createdBy = null,
+        ?int $durationSeconds = null
+    ): FirewallRuleObject {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            throw new \RuntimeException('Cannot create firewall rule: no tenant configured');
+        }
+
+        $rule = new FirewallRuleObject();
+        $rule->setTenantId($tenantId)
+            ->setType(FirewallRuleObject::TYPE_DEVICE)
+            ->setAction(FirewallRuleObject::ACTION_BLOCK)
+            ->setValue($fingerprint)
+            ->setReason($reason ?? 'Device blocked by administrator')
+            ->setCreatedBy($createdBy)
+            ->setCreatedAt(new \DateTimeImmutable())
+            ->setEnabled(true);
+
+        if ($durationSeconds !== null) {
+            $rule->setExpiresAt(
+                (new \DateTimeImmutable())->modify("+{$durationSeconds} seconds")
+            );
+        }
+
+        $this->store->depositRule($rule);
+        $this->clearRulesCache();
+
+        // Publish event
+        $event = new SecurityEvent(SecurityEvent::DEVICE_BLOCKED, ['device' => $fingerprint, 'reason' => $reason]);
+        $event->setDeviceFingerprint($fingerprint)
+            ->setReason($reason)
+            ->setTenantId($tenantId);
+        $this->eventBus->publish($event);
+
+        return $rule;
+    }
+
+    /**
+     * Remove a rule by ID
+     */
+    public function removeRule(string $ruleId): bool
+    {
+        $rule = $this->store->fetchRule($ruleId);
+        if (!$rule) {
+            return false;
+        }
+
+        // Verify tenant ownership
+        if ($rule->getTenantId() !== $this->tenant->identifier()) {
+            return false;
+        }
+
+        $this->store->destroyRule($rule);
+        $this->clearRulesCache();
+
+        return true;
+    }
+
+    /**
+     * Disable a rule (soft delete)
+     */
+    public function disableRule(string $ruleId): bool
+    {
+        $rule = $this->store->fetchRule($ruleId);
+        if (!$rule) {
+            return false;
+        }
+
+        // Verify tenant ownership
+        if ($rule->getTenantId() !== $this->tenant->identifier()) {
+            return false;
+        }
+
+        $rule->setEnabled(false);
+        $this->store->depositRule($rule);
+        $this->clearRulesCache();
+
+        return true;
+    }
+
+    /**
+     * Get all rules for current tenant
+     */
+    public function listRules(bool $activeOnly = true): array
+    {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            return [];
+        }
+
+        return $this->store->listRules($tenantId, $activeOnly);
+    }
+
+    /**
+     * Get firewall logs for current tenant
+     */
+    public function getLogs(
+        ?string $ipAddress = null,
+        ?string $eventType = null,
+        ?string $result = null,
+        int $limit = 100
+    ): array {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            return [];
+        }
+
+        return $this->store->listLogs($tenantId, $ipAddress, $eventType, $result, $limit);
+    }
+
+    /**
+     * Get blocked requests count
+     */
+    public function getBlockedCount(?\DateTimeImmutable $since = null): int
+    {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            return 0;
+        }
+
+        return $this->store->countBlockedRequests($tenantId, $since);
+    }
+
+    // ========================================
+    // Helpers
+    // ========================================
+
+    /**
+     * Check if firewall is enabled for current tenant
+     */
+    private function isEnabled(): bool
+    {
+        return (bool) $this->getConfig(self::CONFIG_ENABLED, true);
+    }
+
+    /**
+     * Get configuration value
+     */
+    private function getConfig(string $key, mixed $default = null): mixed
+    {
+        $config = $this->tenant->configuration();
+        $parts = explode('.', $key);
+        
+        foreach ($parts as $part) {
+            if (!is_array($config) || !array_key_exists($part, $config)) {
+                return $default;
+            }
+            $config = $config[$part];
+        }
+        
+        return $config;
+    }
+
+    /**
+     * Get active rules (cached)
+     * @return FirewallRuleObject[]
+     */
+    private function getActiveRules(): array
+    {
+        if ($this->rulesCache === null) {
+            $tenantId = $this->tenant->identifier();
+            $this->rulesCache = $tenantId 
+                ? $this->store->listRules($tenantId, true)
+                : [];
+        }
+        return $this->rulesCache;
+    }
+
+    /**
+     * Clear rules cache
+     */
+    private function clearRulesCache(): void
+    {
+        $this->rulesCache = null;
+    }
+
+    /**
+     * Cleanup maintenance tasks
+     */
+    public function cleanup(): array
+    {
+        $expiredRules = $this->store->cleanupExpiredRules();
+        $oldLogs = $this->store->cleanupOldLogs(30);
+
+        return [
+            'expiredRules' => $expiredRules,
+            'oldLogs' => $oldLogs,
+        ];
+    }
+}
+
+/**
+ * Result of a firewall check
+ */
+class FirewallAnalyzeResult
+{
+    public function __construct(
+        public readonly bool $allowed,
+        public readonly ?string $ruleId = null,
+        public readonly ?string $reason = null
+    ) {}
+
+    public function isAllowed(): bool
+    {
+        return $this->allowed;
+    }
+
+    public function isBlocked(): bool
+    {
+        return !$this->allowed;
+    }
+}
diff --git a/core/lib/Service/SecurityService.php b/core/lib/Service/SecurityService.php
new file mode 100644
index 0000000..107b721
--- /dev/null
+++ b/core/lib/Service/SecurityService.php
@@ -0,0 +1,202 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Service;
+
+use KTXC\Http\Request\Request;
+use KTXC\Models\Identity\User;
+use KTXC\SessionTenant;
+
+/**
+ * Security Service
+ * 
+ * Handles request-level authentication (token validation).
+ * Authentication orchestration is handled by AuthenticationManager.
+ * 
+ * This service is used by the Kernel to authenticate incoming requests.
+ */
+class SecurityService
+{
+    private string $securityCode;
+
+    public function __construct(
+        private readonly TokenService $tokenService,
+        private readonly UserService $userService,
+        private readonly SessionTenant $sessionTenant
+    ) {
+        $this->securityCode = $this->sessionTenant->configuration()->security()->code();
+    }
+
+    /**
+     * Authenticate a request and return the user if valid
+     * 
+     * @param Request $request The HTTP request to authenticate
+     * @return User|null The authenticated user, or null if not authenticated
+     */
+    public function authenticate(Request $request): ?User
+    {
+        $authorization = $request->headers->get('Authorization');
+        $cookieToken = $request->cookies->get('accessToken');
+        
+        // Cookie token takes precedence
+        if ($cookieToken) {
+            return $this->authenticateJWT($cookieToken);
+        }
+        
+        if ($authorization) {
+            if (str_starts_with($authorization, 'Bearer ')) {
+                $token = substr($authorization, 7);
+                return $this->authenticateBearer($token);
+            }
+            
+            if (str_starts_with($authorization, 'Basic ')) {
+                $decoded = base64_decode(substr($authorization, 6) ?: '', true);
+                if ($decoded !== false) {
+                    [$identity, $secret] = array_pad(explode(':', $decoded, 2), 2, null);
+                    if ($identity !== null && $secret !== null) {
+                        return $this->authenticateBasicHeader($identity, $secret);
+                    }
+                }
+            }
+        }
+        
+        return null;
+    }
+
+    /**
+     * Authenticate JWT token from cookie or header
+     */
+    public function authenticateJWT(string $token): ?User
+    {
+        $payload = $this->tokenService->validateToken($token, $this->securityCode);
+        
+        if (!$payload) {
+            return null;
+        }
+
+        // Verify user still exists
+        if ($this->userService->fetchByIdentifier($payload['identifier']) === null) {
+            return null;
+        }
+
+        $user = new User();
+        $user->populate($payload, 'jwt');
+
+        return $user;
+    }
+
+    /**
+     * Authenticate Bearer token
+     */
+    public function authenticateBearer(string $token): ?User
+    {
+        return $this->authenticateJWT($token);
+    }
+
+    /**
+     * Authenticate HTTP Basic header (for API access)
+     * Note: This is for request authentication, not login
+     */
+    private function authenticateBasicHeader(string $identity, string $credentials): ?User
+    {
+        // For Basic auth headers, we need to validate against the provider
+        // This is a simplified flow for API access
+        $provider = $this->providerRegistry->resolve('default');
+        if ($provider === null) {
+            return null;
+        }
+
+        $result = $provider->authenticate($identity, $credentials);
+        if (!$result->isSuccess()) {
+            return null;
+        }
+
+        return $this->getUserByIdentity($identity);
+    }
+
+    // =========================================================================
+    // Token Operations (delegated to AuthenticationManager for new flows)
+    // These are kept for backwards compatibility during transition
+    // =========================================================================
+
+    /**
+     * @deprecated Use AuthenticationManager::createTokens() instead
+     */
+    public function createAccessToken(array $payload): string
+    {
+        return $this->tokenService->createToken($payload, $this->securityCode, 900);
+    }
+    
+    /**
+     * @deprecated Use AuthenticationManager::createTokens() instead
+     */
+    public function createRefreshToken(array $payload): string
+    {
+        $refreshPayload = [
+            'tenant' => $payload['tenant'] ?? null,
+            'identifier' => $payload['identifier'],
+            'identity' => $payload['identity'],
+            'type' => 'refresh'
+        ];
+
+        return $this->tokenService->createToken($refreshPayload, $this->securityCode, 604800);
+    }
+
+    /**
+     * @deprecated Use AuthenticationManager::refreshAccessToken() instead
+     */
+    public function validateRefreshToken(string $refreshToken): ?User
+    {
+        $payload = $this->tokenService->validateToken($refreshToken, $this->securityCode);
+        
+        if (!$payload) {
+            return null;
+        }
+
+        if (!isset($payload['type']) || $payload['type'] !== 'refresh') {
+            return null;
+        }
+
+        $identifier = $payload['identifier'] ?? null;
+        if (!$identifier || $this->providerRegistry->validateUser($identifier) === false) {
+            return null;
+        }
+
+        $user = new User();
+        $user->populate([
+            'identifier' => $payload['identifier'],
+            'identity' => $payload['identity'],
+            'tenant' => $payload['tenant'] ?? null,
+        ], 'jwt');
+        
+        return $user;
+    }
+
+    /**
+     * @deprecated Use AuthenticationManager::logout() instead
+     */
+    public function logout(?string $jti = null, ?int $exp = null): void
+    {
+        if ($jti !== null) {
+            $expiresAt = $exp ?? (time() + 86400);
+            $this->tokenService->blacklist($jti, $expiresAt);
+        }
+    }
+
+    /**
+     * @deprecated Use AuthenticationManager::logoutAll() instead
+     */
+    public function logoutAllDevices(string $identity): void
+    {
+        $this->tokenService->blacklistUserTokensBefore($identity, time());
+    }
+
+    /**
+     * Extract token claims (for logout to get jti/exp)
+     */
+    public function extractTokenClaims(string $token): ?array
+    {
+        return $this->tokenService->validateToken($token, $this->securityCode, checkBlacklist: false);
+    }
+}
diff --git a/core/lib/Service/TenantService.php b/core/lib/Service/TenantService.php
new file mode 100644
index 0000000..f8d9a3e
--- /dev/null
+++ b/core/lib/Service/TenantService.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace KTXC\Service;
+
+use KTXC\Models\Tenant\TenantObject;
+use KTXC\Stores\TenantStore;
+
+class TenantService
+{
+    public function __construct(protected readonly TenantStore $store)
+    {
+    }
+
+    public function fetchByDomain(string $domain): ?TenantObject
+    {
+        return $this->store->fetchByDomain($domain);
+    }
+
+}
diff --git a/core/lib/Service/TokenService.php b/core/lib/Service/TokenService.php
new file mode 100644
index 0000000..ef22868
--- /dev/null
+++ b/core/lib/Service/TokenService.php
@@ -0,0 +1,309 @@
+<?php
+
+namespace KTXC\Service;
+
+use KTXC\SessionTenant;
+use KTXF\Cache\CacheScope;
+use KTXF\Cache\EphemeralCacheInterface;
+
+/**
+ * Token Service
+ * 
+ * Unified service for JWT token operations including:
+ * - Token creation with configurable expiry and claims
+ * - Token validation with algorithm verification
+ * - Token blacklisting for revocation before natural expiry
+ * - User-wide token invalidation (logout all devices)
+ * 
+ * Uses EphemeralCache for blacklist storage.
+ */
+class TokenService
+{
+    private const ALLOWED_ALGORITHMS = ['HS256'];
+    private const CACHE_USAGE_BLACKLIST = 'token_blacklist';
+    private const CACHE_USAGE_USER_BLACKLIST = 'token_user_blacklist';
+    
+    private string $algorithm = 'HS256';
+
+    public function __construct(
+        private readonly SessionTenant $sessionTenant,
+        private readonly EphemeralCacheInterface $cache,
+    ) {
+    }
+
+    // =========================================================================
+    // Token Creation
+    // =========================================================================
+
+    /**
+     * Generate a unique JWT ID (jti) for token identification
+     */
+    public function generateJti(): string
+    {
+        return bin2hex(random_bytes(16));
+    }
+
+    /**
+     * Create a JWT token with the given payload
+     * 
+     * @param array $payload The token payload (claims)
+     * @param string $secretKey The secret key for signing
+     * @param int $expirationTime Token lifetime in seconds (default: 1 hour)
+     * @param string|null $jti Optional JWT ID (auto-generated if not provided)
+     * @return string The encoded JWT token
+     */
+    public function createToken(array $payload, string $secretKey, int $expirationTime = 3600, ?string $jti = null): string
+    {
+        $header = [
+            'typ' => 'JWT',
+            'alg' => $this->algorithm
+        ];
+
+        $payload['iat'] = time(); // Issued at
+        $payload['exp'] = time() + $expirationTime; // Expiration
+        
+        // Add JWT ID for token identification and revocation support
+        $payload['jti'] = $jti ?? $this->generateJti();
+
+        $headerEncoded = $this->base64UrlEncode(json_encode($header));
+        $payloadEncoded = $this->base64UrlEncode(json_encode($payload));
+
+        $signature = $this->createSignature($headerEncoded . '.' . $payloadEncoded, $secretKey);
+
+        return $headerEncoded . '.' . $payloadEncoded . '.' . $signature;
+    }
+
+    // =========================================================================
+    // Token Validation
+    // =========================================================================
+
+    /**
+     * Validate a JWT token and return its payload
+     * 
+     * @param string $token The JWT token to validate
+     * @param string $secretKey The secret key for verification
+     * @param bool $checkBlacklist Whether to check the blacklist (default: true)
+     * @return array|null The token payload if valid, null otherwise
+     */
+    public function validateToken(string $token, string $secretKey, bool $checkBlacklist = true): ?array
+    {
+        $parts = explode('.', $token);
+        
+        if (count($parts) !== 3) {
+            return null;
+        }
+
+        [$headerEncoded, $payloadEncoded, $signature] = $parts;
+
+        // Decode and validate header first
+        $header = json_decode($this->base64UrlDecode($headerEncoded), true);
+        
+        if (!$header) {
+            return null;
+        }
+
+        // SECURITY: Validate algorithm to prevent "none" algorithm and algorithm switching attacks
+        if (!isset($header['alg']) || !in_array($header['alg'], self::ALLOWED_ALGORITHMS, true)) {
+            return null; // Reject tokens with unexpected algorithms
+        }
+
+        // Verify signature using our expected algorithm (not the one in the header)
+        $expectedSignature = $this->createSignature($headerEncoded . '.' . $payloadEncoded, $secretKey);
+        if (!hash_equals($signature, $expectedSignature)) {
+            return null;
+        }
+
+        // Decode payload
+        $payload = json_decode($this->base64UrlDecode($payloadEncoded), true);
+        
+        if (!$payload) {
+            return null;
+        }
+
+        // Check expiration
+        if (isset($payload['exp']) && $payload['exp'] < time()) {
+            return null; // Token expired
+        }
+
+        // Check blacklist if enabled
+        if ($checkBlacklist) {
+            // Check if this specific token has been blacklisted (by jti)
+            if (isset($payload['jti']) && $this->isBlacklisted($payload['jti'])) {
+                return null;
+            }
+
+            // Check if user's tokens have been globally invalidated
+            if (isset($payload['identity'], $payload['iat'])) {
+                if ($this->isUserTokenBlacklisted($payload['identity'], $payload['iat'])) {
+                    return null;
+                }
+            }
+        }
+
+        return $payload;
+    }
+
+    /**
+     * Refresh a token by creating a new one with fresh timestamps
+     * 
+     * @param string $token The token to refresh
+     * @param string $secretKey The secret key
+     * @return string|null The new token, or null if original was invalid
+     */
+    public function refreshToken(string $token, string $secretKey): ?string
+    {
+        $payload = $this->validateToken($token, $secretKey);
+        
+        if (!$payload) {
+            return null;
+        }
+
+        // Remove old timestamps and jti (new token gets new jti)
+        unset($payload['iat'], $payload['exp'], $payload['jti']);
+
+        // Create new token with fresh timestamps and new jti
+        return $this->createToken($payload, $secretKey);
+    }
+
+    // =========================================================================
+    // Token Blacklisting
+    // =========================================================================
+
+    /**
+     * Add a token to the blacklist (revoke it)
+     * 
+     * @param string $jti The JWT ID to blacklist
+     * @param int $expiresAt Unix timestamp when the token expires (for cleanup)
+     */
+    public function blacklist(string $jti, int $expiresAt): void
+    {
+        $ttl = max($expiresAt - time(), 60); // Minimum 60 seconds
+        $this->cache->set(
+            $this->getTokenCacheKey($jti),
+            $expiresAt,
+            CacheScope::Tenant,
+            self::CACHE_USAGE_BLACKLIST,
+            $ttl
+        );
+    }
+
+    /**
+     * Check if a token is blacklisted
+     * 
+     * @param string $jti The JWT ID to check
+     * @return bool True if blacklisted, false otherwise
+     */
+    public function isBlacklisted(string $jti): bool
+    {
+        return $this->cache->has(
+            $this->getTokenCacheKey($jti),
+            CacheScope::Tenant,
+            self::CACHE_USAGE_BLACKLIST
+        );
+    }
+
+    /**
+     * Remove a token from the blacklist
+     * 
+     * @param string $jti The JWT ID to remove
+     */
+    public function unblacklist(string $jti): void
+    {
+        $this->cache->delete(
+            $this->getTokenCacheKey($jti),
+            CacheScope::Tenant,
+            self::CACHE_USAGE_BLACKLIST
+        );
+    }
+
+    /**
+     * Blacklist all tokens for a user issued before a timestamp
+     * Used for "logout all devices" functionality
+     * 
+     * @param string $identity User identity
+     * @param int $beforeTimestamp Tokens issued before this time are invalid
+     */
+    public function blacklistUserTokensBefore(string $identity, int $beforeTimestamp): void
+    {
+        // Store for 30 days (longer than any token lifetime)
+        $this->cache->set(
+            $this->getUserCacheKey($identity),
+            $beforeTimestamp,
+            CacheScope::Tenant,
+            self::CACHE_USAGE_USER_BLACKLIST,
+            2592000 // 30 days
+        );
+    }
+
+    /**
+     * Check if a user's token was issued before the blacklist timestamp
+     * 
+     * @param string $identity User identity
+     * @param int $issuedAt Token's iat claim
+     * @return bool True if token should be rejected
+     */
+    public function isUserTokenBlacklisted(string $identity, int $issuedAt): bool
+    {
+        $blacklistBefore = $this->cache->get(
+            $this->getUserCacheKey($identity),
+            CacheScope::Tenant,
+            self::CACHE_USAGE_USER_BLACKLIST
+        );
+        
+        if ($blacklistBefore === null) {
+            return false;
+        }
+
+        return $issuedAt < (int) $blacklistBefore;
+    }
+
+    /**
+     * Clear user's "logout all devices" blacklist
+     * 
+     * @param string $identity User identity
+     */
+    public function clearUserBlacklist(string $identity): void
+    {
+        $this->cache->delete(
+            $this->getUserCacheKey($identity),
+            CacheScope::Tenant,
+            self::CACHE_USAGE_USER_BLACKLIST
+        );
+    }
+
+    // =========================================================================
+    // Private Helpers
+    // =========================================================================
+
+    private function createSignature(string $data, string $secretKey): string
+    {
+        $signature = hash_hmac('sha256', $data, $secretKey, true);
+        return $this->base64UrlEncode($signature);
+    }
+
+    private function base64UrlEncode(string $data): string
+    {
+        return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
+    }
+
+    private function base64UrlDecode(string $data): string
+    {
+        return base64_decode(str_pad(strtr($data, '-_', '+/'), strlen($data) % 4, '=', STR_PAD_RIGHT));
+    }
+
+    /**
+     * Generate cache key for token blacklist
+     */
+    private function getTokenCacheKey(string $jti): string
+    {
+        return 'jti_' . hash('sha256', $jti);
+    }
+
+    /**
+     * Generate cache key for user blacklist
+     */
+    private function getUserCacheKey(string $identity): string
+    {
+        return 'user_' . hash('sha256', $identity);
+    }
+}
diff --git a/core/lib/Service/UserManagerService.php b/core/lib/Service/UserManagerService.php
new file mode 100644
index 0000000..3ee063c
--- /dev/null
+++ b/core/lib/Service/UserManagerService.php
@@ -0,0 +1,137 @@
+<?php
+
+namespace KTXC\Service;
+
+use KTXC\Identity\Provider\DefaultIdentityProvider;
+use KTXC\Models\Identity\User;
+use KTXC\Server;
+use KTXC\SessionTenant;
+
+/**
+ * User Manager Service
+ * Manages authentication providers and user operations across domains
+ */
+class UserManagerService
+{
+    private array $availableIdentityProviders = [];
+    private array $cachedIdentityProviders = [];
+
+    public function __construct(
+        private readonly SessionTenant $tenant,
+        private readonly UserService $userService
+    ) {
+        // Register the default identity provider
+        $this->providerRegister('default', DefaultIdentityProvider::class);
+    }
+
+    /**
+     * Register an authentication provider
+     */
+    public function providerRegister(string $identifier, string $class): void
+    {
+        $this->availableIdentityProviders[$identifier] = $class;
+    }
+
+    public function providerList(?array $filter = null): array
+    {
+        $requestedProviders = $filter ? $filter : array_keys($this->availableIdentityProviders);
+        $result = [];
+
+        foreach ($requestedProviders as $identifier) {
+            // Check if provider is available
+            if (!isset($this->availableIdentityProviders[$identifier])) {
+                continue;
+            }
+
+            // Check cache first
+            if (isset($this->cachedIdentityProviders[$identifier])) {
+                $result[$identifier] = $this->cachedIdentityProviders[$identifier];
+            } else {
+                // Instantiate the provider and cache it
+                $providerClass = $this->availableIdentityProviders[$identifier];
+                
+                try {
+                    // Server::get automatically detects context from calling object
+                    $providerInstance = Server::runtimeContainer()->get($providerClass);
+                    
+                    // Cache the instance
+                    $this->cachedIdentityProviders[$identifier] = $providerInstance;
+                    $result[$identifier] = $providerInstance;
+                } catch (\Exception $e) {
+                    // Skip providers that can't be resolved
+                    error_log("Failed to resolve identity provider {$providerClass}: " . $e->getMessage());
+                    continue;
+                }
+            }
+        }
+
+        return $result;
+    }
+
+    /**
+     * Authenticate user against enabled providers
+     */
+    public function authenticate(string $identity, string $credential): User | null
+    {
+        // validate identity and credential
+        if (empty($identity) || empty($credential)) {
+            return null;
+        }
+
+        // retrieve user by identity
+        $user = $this->userService->fetchByIdentity($identity);
+
+        // determine if user has logged in before
+        if (!$user) {
+            return null;
+        }
+        // determine if user has a identity provider assigned
+        if ($user->getProvider() === null) {
+            return null;
+        }
+
+        $authenticated = $this->authenticateExtant($user->getProvider(), $identity, $credential);
+
+        if ($authenticated) {
+            return $user;
+        }
+
+        return null;
+
+    }
+
+    public function authenticateExtant(string $provider, string $identity, string $credential): bool {
+        // determine if provider is enabled
+        $providers = $this->providerList([$provider]);
+        if (empty($providers)) {
+            return false;
+        }
+        
+        // Get the first (and should be only) provider
+        $provider = reset($providers);
+        
+        // authenticate user against provider
+        $user = $provider->authenticate($identity, $credential);
+
+        return $user;
+    }
+
+    public function validate(string $identifier): Bool
+    {
+        $data = $this->userService->fetchByIdentifier($identifier);
+        if (!$data) {
+            return false;
+        }
+
+        if ($data['enabled'] !== true) {
+            return false;
+        }
+
+        if ($data['tid'] !== $this->tenant->identifier()) {
+            return false;
+        }
+        
+        return true;
+    }
+
+}
diff --git a/core/lib/Service/UserProvisioningService.php b/core/lib/Service/UserProvisioningService.php
new file mode 100644
index 0000000..bafe57a
--- /dev/null
+++ b/core/lib/Service/UserProvisioningService.php
@@ -0,0 +1,278 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Service;
+
+use KTXC\Models\Identity\User;
+use KTXC\SessionTenant;
+use KTXC\Stores\UserStore;
+use KTXC\Stores\ExternalIdentityStore;
+use KTXF\Utile\UUID;
+
+/**
+ * User Provisioning Service
+ * Handles JIT (Just-In-Time) user provisioning from external identity providers
+ * and profile synchronization on login
+ */
+class UserProvisioningService
+{
+    public function __construct(
+        private readonly SessionTenant $tenant,
+        private readonly UserStore $userStore,
+        private readonly ExternalIdentityStore $externalIdentityStore
+    ) { }
+
+    /**
+     * Provision a new user from external provider attributes
+     * 
+     * @param string $providerId Provider identifier
+     * @param array $attributes User attributes from provider
+     * @param array $providerConfig Provider configuration including attribute_map and default_roles
+     * @return User|null The provisioned user or null on failure
+     */
+    public function provisionUser(string $providerId, array $attributes, array $providerConfig): ?User
+    {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            return null;
+        }
+
+        // Map attributes to user fields
+        $mappedData = $this->mapAttributes($attributes, $providerConfig['attribute_map'] ?? []);
+        
+        // Validate required fields
+        $identity = $mappedData['identity'] ?? $attributes['identity'] ?? $attributes['email'] ?? null;
+        if (!$identity) {
+            return null;
+        }
+
+        // Generate user ID
+        $userId = UUID::v4();
+
+        // Build user data
+        $userData = [
+            'tid' => $tenantId,
+            'uid' => $userId,
+            'identity' => $identity,
+            'label' => $mappedData['label'] ?? $attributes['label'] ?? $attributes['name'] ?? $identity,
+            'enabled' => true,
+            'provider' => $providerId,
+            'external_subject' => $attributes['external_subject'] ?? null,
+            'roles' => $providerConfig['default_roles'] ?? [],
+            'profile' => $mappedData['profile'] ?? [],
+            'settings' => [],
+            'initial_login' => time(),
+            'recent_login' => time(),
+        ];
+
+        // Create the user
+        $createdUserId = $this->userStore->create($userData);
+        if (!$createdUserId) {
+            return null;
+        }
+
+        // Link external identity if we have an external subject
+        if (!empty($attributes['external_subject'])) {
+            $this->externalIdentityStore->linkIdentity(
+                $tenantId,
+                $userId,
+                $providerId,
+                $attributes['external_subject'],
+                $attributes['raw'] ?? $attributes
+            );
+        }
+
+        // Build and return User object
+        $user = new User();
+        $user->populate($userData, 'users');
+        
+        return $user;
+    }
+
+    /**
+     * Synchronize user profile with attributes from provider
+     * Called on each login to keep profile data up to date
+     * 
+     * @param User $user The existing user
+     * @param array $attributes Attributes from provider
+     * @param array $attributeMap Attribute mapping configuration
+     * @return bool Whether sync was successful
+     */
+    public function syncProfile(User $user, array $attributes, array $attributeMap = []): bool
+    {
+        $tenantId = $this->tenant->identifier();
+        $userId = $user->getId();
+        
+        if (!$tenantId || !$userId) {
+            return false;
+        }
+
+        // Map attributes
+        $mappedData = $this->mapAttributes($attributes, $attributeMap);
+
+        // Update profile fields if we have mapped profile data
+        if (!empty($mappedData['profile'])) {
+            $this->userStore->updateProfile($tenantId, $userId, $mappedData['profile']);
+        }
+
+        // Update label if provided and different
+        if (!empty($mappedData['label']) && $mappedData['label'] !== $user->getLabel()) {
+            $this->userStore->updateLabel($tenantId, $userId, $mappedData['label']);
+        }
+
+        // Always update last login
+        $this->userStore->updateLastLogin($tenantId, $userId);
+
+        // Update external identity attributes if applicable
+        if (!empty($attributes['external_subject'])) {
+            $this->externalIdentityStore->updateLastLogin(
+                $tenantId,
+                $user->getProvider() ?? '',
+                $attributes['external_subject']
+            );
+            $this->externalIdentityStore->updateAttributes(
+                $tenantId,
+                $user->getProvider() ?? '',
+                $attributes['external_subject'],
+                $attributes['raw'] ?? $attributes
+            );
+        }
+
+        return true;
+    }
+
+    /**
+     * Link an external identity to an existing user
+     * 
+     * @param User $user The user to link
+     * @param string $providerId Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @param array $attributes Optional attributes from provider
+     * @return bool Whether linking was successful
+     */
+    public function linkExternalIdentity(User $user, string $providerId, string $externalSubject, array $attributes = []): bool
+    {
+        $tenantId = $this->tenant->identifier();
+        $userId = $user->getId();
+        
+        if (!$tenantId || !$userId) {
+            return false;
+        }
+
+        return $this->externalIdentityStore->linkIdentity(
+            $tenantId,
+            $userId,
+            $providerId,
+            $externalSubject,
+            $attributes
+        );
+    }
+
+    /**
+     * Find user by external identity
+     * 
+     * @param string $providerId Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @return User|null The user or null if not found
+     */
+    public function findByExternalIdentity(string $providerId, string $externalSubject): ?User
+    {
+        $tenantId = $this->tenant->identifier();
+        if (!$tenantId) {
+            return null;
+        }
+
+        // Look up in external identities table
+        $externalIdentity = $this->externalIdentityStore->findByExternalSubject(
+            $tenantId,
+            $providerId,
+            $externalSubject
+        );
+
+        if (!$externalIdentity) {
+            return null;
+        }
+
+        // Fetch the linked user
+        $userData = $this->userStore->fetchByIdentifier($tenantId, $externalIdentity['uid']);
+        if (!$userData) {
+            return null;
+        }
+
+        $user = new User();
+        $user->populate($userData, 'users');
+        
+        return $user;
+    }
+
+    /**
+     * Map provider attributes to user fields using attribute map
+     * 
+     * @param array $attributes Raw attributes from provider
+     * @param array $attributeMap Mapping configuration {source_attr: target_field}
+     * @return array Mapped data with 'identity', 'label', 'profile' keys
+     */
+    protected function mapAttributes(array $attributes, array $attributeMap): array
+    {
+        $result = [
+            'identity' => null,
+            'label' => null,
+            'profile' => [],
+        ];
+
+        foreach ($attributeMap as $sourceAttr => $targetField) {
+            // Get source value (supports nested attributes with dot notation)
+            $value = $this->getNestedValue($attributes, $sourceAttr);
+            if ($value === null) {
+                continue;
+            }
+
+            // Set target value (supports nested targets with dot notation)
+            if ($targetField === 'identity') {
+                $result['identity'] = $value;
+            } elseif ($targetField === 'label') {
+                $result['label'] = $value;
+            } elseif (str_starts_with($targetField, 'profile.')) {
+                $profileField = substr($targetField, 8);
+                $result['profile'][$profileField] = $value;
+            }
+        }
+
+        return $result;
+    }
+
+    /**
+     * Get nested value from array using dot notation
+     * 
+     * @param array $array Source array
+     * @param string $key Key with optional dot notation (e.g., 'user.email')
+     * @return mixed|null Value or null if not found
+     */
+    protected function getNestedValue(array $array, string $key): mixed
+    {
+        $keys = explode('.', $key);
+        $value = $array;
+        
+        foreach ($keys as $k) {
+            if (!is_array($value) || !array_key_exists($k, $value)) {
+                return null;
+            }
+            $value = $value[$k];
+        }
+        
+        return $value;
+    }
+
+    /**
+     * Check if auto-provisioning is enabled for a provider
+     * 
+     * @param string $providerId Provider identifier
+     * @return bool
+     */
+    public function isAutoProvisioningEnabled(string $providerId): bool
+    {
+        $config = $this->tenant->identityProviderConfig($providerId);
+        return ($config['provisioning'] ?? 'manual') === 'auto';
+    }
+}
diff --git a/core/lib/Service/UserService.php b/core/lib/Service/UserService.php
new file mode 100644
index 0000000..43eccbf
--- /dev/null
+++ b/core/lib/Service/UserService.php
@@ -0,0 +1,47 @@
+<?php
+
+namespace KTXC\Service;
+
+use KTXC\Models\Identity\User;
+use KTXC\SessionIdentity;
+use KTXC\SessionTenant;
+use KTXC\Stores\UserStore;
+
+class UserService
+{
+    
+    public function __construct(
+        private readonly SessionTenant $tenantIdentity,
+		private readonly SessionIdentity $userIdentity,
+        private readonly UserStore $userStore
+    ) {
+    }
+
+    public function fetchByIdentity(string $identifier): User | null
+    {
+        $data = $this->userStore->fetchByIdentity($this->tenantIdentity->identifier(), $identifier);
+        if (!$data) {
+            return null;
+        }
+
+        $user = new User();
+        $user->populate($data, 'users');
+        return $user;
+    }
+
+    public function fetchByIdentifier(string $identifier): array | null
+    {
+        return $this->userStore->fetchByIdentifier($this->tenantIdentity->identifier(), $identifier);
+    }
+
+    public function fetchSettings(array $settings = []): array | null
+    {
+        return $this->userStore->fetchSettings($this->tenantIdentity->identifier(), $this->userIdentity->identifier(), $settings);
+    }
+
+    public function storeSettings(array $settings): bool
+    {
+        return $this->userStore->storeSettings($this->tenantIdentity->identifier(), $this->userIdentity->identifier(), $settings);
+    }   
+
+}
diff --git a/core/lib/SessionIdentity.php b/core/lib/SessionIdentity.php
new file mode 100644
index 0000000..deb5e3f
--- /dev/null
+++ b/core/lib/SessionIdentity.php
@@ -0,0 +1,64 @@
+<?php
+
+namespace KTXC;
+
+use KTXC\Models\Identity\User;
+
+class SessionIdentity
+{
+    private bool $identityLock = false;
+    private ?User $identityData = null;
+
+    public function initialize(User $identity, bool $lock = true): void
+    {
+        if ($this->identityLock) {
+            throw new \RuntimeException('Identity is already locked and cannot be changed.');
+        }
+
+        $this->identityData = $identity;
+        $this->identityLock = $lock;
+    }
+
+    public function identity(): ?User
+    {
+        return $this->identityData;
+    }
+
+    public function identifier(): ?string
+    {
+        return $this->identityData?->getId();
+    }
+
+    public function label(): ?string
+    {
+        return $this->identityData?->getLabel();
+    }
+
+    public function mailAddress(): ?string
+    {
+        return $this->identityData?->getEmail();
+    }
+
+    public function nameFirst(): ?string
+    {
+        return $this->identityData?->getFirstName();
+    }
+    
+    public function nameLast(): ?string
+    {
+        return $this->identityData?->getLastName();
+    }
+
+    public function permissions(): array
+    {
+        $permissions = $this->identityData?->getPermissions() ?? [];
+        $permissions[] = 'ROLE_USER';
+        return array_unique($permissions);
+    }
+
+    public function hasPermission(string $permission): bool
+    {
+        return in_array($permission, $this->permissions());
+    }
+
+}
diff --git a/core/lib/SessionTenant.php b/core/lib/SessionTenant.php
new file mode 100644
index 0000000..8de4d66
--- /dev/null
+++ b/core/lib/SessionTenant.php
@@ -0,0 +1,122 @@
+<?php
+
+namespace KTXC;
+
+use KTXC\Models\Tenant\TenantConfiguration;
+use KTXC\Models\Tenant\TenantObject;
+use KTXC\Service\TenantService;
+
+class SessionTenant
+{
+    private ?TenantObject $tenant = null;
+    private ?string $domain = null;
+    private bool $configured = false;
+
+    /**
+     * Configure the tenant information
+     * This method is called by the SecurityMiddleware after validation
+     */
+    public function configure(string $domain): void
+    {
+        if ($this->configured) {
+            return;
+        }
+        $service = Server::runtimeContainer()->get(TenantService::class);
+        $tenant = $service->fetchByDomain($domain);
+        if ($tenant) {
+            $this->domain = $domain;
+            $this->tenant = $tenant;
+            $this->configured = true;
+        } else {
+            $this->domain = null;
+            $this->tenant = null;
+            $this->configured = false;
+        }
+    }
+
+    /**
+     * Is the tenant configured
+     */
+    public function configured(): bool
+    {
+        return $this->configured;
+    }
+
+    /**
+     * Is the tenant enabled
+     */
+    public function enabled(): bool
+    {
+        return $this->tenant?->getEnabled() ?? false;
+    }
+
+    /**
+     * Current tenant domain
+     */
+    public function domain(): ?string
+    {
+        return $this->domain;
+    }
+
+    /**
+     * Current tenant identifier
+     */
+    public function identifier(): ?string
+    {
+        return $this->tenant?->getIdentifier();
+    }
+
+    /**
+     * Current tenant label
+     */
+    public function label(): ?string
+    {
+        return $this->tenant?->getLabel();
+    }
+
+    /**
+     * Current tenant configuration
+     */
+    public function configuration(): TenantConfiguration
+    {
+        return $this->tenant?->getConfiguration();
+    }
+
+    /**
+     * Current tenant settings
+     */
+    public function settings(): array
+    {
+        return $this->tenant?->getSettings() ?? [];
+    }
+
+    /**
+     * Get all identity providers configuration for this tenant
+     * @return array<string, array> Map of provider ID to provider config
+     */
+    public function identityProviders(): array
+    {
+        return $this->tenant?->getConfiguration()['identity']['providers'] ?? [];
+    }
+
+    /**
+     * Get configuration for a specific identity provider
+     * 
+     * @param string $providerId Provider identifier (e.g., 'default', 'oidc')
+     * @return array|null Provider configuration or null if not found
+     */
+    public function identityProviderConfig(string $providerId): ?array
+    {
+        $providers = $this->identityProviders();
+        return $providers[$providerId] ?? null;
+    }
+
+    /**
+     * Check if an identity provider is enabled for this tenant
+     */
+    public function isIdentityProviderEnabled(string $providerId): bool
+    {
+        $config = $this->identityProviderConfig($providerId);
+        return $config !== null && ($config['enabled'] ?? false);
+    }
+}
diff --git a/core/lib/Stores/ExternalIdentityStore.php b/core/lib/Stores/ExternalIdentityStore.php
new file mode 100644
index 0000000..bffcde5
--- /dev/null
+++ b/core/lib/Stores/ExternalIdentityStore.php
@@ -0,0 +1,224 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Stores;
+
+use KTXC\Db\DataStore;
+
+/**
+ * External Identity Store
+ * Maps external identity provider subjects to local users
+ * 
+ * Collection: external_identities
+ * Schema: {
+ *   tid: string,           // Tenant identifier
+ *   uid: string,           // Local user identifier
+ *   provider: string,      // Provider identifier (e.g., 'oidc', 'saml')
+ *   external_subject: string, // External subject identifier (e.g., OIDC sub, SAML NameID)
+ *   attributes: object,    // Cached attributes from provider
+ *   linked_at: int,        // Timestamp when identity was linked
+ *   last_login: int        // Last login via this external identity
+ * }
+ */
+class ExternalIdentityStore
+{
+    protected const COLLECTION_NAME = 'external_identities';
+
+    public function __construct(protected DataStore $store)
+    { }
+
+    /**
+     * Find external identity by provider and external subject
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $provider Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @return array|null External identity record or null
+     */
+    public function findByExternalSubject(string $tenant, string $provider, string $externalSubject): ?array
+    {
+        $entry = $this->store->selectCollection(self::COLLECTION_NAME)->findOne([
+            'tid' => $tenant,
+            'provider' => $provider,
+            'external_subject' => $externalSubject
+        ]);
+        
+        if (!$entry) {
+            return null;
+        }
+        
+        return (array)$entry;
+    }
+
+    /**
+     * Find all external identities for a user
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $userId Local user identifier
+     * @return array<array> List of external identity records
+     */
+    public function findByUser(string $tenant, string $userId): array
+    {
+        $cursor = $this->store->selectCollection(self::COLLECTION_NAME)->find([
+            'tid' => $tenant,
+            'uid' => $userId
+        ]);
+        
+        $result = [];
+        foreach ($cursor as $entry) {
+            $result[] = (array)$entry;
+        }
+        
+        return $result;
+    }
+
+    /**
+     * Find external identity for a user from a specific provider
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $userId Local user identifier
+     * @param string $provider Provider identifier
+     * @return array|null External identity record or null
+     */
+    public function findByUserAndProvider(string $tenant, string $userId, string $provider): ?array
+    {
+        $entry = $this->store->selectCollection(self::COLLECTION_NAME)->findOne([
+            'tid' => $tenant,
+            'uid' => $userId,
+            'provider' => $provider
+        ]);
+        
+        if (!$entry) {
+            return null;
+        }
+        
+        return (array)$entry;
+    }
+
+    /**
+     * Link an external identity to a local user
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $userId Local user identifier
+     * @param string $provider Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @param array $attributes Optional attributes from provider
+     * @return bool Whether the operation was successful
+     */
+    public function linkIdentity(
+        string $tenant,
+        string $userId,
+        string $provider,
+        string $externalSubject,
+        array $attributes = []
+    ): bool {
+        $now = time();
+        
+        // Use upsert to handle both create and update
+        $result = $this->store->selectCollection(self::COLLECTION_NAME)->updateOne(
+            [
+                'tid' => $tenant,
+                'provider' => $provider,
+                'external_subject' => $externalSubject
+            ],
+            [
+                '$set' => [
+                    'uid' => $userId,
+                    'attributes' => $attributes,
+                    'last_login' => $now
+                ],
+                '$setOnInsert' => [
+                    'tid' => $tenant,
+                    'provider' => $provider,
+                    'external_subject' => $externalSubject,
+                    'linked_at' => $now
+                ]
+            ],
+            ['upsert' => true]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Unlink an external identity from a user
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $userId Local user identifier
+     * @param string $provider Provider identifier
+     * @return bool Whether the operation was successful
+     */
+    public function unlinkIdentity(string $tenant, string $userId, string $provider): bool
+    {
+        $result = $this->store->selectCollection(self::COLLECTION_NAME)->deleteOne([
+            'tid' => $tenant,
+            'uid' => $userId,
+            'provider' => $provider
+        ]);
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Update last login timestamp for an external identity
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $provider Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @return bool Whether the operation was successful
+     */
+    public function updateLastLogin(string $tenant, string $provider, string $externalSubject): bool
+    {
+        $result = $this->store->selectCollection(self::COLLECTION_NAME)->updateOne(
+            [
+                'tid' => $tenant,
+                'provider' => $provider,
+                'external_subject' => $externalSubject
+            ],
+            ['$set' => ['last_login' => time()]]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Update cached attributes for an external identity
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $provider Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @param array $attributes New attributes to store
+     * @return bool Whether the operation was successful
+     */
+    public function updateAttributes(string $tenant, string $provider, string $externalSubject, array $attributes): bool
+    {
+        $result = $this->store->selectCollection(self::COLLECTION_NAME)->updateOne(
+            [
+                'tid' => $tenant,
+                'provider' => $provider,
+                'external_subject' => $externalSubject
+            ],
+            ['$set' => ['attributes' => $attributes]]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Delete all external identities for a user (used when deleting user)
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $userId Local user identifier
+     * @return int Number of deleted records
+     */
+    public function deleteAllForUser(string $tenant, string $userId): int
+    {
+        $result = $this->store->selectCollection(self::COLLECTION_NAME)->deleteMany([
+            'tid' => $tenant,
+            'uid' => $userId
+        ]);
+        
+        return $result->getDeletedCount();
+    }
+}
diff --git a/core/lib/Stores/FirewallStore.php b/core/lib/Stores/FirewallStore.php
new file mode 100644
index 0000000..728bea8
--- /dev/null
+++ b/core/lib/Stores/FirewallStore.php
@@ -0,0 +1,309 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXC\Stores;
+
+use KTXC\Db\DataStore;
+use KTXC\Models\Firewall\FirewallRuleObject;
+use KTXC\Models\Firewall\FirewallLogObject;
+
+/**
+ * Store for firewall rules and access logs
+ */
+class FirewallStore
+{
+    protected const RULES_COLLECTION = 'firewall_rules';
+    protected const LOGS_COLLECTION = 'firewall_logs';
+
+    public function __construct(
+        protected readonly DataStore $dataStore
+    ) {}
+
+    // ========================================
+    // Rule Operations
+    // ========================================
+
+    /**
+     * List all rules for a tenant
+     */
+    public function listRules(string $tenantId, bool $activeOnly = true): array
+    {
+        $filter = ['tenantId' => $tenantId];
+        
+        if ($activeOnly) {
+            $filter['enabled'] = true;
+            $filter['$or'] = [
+                ['expiresAt' => null],
+                ['expiresAt' => ['$gt' => (new \DateTimeImmutable())->format(\DateTimeInterface::ATOM)]]
+            ];
+        }
+
+        $cursor = $this->dataStore->selectCollection(self::RULES_COLLECTION)->find($filter);
+        $list = [];
+        
+        foreach ($cursor as $entry) {
+            $rule = (new FirewallRuleObject())->jsonDeserialize((array)$entry);
+            $list[] = $rule;
+        }
+        
+        return $list;
+    }
+
+    /**
+     * Find rules by IP address
+     */
+    public function findRulesByIp(string $tenantId, string $ipAddress): array
+    {
+        $filter = [
+            'tenantId' => $tenantId,
+            'type' => ['$in' => [FirewallRuleObject::TYPE_IP, FirewallRuleObject::TYPE_IP_RANGE]],
+            'enabled' => true,
+            '$or' => [
+                ['expiresAt' => null],
+                ['expiresAt' => ['$gt' => (new \DateTimeImmutable())->format(\DateTimeInterface::ATOM)]]
+            ]
+        ];
+
+        $cursor = $this->dataStore->selectCollection(self::RULES_COLLECTION)->find($filter);
+        $list = [];
+        
+        foreach ($cursor as $entry) {
+            $rule = (new FirewallRuleObject())->jsonDeserialize((array)$entry);
+            $list[] = $rule;
+        }
+        
+        return $list;
+    }
+
+    /**
+     * Find rules by device fingerprint
+     */
+    public function findRulesByDevice(string $tenantId, string $deviceFingerprint): array
+    {
+        $filter = [
+            'tenantId' => $tenantId,
+            'type' => FirewallRuleObject::TYPE_DEVICE,
+            'value' => $deviceFingerprint,
+            'enabled' => true,
+            '$or' => [
+                ['expiresAt' => null],
+                ['expiresAt' => ['$gt' => (new \DateTimeImmutable())->format(\DateTimeInterface::ATOM)]]
+            ]
+        ];
+
+        $cursor = $this->dataStore->selectCollection(self::RULES_COLLECTION)->find($filter);
+        $list = [];
+        
+        foreach ($cursor as $entry) {
+            $rule = (new FirewallRuleObject())->jsonDeserialize((array)$entry);
+            $list[] = $rule;
+        }
+        
+        return $list;
+    }
+
+    /**
+     * Fetch a specific rule by ID
+     */
+    public function fetchRule(string $id): ?FirewallRuleObject
+    {
+        $entry = $this->dataStore->selectCollection(self::RULES_COLLECTION)->findOne(['_id' => $id]);
+        if (!$entry) {
+            return null;
+        }
+        return (new FirewallRuleObject())->jsonDeserialize((array)$entry);
+    }
+
+    /**
+     * Check if exact IP rule exists
+     */
+    public function findExactIpRule(string $tenantId, string $ipAddress, string $action): ?FirewallRuleObject
+    {
+        $entry = $this->dataStore->selectCollection(self::RULES_COLLECTION)->findOne([
+            'tenantId' => $tenantId,
+            'type' => FirewallRuleObject::TYPE_IP,
+            'value' => $ipAddress,
+            'action' => $action,
+            'enabled' => true,
+        ]);
+        
+        if (!$entry) {
+            return null;
+        }
+        return (new FirewallRuleObject())->jsonDeserialize((array)$entry);
+    }
+
+    /**
+     * Create or update a rule
+     */
+    public function depositRule(FirewallRuleObject $rule): ?FirewallRuleObject
+    {
+        if ($rule->getId()) {
+            return $this->updateRule($rule);
+        } else {
+            return $this->createRule($rule);
+        }
+    }
+
+    private function createRule(FirewallRuleObject $rule): ?FirewallRuleObject
+    {
+        $data = $rule->jsonSerialize();
+        unset($data['id']); // Remove id for insert
+        
+        $result = $this->dataStore->selectCollection(self::RULES_COLLECTION)->insertOne($data);
+        $rule->setId((string)$result->getInsertedId());
+        return $rule;
+    }
+
+    private function updateRule(FirewallRuleObject $rule): ?FirewallRuleObject
+    {
+        $id = $rule->getId();
+        if (!$id) {
+            return null;
+        }
+        
+        $data = $rule->jsonSerialize();
+        unset($data['id']);
+        
+        $this->dataStore->selectCollection(self::RULES_COLLECTION)->updateOne(
+            ['_id' => $id],
+            ['$set' => $data]
+        );
+        return $rule;
+    }
+
+    /**
+     * Delete a rule
+     */
+    public function destroyRule(FirewallRuleObject $rule): void
+    {
+        $id = $rule->getId();
+        if (!$id) {
+            return;
+        }
+        $this->dataStore->selectCollection(self::RULES_COLLECTION)->deleteOne(['_id' => $id]);
+    }
+
+    /**
+     * Delete expired rules
+     */
+    public function cleanupExpiredRules(): int
+    {
+        $result = $this->dataStore->selectCollection(self::RULES_COLLECTION)->deleteMany([
+            'expiresAt' => ['$lt' => (new \DateTimeImmutable())->format(\DateTimeInterface::ATOM)],
+            'expiresAt' => ['$ne' => null]
+        ]);
+        
+        return $result->getDeletedCount();
+    }
+
+    // ========================================
+    // Log Operations
+    // ========================================
+
+    /**
+     * Log a firewall event
+     */
+    public function createLog(FirewallLogObject $log): FirewallLogObject
+    {
+        $data = $log->jsonSerialize();
+        unset($data['id']);
+        
+        $result = $this->dataStore->selectCollection(self::LOGS_COLLECTION)->insertOne($data);
+        $log->setId((string)$result->getInsertedId());
+        return $log;
+    }
+
+    /**
+     * Get logs for a tenant with optional filters
+     */
+    public function listLogs(
+        string $tenantId,
+        ?string $ipAddress = null,
+        ?string $eventType = null,
+        ?string $result = null,
+        int $limit = 100,
+        int $offset = 0
+    ): array {
+        $filter = ['tenantId' => $tenantId];
+        
+        if ($ipAddress !== null) {
+            $filter['ipAddress'] = $ipAddress;
+        }
+        if ($eventType !== null) {
+            $filter['eventType'] = $eventType;
+        }
+        if ($result !== null) {
+            $filter['result'] = $result;
+        }
+
+        $cursor = $this->dataStore->selectCollection(self::LOGS_COLLECTION)->find(
+            $filter,
+            [
+                'sort' => ['timestamp' => -1],
+                'limit' => $limit,
+                'skip' => $offset
+            ]
+        );
+        
+        $list = [];
+        foreach ($cursor as $entry) {
+            $log = (new FirewallLogObject())->jsonDeserialize((array)$entry);
+            $list[] = $log;
+        }
+        
+        return $list;
+    }
+
+    /**
+     * Count recent failures from an IP within a time window
+     */
+    public function countRecentFailures(
+        string $tenantId,
+        string $ipAddress,
+        int $windowSeconds = 300
+    ): int {
+        $since = (new \DateTimeImmutable())->modify("-{$windowSeconds} seconds");
+        
+        return $this->dataStore->selectCollection(self::LOGS_COLLECTION)->countDocuments([
+            'tenantId' => $tenantId,
+            'ipAddress' => $ipAddress,
+            'eventType' => FirewallLogObject::EVENT_AUTH_FAILURE,
+            'timestamp' => ['$gte' => $since->format(\DateTimeInterface::ATOM)]
+        ]);
+    }
+
+    /**
+     * Get blocked requests count for dashboard
+     */
+    public function countBlockedRequests(
+        string $tenantId,
+        ?\DateTimeImmutable $since = null
+    ): int {
+        $filter = [
+            'tenantId' => $tenantId,
+            'result' => FirewallLogObject::RESULT_BLOCKED
+        ];
+        
+        if ($since !== null) {
+            $filter['timestamp'] = ['$gte' => $since->format(\DateTimeInterface::ATOM)];
+        }
+        
+        return $this->dataStore->selectCollection(self::LOGS_COLLECTION)->countDocuments($filter);
+    }
+
+    /**
+     * Clean up old logs
+     */
+    public function cleanupOldLogs(int $daysToKeep = 30): int
+    {
+        $cutoff = (new \DateTimeImmutable())->modify("-{$daysToKeep} days");
+        
+        $result = $this->dataStore->selectCollection(self::LOGS_COLLECTION)->deleteMany([
+            'timestamp' => ['$lt' => $cutoff->format(\DateTimeInterface::ATOM)]
+        ]);
+        
+        return $result->getDeletedCount();
+    }
+}
diff --git a/core/lib/Stores/TenantStore.php b/core/lib/Stores/TenantStore.php
new file mode 100644
index 0000000..a13b2dc
--- /dev/null
+++ b/core/lib/Stores/TenantStore.php
@@ -0,0 +1,75 @@
+<?php
+
+namespace KTXC\Stores;
+
+use KTXC\Db\DataStore;
+use KTXC\Models\Tenant\TenantObject;
+
+class TenantStore
+{
+    
+    protected const COLLECTION_NAME = 'tenants';
+
+    public function __construct(
+        protected readonly DataStore $dataStore
+    ) { }
+
+    public function list(): array
+    {
+        $cursor = $this->dataStore->selectCollection(self::COLLECTION_NAME)->find();
+        $list = [];
+        foreach ($cursor as $entry) {
+            $entry = (new TenantObject())->jsonDeserialize((array)$entry);
+            $list[$entry->getId()] = $entry;
+        }
+        return $list;
+    }
+
+    public function fetch(string $identifier): ?TenantObject
+    {
+        $entry = $this->dataStore->selectCollection(self::COLLECTION_NAME)->findOne(['identifier' => $identifier]);
+        if (!$entry) { return null; }
+        return (new TenantObject())->jsonDeserialize((array)$entry);
+    }
+
+    public function fetchByDomain(string $domain): ?TenantObject
+    {
+        $entry = $this->dataStore->selectCollection(self::COLLECTION_NAME)->findOne(['domains' => $domain]);
+        if (!$entry) { return null; }
+        $entity = new TenantObject();
+        $entity->jsonDeserialize((array)$entry);
+        return $entity;
+    }
+
+    public function deposit(TenantObject $entry): ?TenantObject
+    {
+        if ($entry->getId()) {
+            return $this->update($entry);
+        } else {
+            return $this->create($entry);
+        }
+    }
+
+    private function create(TenantObject $entry): ?TenantObject
+    {
+        $result = $this->dataStore->selectCollection(self::COLLECTION_NAME)->insertOne($entry->jsonSerialize());
+        $entry->setId((string)$result->getInsertedId());
+        return $entry;
+    }
+
+    private function update(TenantObject $entry): ?TenantObject
+    {
+        $id = $entry->getId();
+        if (!$id) { return null; }
+        $this->dataStore->selectCollection(self::COLLECTION_NAME)->updateOne(['_id' => $id], ['$set' => $entry->jsonSerialize()]);
+        return $entry;
+    }
+
+    public function destroy(TenantObject $entry): void
+    {
+        $id = $entry->getId();
+        if (!$id) { return; }
+        $this->dataStore->selectCollection(self::COLLECTION_NAME)->deleteOne([ '_id' => $id]);
+    }
+
+}
\ No newline at end of file
diff --git a/core/lib/Stores/UserStore.php b/core/lib/Stores/UserStore.php
new file mode 100644
index 0000000..1037b71
--- /dev/null
+++ b/core/lib/Stores/UserStore.php
@@ -0,0 +1,257 @@
+<?php
+
+namespace KTXC\Stores;
+
+use KTXC\Db\DataStore;
+use KTXC\Db\Collection;
+
+class UserStore
+{
+
+    public function __construct(protected DataStore $store)
+    { }
+
+    public function fetchByIdentity(string $tenant, string $identity): array | null
+    {
+
+        $pipeline = [
+            [
+                '$match' => [
+                    'tid' => $tenant,
+                    'identity' => $identity
+                ]
+            ],
+            [
+                '$lookup' => [
+                    'from' => 'user_roles',
+                    'localField' => 'roles',         // Array field in `users`
+                    'foreignField' => 'rid',         // Scalar field in `user_roles`
+                    'as' => 'role_details'
+                ]
+            ],
+            // Add flattened, deduplicated permissions while preserving all original user fields
+            [
+                '$addFields' => [
+                    'permissions' => [
+                        '$reduce' => [
+                            'input' => [
+                                '$map' => [
+                                    'input' => '$role_details',
+                                    'as' => 'r',
+                                    'in' => [ '$ifNull' => ['$$r.permissions', []] ]
+                                ]
+                            ],
+                            'initialValue' => [],
+                            'in' => [ '$setUnion' => ['$$value', '$$this'] ]
+                        ]
+                    ]
+                ]
+            ],
+            // Optionally remove expanded role documents from output
+            [ '$unset' => 'role_details' ]
+        ];
+
+        $entry = $this->store->selectCollection('users')->aggregate($pipeline)->toArray()[0] ?? null;
+        if (!$entry) { return null; }
+        return (array)$entry;
+    }
+
+    public function fetchByIdentifier(string $tenant, string $identifier): array | null
+    {
+        $entry = $this->store->selectCollection('users')->findOne(['tid' => $tenant, 'uid' => $identifier]);
+        if (!$entry) { return null; }
+        return (array)$entry;
+    }
+
+    /**
+     * Fetch user settings from the embedded settings field in the user document
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $identifier User identifier
+     * @param array $settings Optional array of specific setting keys to retrieve
+     * @return array|null Settings array or null if user not found
+     */
+    public function fetchSettings(string $tenant, string $identifier, array $keys = []): array | null
+    {
+        $entry = $this->store->selectCollection('users')->findOne(
+            ['tid' => $tenant, 'uid' => $identifier],
+            ['projection' => ['settings' => 1]]
+        );
+        
+        if (!$entry) { 
+            return null; 
+        }
+        
+        $settings = (array)($entry['settings'] ?? []);
+        
+        if (empty($keys)) {
+            return $settings;
+        }
+        
+        // Filter to only requested keys
+        return array_filter(
+            $settings,
+            fn($key) => in_array($key, $keys),
+            ARRAY_FILTER_USE_KEY
+        );
+    }
+
+    /**
+     * Store/update user settings in the embedded settings field
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $identifier User identifier
+     * @param array $settings Key-value pairs to set/update
+     * @return bool Whether the update was acknowledged
+     */
+    public function storeSettings(string $tenant, string $identifier, array $settings): bool
+    {
+        // Build dot-notation update for each setting key
+        $setFields = [];
+        foreach ($settings as $key => $value) {
+            $setFields["settings.$key"] = $value;
+        }
+        
+        $result = $this->store->selectCollection('users')->updateOne(
+            ['tid' => $tenant, 'uid' => $identifier],
+            ['$set' => $setFields]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Remove specific settings from a user
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $identifier User identifier
+     * @param array $keys Setting keys to remove
+     * @return bool Whether the update was acknowledged
+     */
+    public function removeSettings(string $tenant, string $identifier, array $keys): bool
+    {
+        $unsetFields = [];
+        foreach ($keys as $key) {
+            $unsetFields["settings.$key"] = "";
+        }
+        
+        $result = $this->store->selectCollection('users')->updateOne(
+            ['tid' => $tenant, 'uid' => $identifier],
+            ['$unset' => $unsetFields]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Create a new user
+     * 
+     * @param array $data User data including tid, uid, identity, label, provider, etc.
+     * @return string|null The created user's UID or null on failure
+     */
+    public function create(array $data): ?string
+    {
+        // Ensure required fields
+        if (empty($data['tid']) || empty($data['uid']) || empty($data['identity'])) {
+            return null;
+        }
+
+        // Set defaults
+        $data['enabled'] = $data['enabled'] ?? true;
+        $data['roles'] = $data['roles'] ?? [];
+        $data['profile'] = $data['profile'] ?? [];
+        $data['settings'] = $data['settings'] ?? [];
+        $data['initial_login'] = $data['initial_login'] ?? time();
+        $data['recent_login'] = $data['recent_login'] ?? time();
+
+        $result = $this->store->selectCollection('users')->insertOne($data);
+        
+        if ($result->isAcknowledged()) {
+            return $data['uid'];
+        }
+        
+        return null;
+    }
+
+    /**
+     * Update user profile fields
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $identifier User identifier
+     * @param array $profile Profile data to update
+     * @return bool Whether the update was acknowledged
+     */
+    public function updateProfile(string $tenant, string $identifier, array $profile): bool
+    {
+        $setFields = [];
+        foreach ($profile as $key => $value) {
+            $setFields["profile.$key"] = $value;
+        }
+        
+        $result = $this->store->selectCollection('users')->updateOne(
+            ['tid' => $tenant, 'uid' => $identifier],
+            ['$set' => $setFields]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Update user's last login timestamp
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $identifier User identifier
+     * @return bool Whether the update was acknowledged
+     */
+    public function updateLastLogin(string $tenant, string $identifier): bool
+    {
+        $result = $this->store->selectCollection('users')->updateOne(
+            ['tid' => $tenant, 'uid' => $identifier],
+            ['$set' => ['recent_login' => time()]]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Update user's label
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $identifier User identifier
+     * @param string $label New label
+     * @return bool Whether the update was acknowledged
+     */
+    public function updateLabel(string $tenant, string $identifier, string $label): bool
+    {
+        $result = $this->store->selectCollection('users')->updateOne(
+            ['tid' => $tenant, 'uid' => $identifier],
+            ['$set' => ['label' => $label]]
+        );
+        
+        return $result->isAcknowledged();
+    }
+
+    /**
+     * Find user by external subject (for external identity providers)
+     * 
+     * @param string $tenant Tenant identifier
+     * @param string $provider Provider identifier
+     * @param string $externalSubject External subject identifier
+     * @return array|null User data or null if not found
+     */
+    public function fetchByExternalSubject(string $tenant, string $provider, string $externalSubject): ?array
+    {
+        $entry = $this->store->selectCollection('users')->findOne([
+            'tid' => $tenant,
+            'provider' => $provider,
+            'external_subject' => $externalSubject
+        ]);
+        
+        if (!$entry) { 
+            return null; 
+        }
+        
+        return (array)$entry;
+    }
+
+}
\ No newline at end of file
diff --git a/core/lib/index.php b/core/lib/index.php
new file mode 100644
index 0000000..f798d49
--- /dev/null
+++ b/core/lib/index.php
@@ -0,0 +1,12 @@
+<?php
+
+use KTXC\Server;
+use KTXC\Module\ModuleAutoloader;
+
+require_once __DIR__ . '../../vendor/autoload.php';
+
+// Register custom module autoloader for lazy loading
+$moduleAutoloader = new ModuleAutoloader(__DIR__ . '/../modules');
+$moduleAutoloader->register();
+
+Server::run();
\ No newline at end of file
diff --git a/core/src/App.vue b/core/src/App.vue
new file mode 100644
index 0000000..bf88393
--- /dev/null
+++ b/core/src/App.vue
@@ -0,0 +1,7 @@
+<template>
+  <RouterView></RouterView>
+</template>
+
+<script setup lang="ts">
+import { RouterView } from 'vue-router';
+</script>
diff --git a/core/src/assets/images/favicon.svg b/core/src/assets/images/favicon.svg
new file mode 100644
index 0000000..7cae276
--- /dev/null
+++ b/core/src/assets/images/favicon.svg
@@ -0,0 +1,16 @@
+<svg width="36" height="35" viewBox="0 0 36 35" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M4.64931 15.8644L6.96164 13.552L6.96405 13.5496H11.3143L9.58336 15.2806L9.13646 15.7275L7.36391 17.5L7.58344 17.7201L17.5137 27.6498L27.6634 17.5L25.8903 15.7275L25.7654 15.602L23.7131 13.5496H28.0633L28.0657 13.552L29.8781 15.3644L32.0137 17.5L17.5137 32L3.01367 17.5L4.64931 15.8644ZM17.5137 3L25.8921 11.3784H21.5419L17.5137 7.35024L13.4855 11.3784H9.13525L17.5137 3Z" fill="#096DD9"/>
+<path d="M7.36453 17.4999L9.13708 15.7274L9.58398 15.2805L7.85366 13.5496H6.96467L6.96226 13.552L4.64993 15.8643L6.86938 18.0729L7.36453 17.4999Z" fill="url(#paint0_linear_112117_33940)"/>
+<path d="M25.8911 15.7274L27.6643 17.4999L27.4888 17.6754L27.4894 17.676L29.8789 15.3643L28.0666 13.552L28.0641 13.5496H27.888L25.7663 15.6019L25.8911 15.7274Z" fill="url(#paint1_linear_112117_33940)"/>
+<path d="M6.95946 13.5496L6.96187 13.552L9.13669 15.7274L17.5139 24.104L28.0684 13.5496H6.95946Z" fill="#1890FF"/>
+<defs>
+<linearGradient id="paint0_linear_112117_33940" x1="8.63954" y1="14.0887" x2="5.58137" y2="17.1469" gradientUnits="userSpaceOnUse">
+<stop stop-color="#023B95"/>
+<stop offset="0.9637" stop-color="#096CD9" stop-opacity="0"/>
+</linearGradient>
+<linearGradient id="paint1_linear_112117_33940" x1="26.282" y1="14.1278" x2="28.7548" y2="16.9379" gradientUnits="userSpaceOnUse">
+<stop stop-color="#023B95"/>
+<stop offset="1" stop-color="#096DD9" stop-opacity="0"/>
+</linearGradient>
+</defs>
+</svg>
diff --git a/core/src/assets/images/maintenance/Error404.png b/core/src/assets/images/maintenance/Error404.png
new file mode 100644
index 0000000..494ed12
Binary files /dev/null and b/core/src/assets/images/maintenance/Error404.png differ
diff --git a/core/src/assets/images/maintenance/Error500.png b/core/src/assets/images/maintenance/Error500.png
new file mode 100644
index 0000000..afc3b4c
Binary files /dev/null and b/core/src/assets/images/maintenance/Error500.png differ
diff --git a/core/src/assets/images/maintenance/TwoCone.png b/core/src/assets/images/maintenance/TwoCone.png
new file mode 100644
index 0000000..e86b965
Binary files /dev/null and b/core/src/assets/images/maintenance/TwoCone.png differ
diff --git a/core/src/assets/images/maintenance/coming-soon.png b/core/src/assets/images/maintenance/coming-soon.png
new file mode 100644
index 0000000..5d341c9
Binary files /dev/null and b/core/src/assets/images/maintenance/coming-soon.png differ
diff --git a/core/src/assets/images/maintenance/under-construction.svg b/core/src/assets/images/maintenance/under-construction.svg
new file mode 100644
index 0000000..576f362
--- /dev/null
+++ b/core/src/assets/images/maintenance/under-construction.svg
@@ -0,0 +1,353 @@
+<svg shape-rendering="geometricPrecision" text-rendering="geometricPrecision" viewBox="0 0 532 475" xmlns="http://www.w3.org/2000/svg">
+<path d="m266 474.5c146.63 0 265.5-60.442 265.5-135s-118.87-135-265.5-135-265.5 60.442-265.5 135 118.87 135 265.5 135z" fill="#fff"/>
+<path d="M246.525,353.382l-54.356-31.019c-.888-.51-2.32-.499-3.208.011l-.566.322c-.888.51-.877,1.331.011,1.83l18.526,10.351-18.948,10.939-18.303-10.562c-.888-.51-2.32-.51-3.197,0l-.566.322c-.888.511-.888,1.343,0,1.853l55.277,31.896.599-.71.3.177l21.822-12.569.167.099.322-.377.466-.266-.167-.089l1.821-2.208Z" fill="#f5f5f5"/>
+<path d="M51.2325,387.902L25.5411,373.079c-1.3881-.797-1.3881-2.092,0-2.89L297.759,213.098c1.388-.797,3.62-.797,5.009,0l25.691,14.823c1.388.797,1.388,2.092,0,2.89L56.2412,387.902c-1.3881.797-3.6206.797-5.0087,0Z" fill="#f5f5f5"/>
+<path d="M154.674,361.659c6.593,3.706,6.659,9.841.144,13.691-6.505,3.849-17.127,3.96-23.72.255-6.594-3.706-6.66-9.841-.145-13.69c6.505-3.861,17.127-3.972,23.721-.256Z" fill="#f5f5f5"/>
+<path d="M230.504,419.116L252.88,405.42c.827-.512.827-1.329,0-1.841l-22.376-13.696c-.826-.511-2.172-.511-3.008,0L205.12,403.579c-.827.512-.827,1.329,0,1.841l22.376,13.696c.836.512,2.182.512,3.008,0Z" fill="#f5f5f5"/>
+<g transform="translate(1e-6 1e-6)">
+<path d="M208.508,402.685l19.495-11.245c.365-.21.838-.319,1.303-.319.474,0,.947.1,1.312.319l19.486,11.245c.364.209.537.482.537.755v1.421c0,.273-.173.546-.537.756l-19.486,11.244c-.365.21-.838.319-1.312.319s-.948-.1-1.303-.319l-19.495-11.244c-.364-.21-.537-.483-.537-.756v-1.421c0-.264.173-.537.537-.755Z" fill="#fa8c16"/>
+<path d="M207.971,403.44v1.421c0,.273.173.546.537.756l19.495,11.244c.365.21.838.319,1.303.319v-26.059c-.474,0-.948.1-1.303.319l-19.495,11.245c-.364.218-.537.491-.537.755Z" opacity=".1"/>
+<path d="M229.307,391.121v26.05c.473,0,.947-.1,1.311-.319l19.486-11.245c.365-.209.538-.482.538-.755v-1.421c0-.273-.173-.546-.538-.755l-19.486-11.245c-.364-.201-.838-.31-1.311-.31Z" opacity=".3"/>
+<path d="M230.618,415.45l19.495-11.245c.72-.419.72-1.092,0-1.511l-19.495-11.245c-.72-.419-1.895-.419-2.614,0l-19.495,11.245c-.72.419-.72,1.092,0,1.511l19.495,11.245c.719.419,1.894.419,2.614,0Z" fill="#fa8c16"/>
+<path d="M230.618,415.45l19.495-11.245c.72-.419.72-1.092,0-1.511l-19.495-11.245c-.72-.419-1.895-.419-2.614,0l-19.495,11.245c-.72.419-.72,1.092,0,1.511l19.495,11.245c.719.419,1.894.419,2.614,0Z" fill="#fff" opacity=".5"/>
+<path d="M229.307,391.13c.473,0,.947.101,1.311.31l19.495,11.245c.72.419.72,1.092,0,1.511l-19.495,11.245c-.364.21-.838.31-1.311.31v-24.621Z" opacity=".05"/>
+<path d="M217.273,402.029l8.618-25.895c0-.009,0-.009.009-.018l.009-.028c.136-.364.446-.719.938-1.001c1.357-.783,3.553-.783,4.91,0c.492.282.802.637.939,1.001h.009l.009.028c0,0,0,0,0,.009l8.627,25.895c.792,2.249-.319,4.68-3.343,6.428-4.801,2.768-12.572,2.768-17.373,0-3.033-1.739-4.145-4.17-3.352-6.419Z" fill="#fa8c16"/>
+<path d="M223.421,383.564l.009-.028l1.23-3.678c-.201.628-.018,1.284.537,1.848.21.21.456.41.766.583c1.849,1.065,4.846,1.065,6.695,0c.31-.182.565-.373.766-.583.564-.574.737-1.229.537-1.857l1.23,3.687.009.018c.2.62.109,1.257-.273,1.849-.292.455-.747.883-1.376,1.247-.446.255-.956.446-1.485.61-1.722.519-3.771.519-5.493,0-.528-.164-1.039-.355-1.485-.61-.629-.364-1.084-.792-1.376-1.247-.4-.592-.491-1.229-.291-1.839Z" fill="#fafafa"/>
+<path d="M218.483,398.396l.009-.028l1.23-3.687c-.2.61-.219,1.238-.073,1.848.155.646.501,1.275,1.039,1.857.446.483,1.011.929,1.712,1.339c3.817,2.203,9.994,2.203,13.811,0c.701-.401,1.266-.856,1.712-1.339.547-.582.884-1.22,1.039-1.857.146-.61.137-1.238-.064-1.848l1.221,3.678.009.037c.2.61.246,1.238.137,1.857-.255,1.402-1.303,2.768-3.171,3.842-4.309,2.486-11.287,2.486-15.596,0-1.858-1.074-2.915-2.44-3.17-3.842-.091-.619-.055-1.247.155-1.857Z" fill="#fafafa"/>
+<path d="M220.953,390.975l.009-.027l1.23-3.688c-.201.61-.155,1.248.118,1.849.31.682.911,1.32,1.822,1.857.018.009.037.027.055.036c2.833,1.63,7.424,1.63,10.248,0c.019-.009.037-.027.055-.036.911-.537,1.512-1.175,1.822-1.857.273-.61.319-1.239.118-1.849l1.23,3.679.009.027c.201.61.201,1.247,0,1.858-.218.646-.674,1.283-1.348,1.848-.291.246-.61.473-.984.692-.947.546-2.077.938-3.27,1.174-1.777.346-3.717.346-5.493,0-1.194-.236-2.314-.619-3.271-1.174-.373-.219-.701-.446-.984-.692-.674-.565-1.129-1.193-1.348-1.848-.219-.601-.219-1.23-.018-1.849Z" fill="#fafafa"/>
+<path d="M229.307,374.504c.892,0,1.776.191,2.459.583.492.282.802.637.939,1.001h.009l.009.028c0,0,0,0,0,.009l8.627,25.895c.792,2.249-.319,4.68-3.343,6.428-2.396,1.384-5.539,2.076-8.682,2.076.027,0,.045-.009.073-.009c3.89-.619,6.513-4.334,5.967-8.24l-3.59-25.777-2.468-1.994Z" opacity=".1"/>
+<path d="M231.766,377.928c1.357-.783,1.357-2.049,0-2.832s-3.553-.783-4.91,0-1.357,2.049,0,2.832c1.348.783,3.553.783,4.91,0Z" fill="#fa8c16"/>
+<path d="M231.766,377.928c1.357-.783,1.357-2.049,0-2.832s-3.553-.783-4.91,0-1.357,2.049,0,2.832c1.348.783,3.553.783,4.91,0Z" fill="#fff" opacity=".5"/>
+</g>
+<path d="M418.987,376.681l20.202-11.66c.755-.433.755-1.132,0-1.564l-20.202-11.66c-.755-.433-1.965-.433-2.719,0l-20.202,11.66c-.755.432-.755,1.131,0,1.564l20.202,11.66c.754.433,1.975.433,2.719,0Z" fill="#f5f5f5"/>
+<g transform="translate(1e-6)">
+<path d="M398.486,361.438l17.937-10.351c.333-.2.766-.289,1.199-.289s.877.1,1.21.289l17.937,10.351c.333.199.499.443.499.699v1.309c0,.255-.166.499-.499.699l-17.937,10.35c-.333.2-.777.289-1.21.289s-.866-.1-1.199-.289l-17.937-10.35c-.333-.2-.5-.444-.5-.699v-1.309c.011-.256.167-.5.5-.699Z" fill="#fa8c16"/>
+<path d="M397.998,362.137v1.309c0,.255.167.499.5.699l17.937,10.35c.333.2.766.289,1.199.289v-23.986c-.433,0-.866.1-1.199.289l-17.937,10.351c-.345.199-.5.443-.5.699Z" opacity=".1"/>
+<path d="M417.633,350.798v23.986c.433,0,.877-.1,1.21-.289l17.937-10.35c.333-.2.499-.444.499-.699v-1.309c0-.256-.166-.5-.499-.699l-17.937-10.351c-.333-.2-.777-.289-1.21-.289Z" opacity=".3"/>
+<path d="M418.843,373.186l17.938-10.35c.666-.389.666-1.01,0-1.387l-17.938-10.351c-.666-.388-1.742-.388-2.408,0l-17.937,10.351c-.666.388-.666,1.009,0,1.387l17.937,10.35c.655.378,1.742.378,2.408,0Z" fill="#fa8c16"/>
+<path d="M418.843,373.186l17.938-10.35c.666-.389.666-1.01,0-1.387l-17.938-10.351c-.666-.388-1.742-.388-2.408,0l-17.937,10.351c-.666.388-.666,1.009,0,1.387l17.937,10.35c.655.378,1.742.378,2.408,0Z" fill="#fff" opacity=".5"/>
+<path d="M417.633,350.798c.433,0,.877.1,1.21.289l17.937,10.351c.666.388.666,1.009,0,1.386l-17.937,10.351c-.333.189-.766.289-1.21.289v-22.666Z" opacity=".05"/>
+<path d="M406.556,360.828l7.936-23.831v-.011l.011-.022c.123-.333.411-.666.866-.921c1.254-.721,3.275-.721,4.518,0c.455.267.744.588.866.921l.011.022c0,0,0,0,0,.011l7.936,23.842c.733,2.074-.289,4.315-3.075,5.913-4.417,2.552-11.577,2.552-15.994,0-2.775-1.609-3.797-3.85-3.075-5.924Z" fill="#fa8c16"/>
+<path d="M412.217,343.831l.011-.022l1.132-3.384c-.189.577-.022,1.187.489,1.709.188.188.421.377.71.543c1.698.977,4.462.977,6.16,0c.289-.166.522-.344.711-.543.51-.522.677-1.132.488-1.709l1.132,3.395.011.022c.189.566.1,1.154-.244,1.709-.266.421-.688.81-1.265,1.142-.411.233-.877.411-1.366.566-1.587.477-3.474.477-5.061,0-.488-.144-.955-.321-1.365-.566-.577-.332-.999-.732-1.266-1.142-.377-.566-.466-1.154-.277-1.72Z" fill="#fafafa"/>
+<path d="M407.666,357.488l.011-.022l1.132-3.395c-.189.566-.2,1.143-.067,1.709.145.588.456,1.176.955,1.708.411.444.932.855,1.576,1.232c3.508,2.03,9.202,2.03,12.709,0c.644-.377,1.166-.788,1.577-1.232.499-.543.81-1.12.954-1.708.133-.566.122-1.143-.066-1.698l1.132,3.384.011.033c.189.566.222,1.143.122,1.709-.233,1.287-1.199,2.552-2.919,3.539-3.963,2.285-10.39,2.285-14.352,0-1.71-.987-2.686-2.241-2.92-3.539-.077-.577-.044-1.154.145-1.72Z" fill="#fafafa"/>
+<path d="M409.942,350.654l.011-.022l1.132-3.395c-.189.566-.144,1.143.111,1.709.288.621.843,1.22,1.676,1.708.022.011.033.022.055.034c2.609,1.508,6.827,1.508,9.435,0c.022-.012.034-.023.056-.034.832-.499,1.398-1.087,1.676-1.708.255-.555.288-1.143.111-1.709l1.132,3.395.011.022c.189.566.189,1.143,0,1.709-.2.599-.621,1.176-1.243,1.697-.266.222-.566.433-.91.633-.877.51-1.909.865-3.008,1.076-1.643.321-3.419.321-5.062,0-1.099-.211-2.131-.577-3.008-1.076-.344-.2-.644-.411-.91-.633-.622-.521-1.043-1.098-1.243-1.697-.211-.555-.211-1.143-.022-1.709Z" fill="#fafafa"/>
+<path d="M417.633,335.5c.821,0,1.631.177,2.264.543.455.266.744.588.866.921l.011.022c0,0,0,0,0,.011l7.936,23.842c.733,2.074-.288,4.315-3.074,5.913-2.209,1.276-5.106,1.908-7.992,1.908.022,0,.044-.011.067-.011c3.585-.577,5.993-3.994,5.494-7.577l-3.297-23.731-2.275-1.841Z" opacity=".1"/>
+<path d="M419.898,338.65c1.254-.721,1.254-1.886,0-2.607s-3.275-.721-4.518,0c-1.254.721-1.254,1.886,0,2.607c1.254.722,3.264.722,4.518,0Z" fill="#fa8c16"/>
+<path d="M419.898,338.65c1.254-.721,1.254-1.886,0-2.607s-3.275-.721-4.518,0c-1.254.721-1.254,1.886,0,2.607c1.254.722,3.264.722,4.518,0Z" fill="#fff" opacity=".5"/>
+</g>
+<g transform="translate(4e-6 2e-6)">
+<path d="m50.491 357.3s2.7195-13.291-0.4107-25.317c-3.1301-12.026-9.8788-21.09-17.837-24.396-7.9696-3.306-17.027 2.063-9.9565 10.073s20.89 18.35 21.744 39.995l6.4601-0.355z" fill="#52c41a"/>
+<path d="m50.491 357.3s2.7195-13.291-0.4107-25.317c-3.1301-12.026-9.8788-21.09-17.837-24.396-7.9696-3.306-17.027 2.063-9.9565 10.073s20.89 18.35 21.744 39.995l6.4601-0.355z" opacity=".15"/>
+<path d="M49.1816,353.194c.0333,0,.0666.011.0999,0c.2553-.023.444-.233.4218-.488-1.6983-24.053-15.24-38.275-22.1552-42.436-.2109-.133-.4995-.055-.6327.156-.1332.222-.0555.499.1554.632c6.782,4.072,20.0351,18.039,21.7223,41.714.0111.222.1776.388.3885.422Z" fill="#fff"/>
+</g>
+<g transform="translate(7e-6 1e-6)">
+<path d="M10.8098,336.242c-.87689,2.685,1.0323,4.548,2.8304,6.057c1.3875,1.154,2.8971,2.419,3.2856,4.183.7659,3.572-3.4632,6.867-2.553,10.406.3885,1.487,1.6317,2.607,2.9859,3.328c1.1211.61,2.3309.999,3.5075,1.498.5883.177,1.1766.322,1.7649.422c1.7315.299,3.563.809,4.8062,2.141c1.9535,2.119,1.7094,5.38,2.4086,8.176.0111.033.0222.067.0222.1c1.4985,5.813,8.4914,8.199,13.3864,4.715l9.8788-7.034c3.9071-5.258,2.9193-14.688-3.3521-17.773-1.332-.654-2.8527-1.031-3.9183-2.074-1.2875-1.254-1.5983-3.195-1.676-4.993-.0777-1.797,0-3.661-.7326-5.314-1.0212-2.285-3.4632-3.683-5.9273-4.105-2.8859-.499-5.783.677-8.5135-.321-2.7417-.999-5.2835-2.607-8.114-3.317-3.1079-.777-6.6932-.355-9.013,2.152-.4773.51-.8547,1.098-1.0767,1.753Z" fill="#95de64"/>
+<path d="M39.7466,352.029c-.0222-.067-.0666-.122-.1221-.167-7.348-10.395-18.8585-15.332-22.7546-16.197-.222-.045-.4328.089-.4883.31-.0444.222.0888.433.3107.489c3.6852.821,14.3743,5.38,21.578,14.921-10.2118-3.273-17.8373,1.509-17.915,1.564-.1887.123-.2442.378-.1221.566.0777.111.1998.178.333.189.0777,0,.1665-.022.2331-.067.0777-.055,7.9252-4.981,18.3035-1.109c3.774,5.425,6.3824,12.359,6.116,20.99-.0111.211.1554.399.3663.422.0111,0,.0222,0,.0333,0c.222.011.4107-.167.4218-.4.2664-8.864-2.4198-15.953-6.2936-21.511Z" fill="#fff"/>
+</g>
+<path d="m321.48 20.847-5.694-3.306-266.63 153.84v200.76c0 1.931 0.677 3.284 1.7648 3.917h0.0111l5.6831 3.306c1.0989 0.632 2.6196 0.543 4.2956-0.422l254.5-146.85c3.352-1.931 6.071-6.635 6.071-10.506v-200.74z" fill="#d9d9d9"/>
+<path d="m54.854 375.45c0 3.872 2.7195 5.437 6.0716 3.506l254.5-146.85c3.352-1.931 6.072-6.635 6.072-10.506v-200.76l-266.64 153.85v200.76z" fill="#096dd9"/>
+<path d="m54.854 375.45c0 3.872 2.7195 5.437 6.0716 3.506l254.5-146.85c3.352-1.931 6.072-6.635 6.072-10.506v-200.76l-266.64 153.85v200.76z" fill="#fff" stroke="#f5f5f5" stroke-miterlimit="10"/>
+<path d="m54.854 174.69v23.753l266.63-153.84v-23.753l-266.63 153.84z" fill="#1890ff"/>
+<path d="m54.854 198.44-5.6942-3.306v-23.753l5.6942 3.306v23.753z" fill="#096dd9"/>
+<path d="m54.854 198.44-5.6942-3.306v-23.753l5.6942 3.306v23.753z" opacity=".2"/>
+<path d="m265.48 62.55v5.658c0 1.1538 0.822 1.6308 1.821 1.0539l37.106-21.467v-9.8516l-37.106 21.467c-0.999 0.5658-1.821 1.9859-1.821 3.1397z" fill="#fafafa"/>
+<path d="M313.968,32.4066c1.01-.5769,1.821-.1109,1.821,1.0539v5.6581c0,1.1649-.811,2.5738-1.821,3.1507L304.4,47.7942v-9.8516l9.568-5.536Z" fill="#455a64"/>
+<path d="M313.268,40.1614l-1.066-.3328c.111-.4549.167-.9208.167-1.3757c0-1.0872-.355-1.9193-.977-2.2743-.455-.2662-1.01-.2441-1.554.0777-1.199.6878-2.131,2.6404-2.131,4.4376c0,1.0873.355,1.9193.977,2.2743.211.1221.433.1776.677.1776.288,0,.588-.0888.877-.2552.721-.4105,1.343-1.2869,1.72-2.3076l1.066.3328c.044.0111.078.0222.122.0222.166,0,.322-.1109.377-.2773.067-.2108-.044-.4327-.255-.4993Zm-3.43,2.0413c-.3.1665-.555.1997-.766.0777-.355-.2108-.577-.8099-.577-1.5975c0-1.4867.799-3.2063,1.732-3.7499.177-.0998.333-.1553.477-.1553.1,0,.2.0222.289.0777.355.2108.577.8098.577,1.5975.011,1.4977-.788,3.2062-1.732,3.7498Z" fill="#fafafa"/>
+<path d="m314.08 0.94365c-1.099-0.67674-2.642-0.59908-4.351 0.38829l-254.5 146.84c-3.3521 1.931-6.0715 6.635-6.0715 10.506v12.703l5.6942 3.306 266.63-153.84v-12.714c0-1.9193-0.666-3.2728-1.753-3.9051-1.021-0.59908-4.673-2.6848-5.65-3.2839z" fill="#d9d9d9"/>
+<path d="m54.854 161.99c0-3.871 2.7195-8.575 6.0716-10.506l254.48-146.84c3.352-1.9304 6.072-0.3661 6.072 3.5058v12.703l-266.63 153.84v-12.703z" fill="#f0f0f0"/>
+<path d="M319.784,4.26071c-1.11-.68784-2.653-.62127-4.374.3772L60.9254,151.48c-1.6761.965-3.1968,2.63-4.2846,4.527l-5.7053-3.295c1.11-1.909,2.6196-3.573,4.3068-4.538L309.727,1.32076c1.71-.97629,3.252-1.053949,4.34-.377205.999.599085,4.64,2.684785,5.661,3.272775.011.02219.045.03329.056.04438Z" fill="#d9d9d9"/>
+<path d="M292.342,25.3504c-1.577.9097-2.842,3.1175-2.842,4.9258c0,1.8195,1.276,2.5517,2.842,1.642c1.576-.9097,2.841-3.1175,2.841-4.9258.011-1.8084-1.265-2.5406-2.841-1.642Z" fill="#52c41a"/>
+<path d="M302.308,19.6151c-1.576.9097-2.841,3.1174-2.841,4.9258s1.276,2.5516,2.841,1.6419c1.577-.9097,2.842-3.1174,2.842-4.9258s-1.277-2.5406-2.842-1.6419Z" fill="#fa8c16"/>
+<path d="m312.26 13.89c-1.576 0.9097-2.841 3.1174-2.841 4.9258 0 1.8194 1.276 2.5517 2.841 1.6419 1.577-0.9097 2.842-3.1174 2.842-4.9258 0-1.8194-1.265-2.5516-2.842-1.6419z" fill="#f5222d"/>
+<path d="M74.1789,298.001c-.1887,0-.3663-.044-.5328-.144-.333-.189-.5328-.544-.5328-.921v-65.089c0-.378.1998-.733.5328-.921l78.0869-45.054c.333-.188.733-.188,1.066,0c.333.189.532.544.532.921v65.079c0,.377-.199.732-.532.92L74.7116,297.846c-.1553.111-.344.155-.5327.155Zm1.0766-65.533v62.615L151.2,251.261v-62.615L75.2555,232.468Z" fill="#40a9ff"/>
+<path d="M75.101,283.024l-1.8315-1.087L96.901,242.098c.2997-.499.9324-.666,1.443-.389l15.24,8.632l16.072-32.162c.145-.3.422-.511.755-.566.322-.067.666.022.91.244l21.656,19.115-1.41,1.598-20.623-18.195-15.961,31.929c-.134.267-.367.455-.644.544-.278.089-.577.055-.833-.089l-15.3063-8.675-23.0987,38.94Z" fill="#40a9ff"/>
+<path d="M109.455,234.343c-.589,0-1.144-.144-1.654-.433-1.155-.665-1.787-1.964-1.787-3.672c0-3.062,2.075-6.657,4.728-8.188c1.476-.843,2.919-.954,4.074-.288c1.154.666,1.787,1.964,1.787,3.672c0,3.062-2.076,6.657-4.729,8.188-.821.477-1.654.721-2.419.721Zm3.718-10.75c-.366,0-.81.144-1.288.421-1.953,1.121-3.596,3.972-3.596,6.224c0,.854.233,1.476.655,1.72.422.233,1.077.133,1.809-.289c1.954-1.12,3.597-3.972,3.597-6.224c0-.854-.233-1.475-.655-1.719-.145-.089-.322-.133-.522-.133Z" fill="#40a9ff"/>
+<path d="M161.71,183.942L227.454,146c1.499-.865,2.709-.166,2.709,1.564v5.481c0,1.731-1.21,3.827-2.709,4.693L161.71,195.68c-1.498.865-2.708.166-2.708-1.565v-5.48c0-1.731,1.21-3.828,2.708-4.693Z" fill="#096dd9"/>
+<path d="M160.09,203.357l48.661-28.08c.6-.343,1.088-.066,1.088.622v3.361c0,.688-.488,1.531-1.088,1.875l-48.661,28.08c-.6.343-1.088.066-1.088-.622v-3.361c0-.688.488-1.52,1.088-1.875Z" fill="#f5f5f5"/>
+<path d="M159.002,218.19c-.222,0-.422-.111-.544-.311-.177-.299-.066-.688.233-.854l96.435-55.648c.3-.167.688-.067.855.233.178.299.067.687-.233.854l-96.435,55.648c-.1.056-.2.078-.311.078Z" fill="#f5f5f5"/>
+<path d="M159.002,224.058c-.222,0-.422-.111-.544-.31-.177-.3-.066-.688.233-.854l96.435-55.649c.3-.166.688-.066.855.233.178.3.067.688-.233.854l-96.435,55.649c-.1.055-.2.077-.311.077Z" fill="#f5f5f5"/>
+<path d="M159.002,229.928c-.222,0-.422-.111-.544-.311-.177-.3-.066-.688.233-.854l96.435-55.649c.3-.166.688-.066.855.233.178.3.067.688-.233.855L159.313,229.85c-.1.055-.2.078-.311.078Z" fill="#f5f5f5"/>
+<path d="M159.002,235.796c-.222,0-.422-.111-.544-.31-.177-.3-.066-.688.233-.855l96.435-55.648c.3-.166.688-.067.855.233.178.3.067.688-.233.854l-96.435,55.649c-.1.044-.2.077-.311.077Z" fill="#f5f5f5"/>
+<path d="M159.002,241.665c-.222,0-.422-.111-.544-.311-.177-.299-.066-.688.233-.854l96.435-55.648c.3-.167.688-.067.855.233.178.299.067.687-.233.854l-96.435,55.648c-.1.045-.2.078-.311.078Z" fill="#f5f5f5"/>
+<path d="M159.002,247.523c-.222,0-.422-.111-.544-.311-.177-.299-.066-.677.233-.854l45.754-26.404c.299-.178.688-.067.854.233.178.299.067.676-.233.854l-45.753,26.404c-.1.056-.2.078-.311.078Z" fill="#f5f5f5"/>
+<path d="m81.471 345.41 55.232-31.918c1.277-0.732 2.309-2.529 2.309-4.005v-29.71c0-1.475-1.032-2.074-2.309-1.331l-55.232 31.918c-1.2765 0.732-2.3088 2.529-2.3088 4.005v29.71c0 1.464 1.0323 2.063 2.3088 1.331z" fill="#fafafa" stroke="#f5f5f5" stroke-miterlimit="10" stroke-width=".9621"/>
+<path d="M84.6563,312.391l10.7002-6.18c.6438-.366,1.1544-.066,1.1544.666v12.348c0,.732-.5217,1.631-1.1544,1.997l-10.7002,6.179c-.6438.366-1.1543.067-1.1543-.665v-12.348c0-.732.5216-1.631,1.1543-1.997Z" fill="#bae7ff"/>
+<path d="M101.318,302.784l32.9-19.027c.255-.144.466-.033.466.266v1.62c0,.3-.211.655-.466.799l-32.9,19.026c-.256.145-.466.034-.466-.266v-1.62c0-.299.21-.654.466-.798Z" fill="#bae7ff"/>
+<path d="M101.318,308.941l32.9-19.027c.255-.144.466-.033.466.267v1.619c0,.3-.211.655-.466.799l-32.9,19.027c-.256.144-.466.033-.466-.267v-1.619c0-.289.21-.644.466-.799Z" fill="#bae7ff"/>
+<path d="M101.318,315.109l32.9-19.026c.255-.144.466-.034.466.266v1.62c0,.299-.211.654-.466.799l-32.9,19.026c-.256.144-.466.033-.466-.266v-1.62c0-.288.21-.655.466-.799Z" fill="#bae7ff"/>
+<path d="M83.9681,331.251l50.2489-29c.255-.144.466-.022.466.266v1.62c0,.3-.211.655-.466.799l-50.2489,29c-.2553.144-.4661.022-.4661-.266v-1.62c0-.299.2108-.654.4661-.799Z" fill="#bae7ff"/>
+<path d="M83.9681,337.42l50.2489-29c.255-.145.466-.023.466.266v1.62c0,.299-.211.654-.466.798L83.9681,340.105c-.2553.144-.4661.022-.4661-.267v-1.619c0-.3.2108-.655.4661-.799Z" fill="#bae7ff"/>
+<path d="M77.0523,308.23c-.1332,0-.2775-.066-.3441-.199-.111-.189-.0444-.433.1443-.544l1.1543-.666c.1887-.111.4329-.044.5439.145.111.188.0444.432-.1443.543l-1.1543.666c-.0555.044-.1332.055-.1998.055Z" fill="#bae7ff"/>
+<path d="M80.648,306.167c-.1332,0-.2775-.067-.3441-.2-.111-.188-.0444-.432.1443-.543l2.4308-1.409c.1887-.111.4329-.045.5439.144s.0444.433-.1443.544l-2.4308,1.409c-.0666.033-.1332.055-.1998.055Z" fill="#bae7ff"/>
+<path d="M85.5112,303.36c-.1332,0-.2775-.066-.3441-.199-.111-.189-.0444-.433.1443-.544l2.4309-1.409c.1887-.111.4329-.044.5439.144.111.189.0444.433-.1443.544l-2.4309,1.409c-.0666.033-.1332.055-.1998.055Z" fill="#bae7ff"/>
+<path d="M90.3726,300.543c-.1332,0-.2775-.067-.3441-.2-.111-.189-.0444-.433.1443-.544l2.4308-1.409c.1887-.111.4329-.044.5439.144.111.189.0444.433-.1443.544l-2.4308,1.409c-.0555.044-.1221.056-.1998.056Z" fill="#bae7ff"/>
+<path d="M95.2456,297.735c-.1332,0-.2775-.066-.3441-.199-.111-.189-.0444-.433.1443-.544l2.4309-1.409c.1887-.111.4329-.044.5439.144.111.189.0444.433-.1443.544l-2.4309,1.409c-.0666.044-.1332.055-.1998.055Z" fill="#bae7ff"/>
+<path d="M100.107,294.929c-.1333,0-.2776-.067-.3442-.2-.111-.189-.0444-.433.1443-.544l2.4309-1.409c.189-.11.433-.044.544.145.111.188.044.432-.144.543l-2.431,1.409c-.056.045-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M105.158,292.022c-.133,0-.278-.067-.344-.2-.111-.188-.045-.432.144-.543l2.431-1.409c.188-.111.433-.045.544.144s.044.433-.145.544l-2.43,1.409c-.067.033-.134.055-.2.055Z" fill="#bae7ff"/>
+<path d="M110.197,289.105c-.133,0-.278-.067-.344-.2-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.145.544l-2.43,1.409c-.056.044-.134.056-.2.056Z" fill="#bae7ff"/>
+<path d="M115.248,286.187c-.134,0-.278-.067-.345-.2-.111-.189-.044-.433.145-.544l2.431-1.409c.188-.111.433-.044.544.145.111.188.044.432-.145.543l-2.431,1.409c-.066.044-.133.056-.199.056Z" fill="#bae7ff"/>
+<path d="M120.287,283.28c-.134,0-.278-.067-.344-.2-.111-.188-.045-.433.144-.543l2.431-1.409c.188-.111.433-.045.544.144.111.188.044.432-.145.543l-2.431,1.409c-.055.034-.122.056-.199.056Z" fill="#bae7ff"/>
+<path d="M125.337,280.362c-.133,0-.277-.066-.344-.199-.111-.189-.044-.433.145-.544l2.43-1.409c.189-.111.433-.044.544.144.111.189.045.433-.144.544l-2.431,1.409c-.066.044-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M130.386,277.456c-.133,0-.277-.067-.344-.2-.111-.189-.044-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.145.111.188.045.432-.144.543l-2.431,1.409c-.067.033-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M135.427,274.538c-.133,0-.277-.067-.344-.2-.111-.189-.044-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.145.111.188.045.432-.144.543l-2.431,1.409c-.067.045-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M140.476,271.62c-.133,0-.277-.066-.344-.2-.111-.188-.044-.432.144-.543l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.067.044-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M145.517,268.713c-.133,0-.277-.066-.344-.199-.111-.189-.044-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.056.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M150.566,265.795c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.067.044-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M155.605,262.889c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.056.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M160.656,259.971c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.145.544l-2.43,1.409c-.067.044-.134.055-.2.055Z" fill="#bae7ff"/>
+<path d="M165.695,257.053c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.145.544l-2.43,1.409c-.056.044-.122.055-.2.055Z" fill="#bae7ff"/>
+<path d="M170.746,254.147c-.134,0-.278-.067-.344-.2-.111-.189-.045-.433.144-.544l2.431-1.409c.188-.111.433-.044.544.144.111.189.044.433-.145.544l-2.431,1.409c-.066.033-.133.056-.199.056Z" fill="#bae7ff"/>
+<path d="M175.796,251.229c-.133,0-.277-.067-.344-.2-.111-.188-.044-.432.145-.543l2.43-1.409c.189-.111.433-.045.544.144s.045.433-.144.544l-2.431,1.409c-.066.044-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M180.835,248.322c-.133,0-.277-.066-.344-.199-.111-.189-.044-.433.145-.544l2.431-1.409c.188-.111.432-.044.543.144.111.189.045.433-.144.544l-2.431,1.409c-.055.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M185.708,245.515c-.133,0-.277-.066-.344-.2-.111-.188-.044-.432.145-.543l2.431-1.409c.188-.111.432-.044.543.144.111.189.045.433-.144.544l-2.431,1.409c-.066.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M190.57,242.697c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.145.544l-2.43,1.409c-.067.044-.134.055-.2.055Z" fill="#bae7ff"/>
+<path d="M195.431,239.891c-.133,0-.277-.067-.344-.2-.111-.189-.044-.433.144-.544l1.155-.665c.188-.111.433-.045.544.144.111.188.044.432-.145.543l-1.154.666c-.056.044-.122.056-.2.056Z" fill="#bae7ff"/>
+<path d="M75.2765,352.364c-.222,0-.3995-.178-.3995-.4v-1.331c0-.222.1775-.4.3995-.4s.3996.178.3996.4v1.331c0,.211-.1776.4-.3996.4Z" fill="#bae7ff"/>
+<path d="M75.2765,348.469c-.222,0-.3995-.177-.3995-.399v-2.563c0-.222.1775-.399.3995-.399s.3996.177.3996.399v2.563c0,.222-.1776.399-.3996.399Zm0-5.125c-.222,0-.3995-.178-.3995-.4v-2.563c0-.221.1775-.399.3995-.399s.3996.178.3996.399v2.563c0,.222-.1776.4-.3996.4Zm0-5.115c-.222,0-.3995-.177-.3995-.399v-2.563c0-.222.1775-.399.3995-.399s.3996.177.3996.399v2.563c0,.222-.1776.399-.3996.399Zm0-5.114c-.222,0-.3995-.178-.3995-.4v-2.562c0-.222.1775-.4.3995-.4s.3996.178.3996.4v2.562c0,.222-.1776.4-.3996.4Zm0-5.115c-.222,0-.3995-.177-.3995-.399v-2.563c0-.222.1775-.399.3995-.399s.3996.177.3996.399v2.563c0,.222-.1776.399-.3996.399Zm0-5.114c-.222,0-.3995-.178-.3995-.399v-2.563c0-.222.1775-.4.3995-.4s.3996.178.3996.4v2.563c0,.221-.1776.399-.3996.399Zm0-5.126c-.222,0-.3995-.177-.3995-.399v-2.563c0-.222.1775-.399.3995-.399s.3996.177.3996.399v2.563c0,.222-.1776.399-.3996.399Z" fill="#bae7ff"/>
+<path d="M75.2765,312.646c-.222,0-.3995-.177-.3995-.399v-1.332c0-.221.1775-.399.3995-.399s.3996.178.3996.399v1.332c0,.222-.1776.399-.3996.399Z" fill="#bae7ff"/>
+<path d="M195.464,285.022c-.133,0-.277-.067-.344-.2-.111-.188-.044-.432.145-.543l1.154-.666c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-1.155.665c-.055.045-.122.056-.2.056Z" fill="#bae7ff"/>
+<path d="M80.648,351.31c-.1332,0-.2775-.067-.3441-.2-.111-.189-.0444-.433.1443-.544l2.4308-1.409c.1887-.111.4329-.044.5439.145.111.188.0444.432-.1443.543l-2.4308,1.409c-.0666.045-.1332.056-.1998.056Z" fill="#bae7ff"/>
+<path d="M85.521,348.502c-.1332,0-.2775-.066-.3441-.199-.111-.189-.0444-.433.1443-.544l2.4309-1.409c.1887-.111.4328-.044.5438.144.111.189.0444.433-.1442.544l-2.4309,1.409c-.0666.033-.1332.055-.1998.055Z" fill="#bae7ff"/>
+<path d="M90.3823,345.685c-.1332,0-.2775-.067-.3441-.2-.111-.189-.0444-.433.1443-.544l2.4309-1.409c.1887-.111.4329-.044.5439.145.111.188.0444.432-.1443.543l-2.4309,1.409c-.0555.045-.1221.056-.1998.056Z" fill="#bae7ff"/>
+<path d="M95.2554,342.878c-.1332,0-.2775-.067-.3441-.2-.111-.188-.0444-.432.1443-.543l2.4308-1.409c.1887-.111.4329-.045.5439.144s.0444.433-.1443.544l-2.4308,1.408c-.0555.045-.1332.056-.1998.056Z" fill="#bae7ff"/>
+<path d="M100.128,340.071c-.1328,0-.2771-.066-.3437-.199-.111-.189-.0444-.433.1443-.544l2.4304-1.409c.189-.111.433-.044.544.144.111.189.045.433-.144.544l-2.431,1.409c-.066.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M105.167,337.153c-.133,0-.277-.066-.344-.199-.111-.189-.044-.433.145-.544l2.431-1.409c.188-.111.432-.044.543.144.111.189.045.433-.144.544l-2.431,1.409c-.055.044-.122.055-.2.055Z" fill="#bae7ff"/>
+<path d="M110.218,334.247c-.133,0-.277-.066-.344-.2-.111-.188-.044-.432.144-.543l2.431-1.409c.189-.111.433-.045.544.144s.045.433-.144.544l-2.431,1.409c-.067.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M115.269,331.329c-.133,0-.277-.066-.344-.2-.111-.188-.044-.432.144-.543l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.067.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M120.308,328.411c-.133,0-.277-.066-.344-.2-.111-.188-.044-.432.144-.543l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.056.044-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M125.359,325.504c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.067.033-.134.055-.2.055Z" fill="#bae7ff"/>
+<path d="M130.398,322.587c-.133,0-.278-.067-.344-.2-.111-.188-.045-.432.144-.543l2.431-1.409c.189-.111.433-.045.544.144s.044.433-.144.544l-2.431,1.408c-.056.045-.122.056-.2.056Z" fill="#bae7ff"/>
+<path d="M135.449,319.68c-.133,0-.278-.066-.344-.199-.111-.189-.045-.433.144-.544l2.431-1.409c.188-.111.433-.044.544.144.111.189.044.433-.145.544l-2.43,1.409c-.067.033-.134.055-.2.055Z" fill="#bae7ff"/>
+<path d="M140.498,316.762c-.134,0-.278-.066-.345-.199-.111-.189-.044-.433.145-.544l2.431-1.409c.188-.111.433-.044.544.144.111.189.044.433-.145.544l-2.431,1.409c-.066.033-.133.055-.199.055Z" fill="#bae7ff"/>
+<path d="M145.539,313.845c-.134,0-.278-.067-.345-.2-.111-.189-.044-.433.145-.544l2.431-1.408c.188-.111.433-.045.544.144.111.188.044.432-.145.543l-2.431,1.409c-.055.045-.133.056-.199.056Z" fill="#bae7ff"/>
+<path d="M150.587,310.938c-.133,0-.277-.067-.344-.2-.111-.188-.044-.432.145-.543l2.43-1.409c.189-.111.433-.045.544.144s.045.433-.144.544l-2.431,1.409c-.066.033-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M155.626,308.02c-.133,0-.277-.067-.344-.2-.111-.188-.044-.432.145-.543l2.431-1.409c.188-.111.432-.045.543.144s.045.433-.144.544l-2.431,1.409c-.055.044-.133.055-.2.055Z" fill="#bae7ff"/>
+<path d="M160.677,305.103c-.133,0-.277-.067-.344-.2-.111-.189-.044-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.145.111.188.045.432-.144.543l-2.431,1.409c-.067.044-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M165.716,302.196c-.133,0-.277-.067-.344-.2-.111-.188-.044-.433.145-.543l2.43-1.409c.189-.111.433-.045.544.144.111.188.045.432-.144.543l-2.431,1.409c-.055.034-.122.056-.2.056Z" fill="#bae7ff"/>
+<path d="M170.767,299.278c-.133,0-.277-.067-.344-.2-.111-.188-.044-.432.144-.543l2.431-1.409c.189-.111.433-.045.544.144.111.188.044.432-.144.543l-2.431,1.409c-.067.045-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M175.818,296.372c-.133,0-.278-.067-.344-.2-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.145.111.188.044.432-.144.543l-2.431,1.409c-.067.033-.134.056-.2.056Z" fill="#bae7ff"/>
+<path d="M180.857,293.454c-.133,0-.278-.067-.344-.2-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.145.111.188.044.432-.144.543l-2.431,1.409c-.056.033-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M185.73,290.647c-.133,0-.278-.067-.344-.2-.111-.189-.045-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.144.111.189.044.433-.144.544l-2.431,1.409c-.067.033-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M190.603,287.829c-.133,0-.277-.067-.344-.2-.111-.189-.044-.433.144-.544l2.431-1.409c.189-.111.433-.044.544.145.111.188.044.432-.144.543l-2.431,1.409c-.067.045-.133.056-.2.056Z" fill="#bae7ff"/>
+<path d="M77.0523,353.384c-.1332,0-.2775-.066-.3441-.2-.111-.188-.0444-.432.1443-.543l1.1543-.666c.1887-.111.4329-.044.5439.144.111.189.0444.433-.1443.544l-1.1543.666c-.0555.033-.1332.055-.1998.055Z" fill="#bae7ff"/>
+<path d="M198.407,241.566c-.222,0-.399-.178-.399-.4v-1.331c0-.222.177-.399.399-.399s.4.177.4.399v1.331c0,.222-.178.4-.4.4Z" fill="#bae7ff"/>
+<path d="M198.407,277.377c-.222,0-.399-.177-.399-.399v-2.563c0-.222.177-.399.399-.399s.4.177.4.399v2.563c0,.222-.178.399-.4.399Zm0-5.114c-.222,0-.399-.177-.399-.399v-2.563c0-.222.177-.399.399-.399s.4.177.4.399v2.563c0,.222-.178.399-.4.399Zm0-5.114c-.222,0-.399-.178-.399-.4v-2.563c0-.221.177-.399.399-.399s.4.178.4.399v2.563c0,.222-.178.4-.4.4Zm0-5.115c-.222,0-.399-.177-.399-.399v-2.563c0-.222.177-.399.399-.399s.4.177.4.399v2.563c0,.222-.178.399-.4.399Zm0-5.114c-.222,0-.399-.178-.399-.4v-2.562c0-.222.177-.4.399-.4s.4.178.4.4v2.562c0,.222-.178.4-.4.4Zm0-5.115c-.222,0-.399-.177-.399-.399v-2.563c0-.222.177-.399.399-.399s.4.177.4.399v2.563c0,.211-.178.399-.4.399Zm0-5.125c-.222,0-.399-.178-.399-.399v-2.563c0-.222.177-.4.399-.4s.4.178.4.4v2.563c0,.221-.178.399-.4.399Z" fill="#bae7ff"/>
+<path d="M198.407,281.272c-.222,0-.399-.178-.399-.4v-1.331c0-.222.177-.399.399-.399s.4.177.4.399v1.331c0,.222-.178.4-.4.4Z" fill="#bae7ff"/>
+<path d="M196.632,241.255c-.067,0-.133-.022-.2-.055-.122-.067-.2-.2-.2-.344v-4.105c0-.144.078-.277.2-.344l3.552-2.052c.122-.067.278-.067.4,0c.122.066.2.199.2.344v4.104c0,.145-.078.278-.2.344l-3.552,2.053c-.067.044-.133.055-.2.055Zm.4-4.271v3.184l2.752-1.587v-3.184l-2.752,1.587Z" fill="#bae7ff"/>
+<path d="M196.632,286.408c-.067,0-.133-.022-.2-.055-.122-.067-.2-.2-.2-.344v-4.105c0-.144.078-.277.2-.344l3.552-2.052c.122-.067.278-.067.4,0c.122.066.2.2.2.344v4.105c0,.144-.078.277-.2.344l-3.552,2.052c-.067.033-.133.055-.2.055Zm.4-4.271v3.184l2.752-1.586v-3.184l-2.752,1.586Z" fill="#bae7ff"/>
+<path d="M73.5012,312.335c-.0666,0-.1332-.022-.1998-.055-.1221-.067-.1998-.2-.1998-.344v-4.105c0-.144.0777-.277.1998-.344l3.5519-2.052c.1221-.067.2775-.067.3996,0c.1221.066.1998.199.1998.344v4.104c0,.145-.0777.278-.1998.344L73.701,312.28c-.0666.044-.1332.055-.1998.055Zm.3995-4.271v3.184l2.7528-1.586v-3.184l-2.7528,1.586Z" fill="#bae7ff"/>
+<path d="M73.5012,357.489c-.0666,0-.1332-.023-.1998-.056-.1221-.066-.1998-.2-.1998-.344v-4.105c0-.144.0777-.277.1998-.344l3.5519-2.052c.1221-.067.2775-.067.3996,0s.1998.2.1998.344v4.105c0,.144-.0777.277-.1998.344l-3.5519,2.052c-.0666.033-.1332.056-.1998.056Zm.3995-4.272v3.184l2.7528-1.586v-3.184l-2.7528,1.586Z" fill="#bae7ff"/>
+<path d="M200.193,261.846c0,1.32-.799,2.851-1.787,3.417s-1.787-.034-1.787-1.354.799-2.851,1.787-3.417s1.787.034,1.787,1.354Z" fill="#bae7ff"/>
+<path d="M141.043,270.732c0,1.32-.799,2.851-1.787,3.417s-1.787-.033-1.787-1.353.799-2.851,1.787-3.417c.988-.577,1.787.033,1.787,1.353Z" fill="#bae7ff"/>
+<path d="M141.043,315.874c0,1.321-.799,2.852-1.787,3.417-.988.566-1.787-.033-1.787-1.353s.799-2.851,1.787-3.417s1.787.044,1.787,1.353Z" fill="#bae7ff"/>
+<path d="M77.0644,332.993c0,1.32-.7992,2.851-1.7871,3.417s-1.7871-.033-1.7871-1.353c0-1.321.7992-2.852,1.7871-3.417.9879-.577,1.7871.033,1.7871,1.353Z" fill="#bae7ff"/>
+<path d="M143.675,277.522c-.111,0-.222-.055-.289-.166-.089-.156-.033-.355.122-.444l50.637-29.222c.156-.089.356-.033.456.122.088.155.033.355-.123.444l-50.637,29.222c-.055.033-.111.044-.166.044Z" fill="#8c8c8c"/>
+<path d="M143.675,280.606c-.111,0-.222-.055-.289-.166-.089-.156-.033-.355.122-.444l50.637-29.222c.156-.089.356-.045.456.122.088.155.033.355-.123.444l-50.637,29.222c-.055.022-.111.044-.166.044Z" fill="#8c8c8c"/>
+<path d="M143.675,283.679c-.111,0-.222-.055-.289-.166-.089-.155-.033-.355.122-.444l50.637-29.222c.156-.089.356-.044.456.122.088.155.033.355-.123.444l-50.637,29.222c-.055.033-.111.044-.166.044Z" fill="#8c8c8c"/>
+<path d="M143.675,286.764c-.111,0-.222-.056-.289-.167-.089-.155-.033-.355.122-.443l50.637-29.222c.156-.089.356-.034.456.122.088.155.033.355-.123.443l-50.637,29.222c-.055.034-.111.045-.166.045Z" fill="#8c8c8c"/>
+<path d="M143.675,289.848c-.111,0-.222-.056-.289-.167-.089-.155-.033-.355.122-.443l50.637-29.223c.156-.088.356-.044.456.123.088.155.033.355-.123.443l-50.637,29.222c-.055.022-.111.045-.166.045Z" fill="#8c8c8c"/>
+<path d="M143.675,292.921c-.111,0-.222-.056-.289-.167-.089-.155-.033-.355.122-.444l24.02-13.867c.156-.089.355-.045.444.122.089.155.033.355-.122.444l-24.02,13.867c-.044.034-.1.045-.155.045Z" fill="#8c8c8c"/>
+<path d="M143.675,300.021c-.111,0-.222-.055-.289-.166-.089-.156-.033-.355.122-.444l50.637-29.222c.156-.089.356-.045.456.122.088.155.033.355-.123.444l-50.637,29.222c-.055.033-.111.044-.166.044Z" fill="#8c8c8c"/>
+<path d="M143.675,303.094c-.111,0-.222-.055-.289-.166-.089-.155-.033-.355.122-.444l50.637-29.222c.156-.089.356-.044.456.122.088.155.033.355-.123.444L143.841,303.05c-.055.033-.111.044-.166.044Z" fill="#8c8c8c"/>
+<path d="M143.675,306.178c-.111,0-.222-.055-.289-.166-.089-.155-.033-.355.122-.444l50.637-29.222c.156-.089.356-.033.456.122.088.155.033.355-.123.444l-50.637,29.222c-.055.033-.111.044-.166.044Z" fill="#8c8c8c"/>
+<path d="M143.675,309.262c-.111,0-.222-.055-.289-.166-.089-.155-.033-.355.122-.444l24.02-13.867c.156-.089.355-.034.455.122.089.155.034.355-.122.454l-24.02,13.868c-.055.022-.111.033-.166.033Z" fill="#8c8c8c"/>
+<path d="M220.151,272.684c-.044,0-.089-.011-.133-.033-.078-.044-.133-.133-.133-.233v-46.607c0-.099.055-.177.133-.232l37.495-21.634c.078-.044.189-.044.266,0c.078.044.134.133.134.233v46.606c0,.1-.056.189-.134.233l-37.495,21.634c-.044.022-.088.033-.133.033Zm.267-46.717v45.996l36.962-21.334v-45.996l-36.962,21.334Z" fill="#f5f5f5"/>
+<path d="M223.038,251.039c-.045,0-.089-.011-.133-.033-.078-.044-.134-.133-.134-.233v-23.298c0-.099.056-.177.134-.233l31.723-18.305c.078-.044.189-.044.266,0c.078.044.133.133.133.233v23.298c0,.1-.055.177-.133.233l-31.723,18.305c-.044.022-.089.033-.133.033Zm.266-23.408v22.687l31.191-18.006v-22.687l-31.191,18.006Z" fill="#bae7ff"/>
+<path d="M223.336,253.924l8.036-4.637c.167-.1.311-.023.311.177v.954c0,.2-.133.433-.311.533l-8.036,4.637c-.166.1-.311.022-.311-.177v-.955c.011-.188.145-.432.311-.532Z" fill="#bae7ff"/>
+<path d="M223.336,257.252l30.147-17.351c.167-.1.311-.022.311.177v.954c0,.2-.133.433-.311.533l-30.147,17.351c-.166.1-.311.022-.311-.177v-.954c.011-.189.145-.433.311-.533Z" fill="#f5f5f5"/>
+<path d="M223.336,263.92l30.147-17.351c.167-.1.311-.022.311.177v.954c0,.2-.133.433-.311.533l-30.147,17.351c-.166.1-.311.022-.311-.177v-.954c.011-.2.145-.444.311-.533Z" fill="#f5f5f5"/>
+<path d="M223.336,260.581l30.147-17.351c.167-.1.311-.022.311.177v.955c0,.199-.133.432-.311.532l-30.147,17.351c-.166.1-.311.023-.311-.177v-.954c.011-.189.145-.433.311-.533Z" fill="#f5f5f5"/>
+<path d="M254.76,232.734c-.011,0-.023,0-.045,0l-11.033-1.742c-.144-.022-.244-.155-.222-.299s.144-.244.3-.222l11.033,1.742c.144.022.244.155.222.299-.011.122-.122.222-.255.222Z" fill="#bae7ff"/>
+<path d="M234.081,229.484c-.011,0-.022,0-.044,0l-11.044-1.742c-.145-.022-.245-.155-.222-.299.022-.144.155-.244.299-.222l11.045,1.742c.144.022.244.155.222.299-.011.122-.134.222-.256.222Z" fill="#bae7ff"/>
+<path d="M223.037,251.04c-.055,0-.111-.022-.166-.056-.122-.088-.144-.255-.044-.377l11.033-14.478c.089-.111.255-.144.377-.044.122.089.144.255.045.377L223.248,250.94c-.055.067-.133.1-.211.1Z" fill="#bae7ff"/>
+<path d="M243.705,223.925c-.055,0-.111-.022-.166-.055-.122-.089-.144-.255-.044-.377l11.055-14.5c.089-.111.255-.145.377-.045.122.089.145.255.045.377l-11.056,14.5c-.055.067-.133.1-.211.1Z" fill="#bae7ff"/>
+<path d="M238.898,228.307c-.644.366-1.166,1.476-1.166,2.452s.522,1.487,1.166,1.121s1.165-1.476,1.165-2.452-.532-1.498-1.165-1.121Z" fill="#bae7ff"/>
+<path d="M241.385,225.29l-.888.51v-.466c0-.3-.155-.444-.344-.333l-2.52,1.453c-.188.111-.344.444-.344.733v.466l-.888.51c-.399.233-.721.91-.721,1.52v4.515c0,.61.322.921.721.688l4.984-2.873c.4-.233.721-.91.721-1.52v-4.516c0-.61-.321-.92-.721-.687Zm-2.486,7.477c-.955.555-1.743-.2-1.743-1.675c0-1.476.777-3.129,1.743-3.683.954-.555,1.742.199,1.742,1.675-.011,1.475-.788,3.128-1.742,3.683Z" fill="#bae7ff"/>
+<path d="M266.294,246.047c-.045,0-.089-.011-.133-.033-.078-.045-.134-.133-.134-.233v-46.607c0-.1.056-.177.134-.233l37.495-21.633c.077-.045.188-.045.266,0c.078.044.133.133.133.233v46.606c0,.1-.055.189-.133.233l-37.495,21.634c-.033.022-.078.033-.133.033Zm.266-46.717v45.996l36.962-21.334v-45.996L266.56,199.33Z" fill="#f5f5f5"/>
+<path d="M269.18,224.413c-.044,0-.088-.011-.133-.033-.077-.044-.133-.133-.133-.233v-23.298c0-.099.056-.177.133-.233l31.723-18.305c.078-.044.189-.044.267,0s.133.133.133.233v23.298c0,.1-.055.188-.133.233L269.314,224.38c-.034.022-.089.033-.134.033Zm.267-23.419v22.687l31.19-18.006v-22.687l-31.19,18.006Z" fill="#bae7ff"/>
+<path d="M269.49,227.298l8.037-4.637c.166-.1.311-.023.311.177v.954c0,.2-.134.433-.311.533l-8.037,4.637c-.166.1-.31.022-.31-.177v-.954c0-.2.144-.433.31-.533Z" fill="#bae7ff"/>
+<path d="M269.49,230.626l30.148-17.351c.166-.1.31-.022.31.177v.955c0,.199-.133.432-.31.532L269.49,232.29c-.166.1-.31.022-.31-.177v-.954c0-.2.144-.433.31-.533Z" fill="#f5f5f5"/>
+<path d="M269.49,237.283l30.148-17.351c.166-.1.31-.023.31.177v.954c0,.2-.133.433-.31.533L269.49,238.947c-.166.1-.31.022-.31-.177v-.955c0-.199.144-.432.31-.532Z" fill="#f5f5f5"/>
+<path d="M269.49,233.954l30.148-17.351c.166-.1.31-.022.31.178v.954c0,.199-.133.432-.31.532L269.49,235.618c-.166.1-.31.023-.31-.177v-.954c0-.2.144-.433.31-.533Z" fill="#f5f5f5"/>
+<path d="M285.042,198.342c-2.387,1.376-4.329,4.737-4.329,7.489c0,2.762,1.942,3.871,4.329,2.496c2.386-1.376,4.329-4.737,4.329-7.489c0-2.751-1.932-3.872-4.329-2.496Zm2.264,4.049l-3.23,3.861c-.311.377-.566.289-.566-.211v-3.616c0-.488.4-.877.888-.855l2.597.1c.489.023.633.344.311.721Z" fill="#bae7ff"/>
+<path d="M255.649,100.803c-.422-.189-.988-.134-1.599.221L80.0167,201.271c-1.3208.766-2.3975,2.63-2.3975,4.161v10.062c0,.732.2442,1.265.6549,1.531-.4107-.266-4.0404-2.319-4.4844-2.585-.4217-.255-.6881-.788-.6881-1.542v-10.062c0-1.531,1.0766-3.395,2.4086-4.161L249.533,98.4173c.677-.3883,1.287-.4105,1.72-.1553.389.233,3.541,2.019,4.396,2.541Z" fill="#096dd9"/>
+<path d="M80.0161,201.271L254.05,101.025c1.332-.766,2.397-.145,2.397,1.386v10.063c0,1.531-1.076,3.395-2.397,4.16L80.0161,216.881c-1.332.765-2.4087.144-2.4087-1.387v-10.062c0-1.531,1.0767-3.395,2.4087-4.161Z" fill="#91d5ff"/>
+<path d="M78.3185,203.069l-4.5066-2.608c-.4328.755-.7103,1.609-.7103,2.375v10.062c0,.754.2664,1.287.6881,1.542.444.266,4.0737,2.319,4.4844,2.585-.4107-.266-.6549-.799-.6549-1.531v-10.062c0-.766.2664-1.609.6993-2.363Z" opacity=".15"/>
+<path d="M255.649,100.803c-.854-.522-4.007-2.308-4.395-2.541-.433-.2552-1.044-.233-1.721.1553L75.5108,198.675c-.666.377-1.2654,1.043-1.6983,1.786l4.5065,2.608c.4329-.755,1.0323-1.409,1.6983-1.798L254.051,101.024c.61-.355,1.176-.41,1.598-.221Z" fill="#fff" opacity=".4"/>
+<path d="M247.434,112.651c0,1.442-1.076,3.217-2.408,3.994l-58.319,33.649c-1.331.765-2.408.221-2.408-1.221s1.077-3.217,2.397-3.994l58.319-33.648c1.343-.766,2.419-.222,2.419,1.22Z" fill="#fafafa"/>
+<path d="M267.649,97.5518l93.183-53.7845c1.198-.6878,2.164-.1331,2.164,1.2537v84.094c0,1.375-.966,3.062-2.164,3.75l-93.183,53.784c-1.199.688-2.165.133-2.165-1.254v-84.093c0-1.3871.966-3.0623,2.165-3.7502Z" fill="#f0f0f0"/>
+<path d="M495.62,287.328c11.977,6.745,12.099,17.884.267,24.884-11.833,7.001-31.124,7.212-43.112.466-11.977-6.745-12.099-17.883-.266-24.884c11.832-7,31.135-7.2,43.111-.466Z" fill="#fafafa"/>
+<path d="m484.92 129.11v174.57l8.591-6.823 1.343-171.32-9.934 3.572z" fill="#d9d9d9"/>
+<path d="m474.17 123.4c3.208-2.974 12.776 2.618 12.776 5.791l-2.03 174.45-17.816-7.357 7.07-172.88z" fill="#f0f0f0"/>
+<path d="M476.207,93.1135c3.208-2.6737,6.393-3.3837,8.935-2.3742v-.0111l15.784,7.533-.366.9984c1.032,1.3094,1.798,3.0844,2.186,5.3254c1.399,8.065-2.564,18.86-8.857,24.096-1.721,1.432-3.441,2.286-5.051,2.63l-.377,1.043-15.74-7.522c-2.641-.843-4.65-3.462-5.372-7.633-1.398-8.054,2.564-18.838,8.858-24.0855Z" fill="#1890ff"/>
+<path d="M476.207,93.1135c3.208-2.6737,6.393-3.3837,8.935-2.3742v-.0111l15.784,7.533-.366.9984c1.032,1.3094,1.798,3.0844,2.186,5.3254c1.399,8.065-2.564,18.86-8.857,24.096-1.721,1.432-3.441,2.286-5.051,2.63l-.377,1.043-15.74-7.522c-2.641-.843-4.65-3.462-5.372-7.633-1.398-8.054,2.564-18.838,8.858-24.0855Z" opacity=".15"/>
+<g transform="translate(1e-6 1e-6)">
+<path d="m417.9 109.38-20.391 38.331-6.504-4.139 20.324-37.986 6.571 3.794z" fill="#f0f0f0"/>
+<path d="m378.54 158.89 18.97-11.183-6.505-4.138-19.047 11.538 6.582 3.783z" fill="#f0f0f0"/>
+<path d="m421.14 111.11-3.241-1.731-20.39 38.331-18.97 11.183v3.639l22.022-13.114 20.579-38.308z" fill="#d9d9d9"/>
+<path d="M425.28,104.818l51.836,11.349c2.897-.466,4.873-3.195,4.406-6.102-.466-2.895-3.196-4.87-6.104-4.404-.056.011-.134.022-.189.033l-51.381-8.8307c-2.187.4327-3.608,2.5627-3.175,4.7487.422,2.141,2.476,3.55,4.607,3.206Z" fill="#f0f0f0"/>
+<path d="M425.28,104.818l51.836,11.349c2.897-.466,4.873-3.195,4.406-6.102-.466-2.895-3.196-4.87-6.104-4.404-.056.011-.134.022-.189.033l-51.381-8.8307c-2.187.4327-3.608,2.5627-3.175,4.7487.422,2.141,2.476,3.55,4.607,3.206Z" fill="#f0f0f0" opacity=".7"/>
+<path d="M412.326,86.7785c2.287-1.8971,4.551-2.4074,6.36-1.6863v-.0111l11.156,5.7246-.256.71c.733.9319,1.288,2.1967,1.554,3.7942.999,5.7361-1.831,13.4131-6.304,17.1401-1.221,1.021-2.442,1.631-3.597,1.875l-.266.744-11.122-5.725v-.011c-1.876-.599-3.308-2.452-3.83-5.414-.987-5.7357,1.832-13.4128,6.305-17.1405Z" fill="#096dd9"/>
+<path d="M412.326,86.7785c2.287-1.8971,4.551-2.4074,6.36-1.6863v-.0111l11.156,5.7246-.256.71c.733.9319,1.288,2.1967,1.554,3.7942.999,5.7361-1.831,13.4131-6.304,17.1401-1.221,1.021-2.442,1.631-3.597,1.875l-.266.744-11.122-5.725v-.011c-1.876-.599-3.308-2.452-3.83-5.414-.987-5.7357,1.832-13.4128,6.305-17.1405Z" opacity=".15"/>
+<path d="m423.72 92.592c-4.473 3.7277-7.293 11.405-6.305 17.14 0.999 5.736 5.428 7.367 9.901 3.639 4.473-3.727 7.293-11.405 6.305-17.14-0.988-5.7468-5.428-7.3776-9.901-3.6389z" fill="#1890ff"/>
+<path d="M421.639,106.205c.122.687.344,1.253.644,1.675.887,1.298,2.486,1.398,4.095.066c2.132-1.786,3.486-5.447,3.008-8.1982-.31-1.7862-1.298-2.7292-2.541-2.6848-.689,0-1.432.3107-2.187.9541-2.142,1.7862-3.497,5.4469-3.019,8.1879Z" fill="#096dd9"/>
+<path d="M421.639,106.205c.122.687.344,1.253.644,1.675.887,1.298,2.486,1.398,4.095.066c2.132-1.786,3.486-5.447,3.008-8.1982-.31-1.7862-1.298-2.7292-2.541-2.6848-.689,0-1.432.3107-2.187.9541-2.142,1.7862-3.497,5.4469-3.019,8.1879Z" opacity=".3"/>
+<path d="M421.639,106.205c.122.687.344,1.253.644,1.675.688,0,1.442-.322,2.197-.954c2.131-1.786,3.486-5.448,3.008-8.1878-.122-.6878-.344-1.2536-.643-1.6752-.689,0-1.432.3106-2.187.9541-2.142,1.7861-3.497,5.4469-3.019,8.1879Z" fill="#455a64"/>
+<path d="m371.96 158.74 6.582 3.783v-3.627l-6.582-3.784v3.628z" fill="#f0f0f0"/>
+<path d="m418.53 94.4-6.582-3.8164-21.689-27.913 5.328-1.0872 22.943 32.816z" fill="#f0f0f0"/>
+<path d="M384.245,65.2119c-.378-.1664-.888-.122-1.443.1997L289.619,119.196c-1.188.688-2.165,2.374-2.165,3.75v84.094c0,.654.222,1.142.589,1.375-.367-.244-3.641-2.085-4.041-2.329-.377-.233-.621-.71-.621-1.387v-84.094c0-1.376.966-3.062,2.175-3.75l93.172-53.7843c.611-.355,1.166-.3661,1.554-.1442.355.1997,3.197,1.8083,3.963,2.2854Z" fill="#096dd9" opacity=".7"/>
+<path d="M289.62,119.185l93.182-53.7846c1.199-.6878,2.165-.1331,2.165,1.2536v84.094c0,1.375-.966,3.062-2.165,3.75L289.62,208.282c-1.199.688-2.165.133-2.165-1.254v-84.093c0-1.376.966-3.062,2.165-3.75Z" fill="#1890ff"/>
+<path d="M288.088,120.805l-4.063-2.341c-.399.677-.632,1.442-.632,2.141v84.094c0,.677.244,1.165.621,1.387.4.244,3.674,2.085,4.04,2.329-.366-.244-.588-.721-.588-1.375v-84.094c-.011-.699.233-1.465.622-2.141Z" opacity=".15"/>
+<path d="M384.245,65.2117c-.765-.466-3.607-2.0746-3.962-2.2854-.389-.233-.944-.2108-1.554.1442L285.557,116.855c-.599.344-1.143.932-1.532,1.609l4.063,2.341c.388-.677.932-1.276,1.532-1.62l93.182-53.7847c.555-.3107,1.066-.3661,1.443-.1886Z" fill="#fff" opacity=".5"/>
+<path d="M348.448,147.087l7.371,10.351-33.289-30.276-35.075,59.387v20.491c0,1.375.966,1.941,2.165,1.253l93.182-53.784c1.199-.688,2.165-2.374,2.165-3.75v-11.261l-24.819-17.861-11.7,25.45Z" fill="#fafafa" opacity=".95"/>
+<path d="m352.46 97.296c4.34-2.5073 7.87-0.4771 7.87 4.5379 0 5.014-3.518 11.116-7.87 13.623-4.34 2.508-7.869 0.477-7.869-4.537 0-5.026 3.518-11.117 7.869-13.624z" fill="#fafafa" opacity=".95"/>
+<path d="M383.768,66.1103c.189,0,.2.4881.2.5436v84.0941c0,1.02-.777,2.374-1.665,2.884L289.12,207.417c-.255.144-.411.166-.466.166-.189,0-.2-.488-.2-.544v-84.093c0-1.021.777-2.374,1.665-2.885l93.183-53.7843c.255-.1442.41-.1664.466-.1664Zm0-.9985c-.289,0-.622.0999-.966.2996L289.62,119.196c-1.199.688-2.165,2.374-2.165,3.75v84.093c0,.977.488,1.543,1.199,1.543.288,0,.621-.1.966-.3l93.182-53.785c1.199-.687,2.165-2.374,2.165-3.749v-84.0941c0-.9763-.489-1.5421-1.199-1.5421Z" fill="#096dd9"/>
+<path d="m418.53 94.4 2.609-2.8845-24.564-35.046-23.998 13.169v4.7483l22.599-12.137 23.354 32.151z" fill="#d9d9d9"/>
+<path d="m372.58 74.386-7.593-4.3822v-4.7483l7.593 4.3822v4.7483z" fill="#d9d9d9"/>
+<path d="m364.99 65.256 23.987-13.18 7.603 4.3933-23.997 13.169-7.593-4.3822z" fill="#f0f0f0"/>
+</g>
+<path d="m492.32 100.76c-6.294 5.248-10.256 16.031-8.858 24.097 1.399 8.065 7.637 10.351 13.919 5.114 6.294-5.247 10.257-16.031 8.858-24.096-1.398-8.0659-7.637-10.351-13.919-5.115z" fill="#1890ff"/>
+<path d="M489.405,119.895c.166.965.477,1.764.91,2.363c1.243,1.819,3.496,1.964,5.761.089c2.996-2.508,4.895-7.666,4.229-11.527-.433-2.507-1.821-3.839-3.575-3.772-.965.011-2.009.444-3.074,1.331-3.03,2.518-4.929,7.677-4.251,11.516Z" fill="#096dd9"/>
+<path d="M489.405,119.895c.166.965.477,1.764.91,2.363c1.243,1.819,3.496,1.964,5.761.089c2.996-2.508,4.895-7.666,4.229-11.527-.433-2.507-1.821-3.839-3.575-3.772-.965.011-2.009.444-3.074,1.331-3.03,2.518-4.929,7.677-4.251,11.516Z" opacity=".3"/>
+<path d="M489.405,119.895c.166.965.477,1.764.91,2.363.965-.011,2.02-.444,3.086-1.342c2.996-2.508,4.895-7.667,4.229-11.505-.167-.965-.478-1.764-.911-2.363-.965.011-2.009.444-3.074,1.331-3.019,2.519-4.917,7.677-4.24,11.516Z" fill="#455a64"/>
+<path d="M221.784,239.834l-30.769,83.683-.011.011c-.067.211-.244.411-.544.577-.777.444-2.031.444-2.808,0-.333-.188-.522-.432-.577-.688-.011-.077-.011-.155,0-.233.011-.188.044-.377.111-.576l30.846-84.15c.377-1.031,1.521-1.564,2.553-1.176c1.054.389,1.576,1.52,1.199,2.552Z" fill="#d9d9d9"/>
+<path d="m181.77 294.02-2.22 3.843 30.846 17.801 2.22-3.843-30.846-17.801z" fill="#d9d9d9"/>
+<path d="m204.2 281.07-2.22 3.843 30.847 17.801 2.22-3.843-30.847-17.801z" fill="#91d5ff"/>
+<path d="m204.2 281.07-2.22 3.843 30.847 17.801 2.22-3.843-30.847-17.801z" opacity=".6"/>
+<path d="M196.688,234.087l16.449-9.497c1.343-.776,2.853-.887,4.13-.321c1.276.565,2.197,1.764,2.519,3.272l27.317,127.716c.022.089.033.178.033.267.011.088.011.188.011.277-.044.244-.233.488-.577.688-.777.444-2.031.444-2.808,0-.289-.178-.466-.377-.544-.588-.011-.044-.022-.078-.022-.122L215.901,228.374c-.066-.278-.177-.444-.255-.489-.078-.033-.278-.011-.522.134l-16.461,9.496" fill="#d9d9d9"/>
+<path d="M210.496,295.205l-10.024-5.781c-.333-.188-.599-.654-.599-1.031v-.244c0-.378.266-.843.599-1.032l24.043-13.879c.333-.188.865-.188,1.198,0l10.023,5.78c.333.189.6.655.6,1.032v.233c0,.377-.267.843-.6,1.032l-24.042,13.878c-.333.2-.865.2-1.198.012Z" fill="#f5f5f5"/>
+<path d="M211.096,293.929v1.42c.222,0,.433-.044.599-.144l12.021-6.934l12.021-6.934c.333-.189.6-.654.6-1.032v-.233c0-.188-.067-.399-.178-.588l-25.063,14.445Z" opacity=".15"/>
+<path d="M200.051,287.561c-.111.188-.178.399-.178.588v.244c0,.377.266.843.599,1.031l10.024,5.78c.166.1.377.145.599.145v-1.42l-11.044-6.368Z" opacity=".1"/>
+<path d="M206.155,274.891l-16.649-9.607c-.333-.189-.6-.655-.6-1.032v-.233c0-.377.267-.843.6-1.032l24.042-13.879c.333-.188.866-.188,1.199,0l16.649,9.608c.333.188.6.654.6,1.032v.233c0,.377-.267.843-.6,1.031l-24.042,13.879c-.333.2-.866.2-1.199,0Z" fill="#f5f5f5"/>
+<path d="M206.754,273.626v1.42c.222,0,.433-.044.599-.144l12.021-6.934l12.021-6.934c.333-.188.6-.654.6-1.031v-.233c0-.189-.067-.4-.178-.588l-25.063,14.444Z" opacity=".15"/>
+<path d="M189.072,263.42c-.111.189-.177.399-.177.588v.233c0,.377.266.843.599,1.032l16.65,9.607c.166.1.377.144.599.144v-1.42L189.072,263.42Z" opacity=".1"/>
+<path d="M223.537,356.134l-10.024-5.78c-.333-.189-.599-.655-.599-1.032v-.233c0-.377.266-.843.599-1.032l24.043-13.878c.333-.189.865-.189,1.198,0l10.024,5.78c.333.188.599.654.599,1.031v.233c0,.378-.266.844-.599,1.032l-24.043,13.879c-.333.189-.877.189-1.198,0Z" fill="#f5f5f5"/>
+<path d="M213.092,348.49c-.111.189-.178.4-.178.588v.233c0,.377.266.843.599,1.032l10.024,5.78c.166.1.377.144.599.144v-1.42l-11.044-6.357Z" opacity=".1"/>
+<path d="M224.137,354.858v1.42c.211,0,.433-.044.599-.144l12.021-6.934l12.021-6.934c.333-.188.6-.654.6-1.031v-.233c0-.189-.067-.4-.178-.588l-25.063,14.444Z" opacity=".15"/>
+<path d="M219.187,335.82l-10.023-5.78c-.333-.188-.6-.654-.6-1.031v-.233c0-.378.267-.843.6-1.032l24.042-13.879c.333-.189.866-.189,1.199,0l10.023,5.78c.333.189.599.655.599,1.032v.233c0,.377-.266.843-.599,1.032L220.386,335.82c-.333.189-.866.189-1.199,0Z" fill="#f5f5f5"/>
+<path d="M208.742,328.177c-.111.188-.178.399-.178.588v.233c0,.377.267.843.6,1.032l10.023,5.78c.166.099.377.144.599.144v-1.42l-11.044-6.357Z" opacity=".1"/>
+<path d="M219.787,334.545v1.42c.211,0,.433-.045.6-.144l12.021-6.934l12.021-6.934c.333-.189.599-.655.599-1.032v-.233c0-.189-.067-.399-.178-.588l-25.063,14.445Z" opacity=".15"/>
+<path d="M214.845,315.518l-10.023-5.78c-.333-.189-.599-.655-.599-1.032v-.233c0-.377.266-.843.599-1.032l24.042-13.879c.333-.188.866-.188,1.199,0l10.023,5.78c.333.189.599.655.599,1.032v.233c0,.377-.266.843-.599,1.032l-24.042,13.879c-.333.188-.866.188-1.199,0Z" fill="#f5f5f5"/>
+<path d="M204.4,307.863c-.111.188-.177.399-.177.588v.233c0,.377.266.843.599,1.032l5.006,2.895l5.006,2.896c.167.1.377.144.599.144v-1.42L204.4,307.863Z" opacity=".1"/>
+<path d="M215.445,314.242v1.42c.211,0,.433-.044.6-.144l12.021-6.934l12.021-6.934c.333-.188.599-.654.599-1.032v-.233c0-.188-.066-.399-.177-.588l-25.064,14.445Z" opacity=".15"/>
+<path d="m240.38 304.8-0.844-8.853-7.514 0.444s2.553 9.696 2.974 10.594c1.31 0.178 5.384-2.185 5.384-2.185z" fill="#ffa8a7"/>
+<path d="M242.718,307.863c.056.322.034.666.012.987-.078,1.143-.145,2.297-.222,3.439-.034.466-.067.899-.167,1.354-.111.51-.033,1.109-.044,1.631-.011.566-.011,1.142-.011,1.708c0,.222-.045.511.011.732.066.233-3.586,2.386-5.062,3.218-.089.044-.166.089-.266.133-1.343.544-2.409-.533-2.409-.533-1.077-2.751.944-4.515.944-4.515s.188.011.133-1.442c-.011-1.032-.033-2.075-.144-3.107-.089-.754-.245-1.519-.389-2.263-.144-.787-.211-1.464-.433-2.518-.055-.266-.166-.544-.055-.799.077-.166.222-.299.366-.41c1.41-1.099,2.975-1.764,4.773-1.809.2-.011.422,0,.566.133.133.111.178.289.222.444.1.377.155.899.366,1.232.156.255.444.51.666.699.422.388.921.876,1.088,1.442.022.089.044.166.055.244Z" fill="#bae7ff"/>
+<path d="M243.44,308.229c.688.255.533,2.13.122,3.938-.411,1.809-.633,2.441-.4,3.939.233,1.497.367,2.163-.233,2.729-.599.554-5.439,2.884-5.439,2.884s.933-2.318,1.021-5.647c.089-3.328.289-5.469,1.81-7c1.52-1.531,3.119-.843,3.119-.843Z" fill="#263238"/>
+<path d="M231.263,318.835c0,0,1.909,1.498,4.084,1.72c2.176.222,2.276-.611,2.476-3.195.199-2.574.244-6.136,1.232-7.711.999-1.575,2.686-2.296,3.363-2.141.133-.078.81.41,1.032.71c0,0-1.487-.166-2.83,1.176s-1.554,4.138-1.587,6.69c-.034,2.54-.111,5.491-2.132,5.824-2.02.333-4.184-.51-5.538-1.608-.789-.633-.1-1.465-.1-1.465Z" fill="#37474f"/>
+<path d="M235.503,316.017c-.177.233-.333.466-.466.699-.644,1.131-.71,2.318-.388,3.727-2.598-.199-3.375-1.608-3.375-1.608s-.155-1.287,1.321-2.252c.189-.122.377-.222.555-.3.011,0,.022-.011.022-.011c1.243-.544,2.331-.255,2.331-.255Z" fill="#91d5ff"/>
+<path d="M235.646,315.074c0,0-.267.177-.3.477-.022.288.1.965.755,1.331.277.155.511.089.067-.444-.178-.21-.322-.366-.4-.61-.122-.355-.122-.754-.122-.754Z" fill="#263238"/>
+<path d="M235.602,313.243c0,0-.199.2-.199.433-.012.233.432,1.187.91,1.387.477.21.222-.278-.011-.511-.122-.133-.356-.488-.5-.787-.133-.256-.2-.522-.2-.522Z" fill="#263238"/>
+<path d="M235.458,311.269c0,0-.178.188-.111.454.044.2.855.766,1.154.81.211.034.378-.122,0-.377-.188-.122-.499-.299-.71-.488-.222-.189-.333-.399-.333-.399Z" fill="#263238"/>
+<path d="M240.087,299.332c0,0-3.752-.5-6.971,1.841c0,0-.688-1.864-4.118-14.012-1.265-4.493-2.098-8.298-2.852-11.172-.844-3.206-1.144-4.482-1.321-6.756-.6-7.699-.788-30.165-1.11-33.06c0,0,15.984-4.882,15.995-4.849.754,3.473,1.354,7.134-.023,13.835-1.332,9.385-2.508,19.659-2.941,24.718c0,0,1.443,2.984,2.142,7.788.433,2.973,1.199,21.667,1.199,21.667Z" fill="#096dd9"/>
+<path d="M205.645,307.03c-.299-.055-.144,1.01-.066,1.398.078.389.666,1.398,2.819,2.031c2.154.643,4.129.244,5.506.565c1.265.289,3.685,1.831,4.961,2.153c1.676.432,3.652.099,4.585-.411.355-.2,1.098-.721,1.121-1.076.022-.422.055-.888-.045-.888l-18.881-3.772Z" fill="#37474f"/>
+<path d="M224.525,310.803c-.444.654-1.365,1.153-2.12,1.386-1.21.378-2.486.378-3.718.045-.722-.2-1.554-.633-2.209-.999-.777-.421-1.587-.632-2.431-.887-1.077-.322-3.152-.333-4.273-.455s-1.732-.333-2.642-.999c-.688-.51-.777-1.597-.81-2.474-.011-.188-.011-.466.066-.632.1-.2.233-.233.433-.344.444-.266.833-.621,1.299-.854.633-.322,3.13-1.087,4.151-.732l.544.122c.422.088,2.065.266,2.497.277.433.011.888-.078,1.233-.333.288-.222.499-.566.821-.732.355-.178.788-.122,1.177-.011.721.188,1.309.299,2.031.033.777-.288,1.465-.987,2.231-1.309.211-.089.51-.1.744.144.199.211.199.588.177.877-.066,1.009.156,2.008.267,3.017.166,1.376.987,2.874.532,4.86Z" fill="#bae7ff"/>
+<path d="M213.704,303.88c-.455-.056-1.021.299-1.277.677-.155.233-.255.399-.355.665-.111.322-.189.666-.111.999.022.088.111.144.189.133.077-.011.155-.089.166-.167.089-.466.178-.887.422-1.287.111-.177.189-.332.355-.466.156-.122.344-.221.544-.277.056-.011.144-.044.255-.033.045,0,.134.011.134.011c0-.1-.078-.155-.111-.166-.067-.067-.111-.078-.211-.089Z" fill="#263238"/>
+<path d="M215.103,304.08c-.233-.045-.488,0-.699.133-.244.155-.344.388-.466.643-.145.3-.256.61-.289.943-.022.167-.078.832.244.755.078-.023.133-.089.167-.156.033-.077.044-.155.055-.233.045-.344.122-.676.255-.998.145-.366.422-.832.844-.899.044-.011.1-.011.144-.011.011-.078-.077-.122-.144-.144-.044-.011-.078-.022-.111-.033Z" fill="#263238"/>
+<path d="M216.324,303.758c-.177.044-.344.122-.466.255-.111.122-.244.344-.3.511-.133.355-.222.621-.244,1.042-.022.267,0,.544.122.788.045.1.145.2.245.155.111-.044.111-.21.133-.299.033-.178.033-.366.055-.544.067-.665.344-1.287.777-1.786.022-.022.056-.078.056-.078-.011-.044-.1-.066-.145-.066-.077-.011-.155,0-.233.022Z" fill="#263238"/>
+<path d="M212.271,303.847c-.51-.089-1.72.443-2.508,1.941s-.888,3.972-.888,3.972-1.343-.078-2.609-1.509c-.333-.377-.566-.843-.655-1.342.034-1.065.4-1.809.911-2.252.899-.777,1.809-1.276,4.129-1.232c2.086.033,2.153.544,2.153.544l-.533-.122Z" fill="#91d5ff"/>
+<path d="M222.816,296.402c0,0,.266,4.726.455,5.991.1.71-.411,1.454-2.531,2.086-1.487.444-3.063-.011-3.085-.422l-1.01-4.493l6.171-3.162Z" fill="#ffa8a7"/>
+<path d="M240,232.378l-25.707,2.663c0,0-5.594,33.637-5.728,37.232-.1,2.607,7.781,27.89,7.781,27.89s4.884.666,6.927-1.753c-.222-3.394-.589-12.004-.822-15.099-.388-4.981-.766-6.9-2.175-11.826c0,0,6.893-17.165,9.224-24.986c11.566-4.371,10.5-14.121,10.5-14.121Z" fill="#0050b3"/>
+<path d="M240,232.378l-25.707,2.663c0,0-5.594,33.637-5.728,37.232-.1,2.607,7.781,27.89,7.781,27.89s4.884.666,6.927-1.753c-.222-3.394-.589-12.004-.822-15.099-.388-4.981-.766-6.9-2.175-11.826c0,0,5.994-17.418,8.325-25.239C240.167,241.875,240,232.378,240,232.378Z" fill="#096dd9"/>
+<g transform="translate(2e-6)">
+<path d="m221.23 191.57 1.065 9.175 9.835-1.431-1.044-9.896-9.856 2.152z" fill="#ffa8a7"/>
+<path d="m214.95 179.68s-2.264 4.36-2.009 4.682 1.909 0.843 1.909 0.843l0.1-5.525z" fill="#f28f8f"/>
+<path d="M215.979,182.455c-1.465,0-2.653-1.154-2.653-2.574s1.188-2.574,2.653-2.574s2.653,1.154,2.653,2.574-1.188,2.574-2.653,2.574Zm0-4.582c-1.143,0-2.065.899-2.065,2.008s.922,2.008,2.065,2.008s2.065-.899,2.065-2.008-.933-2.008-2.065-2.008Z" fill="#263238"/>
+<path d="M221.129,171.261c-4.517.921-5.816,2.851-6.238,9.807-.444,7.267.111,8.82,1.088,9.796.666.666,3.563.977,5.306.899c6.316-.299,8.724-2.319,11.2-5.98c2.897-4.304,3.662-10.129.555-12.514-4.385-3.361-10.079-2.385-11.911-2.008Z" fill="#ffa8a7"/>
+<path d="M215.979,190.864c.666.666,3.563.977,5.305.899l-.133-1.021c0,0-2.719.322-5.172.122Z" fill="#f28f8f"/>
+<path d="M213.57,179.337l8.025,1.01-.321.544-7.704-.966v-.588Z" fill="#263238"/>
+<path d="M214.979,173.48c.211.133.433.233.678.299-.189.855.088,1.809.71,2.43s1.565.899,2.431.71c-.189.499-.133,1.076.133,1.531s.755.777,1.276.854c-.144-.022-.022,1.221.012,1.331.133.5.321.722.788.921c0,0,.71-2.684,3.052-2.352c2.353.344,2.664,3.24,1.188,5.004-1.477,1.753-2.842,1.098-2.864,1.087.133.067.189.921.233,1.087.144.499.344,1.454.6,1.92.51.943.643,1.653,2.375,2.418.843.377,4.728-.066,5.539-1.009c1.376-3.462,3.318-4.749,4.861-7.822.7-1.398,1.499-3.029,1.577-4.615.066-1.376.099-2.851-1.732-4.227.533-.621.61-1.586.178-2.296-.422-.699-1.321-1.088-2.12-.91.233-1.243-.4-2.596-1.488-3.229-.688-.399-1.532-.499-2.298-.31-.222.055-1.942.754-1.886,1.043-.234-1.276-1.421-2.297-2.72-2.352-1.299-.045-2.553.898-2.875,2.152-.644-.987-1.687-1.72-2.841-1.986-.999-.233-2.131-.1-2.875.599s-.855,2.23-.311,3.251c-.777-.067-1.532.144-2.076.81-.466.577-.71,1.264-.599,2.008.1.787.4,1.242,1.054,1.653Z" fill="#263238"/>
+<path d="M220.952,183.098l.078-3.039c-.866-.023-1.588.643-1.61,1.475-.011.843.666,1.542,1.532,1.564Z" fill="#263238"/>
+</g>
+<path d="M234.947,194.547c2.742-.288,5.239.244,6.705,2.896c1.465,2.64,3.307,12.27,4.029,16.63.677,4.105.988,4.859-1.232,6.301-1.465.966-7.57,4.127-7.57,4.127l-1.932-29.954Z" fill="#ffa8a7"/>
+<path d="M233.783,194.37c2.997-.344,5.328-.222,6.46.81c1.132,1.031,2.331,2.085,3.142,6.079.81,3.994,1.875,9.697,1.875,9.697s-2.22,4.67-10.311,4.016l-1.166-20.602Z" fill="#91d5ff"/>
+<path d="M233.783,194.37c2.997-.344,5.328-.222,6.46.81c1.132,1.031,2.331,2.085,3.142,6.079.81,3.994,1.875,9.697,1.875,9.697s-2.22,4.67-10.311,4.016l-1.166-20.602Z" fill="#e6f7ff" opacity=".3"/>
+<path d="M239.776,199.007c-.455-2.474-3.707-5.081-6.759-4.582c0,0-.722.056-1.388.178-.344,1.486-6.871,3.162-9.845,1.808-1.177.311-4.218.899-5.195,1.22-2.797.932-3.952,3.684-4.396,12.814c0,0,1.732,20.868,1.743,26.715c4.729,1.353,10.778,1.586,16.583.288c8.347-1.863,9.479-5.07,9.479-5.07l-.799-9.585c-.011-.011,1.599-18.183.577-23.786Z" fill="#f5f5f5"/>
+<g transform="translate(1e-6 5e-6)">
+<g transform="translate(1e-6)">
+<path d="M177.906,186.382l1.998,11.727c.045.233.233.432.555.554.666.244,1.643.078,2.176-.377.266-.222.388-.477.344-.71l-1.998-11.726-3.075.532Z" fill="#455a64"/>
+<path d="M181.514,188.878l-2.786,2.297-.822-4.793l3.086-.521.522,3.017Z" opacity=".15"/>
+<path d="M180.936,176.187l.41,2.385l1.865-1.542.844,4.903c.255,1.476-.478,3.451-1.632,4.405l-3.274,2.718c-.544.444-1.088.599-1.532.466-.045-.011-1.998-.721-2.42-.899-.433-.189-.755-.643-.877-1.353l-.843-4.904l7.459-6.179Z" fill="#37474f"/>
+<path d="M179.161,189.056l3.274-2.718c1.155-.954,1.887-2.929,1.632-4.416l-.844-4.903-7.448,6.179.844,4.904c.244,1.497,1.387,1.919,2.542.954Z" fill="#455a64"/>
+<path d="m175.76 183.21 7.448-6.179-1.221-7.156-7.459 6.179 1.232 7.156z" fill="#f0f0f0"/>
+<path d="m175.76 183.21-1.232-7.155-2.264-0.844 1.221 7.156 2.275 0.843z" fill="#ebebeb"/>
+<path d="M176.131,185.339l7.448-6.179.166.976-7.437,6.224-.177-1.021Z" fill="#fafafa"/>
+<path d="M176.131,185.339l-2.276-.843.178,1.032l2.276.832-.178-1.021Z" fill="#e6e6e6"/>
+<path d="m172.65 177.4s0.987 1.586 2.375 1.442l-0.477-2.784-2.265-0.844 0.367 2.186z" fill="#91d5ff"/>
+<path d="m172.65 177.4s0.987 1.586 2.375 1.442l-0.477-2.784-2.265-0.844 0.367 2.186z" fill="#096dd9" opacity=".5"/>
+<path d="M175.01,178.849c0,0,1.587.41,2.753-.81.865-.899.754-3.528,2.641-3.894c1.332-.266,2.476.987,2.476.987l-.899-5.247-7.46,6.179.489,2.785Z" fill="#1890ff"/>
+<path d="m181.99 169.87-2.275-0.843-7.448 6.179 2.264 0.843 7.459-6.179z" fill="#91d5ff"/>
+<path d="m181.99 169.87-2.275-0.843-7.448 6.179 2.264 0.843 7.459-6.179z" fill="#69c0ff" opacity=".7"/>
+</g>
+<g transform="translate(0 1e-6)">
+<path d="M181.957,191.497c1.121.066,2.12,1.087,2.153,1.863.034.777-1.631,1.332-1.631,1.332l-.522-3.195Z" fill="#f28f8f"/>
+<path d="M216.81,197.565c-1.887.4-2.109-.144-7.17,2.918-4.706,2.851-12.898,7.555-15.962,9.308-3.274-2.995-6.77-7.633-8.047-9.874-.344-.599-.477-1.52-.411-2.208.178-1.919-.244-2.096-.31-3.827-.045-1.342.333-2.075.022-2.208-.4-.166-1.321-.133-1.865.921-.277.532-.366,1.021-.588,2.097c0,0-2.853,2.54-3.153-.011l-.555-3.218c-.865,0-2.475.278-2.886,2.219-.355,1.687-.588,5.37.666,7.733.6,1.131,3.142,2.086,4.54,3.006c1.565,1.032,6.327,11.228,9.246,13.191c1.799,1.176,2.964.966,5.284.178c5.206-1.764,17.926-8.121,17.926-8.121s5.317-3.162,3.263-12.104Z" fill="#ffa8a7"/>
+<path d="m217.29 197.44c-4.118-0.089-6.438 2.086-10.945 4.693-4.795 2.762-6.482 3.739-6.482 3.739s-1.265 6.257 3.53 9.108l10.855-5.048c3.042-1.964 5.184-7.422 3.042-12.492z" fill="#91d5ff"/>
+<path d="m217.29 197.44c-4.118-0.089-6.438 2.086-10.945 4.693-4.795 2.762-6.482 3.739-6.482 3.739s-1.265 6.257 3.53 9.108l10.855-5.048c3.042-1.964 5.184-7.422 3.042-12.492z" fill="#e6f7ff" opacity=".3"/>
+</g>
+</g>
+<path d="M199.351,252.781l-30.736,83.583-.011.022-.066.189c-.089.178-.256.333-.5.488-.777.444-2.031.444-2.808,0-.333-.2-.522-.444-.577-.688-.011-.077-.011-.155,0-.233.011-.199.044-.388.122-.577l30.846-84.149c.378-1.031,1.51-1.553,2.553-1.176c1.033.366,1.554,1.509,1.177,2.541Z" fill="#d9d9d9"/>
+<path d="M198.662,237.515c-.91.533-1.543,1.942-1.321,2.963l27.317,127.704c.022.1.044.211.044.311.012.067.012.144,0,.222-.044.244-.233.499-.577.699-.777.444-2.031.444-2.808,0-.289-.167-.466-.366-.544-.577c0-.011,0-.011-.011-.022l-.033-.167L193.445,241.31c-.577-2.685.833-5.869,3.219-7.234" fill="#d9d9d9"/>
+<path d="M157.75,345.983h-28.859l1.298,20.502c-.022,1.908,1.221,3.816,3.719,5.303c4.995,2.962,13.153,3.051,18.226.2c2.553-1.443,3.829-3.351,3.829-5.27l1.787-20.735Z" fill="#bae7ff"/>
+<path d="M133.163,339.604c-5.672,3.195-5.727,8.465-.122,11.782c5.606,3.317,14.741,3.417,20.424.222c5.672-3.196,5.727-8.465.122-11.782-5.617-3.318-14.752-3.417-20.424-.222Z" fill="#455a64"/>
+<path d="M156.495,345.739c0,.377-.078.754-.2,1.131-.444,1.354-1.621,2.608-3.452,3.639-2.564,1.432-5.972,2.197-9.612,2.164-3.63-.045-7.027-.877-9.557-2.374-1.776-1.054-2.942-2.319-3.341-3.639-.145-.389-.2-.799-.2-1.21.033-1.764,1.321-3.45,3.663-4.759c2.542-1.442,5.971-2.219,9.601-2.163c3.641.033,7.037.876,9.568,2.374c2.287,1.375,3.552,3.084,3.53,4.837Z" fill="#e6f7ff"/>
+<path d="M143.375,348.024c-3.629-.033-7.048.743-9.601,2.186-.045.022-.089.055-.133.077.011.011.022.011.033.022c2.531,1.487,5.927,2.319,9.557,2.375c3.641.033,7.048-.744,9.612-2.164.045-.022.089-.055.133-.089-.011-.011-.022-.011-.033-.022-2.531-1.486-5.916-2.33-9.568-2.385Z" fill="#1890ff"/>
+<path d="M122.875,366.524c-3.629-.033-1.322,1.034-3.875,2.476c6.226,1.291,0-1.5,0-1.5c1.259-.629-4-1.264-2,1.21s2.101,2.418,5.731,2.474c3.641.033.705.236,3.269-1.184v-1.29-.71c-2.531-1.487.527-1.42-3.125-1.476Z" fill="#1890ff"/>
+<path d="M144.308,352.662c-.977-.211-1.876-.544-2.631-.988-.944-.566-1.565-1.242-1.787-1.941-.078-.211-.111-.433-.111-.644c0-.288.078-.566.211-.843-2.331.322-4.485.976-6.216,1.964-.045.022-.089.055-.133.077.011.012.022.012.033.023c2.531,1.486,5.927,2.318,9.557,2.374.355,0,.721-.011,1.077-.022Z" opacity=".15"/>
+<path d="M148.792,353.693c.566-.322,1.021-.055,1.01.599-.011.644-.466,1.431-1.032,1.753s-1.021.056-1.01-.599.466-1.431,1.032-1.753Z" fill="#263238"/>
+<path d="M129.223,351.718c-1.244,3.184-2.209,7.522.577,9.586.155.111.3.21.444.31l-.011,1.343c-.367-.222-.744-.477-1.11-.744-4.14-3.062-1.61-9.774-.022-13.035l.122,2.54Z" fill="#455a64"/>
+<path d="M149.269,355.135c-.155.322-4.14,7.933-10.678,9.464-.755.177-1.498.266-2.253.266-2.031,0-4.063-.633-6.094-1.908l.011-1.343c2.709,1.875,5.428,2.519,8.092,1.908c6.038-1.42,9.912-8.831,9.934-8.897.145-.277.489-.377.755-.233.278.122.389.455.233.743Z" fill="#455a64"/>
+<path d="M142.5,357.5c.931-1.392.206-4.897-1.5-5-1.752-.105-3.064,3.562-2.103,5c.846,1.265,2.758,1.265,3.603,0Z" fill="#1890ff"/>
+<path d="M141.42,357.616c.93-1.392,1.375-4.423-.5-5-1.5-.461-2.984,3.446-2.023,4.884.845,1.265,1.677,1.381,2.523.116Z" fill="#147bd9"/>
+<path d="M292.228,454.049l-44.963-26.25c-1.02-.6-1.02-1.562,0-2.163L354.983,362.95c1.02-.601,2.689-.601,3.709,0l45.043,26.21c1.02.6,1.02,1.562,0,2.163L295.924,454.049c-1.007.601-2.663.601-3.696,0Z" fill="#fafafa"/>
+<path d="M350.303,376.467l-5.134,2.965c-.519.292-1.344.292-1.862,0l-1.636-.944c-.519-.293-.838-1.011-.705-1.596l17.038-80.613c.119-.585.638-1.29,1.157-1.596l5.134-2.964c.519-.293,1.343-.293,1.862,0l1.636.944c.519.292.838,1.01.705,1.595L351.46,374.872c-.133.585-.652,1.303-1.157,1.595Z" fill="#f0f0f0"/>
+<path d="M350.303,376.467l-5.134,2.965c-.519.292-.838.066-.705-.519L361.502,298.3c.12-.585.638-1.29,1.157-1.596l5.134-2.964c.519-.293.838-.067.705.518L351.46,374.872c-.133.585-.652,1.303-1.157,1.595Z" fill="#d9d9d9"/>
+<path d="m347.57 371.2 1.517-7.192 3.498-2.007 32.373 18.678 1.517 8.947-3.485 2.007-35.42-20.433z" fill="#d9d9d9"/>
+<path d="m382.99 391.64-35.42-20.433 1.517-7.192 32.373 18.678 1.53 8.947z" fill="#f0f0f0"/>
+<path d="M388.756,398.655l-5.134,2.965c-.519.292-1.344.292-1.862,0l-1.636-.944c-.519-.293-1.011-1.011-1.117-1.596L361.889,298.313c-.093-.585.239-1.302.758-1.595l5.134-2.964c.519-.293,1.343-.293,1.862,0l1.636.943c.519.293,1.011,1.011,1.117,1.596L389.514,397.06c.093.585-.239,1.303-.758,1.595Z" fill="#37474f"/>
+<path d="M361.902,298.3l.652,3.815l16.479,96.965c.107.585.599,1.303,1.104,1.596l1.636.944c.519.292,1.357.292,1.862,0l5.121-2.965c.519-.306.851-1.01.758-1.595L372.449,296.638l-.066-.345c-.106-.585-.599-1.303-1.104-1.596l-1.636-.943c-.519-.293-1.357-.293-1.862,0l-5.134,2.964c-.505.293-.851.997-.745,1.582Z" fill="#d9d9d9"/>
+<path d="M372.384,296.292L389.502,397.06c.093.584-.239,1.302-.758,1.595l-5.134,2.964c-.519.293-1.011.067-1.117-.518L365.375,300.32c-.093-.585.239-1.302.758-1.595l5.134-2.964c.519-.293,1.024-.054,1.117.531Z" fill="#f0f0f0"/>
+<path d="M269.867,422.876l-5.134,2.964c-.519.293-1.343.293-1.862,0l-1.636-.944c-.519-.292-.838-1.01-.705-1.595l17.038-80.614c.12-.585.639-1.289,1.157-1.595l5.134-2.964c.519-.293,1.344-.293,1.862,0l1.636.943c.519.293.838,1.011.705,1.596L271.024,421.28c-.119.585-.638,1.303-1.157,1.596Z" fill="#f0f0f0"/>
+<path d="M269.867,422.876l-5.134,2.964c-.519.293-.838.067-.705-.518l17.038-80.614c.12-.585.639-1.29,1.157-1.595l5.134-2.965c.519-.292.838-.066.705.519L271.024,421.28c-.119.585-.638,1.303-1.157,1.596Z" fill="#d9d9d9"/>
+<path d="m267.05 417.73 1.516-7.192 3.498-2.008 32.374 18.678 1.516 8.947-3.485 2.021-35.419-20.446z" fill="#d9d9d9"/>
+<path d="m302.47 438.18-35.419-20.445 1.516-7.192 32.387 18.691 1.516 8.946z" fill="#f0f0f0"/>
+<path d="M308.33,445.077l-5.134,2.964c-.519.293-1.343.293-1.862,0l-1.636-.943c-.519-.293-1.011-1.011-1.117-1.596L281.463,344.735c-.093-.585.239-1.303.758-1.595l5.134-2.965c.519-.292,1.343-.292,1.862,0l1.636.944c.519.293,1.011,1.011,1.117,1.596l17.118,100.767c.093.571-.239,1.289-.758,1.595Z" fill="#37474f"/>
+<path d="M281.476,344.722l.652,3.815l16.479,96.965c.107.585.599,1.303,1.104,1.595l1.636.944c.519.293,1.357.293,1.862,0l5.121-2.964c.519-.306.851-1.011.758-1.596L292.024,343.047l-.067-.346c-.106-.585-.598-1.303-1.104-1.595l-1.636-.944c-.518-.293-1.356-.293-1.862,0l-5.134,2.964c-.505.293-.851,1.011-.745,1.596Z" fill="#d9d9d9"/>
+<path d="M291.959,342.701l17.117,100.767c.094.585-.239,1.303-.758,1.595l-5.134,2.965c-.518.292-1.011.066-1.117-.519L284.949,346.742c-.093-.585.24-1.303.758-1.595l5.134-2.965c.519-.306,1.024-.066,1.118.519Z" fill="#f0f0f0"/>
+<path d="m277.79 357.78 108.39-62.535-1.769-1.023-108.37 62.547 1.756 1.011z" fill="#ff7875"/>
+<path d="m277.79 357.78 108.39-62.535-1.769-1.023-108.37 62.547 1.756 1.011z" fill="#fff" opacity=".4"/>
+<path d="m277.79 357.77 5.267 31.28 108.39-62.534-5.267-31.28-108.39 62.534z" fill="#ff7875"/>
+<path d="m276.03 356.76 5.254 31.281 1.769 1.01-5.267-31.28-1.756-1.011z" fill="#d9d9d9"/>
+<path d="m277.12 363.28 2.913 17.309 1.756 1.01-2.9-17.295-1.769-1.024z" fill="#cf1322"/>
+<path d="m277.12 363.28 2.913 17.309 1.756 1.01-2.9-17.295" opacity=".2"/>
+<path d="m287.74 352.04-4.682 37.01-5.267-31.28 9.949-5.73z" fill="#ebebeb"/>
+<path d="m381.49 332.25 4.682-37.01 5.267 31.281-9.949 5.729z" fill="#ebebeb"/>
+<path d="m301.25 378.55 4.682-37.01-10.76 6.195-4.682 37.024 10.76-6.209z" fill="#ebebeb"/>
+<path d="m319.45 368.05 4.681-37.01-10.76 6.194-4.681 37.024 10.76-6.208z" fill="#ebebeb"/>
+<path d="m337.66 357.55 4.681-37.01-10.76 6.208-4.682 37.01 10.761-6.208z" fill="#ebebeb"/>
+<path d="m355.85 347.06 4.682-37.023-10.76 6.208-4.682 37.01 10.76-6.195z" fill="#ebebeb"/>
+<path d="m374.06 336.56 4.682-37.024-10.76 6.208-4.682 37.01 10.76-6.194z" fill="#ebebeb"/>
+<path d="m295.17 347.74-1.769-1.01 10.774-6.208 1.755 1.023-10.76 6.195z" fill="#fafafa"/>
+<path d="m313.37 337.24-1.756-1.01 10.76-6.208 1.756 1.023-10.76 6.195z" fill="#fafafa"/>
+<path d="m331.58 326.75-1.769-1.023 10.773-6.208 1.756 1.023-10.76 6.208z" fill="#fafafa"/>
+<path d="m349.77 316.24-1.755-1.024 10.76-6.208 1.755 1.024-10.76 6.208z" fill="#fafafa"/>
+<path d="m367.98 305.74-1.769-1.024 10.773-6.208 1.756 1.024-10.76 6.208z" fill="#fafafa"/>
+<path d="m277.79 357.77-1.756-1.01 9.936-5.743 1.769 1.024-9.949 5.729z" fill="#fafafa"/>
+<path d="m278.9 364.3 2.899 17.296 108.39-62.548-2.899-17.295-108.39 62.547z" fill="#cf1322"/>
+<path d="M284.171,375.797c-.626-.307-1.049-1.003-1.254-2.09l-1.419-7.497c-.063-.345.143-.641.603-.916l.488-.276c.46-.262.729-.227.792.117l1.387,7.339c.079.437.241.74.484.908s.511.162.832-.017c.306-.179.527-.449.66-.837.133-.389.167-.802.074-1.225l-1.387-7.339c-.063-.344.128-.641.603-.916l.474-.262c.46-.262.729-.227.792.117l1.419,7.498c.205,1.086.111,2.072-.28,2.97-.391.899-1.054,1.604-1.946,2.113-.935.511-1.695.619-2.322.313Z" fill="#fff"/>
+<path d="M290.483,372.52l-1.955-10.319c-.063-.344.129-.641.603-.916l.307-.179c.153-.096.293-.139.406-.128.099-.002.213.076.315.22l3.155,4.019c.159.223.378.565.655,1.024l.041-.054c-.165-.515-.286-.925-.335-1.216l-.976-5.14c-.064-.344.128-.641.602-.916l.293-.165c.46-.262.729-.228.792.117l1.955,10.319c.063.344-.143.641-.603.916l-.237.138c-.153.096-.293.139-.406.141s-.227-.075-.315-.22l-3.341-4.175c-.101-.118-.276-.407-.525-.841l-.054.081c.164.462.255.806.302,1.045l1.009,5.298c.063.345-.143.655-.603.916l-.293.166c-.46.248-.729.214-.792-.131Z" fill="#fff"/>
+<path d="M297.826,368.704c-.086-.065-.16-.21-.206-.435l-1.892-10.001c-.047-.225-.036-.411.017-.559.054-.147.15-.255.303-.351l2.288-1.309c1.046-.593,1.892-.57,2.569.095.676.651,1.181,1.931,1.542,3.812.362,1.894.379,3.45.065,4.666s-1.002,2.121-2.034,2.713l-2.287,1.308c-.153.11-.28.112-.365.061Zm2.188-3.421c.419-.248.678-.678.764-1.318s.011-1.596-.241-2.894c-.237-1.285-.508-2.144-.799-2.577-.29-.433-.645-.519-1.063-.271l-.767.441l1.339,7.06.767-.441Z" fill="#fff"/>
+<path d="M304.758,364.736c-.086-.064-.159-.209-.206-.434l-1.892-10.001c-.046-.226-.036-.412.017-.559.054-.148.151-.256.304-.352l3.556-2.025c.126-.069.225-.058.297.047.087.091.147.29.195.568l.095.503c.048.279.066.504.027.665-.025.16-.107.268-.233.337l-2.12,1.212.441,2.331l1.883-1.074c.112-.069.225-.058.297.047.073.092.147.289.195.568l.095.503c.048.278.066.504.027.664-.039.161-.107.282-.233.351l-1.883,1.074.49,2.61l2.134-1.213c.125-.068.224-.057.297.048.072.091.147.289.194.568l.095.503c.048.278.066.504.041.664s-.093.268-.219.337l-3.556,2.025c-.111.082-.238.098-.338.033Z" fill="#fff"/>
+<path d="M310.048,361.36l-1.923-10.16c-.047-.225-.036-.411.017-.558.054-.148.164-.27.331-.366l2.009-1.144c.739-.427,1.372-.519,1.913-.277.54.229.921.926,1.141,2.052.236,1.258.033,2.379-.624,3.376l.015.066c.198.023.398.152.6.374s.376.471.509.774l1.295,2.687.074.171c.062.292-.172.575-.66.864l-.419.235c-.418.247-.7.24-.804-.024l-1.225-2.702c-.116-.197-.232-.314-.345-.352-.114-.037-.268-.008-.464.103l-.292.165.693,3.643c.063.344-.143.654-.631.93l-.404.234c-.46.275-.729.254-.806-.091Zm1.403-7.447c.182-.097.305-.298.383-.606.079-.307.071-.679-.008-1.143-.08-.451-.212-.741-.37-.884s-.342-.152-.551-.042l-.642.359.505,2.689.683-.373Z" fill="#fff"/>
+<path d="M318.291,355.785c-.69-.638-1.224-1.957-1.603-3.971-.363-1.934-.366-3.529-.024-4.772.356-1.257,1.099-2.19,2.214-2.837.377-.22.741-.36,1.078-.42.267-.045.44.111.503.482.079.41.101.809.052,1.182-.049.387-.157.588-.34.605-.282.046-.548.131-.799.282-.474.275-.788.774-.901,1.494-.126.734-.079,1.69.156,2.896.236,1.205.52,2.037.868,2.495.348.459.787.543,1.302.24.154-.083.279-.165.376-.26s.222-.217.388-.367c.027-.027.055-.054.097-.081.167-.097.31-.033.441.19.131.224.237.554.316.991.031.159.034.319.009.452-.025.147-.093.281-.231.43-.125.136-.291.299-.513.476-.208.177-.445.328-.682.466-1.115.673-2.018.665-2.707.027Z" fill="#fff"/>
+<path d="M321.946,348.851c-.725-3.841-.042-6.368,2.064-7.567c1.032-.592,1.893-.556,2.611.068s1.251,1.93,1.629,3.917c.378,1.973.382,3.582.026,4.826s-1.043,2.148-2.075,2.74c-2.106,1.199-3.529-.129-4.255-3.984Zm4.494,1.134c.135-.322.197-.762.185-1.346-.012-.585-.111-1.341-.286-2.295-.173-.927-.357-1.642-.55-2.13s-.396-.776-.61-.892c-.214-.115-.467-.084-.76.082-.293.165-.5.409-.649.717-.134.322-.21.776-.198,1.361.011.584.097,1.341.285,2.281.174.941.357,1.642.564,2.129.193.489.397.79.624.892.214.116.482.084.761-.081.293-.153.499-.396.634-.718Z" fill="#fff"/>
+<path d="M330.301,349.802l-1.954-10.319c-.063-.345.128-.641.602-.916l.307-.179c.153-.096.293-.139.406-.128.113-.002.214.076.315.22l3.155,4.019c.16.223.378.564.641,1.024l.041-.054c-.165-.515-.286-.925-.334-1.216l-.977-5.14c-.063-.344.128-.641.602-.916l.293-.165c.461-.262.729-.228.793.117l1.954,10.319c.063.344-.143.641-.603.916l-.222.138c-.154.096-.294.138-.407.141-.113.002-.227-.076-.314-.22l-3.342-4.175c-.101-.118-.276-.407-.524-.841l-.055.081c.164.462.256.806.303,1.044l1.008,5.299c.063.344-.128.654-.602.916l-.293.165c-.461.262-.73.214-.793-.13Z" fill="#fff"/>
+<path d="M338.162,345.736c-.408.062-.733.015-.962-.153-.144-.131-.232-.288-.264-.474-.062-.304-.055-.637.008-1.024s.157-.615.311-.697c.069-.042.182-.044.338-.007.156.023.283.047.354.046.353.046.648-.013.885-.151.251-.138.459-.354.609-.61.15-.269.2-.589.121-.986-.062-.292-.151-.503-.281-.66-.13-.143-.287-.247-.443-.297-.17-.049-.397-.098-.694-.132-.693-.119-1.234-.348-1.608-.713s-.64-.971-.812-1.845c-.175-.967-.094-1.86.257-2.664.35-.818.916-1.441,1.683-1.869.28-.152.574-.264.897-.323.323-.06.591-.065.79.01.17.05.272.208.319.433.048.278.068.597.033.97-.035.359-.115.587-.254.67-.056.041-.183.056-.366.073-.352.021-.619.079-.828.203-.321.179-.528.396-.608.65-.079.255-.103.494-.056.733.079.397.211.66.411.776s.483.203.88.262l.311.047c.637.107,1.121.35,1.453.702.331.353.582.933.739,1.741.111.609.123,1.22.023,1.834-.101.627-.315,1.203-.643,1.741-.327.539-.784.973-1.37,1.304-.419.208-.811.349-1.233.41Z" fill="#fff"/>
+<path d="M343.816,342.1l-1.639-8.69-1.339.758c-.126.069-.225.058-.298-.047-.086-.091-.146-.29-.194-.568l-.095-.503c-.048-.279-.066-.504-.027-.665.039-.16.107-.281.233-.35l4.574-2.604c.126-.069.239-.058.311.034.087.091.147.289.209.567l.095.504c.048.278.066.504.027.664s-.107.281-.247.351l-1.353.771l1.64,8.69c.063.344-.128.641-.602.916l-.489.276c-.474.275-.728.24-.806-.104Z" fill="#fff"/>
+<path d="M348.156,339.621l-1.923-10.16c-.047-.226-.037-.412.017-.559.053-.148.164-.269.345-.366l2.008-1.144c.739-.427,1.386-.519,1.927-.277.541.228.921.912,1.142,2.064.236,1.259.033,2.38-.624,3.377l.015.066c.198.023.398.152.6.374s.376.484.509.787l1.295,2.687.074.171c.062.292-.172.576-.66.865l-.418.247c-.433.248-.701.24-.805-.024l-1.224-2.701c-.117-.197-.232-.315-.346-.352-.113-.038-.268-.008-.463.102l-.293.166.693,3.642c.063.345-.142.655-.63.93l-.405.234c-.488.249-.771.215-.834-.129Zm1.389-7.434c.182-.097.304-.299.383-.619.078-.308.085-.68-.009-1.13-.093-.451-.212-.754-.37-.884-.158-.143-.356-.152-.551-.042l-.642.358.519,2.689.67-.372Z" fill="#fff"/>
+<path d="M355.007,335.403c-.627-.307-1.05-1.003-1.255-2.089l-1.418-7.498c-.063-.344.142-.654.602-.916l.488-.276c.461-.262.729-.227.793.117l1.387,7.339c.079.437.24.74.484.921.229.169.511.163.818-.016.306-.179.527-.449.66-.838.133-.388.168-.787.074-1.224l-1.387-7.339c-.063-.344.142-.641.602-.916l.461-.262c.46-.262.729-.227.792.117l1.419,7.498c.205,1.086.111,2.072-.28,2.971-.391.885-1.054,1.603-1.947,2.113-.893.496-1.666.604-2.293.298Z" fill="#fff"/>
+<path d="M361.763,331c-.689-.638-1.223-1.957-1.602-3.971-.363-1.934-.366-3.529-.024-4.773.355-1.257,1.099-2.189,2.214-2.836.377-.22.74-.36,1.078-.42.267-.045.439.111.503.482.079.41.101.809.052,1.182-.049.387-.158.588-.341.605-.281.046-.547.131-.798.282-.474.275-.789.774-.901,1.494-.127.734-.08,1.69.156,2.895.236,1.206.52,2.038.868,2.496.347.459.786.543,1.302.24.154-.083.279-.165.376-.26s.221-.217.387-.367c.028-.027.056-.054.098-.081.167-.097.309-.033.441.19.131.224.236.554.316.991.031.159.034.319.009.452-.026.147-.094.281-.232.43-.124.136-.29.298-.512.476-.222.177-.445.328-.682.465-1.129.674-2.032.666-2.708.028Z" fill="#fff"/>
+<path d="M367.999,328.31l-1.654-8.69-1.339.758c-.126.069-.225.058-.298-.047-.086-.091-.146-.29-.194-.568l-.095-.503c-.048-.279-.066-.504-.027-.665.025-.16.107-.281.233-.35l4.574-2.604c.126-.069.239-.058.311.034.087.091.147.289.195.568l.095.503c.047.278.066.504.027.664-.025.16-.107.282-.247.351l-1.353.771l1.654,8.69c.063.344-.142.641-.602.916l-.503.276c-.446.275-.714.24-.777-.104Z" fill="#fff"/>
+<path d="M372.309,325.843l-1.954-10.319c-.064-.358.127-.668.602-.93l.502-.289c.46-.262.715-.213.793.144l1.954,10.319c.063.358-.128.667-.588.929l-.502.289c-.475.263-.729.214-.807-.143Z" fill="#fff"/>
+<path d="M374.315,318.982c-.725-3.842-.042-6.368,2.064-7.567c1.018-.579,1.893-.556,2.611.068.704.624,1.252,1.929,1.63,3.916.377,1.974.381,3.583.025,4.826-.356,1.244-1.043,2.149-2.075,2.741-2.106,1.199-3.515-.13-4.255-3.984Zm4.508,1.133c.135-.321.197-.761.185-1.346s-.111-1.341-.285-2.295c-.174-.927-.357-1.641-.551-2.13-.193-.488-.396-.776-.61-.892-.214-.115-.467-.083-.76.082s-.499.409-.648.718c-.135.321-.211.775-.199,1.36s.097,1.341.271,2.281c.174.941.357,1.642.564,2.13.193.488.397.79.625.892.228.115.481.083.76-.082.293-.152.5-.396.648-.718Z" fill="#fff"/>
+<path d="M382.672,319.933l-1.955-10.319c-.063-.344.143-.641.603-.916l.307-.179c.153-.096.293-.139.406-.128.113-.002.213.076.315.22l3.155,4.019c.159.223.378.565.641,1.025l.041-.054c-.166-.529-.286-.925-.335-1.217l-.976-5.139c-.064-.345.128-.641.602-.917l.293-.165c.46-.262.729-.227.792.117l1.955,10.319c.063.345-.143.655-.603.917l-.223.124c-.153.096-.294.138-.42.141-.113.002-.214-.076-.315-.22l-3.341-4.175c-.102-.118-.277-.407-.525-.854l-.055.081c.164.462.256.806.303,1.044l1.008,5.299c.063.344-.142.641-.602.916l-.293.166c-.446.288-.701.24-.778-.105Z" fill="#fff"/>
+</svg>
\ No newline at end of file
diff --git a/core/src/assets/images/users/avatar-1.png b/core/src/assets/images/users/avatar-1.png
new file mode 100644
index 0000000..6a2938a
Binary files /dev/null and b/core/src/assets/images/users/avatar-1.png differ
diff --git a/core/src/assets/images/users/avatar-2.png b/core/src/assets/images/users/avatar-2.png
new file mode 100644
index 0000000..a579106
Binary files /dev/null and b/core/src/assets/images/users/avatar-2.png differ
diff --git a/core/src/assets/images/users/avatar-3.png b/core/src/assets/images/users/avatar-3.png
new file mode 100644
index 0000000..39fba7d
Binary files /dev/null and b/core/src/assets/images/users/avatar-3.png differ
diff --git a/core/src/assets/images/users/avatar-4.png b/core/src/assets/images/users/avatar-4.png
new file mode 100644
index 0000000..4d5310f
Binary files /dev/null and b/core/src/assets/images/users/avatar-4.png differ
diff --git a/core/src/assets/images/users/avatar-5.png b/core/src/assets/images/users/avatar-5.png
new file mode 100644
index 0000000..4624e95
Binary files /dev/null and b/core/src/assets/images/users/avatar-5.png differ
diff --git a/core/src/assets/images/users/avatar-group.png b/core/src/assets/images/users/avatar-group.png
new file mode 100644
index 0000000..f7c94c9
Binary files /dev/null and b/core/src/assets/images/users/avatar-group.png differ
diff --git a/core/src/components/shared/BaseBreadcrumb.vue b/core/src/components/shared/BaseBreadcrumb.vue
new file mode 100644
index 0000000..092d1af
--- /dev/null
+++ b/core/src/components/shared/BaseBreadcrumb.vue
@@ -0,0 +1,16 @@
+<template>
+  <v-breadcrumbs :items="breadcrumbs">
+    <template v-slot:title>
+      {{ title }}
+    </template>
+  </v-breadcrumbs>
+</template>
+
+<script setup lang="ts">
+interface Props {
+  title: string;
+  breadcrumbs: any[];
+}
+
+defineProps<Props>();
+</script>
\ No newline at end of file
diff --git a/core/src/components/shared/UiParentCard.vue b/core/src/components/shared/UiParentCard.vue
new file mode 100644
index 0000000..e890562
--- /dev/null
+++ b/core/src/components/shared/UiParentCard.vue
@@ -0,0 +1,16 @@
+<template>
+  <v-card>
+    <v-card-title>{{ title }}</v-card-title>
+    <v-card-text>
+      <slot />
+    </v-card-text>
+  </v-card>
+</template>
+
+<script setup lang="ts">
+interface Props {
+  title: string;
+}
+
+defineProps<Props>();
+</script>
\ No newline at end of file
diff --git a/core/src/composables/index.ts b/core/src/composables/index.ts
new file mode 100644
index 0000000..1eb6e5d
--- /dev/null
+++ b/core/src/composables/index.ts
@@ -0,0 +1,6 @@
+/**
+ * Core composables - reusable composition functions
+ */
+
+export { useClipboard } from './useClipboard'
+export { usePreferences } from './usePreferences'
diff --git a/core/src/composables/useClipboard.ts b/core/src/composables/useClipboard.ts
new file mode 100644
index 0000000..905df56
--- /dev/null
+++ b/core/src/composables/useClipboard.ts
@@ -0,0 +1,45 @@
+import { ref } from 'vue'
+
+/**
+ * Composable for clipboard operations with visual feedback
+ * 
+ * @param timeout - Duration in ms to show success state (default: 2000)
+ * @returns Object containing copiedKey ref and copyToClipboard function
+ * 
+ * @example
+ * ```vue
+ * <script setup>
+ * import { useClipboard } from '@KTXC/composables/useClipboard'
+ * 
+ * const { copiedKey, copyToClipboard } = useClipboard()
+ * </script>
+ * 
+ * <template>
+ *   <v-btn
+ *     :icon="copiedKey === index ? 'mdi-check' : 'mdi-content-copy'"
+ *     :color="copiedKey === index ? 'success' : undefined"
+ *     @click="copyToClipboard(text, index)"
+ *   />
+ * </template>
+ * ```
+ */
+export function useClipboard<T = number>(timeout = 2000) {
+  const copiedKey = ref<T | null>(null)
+
+  const copyToClipboard = async (text: string, key: T): Promise<boolean> => {
+    try {
+      await navigator.clipboard.writeText(text)
+      copiedKey.value = key
+      setTimeout(() => { copiedKey.value = null }, timeout)
+      return true
+    } catch (err) {
+      console.error('Failed to copy to clipboard:', err)
+      return false
+    }
+  }
+
+  return {
+    copiedKey,
+    copyToClipboard
+  }
+}
diff --git a/core/src/composables/usePreferences.ts b/core/src/composables/usePreferences.ts
new file mode 100644
index 0000000..d7bc271
--- /dev/null
+++ b/core/src/composables/usePreferences.ts
@@ -0,0 +1,208 @@
+import { computed, ref } from 'vue';
+import { usePreferencesStore, type PreferencesState } from '@KTXC/stores/preferencesStore';
+import { preferenceService } from '@KTXC/services/preferenceService';
+
+/**
+ * Composable for managing user preferences
+ * Provides reactive access to preferences with automatic sync to server
+ */
+export function usePreferences() {
+  const store = usePreferencesStore();
+  const saving = ref(false);
+  const error = ref<string | null>(null);
+
+  /**
+   * Get all preferences
+   */
+  const preferences = computed(() => store.preferences);
+
+  /**
+   * Get locked preference keys
+   */
+  const locks = computed(() => store.locks);
+
+  /**
+   * Check if a preference is locked by tenant admin
+   */
+  const isLocked = (key: keyof PreferencesState): boolean => {
+    return store.isLocked(key);
+  };
+
+  /**
+   * Get a single preference value
+   */
+  const get = <K extends keyof PreferencesState>(key: K): PreferencesState[K] => {
+    return store.getPreference(key);
+  };
+
+  /**
+   * Set a single preference and sync to server
+   */
+  const set = async <K extends keyof PreferencesState>(
+    key: K,
+    value: PreferencesState[K],
+    syncToServer = true
+  ): Promise<boolean> => {
+    error.value = null;
+
+    // Update local state first
+    const success = store.setPreference(key, value);
+    if (!success) {
+      error.value = `Preference "${key}" is locked by administrator`;
+      return false;
+    }
+
+    // Sync to server if requested
+    if (syncToServer) {
+      saving.value = true;
+      try {
+        const response = await preferenceService.setPreference(key, value);
+        // Update store with server response to ensure consistency
+        store.setPreferences(response.effective);
+        store.setLocks(response.locks);
+      } catch (err) {
+        error.value = err instanceof Error ? err.message : 'Failed to save preference';
+        return false;
+      } finally {
+        saving.value = false;
+      }
+    }
+
+    return true;
+  };
+
+  /**
+   * Update multiple preferences and sync to server
+   */
+  const update = async (
+    prefs: Partial<PreferencesState>,
+    syncToServer = true
+  ): Promise<{ success: boolean; rejected: string[] }> => {
+    error.value = null;
+
+    // Update local state
+    store.setPreferences(prefs);
+
+    if (syncToServer) {
+      saving.value = true;
+      try {
+        const response = await preferenceService.updatePreferences(prefs);
+        store.setPreferences(response.effective);
+        store.setLocks(response.locks);
+        return {
+          success: true,
+          rejected: response.rejectedKeys ?? [],
+        };
+      } catch (err) {
+        error.value = err instanceof Error ? err.message : 'Failed to save preferences';
+        return { success: false, rejected: [] };
+      } finally {
+        saving.value = false;
+      }
+    }
+
+    return { success: true, rejected: [] };
+  };
+
+  /**
+   * Reset preferences to tenant defaults
+   */
+  const reset = async (): Promise<boolean> => {
+    error.value = null;
+    saving.value = true;
+
+    try {
+      const response = await preferenceService.resetPreferences();
+      store.setPreferences(response.effective);
+      store.setLocks(response.locks);
+      return true;
+    } catch (err) {
+      error.value = err instanceof Error ? err.message : 'Failed to reset preferences';
+      return false;
+    } finally {
+      saving.value = false;
+    }
+  };
+
+  /**
+   * Refresh preferences from server
+   */
+  const refresh = async (): Promise<boolean> => {
+    error.value = null;
+    store.setLoading(true);
+
+    try {
+      const response = await preferenceService.getPreferences();
+      store.setPreferences(response.effective);
+      store.setLocks(response.locks);
+      return true;
+    } catch (err) {
+      error.value = err instanceof Error ? err.message : 'Failed to load preferences';
+      return false;
+    } finally {
+      store.setLoading(false);
+    }
+  };
+
+  // Individual preference computed refs for convenience
+  const theme = computed({
+    get: () => store.preferences.theme,
+    set: (value: string) => set('theme', value),
+  });
+
+  const language = computed({
+    get: () => store.preferences.language,
+    set: (value: string) => set('language', value),
+  });
+
+  const timezone = computed({
+    get: () => store.preferences.timezone,
+    set: (value: string) => set('timezone', value),
+  });
+
+  const dateFormat = computed({
+    get: () => store.preferences.date_format,
+    set: (value: string) => set('date_format', value),
+  });
+
+  const timeFormat = computed({
+    get: () => store.preferences.time_format,
+    set: (value: string) => set('time_format', value),
+  });
+
+  const weekStart = computed({
+    get: () => store.preferences.week_start,
+    set: (value: string) => set('week_start', value),
+  });
+
+  const defaultModule = computed({
+    get: () => store.preferences.default_module ?? '',
+    set: (value: string) => set('default_module', value),
+  });
+
+  return {
+    // State
+    preferences,
+    locks,
+    saving,
+    error,
+    loading: computed(() => store.loading),
+
+    // Methods
+    get,
+    set,
+    update,
+    reset,
+    refresh,
+    isLocked,
+
+    // Individual preference refs
+    theme,
+    language,
+    timezone,
+    dateFormat,
+    timeFormat,
+    weekStart,
+    defaultModule,
+  };
+}
diff --git a/core/src/config.ts b/core/src/config.ts
new file mode 100644
index 0000000..63d4192
--- /dev/null
+++ b/core/src/config.ts
@@ -0,0 +1,15 @@
+export type ConfigProps = {
+  Sidebar_drawer: boolean;
+  mini_sidebar: boolean;
+  actTheme: string;
+  fontTheme: string;
+};
+
+const config: ConfigProps = {
+  Sidebar_drawer: true,
+  mini_sidebar: false,
+  actTheme: 'light',
+  fontTheme: 'Public sans'
+};
+
+export default config;
diff --git a/core/src/layouts/blank/BlankLayout.vue b/core/src/layouts/blank/BlankLayout.vue
new file mode 100644
index 0000000..d884df5
--- /dev/null
+++ b/core/src/layouts/blank/BlankLayout.vue
@@ -0,0 +1,9 @@
+<script setup lang="ts">
+import { RouterView } from 'vue-router';
+</script>
+
+<template>
+  <v-app>
+    <RouterView />
+  </v-app>
+</template>
diff --git a/core/src/layouts/footer/LayoutFooter.vue b/core/src/layouts/footer/LayoutFooter.vue
new file mode 100644
index 0000000..4fa684d
--- /dev/null
+++ b/core/src/layouts/footer/LayoutFooter.vue
@@ -0,0 +1,29 @@
+<script setup lang="ts">
+import { shallowRef } from 'vue';
+
+const footerLink = shallowRef([
+  {
+    title: 'About us'
+  },
+  {
+    title: 'Privacy'
+  },
+  {
+    title: 'Terms'
+  }
+]);
+</script>
+<template>
+  <v-footer class="px-0 footer">
+    <v-row justify="center" no-gutters>
+      <v-col cols="6">
+        <p class="text-caption mb-0">© All rights reserved</p>
+      </v-col>
+      <v-col class="text-right" cols="6">
+        <a v-for="(item, i) in footerLink" :key="i" class="mx-2 text-caption text-darkText" href="/">
+          {{ item.title }}
+        </a>
+      </v-col>
+    </v-row>
+  </v-footer>
+</template>
diff --git a/core/src/layouts/header/LayoutHeader.vue b/core/src/layouts/header/LayoutHeader.vue
new file mode 100644
index 0000000..b7b9135
--- /dev/null
+++ b/core/src/layouts/header/LayoutHeader.vue
@@ -0,0 +1,103 @@
+<script setup lang="ts">
+import { ref, computed } from 'vue';
+import { useUserStore } from '@KTXC/stores/userStore';
+import { useLayoutStore } from '@KTXC/stores/layoutStore';
+import LayoutUserMenu from '@KTXC/layouts/menus/LayoutUserMenu.vue';
+import NotificationDD from './NotificationDD.vue';
+import Searchbar from './SearchBarPanel.vue';
+
+const layoutStore = useLayoutStore();
+const userStore = useUserStore();
+const identityData = computed(() => userStore.user);
+</script>
+
+<template>
+  <v-app-bar elevation="0" height="60">
+    <v-btn
+      class="hidden-md-and-down text-secondary mr-3"
+      color="darkText"
+      icon
+      rounded="sm"
+      variant="text"
+      @click.stop="layoutStore.setMiniSidebar(!layoutStore.miniSidebar)"
+      size="small"
+    >
+      <v-icon>mdi-menu-open</v-icon>
+    </v-btn>
+    <v-btn
+      class="hidden-lg-and-up text-secondary ms-3"
+      color="darkText"
+      icon
+      rounded="sm"
+      variant="text"
+      @click.stop="layoutStore.toggleSidebarDrawer()"
+      size="small"
+    >
+      <v-icon>mdi-menu</v-icon>
+    </v-btn>
+
+    <!-- search mobile -->
+    <v-menu :close-on-content-click="false" class="hidden-lg-and-up" offset="10, 0">
+      <template v-slot:activator="{ props }">
+        <v-btn
+          class="hidden-lg-and-up text-secondary ml-1"
+          color="lightsecondary"
+          icon
+          rounded="sm"
+          variant="flat"
+          size="small"
+          v-bind="props"
+        >
+          <v-icon>mdi-magnify</v-icon>
+        </v-btn>
+      </template>
+      <v-sheet class="search-sheet v-col-12 pa-0" width="320">
+        <v-text-field persistent-placeholder placeholder="Search here.." color="primary" variant="solo" hide-details>
+          <template v-slot:prepend-inner>
+            <v-icon>mdi-magnify</v-icon>
+          </template>
+        </v-text-field>
+      </v-sheet>
+    </v-menu>
+
+    <!-- ---------------------------------------------- -->
+    <!-- Search part -->
+    <!-- ---------------------------------------------- -->
+    <v-sheet class="d-none d-lg-block" width="250">
+      <Searchbar />
+    </v-sheet>
+
+    <!---/Search part -->
+
+    <v-spacer />
+    <!-- ---------------------------------------------- -->
+    <!---right part -->
+    <!-- ---------------------------------------------- -->
+
+    <!-- ---------------------------------------------- -->
+    <!-- Notification -->
+    <!-- ---------------------------------------------- -->
+    <NotificationDD />
+
+    <!-- ---------------------------------------------- -->
+    <!-- User Profile -->
+    <!-- ---------------------------------------------- -->
+    <v-menu :close-on-content-click="false" offset="8, 0">
+      <template v-slot:activator="{ props }">
+        <v-btn class="profileBtn" variant="text" rounded="sm" v-bind="props">
+          <div class="d-flex align-center">
+            <v-avatar class="mr-sm-2 mr-0 py-2">
+              <img src="@KTXC/assets/images/users/avatar-1.png" alt="Julia" />
+            </v-avatar>
+            <h6 class="text-subtitle-1 mb-0 d-sm-block d-none">
+              {{ identityData?.label }}
+            </h6>
+          </div>
+        </v-btn>
+      </template>
+      <v-sheet rounded="md" width="290">
+        <LayoutUserMenu />
+      </v-sheet>
+    </v-menu>
+  </v-app-bar>
+</template>
diff --git a/core/src/layouts/header/NotificationDD.vue b/core/src/layouts/header/NotificationDD.vue
new file mode 100644
index 0000000..a426ce3
--- /dev/null
+++ b/core/src/layouts/header/NotificationDD.vue
@@ -0,0 +1,119 @@
+<script setup lang="ts">
+import { ref } from 'vue';
+
+const isActive = ref(true);
+
+function deactivateItem() {
+  isActive.value = false;
+}
+</script>
+
+<template>
+  <!-- ---------------------------------------------- -->
+  <!-- notifications DD -->
+  <!-- ---------------------------------------------- -->
+  <v-menu :close-on-content-click="false" offset="6, 0">
+    <template v-slot:activator="{ props }">
+      <v-btn icon class="text-secondary ml-sm-2 ml-1" color="darkText" rounded="sm" size="small" v-bind="props">
+        <v-badge :content="isActive ? '2' : '0'" color="primary" offset-x="-4" offset-y="-5">
+          <v-icon>mdi-bell</v-icon>
+        </v-badge>
+      </v-btn>
+    </template>
+    <v-sheet rounded="md" width="387" class="notification-dropdown">
+      <div class="pa-4">
+        <div class="d-flex align-center justify-space-between">
+          <h6 class="text-subtitle-1 mb-0">Notifications</h6>
+          <v-btn
+            variant="text"
+            color="success"
+            icon
+            rounded
+            size="small"
+            @click="deactivateItem()"
+            :class="isActive ? 'd-block' : 'd-none'"
+          >
+            <v-icon>mdi-check-circle</v-icon>
+            <v-tooltip aria-label="tooltip" activator="parent" location="bottom" :content-class="isActive ? 'custom-tooltip' : 'd-none'">
+              <span class="text-caption">Mark as all read</span>
+            </v-tooltip>
+          </v-btn>
+        </div>
+      </div>
+      <v-divider></v-divider>
+      <perfect-scrollbar style="height: calc(100vh - 300px); max-height: 265px">
+        <v-list class="py-0" lines="two" aria-label="notification list" aria-busy="true">
+          <v-list-item value="1" color="secondary" class="no-spacer py-1" :active="isActive">
+            <template v-slot:prepend>
+              <v-avatar size="36" variant="flat" color="lightsuccess" class="mr-3 py-2 text-success">
+                <v-icon>mdi-gift</v-icon>
+              </v-avatar>
+            </template>
+            <div class="d-inline-flex justify-space-between w-100">
+              <h6 class="text-subtitle-1 font-weight-regular mb-0">
+                It's <span style="font-weight: 600">Cristina danny's</span> birthday today.
+              </h6>
+              <span class="text-caption">3:00 AM</span>
+            </div>
+
+            <p class="text-caption text-medium-emphasis my-0">2 min ago</p>
+          </v-list-item>
+          <v-divider></v-divider>
+          <v-list-item value="2" color="secondary" class="no-spacer">
+            <template v-slot:prepend>
+              <v-avatar size="36" variant="flat" color="lightprimary" class="mr-3 py-2 text-primary">
+                <v-icon>mdi-message</v-icon>
+              </v-avatar>
+            </template>
+            <div class="d-inline-flex justify-space-between w-100">
+              <h6 class="text-subtitle-1 font-weight-regular mb-0"><span style="font-weight: 600">Aida Burg</span> commented your post.</h6>
+              <span class="text-caption">6:00 PM</span>
+            </div>
+
+            <p class="text-caption text-medium-emphasis my-0">5 August</p>
+          </v-list-item>
+          <v-divider></v-divider>
+          <v-list-item value="3" color="secondary" class="no-spacer" :active="isActive">
+            <template v-slot:prepend>
+              <v-avatar size="36" variant="flat" color="lighterror" class="mr-3 py-2 text-error">
+                <v-icon>mdi-cog</v-icon>
+              </v-avatar>
+            </template>
+            <div class="d-inline-flex justify-space-between w-100">
+              <h6 class="text-subtitle-1 font-weight-regular mb-0">Your Profile is Complete <span style="font-weight: 600">60%</span></h6>
+              <span class="text-caption">2:45 PM</span>
+            </div>
+
+            <p class="text-caption text-medium-emphasis my-0">7 hours ago</p>
+          </v-list-item>
+          <v-divider></v-divider>
+          <v-list-item value="4" color="secondary" class="no-spacer">
+            <template v-slot:prepend>
+              <v-avatar size="36" variant="flat" color="lightprimary" class="mr-3 py-2 text-primary"> C </v-avatar>
+            </template>
+            <div class="d-inline-flex justify-space-between w-100">
+              <h6 class="text-subtitle-1 font-weight-regular mb-0">
+                <span style="font-weight: 600">Cristina Danny</span> invited to join <span style="font-weight: 600">Metting.</span>
+              </h6>
+              <span class="text-caption">9:10 PM</span>
+            </div>
+
+            <p class="text-caption text-medium-emphasis my-0">Daily scrum meeting time</p>
+          </v-list-item>
+        </v-list>
+      </perfect-scrollbar>
+      <v-divider></v-divider>
+      <div class="pa-2 text-center">
+        <v-btn color="primary" variant="text">View All</v-btn>
+      </div>
+    </v-sheet>
+  </v-menu>
+</template>
+
+<style lang="scss">
+.v-tooltip {
+  > .v-overlay__content.custom-tooltip {
+    padding: 2px 6px;
+  }
+}
+</style>
diff --git a/core/src/layouts/header/SearchBarPanel.vue b/core/src/layouts/header/SearchBarPanel.vue
new file mode 100644
index 0000000..6516d7a
--- /dev/null
+++ b/core/src/layouts/header/SearchBarPanel.vue
@@ -0,0 +1,13 @@
+<script setup>
+</script>
+
+<template>
+  <!-- ---------------------------------------------- -->
+  <!-- searchbar -->
+  <!-- ---------------------------------------------- -->
+  <v-text-field persistent-placeholder placeholder="Ctrl + k" color="primary" variant="outlined" hide-details density="compact">
+    <template v-slot:prepend-inner>
+      <v-icon size="small" color="lightText">mdi-magnify</v-icon>
+    </template>
+  </v-text-field>
+</template>
diff --git a/core/src/layouts/logo/LogoDark.vue b/core/src/layouts/logo/LogoDark.vue
new file mode 100644
index 0000000..f91b360
--- /dev/null
+++ b/core/src/layouts/logo/LogoDark.vue
@@ -0,0 +1,42 @@
+<template>
+  <div class="logo">
+    <RouterLink :to="{ name: 'home' }" aria-label="logo">
+      <svg width="118" height="35" viewBox="0 0 118 35" fill="none" xmlns="http://www.w3.org/2000/svg">
+        <path
+          d="M4.63564 15.8644L6.94797 13.552L6.95038 13.5496H11.3006L9.56969 15.2806L9.12278 15.7275L7.35024 17.5L7.56977 17.7201L17.5 27.6498L27.6498 17.5L25.8766 15.7275L25.7518 15.602L23.6994 13.5496H28.0496L28.052 13.552L29.8644 15.3644L32 17.5L17.5 32L3 17.5L4.63564 15.8644ZM17.5 3L25.8784 11.3784H21.5282L17.5 7.35024L13.4718 11.3784H9.12158L17.5 3Z"
+          :fill="darkprimary"
+        ></path>
+        <path
+          d="M7.35025 17.5L9.1228 15.7275L9.5697 15.2805L7.83937 13.5496H6.95039L6.94798 13.552L4.63564 15.8644L6.8551 18.073L7.35025 17.5Z"
+          :fill="darkprimary"
+        ></path>
+        <path
+          d="M25.8767 15.7275L27.6498 17.5L27.4743 17.6755L27.4749 17.6761L29.8644 15.3644L28.0521 13.552L28.0497 13.5496H27.8736L25.7518 15.602L25.8767 15.7275Z"
+          :fill="darkprimary"
+        ></path>
+        <path d="M6.94549 13.5496L6.9479 13.552L9.12272 15.7275L17.4999 24.1041L28.0544 13.5496H6.94549Z" :fill="primary"></path>
+        <path
+          d="M46.5781 10V26H49.3594V14.9844H49.5078L53.9297 25.9531H56.0078L60.4297 15.0078H60.5781V26H63.3594V10H59.8125L55.0625 21.5937H54.875L50.125 10H46.5781ZM69.8438 26.2422C71.7266 26.2422 72.8516 25.3594 73.3672 24.3516H73.4609V26H76.1797V17.9687C76.1797 14.7969 73.5937 13.8438 71.3047 13.8438C68.7813 13.8438 66.8437 14.9687 66.2188 17.1562L68.8594 17.5312C69.1406 16.7109 69.9375 16.0078 71.3203 16.0078C72.6328 16.0078 73.3516 16.6797 73.3516 17.8594V17.9062C73.3516 18.7188 72.5 18.7578 70.3828 18.9844C68.0547 19.2344 65.8281 19.9297 65.8281 22.6328C65.8281 24.9922 67.5547 26.2422 69.8438 26.2422ZM70.5781 24.1641C69.3984 24.1641 68.5547 23.625 68.5547 22.5859C68.5547 21.5 69.5 21.0469 70.7656 20.8672C71.5078 20.7656 72.9922 20.5781 73.3594 20.2812V21.6953C73.3594 23.0312 72.2813 24.1641 70.5781 24.1641ZM81.8516 18.9687C81.8516 17.2344 82.8984 16.2344 84.3906 16.2344C85.8516 16.2344 86.7266 17.1953 86.7266 18.7969V26H89.5547V18.3594C89.5625 15.4844 87.9219 13.8438 85.4453 13.8438C83.6484 13.8438 82.4141 14.7031 81.8672 16.0391H81.7266V14H79.0234V26H81.8516V18.9687ZM98.4219 14H96.0547V11.125H93.2266V14H91.5234V16.1875H93.2266V22.8594C93.2109 25.1172 94.8516 26.2266 96.9766 26.1641C97.7813 26.1406 98.3359 25.9844 98.6406 25.8828L98.1641 23.6719C98.0078 23.7109 97.6875 23.7812 97.3359 23.7812C96.625 23.7812 96.0547 23.5312 96.0547 22.3906V16.1875H98.4219V14ZM100.787 26H103.615V14H100.787V26ZM102.209 12.2969C103.107 12.2969 103.842 11.6094 103.842 10.7656C103.842 9.91406 103.107 9.22656 102.209 9.22656C101.303 9.22656 100.568 9.91406 100.568 10.7656C100.568 11.6094 101.303 12.2969 102.209 12.2969ZM116.008 17.1719C115.617 15.1406 113.992 13.8438 111.18 13.8438C108.289 13.8438 106.32 15.2656 106.328 17.4844C106.32 19.2344 107.398 20.3906 109.703 20.8672L111.75 21.2969C112.852 21.5391 113.367 21.9844 113.367 22.6641C113.367 23.4844 112.477 24.1016 111.133 24.1016C109.836 24.1016 108.992 23.5391 108.75 22.4609L105.992 22.7266C106.344 24.9297 108.195 26.2344 111.141 26.2344C114.141 26.2344 116.258 24.6797 116.266 22.4062C116.258 20.6953 115.156 19.6484 112.891 19.1562L110.844 18.7188C109.625 18.4453 109.141 18.0234 109.148 17.3281C109.141 16.5156 110.039 15.9531 111.219 15.9531C112.523 15.9531 113.211 16.6641 113.43 17.4531L116.008 17.1719Z"
+          fill="#000"
+          fill-opacity="0.85"
+        ></path>
+        <defs>
+          <linearGradient id="paint0_linear" x1="8.62526" y1="14.0888" x2="5.56709" y2="17.1469" gradientUnits="userSpaceOnUse">
+            <stop stop-color="darkprimary"></stop>
+            <stop offset="0.9637" stop-color="darkprimary" stop-opacity="0"></stop>
+          </linearGradient>
+          <linearGradient id="paint1_linear" x1="26.2675" y1="14.1279" x2="28.7404" y2="16.938" gradientUnits="userSpaceOnUse">
+            <stop stop-color="darkprimary"></stop>
+            <stop offset="1" stop-color="darkprimary" stop-opacity="0"></stop>
+          </linearGradient>
+        </defs>
+      </svg>
+    </RouterLink>
+  </div>
+</template>
+<script setup lang="ts">
+import { ref } from 'vue';
+import { RouterLink } from 'vue-router';
+const primary = ref('rgb(var(--v-theme-primary))');
+const darkprimary = ref('rgb(var(--v-theme-darkprimary))');
+</script>
diff --git a/core/src/layouts/menus/LayoutSystemMenu.vue b/core/src/layouts/menus/LayoutSystemMenu.vue
new file mode 100644
index 0000000..c9afba1
--- /dev/null
+++ b/core/src/layouts/menus/LayoutSystemMenu.vue
@@ -0,0 +1,93 @@
+<script setup lang="ts">
+import { computed } from 'vue';
+import { useLayoutStore } from '@KTXC/stores/layoutStore';
+import { useIntegrationStore } from '@KTXC/stores/integrationStore';
+import Logo from '@KTXC/layouts/logo/LogoDark.vue';
+import SystemMenuGroupStatic from './LayoutSystemMenuGroupStatic.vue';
+import SystemMenuGroupDynamic from './LayoutSystemMenuGroupDynamic.vue';
+import SystemMenuItem from './LayoutSystemMenuItem.vue';
+
+const layoutStore = useLayoutStore();
+const integrationStore = useIntegrationStore();
+
+// Get all entries based on current menu mode
+const menuEntries = computed(() => {
+  const pointType = layoutStore.menuMode === 'settings' ? 'admin_settings_menu' : 'app_menu';
+  return integrationStore.getPoint(pointType);
+});
+
+// Menu mode display info
+const menuModeInfo = computed(() => ({
+  icon: layoutStore.menuMode === 'settings' ? 'mdi-cog' : 'mdi-view-dashboard',
+  label: layoutStore.menuMode === 'settings' ? 'Settings' : 'Applications',
+  toggleLabel: layoutStore.menuMode === 'settings' ? 'Switch to Apps' : 'Switch to Settings',
+  toggleIcon: layoutStore.menuMode === 'settings' ? 'mdi-view-dashboard' : 'mdi-cog',
+}));
+</script>
+
+<script lang="ts">
+export default {
+  methods: {
+  }
+};
+</script>
+
+<template>
+  <v-navigation-drawer
+    left
+    v-model="layoutStore.sidebarDrawer"
+    elevation="0"
+    rail-width="60"
+    mobile-breakpoint="lg"
+    app
+    class="leftSidebar"
+    :rail="layoutStore.miniSidebar"
+    expand-on-hover
+  >
+    <div class="pa-5">
+      <Logo />
+    </div>
+    <!-- ---------------------------------------------- -->
+    <!---Navigation -->
+    <!-- ---------------------------------------------- -->
+    <perfect-scrollbar class="scrollnavbar">
+      <v-list aria-busy="true" aria-label="menu list">
+        <!---Menu Loop -->
+        <template v-for="entry in menuEntries" :key="entry.id">
+          <!-- Group with dynamic style (collapsible) -->
+          <SystemMenuGroupDynamic 
+            v-if="'items' in entry && entry.style === 'dynamic'" 
+            class="leftPadding" 
+            :group="entry" 
+          />
+          <!-- Group with static style (subheader) -->
+          <SystemMenuGroupStatic 
+            v-else-if="'items' in entry" 
+            :group="entry" 
+          />
+          <!-- Single item (no group) -->
+          <SystemMenuItem 
+            v-else 
+            :item="entry" 
+          />
+        </template>
+      </v-list>
+    </perfect-scrollbar>
+    
+    <!-- Menu Mode Toggle -->
+    <template v-slot:append>
+      <v-divider />
+      <v-list density="compact" class="pa-2">
+        <v-list-item
+          rounded
+          color="primary"
+          @click="layoutStore.toggleMenuMode()"
+          :prepend-icon="menuModeInfo.toggleIcon"
+          class="menu-mode-toggle"
+        >
+          <v-list-item-title class="text-body-2">{{ menuModeInfo.toggleLabel }}</v-list-item-title>
+        </v-list-item>
+      </v-list>
+    </template>
+  </v-navigation-drawer>
+</template>
diff --git a/core/src/layouts/menus/LayoutSystemMenuGroupDynamic.vue b/core/src/layouts/menus/LayoutSystemMenuGroupDynamic.vue
new file mode 100644
index 0000000..af1dc4c
--- /dev/null
+++ b/core/src/layouts/menus/LayoutSystemMenuGroupDynamic.vue
@@ -0,0 +1,42 @@
+<script setup lang="ts">
+import type { IntegrationGroup } from '@KTXC/types/integrationTypes';
+import NavItem from './LayoutSystemMenuItem.vue';
+
+const props = defineProps<{ group: IntegrationGroup; level?: number }>();
+</script>
+
+<template>
+  <!-- ---------------------------------------------- -->
+  <!---Item Childern -->
+  <!-- ---------------------------------------------- -->
+  <v-list-group no-action>
+    <!-- ---------------------------------------------- -->
+    <!---Dropdown  -->
+    <!-- ---------------------------------------------- -->
+    <template v-slot:activator="{ props: activatorProps }">
+      <v-list-item v-bind="activatorProps" :value="group.label" rounded class="mb-1" color="primary">
+        <!---Icon  -->
+        <template v-slot:prepend>
+          <v-icon v-if="group.icon" :icon="group.icon"></v-icon>
+        </template>
+        <!---Title  -->
+        <v-list-item-title class="mr-auto">{{ group.label }}</v-list-item-title>
+        <!---If Caption-->
+        <v-list-item-subtitle v-if="group.caption" class="text-caption mt-n1 hide-menu">
+          {{ group.caption }}
+        </v-list-item-subtitle>
+      </v-list-item>
+    </template>
+    <!-- ---------------------------------------------- -->
+    <!---Sub Item-->
+    <!-- ---------------------------------------------- -->
+    <template v-for="(subitem, i) in group.items" :key="i">
+      <NavItem :item="subitem" :level="(props.level ?? 0) + 1"></NavItem>
+    </template>
+  </v-list-group>
+
+  <!-- ---------------------------------------------- -->
+  <!---End Item Sub Header -->
+  <!-- ---------------------------------------------- -->
+</template>
+
diff --git a/core/src/layouts/menus/LayoutSystemMenuGroupStatic.vue b/core/src/layouts/menus/LayoutSystemMenuGroupStatic.vue
new file mode 100644
index 0000000..86518a9
--- /dev/null
+++ b/core/src/layouts/menus/LayoutSystemMenuGroupStatic.vue
@@ -0,0 +1,15 @@
+<script setup lang="ts">
+import type { IntegrationGroup } from '@KTXC/types/integrationTypes';
+import LayoutSystemMenuItem from './LayoutSystemMenuItem.vue';
+
+const props = defineProps<{ group: IntegrationGroup }>();
+</script>
+
+<template>
+  <v-list-subheader color="lightText" class="smallCap text-subtitle-2">{{ props.group.label }}</v-list-subheader>
+  <LayoutSystemMenuItem
+    v-for="(item, i) in props.group.items"
+    :key="i"
+    :item="item"
+  />
+</template>
diff --git a/core/src/layouts/menus/LayoutSystemMenuItem.vue b/core/src/layouts/menus/LayoutSystemMenuItem.vue
new file mode 100644
index 0000000..a02ed6f
--- /dev/null
+++ b/core/src/layouts/menus/LayoutSystemMenuItem.vue
@@ -0,0 +1,29 @@
+<script setup lang="ts">
+import type { IntegrationItem } from '@KTXC/types/integrationTypes';
+
+const props = defineProps<{ item: IntegrationItem; level?: number }>();
+</script>
+
+<template>
+  <!---Single Item-->
+  <v-list-item
+    :to="item.toType === 'external' ? '' : item.to"
+    :href="item.toType === 'external' ? item.to : ''"
+    rounded
+    class="mb-1"
+    color="primary"
+    :disabled="item.disabled"
+    :target="item.toType === 'external' ? '_blank' : ''"
+    @mouseenter="$emit && $emit('prefetch', item)"
+  >
+    <!---If icon-->
+    <template v-slot:prepend>
+      <v-icon v-if="props.item.icon" :icon="props.item.icon"></v-icon>
+    </template>
+    <v-list-item-title>{{ item.label }}</v-list-item-title>
+    <!---If Caption-->
+    <v-list-item-subtitle v-if="item.caption" class="text-caption mt-n1 hide-menu">
+      {{ item.caption }}
+    </v-list-item-subtitle>
+  </v-list-item>
+</template>
diff --git a/core/src/layouts/menus/LayoutUserMenu.vue b/core/src/layouts/menus/LayoutUserMenu.vue
new file mode 100644
index 0000000..6999420
--- /dev/null
+++ b/core/src/layouts/menus/LayoutUserMenu.vue
@@ -0,0 +1,101 @@
+<script setup lang="ts">
+import { computed } from 'vue';
+import { useTheme } from 'vuetify';
+import { useUserStore } from '@KTXC/stores/userStore';
+import { useIntegrationStore } from '@KTXC/stores/integrationStore';
+import { useLayoutStore } from '@KTXC/stores/layoutStore';
+import { useRouter } from 'vue-router';
+
+const theme = useTheme();
+const router = useRouter();
+const userStore = useUserStore();
+const integrationStore = useIntegrationStore();
+const layoutStore = useLayoutStore();
+
+const identityData = computed(() => userStore.user);
+const profileMenuItems = computed(() => integrationStore.getItems('profile_menu'));
+
+// Theme toggle
+const isDarkMode = computed(() => theme.global.name.value === 'dark');
+const toggleTheme = () => {
+  const newTheme = theme.global.name.value === 'light' ? 'dark' : 'light';
+  theme.global.name.value = newTheme;
+  localStorage.setItem('theme', newTheme);
+};
+
+// Navigate to settings
+const goToSettings = () => {
+  layoutStore.setMenuMode('settings');
+  // Navigate to first settings item or a default settings route
+  router.push('/modules'); // TODO: Make this dynamic based on first settings menu item
+};
+</script>
+
+<template>
+  <!-- ---------------------------------------------- -->
+  <!-- Profile Dropdown -->
+  <!-- ---------------------------------------------- -->
+  <div>
+    <!-- User Info Header -->
+    <div class="d-flex align-center pa-5">
+      <v-avatar size="32" class="mr-2">
+        <img src="@KTXC/assets/images/users/avatar-1.png" width="32" />
+      </v-avatar>
+      <div>
+        <h6 class="text-h6 mb-0">
+          {{ identityData?.label || 'User Name' }}
+        </h6>
+        <p class="text-caption mb-0">{{ identityData?.email || '' }}</p>
+      </div>
+    </div>
+    <v-divider />
+    
+    <perfect-scrollbar style="max-height: 280px">
+      <v-list class="py-0" aria-label="profile menu" aria-busy="true">
+        <!-- Dynamic Profile Menu Items (from modules) -->
+        <v-list-item
+          v-for="item in profileMenuItems"
+          :key="item.id"
+          :to="item.toType === 'external' ? undefined : item.to"
+          :href="item.toType === 'external' ? item.to : undefined"
+          :target="item.toType === 'external' ? '_blank' : undefined"
+          color="primary"
+          rounded="0"
+        >
+          <template v-slot:prepend>
+            <v-icon v-if="item.icon">{{ item.icon }}</v-icon>
+          </template>
+          <v-list-item-title class="text-h6">{{ item.label }}</v-list-item-title>
+        </v-list-item>
+
+        <v-divider v-if="profileMenuItems.length" class="my-2" />
+
+        <!-- Theme Toggle -->
+        <v-list-item @click="toggleTheme" color="primary" rounded="0">
+          <template v-slot:prepend>
+            <v-icon>{{ isDarkMode ? 'mdi-weather-sunny' : 'mdi-weather-night' }}</v-icon>
+          </template>
+          <v-list-item-title class="text-h6">{{ isDarkMode ? 'Light Mode' : 'Dark Mode' }}</v-list-item-title>
+        </v-list-item>
+
+        <!-- Go to Settings -->
+        <v-list-item @click="goToSettings" color="primary" rounded="0">
+          <template v-slot:prepend>
+            <v-icon>mdi-cog-outline</v-icon>
+          </template>
+          <v-list-item-title class="text-h6">Settings</v-list-item-title>
+        </v-list-item>
+
+        <v-divider class="my-2" />
+
+        <!-- Logout -->
+        <v-list-item @click="userStore.logout()" color="secondary" rounded="0">
+          <template v-slot:prepend>
+            <v-icon>mdi-logout</v-icon>
+          </template>
+          <v-list-item-title class="text-h6">Logout</v-list-item-title>
+        </v-list-item>
+      </v-list>
+    </perfect-scrollbar>
+  </div>
+</template>
diff --git a/core/src/plugins/vuetify/defaults.ts b/core/src/plugins/vuetify/defaults.ts
new file mode 100644
index 0000000..c8bdfda
--- /dev/null
+++ b/core/src/plugins/vuetify/defaults.ts
@@ -0,0 +1,148 @@
+export default {
+  IconBtn: {
+    icon: true,
+    color: 'default',
+    variant: 'text',
+  },
+  VAlert: {
+    VBtn: {
+      color: undefined,
+    },
+  },
+  VAvatar: {
+    // ℹ️ Remove after next release
+    variant: 'flat',
+  },
+  VBadge: {
+    // set v-badge default color to primary
+    color: 'primary',
+  },
+  VBtn: {
+    // set v-btn default color to primary
+    color: 'primary',
+    style: 'text-transform: none;',
+  },
+  VCard: {
+    rounded: 'lg',
+    elevation: 2,
+  },
+  VChip: {
+    elevation: 0,
+  },
+  VMenu: {
+    offset: '2px',
+  },
+  VPagination: {
+    density: 'comfortable',
+    showFirstLastPage: true,
+    variant: 'tonal',
+  },
+  VTabs: {
+    // set v-tabs default color to primary
+    color: 'primary',
+    VSlideGroup: {
+      showArrows: true,
+    },
+  },
+  VTooltip: {
+    // set v-tooltip default location to top
+    location: 'top',
+  },
+  VCheckboxBtn: {
+    color: 'primary',
+  },
+  VCheckbox: {
+    // set v-checkbox default color to primary
+    color: 'primary',
+    density: 'comfortable',
+    hideDetails: 'auto',
+  },
+  VRadioGroup: {
+    color: 'primary',
+    density: 'comfortable',
+    hideDetails: 'auto',
+  },
+  VRadio: {
+    density: 'comfortable',
+    hideDetails: 'auto',
+  },
+  VSelect: {
+    variant: 'outlined',
+    color: 'primary',
+    hideDetails: 'auto',
+    density: 'comfortable',
+  },
+  VRangeSlider: {
+    // set v-range-slider default color to primary
+    color: 'primary',
+    thumbLabel: true,
+    hideDetails: 'auto',
+    trackSize: 6,
+    thumbSize: 22,
+    elevation: 4,
+  },
+  VRating: {
+    // set v-rating default color to primary
+    activeColor: 'warning',
+    color: 'disabled',
+  },
+  VProgressCircular: {
+    // set v-progress-circular default color to primary
+    color: 'primary',
+  },
+  VProgressLinear: {
+    color: 'primary',
+  },
+  VSlider: {
+    // set v-slider default color to primary
+    color: 'primary',
+    trackSize: 6,
+    hideDetails: 'auto',
+    thumbSize: 22,
+    elevation: 4,
+  },
+  VSnackbar: {
+    VBtn: {
+      size: 'small',
+    },
+  },
+  VTextField: {
+    variant: 'outlined',
+    density: 'comfortable',
+    color: 'primary',
+    hideDetails: 'auto',
+  },
+  VAutocomplete: {
+    variant: 'outlined',
+    color: 'primary',
+    density: 'comfortable',
+    hideDetails: 'auto',
+  },
+  VCombobox: {
+    variant: 'outlined',
+    color: 'primary',
+    hideDetails: 'auto',
+    density: 'comfortable',
+  },
+  VFileInput: {
+    variant: 'outlined',
+    color: 'primary',
+    hideDetails: 'auto',
+    density: 'comfortable',
+  },
+  VTextarea: {
+    variant: 'outlined',
+    color: 'primary',
+    hideDetails: 'auto',
+    density: 'comfortable',
+  },
+  VSwitch: {
+    // set v-switch default color to primary
+    inset: true,
+    color: 'primary',
+    hideDetails: 'auto',
+  },
+  VNavigationDrawer: {
+    touchless: true,
+  },
+}
diff --git a/core/src/plugins/vuetify/icons.ts b/core/src/plugins/vuetify/icons.ts
new file mode 100644
index 0000000..9999b07
--- /dev/null
+++ b/core/src/plugins/vuetify/icons.ts
@@ -0,0 +1,14 @@
+import type { IconAliases } from 'vuetify'
+import { aliases as mdiAliases, mdi } from 'vuetify/iconsets/mdi'
+
+const aliases: Partial<IconAliases> = {
+  ...mdiAliases,
+}
+
+export const icons = {
+  defaultSet: 'mdi',
+  aliases,
+  sets: {
+    mdi,
+  },
+}
diff --git a/core/src/plugins/vuetify/index.ts b/core/src/plugins/vuetify/index.ts
new file mode 100644
index 0000000..2dcf8b5
--- /dev/null
+++ b/core/src/plugins/vuetify/index.ts
@@ -0,0 +1,24 @@
+import { createVuetify } from 'vuetify'
+import { VBtn } from 'vuetify/components/VBtn'
+import * as components from 'vuetify/components'
+import * as directives from 'vuetify/directives'
+import defaults from './defaults'
+import { icons } from './icons'
+import { themes } from './theme'
+
+// Styles
+import 'vuetify/styles'
+
+export default createVuetify({
+  components,
+  directives,
+  aliases: {
+    IconBtn: VBtn,
+  },
+  defaults,
+  icons,
+  theme: {
+    defaultTheme: 'light',
+    themes,
+  },
+})
diff --git a/core/src/plugins/vuetify/theme.ts b/core/src/plugins/vuetify/theme.ts
new file mode 100644
index 0000000..16aec75
--- /dev/null
+++ b/core/src/plugins/vuetify/theme.ts
@@ -0,0 +1,144 @@
+import type { ThemeDefinition } from 'vuetify'
+
+export const staticPrimaryColor = '#6366F1'
+export const staticPrimaryDarkenColor = '#4F46E5'
+
+export const themes: Record<string, ThemeDefinition> = {
+  light: {
+    dark: false,
+    colors: {
+      // Primary brand colors - Modern indigo
+      'primary': staticPrimaryColor,
+      'on-primary': '#FFFFFF',
+      'primary-darken-1': staticPrimaryDarkenColor,
+      'primary-lighten-1': '#818CF8',
+
+      // Secondary - Purple accent
+      'secondary': '#8B5CF6',
+      'secondary-darken-1': '#7C3AED',
+      'secondary-lighten-1': '#A78BFA',
+      'on-secondary': '#FFFFFF',
+
+      // Semantic colors
+      'success': '#10B981',
+      'on-success': '#FFFFFF',
+      'info': '#3B82F6',
+      'on-info': '#FFFFFF',
+      'warning': '#F59E0B',
+      'on-warning': '#FFFFFF',
+      'error': '#EF4444',
+      'on-error': '#FFFFFF',
+
+      // Surface & backgrounds
+      'background': '#F8FAFC',
+      'on-background': '#0F172A',
+      'surface': '#FFFFFF',
+      'on-surface': '#0F172A',
+      'surface-bright': '#FFFFFF',
+      'surface-variant': '#F1F5F9',
+      'on-surface-variant': '#64748B',
+
+      // Grey scale
+      'grey': '#64748B',
+      'grey-darken-1': '#475569',
+      'grey-lighten-1': '#94A3B8',
+      'grey-lighten-2': '#CBD5E1',
+      'grey-lighten-3': '#E2E8F0',
+      'grey-lighten-4': '#F1F5F9',
+      'grey-lighten-5': '#F8FAFC',
+
+      // Component specific
+      'perfect-scrollbar-thumb': '#CBD5E1',
+      'track-bg': '#F1F5F9',
+    },
+
+    variables: {
+      'border-color': '#E2E8F0',
+      'border-opacity': 0.12,
+      'high-emphasis-opacity': 0.87,
+      'medium-emphasis-opacity': 0.60,
+      'disabled-opacity': 0.38,
+      'idle-opacity': 0.04,
+      'hover-opacity': 0.04,
+      'focus-opacity': 0.12,
+      'selected-opacity': 0.08,
+      'activated-opacity': 0.12,
+      'pressed-opacity': 0.12,
+      'dragged-opacity': 0.08,
+      'theme-kbd': '#212529',
+      'theme-on-kbd': '#FFFFFF',
+      'theme-code': '#F5F5F5',
+      'theme-on-code': '#000000',
+    },
+  },
+
+  dark: {
+    dark: true,
+    colors: {
+      // Primary brand colors - Lighter shades for dark mode
+      'primary': '#818CF8',
+      'on-primary': '#FFFFFF',
+      'primary-darken-1': '#6366F1',
+      'primary-lighten-1': '#A5B4FC',
+
+      // Secondary - Purple accent
+      'secondary': '#A78BFA',
+      'secondary-darken-1': '#8B5CF6',
+      'secondary-lighten-1': '#C4B5FD',
+      'on-secondary': '#FFFFFF',
+
+      // Semantic colors - Adjusted for dark mode
+      'success': '#34D399',
+      'on-success': '#FFFFFF',
+      'info': '#60A5FA',
+      'on-info': '#FFFFFF',
+      'warning': '#FBBF24',
+      'on-warning': '#FFFFFF',
+      'error': '#F87171',
+      'on-error': '#FFFFFF',
+
+      // Surface & backgrounds - Dark slate palette
+      'background': '#0F172A',
+      'on-background': '#F1F5F9',
+      'surface': '#1E293B',
+      'on-surface': '#F1F5F9',
+      'surface-bright': '#334155',
+      'surface-variant': '#1E293B',
+      'on-surface-variant': '#94A3B8',
+
+      // Grey scale
+      'grey': '#94A3B8',
+      'grey-darken-1': '#CBD5E1',
+      'grey-lighten-1': '#64748B',
+      'grey-lighten-2': '#475569',
+      'grey-lighten-3': '#334155',
+      'grey-lighten-4': '#1E293B',
+      'grey-lighten-5': '#0F172A',
+
+      // Component specific
+      'perfect-scrollbar-thumb': '#475569',
+      'track-bg': '#334155',
+    },
+
+    variables: {
+      'border-color': '#334155',
+      'border-opacity': 0.12,
+      'high-emphasis-opacity': 0.87,
+      'medium-emphasis-opacity': 0.60,
+      'disabled-opacity': 0.38,
+      'idle-opacity': 0.10,
+      'hover-opacity': 0.08,
+      'focus-opacity': 0.12,
+      'selected-opacity': 0.12,
+      'activated-opacity': 0.16,
+      'pressed-opacity': 0.14,
+      'dragged-opacity': 0.10,
+      'theme-kbd': '#212529',
+      'theme-on-kbd': '#FFFFFF',
+      'theme-code': '#343434',
+      'theme-on-code': '#CCCCCC',
+    },
+  },
+}
+
+export default themes
diff --git a/core/src/private.html b/core/src/private.html
new file mode 100644
index 0000000..ab6d8fe
--- /dev/null
+++ b/core/src/private.html
@@ -0,0 +1,24 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css" />
+    <script type="importmap">
+      {
+        "imports": {
+          "vue": "/vendor/vue.mjs",
+          "vue-router": "/vendor/vue-router.mjs",
+          "pinia": "/vendor/pinia.mjs",
+          "@KTXC/utils/helpers/fetch-wrapper-core": "/js/shared-utils.js"
+        }
+      }
+    </script>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>K-Trix</title>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script type="module" src="./private.ts"></script>
+  </body>
+</html>
diff --git a/core/src/private.ts b/core/src/private.ts
new file mode 100644
index 0000000..d3fdac9
--- /dev/null
+++ b/core/src/private.ts
@@ -0,0 +1,67 @@
+import * as Vue from 'vue'
+import * as VueRouterLib from 'vue-router'
+import * as PiniaLib from 'pinia'
+import { createApp } from 'vue'
+import { createPinia } from 'pinia'
+import { PerfectScrollbarPlugin } from 'vue3-perfect-scrollbar'
+import { useModuleStore } from '@KTXC/stores/moduleStore'
+import { useTenantStore } from '@KTXC/stores/tenantStore'
+import { usePreferencesStore } from '@KTXC/stores/preferencesStore'
+import { fetchWrapper } from '@KTXC/utils/helpers/fetch-wrapper'
+import { initializeModules } from '@KTXC/utils/modules'
+import App from './App.vue'
+import router from './router'
+import vuetify from './plugins/vuetify/index'
+import '@KTXC/scss/style.scss'
+
+// google-fonts
+import '@fontsource/public-sans/index.css'
+
+const app = createApp(App)
+const pinia = createPinia()
+app.use(pinia)
+app.use(PerfectScrollbarPlugin)
+app.use(vuetify)
+
+// Note: Router is registered AFTER modules are loaded to prevent premature route matching
+
+const globalWindow = window as typeof window & {
+  [key: string]: unknown
+}
+
+globalWindow.Vue = Vue
+globalWindow.vue = Vue
+globalWindow.VueRouter = VueRouterLib
+globalWindow.Pinia = PiniaLib as unknown
+
+// Bootstrap initial private UI state (modules, tenant, preferences) before mounting
+(async () => {
+	const moduleStore = useModuleStore();
+	const tenantStore = useTenantStore();
+	
+	try {
+		const payload = await fetchWrapper.get('/init');
+		moduleStore.init(payload?.modules ?? {});
+		tenantStore.init(payload?.tenant ?? null);
+		
+		// Initialize registered modules (following reference app's bootstrap pattern)
+		await initializeModules(app);
+
+		// Add 404 catch-all route AFTER all modules are loaded
+		// This ensures module routes are registered before the catch-all
+		router.addRoute({
+			name: 'NotFound',
+			path: '/:pathMatch(.*)*',
+			component: () => import('@KTXC/views/pages/maintenance/error/Error404Page.vue')
+		});
+
+		// Register router AFTER modules are loaded
+		app.use(router);
+
+		await router.isReady();
+		// Home redirect handled by router beforeEnter now
+		app.mount('#app');
+	} catch (e) {
+		console.error('Bootstrap failed:', e);
+	}
+})();
diff --git a/core/src/public.html b/core/src/public.html
new file mode 100644
index 0000000..08307fd
--- /dev/null
+++ b/core/src/public.html
@@ -0,0 +1,14 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" href="/favicon.svg" />
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Ktrix Cloud</title>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script type="module" src="./public.ts"></script>
+  </body>
+</html>
diff --git a/core/src/public.ts b/core/src/public.ts
new file mode 100644
index 0000000..d7435fd
--- /dev/null
+++ b/core/src/public.ts
@@ -0,0 +1,36 @@
+import { createApp } from 'vue';
+import { createPinia } from 'pinia';
+import App from './App.vue';
+import { router } from './router';
+import vuetify from './plugins/vuetify/index';
+import '@KTXC/scss/style.scss';
+
+// google-fonts
+import '@fontsource/public-sans/400.css';
+import '@fontsource/public-sans/500.css';
+import '@fontsource/public-sans/600.css';
+import '@fontsource/public-sans/700.css';
+
+// The public app is served when the user has no valid server session.
+// Clear any stale identity data from localStorage to ensure the client
+// state matches the server's determination that the user is unauthenticated.
+//localStorage.removeItem('identityStore.self');
+
+const app = createApp(App);
+const pinia = createPinia();
+app.use(pinia);
+app.use(router);
+app.use(vuetify);
+
+// Wait for router to be ready, then ensure we're on a public route
+//router.isReady().then(() => {
+  // If the current route requires auth, redirect to login
+  // This handles the case where user navigates to / with an expired session
+  //const currentRoute = router.currentRoute.value;
+  //const requiresAuth = currentRoute.matched.some(record => record.meta?.requiresAuth);
+  //if (requiresAuth || currentRoute.path === '/') {
+  //  router.replace('/login');
+  //}
+//});
+
+app.mount('#app');
diff --git a/core/src/router/index.ts b/core/src/router/index.ts
new file mode 100644
index 0000000..05972dd
--- /dev/null
+++ b/core/src/router/index.ts
@@ -0,0 +1,117 @@
+import { createRouter, createWebHistory, type RouteRecordRaw } from 'vue-router';
+import { useUserStore } from '@KTXC/stores/userStore';
+import { useLayoutStore } from '@KTXC/stores/layoutStore';
+import BlankLayout from '@KTXC/layouts/blank/BlankLayout.vue';
+import PrivateLayout from '@KTXC/views/PrivateLayout.vue';
+import { usePreferencesStore } from '@KTXC/stores/preferencesStore';
+import { useIntegrationStore } from '@KTXC/stores/integrationStore';
+
+const routes: RouteRecordRaw[] = [
+  // Public login route
+  {
+    name: 'login',
+    path: '/login',
+    meta: { requiresAuth: false },
+    component: BlankLayout,
+    children: [
+      {
+        path: '',
+        component: () => import('@KTXC/views/authentication/LoginPage.vue')
+      }
+    ]
+  },
+  // Logout performs action then redirects
+  {
+    name: 'logout',
+    path: '/logout',
+    meta: { requiresAuth: true },
+    component: BlankLayout,
+    beforeEnter: async () => {
+      const userStore = useUserStore();
+      await userStore.logout();
+      return false;
+    }
+  },
+  // Private area (shell layout). Module routes under /m/{namespace} are added at runtime.
+  {
+    name: 'private',
+    path: '/',
+    component: PrivateLayout,
+    meta: { requiresAuth: true },
+    children: [
+      // Index redirects to the first available module route (if any)
+      {
+        name: 'home',
+        path: '',
+        meta: { requiresAuth: true },
+        component: BlankLayout,
+        beforeEnter: (to, from, next) => {
+          const integrationStore = useIntegrationStore();
+          const preferences = usePreferencesStore();
+
+          // Treat preference as a route name (e.g., "samples.overview")
+          const preferredRouteName = preferences.preferences.default_module;
+          if (preferredRouteName) {
+            // If a route with this name exists, go there
+            try {
+              // using router variable at runtime:
+              // eslint-disable-next-line @typescript-eslint/no-use-before-define
+              const exists = router.getRoutes().some(r => r.name === preferredRouteName);
+              if (exists) return next({ name: preferredRouteName });
+            } catch {}
+          }
+
+          // Get first available menu item from app_menu
+          const entries = integrationStore.getPoint('app_menu');
+          for (const entry of entries) {
+            // Check if it's a group with items
+            if ('items' in entry && entry.items.length > 0) {
+              const first = entry.items[0]?.to;
+              if (first) return next(first);
+            }
+            // Or a standalone item
+            if ('to' in entry && entry.to) {
+              return next(entry.to);
+            }
+          }
+          return next();
+        }
+      }
+    ]
+  }
+];
+
+export const router = createRouter({
+  history: createWebHistory(import.meta.env.BASE_URL),
+  routes
+});
+
+router.beforeEach(async (to, from, next) => {
+  const userStore = useUserStore();
+
+  const authRequired = to.matched.some((record) => record.meta?.requiresAuth);
+
+  if (authRequired && !userStore.user && to.path !== '/login') {
+    userStore.returnUrl = to.fullPath;
+    return next('/login');
+  }
+
+  if (userStore.user && to.path === '/login') {
+    const dest = userStore.returnUrl && userStore.returnUrl !== '/' ? userStore.returnUrl : '/';
+    return next(dest);
+  }
+
+  return next();
+});
+
+router.beforeEach(() => {
+  const layoutStore = useLayoutStore();
+  layoutStore.isLoading = true;
+});
+
+router.afterEach(() => {
+  const layoutStore = useLayoutStore();
+  layoutStore.isLoading = false;
+});
+
+export default router
\ No newline at end of file
diff --git a/core/src/scss/_override.scss b/core/src/scss/_override.scss
new file mode 100644
index 0000000..df5b1d3
--- /dev/null
+++ b/core/src/scss/_override.scss
@@ -0,0 +1,115 @@
+html {
+  .bg-success,
+  .bg-info,
+  .bg-warning {
+    color: white !important;
+  }
+}
+
+.v-row + .v-row {
+  margin-top: 0px;
+}
+
+.v-divider {
+  opacity: 1;
+  border-color: rgb(var(--v-theme-borderLight));
+}
+
+.v-table > .v-table__wrapper > table > thead > tr > th {
+  color: inherit;
+}
+
+.border-blue-right {
+  border-right: 1px solid rgba(var(--v-theme-borderLight), 0.36);
+}
+
+.link-hover {
+  text-decoration: unset;
+  &:hover {
+    text-decoration: underline;
+  }
+}
+
+.v-selection-control {
+  flex: unset;
+}
+
+.customizer-btn .icon {
+  animation: progress-circular-rotate 1.4s linear infinite;
+  transform-origin: center center;
+  transition: all 0.2s ease-in-out;
+}
+
+.no-spacer {
+  .v-list-item__spacer {
+    display: none !important;
+  }
+}
+
+@keyframes progress-circular-rotate {
+  100% {
+    transform: rotate(270deg);
+  }
+}
+
+header {
+  &.v-toolbar--border {
+    border-color: rgb(var(--v-theme-borderLight));
+  }
+}
+
+.v-toolbar {
+  &.v-app-bar {
+    border-bottom: 1px solid rgba(var(--v-theme-borderLight), 0.8);
+  }
+}
+
+.v-sheet--border {
+  border: 1px solid rgba(var(--v-theme-borderLight), 0.8);
+}
+
+// table css
+.v-table {
+  &.v-table--hover {
+    > .v-table__wrapper {
+      > table {
+        > tbody {
+          > tr {
+            &:hover {
+              td {
+                background: rgb(var(--v-theme-gray100));
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}
+
+// accordion page css
+.v-expansion-panel {
+  border: 1px solid rgb(var(--v-theme-borderLight));
+  &:not(:first-child) {
+    margin-top: -1px;
+  }
+  .v-expansion-panel-text__wrapper {
+    border-top: 1px solid rgb(var(--v-theme-borderLight));
+    padding: 16px 24px;
+  }
+  &.v-expansion-panel--active {
+    .v-expansion-panel-title--active {
+      .v-expansion-panel-title__overlay {
+        background-color: rgb(var(--v-theme-gray100));
+      }
+    }
+  }
+}
+.v-expansion-panel--active {
+  > .v-expansion-panel-title {
+    min-height: unset;
+  }
+}
+.v-expansion-panel--disabled .v-expansion-panel-title {
+  color: rgba(var(--v-theme-on-surface), 0.15);
+}
diff --git a/core/src/scss/_variables.scss b/core/src/scss/_variables.scss
new file mode 100644
index 0000000..3f2ae89
--- /dev/null
+++ b/core/src/scss/_variables.scss
@@ -0,0 +1,140 @@
+@use 'sass:math';
+@use 'sass:map';
+@use 'sass:meta';
+@use 'vuetify/lib/styles/tools/functions' as *;
+
+// This will false all colors which is not necessory for theme
+$color-pack: false;
+
+// Global font size and border radius
+$font-size-root: 1rem;
+$border-radius-root: 4px;
+$body-font-family: 'Public sans', sans-serif !default;
+$heading-font-family: $body-font-family !default;
+$btn-font-weight: 400 !default;
+$btn-letter-spacing: 0 !default;
+
+// Global Radius as per breakeven point
+$rounded: () !default;
+$rounded: map-deep-merge(
+  (
+    0: 0,
+    'sm': $border-radius-root * 0.5,
+    null: $border-radius-root,
+    'md': $border-radius-root * 1,
+    'lg': $border-radius-root * 2,
+    'xl': $border-radius-root * 6,
+    'pill': 9999px,
+    'circle': 50%,
+    'shaped': $border-radius-root * 6 0
+  ),
+  $rounded
+);
+// Global Typography
+$typography: () !default;
+$typography: map-deep-merge(
+  (
+    'h1': (
+      'size': 2.375rem,
+      'weight': 600,
+      'line-height': 1.21,
+      'font-family': inherit
+    ),
+    'h2': (
+      'size': 1.875rem,
+      'weight': 600,
+      'line-height': 1.27,
+      'font-family': inherit
+    ),
+    'h3': (
+      'size': 1.5rem,
+      'weight': 600,
+      'line-height': 1.33,
+      'font-family': inherit
+    ),
+    'h4': (
+      'size': 1.25rem,
+      'weight': 600,
+      'line-height': 1.4,
+      'font-family': inherit
+    ),
+    'h5': (
+      'size': 1rem,
+      'weight': 600,
+      'line-height': 1.5,
+      'font-family': inherit
+    ),
+    'h6': (
+      'size': 0.875rem,
+      'weight': 400,
+      'line-height': 1.57,
+      'font-family': inherit
+    ),
+    'subtitle-1': (
+      'size': 0.875rem,
+      'weight': 600,
+      'line-height': 1.57,
+      'font-family': inherit
+    ),
+    'subtitle-2': (
+      'size': 0.75rem,
+      'weight': 500,
+      'line-height': 1.66,
+      'font-family': inherit
+    ),
+    'body-1': (
+      'size': 0.875rem,
+      'weight': 400,
+      'line-height': 1.57,
+      'font-family': inherit
+    ),
+    'body-2': (
+      'size': 0.75rem,
+      'weight': 400,
+      'line-height': 1.66,
+      'font-family': inherit
+    ),
+    'button': (
+      'size': 0.875rem,
+      'weight': 500,
+      'font-family': inherit,
+      'text-transform': uppercase
+    ),
+    'caption': (
+      'size': 0.75rem,
+      'weight': 400,
+      'letter-spacing': 0,
+      'font-family': inherit
+    ),
+    'overline': (
+      'size': 0.75rem,
+      'weight': 500,
+      'font-family': inherit,
+      'line-height': 1.67,
+      'letter-spacing': 0,
+      'text-transform': uppercase
+    )
+  ),
+  $typography
+);
+
+// Custom Variables
+// colors
+$white: #fff !default;
+
+// cards
+$card-item-spacer-xy: 20px !default;
+$card-text-spacer: 20px !default;
+$card-title-size: 16px !default;
+
+// Global Shadow
+$box-shadow: 0px 0px 4px rgba(0, 0, 0, 0.08);
+
+$theme-colors: (
+  primary: var(--v-theme-primary),
+  secondary: var(--v-theme-secondary),
+  success: var(--v-theme-success),
+  info: var(--v-theme-info),
+  warning: var(--v-theme-warning),
+  error: var(--v-theme-error)
+);
diff --git a/core/src/scss/components/_VAlert.scss b/core/src/scss/components/_VAlert.scss
new file mode 100644
index 0000000..64c8eba
--- /dev/null
+++ b/core/src/scss/components/_VAlert.scss
@@ -0,0 +1,37 @@
+.single-line-alert {
+  .v-alert__close,
+  .v-alert__prepend {
+    align-self: center !important;
+  }
+}
+
+.v-alert__prepend {
+  align-self: center;
+}
+
+.v-alert--variant-tonal {
+  &.with-border {
+    @each $color, $value in $theme-colors {
+      &.text-#{$color} {
+        border: 1px solid rgba(#{$value}, 0.3);
+      }
+    }
+  }
+}
+
+@media (max-width: 500px) {
+  .single-line-alert {
+    display: flex;
+    flex-wrap: wrap;
+    .v-alert__append {
+      margin-inline-start: 0px;
+    }
+    .v-alert__close {
+      margin-left: auto;
+    }
+    .v-alert__content {
+      width: 100%;
+      margin-top: 5px;
+    }
+  }
+}
diff --git a/core/src/scss/components/_VBadge.scss b/core/src/scss/components/_VBadge.scss
new file mode 100644
index 0000000..a9871c4
--- /dev/null
+++ b/core/src/scss/components/_VBadge.scss
@@ -0,0 +1,11 @@
+.v-badge__badge {
+  min-width: 16px;
+  height: 16px;
+  padding: 4px;
+}
+.v-badge--dot {
+  .v-badge__badge {
+    height: 8px;
+    width: 8px;
+  }
+}
diff --git a/core/src/scss/components/_VBreadcrumb.scss b/core/src/scss/components/_VBreadcrumb.scss
new file mode 100644
index 0000000..f1ebcff
--- /dev/null
+++ b/core/src/scss/components/_VBreadcrumb.scss
@@ -0,0 +1,32 @@
+.v-breadcrumbs-item--link {
+  color: rgb(var(--v-theme-lightText));
+}
+.v-breadcrumbs {
+  .v-breadcrumbs-item--disabled {
+    --v-disabled-opacity: 1;
+    .v-breadcrumbs-item--link {
+      color: rgb(var(--v-theme-darkText));
+    }
+  }
+  .v-breadcrumbs-divider {
+    color: rgb(var(--v-theme-lightText));
+  }
+}
+
+.breadcrumb-with-title {
+  .v-toolbar__content {
+    height: unset !important;
+    padding: 20px 0;
+  }
+  .v-breadcrumbs__prepend {
+    svg {
+      vertical-align: -3px;
+    }
+  }
+}
+
+.breadcrumb-height {
+  .v-toolbar__content {
+    height: unset !important;
+  }
+}
diff --git a/core/src/scss/components/_VButtons.scss b/core/src/scss/components/_VButtons.scss
new file mode 100644
index 0000000..c4ef964
--- /dev/null
+++ b/core/src/scss/components/_VButtons.scss
@@ -0,0 +1,68 @@
+//
+// Light Buttons
+//
+
+.v-btn {
+  &.bg-lightprimary {
+    &:hover,
+    &:active,
+    &:focus {
+      background-color: rgb(var(--v-theme-primary)) !important;
+      color: $white !important;
+    }
+  }
+  &.bg-lightsecondary {
+    &:hover,
+    &:active,
+    &:focus {
+      background-color: rgb(var(--v-theme-secondary)) !important;
+      color: $white !important;
+    }
+  }
+  &.text-facebook {
+    &:hover,
+    &:active,
+    &:focus {
+      background-color: rgb(var(--v-theme-facebook)) !important;
+      color: $white !important;
+    }
+  }
+  &.text-twitter {
+    &:hover,
+    &:active,
+    &:focus {
+      background-color: rgb(var(--v-theme-twitter)) !important;
+      color: $white !important;
+    }
+  }
+  &.text-linkedin {
+    &:hover,
+    &:active,
+    &:focus {
+      background-color: rgb(var(--v-theme-linkedin)) !important;
+      color: $white !important;
+    }
+  }
+}
+
+.v-btn {
+  text-transform: capitalize;
+  letter-spacing: $btn-letter-spacing;
+  font-weight: 400;
+}
+.v-btn--icon.v-btn--density-default {
+  width: calc(var(--v-btn-height) + 6px);
+  height: calc(var(--v-btn-height) + 6px);
+}
+
+.v-btn-group .v-btn {
+  height: inherit !important;
+}
+
+.v-btn-group {
+  border-color: rgba(var(--v-border-color), 1);
+}
+
+.v-btn-group--divided .v-btn:not(:last-child) {
+  border-inline-end-color: rgba(var(--v-border-color), 1);
+}
diff --git a/core/src/scss/components/_VCard.scss b/core/src/scss/components/_VCard.scss
new file mode 100644
index 0000000..b0e30b7
--- /dev/null
+++ b/core/src/scss/components/_VCard.scss
@@ -0,0 +1,40 @@
+// Outline Card
+.v-card--variant-outlined {
+  border-color: rgba(var(--v-theme-borderLight), 1);
+  .v-divider {
+    border-color: rgba(var(--v-theme-borderLight), 0.8);
+  }
+}
+
+.v-card-text {
+  padding: $card-text-spacer;
+}
+
+.v-card-actions {
+  padding: 14px $card-text-spacer 14px;
+}
+
+.v-card {
+  overflow: visible;
+  .v-card-title {
+    &.text-h6 {
+      font-weight: 600;
+      line-height: 1.57;
+    }
+  }
+}
+
+.v-card-item {
+  padding: $card-item-spacer-xy;
+}
+
+.v-card-subtitle {
+  font-size: 0.75rem;
+}
+
+.title-card {
+  .v-card-text {
+    background-color: rgb(var(--v-theme-background));
+    border: 1px solid rgba(var(--v-theme-borderLight), 1);
+  }
+}
diff --git a/core/src/scss/components/_VField.scss b/core/src/scss/components/_VField.scss
new file mode 100644
index 0000000..97352ac
--- /dev/null
+++ b/core/src/scss/components/_VField.scss
@@ -0,0 +1,9 @@
+.v-field--variant-outlined .v-field__outline__start.v-locale--is-ltr,
+.v-locale--is-ltr .v-field--variant-outlined .v-field__outline__start {
+  border-radius: $border-radius-root 0 0 $border-radius-root;
+}
+
+.v-field--variant-outlined .v-field__outline__end.v-locale--is-ltr,
+.v-locale--is-ltr .v-field--variant-outlined .v-field__outline__end {
+  border-radius: 0 $border-radius-root $border-radius-root 0;
+}
diff --git a/core/src/scss/components/_VInput.scss b/core/src/scss/components/_VInput.scss
new file mode 100644
index 0000000..976f726
--- /dev/null
+++ b/core/src/scss/components/_VInput.scss
@@ -0,0 +1,55 @@
+.v-input--density-default:not(.v-autocomplete--multiple),
+.v-field--variant-solo,
+.v-field--variant-filled {
+  --v-input-control-height: 39px;
+  --v-input-padding-top: 2px;
+  input.v-field__input {
+    padding-bottom: 2px;
+  }
+  .v-field__input {
+    padding-bottom: 2px;
+  }
+  textarea {
+    padding-top: 11px;
+  }
+}
+.v-input--density-default {
+  .v-field__input {
+    min-height: 41px;
+  }
+}
+.v-field--variant-outlined {
+  &.v-field--focused {
+    .v-field__outline {
+      --v-field-border-width: 1px;
+    }
+  }
+}
+.v-input {
+  .v-input__details {
+    padding-inline: 0;
+  }
+}
+
+.v-input--density-comfortable {
+  --v-input-control-height: 56px;
+  --v-input-padding-top: 17px;
+}
+.v-label {
+  font-size: 0.875rem;
+  --v-medium-emphasis-opacity: 0.8;
+}
+.v-switch .v-label,
+.v-checkbox .v-label {
+  opacity: 1;
+}
+
+textarea.v-field__input {
+  font-size: 14px;
+}
+
+.textarea-input {
+  .v-label {
+    top: 15px;
+  }
+}
diff --git a/core/src/scss/components/_VList.scss b/core/src/scss/components/_VList.scss
new file mode 100644
index 0000000..0e6cd11
--- /dev/null
+++ b/core/src/scss/components/_VList.scss
@@ -0,0 +1,47 @@
+.v-list-item {
+  &.v-list-item--border {
+    border-color: rgb(var(--v-border-color));
+    border-width: 0 0 1px 0;
+    &:last-child {
+      border-width: 0;
+    }
+  }
+  &.v-list-item--variant-tonal {
+    background: rgb(var(--v-theme-gray100));
+    .v-list-item__underlay {
+      background: transparent;
+    }
+  }
+  &:last-child {
+    .v-list-item__content {
+      .v-divider--inset {
+        display: none;
+      }
+    }
+  }
+}
+.v-list {
+  &[aria-busy='true'] {
+    cursor: context-menu;
+  }
+}
+.v-list-group__items {
+  .v-list-item {
+    padding-inline-start: 40px !important;
+  }
+}
+
+.v-list-item__content {
+  .v-divider--inset:not(.v-divider--vertical) {
+    max-width: 100%;
+    margin-inline-start: 0;
+  }
+}
+
+.v-list--border {
+  .v-list-item {
+    + .v-list-item {
+      border-top: 1px solid rgb(var(--v-theme-borderLight));
+    }
+  }
+}
diff --git a/core/src/scss/components/_VNavigationDrawer.scss b/core/src/scss/components/_VNavigationDrawer.scss
new file mode 100644
index 0000000..9994ae9
--- /dev/null
+++ b/core/src/scss/components/_VNavigationDrawer.scss
@@ -0,0 +1,3 @@
+.v-navigation-drawer__scrim.fade-transition-leave-to {
+  display: none;
+}
diff --git a/core/src/scss/components/_VShadow.scss b/core/src/scss/components/_VShadow.scss
new file mode 100644
index 0000000..647b098
--- /dev/null
+++ b/core/src/scss/components/_VShadow.scss
@@ -0,0 +1,20 @@
+.elevation-24 {
+  box-shadow: $box-shadow !important;
+}
+
+.v-menu {
+  > .v-overlay__content {
+    > .v-sheet {
+      box-shadow: $box-shadow;
+    }
+  }
+}
+
+@each $color, $value in $theme-colors {
+  .#{$color}-shadow {
+    box-shadow: 0 14px 12px rgba(#{$value}, 0.2);
+    &:hover {
+      box-shadow: none;
+    }
+  }
+}
diff --git a/core/src/scss/components/_VTextField.scss b/core/src/scss/components/_VTextField.scss
new file mode 100644
index 0000000..153b10c
--- /dev/null
+++ b/core/src/scss/components/_VTextField.scss
@@ -0,0 +1,18 @@
+.v-text-field input {
+  font-size: 0.875rem;
+}
+
+.v-field__outline {
+  color: rgb(var(--v-theme-inputBorder));
+}
+.inputWithbg {
+  .v-field--variant-outlined {
+    background-color: rgba(0, 0, 0, 0.025);
+  }
+}
+
+.v-select {
+  .v-field {
+    font-size: 0.875rem;
+  }
+}
diff --git a/core/src/scss/components/_VTextarea.scss b/core/src/scss/components/_VTextarea.scss
new file mode 100644
index 0000000..b611c41
--- /dev/null
+++ b/core/src/scss/components/_VTextarea.scss
@@ -0,0 +1,7 @@
+.v-textarea input {
+  font-size: 0.875rem;
+  font-weight: 500;
+  &::placeholder {
+    color: rgba(0, 0, 0, 0.38);
+  }
+}
diff --git a/core/src/scss/layout/_container.scss b/core/src/scss/layout/_container.scss
new file mode 100644
index 0000000..b42a0c5
--- /dev/null
+++ b/core/src/scss/layout/_container.scss
@@ -0,0 +1,146 @@
+html {
+  overflow-y: auto;
+}
+.horizontalLayout {
+  .page-wrapper {
+    .v-container {
+      padding-top: 20px;
+    }
+  }
+}
+.spacer {
+  padding: 100px 0;
+  @media (max-width: 1264px) {
+    padding: 72px 0;
+  }
+}
+@media (max-width: 800px) {
+  .spacer {
+    padding: 40px 0;
+  }
+}
+
+.cursor-pointer {
+  cursor: pointer;
+}
+.page-wrapper {
+  background: rgb(var(--v-theme-containerBg));
+  display: flex;
+  flex-direction: column;
+  height: calc(100vh - 60px);
+  overflow: hidden;
+
+  .page-content-container {
+    flex: 1;
+    overflow: hidden;
+    min-height: 0;
+    display: flex;
+    flex-direction: column;
+    padding: 15px;
+    @media (max-width: 1550px) {
+      max-width: 100%;
+    }
+    @media (min-width: 768px) {
+      padding-inline: 40px;
+    }
+  }
+
+  .page-footer-container {
+    flex-shrink: 0;
+  }
+
+  .v-container {
+    padding: 15px;
+    @media (max-width: 1550px) {
+      max-width: 100%;
+    }
+    @media (min-width: 768px) {
+      padding-inline: 40px;
+    }
+  }
+}
+.maxWidth {
+  max-width: 1200px;
+  margin: 0 auto;
+}
+$sizes: (
+  'display-1': 44px,
+  'display-2': 40px,
+  'display-3': 30px,
+  'h1': 36px,
+  'h2': 30px,
+  'h3': 21px,
+  'h4': 18px,
+  'h5': 16px,
+  'h6': 14px,
+  'text-8': 8px,
+  'text-10': 10px,
+  'text-13': 13px,
+  'text-18': 18px,
+  'text-20': 20px,
+  'text-24': 24px,
+  'body-text-1': 10px
+);
+
+@each $pixel, $size in $sizes {
+  .#{$pixel} {
+    font-size: $size;
+    line-height: $size + 10;
+  }
+}
+
+.customizer-btn {
+  .icon {
+    animation: progress-circular-rotate 1.4s linear infinite;
+    transform-origin: center center;
+    transition: all 0.2s ease-in-out;
+  }
+}
+.fixed-width {
+  max-width: 1300px;
+}
+.ga-2 {
+  gap: 8px;
+}
+
+// font family
+body {
+  font-family: 'Public Sans', sans-serif;
+  .Roboto {
+    font-family: 'Roboto', sans-serif !important;
+  }
+
+  .Poppins {
+    font-family: 'Poppins', sans-serif !important;
+  }
+
+  .Inter {
+    font-family: 'Inter', sans-serif !important;
+  }
+
+  .Public {
+    font-family: 'Public sans', sans-serif !important;
+  }
+}
+
+@keyframes slideY {
+  0%,
+  50%,
+  100% {
+    transform: translateY(0px);
+  }
+  25% {
+    transform: translateY(-10px);
+  }
+  75% {
+    transform: translateY(10px);
+  }
+}
+
+.link {
+  color: rgb(var(--v-theme-lightText));
+  text-decoration: none;
+  &:hover {
+    color: rgb(var(--v-theme-primary));
+  }
+}
diff --git a/core/src/scss/layout/_footer.scss b/core/src/scss/layout/_footer.scss
new file mode 100644
index 0000000..67f478d
--- /dev/null
+++ b/core/src/scss/layout/_footer.scss
@@ -0,0 +1,25 @@
+.v-footer {
+  background: rgb(var(--v-theme-containerbg));
+  padding: 24px 16px 0px;
+  margin-top: auto;
+  position: unset;
+  a {
+    text-decoration: unset;
+    &:hover {
+      text-decoration: underline;
+    }
+  }
+}
+
+@media (max-width: 475px) {
+  .footer {
+    text-align: center;
+    .v-col-6 {
+      flex: 0 0 100%;
+      max-width: 100%;
+      &.text-right {
+        text-align: center !important;
+      }
+    }
+  }
+}
diff --git a/core/src/scss/layout/_sidebar.scss b/core/src/scss/layout/_sidebar.scss
new file mode 100644
index 0000000..e9af48c
--- /dev/null
+++ b/core/src/scss/layout/_sidebar.scss
@@ -0,0 +1,165 @@
+/*This is for the logo*/
+.leftSidebar {
+  border: 0px;
+  box-shadow: none !important;
+  border-right: 1px solid rgba(var(--v-theme-borderLight), 0.8);
+  .logo {
+    padding-left: 7px;
+  }
+}
+/*This is for the Vertical sidebar*/
+.scrollnavbar {
+  height: calc(100vh - 110px);
+  .smallCap {
+    padding: 0px 0 0 20px !important;
+  }
+  .v-list {
+    color: rgb(var(--v-theme-lightText));
+    padding: 0;
+    .v-list-item--one-line {
+      &.v-list-item--active {
+        border-right: 2px solid rgb(var(--v-theme-primary));
+      }
+    }
+    .v-list-group {
+      .v-list-item--one-line {
+        &.v-list-item--active.v-list-item--link {
+          border-right: 2px solid rgb(var(--v-theme-primary));
+        }
+        &.v-list-item--active.v-list-group__header {
+          border-right: none;
+          background: transparent;
+        }
+      }
+      .v-list-group__items {
+        .v-list-item--link,
+        .v-list-item {
+          .v-list-item__prepend {
+            margin-inline-end: 1px;
+          }
+        }
+      }
+    }
+    .v-list-item--variant-plain,
+    .v-list-item--variant-outlined,
+    .v-list-item--variant-text,
+    .v-list-item--variant-tonal {
+      color: rgb(var(--v-theme-darkText));
+    }
+  }
+  /*General Menu css*/
+  .v-list-group__items .v-list-item,
+  .v-list-item {
+    border-radius: 0;
+    padding-inline-start: calc(20px + var(--indent-padding) / 2) !important;
+    .v-list-item__prepend {
+      margin-inline-end: 13px;
+    }
+    .v-list-item__append {
+      font-size: 0.875rem;
+      .v-icon {
+        margin-inline-start: 13px;
+      }
+      > .v-icon {
+        --v-medium-emphasis-opacity: 0.8;
+      }
+    }
+    .v-list-item-title {
+      font-size: 0.875rem;
+      color: rgb(var(--v-theme-darkText));
+    }
+    &.v-list-item--active {
+      .v-list-item-title {
+        color: rgb(var(--v-theme-primary));
+      }
+    }
+  }
+  /*This is for the dropdown*/
+  .v-list {
+    .v-list-item--active {
+      .v-list-item-title {
+        font-weight: 500;
+      }
+    }
+    .sidebarchip .v-icon {
+      margin-inline-start: -3px;
+    }
+    .v-list-group {
+      .v-list-item:focus-visible > .v-list-item__overlay {
+        opacity: 0;
+      }
+    }
+    > .v-list-group {
+      position: relative;
+      > .v-list-item--active,
+      > .v-list-item:hover {
+        background: rgb(var(--v-theme-primary), 0.05);
+      }
+    }
+  }
+}
+.v-navigation-drawer--rail {
+  .scrollnavbar .v-list .v-list-group__items,
+  .hide-menu {
+    opacity: 0;
+  }
+  .scrollnavbar {
+    .v-list-item {
+      .v-list-item__prepend {
+        margin-left: 8px;
+        .anticon {
+          svg {
+            width: 20px;
+            height: 20px;
+          }
+        }
+      }
+    }
+    .v-list-group__items .v-list-item,
+    .v-list-item {
+      padding-inline-start: calc(12px + var(--indent-padding) / 2) !important;
+    }
+    .ExtraBox {
+      display: none;
+    }
+  }
+  .sidebar-user {
+    margin-left: -6px;
+  }
+  .leftPadding {
+    margin-left: 0px;
+  }
+  &.leftSidebar {
+    .v-list-subheader {
+      display: none;
+    }
+    .v-navigation-drawer__content {
+      .pa-5 {
+        padding-left: 10px !important;
+        .logo {
+          padding-left: 0;
+        }
+      }
+    }
+  }
+}
+@media only screen and (min-width: 1170px) {
+  .mini-sidebar {
+    .logo {
+      width: 40px;
+      overflow: hidden;
+    }
+    .leftSidebar:hover {
+      box-shadow: $box-shadow !important;
+    }
+    .v-navigation-drawer--expand-on-hover:hover {
+      .logo {
+        width: 100%;
+      }
+      .v-list .v-list-group__items,
+      .hide-menu {
+        opacity: 1;
+      }
+    }
+  }
+}
diff --git a/core/src/scss/layout/_topbar.scss b/core/src/scss/layout/_topbar.scss
new file mode 100644
index 0000000..6d150f7
--- /dev/null
+++ b/core/src/scss/layout/_topbar.scss
@@ -0,0 +1,41 @@
+.profileBtn {
+  height: 44px !important;
+  margin: 0 20px 0 10px !important;
+  padding: 0 6px;
+  .v-avatar {
+    width: 32px;
+    height: 32px;
+    img {
+      width: 32px;
+      height: 32px;
+    }
+  }
+}
+
+@media (max-width: 600px) {
+  .profileBtn {
+    min-width: 42px;
+    margin: 0 12px 0 0 !important;
+    .v-avatar {
+      width: 24px;
+      height: 24px;
+      img {
+        width: 24px;
+        height: 24px;
+      }
+    }
+  }
+}
+
+@media (max-width: 460px) {
+  .notification-dropdown {
+    width: 332px !important;
+    .v-list-item__content {
+      .d-inline-flex {
+        .text-caption {
+          min-width: 50px;
+        }
+      }
+    }
+  }
+}
diff --git a/core/src/scss/style.scss b/core/src/scss/style.scss
new file mode 100644
index 0000000..7d95dbc
--- /dev/null
+++ b/core/src/scss/style.scss
@@ -0,0 +1,9 @@
+@import './variables';
+@import 'vuetify/styles/main.sass';
+@import './override';
+@import './layout/container';
+@import './layout/sidebar';
+@import './layout/footer';
+@import './layout/topbar';
+
+@import 'vue3-perfect-scrollbar/style.css';
diff --git a/core/src/services/authenticationService.ts b/core/src/services/authenticationService.ts
new file mode 100644
index 0000000..c5a51e5
--- /dev/null
+++ b/core/src/services/authenticationService.ts
@@ -0,0 +1,100 @@
+import type { ChallengeResponse, IdentifyResponse, RedirectResponse, SessionStatus, StartResponse, VerifyResponse } from '@KTXC/types/authenticationTypes';
+import { fetchWrapper } from '@KTXC/utils/helpers/fetch-wrapper';
+
+export const authenticationService = {
+  /**
+   * Initialize authentication - get session and available methods
+   */
+  async start(): Promise<StartResponse> {
+    return fetchWrapper.get('/auth/start', undefined, { skipLogoutOnError: true });
+  },
+
+  /**
+   * Identify user - stores identity in session for identity-first flow
+   * Returns tenant-wide methods (no user-specific filtering to prevent enumeration)
+   * 
+   * @param session - Session ID from start
+   * @param identity - User identity (email/username)
+   */
+  async identify(session: string, identity: string): Promise<IdentifyResponse> {
+    return fetchWrapper.post('/auth/identify', {
+      session,
+      identity,
+    }, { skipLogoutOnError: true });
+  },
+
+  /**
+   * Verify a factor (primary or secondary)
+   * 
+   * @param session - Session ID from init
+   * @param method - Provider/method ID (e.g., 'default', 'totp')
+   * @param response - User's response (password, code, etc.)
+   * @param identity - User identity for credential-based auth (email/username)
+   */
+  async verify(
+    session: string,
+    method: string,
+    response: string,
+    identity?: string
+  ): Promise<VerifyResponse> {
+    return fetchWrapper.post('/auth/verify', {
+      session,
+      method,
+      response,
+      ...(identity && { identity }),
+    }, { autoRetry: false, skipLogoutOnError: true });
+  },
+
+  /**
+   * Begin redirect-based authentication (OIDC/SAML)
+   */
+  async beginRedirect(
+    session: string,
+    method: string,
+    returnUrl: string = '/'
+  ): Promise<RedirectResponse> {
+    return fetchWrapper.post('/auth/redirect', {
+      session,
+      method,
+      return_url: returnUrl,
+    }, { skipLogoutOnError: true });
+  },
+
+  /**
+   * Start a challenge for methods that require it (SMS, email, TOTP)
+   */
+  async beginChallenge(session: string, method: string): Promise<ChallengeResponse> {
+    return fetchWrapper.post('/auth/challenge', {
+      session,
+      method,
+    }, { skipLogoutOnError: true });
+  },
+
+  /**
+   * Get current session status
+   */
+  async getStatus(session: string): Promise<SessionStatus> {
+    return fetchWrapper.get(`/auth/status?session=${encodeURIComponent(session)}`, undefined, { skipLogoutOnError: true });
+  },
+
+  /**
+   * Cancel authentication session
+   */
+  async cancelSession(session: string): Promise<void> {
+    await fetchWrapper.delete(`/auth/session?session=${encodeURIComponent(session)}`);
+  },
+
+  /**
+   * Refresh access token
+   */
+  async refresh(): Promise<void> {
+    await fetchWrapper.post('/auth/refresh', {});
+  },
+
+  /**
+   * Logout
+   */
+  async logout(): Promise<void> {
+    await fetchWrapper.post('/auth/logout', {});
+  },
+};
diff --git a/core/src/services/preferenceService.ts b/core/src/services/preferenceService.ts
new file mode 100644
index 0000000..a84cee1
--- /dev/null
+++ b/core/src/services/preferenceService.ts
@@ -0,0 +1,82 @@
+import { fetchWrapper } from '@KTXC/utils/helpers/fetch-wrapper';
+import type { PreferencesState } from '@KTXC/stores/preferencesStore';
+
+export interface PreferenceResponse {
+  effective: PreferencesState;
+  tenant: PreferencesState;
+  user: Partial<PreferencesState>;
+  locks: string[];
+  savedKeys?: string[];
+  rejectedKeys?: string[];
+}
+
+export interface TenantPreferenceResponse {
+  preferences: PreferencesState;
+  locks: string[];
+  defaults: PreferencesState;
+}
+
+export const preferenceService = {
+  /**
+   * Get effective preferences for current user
+   * Returns merged preferences with tenant defaults and user overrides resolved
+   */
+  async getPreferences(): Promise<PreferenceResponse> {
+    return await fetchWrapper.get('/preferences');
+  },
+
+  /**
+   * Update multiple user preferences at once
+   * Locked preferences will be rejected and returned in rejectedKeys
+   */
+  async updatePreferences(preferences: Partial<PreferencesState>): Promise<PreferenceResponse> {
+    return await fetchWrapper.put('/preferences', preferences);
+  },
+
+  /**
+   * Update a single user preference
+   */
+  async setPreference<K extends keyof PreferencesState>(
+    key: K,
+    value: PreferencesState[K]
+  ): Promise<PreferenceResponse> {
+    return await fetchWrapper.put(`/preferences/${key}`, { value });
+  },
+
+  /**
+   * Reset all user preferences to tenant defaults
+   */
+  async resetPreferences(): Promise<PreferenceResponse> {
+    return await fetchWrapper.post('/preferences/reset', {});
+  },
+
+  // ============ Admin/Tenant Management ============
+
+  /**
+   * Get tenant preferences (admin only)
+   * Returns tenant defaults and locks
+   */
+  async getTenantPreferences(): Promise<TenantPreferenceResponse> {
+    return await fetchWrapper.get('/preferences/tenant');
+  },
+
+  /**
+   * Update tenant preferences (admin only)
+   * @param preferences - The tenant-wide default preferences
+   * @param locks - Array of preference keys that users cannot override
+   */
+  async updateTenantPreferences(
+    preferences: Partial<PreferencesState>,
+    locks: string[] = []
+  ): Promise<TenantPreferenceResponse> {
+    return await fetchWrapper.put('/preferences/tenant', { preferences, locks });
+  },
+
+  /**
+   * Update tenant preference locks (admin only)
+   * @param locks - Array of preference keys that users cannot override
+   */
+  async updateTenantLocks(locks: string[]): Promise<TenantPreferenceResponse> {
+    return await fetchWrapper.put('/preferences/tenant/locks', { locks });
+  },
+};
diff --git a/core/src/shims-vue.d.ts b/core/src/shims-vue.d.ts
new file mode 100644
index 0000000..64c3fd9
--- /dev/null
+++ b/core/src/shims-vue.d.ts
@@ -0,0 +1,5 @@
+declare module '*.vue' {
+  import type { DefineComponent } from 'vue';
+  const component: DefineComponent<{}, {}, any>;
+  export default component;
+}
diff --git a/core/src/stores/integrationStore.ts b/core/src/stores/integrationStore.ts
new file mode 100644
index 0000000..f2d3c59
--- /dev/null
+++ b/core/src/stores/integrationStore.ts
@@ -0,0 +1,183 @@
+import { defineStore } from 'pinia';
+import type { 
+  IntegrationPointType, 
+  IntegrationPoint, 
+  IntegrationEntry, 
+  IntegrationItem, 
+  IntegrationGroup 
+} from '@KTXC/types/integrationTypes';
+
+export const useIntegrationStore = defineStore('integrationStore', {
+  state: () => ({
+    points: new Map<IntegrationPointType, IntegrationPoint>(),
+  }),
+
+  actions: {
+    // Ensure an integration point exists
+    ensurePoint(pointType: IntegrationPointType): void {
+      if (!this.points.has(pointType)) {
+        this.points.set(pointType, { items: new Map() });
+      }
+    },
+
+    // Register a single item to an integration point
+    registerItem(pointType: IntegrationPointType, item: IntegrationItem): void {
+      this.ensurePoint(pointType);
+      const point = this.points.get(pointType)!;
+      point.items.set(item.id, item);
+    },
+
+    // Register a group to an integration point
+    registerGroup(pointType: IntegrationPointType, group: IntegrationGroup): void {
+      this.ensurePoint(pointType);
+      const point = this.points.get(pointType)!;
+      point.items.set(group.id, group);
+    },
+
+    // Bulk register from module integrations
+    registerModuleIntegrations(
+      moduleHandle: string, 
+      integrations: Record<string, any[]>
+    ): void {
+      for (const [pointType, entries] of Object.entries(integrations)) {
+        if (!entries || !Array.isArray(entries)) continue;
+        
+        entries.forEach((entry: any) => {
+          const prefixedEntry = this.prefixEntry(moduleHandle, entry);
+          
+          if (entry.type === 'group' || ('items' in entry && Array.isArray(entry.items))) {
+            this.registerGroup(pointType as IntegrationPointType, prefixedEntry as IntegrationGroup);
+          } else {
+            this.registerItem(pointType as IntegrationPointType, prefixedEntry as IntegrationItem);
+          }
+        });
+      }
+    },
+
+    // Prefix IDs and paths with module handle
+    prefixEntry(moduleHandle: string, entry: any): IntegrationEntry {
+      const prefixed: any = {
+        ...entry,
+        id: entry.id ? `${moduleHandle}.${entry.id}` : `${moduleHandle}.${this.randomID()}`,
+        moduleHandle,
+      };
+
+      // Remove 'type' field as it's only used for module-side disambiguation
+      delete prefixed.type;
+
+      // Prefix internal paths
+      if (entry.path) {
+        prefixed.to = `/m/${moduleHandle}${entry.path}`;
+        delete prefixed.path;
+      } else if (entry.to && entry.toType !== 'external') {
+        prefixed.to = `/m/${moduleHandle}${entry.to}`;
+      }
+
+      // Recursively prefix items in groups
+      if (entry.items && Array.isArray(entry.items)) {
+        prefixed.items = entry.items.map((item: any) => this.prefixEntry(moduleHandle, item));
+      }
+
+      return prefixed;
+    },
+
+    // Update a specific item (useful for badges, visibility, etc.)
+    updateItem(
+      pointType: IntegrationPointType, 
+      itemId: string, 
+      updates: Partial<IntegrationItem>
+    ): void {
+      const point = this.points.get(pointType);
+      if (!point) return;
+
+      const item = point.items.get(itemId);
+      if (item && !('items' in item)) {
+        point.items.set(itemId, { ...item, ...updates });
+      }
+    },
+
+    // Update badge for notification icons
+    updateBadge(
+      pointType: IntegrationPointType, 
+      itemId: string, 
+      badge: string | number | null,
+      badgeColor?: string
+    ): void {
+      this.updateItem(pointType, itemId, { badge, badgeColor });
+    },
+
+    // Toggle visibility
+    setVisibility(
+      pointType: IntegrationPointType,
+      itemId: string,
+      visible: boolean
+    ): void {
+      this.updateItem(pointType, itemId, { visible });
+    },
+
+    // Remove an item
+    unregisterItem(pointType: IntegrationPointType, itemId: string): void {
+      const point = this.points.get(pointType);
+      if (point) {
+        point.items.delete(itemId);
+      }
+    },
+
+    // Remove all items from a module
+    unregisterModule(moduleHandle: string): void {
+      this.points.forEach((point) => {
+        point.items.forEach((entry, id) => {
+          if (entry.moduleHandle === moduleHandle) {
+            point.items.delete(id);
+          }
+        });
+      });
+    },
+
+    reset(): void {
+      this.points.clear();
+    },
+
+    randomID(length = 8): string {
+      return Math.random().toString(36).substring(2, 2 + length);
+    },
+  },
+
+  getters: {
+    // Get all entries for an integration point, sorted by priority
+    getPoint: (state) => (pointType: IntegrationPointType): IntegrationEntry[] => {
+      const point = state.points.get(pointType);
+      if (!point) return [];
+      
+      return Array.from(point.items.values())
+        .filter(entry => entry.visible !== false)
+        .sort((a, b) => (a.priority ?? 100) - (b.priority ?? 100));
+    },
+
+    // Get items only (no groups)
+    getItems: (state) => (pointType: IntegrationPointType): IntegrationItem[] => {
+      const point = state.points.get(pointType);
+      if (!point) return [];
+      
+      return Array.from(point.items.values())
+        .filter((entry): entry is IntegrationItem => !('items' in entry) && entry.visible !== false)
+        .sort((a, b) => (a.priority ?? 100) - (b.priority ?? 100));
+    },
+
+    // Get groups only
+    getGroups: (state) => (pointType: IntegrationPointType): IntegrationGroup[] => {
+      const point = state.points.get(pointType);
+      if (!point) return [];
+      
+      return Array.from(point.items.values())
+        .filter((entry): entry is IntegrationGroup => 'items' in entry && entry.visible !== false)
+        .sort((a, b) => (a.priority ?? 100) - (b.priority ?? 100));
+    },
+
+    // Get a specific item by ID
+    getItemById: (state) => (pointType: IntegrationPointType, itemId: string): IntegrationEntry | undefined => {
+      const point = state.points.get(pointType);
+      return point?.items.get(itemId);
+    },
+  },
+});
diff --git a/core/src/stores/layoutStore.ts b/core/src/stores/layoutStore.ts
new file mode 100644
index 0000000..adf457e
--- /dev/null
+++ b/core/src/stores/layoutStore.ts
@@ -0,0 +1,62 @@
+import { ref } from 'vue';
+import { defineStore } from 'pinia';
+import config from '@KTXC/config';
+
+export type MenuMode = 'apps' | 'settings';
+
+export const useLayoutStore = defineStore('layout', () => {
+  // Loading state
+  const isLoading = ref(false);
+
+  // Sidebar state
+  const sidebarDrawer = ref(config.Sidebar_drawer);
+  const miniSidebar = ref(config.mini_sidebar);
+  const menuMode = ref<MenuMode>('apps');
+
+  // Theme state
+  const theme = ref(config.actTheme);
+  const font = ref(config.fontTheme);
+
+  // Actions
+  function toggleSidebarDrawer() {
+    sidebarDrawer.value = !sidebarDrawer.value;
+  }
+
+  function setMiniSidebar(value: boolean) {
+    miniSidebar.value = value;
+  }
+
+  function setTheme(value: string) {
+    theme.value = value;
+  }
+
+  function setFont(value: string) {
+    font.value = value;
+  }
+
+  function setMenuMode(value: MenuMode) {
+    menuMode.value = value;
+  }
+
+  function toggleMenuMode() {
+    menuMode.value = menuMode.value === 'apps' ? 'settings' : 'apps';
+  }
+
+  return {
+    // State
+    isLoading,
+    sidebarDrawer,
+    miniSidebar,
+    menuMode,
+    theme,
+    font,
+
+    // Actions
+    toggleSidebarDrawer,
+    setMiniSidebar,
+    setMenuMode,
+    toggleMenuMode,
+    setTheme,
+    setFont
+  };
+});
diff --git a/core/src/stores/moduleStore.ts b/core/src/stores/moduleStore.ts
new file mode 100644
index 0000000..47d52f5
--- /dev/null
+++ b/core/src/stores/moduleStore.ts
@@ -0,0 +1,28 @@
+import { defineStore } from 'pinia';
+import type { ModuleCollection, ModuleObject } from '@KTXC/types/moduleTypes';
+
+export const useModuleStore = defineStore('moduleStore', {
+  state: () => ({
+    modules: {} as ModuleCollection,
+  }),
+  actions: {
+    init(data: ModuleCollection) {
+      this.modules = data ?? {};
+    },
+    markBooted(ns: string) {
+      const targetNs = String(ns).toLowerCase();
+      Object.keys(this.modules).forEach((key) => {
+        const mod = this.modules[key] as ModuleObject;
+        if (!mod) return;
+        if (String(mod.namespace || mod.handle).toLowerCase() === targetNs) {
+          mod.booted = true;
+        }
+      });
+    },
+    reset() {
+      this.modules = {};
+    },
+  },
+  getters: {
+  },
+});
diff --git a/core/src/stores/preferencesStore.ts b/core/src/stores/preferencesStore.ts
new file mode 100644
index 0000000..e81e313
--- /dev/null
+++ b/core/src/stores/preferencesStore.ts
@@ -0,0 +1,114 @@
+import { defineStore } from 'pinia';
+
+export interface PreferencesState {
+  theme: string;
+  language: string;
+  timezone: string;
+  date_format: string;
+  time_format: string;
+  week_start: string;
+  default_module?: string; // preferred module handle like "dashboard"
+}
+
+const defaults: PreferencesState = {
+  theme: 'light',
+  language: 'en',
+  timezone: 'UTC',
+  date_format: 'Y-m-d',
+  time_format: 'H:i',
+  week_start: 'Monday',
+  default_module: ''
+};
+
+export const usePreferencesStore = defineStore('preferencesStore', {
+  state: () => ({
+    preferences: { ...defaults } as PreferencesState,
+    locks: [] as string[], // preference keys locked by tenant admin
+    loading: false,
+    error: null as string | null,
+  }),
+  getters: {
+    /**
+     * Check if a specific preference is locked by tenant admin
+     */
+    isLocked: (state) => (key: string): boolean => {
+      return state.locks.includes(key);
+    },
+    /**
+     * Get a single preference value
+     */
+    getPreference: (state) => <K extends keyof PreferencesState>(key: K): PreferencesState[K] => {
+      return state.preferences[key];
+    },
+  },
+  actions: {
+    /**
+     * Initialize preferences from server data (called on app bootstrap)
+     */
+    init(prefs: Partial<PreferencesState> | undefined, locks?: string[]) {
+      this.preferences = { ...defaults, ...(prefs ?? {}) };
+      this.locks = locks ?? [];
+    },
+    /**
+     * Set multiple preferences at once (local state only)
+     */
+    setPreferences(prefs: Partial<PreferencesState>) {
+      // Filter out locked preferences
+      const unlocked: Partial<PreferencesState> = {};
+      for (const [key, value] of Object.entries(prefs)) {
+        if (!this.locks.includes(key)) {
+          (unlocked as Record<string, unknown>)[key] = value;
+        }
+      }
+      this.preferences = { ...this.preferences, ...unlocked };
+    },
+    /**
+     * Set a single preference (local state only)
+     */
+    setPreference<K extends keyof PreferencesState>(key: K, value: PreferencesState[K]) {
+      if (this.locks.includes(key)) {
+        console.warn(`Preference "${key}" is locked by administrator`);
+        return false;
+      }
+      this.preferences[key] = value;
+      return true;
+    },
+    /**
+     * Set default module preference
+     */
+    setDefaultModule(handle: string) {
+      if (this.locks.includes('default_module')) {
+        console.warn('Default module preference is locked by administrator');
+        return false;
+      }
+      this.preferences.default_module = handle || '';
+      return true;
+    },
+    /**
+     * Update locks from server response
+     */
+    setLocks(locks: string[]) {
+      this.locks = locks ?? [];
+    },
+    /**
+     * Reset preferences to defaults (local state only)
+     */
+    reset() {
+      this.preferences = { ...defaults };
+      this.locks = [];
+      this.error = null;
+    },
+    /**
+     * Set loading state
+     */
+    setLoading(loading: boolean) {
+      this.loading = loading;
+    },
+    /**
+     * Set error state
+     */
+    setError(error: string | null) {
+      this.error = error;
+    },
+  },
+});
diff --git a/core/src/stores/tenantStore.ts b/core/src/stores/tenantStore.ts
new file mode 100644
index 0000000..4c96706
--- /dev/null
+++ b/core/src/stores/tenantStore.ts
@@ -0,0 +1,27 @@
+import { defineStore } from 'pinia';
+
+export interface TenantState {
+  id: string | null;
+  domain: string | null;
+  label: string | null;
+}
+
+export const useTenantStore = defineStore('tenantStore', {
+  state: () => ({
+    tenant: null as TenantState | null,
+  }),
+  actions: {
+    init(tenant: Partial<TenantState> | null) {
+      this.tenant = tenant
+        ? {
+            id: tenant.id ?? null,
+            domain: tenant.domain ?? null,
+            label: tenant.label ?? null,
+          }
+        : null;
+    },
+    reset() {
+      this.tenant = null;
+    },
+  },
+});
diff --git a/core/src/stores/userStore.ts b/core/src/stores/userStore.ts
new file mode 100644
index 0000000..7d963a0
--- /dev/null
+++ b/core/src/stores/userStore.ts
@@ -0,0 +1,69 @@
+import { defineStore } from 'pinia';
+import { ref } from 'vue';
+import { router } from '@KTXC/router';
+import { authenticationService } from '@KTXC/services/authenticationService';
+import type { AuthenticatedUser } from '@KTXC/types/authenticationTypes';
+
+const STORAGE_KEY = 'userStore.user';
+
+export const useUserStore = defineStore('userStore', () => {
+  // Load user from localStorage on init
+  const user = ref<AuthenticatedUser | null>(
+    localStorage.getItem(STORAGE_KEY)
+      ? (JSON.parse(localStorage.getItem(STORAGE_KEY)!) as AuthenticatedUser)
+      : null
+  );
+  const returnUrl = ref<string | null>(null);
+
+  /**
+   * Set user after successful authentication
+   */
+  function setUser(authUser: AuthenticatedUser): void {
+    user.value = authUser;
+    localStorage.setItem(STORAGE_KEY, JSON.stringify(authUser));
+  }
+
+  /**
+   * Clear user state (on logout or auth failure)
+   */
+  function clearUser(): void {
+    user.value = null;
+    localStorage.removeItem(STORAGE_KEY);
+  }
+
+  /**
+   * Logout and redirect to login
+   */
+  async function logout(): Promise<void> {
+    try {
+      await authenticationService.logout();
+    } catch (error) {
+      console.warn('Logout request failed, clearing local state:', error);
+    } finally {
+      clearUser();
+      router.push('/login');
+    }
+  }
+
+  /**
+   * Refresh access token
+   */
+  async function refreshToken(): Promise<boolean> {
+    try {
+      await authenticationService.refresh();
+      return true;
+    } catch (error) {
+      await logout();
+      return false;
+    }
+  }
+
+  return {
+    user,
+    returnUrl,
+    setUser,
+    clearUser,
+    logout,
+    refreshToken,
+  };
+});
diff --git a/core/src/types/authenticationTypes.ts b/core/src/types/authenticationTypes.ts
new file mode 100644
index 0000000..066cd58
--- /dev/null
+++ b/core/src/types/authenticationTypes.ts
@@ -0,0 +1,86 @@
+/**
+ * Authentication Method from provider
+ */
+export interface AuthenticationMethod {
+  id: string;
+  method: 'credential' | 'redirect' | 'challenge';
+  label: string;
+  icon?: string;
+}
+
+/**
+ * Authenticated user info
+ */
+export interface AuthenticatedUser {
+  identifier: string;
+  identity: string;
+  label: string;
+  permissions?: string[];
+}
+
+/**
+ * Start response from /auth/start
+ */
+export interface StartResponse {
+  status: 'success';
+  session: string;
+  methods: AuthenticationMethod[];
+}
+
+/**
+ * Identify response from /auth/identify
+ */
+export interface IdentifyResponse {
+  status: 'success';
+  session: string;
+  state: string;
+  methods: AuthenticationMethod[];
+}
+
+/**
+ * Verify response from /auth/verify
+ */
+export interface VerifyResponse {
+  status: 'success' | 'pending';
+  user?: AuthenticatedUser;
+  session?: string;
+  methods?: AuthenticationMethod[];
+  message?: string;
+  error?: string;
+  error_code?: string;
+}
+
+/**
+ * Redirect response from /auth/redirect
+ */
+export interface RedirectResponse {
+  status: 'redirect';
+  redirect_url: string;
+}
+
+/**
+ * Challenge response from /auth/challenge
+ */
+export interface ChallengeResponse {
+  status: 'challenge';
+  session: string;
+  challenge?: {
+    type?: string;
+    message?: string;
+    digits?: number;
+    [key: string]: unknown;
+  };
+}
+
+/**
+ * Session status from /auth/status
+ */
+export interface SessionStatus {
+  status: 'success';
+  session: string;
+  state: string;
+  methods: AuthenticationMethod[];
+  user?: {
+    identity?: string;
+  };
+}
\ No newline at end of file
diff --git a/core/src/types/env.d.ts b/core/src/types/env.d.ts
new file mode 100644
index 0000000..11f02fe
--- /dev/null
+++ b/core/src/types/env.d.ts
@@ -0,0 +1 @@
+/// <reference types="vite/client" />
diff --git a/core/src/types/integrationTypes.ts b/core/src/types/integrationTypes.ts
new file mode 100644
index 0000000..fbdf0c3
--- /dev/null
+++ b/core/src/types/integrationTypes.ts
@@ -0,0 +1,45 @@
+// Integration point types - extensible via string
+export type IntegrationPointType = 
+  | 'app_menu'              // Main applications menu (calendar, contacts, etc.)
+  | 'admin_settings_menu'   // Admin-only settings menu
+  | 'user_settings_menu'    // User's personal settings menu
+  | 'profile_menu'          // Top-right profile dropdown (quick actions)
+  | string;                 // Allow custom integration points
+
+export type IntegrationGroupStyle = 'none' | 'static' | 'dynamic' | null;
+
+export interface IntegrationItem {
+  id: string;
+  moduleHandle: string;
+  priority?: number;
+  label?: string;
+  caption?: string;
+  icon?: string;
+  to?: string;
+  toType?: 'internal' | 'external';
+  component?: () => Promise<any>;
+  badge?: string | number | null;
+  badgeColor?: string;
+  visible?: boolean;
+  disabled?: boolean;
+  meta?: Record<string, any>;
+}
+
+export interface IntegrationGroup {
+  id: string;
+  moduleHandle: string;
+  priority?: number;
+  label?: string;
+  caption?: string;
+  icon?: string;
+  style?: IntegrationGroupStyle;
+  items: IntegrationItem[];
+  visible?: boolean;
+  meta?: Record<string, any>;
+}
+
+export type IntegrationEntry = IntegrationItem | IntegrationGroup;
+
+export interface IntegrationPoint {
+  items: Map<string, IntegrationEntry>;
+}
\ No newline at end of file
diff --git a/core/src/types/layouts/layoutSystemMenu.ts b/core/src/types/layouts/layoutSystemMenu.ts
new file mode 100644
index 0000000..9ea723f
--- /dev/null
+++ b/core/src/types/layouts/layoutSystemMenu.ts
@@ -0,0 +1,30 @@
+export interface LayoutSystemMenuItem {
+  header?: string;
+  title?: string;
+  icon?: object;
+  to?: string | object;
+  href?: string;
+  target?: string;
+  divider?: boolean;
+  children?: LayoutSystemMenuItem[];
+  badgeContent?: string | number;
+  badgeColor?: string;
+  badgeVariant?: string;
+  badgeIcon?: string;
+  chip?: string | number;
+  chipColor?: string;
+  chipVariant?: string;
+  chipIcon?: string;
+  disabled?: boolean;
+  type?: string;
+  subCaption?: string;
+  meta?: { [key: string]: any };
+}
+
+export interface LayoutSystemMenuGroup {
+  handle: string;
+  style: string;
+  label: string;
+  icon: object;
+  items: LayoutSystemMenuItem[];
+}
\ No newline at end of file
diff --git a/core/src/types/moduleTypes.ts b/core/src/types/moduleTypes.ts
new file mode 100644
index 0000000..991da3a
--- /dev/null
+++ b/core/src/types/moduleTypes.ts
@@ -0,0 +1,51 @@
+import type { IntegrationGroupStyle } from './integrationTypes';
+
+export interface ModuleObject {
+  handle: string;
+  namespace: string;
+  version: string;
+  label: string;
+  author?: string;
+  description?: string;
+  boot?: string; // relative path like "js/Dashboard.js"
+  booted?: boolean; // set true once the module plugin is loaded
+}
+
+export type ModuleCollection = Record<string, ModuleObject>;
+
+// Module-side integration types (before prefixing by the loader)
+export interface ModuleIntegrationItem {
+  id: string;
+  type?: 'item';
+  label: string;
+  caption?: string;
+  icon?: string;
+  path?: string;
+  to?: string;
+  toType?: 'internal' | 'external';
+  priority?: number;
+  component?: () => Promise<any>;
+  visible?: boolean;
+  disabled?: boolean;
+  meta?: Record<string, any>;
+}
+
+export interface ModuleIntegrationGroup {
+  id: string;
+  type: 'group';
+  label?: string;
+  caption?: string;
+  icon?: string;
+  style?: IntegrationGroupStyle;
+  priority?: number;
+  items: ModuleIntegrationItem[];
+  meta?: Record<string, any>;
+}
+
+export type ModuleIntegrationEntry = ModuleIntegrationItem | ModuleIntegrationGroup;
+
+export interface ModuleIntegrations {
+  system_menu?: ModuleIntegrationEntry[];
+  user_menu?: ModuleIntegrationEntry[];
+  [key: string]: ModuleIntegrationEntry[] | undefined;
+}
diff --git a/core/src/types/user/Identity.ts b/core/src/types/user/Identity.ts
new file mode 100644
index 0000000..34fb860
--- /dev/null
+++ b/core/src/types/user/Identity.ts
@@ -0,0 +1,7 @@
+
+export interface Identity {
+  identifier: string;
+  identity: string;
+  label: string;
+  email: string;
+}
diff --git a/core/src/utils/helpers/fetch-wrapper-core.ts b/core/src/utils/helpers/fetch-wrapper-core.ts
new file mode 100644
index 0000000..578219d
--- /dev/null
+++ b/core/src/utils/helpers/fetch-wrapper-core.ts
@@ -0,0 +1,161 @@
+/**
+ * Core fetch wrapper - reusable across modules
+ * Does not depend on stores to avoid bundling issues in library builds
+ */
+
+export interface FetchWrapperOptions {
+  /**
+   * Optional callback to handle logout on auth failure
+   * If not provided, only logs error without redirecting
+   */
+  onLogout?: () => void | Promise<void>;
+  /**
+   * Enable automatic retry of failed requests after token refresh
+   * @default true
+   */
+  autoRetry?: boolean;
+}
+
+// Mutex to prevent multiple simultaneous refresh attempts
+class RefreshMutex {
+  private promise: Promise<boolean> | null = null;
+
+  async acquire(): Promise<boolean> {
+    if (this.promise) {
+      return this.promise;
+    }
+
+    this.promise = this.performRefresh();
+    const result = await this.promise;
+    this.promise = null;
+    return result;
+  }
+
+  private async performRefresh(): Promise<boolean> {
+    try {
+      const response = await fetch('/security/refresh', {
+        method: 'POST',
+        credentials: 'include'
+      });
+      
+      return response.ok;
+    } catch (error) {
+      console.error('Token refresh failed:', error);
+      return false;
+    }
+  }
+}
+
+const tokenRefreshMutex = new RefreshMutex();
+
+export interface RequestCallOptions {
+  /**
+   * Override autoRetry for this specific request
+   * @default true
+   */
+  autoRetry?: boolean;
+  /**
+   * Skip calling onLogout callback on 401/403 errors
+   * Useful for authentication endpoints where 401 means invalid credentials, not session expiry
+   * @default false
+   */
+  skipLogoutOnError?: boolean;
+}
+
+export function createFetchWrapper(options: FetchWrapperOptions = {}) {
+  const { autoRetry: defaultAutoRetry = true } = options;
+  
+  return {
+    get: request('GET', options, defaultAutoRetry),
+    post: request('POST', options, defaultAutoRetry),
+    put: request('PUT', options, defaultAutoRetry),
+    delete: request('DELETE', options, defaultAutoRetry)
+  };
+}
+
+interface RequestOptions {
+  method: string;
+  headers: Record<string, string>;
+  body?: string;
+  credentials: 'include';
+}
+
+function request(method: string, options: FetchWrapperOptions, defaultAutoRetry: boolean) {
+  return async (url: string, body?: object, callOptions?: RequestCallOptions): Promise<any> => {
+    const autoRetry = callOptions?.autoRetry ?? defaultAutoRetry;
+    
+    const requestOptions: RequestOptions = {
+      method,
+      headers: getHeaders(url),
+      credentials: 'include'
+    };
+    
+    if (body) {
+      requestOptions.headers['Content-Type'] = 'application/json';
+      requestOptions.body = JSON.stringify(body);
+    }
+    
+    try {
+      const response = await fetch(url, requestOptions);
+      
+      if (response.status === 401 && autoRetry) {
+        // Try to refresh the token
+        const refreshSuccess = await tokenRefreshMutex.acquire();
+        
+        if (refreshSuccess) {
+          // Retry the original request with the new token
+          const retryResponse = await fetch(url, requestOptions);
+          return handleResponse(retryResponse, options, callOptions?.skipLogoutOnError);
+        }
+      }
+      
+      return handleResponse(response, options, callOptions?.skipLogoutOnError);
+    } catch (error) {
+      console.error('API error:', error);
+      throw error;
+    }
+  };
+}
+
+function getHeaders(_url: string): Record<string, string> {
+  const headers: Record<string, string> = {};
+  
+  // Add CSRF token if available
+  const csrfToken = getCsrfTokenFromCookie();
+  if (csrfToken) {
+    headers['X-CSRF-TOKEN'] = csrfToken;
+  }
+  
+  return headers;
+}
+
+function getCsrfTokenFromCookie(): string | null {
+  if (typeof document === 'undefined') return null;
+  
+  const csrfCookie = document.cookie
+    .split('; ')
+    .find(row => row.startsWith('X-CSRF-TOKEN='));
+    
+  return csrfCookie ? csrfCookie.split('=')[1] : null;
+}
+
+async function handleResponse(response: Response, options: FetchWrapperOptions, skipLogoutOnError?: boolean): Promise<any> {
+  const text = await response.text();
+  const data = text && JSON.parse(text);
+
+  if (!response.ok) {
+    if ([401, 403].includes(response.status) && !skipLogoutOnError) {
+      // Call logout callback if provided
+      if (options.onLogout) {
+        await options.onLogout();
+      } else {
+        console.error('Authentication failed. Please log in again.');
+      }
+    }
+
+    const error: string = (data && data.message) || response.statusText;
+    throw new Error(error);
+  }
+
+  return data;
+}
diff --git a/core/src/utils/helpers/fetch-wrapper.ts b/core/src/utils/helpers/fetch-wrapper.ts
new file mode 100644
index 0000000..4e92c39
--- /dev/null
+++ b/core/src/utils/helpers/fetch-wrapper.ts
@@ -0,0 +1,10 @@
+import { useUserStore } from '@KTXC/stores/userStore';
+import { createFetchWrapper } from './fetch-wrapper-core';
+
+// Create fetch wrapper with user store logout callback
+export const fetchWrapper = createFetchWrapper({
+  onLogout: () => {
+    const { logout } = useUserStore();
+    logout();
+  }
+});
diff --git a/core/src/utils/helpers/shared.ts b/core/src/utils/helpers/shared.ts
new file mode 100644
index 0000000..1889e05
--- /dev/null
+++ b/core/src/utils/helpers/shared.ts
@@ -0,0 +1,6 @@
+/**
+ * Shared utilities entry point for external modules
+ * This file is built separately and exposed via import map
+ */
+
+export { createFetchWrapper, type FetchWrapperOptions } from './fetch-wrapper-core';
diff --git a/core/src/utils/modules.ts b/core/src/utils/modules.ts
new file mode 100644
index 0000000..bcb2cf1
--- /dev/null
+++ b/core/src/utils/modules.ts
@@ -0,0 +1,103 @@
+import type { App } from 'vue';
+import { router } from '@KTXC/router';
+import { useModuleStore } from '@KTXC/stores/moduleStore';
+import { useIntegrationStore } from '@KTXC/stores/integrationStore';
+
+function installModuleCSS(moduleHandle: string, cssPaths: string | string[]): void {
+  const cssFiles = Array.isArray(cssPaths) ? cssPaths : [cssPaths];
+  cssFiles.forEach((cssFile: string) => {
+    const cssPath = `/modules/${moduleHandle}/${cssFile}`;
+    const existingLink = document.querySelector(`link[href="${cssPath}"]`);
+    if (!existingLink) {
+      const link = document.createElement('link');
+      link.rel = 'stylesheet';
+      link.href = cssPath;
+      link.onload = () => {
+        console.log(`Module Loader - Loaded CSS for ${moduleHandle}: ${cssFile}`);
+      };
+      link.onerror = () => {
+        console.error(`Module Loader - Failed to load CSS for ${moduleHandle}: ${cssPath}`);
+      };
+      document.head.appendChild(link);
+    }
+  });
+}
+
+function installModuleRoutes(moduleHandle: string, routes: any[]): void {
+  routes.forEach((route: any) => {
+    // Prefix route name with module handle for safety
+    const prefixedRoute = {
+      ...route,
+      path: `/m/${moduleHandle}${route.path}`
+    };
+    // Prefix the route name if it exists
+    if (route.name) {
+      prefixedRoute.name = `${moduleHandle}.${route.name}`;
+    }
+    // Recursively prefix child route names
+    if (route.children && Array.isArray(route.children)) {
+      prefixedRoute.children = route.children.map((child: any) => ({
+        ...child,
+        name: child.name ? `${moduleHandle}.${child.name}` : undefined
+      }));
+    }
+    
+    router.addRoute('private', prefixedRoute);
+  });
+}
+
+function installModuleIntegrations(
+  moduleHandle: string,
+  integrations: Record<string, any[]>
+): void {
+  const integrationStore = useIntegrationStore();
+  integrationStore.registerModuleIntegrations(moduleHandle, integrations);
+}
+
+export async function initializeModules(app: App): Promise<void> {
+  const moduleStore = useModuleStore();
+
+  // First, dynamically load modules based on moduleStore boot paths
+  const availableModules = moduleStore.modules;
+  const loadPromises: Promise<void>[] = [];
+
+  for (const [moduleId, moduleInfo] of Object.entries(availableModules)) {
+    if (moduleInfo.handle && moduleInfo.boot && !moduleInfo.booted) {
+      const moduleHandle = moduleInfo.handle;
+      const moduleUrl = `/modules/${moduleInfo.handle}/${moduleInfo.boot}`;
+      console.log(`Module Loader - Loading ${moduleInfo.handle} from ${moduleUrl}`);
+
+      const loadPromise = import(/* @vite-ignore */ moduleUrl)
+        .then((module) => {
+          // Load CSS if module explicitly exports css path(s)
+          if (module.css) {
+            installModuleCSS(moduleInfo.handle, module.css);
+          }
+          // install module
+          console.log(`Module Loader - Installing ${moduleInfo.handle}`);
+          if (module.default && typeof module.default.install === 'function') {
+            app.use(module.default);
+          }
+          // prefix routes with /m/{moduleHandle}
+          console.log(`Module Loader - Installing Routes ${moduleInfo.handle}`);
+          if (module.routes) {
+            installModuleRoutes(moduleHandle, module.routes);
+          }
+          // register integrations
+          console.log(`Module Loader - Installing Integrations ${moduleInfo.handle}`);
+          if (module.integrations) {
+            installModuleIntegrations(moduleHandle, module.integrations);
+          }
+        })
+        .catch((error) => {
+          console.error(`Failed to load module ${moduleId} from ${moduleUrl}:`, error);
+        });
+      loadPromises.push(loadPromise);
+    } else if (!moduleInfo.boot) {
+      console.warn(`No boot path specified for module: ${moduleId}`);
+    }
+  }
+
+  // Wait for all dynamic loading to complete
+  await Promise.all(loadPromises);
+}
\ No newline at end of file
diff --git a/core/src/views/PrivateLayout.vue b/core/src/views/PrivateLayout.vue
new file mode 100644
index 0000000..d9022da
--- /dev/null
+++ b/core/src/views/PrivateLayout.vue
@@ -0,0 +1,21 @@
+<script setup lang="ts">
+import { RouterView } from 'vue-router';
+import LayoutHeader from '@KTXC/layouts/header/LayoutHeader.vue';
+import { useLayoutStore } from '@KTXC/stores/layoutStore';
+import LayoutSystemMenu from '@KTXC/layouts/menus/LayoutSystemMenu.vue';
+
+const layoutStore = useLayoutStore();
+</script>
+
+<template>
+  <v-locale-provider>
+    <v-app :class="[layoutStore.miniSidebar ? 'mini-sidebar' : '']">  
+      <LayoutHeader />
+      <LayoutSystemMenu />
+
+      <v-main class="page-wrapper">
+        <RouterView />
+      </v-main>
+    </v-app>
+  </v-locale-provider>
+</template>
diff --git a/core/src/views/PublicLayout.vue b/core/src/views/PublicLayout.vue
new file mode 100644
index 0000000..b174a3e
--- /dev/null
+++ b/core/src/views/PublicLayout.vue
@@ -0,0 +1,26 @@
+<script setup lang="ts">
+import { RouterView } from 'vue-router';
+import LayoutFooter from '@KTXC/layouts/footer/LayoutFooter.vue';
+import { useLayoutStore } from '@KTXC/stores/layoutStore';
+
+const layoutStore = useLayoutStore();
+</script>
+
+<template>
+  <v-locale-provider>
+    <v-app :class="[layoutStore.miniSidebar ? 'mini-sidebar' : '']">  
+      <v-main class="page-wrapper">
+        <v-container fluid>
+          <div>
+            <RouterView />
+          </div>
+        </v-container>
+        <v-container fluid class="pt-0">
+          <div>
+            <LayoutFooter />
+          </div>
+        </v-container>
+      </v-main>
+    </v-app>
+  </v-locale-provider>
+</template>
diff --git a/core/src/views/authentication/AuthFooter.vue b/core/src/views/authentication/AuthFooter.vue
new file mode 100644
index 0000000..72c9440
--- /dev/null
+++ b/core/src/views/authentication/AuthFooter.vue
@@ -0,0 +1,38 @@
+<script setup lang="ts">
+import { shallowRef } from 'vue';
+
+const footerLink = shallowRef([
+  {
+    title: 'Terms and Conditions'
+  },
+  {
+    title: 'Privacy Policy'
+  },
+  {
+    title: 'CA Privacy Notice'
+  }
+]);
+</script>
+<template>
+  <v-footer class="px-0 pt-2">
+    <v-row justify="center" no-gutters>
+      <v-col cols="12" md="6" class="text-md-left text-center">
+        <p class="text-subtitle-2 text-lightText mb-md-0 mb-4">
+          This site is protected by
+          <a href="/" class="text-primary">Privacy Policy</a>
+        </p>
+      </v-col>
+      <v-col class="d-flex flex-md-row flex-column justify-md-end align-center" cols="12" md="6">
+        <a
+          v-for="(item, i) in footerLink"
+          :key="i"
+          class="mx-md-3 mx-2 mb-md-0 mb-2 text-subtitle-2 text-lightText"
+          href="https://codedthemes.com"
+          target="_blank"
+        >
+          {{ item.title }}
+        </a>
+      </v-col>
+    </v-row>
+  </v-footer>
+</template>
diff --git a/core/src/views/authentication/AuthLogin.vue b/core/src/views/authentication/AuthLogin.vue
new file mode 100644
index 0000000..5d6600d
--- /dev/null
+++ b/core/src/views/authentication/AuthLogin.vue
@@ -0,0 +1,586 @@
+<script setup lang="ts">
+import { ref, onMounted, computed, watch } from 'vue';
+import { useRoute } from 'vue-router';
+import { useUserStore } from '@KTXC/stores/userStore';
+import { authenticationService } from '@KTXC/services/authenticationService';
+import type { AuthenticationMethod, VerifyResponse } from '@KTXC/types/authenticationTypes';
+import { Form } from 'vee-validate';
+
+const route = useRoute();
+const userStore = useUserStore();
+
+// Login flow phases
+type LoginPhase = 'identity' | 'method' | 'mfa';
+
+// Form state
+const identity = ref('');
+const authResponse = ref(''); // password, code, etc.
+const showPassword = ref(false);
+const rememberMe = ref(false);
+
+// Auth state
+const session = ref<string | null>(null);
+const phase = ref<LoginPhase>('identity');
+const allMethods = ref<AuthenticationMethod[]>([]);
+const availableMethods = ref<AuthenticationMethod[]>([]);
+const selectedMethod = ref<AuthenticationMethod | null>(null);
+const loading = ref(true);
+const submitting = ref(false);
+const ssoLoading = ref<string | null>(null);
+const error = ref<string | null>(null);
+const challengeSent = ref(false);
+
+// Separate methods by type
+const redirectMethods = computed(() =>
+  allMethods.value.filter(m => m.method === 'redirect')
+);
+
+const nonRedirectMethods = computed(() =>
+  availableMethods.value.filter(m => m.method !== 'redirect')
+);
+
+const hasNonRedirectMethods = computed(() =>
+  allMethods.value.some(m => m.method !== 'redirect')
+);
+
+// Computed UI states
+const showIdentityForm = computed(() => phase.value === 'identity');
+const showAuthForm = computed(() => phase.value === 'method' && selectedMethod.value !== null);
+const showMfaForm = computed(() => phase.value === 'mfa');
+const showSsoButtons = computed(() => redirectMethods.value.length > 0 && phase.value === 'identity');
+
+// Title based on phase
+const pageTitle = computed(() => {
+  switch (phase.value) {
+    case 'identity': return 'Login';
+    case 'method': return 'Verify Your Identity';
+    case 'mfa': return 'Additional Verification';
+    default: return 'Login';
+  }
+});
+
+// Input label/type based on selected method
+const authInputLabel = computed(() => {
+  if (!selectedMethod.value) return 'Password';
+  return selectedMethod.value.method === 'credential' ? 'Password' : 'Verification Code';
+});
+
+const authInputType = computed(() => {
+  if (!selectedMethod.value) return 'password';
+  return selectedMethod.value.method === 'credential' ? 'password' : 'text';
+});
+
+// Validation rules
+const identityRules = [
+  (v: string) => !!v.trim() || 'Email is required',
+  (v: string) => !/\s/.test(v.trim()) || 'Email must not contain spaces',
+  (v: string) => /.+@.+\..+/.test(v.trim()) || 'Email must be valid'
+];
+
+const authResponseRules = [
+  (v: string) => !!v || 'This field is required',
+];
+
+// Initialize authentication
+onMounted(async () => {
+  try {
+    // Check for error from SSO callback
+    const errorParam = route.query.error as string;
+    if (errorParam) {
+      error.value = decodeURIComponent(errorParam);
+    }
+
+    // Check for MFA session from redirect
+    const mfaSession = route.query.session as string;
+    if (mfaSession) {
+      session.value = mfaSession;
+      await loadSessionStatus();
+    } else {
+      // Initialize new auth session
+      await initSession();
+    }
+
+    // Auto-trigger SSO if provider param present
+    const providerParam = route.query.provider as string;
+    if (providerParam && phase.value === 'identity') {
+      const provider = allMethods.value.find(m => m.id === providerParam);
+      if (provider && provider.method === 'redirect') {
+        await initiateSsoLogin(provider.id);
+      }
+    }
+  } catch (e: any) {
+    error.value = e.message || 'Failed to initialize authentication';
+  } finally {
+    loading.value = false;
+  }
+});
+
+// Watch for method selection changes (for challenge-based methods)
+watch(selectedMethod, async (newMethod) => {
+  if (newMethod && newMethod.method === 'challenge' && !challengeSent.value) {
+    // Initiate challenge for methods that need it (SMS, email, TOTP)
+    await initiateChallenge(newMethod.id);
+  }
+});
+
+// Initialize a new session
+async function initSession() {
+  const result = await authenticationService.start();
+  session.value = result.session;
+  allMethods.value = result.methods;
+  phase.value = 'identity';
+}
+
+// Load existing session status (for MFA continuation)
+async function loadSessionStatus() {
+  if (!session.value) return;
+  
+  try {
+    const status = await authenticationService.getStatus(session.value);
+    
+    if (status.state === 'secondary_pending') {
+      phase.value = 'mfa';
+      availableMethods.value = status.methods;
+      if (availableMethods.value.length > 0) {
+        selectedMethod.value = availableMethods.value[0];
+      }
+    } else if (status.state === 'identified') {
+      // Session has identity, show method selection
+      phase.value = 'method';
+      availableMethods.value = status.methods;
+      autoSelectMethod();
+    } else {
+      // Session not in expected state, reinitialize
+      await initSession();
+    }
+  } catch (e) {
+    // Session expired or invalid, reinitialize
+    await initSession();
+  }
+}
+
+// Handle identity submission (step 1)
+async function handleIdentitySubmit(_values: any, { setErrors }: any) {
+  if (!session.value) return;
+  
+  error.value = null;
+  submitting.value = true;
+
+  try {
+    const result = await authenticationService.identify(session.value, identity.value.trim());
+    
+    session.value = result.session;
+    availableMethods.value = result.methods;
+    phase.value = 'method';
+    
+    autoSelectMethod();
+  } catch (e: any) {
+    const errorMessage = e.message || 'Failed to continue. Please try again.';
+    setErrors({ apiError: errorMessage });
+  } finally {
+    submitting.value = false;
+  }
+}
+
+// Auto-select method if only one available
+function autoSelectMethod() {
+  const methods = nonRedirectMethods.value;
+  if (methods.length === 1) {
+    selectedMethod.value = methods[0];
+  } else if (methods.length > 1) {
+    // Default to credential if available
+    const credMethod = methods.find(m => m.method === 'credential');
+    selectedMethod.value = credMethod || methods[0];
+  }
+}
+
+// Handle method selection
+function selectMethod(method: AuthenticationMethod) {
+  selectedMethod.value = method;
+  authResponse.value = '';
+  challengeSent.value = false;
+}
+
+// Initiate a challenge (for SMS, email, TOTP)
+async function initiateChallenge(methodId: string) {
+  if (!session.value) return;
+
+  try {
+    await authenticationService.beginChallenge(session.value, methodId);
+    challengeSent.value = true;
+  } catch (e: any) {
+    // Challenge initiation failed - show generic error
+    error.value = e.message || 'Failed to send verification code.';
+  }
+}
+
+// Handle authentication response submission (step 2)
+async function handleAuthSubmit(_values: any, { setErrors }: any) {
+  if (!session.value || !selectedMethod.value) return;
+
+  error.value = null;
+  submitting.value = true;
+
+  try {
+    const result = await authenticationService.verify(
+      session.value,
+      selectedMethod.value.id,
+      authResponse.value
+      // identity is already in session from identify() step
+    );
+
+    handleVerifyResponse(result);
+  } catch (e: any) {
+    const errorMessage = e.message || 'Verification failed. Please try again.';
+    setErrors({ apiError: errorMessage });
+  } finally {
+    submitting.value = false;
+  }
+}
+
+// Handle MFA verification (step 3)
+async function handleMfaSubmit(_values: any, { setErrors }: any) {
+  if (!session.value || !selectedMethod.value) return;
+
+  error.value = null;
+  submitting.value = true;
+
+  try {
+    const result = await authenticationService.verify(
+      session.value,
+      selectedMethod.value.id,
+      authResponse.value
+    );
+
+    handleVerifyResponse(result);
+  } catch (e: any) {
+    const errorMessage = e.message || 'Verification failed. Please try again.';
+    setErrors({ apiError: errorMessage });
+  } finally {
+    submitting.value = false;
+  }
+}
+
+// Handle verify response
+function handleVerifyResponse(result: VerifyResponse) {
+  if (result.status === 'success' && result.user) {
+    // Authentication complete
+    userStore.setUser(result.user);
+    window.location.replace('/');
+  } else if (result.status === 'pending') {
+    // MFA required
+    phase.value = 'mfa';
+    availableMethods.value = result.methods || [];
+    if (result.session) {
+      session.value = result.session;
+    }
+    if (availableMethods.value.length > 0) {
+      selectedMethod.value = availableMethods.value[0];
+    }
+    authResponse.value = '';
+    challengeSent.value = false;
+  } else if (result.error) {
+    error.value = result.error;
+  }
+}
+
+// Initiate SSO login
+async function initiateSsoLogin(methodId: string) {
+  if (!session.value) return;
+
+  ssoLoading.value = methodId;
+  error.value = null;
+
+  try {
+    const result = await authenticationService.beginRedirect(session.value, methodId, '/');
+    window.location.href = result.redirect_url;
+  } catch (e: any) {
+    error.value = e.message || 'Failed to initiate SSO login';
+    ssoLoading.value = null;
+  }
+}
+
+// Go back to identity phase
+function backToIdentity() {
+  phase.value = 'identity';
+  selectedMethod.value = null;
+  authResponse.value = '';
+  challengeSent.value = false;
+  error.value = null;
+  
+  // Reinitialize session
+  initSession();
+}
+
+function getMethodIcon(method: AuthenticationMethod): string {
+  if (method.icon) return method.icon;
+  switch (method.method) {
+    case 'credential': return 'mdi-key';
+    case 'challenge': return 'mdi-shield-check';
+    case 'redirect': return 'mdi-login';
+    default: return 'mdi-shield-check';
+  }
+}
+</script>
+
+<template>
+  <div class="d-flex justify-space-between align-center">
+    <h3 class="text-h3 text-center mb-0">{{ pageTitle }}</h3>
+  </div>
+
+  <!-- Loading state -->
+  <div v-if="loading" class="mt-7 text-center">
+    <v-progress-circular indeterminate color="primary"></v-progress-circular>
+    <p class="mt-2 text-medium-emphasis">Loading login options...</p>
+  </div>
+
+  <template v-else>
+    <!-- Error Alert -->
+    <v-alert v-if="error" type="error" class="mt-4" closable @click:close="error = null">
+      {{ error }}
+    </v-alert>
+
+    <!-- Phase 1: Identity Input -->
+    <template v-if="showIdentityForm">
+      <!-- Identity Form -->
+      <Form 
+        v-if="hasNonRedirectMethods"
+        @submit="handleIdentitySubmit" 
+        class="loginForm" 
+        :class="{ 'mt-7': !showSsoButtons }" 
+        v-slot="{ errors, isSubmitting }"
+      >
+        <div class="mb-6">
+          <v-label>Email Address</v-label>
+          <v-text-field
+            v-model="identity"
+            :rules="identityRules"
+            class="mt-2"
+            required
+            hide-details="auto"
+            variant="outlined"
+            color="primary"
+            autocomplete="email"
+            autofocus
+          ></v-text-field>
+        </div>
+
+        <v-btn 
+          color="primary" 
+          :loading="isSubmitting || submitting" 
+          block 
+          class="mt-5" 
+          variant="flat" 
+          size="large" 
+          type="submit"
+        >
+          Continue
+        </v-btn>
+
+        <!-- SSO Buttons -->
+        <div v-if="showSsoButtons" class="mt-7">
+          <v-btn
+            v-for="method in redirectMethods"
+            :key="method.id"
+            color="secondary"
+            :loading="ssoLoading === method.id"
+            :disabled="ssoLoading !== null"
+            block
+            class="mb-3"
+            variant="outlined"
+            size="large"
+            @click="initiateSsoLogin(method.id)"
+          >
+            <v-icon v-if="method.icon" start>{{ method.icon }}</v-icon>
+            {{ method.label }}
+          </v-btn>
+        </div>
+
+        <div v-if="errors.apiError" class="mt-2">
+          <v-alert color="error">{{ errors.apiError }}</v-alert>
+        </div>
+      </Form>
+
+      <!-- No providers -->
+      <div v-if="!hasNonRedirectMethods && !showSsoButtons" class="mt-7 text-center">
+        <v-alert type="warning">
+          No login methods are currently available. Please contact your administrator.
+        </v-alert>
+      </div>
+    </template>
+
+    <!-- Phase 2: Method Selection & Authentication -->
+    <template v-else-if="showAuthForm && !showMfaForm">
+      <p class="text-body-1 text-medium-emphasis mt-4 mb-2">
+        Signing in as <strong>{{ identity }}</strong>
+      </p>
+
+      <!-- Method Selector (if multiple methods) -->
+      <div v-if="nonRedirectMethods.length > 1" class="mb-4">
+        <v-label class="mb-2">Choose verification method</v-label>
+        <v-btn-toggle
+          :model-value="selectedMethod?.id"
+          mandatory
+          variant="outlined"
+          divided
+          class="w-100"
+        >
+          <v-btn
+            v-for="method in nonRedirectMethods"
+            :key="method.id"
+            :value="method.id"
+            @click="selectMethod(method)"
+            class="flex-grow-1"
+          >
+            <v-icon start>{{ getMethodIcon(method) }}</v-icon>
+            {{ method.label }}
+          </v-btn>
+        </v-btn-toggle>
+      </div>
+
+      <!-- Auth Response Form -->
+      <Form 
+        @submit="handleAuthSubmit" 
+        class="loginForm mt-4" 
+        v-slot="{ errors, isSubmitting }"
+      >
+        <div class="mb-6">
+          <v-label>{{ authInputLabel }}</v-label>
+          <v-text-field
+            v-model="authResponse"
+            :rules="authResponseRules"
+            :type="authInputType === 'password' && !showPassword ? 'password' : 'text'"
+            class="mt-2"
+            required
+            hide-details="auto"
+            variant="outlined"
+            color="primary"
+            :autocomplete="selectedMethod?.method === 'credential' ? 'current-password' : 'one-time-code'"
+            :inputmode="selectedMethod?.method !== 'credential' ? 'numeric' : undefined"
+            autofocus
+          >
+            <template v-if="authInputType === 'password'" v-slot:append-inner>
+              <v-btn
+                variant="text"
+                density="compact"
+                :icon="showPassword ? 'mdi-eye-off' : 'mdi-eye'"
+                @click="showPassword = !showPassword"
+              ></v-btn>
+            </template>
+          </v-text-field>
+        </div>
+
+        <div v-if="selectedMethod?.method === 'credential'" class="d-flex align-center mt-4 mb-7 mb-sm-0">
+          <v-checkbox
+            v-model="rememberMe"
+            label="Keep me logged in"
+            color="primary"
+            hide-details
+          ></v-checkbox>
+          <div class="ml-auto">
+            <router-link to="/forgot-password" class="text-primary text-decoration-none">
+              Forgot Password?
+            </router-link>
+          </div>
+        </div>
+
+        <v-btn 
+          color="primary" 
+          :loading="isSubmitting || submitting" 
+          block 
+          class="mt-5" 
+          variant="flat" 
+          size="large" 
+          type="submit"
+        >
+          {{ selectedMethod?.method === 'credential' ? 'Login' : 'Verify' }}
+        </v-btn>
+
+        <v-btn 
+          variant="text" 
+          block 
+          class="mt-3" 
+          @click="backToIdentity"
+        >
+          Use different account
+        </v-btn>
+
+        <div v-if="errors.apiError" class="mt-2">
+          <v-alert color="error">{{ errors.apiError }}</v-alert>
+        </div>
+      </Form>
+    </template>
+
+    <!-- Phase 3: MFA Verification -->
+    <template v-if="showMfaForm">
+      <p class="text-body-1 text-medium-emphasis mt-4 mb-6">
+        Additional verification is required. Please enter the code from your {{ selectedMethod?.label || 'authenticator' }}.
+      </p>
+
+      <!-- MFA Method Selector (if multiple) -->
+      <v-select
+        v-if="availableMethods.length > 1"
+        v-model="selectedMethod"
+        :items="availableMethods"
+        item-title="label"
+        item-value="id"
+        return-object
+        label="Verification Method"
+        variant="outlined"
+        class="mb-4"
+      ></v-select>
+
+      <Form @submit="handleMfaSubmit" v-slot="{ errors, isSubmitting }">
+        <div class="mb-6">
+          <v-label>Verification Code</v-label>
+          <v-text-field
+            v-model="authResponse"
+            :rules="authResponseRules"
+            type="text"
+            class="mt-2"
+            required
+            hide-details="auto"
+            variant="outlined"
+            color="primary"
+            autocomplete="one-time-code"
+            inputmode="numeric"
+            autofocus
+          ></v-text-field>
+        </div>
+
+        <v-btn 
+          color="primary" 
+          :loading="isSubmitting || submitting" 
+          block 
+          class="mt-5" 
+          variant="flat" 
+          size="large" 
+          type="submit"
+        >
+          Verify
+        </v-btn>
+
+        <v-btn 
+          variant="text" 
+          block 
+          class="mt-3" 
+          @click="backToIdentity"
+        >
+          Back to Login
+        </v-btn>
+
+        <div v-if="errors.apiError" class="mt-2">
+          <v-alert color="error">{{ errors.apiError }}</v-alert>
+        </div>
+      </Form>
+    </template>
+  </template>
+</template>
+
+<style lang="scss">
+.loginForm {
+  .v-text-field .v-field--active input {
+    font-weight: 500;
+  }
+}
+</style>
diff --git a/core/src/views/authentication/LoginPage.vue b/core/src/views/authentication/LoginPage.vue
new file mode 100644
index 0000000..27db103
--- /dev/null
+++ b/core/src/views/authentication/LoginPage.vue
@@ -0,0 +1,53 @@
+<script setup lang="ts">
+import Logo from '@KTXC/layouts/logo/LogoDark.vue';
+import AuthLogin from './AuthLogin.vue';
+import AuthFooter from './AuthFooter.vue';
+</script>
+
+<template>
+  <v-row class="bg-containerBg position-relative" no-gutters>
+    <v-col cols="12">
+      <div class="pt-6 pl-6">
+        <Logo />
+      </div>
+    </v-col>
+    <!---Login Part-->
+    <v-col cols="12" lg="12" class="d-flex align-center">
+      <v-container>
+        <div class="d-flex align-center justify-center" style="min-height: calc(100vh - 148px)">
+          <v-row justify="center">
+            <v-col cols="12" md="12">
+              <v-card elevation="0" class="loginBox">
+                <v-card elevation="24">
+                  <v-card-text class="pa-sm-10 pa-6">
+                    <!---Login Form-->
+                    <AuthLogin />
+                    <!---Login Form-->
+                  </v-card-text>
+                </v-card>
+              </v-card>
+            </v-col>
+          </v-row>
+        </div>
+      </v-container>
+    </v-col>
+    <!---Login Part-->
+    <v-col cols="12">
+      <v-container class="pt-0 pb-6">
+        <AuthFooter />
+      </v-container>
+    </v-col>
+  </v-row>
+</template>
+<style lang="scss">
+.loginBox {
+  max-width: 475px;
+  margin: 0 auto;
+}
+.blur-logo {
+  position: absolute;
+  filter: blur(18px);
+  bottom: 0;
+  transform: inherit;
+}
+</style>
diff --git a/core/src/views/pages/maintenance/error/Error404Page.vue b/core/src/views/pages/maintenance/error/Error404Page.vue
new file mode 100644
index 0000000..f0a0324
--- /dev/null
+++ b/core/src/views/pages/maintenance/error/Error404Page.vue
@@ -0,0 +1,50 @@
+<script setup lang="ts"></script>
+
+<template>
+  <v-row no-gutters class="overflow-hidden bg-containerBg" style="min-height: 100vh">
+    <v-col class="d-flex align-center justify-center">
+      <div class="text-center">
+        <div class="CardMediaWrapper">
+          <img src="@KTXC/assets/images/maintenance/Error404.png" alt="404" />
+          <div class="CardMediaBuild">
+            <img src="@KTXC/assets/images/maintenance/TwoCone.png" alt="grid" class="w-100" />
+          </div>
+        </div>
+        <h1 class="text-h1 mt-16">Page Not Found</h1>
+        <p class="text-h6 text-lightText">The page you are looking was moved, removed, <br />renamed, or might never exist!</p>
+        <v-btn variant="flat" color="primary" class="mt-2" to="/"> Back To Home</v-btn>
+      </div>
+    </v-col>
+  </v-row>
+</template>
+<style lang="scss">
+.CardMediaWrapper {
+  max-width: 720px;
+  margin: 0 auto;
+  position: relative;
+  > img {
+    @media (min-width: 0px) {
+      width: 250px;
+      height: 130px;
+    }
+    @media (min-width: 768px) {
+      width: 590px;
+      height: 300px;
+    }
+  }
+}
+.CardMediaBuild {
+  position: absolute;
+  top: 60px;
+  @media (min-width: 0px) {
+    width: 130px;
+    height: 115px;
+    right: -14%;
+  }
+  @media (min-width: 768px) {
+    width: 390px;
+    height: 330px;
+    right: -60%;
+  }
+}
+</style>
diff --git a/core/src/views/pages/maintenance/error/Error500Page.vue b/core/src/views/pages/maintenance/error/Error500Page.vue
new file mode 100644
index 0000000..8667a54
--- /dev/null
+++ b/core/src/views/pages/maintenance/error/Error500Page.vue
@@ -0,0 +1,28 @@
+<script setup lang="ts"></script>
+
+<template>
+  <v-row no-gutters class="overflow-hidden bg-containerBg" style="min-height: 100vh">
+    <v-col class="d-flex align-center justify-center">
+      <div class="text-center">
+        <div class="errorMedia">
+          <img src="@/assets/images/maintenance/Error500.png" alt="404" />
+        </div>
+        <h1 class="text-h1 mt-2 mb-1">Internal Server Error</h1>
+        <p class="text-caption text-lightText">Server error 500. we fixing the problem. please try <br />again at a later stage.</p>
+        <v-btn variant="flat" color="primary" class="mt-4" to="/"> Back To Home</v-btn>
+      </div>
+    </v-col>
+  </v-row>
+</template>
+<style lang="scss">
+.errorMedia {
+  > img {
+    @media (min-width: 0px) {
+      width: 350px;
+    }
+    @media (min-width: 768px) {
+      width: 396px;
+    }
+  }
+}
+</style>
diff --git a/deploy/nginx/vhost-dev.conf b/deploy/nginx/vhost-dev.conf
new file mode 100644
index 0000000..841db4b
--- /dev/null
+++ b/deploy/nginx/vhost-dev.conf
@@ -0,0 +1,125 @@
+# HTTP to HTTPS redirect
+server {
+    listen *:80;
+    listen [::]:80;
+    server_name ktrix;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen *:443 ssl http2;
+    listen [::]:443 ssl http2;
+    #listen *:443 quic reuseport;
+    #listen [::]:443 quic reuseport;
+
+    #http2 on;
+
+    server_name ktrix;
+
+    ### SSL Configuration ###
+
+    # SSL Certificates
+    ssl_certificate /etc/ssl/certs/localhost.crt;
+    ssl_certificate_key /etc/ssl/private/localhost.key;
+
+    # SSL Protocols and Ciphers
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers off;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_dhparam /etc/ssl/certs/dhparam.pem; # openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048
+    
+    # SSL Sessions
+    ssl_session_timeout    60m;
+    ssl_session_cache      shared:SSL:10m;
+    ssl_session_tickets    off;
+
+    ### Logging Configuration ###
+    error_log /var/log/nginx/ktrix-error.log;
+    access_log /var/log/nginx/ktrix-access.log;
+
+    ### Upload Configuration ###
+    client_max_body_size 1024M;
+
+    ### Site Configuration ###
+    root /var/www/ktrix/main/public;
+    index index.html;
+
+    # Serve index.html for root path only
+    #location = / {
+    #    try_files /index.html =404;
+    #}
+
+    # Serve module static assets directly from module folders
+    # URL: /modules/<Module>/static/... -> FS: /var/www/ktrix/main/modules/<Module>/static/...
+    # Note: Linux is case-sensitive; ensure URL module casing matches folder name
+    location ~ ^/modules/([^/]+)/static/(.*)$ {
+        alias /var/www/ktrix/main/modules/$1/static/$2;
+        expires 10m;
+        add_header Cache-Control "public, immutable";
+        access_log on;
+        types {
+            text/css css;
+            application/javascript js;
+            application/javascript mjs;
+            image/svg+xml svg;
+            image/gif gif;
+            image/png png;
+            image/jpeg jpg;
+            image/jpeg jpeg;
+            image/x-icon ico;
+            font/woff woff;
+            font/woff2 woff2;
+            font/ttf ttf;
+            application/vnd.ms-fontobject eot;
+            application/json map;
+        }
+    }
+
+    # Handle asset files (css, js, images, etc.) - serve directly if they exist
+    location ~* \.(css|js|mjs|svg|gif|png|jpg|jpeg|ico|woff|woff2|ttf|eot|map)$ {
+        try_files $uri =404;
+        expires 1m;
+        add_header Cache-Control "public, immutable";
+        types {
+            text/css css;
+            application/javascript js;
+            application/javascript mjs;
+            image/svg+xml svg;
+            image/gif gif;
+            image/png png;
+            image/jpeg jpg;
+            image/jpeg jpeg;
+            image/x-icon ico;
+            font/woff woff;
+            font/woff2 woff2;
+            font/ttf ttf;
+            application/vnd.ms-fontobject eot;
+            application/json map;
+        }
+    }
+
+    # All other URLs should be handled by index.php
+    location / {
+        try_files $uri @php;
+    }
+
+    # Named location for PHP handling
+    location @php {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $realpath_root/index.php;
+        fastcgi_param DOCUMENT_ROOT $realpath_root;
+        fastcgi_param SCRIPT_NAME /index.php;
+        fastcgi_param REQUEST_URI $uri?$args;
+        fastcgi_pass fpm;
+    }
+
+    # return 404 for all other php files not matching the front controller
+    # this prevents access to other php files you don't want to be accessible.
+    location ~ \.php$ {
+        return 404;
+    }
+
+    # Optional: Gzip compression
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+}
diff --git a/deploy/nginx/vhost.conf b/deploy/nginx/vhost.conf
new file mode 100644
index 0000000..cebfaef
--- /dev/null
+++ b/deploy/nginx/vhost.conf
@@ -0,0 +1,83 @@
+# HTTP to HTTPS redirect
+server {
+    listen *:80;
+    listen [::]:80;
+    server_name ktrix;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen *:443 ssl http2;
+    listen [::]:443 ssl http2;
+    #listen *:443 quic reuseport;
+    #listen [::]:443 quic reuseport;
+
+    #http2 on;
+
+    server_name ktrix;
+
+    ### SSL Configuration ###
+
+    # SSL Certificates
+    ssl_certificate /etc/ssl/certs/localhost.crt;
+    ssl_certificate_key /etc/ssl/private/localhost.key;
+
+    # SSL Protocols and Ciphers
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers off;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_dhparam /etc/ssl/certs/dhparam.pem; # openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048
+    
+    # SSL Sessions
+    ssl_session_timeout    60m;
+    ssl_session_cache      shared:SSL:10m;
+    ssl_session_tickets    off;
+
+    ### Logging Configuration ###
+    error_log /var/log/nginx/ktrix-error.log;
+    access_log /var/log/nginx/ktrix-access.log;
+
+    ### Upload Configuration ###
+    client_max_body_size 1024M;
+
+    ### Site Configuration ###
+    root /var/www/ktrix/main/public;
+    index index.html;
+
+    # Serve index.html for root path only
+    location = / {
+        try_files /index.html =404;
+    }
+
+    # Handle asset files (css, js, images, etc.) - serve directly if they exist
+    location ~* \.(css|js|svg|gif|png|jpg|jpeg|ico|woff|woff2|ttf|eot|map)$ {
+        try_files $uri =404;
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # All other URLs should be handled by index.php
+    location / {
+        try_files $uri @php;
+    }
+
+    # Named location for PHP handling
+    location @php {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $realpath_root/index.php;
+        fastcgi_param DOCUMENT_ROOT $realpath_root;
+        fastcgi_param SCRIPT_NAME /index.php;
+        fastcgi_param REQUEST_URI $uri?$args;
+        fastcgi_pass fpm;
+    }
+
+    # return 404 for all other php files not matching the front controller
+    # this prevents access to other php files you don't want to be accessible.
+    location ~ \.php$ {
+        return 404;
+    }
+
+    # Optional: Gzip compression
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+}
diff --git a/deploy/supervisor/mail-daemon.conf b/deploy/supervisor/mail-daemon.conf
new file mode 100644
index 0000000..3542a76
--- /dev/null
+++ b/deploy/supervisor/mail-daemon.conf
@@ -0,0 +1,22 @@
+[program:ktrix-mail-daemon]
+command=/usr/bin/php /var/www/ktrix/main/bin/console mail:queue:daemon
+directory=/var/www/ktrix/main
+user=www-data
+numprocs=1
+autostart=true
+autorestart=true
+startsecs=5
+startretries=3
+exitcodes=0
+stopsignal=TERM
+stopwaitsecs=30
+stopasgroup=true
+killasgroup=true
+redirect_stderr=true
+stdout_logfile=/var/www/ktrix/main/var/log/mail-daemon.log
+stdout_logfile_maxbytes=10MB
+stdout_logfile_backups=5
+environment=PHP_INI_SCAN_DIR="/etc/php/8.2/cli/conf.d"
+
+; Process name for easier identification
+process_name=%(program_name)s_%(process_num)02d
diff --git a/deploy/systemd/mail-daemon.service b/deploy/systemd/mail-daemon.service
new file mode 100644
index 0000000..a2028ab
--- /dev/null
+++ b/deploy/systemd/mail-daemon.service
@@ -0,0 +1,30 @@
+[Unit]
+Description=Ktrix Mail Queue Daemon
+After=network.target
+
+[Service]
+Type=simple
+User=www-data
+Group=www-data
+WorkingDirectory=/var/www/ktrix/main
+ExecStart=/usr/bin/php bin/console mail:queue:daemon
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=always
+RestartSec=5
+StandardOutput=append:/var/www/ktrix/main/var/log/mail-daemon.log
+StandardError=append:/var/www/ktrix/main/var/log/mail-daemon.log
+
+# Process management
+KillMode=process
+KillSignal=SIGTERM
+TimeoutStopSec=30
+
+# Security hardening
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/www/ktrix/main/storage
+ReadWritePaths=/var/www/ktrix/main/var
+
+[Install]
+WantedBy=multi-user.target
diff --git a/eslint.config.js b/eslint.config.js
new file mode 100644
index 0000000..7ed7a96
--- /dev/null
+++ b/eslint.config.js
@@ -0,0 +1,18 @@
+import globals from 'globals';
+import pluginJs from '@eslint/js';
+import tseslint from 'typescript-eslint';
+import pluginVue from 'eslint-plugin-vue';
+
+export default [
+  {
+    languageOptions: {
+      globals: globals.browser,
+      parserOptions: {
+        parser: '@typescript-eslint/parser'
+      }
+    }
+  },
+  pluginJs.configs.recommended,
+  ...tseslint.configs.recommended,
+  ...pluginVue.configs['flat/essential']
+];
diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..6136297
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,5221 @@
+{
+  "name": "ktrix",
+  "version": "0.0.1",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "ktrix",
+      "version": "0.0.1",
+      "license": "AGPL-3.0-or-later",
+      "dependencies": {
+        "@fontsource/inter": "5.1.0",
+        "@fontsource/poppins": "5.1.0",
+        "@fontsource/public-sans": "5.1.1",
+        "@fontsource/roboto": "5.1.0",
+        "@tsconfig/node20": "20.1.4",
+        "@typescript-eslint/parser": "^8.18.2",
+        "@vue/compiler-sfc": "^3.5.16",
+        "pinia": "2.3.0",
+        "vee-validate": "^4.15.1",
+        "vite-plugin-vuetify": "2.0.4",
+        "vue": "3.5.13",
+        "vue-router": "4.5.0",
+        "vue3-perfect-scrollbar": "2.0.0",
+        "vuetify": "3.7.6"
+      },
+      "devDependencies": {
+        "@eslint/js": "^9.17.0",
+        "@types/node": "22.10.2",
+        "@vitejs/plugin-vue": "5.2.1",
+        "@vue/eslint-config-prettier": "10.1.0",
+        "@vue/tsconfig": "0.7.0",
+        "eslint": "9.17.0",
+        "eslint-plugin-vue": "9.32.0",
+        "prettier": "3.4.2",
+        "sass": "1.77.1",
+        "sass-loader": "16.0.4",
+        "typescript": "5.7.2",
+        "typescript-eslint": "^8.18.2",
+        "vite": "6.0.6",
+        "vite-plugin-static-copy": "^3.1.2",
+        "vue-cli-plugin-vuetify": "2.5.8",
+        "vue-tsc": "^2.2.10"
+      }
+    },
+    "node_modules/@babel/helper-string-parser": {
+      "version": "7.27.1",
+      "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
+      "integrity": "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.27.1",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.27.1.tgz",
+      "integrity": "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/parser": {
+      "version": "7.28.4",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.28.4.tgz",
+      "integrity": "sha512-yZbBqeM6TkpP9du/I2pUZnJsRMGGvOuIrhjzC1AwHwW+6he4mni6Bp/m8ijn0iOuZuPI2BfkCoSRunpyjnrQKg==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.28.4"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/types": {
+      "version": "7.28.4",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.28.4.tgz",
+      "integrity": "sha512-bkFqkLhh3pMBUQQkpVgWDWq/lqzc2678eUyDlTBhRqhCHFguYYGM0Efga7tYk4TogG/3x0EEl66/OQ+WGbWB/Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-string-parser": "^7.27.1",
+        "@babel/helper-validator-identifier": "^7.27.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.24.2.tgz",
+      "integrity": "sha512-thpVCb/rhxE/BnMLQ7GReQLLN8q9qbHmI55F4489/ByVg2aQaQ6kbcLb6FHkocZzQhxc4gx0sCk0tJkKBFzDhA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.24.2.tgz",
+      "integrity": "sha512-tmwl4hJkCfNHwFB3nBa8z1Uy3ypZpxqxfTQOcHX+xRByyYgunVbZ9MzUUfb0RxaHIMnbHagwAxuTL+tnNM+1/Q==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.24.2.tgz",
+      "integrity": "sha512-cNLgeqCqV8WxfcTIOeL4OAtSmL8JjcN6m09XIgro1Wi7cF4t/THaWEa7eL5CMoMBdjoHOTh/vwTO/o2TRXIyzg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.24.2.tgz",
+      "integrity": "sha512-B6Q0YQDqMx9D7rvIcsXfmJfvUYLoP722bgfBlO5cGvNVb5V/+Y7nhBE3mHV9OpxBf4eAS2S68KZztiPaWq4XYw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.24.2.tgz",
+      "integrity": "sha512-kj3AnYWc+CekmZnS5IPu9D+HWtUI49hbnyqk0FLEJDbzCIQt7hg7ucF1SQAilhtYpIujfaHr6O0UHlzzSPdOeA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.24.2.tgz",
+      "integrity": "sha512-WeSrmwwHaPkNR5H3yYfowhZcbriGqooyu3zI/3GGpF8AyUdsrrP0X6KumITGA9WOyiJavnGZUwPGvxvwfWPHIA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.24.2.tgz",
+      "integrity": "sha512-UN8HXjtJ0k/Mj6a9+5u6+2eZ2ERD7Edt1Q9IZiB5UZAIdPnVKDoG7mdTVGhHJIeEml60JteamR3qhsr1r8gXvg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.24.2.tgz",
+      "integrity": "sha512-TvW7wE/89PYW+IevEJXZ5sF6gJRDY/14hyIGFXdIucxCsbRmLUcjseQu1SyTko+2idmCw94TgyaEZi9HUSOe3Q==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.24.2.tgz",
+      "integrity": "sha512-n0WRM/gWIdU29J57hJyUdIsk0WarGd6To0s+Y+LwvlC55wt+GT/OgkwoXCXvIue1i1sSNWblHEig00GBWiJgfA==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.24.2.tgz",
+      "integrity": "sha512-7HnAD6074BW43YvvUmE/35Id9/NB7BeX5EoNkK9obndmZBUk8xmJJeU7DwmUeN7tkysslb2eSl6CTrYz6oEMQg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.24.2.tgz",
+      "integrity": "sha512-sfv0tGPQhcZOgTKO3oBE9xpHuUqguHvSo4jl+wjnKwFpapx+vUDcawbwPNuBIAYdRAvIDBfZVvXprIj3HA+Ugw==",
+      "cpu": [
+        "ia32"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.24.2.tgz",
+      "integrity": "sha512-CN9AZr8kEndGooS35ntToZLTQLHEjtVB5n7dl8ZcTZMonJ7CCfStrYhrzF97eAecqVbVJ7APOEe18RPI4KLhwQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.24.2.tgz",
+      "integrity": "sha512-iMkk7qr/wl3exJATwkISxI7kTcmHKE+BlymIAbHO8xanq/TjHaaVThFF6ipWzPHryoFsesNQJPE/3wFJw4+huw==",
+      "cpu": [
+        "mips64el"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.24.2.tgz",
+      "integrity": "sha512-shsVrgCZ57Vr2L8mm39kO5PPIb+843FStGt7sGGoqiiWYconSxwTiuswC1VJZLCjNiMLAMh34jg4VSEQb+iEbw==",
+      "cpu": [
+        "ppc64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.24.2.tgz",
+      "integrity": "sha512-4eSFWnU9Hhd68fW16GD0TINewo1L6dRrB+oLNNbYyMUAeOD2yCK5KXGK1GH4qD/kT+bTEXjsyTCiJGHPZ3eM9Q==",
+      "cpu": [
+        "riscv64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.24.2.tgz",
+      "integrity": "sha512-S0Bh0A53b0YHL2XEXC20bHLuGMOhFDO6GN4b3YjRLK//Ep3ql3erpNcPlEFed93hsQAjAQDNsvcK+hV90FubSw==",
+      "cpu": [
+        "s390x"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.24.2.tgz",
+      "integrity": "sha512-8Qi4nQcCTbLnK9WoMjdC9NiTG6/E38RNICU6sUNqK0QFxCYgoARqVqxdFmWkdonVsvGqWhmm7MO0jyTqLqwj0Q==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.24.2.tgz",
+      "integrity": "sha512-wuLK/VztRRpMt9zyHSazyCVdCXlpHkKm34WUyinD2lzK07FAHTq0KQvZZlXikNWkDGoT6x3TD51jKQ7gMVpopw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.24.2.tgz",
+      "integrity": "sha512-VefFaQUc4FMmJuAxmIHgUmfNiLXY438XrL4GDNV1Y1H/RW3qow68xTwjZKfj/+Plp9NANmzbH5R40Meudu8mmw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.24.2.tgz",
+      "integrity": "sha512-YQbi46SBct6iKnszhSvdluqDmxCJA+Pu280Av9WICNwQmMxV7nLRHZfjQzwbPs3jeWnuAhE9Jy0NrnJ12Oz+0A==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.24.2.tgz",
+      "integrity": "sha512-+iDS6zpNM6EnJyWv0bMGLWSWeXGN/HTaF/LXHXHwejGsVi+ooqDfMCCTerNFxEkM3wYVcExkeGXNqshc9iMaOA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.24.2.tgz",
+      "integrity": "sha512-hTdsW27jcktEvpwNHJU4ZwWFGkz2zRJUz8pvddmXPtXDzVKTTINmlmga3ZzwcuMpUvLw7JkLy9QLKyGpD2Yxig==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.24.2.tgz",
+      "integrity": "sha512-LihEQ2BBKVFLOC9ZItT9iFprsE9tqjDjnbulhHoFxYQtQfai7qfluVODIYxt1PgdoyQkz23+01rzwNwYfutxUQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.24.2.tgz",
+      "integrity": "sha512-q+iGUwfs8tncmFC9pcnD5IvRHAzmbwQ3GPS5/ceCyHdjXubwQWI12MKWSNSMYLJMq23/IUCvJMS76PDqXe1fxA==",
+      "cpu": [
+        "ia32"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.24.2.tgz",
+      "integrity": "sha512-7VTgWzgMGvup6aSqDPLiW5zHaxYJGTO4OokMjIlrCtf+VpEL+cXKtCvg723iguPYI5oaUNdS+/V7OU2gvXVWEg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@eslint-community/eslint-utils": {
+      "version": "4.9.0",
+      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.0.tgz",
+      "integrity": "sha512-ayVFHdtZ+hsq1t2Dy24wCmGXGe4q9Gu3smhLYALJrr473ZH27MsnSL+LKUlimp4BWJqMDMLmPpx/Q9R3OAlL4g==",
+      "license": "MIT",
+      "dependencies": {
+        "eslint-visitor-keys": "^3.4.3"
+      },
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0"
+      }
+    },
+    "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys": {
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz",
+      "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/@eslint-community/regexpp": {
+      "version": "4.12.1",
+      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.1.tgz",
+      "integrity": "sha512-CCZCDJuduB9OUkFkY2IgppNZMi2lBQgD2qzwXkEia16cge2pijY/aXi96CJMquDMn3nJdlPV1A5KrJEXwfLNzQ==",
+      "license": "MIT",
+      "engines": {
+        "node": "^12.0.0 || ^14.0.0 || >=16.0.0"
+      }
+    },
+    "node_modules/@eslint/config-array": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.2.tgz",
+      "integrity": "sha512-GNKqxfHG2ySmJOBSHg7LxeUx4xpuCoFjacmlCoYWEbaPXLwvfIjixRI12xCQZeULksQb23uiA8F40w5TojpV7w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@eslint/object-schema": "^2.1.6",
+        "debug": "^4.3.1",
+        "minimatch": "^3.1.2"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/config-array/node_modules/brace-expansion": {
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
+      }
+    },
+    "node_modules/@eslint/config-array/node_modules/minimatch": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
+      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^1.1.7"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/@eslint/core": {
+      "version": "0.9.1",
+      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.1.tgz",
+      "integrity": "sha512-GuUdqkyyzQI5RMIWkHhvTWLCyLo1jNK3vzkSyaExH5kHPDHcuL2VOpHjmMY+y3+NC69qAKToBqldTBgYeLSr9Q==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/json-schema": "^7.0.15"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/eslintrc": {
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.3.1.tgz",
+      "integrity": "sha512-gtF186CXhIl1p4pJNGZw8Yc6RlshoePRvE0X91oPGb3vZ8pM3qOS9W9NGPat9LziaBV7XrJWGylNQXkGcnM3IQ==",
+      "license": "MIT",
+      "dependencies": {
+        "ajv": "^6.12.4",
+        "debug": "^4.3.2",
+        "espree": "^10.0.1",
+        "globals": "^14.0.0",
+        "ignore": "^5.2.0",
+        "import-fresh": "^3.2.1",
+        "js-yaml": "^4.1.0",
+        "minimatch": "^3.1.2",
+        "strip-json-comments": "^3.1.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/@eslint/eslintrc/node_modules/brace-expansion": {
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
+      }
+    },
+    "node_modules/@eslint/eslintrc/node_modules/minimatch": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
+      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^1.1.7"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/@eslint/js": {
+      "version": "9.35.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.35.0.tgz",
+      "integrity": "sha512-30iXE9whjlILfWobBkNerJo+TXYsgVM5ERQwMcMKCHckHflCmf7wXDAHlARoWnh0s1U72WqlbeyE7iAcCzuCPw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://eslint.org/donate"
+      }
+    },
+    "node_modules/@eslint/object-schema": {
+      "version": "2.1.6",
+      "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.6.tgz",
+      "integrity": "sha512-RBMg5FRL0I0gs51M/guSAj5/e14VQ4tpZnQNWwuDT66P14I43ItmPfIZRhO9fUVIPOAQXU47atlywZ/czoqFPA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/plugin-kit": {
+      "version": "0.2.8",
+      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.8.tgz",
+      "integrity": "sha512-ZAoA40rNMPwSm+AeHpCq8STiNAwzWLJuP8Xv4CHIc9wv/PSuExjMrmjfYNj682vW0OOiZ1HKxzvjQr9XZIisQA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@eslint/core": "^0.13.0",
+        "levn": "^0.4.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/plugin-kit/node_modules/@eslint/core": {
+      "version": "0.13.0",
+      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.13.0.tgz",
+      "integrity": "sha512-yfkgDw1KR66rkT5A8ci4irzDysN7FRpq3ttJolR88OqQikAWqwA8j5VZyas+vjyBNFIJ7MfybJ9plMILI2UrCw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/json-schema": "^7.0.15"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@fontsource/inter": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@fontsource/inter/-/inter-5.1.0.tgz",
+      "integrity": "sha512-zKZR3kf1G0noIes1frLfOHP5EXVVm0M7sV/l9f/AaYf+M/DId35FO4LkigWjqWYjTJZGgplhdv4cB+ssvCqr5A==",
+      "license": "OFL-1.1"
+    },
+    "node_modules/@fontsource/poppins": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@fontsource/poppins/-/poppins-5.1.0.tgz",
+      "integrity": "sha512-tpLXlnNi2fwQjiipvuj4uNFHCdoLA8izRsKdoexZuEzjx0r/g1aKLf4ta6lFgF7L+/+AFdmaXFlUwwvmDzYH+g==",
+      "license": "OFL-1.1"
+    },
+    "node_modules/@fontsource/public-sans": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/@fontsource/public-sans/-/public-sans-5.1.1.tgz",
+      "integrity": "sha512-BEJEc9kpLBowHLqeOlex1lMJPZ/6mzKn3ArhbvWY9dvMcjSqH7jzJyTN44j0H78FTOrVjIW1g4A8nDdbx8VV5Q==",
+      "license": "OFL-1.1"
+    },
+    "node_modules/@fontsource/roboto": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@fontsource/roboto/-/roboto-5.1.0.tgz",
+      "integrity": "sha512-cFRRC1s6RqPygeZ8Uw/acwVHqih8Czjt6Q0MwoUoDe9U3m4dH1HmNDRBZyqlMSFwgNAUKgFImncKdmDHyKpwdg==",
+      "license": "Apache-2.0"
+    },
+    "node_modules/@humanfs/core": {
+      "version": "0.19.1",
+      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
+      "integrity": "sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18.18.0"
+      }
+    },
+    "node_modules/@humanfs/node": {
+      "version": "0.16.7",
+      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.7.tgz",
+      "integrity": "sha512-/zUx+yOsIrG4Y43Eh2peDeKCxlRt/gET6aHfaKpuq267qXdYDFViVHfMaLyygZOnl0kGWxFIgsBy8QFuTLUXEQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@humanfs/core": "^0.19.1",
+        "@humanwhocodes/retry": "^0.4.0"
+      },
+      "engines": {
+        "node": ">=18.18.0"
+      }
+    },
+    "node_modules/@humanwhocodes/module-importer": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz",
+      "integrity": "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12.22"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/nzakas"
+      }
+    },
+    "node_modules/@humanwhocodes/retry": {
+      "version": "0.4.3",
+      "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.3.tgz",
+      "integrity": "sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18.18"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/nzakas"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "devOptional": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/source-map": {
+      "version": "0.3.11",
+      "resolved": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.11.tgz",
+      "integrity": "sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.25"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "license": "MIT"
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
+    },
+    "node_modules/@nodelib/fs.scandir": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
+      "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.stat": "2.0.5",
+        "run-parallel": "^1.1.9"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.stat": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz",
+      "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.walk": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz",
+      "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==",
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.scandir": "2.1.5",
+        "fastq": "^1.6.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@pkgr/core": {
+      "version": "0.2.9",
+      "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.2.9.tgz",
+      "integrity": "sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^12.20.0 || ^14.18.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/pkgr"
+      }
+    },
+    "node_modules/@rollup/rollup-android-arm-eabi": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.50.2.tgz",
+      "integrity": "sha512-uLN8NAiFVIRKX9ZQha8wy6UUs06UNSZ32xj6giK/rmMXAgKahwExvK6SsmgU5/brh4w/nSgj8e0k3c1HBQpa0A==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-android-arm64": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.50.2.tgz",
+      "integrity": "sha512-oEouqQk2/zxxj22PNcGSskya+3kV0ZKH+nQxuCCOGJ4oTXBdNTbv+f/E3c74cNLeMO1S5wVWacSws10TTSB77g==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-arm64": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.50.2.tgz",
+      "integrity": "sha512-OZuTVTpj3CDSIxmPgGH8en/XtirV5nfljHZ3wrNwvgkT5DQLhIKAeuFSiwtbMto6oVexV0k1F1zqURPKf5rI1Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-x64": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.50.2.tgz",
+      "integrity": "sha512-Wa/Wn8RFkIkr1vy1k1PB//VYhLnlnn5eaJkfTQKivirOvzu5uVd2It01ukeQstMursuz7S1bU+8WW+1UPXpa8A==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-arm64": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.50.2.tgz",
+      "integrity": "sha512-QkzxvH3kYN9J1w7D1A+yIMdI1pPekD+pWx7G5rXgnIlQ1TVYVC6hLl7SOV9pi5q9uIDF9AuIGkuzcbF7+fAhow==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-x64": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.50.2.tgz",
+      "integrity": "sha512-dkYXB0c2XAS3a3jmyDkX4Jk0m7gWLFzq1C3qUnJJ38AyxIF5G/dyS4N9B30nvFseCfgtCEdbYFhk0ChoCGxPog==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.50.2.tgz",
+      "integrity": "sha512-9VlPY/BN3AgbukfVHAB8zNFWB/lKEuvzRo1NKev0Po8sYFKx0i+AQlCYftgEjcL43F2h9Ui1ZSdVBc4En/sP2w==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.50.2.tgz",
+      "integrity": "sha512-+GdKWOvsifaYNlIVf07QYan1J5F141+vGm5/Y8b9uCZnG/nxoGqgCmR24mv0koIWWuqvFYnbURRqw1lv7IBINw==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-gnu": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.50.2.tgz",
+      "integrity": "sha512-df0Eou14ojtUdLQdPFnymEQteENwSJAdLf5KCDrmZNsy1c3YaCNaJvYsEUHnrg+/DLBH612/R0xd3dD03uz2dg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-musl": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.50.2.tgz",
+      "integrity": "sha512-iPeouV0UIDtz8j1YFR4OJ/zf7evjauqv7jQ/EFs0ClIyL+by++hiaDAfFipjOgyz6y6xbDvJuiU4HwpVMpRFDQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-gnu": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.50.2.tgz",
+      "integrity": "sha512-OL6KaNvBopLlj5fTa5D5bau4W82f+1TyTZRr2BdnfsrnQnmdxh4okMxR2DcDkJuh4KeoQZVuvHvzuD/lyLn2Kw==",
+      "cpu": [
+        "loong64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.50.2.tgz",
+      "integrity": "sha512-I21VJl1w6z/K5OTRl6aS9DDsqezEZ/yKpbqlvfHbW0CEF5IL8ATBMuUx6/mp683rKTK8thjs/0BaNrZLXetLag==",
+      "cpu": [
+        "ppc64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.50.2.tgz",
+      "integrity": "sha512-Hq6aQJT/qFFHrYMjS20nV+9SKrXL2lvFBENZoKfoTH2kKDOJqff5OSJr4x72ZaG/uUn+XmBnGhfr4lwMRrmqCQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-musl": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.50.2.tgz",
+      "integrity": "sha512-82rBSEXRv5qtKyr0xZ/YMF531oj2AIpLZkeNYxmKNN6I2sVE9PGegN99tYDLK2fYHJITL1P2Lgb4ZXnv0PjQvw==",
+      "cpu": [
+        "riscv64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-s390x-gnu": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.50.2.tgz",
+      "integrity": "sha512-4Q3S3Hy7pC6uaRo9gtXUTJ+EKo9AKs3BXKc2jYypEcMQ49gDPFU2P1ariX9SEtBzE5egIX6fSUmbmGazwBVF9w==",
+      "cpu": [
+        "s390x"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-gnu": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.50.2.tgz",
+      "integrity": "sha512-9Jie/At6qk70dNIcopcL4p+1UirusEtznpNtcq/u/C5cC4HBX7qSGsYIcG6bdxj15EYWhHiu02YvmdPzylIZlA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-musl": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.50.2.tgz",
+      "integrity": "sha512-HPNJwxPL3EmhzeAnsWQCM3DcoqOz3/IC6de9rWfGR8ZCuEHETi9km66bH/wG3YH0V3nyzyFEGUZeL5PKyy4xvw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-openharmony-arm64": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.50.2.tgz",
+      "integrity": "sha512-nMKvq6FRHSzYfKLHZ+cChowlEkR2lj/V0jYj9JnGUVPL2/mIeFGmVM2mLaFeNa5Jev7W7TovXqXIG2d39y1KYA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-arm64-msvc": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.50.2.tgz",
+      "integrity": "sha512-eFUvvnTYEKeTyHEijQKz81bLrUQOXKZqECeiWH6tb8eXXbZk+CXSG2aFrig2BQ/pjiVRj36zysjgILkqarS2YA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-ia32-msvc": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.50.2.tgz",
+      "integrity": "sha512-cBaWmXqyfRhH8zmUxK3d3sAhEWLrtMjWBRwdMMHJIXSjvjLKvv49adxiEz+FJ8AP90apSDDBx2Tyd/WylV6ikA==",
+      "cpu": [
+        "ia32"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-msvc": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.50.2.tgz",
+      "integrity": "sha512-APwKy6YUhvZaEoHyM+9xqmTpviEI+9eL7LoCH+aLcvWYHJ663qG5zx7WzWZY+a9qkg5JtzcMyJ9z0WtQBMDmgA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@tsconfig/node20": {
+      "version": "20.1.4",
+      "resolved": "https://registry.npmjs.org/@tsconfig/node20/-/node20-20.1.4.tgz",
+      "integrity": "sha512-sqgsT69YFeLWf5NtJ4Xq/xAF8p4ZQHlmGW74Nu2tD4+g5fAsposc4ZfaaPixVu4y01BEiDCWLRDCvDM5JOsRxg==",
+      "license": "MIT"
+    },
+    "node_modules/@types/eslint": {
+      "version": "9.6.1",
+      "resolved": "https://registry.npmjs.org/@types/eslint/-/eslint-9.6.1.tgz",
+      "integrity": "sha512-FXx2pKgId/WyYo2jXw63kk7/+TY7u7AziEJxJAnSFzHlqTAS3Ync6SvgYAN/k4/PQpnnVuzoMuVnByKK2qp0ag==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@types/estree": "*",
+        "@types/json-schema": "*"
+      }
+    },
+    "node_modules/@types/eslint-scope": {
+      "version": "3.7.7",
+      "resolved": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.7.tgz",
+      "integrity": "sha512-MzMFlSLBqNF2gcHWO0G1vP/YQyfvrxZ0bF+u7mzUdZ1/xK4A4sru+nraZz5i3iEIk1l1uyicaDVTB4QbbEkAYg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/eslint": "*",
+        "@types/estree": "*"
+      }
+    },
+    "node_modules/@types/estree": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz",
+      "integrity": "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==",
+      "license": "MIT"
+    },
+    "node_modules/@types/json-schema": {
+      "version": "7.0.15",
+      "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
+      "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
+      "license": "MIT"
+    },
+    "node_modules/@types/node": {
+      "version": "22.10.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.2.tgz",
+      "integrity": "sha512-Xxr6BBRCAOQixvonOye19wnzyDiUtTeqldOOmj3CkeblonbccA12PFwlufvRdrpjXxqnmUaeiU5EOA+7s5diUQ==",
+      "devOptional": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "undici-types": "~6.20.0"
+      }
+    },
+    "node_modules/@typescript-eslint/eslint-plugin": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.44.0.tgz",
+      "integrity": "sha512-EGDAOGX+uwwekcS0iyxVDmRV9HX6FLSM5kzrAToLTsr9OWCIKG/y3lQheCq18yZ5Xh78rRKJiEpP0ZaCs4ryOQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/regexpp": "^4.10.0",
+        "@typescript-eslint/scope-manager": "8.44.0",
+        "@typescript-eslint/type-utils": "8.44.0",
+        "@typescript-eslint/utils": "8.44.0",
+        "@typescript-eslint/visitor-keys": "8.44.0",
+        "graphemer": "^1.4.0",
+        "ignore": "^7.0.0",
+        "natural-compare": "^1.4.0",
+        "ts-api-utils": "^2.1.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "@typescript-eslint/parser": "^8.44.0",
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/eslint-plugin/node_modules/ignore": {
+      "version": "7.0.5",
+      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz",
+      "integrity": "sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
+    "node_modules/@typescript-eslint/parser": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.44.0.tgz",
+      "integrity": "sha512-VGMpFQGUQWYT9LfnPcX8ouFojyrZ/2w3K5BucvxL/spdNehccKhB4jUyB1yBCXpr2XFm0jkECxgrpXBW2ipoAw==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@typescript-eslint/scope-manager": "8.44.0",
+        "@typescript-eslint/types": "8.44.0",
+        "@typescript-eslint/typescript-estree": "8.44.0",
+        "@typescript-eslint/visitor-keys": "8.44.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/project-service": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.44.0.tgz",
+      "integrity": "sha512-ZeaGNraRsq10GuEohKTo4295Z/SuGcSq2LzfGlqiuEvfArzo/VRrT0ZaJsVPuKZ55lVbNk8U6FcL+ZMH8CoyVA==",
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/tsconfig-utils": "^8.44.0",
+        "@typescript-eslint/types": "^8.44.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/scope-manager": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.44.0.tgz",
+      "integrity": "sha512-87Jv3E+al8wpD+rIdVJm/ItDBe/Im09zXIjFoipOjr5gHUhJmTzfFLuTJ/nPTMc2Srsroy4IBXwcTCHyRR7KzA==",
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/types": "8.44.0",
+        "@typescript-eslint/visitor-keys": "8.44.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      }
+    },
+    "node_modules/@typescript-eslint/tsconfig-utils": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.44.0.tgz",
+      "integrity": "sha512-x5Y0+AuEPqAInc6yd0n5DAcvtoQ/vyaGwuX5HE9n6qAefk1GaedqrLQF8kQGylLUb9pnZyLf+iEiL9fr8APDtQ==",
+      "license": "MIT",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/type-utils": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.44.0.tgz",
+      "integrity": "sha512-9cwsoSxJ8Sak67Be/hD2RNt/fsqmWnNE1iHohG8lxqLSNY8xNfyY7wloo5zpW3Nu9hxVgURevqfcH6vvKCt6yg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/types": "8.44.0",
+        "@typescript-eslint/typescript-estree": "8.44.0",
+        "@typescript-eslint/utils": "8.44.0",
+        "debug": "^4.3.4",
+        "ts-api-utils": "^2.1.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/types": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.44.0.tgz",
+      "integrity": "sha512-ZSl2efn44VsYM0MfDQe68RKzBz75NPgLQXuGypmym6QVOWL5kegTZuZ02xRAT9T+onqvM6T8CdQk0OwYMB6ZvA==",
+      "license": "MIT",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      }
+    },
+    "node_modules/@typescript-eslint/typescript-estree": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.44.0.tgz",
+      "integrity": "sha512-lqNj6SgnGcQZwL4/SBJ3xdPEfcBuhCG8zdcwCPgYcmiPLgokiNDKlbPzCwEwu7m279J/lBYWtDYL+87OEfn8Jw==",
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/project-service": "8.44.0",
+        "@typescript-eslint/tsconfig-utils": "8.44.0",
+        "@typescript-eslint/types": "8.44.0",
+        "@typescript-eslint/visitor-keys": "8.44.0",
+        "debug": "^4.3.4",
+        "fast-glob": "^3.3.2",
+        "is-glob": "^4.0.3",
+        "minimatch": "^9.0.4",
+        "semver": "^7.6.0",
+        "ts-api-utils": "^2.1.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/utils": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.44.0.tgz",
+      "integrity": "sha512-nktOlVcg3ALo0mYlV+L7sWUD58KG4CMj1rb2HUVOO4aL3K/6wcD+NERqd0rrA5Vg06b42YhF6cFxeixsp9Riqg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/eslint-utils": "^4.7.0",
+        "@typescript-eslint/scope-manager": "8.44.0",
+        "@typescript-eslint/types": "8.44.0",
+        "@typescript-eslint/typescript-estree": "8.44.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/@typescript-eslint/visitor-keys": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.44.0.tgz",
+      "integrity": "sha512-zaz9u8EJ4GBmnehlrpoKvj/E3dNbuQ7q0ucyZImm3cLqJ8INTc970B1qEqDX/Rzq65r3TvVTN7kHWPBoyW7DWw==",
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/types": "8.44.0",
+        "eslint-visitor-keys": "^4.2.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      }
+    },
+    "node_modules/@vitejs/plugin-vue": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/@vitejs/plugin-vue/-/plugin-vue-5.2.1.tgz",
+      "integrity": "sha512-cxh314tzaWwOLqVes2gnnCtvBDcM1UMdn+iFR+UjAn411dPT3tOmqrJjbMd7koZpMAmBM/GqeV4n9ge7JSiJJQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^18.0.0 || >=20.0.0"
+      },
+      "peerDependencies": {
+        "vite": "^5.0.0 || ^6.0.0",
+        "vue": "^3.2.25"
+      }
+    },
+    "node_modules/@volar/language-core": {
+      "version": "2.4.15",
+      "resolved": "https://registry.npmjs.org/@volar/language-core/-/language-core-2.4.15.tgz",
+      "integrity": "sha512-3VHw+QZU0ZG9IuQmzT68IyN4hZNd9GchGPhbD9+pa8CVv7rnoOZwo7T8weIbrRmihqy3ATpdfXFnqRrfPVK6CA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/source-map": "2.4.15"
+      }
+    },
+    "node_modules/@volar/source-map": {
+      "version": "2.4.15",
+      "resolved": "https://registry.npmjs.org/@volar/source-map/-/source-map-2.4.15.tgz",
+      "integrity": "sha512-CPbMWlUN6hVZJYGcU/GSoHu4EnCHiLaXI9n8c9la6RaI9W5JHX+NqG+GSQcB0JdC2FIBLdZJwGsfKyBB71VlTg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@volar/typescript": {
+      "version": "2.4.15",
+      "resolved": "https://registry.npmjs.org/@volar/typescript/-/typescript-2.4.15.tgz",
+      "integrity": "sha512-2aZ8i0cqPGjXb4BhkMsPYDkkuc2ZQ6yOpqwAuNwUoncELqoy5fRgOQtLR9gB0g902iS0NAkvpIzs27geVyVdPg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/language-core": "2.4.15",
+        "path-browserify": "^1.0.1",
+        "vscode-uri": "^3.0.8"
+      }
+    },
+    "node_modules/@vue/compiler-core": {
+      "version": "3.5.21",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.21.tgz",
+      "integrity": "sha512-8i+LZ0vf6ZgII5Z9XmUvrCyEzocvWT+TeR2VBUVlzIH6Tyv57E20mPZ1bCS+tbejgUgmjrEh7q/0F0bibskAmw==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.28.3",
+        "@vue/shared": "3.5.21",
+        "entities": "^4.5.0",
+        "estree-walker": "^2.0.2",
+        "source-map-js": "^1.2.1"
+      }
+    },
+    "node_modules/@vue/compiler-dom": {
+      "version": "3.5.21",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.5.21.tgz",
+      "integrity": "sha512-jNtbu/u97wiyEBJlJ9kmdw7tAr5Vy0Aj5CgQmo+6pxWNQhXZDPsRr1UWPN4v3Zf82s2H3kF51IbzZ4jMWAgPlQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-core": "3.5.21",
+        "@vue/shared": "3.5.21"
+      }
+    },
+    "node_modules/@vue/compiler-sfc": {
+      "version": "3.5.21",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.5.21.tgz",
+      "integrity": "sha512-SXlyk6I5eUGBd2v8Ie7tF6ADHE9kCR6mBEuPyH1nUZ0h6Xx6nZI29i12sJKQmzbDyr2tUHMhhTt51Z6blbkTTQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.28.3",
+        "@vue/compiler-core": "3.5.21",
+        "@vue/compiler-dom": "3.5.21",
+        "@vue/compiler-ssr": "3.5.21",
+        "@vue/shared": "3.5.21",
+        "estree-walker": "^2.0.2",
+        "magic-string": "^0.30.18",
+        "postcss": "^8.5.6",
+        "source-map-js": "^1.2.1"
+      }
+    },
+    "node_modules/@vue/compiler-ssr": {
+      "version": "3.5.21",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.21.tgz",
+      "integrity": "sha512-vKQ5olH5edFZdf5ZrlEgSO1j1DMA4u23TVK5XR1uMhvwnYvVdDF0nHXJUblL/GvzlShQbjhZZ2uvYmDlAbgo9w==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-dom": "3.5.21",
+        "@vue/shared": "3.5.21"
+      }
+    },
+    "node_modules/@vue/compiler-vue2": {
+      "version": "2.7.16",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-vue2/-/compiler-vue2-2.7.16.tgz",
+      "integrity": "sha512-qYC3Psj9S/mfu9uVi5WvNZIzq+xnXMhOwbTFKKDD7b1lhpnn71jXSFdTQ+WsIEk0ONCd7VV2IMm7ONl6tbQ86A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "de-indent": "^1.0.2",
+        "he": "^1.2.0"
+      }
+    },
+    "node_modules/@vue/devtools-api": {
+      "version": "6.6.4",
+      "resolved": "https://registry.npmjs.org/@vue/devtools-api/-/devtools-api-6.6.4.tgz",
+      "integrity": "sha512-sGhTPMuXqZ1rVOk32RylztWkfXTRhuS7vgAKv0zjqk8gbsHkJ7xfFf+jbySxt7tWObEJwyKaHMikV/WGDiQm8g==",
+      "license": "MIT"
+    },
+    "node_modules/@vue/devtools-kit": {
+      "version": "7.7.7",
+      "resolved": "https://registry.npmjs.org/@vue/devtools-kit/-/devtools-kit-7.7.7.tgz",
+      "integrity": "sha512-wgoZtxcTta65cnZ1Q6MbAfePVFxfM+gq0saaeytoph7nEa7yMXoi6sCPy4ufO111B9msnw0VOWjPEFCXuAKRHA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/devtools-shared": "^7.7.7",
+        "birpc": "^2.3.0",
+        "hookable": "^5.5.3",
+        "mitt": "^3.0.1",
+        "perfect-debounce": "^1.0.0",
+        "speakingurl": "^14.0.1",
+        "superjson": "^2.2.2"
+      }
+    },
+    "node_modules/@vue/devtools-shared": {
+      "version": "7.7.7",
+      "resolved": "https://registry.npmjs.org/@vue/devtools-shared/-/devtools-shared-7.7.7.tgz",
+      "integrity": "sha512-+udSj47aRl5aKb0memBvcUG9koarqnxNM5yjuREvqwK6T3ap4mn3Zqqc17QrBFTqSMjr3HK1cvStEZpMDpfdyw==",
+      "license": "MIT",
+      "dependencies": {
+        "rfdc": "^1.4.1"
+      }
+    },
+    "node_modules/@vue/eslint-config-prettier": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/@vue/eslint-config-prettier/-/eslint-config-prettier-10.1.0.tgz",
+      "integrity": "sha512-J6wV91y2pXc0Phha01k0WOHBTPsoSTf4xlmMjoKaeSxBpAdsgTppGF5RZRdOHM7OA74zAXD+VLANrtYXpiPKkQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "eslint-config-prettier": "^9.1.0",
+        "eslint-plugin-prettier": "^5.2.1"
+      },
+      "peerDependencies": {
+        "eslint": ">= 8.21.0",
+        "prettier": ">= 3.0.0"
+      }
+    },
+    "node_modules/@vue/language-core": {
+      "version": "2.2.12",
+      "resolved": "https://registry.npmjs.org/@vue/language-core/-/language-core-2.2.12.tgz",
+      "integrity": "sha512-IsGljWbKGU1MZpBPN+BvPAdr55YPkj2nB/TBNGNC32Vy2qLG25DYu/NBN2vNtZqdRbTRjaoYrahLrToim2NanA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/language-core": "2.4.15",
+        "@vue/compiler-dom": "^3.5.0",
+        "@vue/compiler-vue2": "^2.7.16",
+        "@vue/shared": "^3.5.0",
+        "alien-signals": "^1.0.3",
+        "minimatch": "^9.0.3",
+        "muggle-string": "^0.4.1",
+        "path-browserify": "^1.0.1"
+      },
+      "peerDependencies": {
+        "typescript": "*"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vue/reactivity": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/reactivity/-/reactivity-3.5.13.tgz",
+      "integrity": "sha512-NaCwtw8o48B9I6L1zl2p41OHo/2Z4wqYGGIK1Khu5T7yxrn+ATOixn/Udn2m+6kZKB/J7cuT9DbWWhRxqixACg==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/shared": "3.5.13"
+      }
+    },
+    "node_modules/@vue/reactivity/node_modules/@vue/shared": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.13.tgz",
+      "integrity": "sha512-/hnE/qP5ZoGpol0a5mDi45bOd7t3tjYJBjsgCsivow7D48cJeV5l05RD82lPqi7gRiphZM37rnhW1l6ZoCNNnQ==",
+      "license": "MIT"
+    },
+    "node_modules/@vue/runtime-core": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/runtime-core/-/runtime-core-3.5.13.tgz",
+      "integrity": "sha512-Fj4YRQ3Az0WTZw1sFe+QDb0aXCerigEpw418pw1HBUKFtnQHWzwojaukAs2X/c9DQz4MQ4bsXTGlcpGxU/RCIw==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/reactivity": "3.5.13",
+        "@vue/shared": "3.5.13"
+      }
+    },
+    "node_modules/@vue/runtime-core/node_modules/@vue/shared": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.13.tgz",
+      "integrity": "sha512-/hnE/qP5ZoGpol0a5mDi45bOd7t3tjYJBjsgCsivow7D48cJeV5l05RD82lPqi7gRiphZM37rnhW1l6ZoCNNnQ==",
+      "license": "MIT"
+    },
+    "node_modules/@vue/runtime-dom": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/runtime-dom/-/runtime-dom-3.5.13.tgz",
+      "integrity": "sha512-dLaj94s93NYLqjLiyFzVs9X6dWhTdAlEAciC3Moq7gzAc13VJUdCnjjRurNM6uTLFATRHexHCTu/Xp3eW6yoog==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/reactivity": "3.5.13",
+        "@vue/runtime-core": "3.5.13",
+        "@vue/shared": "3.5.13",
+        "csstype": "^3.1.3"
+      }
+    },
+    "node_modules/@vue/runtime-dom/node_modules/@vue/shared": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.13.tgz",
+      "integrity": "sha512-/hnE/qP5ZoGpol0a5mDi45bOd7t3tjYJBjsgCsivow7D48cJeV5l05RD82lPqi7gRiphZM37rnhW1l6ZoCNNnQ==",
+      "license": "MIT"
+    },
+    "node_modules/@vue/server-renderer": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/server-renderer/-/server-renderer-3.5.13.tgz",
+      "integrity": "sha512-wAi4IRJV/2SAW3htkTlB+dHeRmpTiVIK1OGLWV1yeStVSebSQQOwGwIq0D3ZIoBj2C2qpgz5+vX9iEBkTdk5YA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-ssr": "3.5.13",
+        "@vue/shared": "3.5.13"
+      },
+      "peerDependencies": {
+        "vue": "3.5.13"
+      }
+    },
+    "node_modules/@vue/server-renderer/node_modules/@vue/compiler-core": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.13.tgz",
+      "integrity": "sha512-oOdAkwqUfW1WqpwSYJce06wvt6HljgY3fGeM9NcVA1HaYOij3mZG9Rkysn0OHuyUAGMbEbARIpsG+LPVlBJ5/Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.25.3",
+        "@vue/shared": "3.5.13",
+        "entities": "^4.5.0",
+        "estree-walker": "^2.0.2",
+        "source-map-js": "^1.2.0"
+      }
+    },
+    "node_modules/@vue/server-renderer/node_modules/@vue/compiler-dom": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.5.13.tgz",
+      "integrity": "sha512-ZOJ46sMOKUjO3e94wPdCzQ6P1Lx/vhp2RSvfaab88Ajexs0AHeV0uasYhi99WPaogmBlRHNRuly8xV75cNTMDA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-core": "3.5.13",
+        "@vue/shared": "3.5.13"
+      }
+    },
+    "node_modules/@vue/server-renderer/node_modules/@vue/compiler-ssr": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.13.tgz",
+      "integrity": "sha512-wMH6vrYHxQl/IybKJagqbquvxpWCuVYpoUJfCqFZwa/JY1GdATAQ+TgVtgrwwMZ0D07QhA99rs/EAAWfvG6KpA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-dom": "3.5.13",
+        "@vue/shared": "3.5.13"
+      }
+    },
+    "node_modules/@vue/server-renderer/node_modules/@vue/shared": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.13.tgz",
+      "integrity": "sha512-/hnE/qP5ZoGpol0a5mDi45bOd7t3tjYJBjsgCsivow7D48cJeV5l05RD82lPqi7gRiphZM37rnhW1l6ZoCNNnQ==",
+      "license": "MIT"
+    },
+    "node_modules/@vue/shared": {
+      "version": "3.5.21",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.21.tgz",
+      "integrity": "sha512-+2k1EQpnYuVuu3N7atWyG3/xoFWIVJZq4Mz8XNOdScFI0etES75fbny/oU4lKWk/577P1zmg0ioYvpGEDZ3DLw==",
+      "license": "MIT"
+    },
+    "node_modules/@vue/tsconfig": {
+      "version": "0.7.0",
+      "resolved": "https://registry.npmjs.org/@vue/tsconfig/-/tsconfig-0.7.0.tgz",
+      "integrity": "sha512-ku2uNz5MaZ9IerPPUyOHzyjhXoX2kVJaVf7hL315DC17vS6IiZRmmCPfggNbU16QTvM80+uYYy3eYJB59WCtvg==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "typescript": "5.x",
+        "vue": "^3.4.0"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        },
+        "vue": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vuetify/loader-shared": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@vuetify/loader-shared/-/loader-shared-2.1.1.tgz",
+      "integrity": "sha512-jSZTzTYaoiv8iwonFCVZQ0YYX/M+Uyl4ng+C4egMJT0Hcmh9gIxJL89qfZICDeo3g0IhqrvipW2FFKKRDMtVcA==",
+      "license": "MIT",
+      "dependencies": {
+        "upath": "^2.0.1"
+      },
+      "peerDependencies": {
+        "vue": "^3.0.0",
+        "vuetify": "^3.0.0"
+      }
+    },
+    "node_modules/@webassemblyjs/ast": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.14.1.tgz",
+      "integrity": "sha512-nuBEDgQfm1ccRp/8bCQrx1frohyufl4JlbMMZ4P1wpeOfDhF6FQkxZJ1b/e+PLwr6X1Nhw6OLme5usuBWYBvuQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/helper-numbers": "1.13.2",
+        "@webassemblyjs/helper-wasm-bytecode": "1.13.2"
+      }
+    },
+    "node_modules/@webassemblyjs/floating-point-hex-parser": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.13.2.tgz",
+      "integrity": "sha512-6oXyTOzbKxGH4steLbLNOu71Oj+C8Lg34n6CqRvqfS2O71BxY6ByfMDRhBytzknj9yGUPVJ1qIKhRlAwO1AovA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@webassemblyjs/helper-api-error": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.13.2.tgz",
+      "integrity": "sha512-U56GMYxy4ZQCbDZd6JuvvNV/WFildOjsaWD3Tzzvmw/mas3cXzRJPMjP83JqEsgSbyrmaGjBfDtV7KDXV9UzFQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@webassemblyjs/helper-buffer": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.14.1.tgz",
+      "integrity": "sha512-jyH7wtcHiKssDtFPRB+iQdxlDf96m0E39yb0k5uJVhFGleZFoNw1c4aeIcVUPPbXUVJ94wwnMOAqUHyzoEPVMA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@webassemblyjs/helper-numbers": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.13.2.tgz",
+      "integrity": "sha512-FE8aCmS5Q6eQYcV3gI35O4J789wlQA+7JrqTTpJqn5emA4U2hvwJmvFRC0HODS+3Ye6WioDklgd6scJ3+PLnEA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/floating-point-hex-parser": "1.13.2",
+        "@webassemblyjs/helper-api-error": "1.13.2",
+        "@xtuc/long": "4.2.2"
+      }
+    },
+    "node_modules/@webassemblyjs/helper-wasm-bytecode": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.13.2.tgz",
+      "integrity": "sha512-3QbLKy93F0EAIXLh0ogEVR6rOubA9AoZ+WRYhNbFyuB70j3dRdwH9g+qXhLAO0kiYGlg3TxDV+I4rQTr/YNXkA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@webassemblyjs/helper-wasm-section": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.14.1.tgz",
+      "integrity": "sha512-ds5mXEqTJ6oxRoqjhWDU83OgzAYjwsCV8Lo/N+oRsNDmx/ZDpqalmrtgOMkHwxsG0iI//3BwWAErYRHtgn0dZw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/ast": "1.14.1",
+        "@webassemblyjs/helper-buffer": "1.14.1",
+        "@webassemblyjs/helper-wasm-bytecode": "1.13.2",
+        "@webassemblyjs/wasm-gen": "1.14.1"
+      }
+    },
+    "node_modules/@webassemblyjs/ieee754": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.13.2.tgz",
+      "integrity": "sha512-4LtOzh58S/5lX4ITKxnAK2USuNEvpdVV9AlgGQb8rJDHaLeHciwG4zlGr0j/SNWlr7x3vO1lDEsuePvtcDNCkw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@xtuc/ieee754": "^1.2.0"
+      }
+    },
+    "node_modules/@webassemblyjs/leb128": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.13.2.tgz",
+      "integrity": "sha512-Lde1oNoIdzVzdkNEAWZ1dZ5orIbff80YPdHx20mrHwHrVNNTjNr8E3xz9BdpcGqRQbAEa+fkrCb+fRFTl/6sQw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@xtuc/long": "4.2.2"
+      }
+    },
+    "node_modules/@webassemblyjs/utf8": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.13.2.tgz",
+      "integrity": "sha512-3NQWGjKTASY1xV5m7Hr0iPeXD9+RDobLll3T9d2AO+g3my8xy5peVyjSag4I50mR1bBSN/Ct12lo+R9tJk0NZQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@webassemblyjs/wasm-edit": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.14.1.tgz",
+      "integrity": "sha512-RNJUIQH/J8iA/1NzlE4N7KtyZNHi3w7at7hDjvRNm5rcUXa00z1vRz3glZoULfJ5mpvYhLybmVcwcjGrC1pRrQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/ast": "1.14.1",
+        "@webassemblyjs/helper-buffer": "1.14.1",
+        "@webassemblyjs/helper-wasm-bytecode": "1.13.2",
+        "@webassemblyjs/helper-wasm-section": "1.14.1",
+        "@webassemblyjs/wasm-gen": "1.14.1",
+        "@webassemblyjs/wasm-opt": "1.14.1",
+        "@webassemblyjs/wasm-parser": "1.14.1",
+        "@webassemblyjs/wast-printer": "1.14.1"
+      }
+    },
+    "node_modules/@webassemblyjs/wasm-gen": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.14.1.tgz",
+      "integrity": "sha512-AmomSIjP8ZbfGQhumkNvgC33AY7qtMCXnN6bL2u2Js4gVCg8fp735aEiMSBbDR7UQIj90n4wKAFUSEd0QN2Ukg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/ast": "1.14.1",
+        "@webassemblyjs/helper-wasm-bytecode": "1.13.2",
+        "@webassemblyjs/ieee754": "1.13.2",
+        "@webassemblyjs/leb128": "1.13.2",
+        "@webassemblyjs/utf8": "1.13.2"
+      }
+    },
+    "node_modules/@webassemblyjs/wasm-opt": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.14.1.tgz",
+      "integrity": "sha512-PTcKLUNvBqnY2U6E5bdOQcSM+oVP/PmrDY9NzowJjislEjwP/C4an2303MCVS2Mg9d3AJpIGdUFIQQWbPds0Sw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/ast": "1.14.1",
+        "@webassemblyjs/helper-buffer": "1.14.1",
+        "@webassemblyjs/wasm-gen": "1.14.1",
+        "@webassemblyjs/wasm-parser": "1.14.1"
+      }
+    },
+    "node_modules/@webassemblyjs/wasm-parser": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.14.1.tgz",
+      "integrity": "sha512-JLBl+KZ0R5qB7mCnud/yyX08jWFw5MsoalJ1pQ4EdFlgj9VdXKGuENGsiCIjegI1W7p91rUlcB/LB5yRJKNTcQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/ast": "1.14.1",
+        "@webassemblyjs/helper-api-error": "1.13.2",
+        "@webassemblyjs/helper-wasm-bytecode": "1.13.2",
+        "@webassemblyjs/ieee754": "1.13.2",
+        "@webassemblyjs/leb128": "1.13.2",
+        "@webassemblyjs/utf8": "1.13.2"
+      }
+    },
+    "node_modules/@webassemblyjs/wast-printer": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.14.1.tgz",
+      "integrity": "sha512-kPSSXE6De1XOR820C90RIo2ogvZG+c3KiHzqUoO/F34Y2shGzesfqv7o57xrxovZJH/MetF5UjroJ/R/3isoiw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@webassemblyjs/ast": "1.14.1",
+        "@xtuc/long": "4.2.2"
+      }
+    },
+    "node_modules/@xtuc/ieee754": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz",
+      "integrity": "sha512-DX8nKgqcGwsc0eJSqYt5lwP4DH5FlHnmuWWBRy7X0NcaGR0ZtuyeESgMwTYVEtxmsNGY+qit4QYT/MIYTOTPeA==",
+      "dev": true,
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@xtuc/long": {
+      "version": "4.2.2",
+      "resolved": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz",
+      "integrity": "sha512-NuHqBY1PB/D8xU6s/thBgOAiAP7HOYDQ32+BFZILJ8ivkUkAHQnWfn6WhL79Owj1qmUnoN/YPhktdIoucipkAQ==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
+    "node_modules/acorn": {
+      "version": "8.15.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
+      "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
+      "license": "MIT",
+      "peer": true,
+      "bin": {
+        "acorn": "bin/acorn"
+      },
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
+    "node_modules/acorn-import-phases": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/acorn-import-phases/-/acorn-import-phases-1.0.4.tgz",
+      "integrity": "sha512-wKmbr/DDiIXzEOiWrTTUcDm24kQ2vGfZQvM2fwg2vXqR5uW6aapr7ObPtj1th32b9u90/Pf4AItvdTh42fBmVQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.13.0"
+      },
+      "peerDependencies": {
+        "acorn": "^8.14.0"
+      }
+    },
+    "node_modules/acorn-jsx": {
+      "version": "5.3.2",
+      "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
+      "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==",
+      "license": "MIT",
+      "peerDependencies": {
+        "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      }
+    },
+    "node_modules/ajv": {
+      "version": "6.12.6",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
+      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "fast-deep-equal": "^3.1.1",
+        "fast-json-stable-stringify": "^2.0.0",
+        "json-schema-traverse": "^0.4.1",
+        "uri-js": "^4.2.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/ajv-formats": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz",
+      "integrity": "sha512-Wx0Kx52hxE7C18hkMEggYlEifqWZtYaRgouJor+WMdPnQyEK13vgEWyVNup7SoeeoLMsr4kf5h6dOW11I15MUA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ajv": "^8.0.0"
+      },
+      "peerDependencies": {
+        "ajv": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "ajv": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/ajv-formats/node_modules/ajv": {
+      "version": "8.17.1",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
+      "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/ajv-formats/node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/ajv-keywords": {
+      "version": "3.5.2",
+      "resolved": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz",
+      "integrity": "sha512-5p6WTN0DdTGVQk6VjcEju19IgaHudalcfabD7yhDGeA6bcQnmL+CpveLJq/3hvfwd1aof6L386Ougkx6RfyMIQ==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "ajv": "^6.9.1"
+      }
+    },
+    "node_modules/alien-signals": {
+      "version": "1.0.13",
+      "resolved": "https://registry.npmjs.org/alien-signals/-/alien-signals-1.0.13.tgz",
+      "integrity": "sha512-OGj9yyTnJEttvzhTUWuscOvtqxq5vrhF7vL9oS0xJ2mK0ItPYP1/y+vCFebfxoEyAz0++1AIwJ5CMr+Fk3nDmg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
+    "node_modules/anymatch": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz",
+      "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==",
+      "devOptional": true,
+      "license": "ISC",
+      "dependencies": {
+        "normalize-path": "^3.0.0",
+        "picomatch": "^2.0.4"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/argparse": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+      "license": "Python-2.0"
+    },
+    "node_modules/balanced-match": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
+      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
+      "license": "MIT"
+    },
+    "node_modules/baseline-browser-mapping": {
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.8.6.tgz",
+      "integrity": "sha512-wrH5NNqren/QMtKUEEJf7z86YjfqW/2uw3IL3/xpqZUC95SSVIFXYQeeGjL6FT/X68IROu6RMehZQS5foy2BXw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "baseline-browser-mapping": "dist/cli.js"
+      }
+    },
+    "node_modules/big.js": {
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/big.js/-/big.js-5.2.2.tgz",
+      "integrity": "sha512-vyL2OymJxmarO8gxMr0mhChsO9QGwhynfuu4+MHTAW6czfq9humCB7rKpUjDd9YUiDPU4mzpyupFSvOClAwbmQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/binary-extensions": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz",
+      "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==",
+      "devOptional": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/birpc": {
+      "version": "2.6.1",
+      "resolved": "https://registry.npmjs.org/birpc/-/birpc-2.6.1.tgz",
+      "integrity": "sha512-LPnFhlDpdSH6FJhJyn4M0kFO7vtQ5iPw24FnG0y21q09xC7e8+1LeR31S1MAIrDAHp4m7aas4bEkTDTvMAtebQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      }
+    },
+    "node_modules/boolbase": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz",
+      "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/brace-expansion": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0"
+      }
+    },
+    "node_modules/braces": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz",
+      "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==",
+      "license": "MIT",
+      "dependencies": {
+        "fill-range": "^7.1.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/browserslist": {
+      "version": "4.26.2",
+      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.26.2.tgz",
+      "integrity": "sha512-ECFzp6uFOSB+dcZ5BK/IBaGWssbSYBHvuMeMt3MMFyhI0Z8SqGgEkBLARgpRH3hutIgPVsALcMwbDrJqPxQ65A==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "baseline-browser-mapping": "^2.8.3",
+        "caniuse-lite": "^1.0.30001741",
+        "electron-to-chromium": "^1.5.218",
+        "node-releases": "^2.0.21",
+        "update-browserslist-db": "^1.1.3"
+      },
+      "bin": {
+        "browserslist": "cli.js"
+      },
+      "engines": {
+        "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
+      }
+    },
+    "node_modules/buffer-from": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
+      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
+      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/callsites": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
+      "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/caniuse-lite": {
+      "version": "1.0.30001743",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001743.tgz",
+      "integrity": "sha512-e6Ojr7RV14Un7dz6ASD0aZDmQPT/A+eZU+nuTNfjqmRrmkmQlnTNWH0SKmqagx9PeW87UVqapSurtAXifmtdmw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/caniuse-lite"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "CC-BY-4.0"
+    },
+    "node_modules/chalk": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
+      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.1.0",
+        "supports-color": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/chalk?sponsor=1"
+      }
+    },
+    "node_modules/chokidar": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
+      "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "anymatch": "~3.1.2",
+        "braces": "~3.0.2",
+        "glob-parent": "~5.1.2",
+        "is-binary-path": "~2.1.0",
+        "is-glob": "~4.0.1",
+        "normalize-path": "~3.0.0",
+        "readdirp": "~3.6.0"
+      },
+      "engines": {
+        "node": ">= 8.10.0"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/chokidar/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "devOptional": true,
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/chrome-trace-event": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.4.tgz",
+      "integrity": "sha512-rNjApaLzuwaOTjCiT8lSDdGN1APCiqkChLMJxJPWLunPAt5fy8xgU9/jNOchV84wfIxrA0lRQB7oCT8jrn/wrQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0"
+      }
+    },
+    "node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "license": "MIT"
+    },
+    "node_modules/commander": {
+      "version": "2.20.3",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
+      "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==",
+      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/concat-map": {
+      "version": "0.0.1",
+      "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
+      "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
+      "license": "MIT"
+    },
+    "node_modules/copy-anything": {
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/copy-anything/-/copy-anything-3.0.5.tgz",
+      "integrity": "sha512-yCEafptTtb4bk7GLEQoM8KVJpxAfdBJYaXyzQEgQQQgYrZiDp8SJmGKlYza6CYjEDNstAdNdKA3UuoULlEbS6w==",
+      "license": "MIT",
+      "dependencies": {
+        "is-what": "^4.1.8"
+      },
+      "engines": {
+        "node": ">=12.13"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/mesqueeb"
+      }
+    },
+    "node_modules/cross-spawn": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
+      "license": "MIT",
+      "dependencies": {
+        "path-key": "^3.1.0",
+        "shebang-command": "^2.0.0",
+        "which": "^2.0.1"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/cssesc": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz",
+      "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "cssesc": "bin/cssesc"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/csstype": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.1.3.tgz",
+      "integrity": "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==",
+      "license": "MIT"
+    },
+    "node_modules/de-indent": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/de-indent/-/de-indent-1.0.2.tgz",
+      "integrity": "sha512-e/1zu3xH5MQryN2zdVaF0OrdNLUbvWxzMbi+iNA6Bky7l1RoP8a2fIbRocyHclXt/arDrrR6lL3TqFD9pMQTsg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/deep-is": {
+      "version": "0.1.4",
+      "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
+      "integrity": "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==",
+      "license": "MIT"
+    },
+    "node_modules/electron-to-chromium": {
+      "version": "1.5.222",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.222.tgz",
+      "integrity": "sha512-gA7psSwSwQRE60CEoLz6JBCQPIxNeuzB2nL8vE03GK/OHxlvykbLyeiumQy1iH5C2f3YbRAZpGCMT12a/9ih9w==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/emojis-list": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/emojis-list/-/emojis-list-3.0.0.tgz",
+      "integrity": "sha512-/kyM18EfinwXZbno9FyUGeFh87KC8HRQBQGildHZbEuRyWFOmv1U10o9BBp8XVZDVNNuQKyIGIu5ZYAAXJ0V2Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
+    "node_modules/enhanced-resolve": {
+      "version": "5.18.3",
+      "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.18.3.tgz",
+      "integrity": "sha512-d4lC8xfavMeBjzGr2vECC3fsGXziXZQyJxD868h2M/mBI3PwAuODxAkLkq5HYuvrPYcUtiLzsTo8U3PgX3Ocww==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.4",
+        "tapable": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/entities": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
+      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/es-module-lexer": {
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
+      "integrity": "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/esbuild": {
+      "version": "0.24.2",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.24.2.tgz",
+      "integrity": "sha512-+9egpBW8I3CD5XPe0n6BfT5fxLzxrlDzqydF3aviG+9ni1lDC/OvMHcxqEFV0+LANZG5R1bFMWfUrjVsdwxJvA==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.24.2",
+        "@esbuild/android-arm": "0.24.2",
+        "@esbuild/android-arm64": "0.24.2",
+        "@esbuild/android-x64": "0.24.2",
+        "@esbuild/darwin-arm64": "0.24.2",
+        "@esbuild/darwin-x64": "0.24.2",
+        "@esbuild/freebsd-arm64": "0.24.2",
+        "@esbuild/freebsd-x64": "0.24.2",
+        "@esbuild/linux-arm": "0.24.2",
+        "@esbuild/linux-arm64": "0.24.2",
+        "@esbuild/linux-ia32": "0.24.2",
+        "@esbuild/linux-loong64": "0.24.2",
+        "@esbuild/linux-mips64el": "0.24.2",
+        "@esbuild/linux-ppc64": "0.24.2",
+        "@esbuild/linux-riscv64": "0.24.2",
+        "@esbuild/linux-s390x": "0.24.2",
+        "@esbuild/linux-x64": "0.24.2",
+        "@esbuild/netbsd-arm64": "0.24.2",
+        "@esbuild/netbsd-x64": "0.24.2",
+        "@esbuild/openbsd-arm64": "0.24.2",
+        "@esbuild/openbsd-x64": "0.24.2",
+        "@esbuild/sunos-x64": "0.24.2",
+        "@esbuild/win32-arm64": "0.24.2",
+        "@esbuild/win32-ia32": "0.24.2",
+        "@esbuild/win32-x64": "0.24.2"
+      }
+    },
+    "node_modules/escalade": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
+      "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/escape-string-regexp": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
+      "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/eslint": {
+      "version": "9.17.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.17.0.tgz",
+      "integrity": "sha512-evtlNcpJg+cZLcnVKwsai8fExnqjGPicK7gnUtlNuzu+Fv9bI0aLpND5T44VLQtoMEnI57LoXO9XAkIXwohKrA==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@eslint-community/eslint-utils": "^4.2.0",
+        "@eslint-community/regexpp": "^4.12.1",
+        "@eslint/config-array": "^0.19.0",
+        "@eslint/core": "^0.9.0",
+        "@eslint/eslintrc": "^3.2.0",
+        "@eslint/js": "9.17.0",
+        "@eslint/plugin-kit": "^0.2.3",
+        "@humanfs/node": "^0.16.6",
+        "@humanwhocodes/module-importer": "^1.0.1",
+        "@humanwhocodes/retry": "^0.4.1",
+        "@types/estree": "^1.0.6",
+        "@types/json-schema": "^7.0.15",
+        "ajv": "^6.12.4",
+        "chalk": "^4.0.0",
+        "cross-spawn": "^7.0.6",
+        "debug": "^4.3.2",
+        "escape-string-regexp": "^4.0.0",
+        "eslint-scope": "^8.2.0",
+        "eslint-visitor-keys": "^4.2.0",
+        "espree": "^10.3.0",
+        "esquery": "^1.5.0",
+        "esutils": "^2.0.2",
+        "fast-deep-equal": "^3.1.3",
+        "file-entry-cache": "^8.0.0",
+        "find-up": "^5.0.0",
+        "glob-parent": "^6.0.2",
+        "ignore": "^5.2.0",
+        "imurmurhash": "^0.1.4",
+        "is-glob": "^4.0.0",
+        "json-stable-stringify-without-jsonify": "^1.0.1",
+        "lodash.merge": "^4.6.2",
+        "minimatch": "^3.1.2",
+        "natural-compare": "^1.4.0",
+        "optionator": "^0.9.3"
+      },
+      "bin": {
+        "eslint": "bin/eslint.js"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://eslint.org/donate"
+      },
+      "peerDependencies": {
+        "jiti": "*"
+      },
+      "peerDependenciesMeta": {
+        "jiti": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/eslint-config-prettier": {
+      "version": "9.1.2",
+      "resolved": "https://registry.npmjs.org/eslint-config-prettier/-/eslint-config-prettier-9.1.2.tgz",
+      "integrity": "sha512-iI1f+D2ViGn+uvv5HuHVUamg8ll4tN+JRHGc6IJi4TP9Kl976C57fzPXgseXNs8v0iA8aSJpHsTWjDb9QJamGQ==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "bin": {
+        "eslint-config-prettier": "bin/cli.js"
+      },
+      "peerDependencies": {
+        "eslint": ">=7.0.0"
+      }
+    },
+    "node_modules/eslint-plugin-prettier": {
+      "version": "5.5.4",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-5.5.4.tgz",
+      "integrity": "sha512-swNtI95SToIz05YINMA6Ox5R057IMAmWZ26GqPxusAp1TZzj+IdY9tXNWWD3vkF/wEqydCONcwjTFpxybBqZsg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "prettier-linter-helpers": "^1.0.0",
+        "synckit": "^0.11.7"
+      },
+      "engines": {
+        "node": "^14.18.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint-plugin-prettier"
+      },
+      "peerDependencies": {
+        "@types/eslint": ">=8.0.0",
+        "eslint": ">=8.0.0",
+        "eslint-config-prettier": ">= 7.0.0 <10.0.0 || >=10.1.0",
+        "prettier": ">=3.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@types/eslint": {
+          "optional": true
+        },
+        "eslint-config-prettier": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/eslint-plugin-vue": {
+      "version": "9.32.0",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-vue/-/eslint-plugin-vue-9.32.0.tgz",
+      "integrity": "sha512-b/Y05HYmnB/32wqVcjxjHZzNpwxj1onBOvqW89W+V+XNG1dRuaFbNd3vT9CLbr2LXjEoq+3vn8DanWf7XU22Ug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/eslint-utils": "^4.4.0",
+        "globals": "^13.24.0",
+        "natural-compare": "^1.4.0",
+        "nth-check": "^2.1.1",
+        "postcss-selector-parser": "^6.0.15",
+        "semver": "^7.6.3",
+        "vue-eslint-parser": "^9.4.3",
+        "xml-name-validator": "^4.0.0"
+      },
+      "engines": {
+        "node": "^14.17.0 || >=16.0.0"
+      },
+      "peerDependencies": {
+        "eslint": "^6.2.0 || ^7.0.0 || ^8.0.0 || ^9.0.0"
+      }
+    },
+    "node_modules/eslint-plugin-vue/node_modules/globals": {
+      "version": "13.24.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz",
+      "integrity": "sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "type-fest": "^0.20.2"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/eslint-plugin-vue/node_modules/type-fest": {
+      "version": "0.20.2",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
+      "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==",
+      "dev": true,
+      "license": "(MIT OR CC0-1.0)",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/eslint-scope": {
+      "version": "8.4.0",
+      "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-8.4.0.tgz",
+      "integrity": "sha512-sNXOfKCn74rt8RICKMvJS7XKV/Xk9kA7DyJr8mJik3S7Cwgy3qlkkmyS2uQB3jiJg6VNdZd/pDBJu0nvG2NlTg==",
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "esrecurse": "^4.3.0",
+        "estraverse": "^5.2.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/eslint-visitor-keys": {
+      "version": "4.2.1",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.1.tgz",
+      "integrity": "sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/eslint/node_modules/@eslint/js": {
+      "version": "9.17.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.17.0.tgz",
+      "integrity": "sha512-Sxc4hqcs1kTu0iID3kcZDW3JHq2a77HO9P8CP6YEA/FpH3Ll8UXE2r/86Rz9YJLKme39S9vU5OWNjC6Xl0Cr3w==",
+      "license": "MIT",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/eslint/node_modules/brace-expansion": {
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
+      }
+    },
+    "node_modules/eslint/node_modules/minimatch": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
+      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^1.1.7"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/espree": {
+      "version": "10.4.0",
+      "resolved": "https://registry.npmjs.org/espree/-/espree-10.4.0.tgz",
+      "integrity": "sha512-j6PAQ2uUr79PZhBjP5C5fhl8e39FmRnOjsD5lGnWrFU8i2G776tBK7+nP8KuQUTTyAZUwfQqXAgrVH5MbH9CYQ==",
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "acorn": "^8.15.0",
+        "acorn-jsx": "^5.3.2",
+        "eslint-visitor-keys": "^4.2.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/esquery": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.6.0.tgz",
+      "integrity": "sha512-ca9pw9fomFcKPvFLXhBKUK90ZvGibiGOvRJNbjljY7s7uq/5YO4BOzcYtJqExdx99rF6aAcnRxHmcUHcz6sQsg==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "estraverse": "^5.1.0"
+      },
+      "engines": {
+        "node": ">=0.10"
+      }
+    },
+    "node_modules/esrecurse": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz",
+      "integrity": "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==",
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "estraverse": "^5.2.0"
+      },
+      "engines": {
+        "node": ">=4.0"
+      }
+    },
+    "node_modules/estraverse": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz",
+      "integrity": "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=4.0"
+      }
+    },
+    "node_modules/estree-walker": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz",
+      "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==",
+      "license": "MIT"
+    },
+    "node_modules/esutils": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz",
+      "integrity": "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/events": {
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/events/-/events-3.3.0.tgz",
+      "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.8.x"
+      }
+    },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "license": "MIT"
+    },
+    "node_modules/fast-diff": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.3.0.tgz",
+      "integrity": "sha512-VxPP4NqbUjj6MaAOafWeUn2cXWLcCtljklUtZf0Ind4XQ+QPtmA0b18zZy0jIQx+ExRVCR/ZQpBmik5lXshNsw==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
+    "node_modules/fast-glob": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz",
+      "integrity": "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==",
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.stat": "^2.0.2",
+        "@nodelib/fs.walk": "^1.2.3",
+        "glob-parent": "^5.1.2",
+        "merge2": "^1.3.0",
+        "micromatch": "^4.0.8"
+      },
+      "engines": {
+        "node": ">=8.6.0"
+      }
+    },
+    "node_modules/fast-glob/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/fast-json-stable-stringify": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
+      "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==",
+      "license": "MIT"
+    },
+    "node_modules/fast-levenshtein": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz",
+      "integrity": "sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==",
+      "license": "MIT"
+    },
+    "node_modules/fast-uri": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
+      "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/fastq": {
+      "version": "1.19.1",
+      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz",
+      "integrity": "sha512-GwLTyxkCXjXbxqIhTsMI2Nui8huMPtnxg7krajPJAjnEG/iiOS7i+zCtWGZR9G0NBKbXKh6X9m9UIsYX/N6vvQ==",
+      "license": "ISC",
+      "dependencies": {
+        "reusify": "^1.0.4"
+      }
+    },
+    "node_modules/file-entry-cache": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-8.0.0.tgz",
+      "integrity": "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==",
+      "license": "MIT",
+      "dependencies": {
+        "flat-cache": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=16.0.0"
+      }
+    },
+    "node_modules/fill-range": {
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
+      "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==",
+      "license": "MIT",
+      "dependencies": {
+        "to-regex-range": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/find-up": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz",
+      "integrity": "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==",
+      "license": "MIT",
+      "dependencies": {
+        "locate-path": "^6.0.0",
+        "path-exists": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/flat-cache": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-4.0.1.tgz",
+      "integrity": "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==",
+      "license": "MIT",
+      "dependencies": {
+        "flatted": "^3.2.9",
+        "keyv": "^4.5.4"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/flatted": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz",
+      "integrity": "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==",
+      "license": "ISC"
+    },
+    "node_modules/fs-extra": {
+      "version": "11.3.2",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.2.tgz",
+      "integrity": "sha512-Xr9F6z6up6Ws+NjzMCZc6WXg2YFRlrLP9NQDO3VQrWrfiojdhS56TzueT88ze0uBdCTwEIhQ3ptnmKeWGFAe0A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.14"
+      }
+    },
+    "node_modules/fs.realpath": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
+      "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/glob": {
+      "version": "7.2.3",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
+      "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==",
+      "deprecated": "Glob versions prior to v9 are no longer supported",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "fs.realpath": "^1.0.0",
+        "inflight": "^1.0.4",
+        "inherits": "2",
+        "minimatch": "^3.1.1",
+        "once": "^1.3.0",
+        "path-is-absolute": "^1.0.0"
+      },
+      "engines": {
+        "node": "*"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/glob-parent": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
+      "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==",
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/glob-to-regexp": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz",
+      "integrity": "sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw==",
+      "dev": true,
+      "license": "BSD-2-Clause"
+    },
+    "node_modules/glob/node_modules/brace-expansion": {
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
+      }
+    },
+    "node_modules/glob/node_modules/minimatch": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
+      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^1.1.7"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/globals": {
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
+      "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/graceful-fs": {
+      "version": "4.2.11",
+      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
+      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/graphemer": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz",
+      "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/has-flag": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
+      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
+      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/he": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/he/-/he-1.2.0.tgz",
+      "integrity": "sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "he": "bin/he"
+      }
+    },
+    "node_modules/hookable": {
+      "version": "5.5.3",
+      "resolved": "https://registry.npmjs.org/hookable/-/hookable-5.5.3.tgz",
+      "integrity": "sha512-Yc+BQe8SvoXH1643Qez1zqLRmbA5rCL+sSmk6TVos0LWVfNIB7PGncdlId77WzLGSIB5KaWgTaNTs2lNVEI6VQ==",
+      "license": "MIT"
+    },
+    "node_modules/ignore": {
+      "version": "5.3.2",
+      "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
+      "integrity": "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
+    "node_modules/immutable": {
+      "version": "4.3.7",
+      "resolved": "https://registry.npmjs.org/immutable/-/immutable-4.3.7.tgz",
+      "integrity": "sha512-1hqclzwYwjRDFLjcFxOM5AYkkG0rpFPpr1RLPMEuGczoS7YA8gLhy8SWXYRAA/XwfEHpfo3cw5JGioS32fnMRw==",
+      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/import-fresh": {
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz",
+      "integrity": "sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==",
+      "license": "MIT",
+      "dependencies": {
+        "parent-module": "^1.0.0",
+        "resolve-from": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/imurmurhash": {
+      "version": "0.1.4",
+      "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
+      "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.8.19"
+      }
+    },
+    "node_modules/inflight": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
+      "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==",
+      "deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "once": "^1.3.0",
+        "wrappy": "1"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/interpret": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/interpret/-/interpret-1.4.0.tgz",
+      "integrity": "sha512-agE4QfB2Lkp9uICn7BAqoscw4SZP9kTE2hxiFI3jBPmXJfdqiahTbUuKGsMoN2GtqL9AxhYioAcVvgsb1HvRbA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/is-binary-path": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz",
+      "integrity": "sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "binary-extensions": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/is-core-module": {
+      "version": "2.16.1",
+      "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz",
+      "integrity": "sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hasown": "^2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/is-extglob": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
+      "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-glob": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
+      "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==",
+      "license": "MIT",
+      "dependencies": {
+        "is-extglob": "^2.1.1"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-number": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
+      "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.12.0"
+      }
+    },
+    "node_modules/is-what": {
+      "version": "4.1.16",
+      "resolved": "https://registry.npmjs.org/is-what/-/is-what-4.1.16.tgz",
+      "integrity": "sha512-ZhMwEosbFJkA0YhFnNDgTM4ZxDRsS6HqTo7qsZM08fehyRYIYa0yHu5R6mgo1n/8MgaPBXiPimPD77baVFYg+A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.13"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/mesqueeb"
+      }
+    },
+    "node_modules/isexe": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
+      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
+      "license": "ISC"
+    },
+    "node_modules/jest-worker": {
+      "version": "27.5.1",
+      "resolved": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz",
+      "integrity": "sha512-7vuh85V5cdDofPyxn58nrPjBktZo0u9x1g8WtjQol+jZDaE+fhN+cIvTj11GndBnMnyfrUOG1sZQxCdjKh+DKg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "merge-stream": "^2.0.0",
+        "supports-color": "^8.0.0"
+      },
+      "engines": {
+        "node": ">= 10.13.0"
+      }
+    },
+    "node_modules/jest-worker/node_modules/supports-color": {
+      "version": "8.1.1",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz",
+      "integrity": "sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-color?sponsor=1"
+      }
+    },
+    "node_modules/js-yaml": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
+      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1"
+      },
+      "bin": {
+        "js-yaml": "bin/js-yaml.js"
+      }
+    },
+    "node_modules/json-buffer": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz",
+      "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==",
+      "license": "MIT"
+    },
+    "node_modules/json-parse-even-better-errors": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz",
+      "integrity": "sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/json-schema-traverse": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
+      "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==",
+      "license": "MIT"
+    },
+    "node_modules/json-stable-stringify-without-jsonify": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz",
+      "integrity": "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==",
+      "license": "MIT"
+    },
+    "node_modules/json5": {
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
+      "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "json5": "lib/cli.js"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/jsonfile": {
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.2.0.tgz",
+      "integrity": "sha512-FGuPw30AdOIUTRMC2OMRtQV+jkVj2cfPqSeWXv1NEAJ1qZ5zb1X6z1mFhbfOB/iy3ssJCD+3KuZ8r8C3uVFlAg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "universalify": "^2.0.0"
+      },
+      "optionalDependencies": {
+        "graceful-fs": "^4.1.6"
+      }
+    },
+    "node_modules/keyv": {
+      "version": "4.5.4",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
+      "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==",
+      "license": "MIT",
+      "dependencies": {
+        "json-buffer": "3.0.1"
+      }
+    },
+    "node_modules/levn": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz",
+      "integrity": "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==",
+      "license": "MIT",
+      "dependencies": {
+        "prelude-ls": "^1.2.1",
+        "type-check": "~0.4.0"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/loader-runner": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.0.tgz",
+      "integrity": "sha512-3R/1M+yS3j5ou80Me59j7F9IMs4PXs3VqRrm0TU3AbKPxlmpoY1TNscJV/oGJXo8qCatFGTfDbY6W6ipGOYXfg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.11.5"
+      }
+    },
+    "node_modules/loader-utils": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/loader-utils/-/loader-utils-2.0.4.tgz",
+      "integrity": "sha512-xXqpXoINfFhgua9xiqD8fPFHgkoq1mmmpE92WlDbm9rNRd/EbRb+Gqf908T2DMfuHjjJlksiK2RbHVOdD/MqSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "big.js": "^5.2.2",
+        "emojis-list": "^3.0.0",
+        "json5": "^2.1.2"
+      },
+      "engines": {
+        "node": ">=8.9.0"
+      }
+    },
+    "node_modules/locate-path": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
+      "integrity": "sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==",
+      "license": "MIT",
+      "dependencies": {
+        "p-locate": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/lodash": {
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.merge": {
+      "version": "4.6.2",
+      "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz",
+      "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==",
+      "license": "MIT"
+    },
+    "node_modules/magic-string": {
+      "version": "0.30.19",
+      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.19.tgz",
+      "integrity": "sha512-2N21sPY9Ws53PZvsEpVtNuSW+ScYbQdp4b9qUaL+9QkHUrGFKo56Lg9Emg5s9V/qrtNBmiR01sYhUOwu3H+VOw==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
+    "node_modules/merge-stream": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz",
+      "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/merge2": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
+      "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/micromatch": {
+      "version": "4.0.8",
+      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz",
+      "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==",
+      "license": "MIT",
+      "dependencies": {
+        "braces": "^3.0.3",
+        "picomatch": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=8.6"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/minimatch": {
+      "version": "9.0.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
+      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/mitt": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/mitt/-/mitt-3.0.1.tgz",
+      "integrity": "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==",
+      "license": "MIT"
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/muggle-string": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/muggle-string/-/muggle-string-0.4.1.tgz",
+      "integrity": "sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.11",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
+      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/natural-compare": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz",
+      "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==",
+      "license": "MIT"
+    },
+    "node_modules/neo-async": {
+      "version": "2.6.2",
+      "resolved": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
+      "integrity": "sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/node-releases": {
+      "version": "2.0.21",
+      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.21.tgz",
+      "integrity": "sha512-5b0pgg78U3hwXkCM8Z9b2FJdPZlr9Psr9V2gQPESdGHqbntyFJKFW4r5TeWGFzafGY3hzs1JC62VEQMbl1JFkw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/normalize-path": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
+      "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==",
+      "devOptional": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/nth-check": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz",
+      "integrity": "sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "boolbase": "^1.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/nth-check?sponsor=1"
+      }
+    },
+    "node_modules/null-loader": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/null-loader/-/null-loader-4.0.1.tgz",
+      "integrity": "sha512-pxqVbi4U6N26lq+LmgIbB5XATP0VdZKOG25DhHi8btMmJJefGArFyDg1yc4U3hWCJbMqSrw0qyrz1UQX+qYXqg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "loader-utils": "^2.0.0",
+        "schema-utils": "^3.0.0"
+      },
+      "engines": {
+        "node": ">= 10.13.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      },
+      "peerDependencies": {
+        "webpack": "^4.0.0 || ^5.0.0"
+      }
+    },
+    "node_modules/once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "wrappy": "1"
+      }
+    },
+    "node_modules/optionator": {
+      "version": "0.9.4",
+      "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
+      "integrity": "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==",
+      "license": "MIT",
+      "dependencies": {
+        "deep-is": "^0.1.3",
+        "fast-levenshtein": "^2.0.6",
+        "levn": "^0.4.1",
+        "prelude-ls": "^1.2.1",
+        "type-check": "^0.4.0",
+        "word-wrap": "^1.2.5"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/p-limit": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz",
+      "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==",
+      "license": "MIT",
+      "dependencies": {
+        "yocto-queue": "^0.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/p-locate": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz",
+      "integrity": "sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==",
+      "license": "MIT",
+      "dependencies": {
+        "p-limit": "^3.0.2"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/p-map": {
+      "version": "7.0.3",
+      "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.3.tgz",
+      "integrity": "sha512-VkndIv2fIB99swvQoA65bm+fsmt6UNdGeIB0oxBs+WhAhdh08QA04JXpI7rbB9r08/nkbysKoya9rtDERYOYMA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/parent-module": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz",
+      "integrity": "sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==",
+      "license": "MIT",
+      "dependencies": {
+        "callsites": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/path-browserify": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz",
+      "integrity": "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/path-exists": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
+      "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/path-is-absolute": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
+      "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/path-key": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
+      "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/path-parse": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz",
+      "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/perfect-debounce": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/perfect-debounce/-/perfect-debounce-1.0.0.tgz",
+      "integrity": "sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA==",
+      "license": "MIT"
+    },
+    "node_modules/perfect-scrollbar": {
+      "version": "1.5.6",
+      "resolved": "https://registry.npmjs.org/perfect-scrollbar/-/perfect-scrollbar-1.5.6.tgz",
+      "integrity": "sha512-rixgxw3SxyJbCaSpo1n35A/fwI1r2rdwMKOTCg/AcG+xOEyZcE8UHVjpZMFCVImzsFoCZeJTT+M/rdEIQYO2nw==",
+      "license": "MIT"
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
+      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/pinia": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/pinia/-/pinia-2.3.0.tgz",
+      "integrity": "sha512-ohZj3jla0LL0OH5PlLTDMzqKiVw2XARmC1XYLdLWIPBMdhDW/123ZWr4zVAhtJm+aoSkFa13pYXskAvAscIkhQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/devtools-api": "^6.6.3",
+        "vue-demi": "^0.14.10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/posva"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.4.4",
+        "vue": "^2.7.0 || ^3.5.11"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/pinia/node_modules/vue-demi": {
+      "version": "0.14.10",
+      "resolved": "https://registry.npmjs.org/vue-demi/-/vue-demi-0.14.10.tgz",
+      "integrity": "sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "vue-demi-fix": "bin/vue-demi-fix.js",
+        "vue-demi-switch": "bin/vue-demi-switch.js"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      },
+      "peerDependencies": {
+        "@vue/composition-api": "^1.0.0-rc.1",
+        "vue": "^3.0.0-0 || ^2.6.0"
+      },
+      "peerDependenciesMeta": {
+        "@vue/composition-api": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.6",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.6.tgz",
+      "integrity": "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==",
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.11",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/prelude-ls": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz",
+      "integrity": "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/prettier": {
+      "version": "3.4.2",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.4.2.tgz",
+      "integrity": "sha512-e9MewbtFo+Fevyuxn/4rrcDAaq0IYxPGLvObpQjiZBMAzB9IGmzlnG9RZy3FFas+eBMu2vA0CszMeduow5dIuQ==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "bin": {
+        "prettier": "bin/prettier.cjs"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
+      }
+    },
+    "node_modules/prettier-linter-helpers": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/prettier-linter-helpers/-/prettier-linter-helpers-1.0.0.tgz",
+      "integrity": "sha512-GbK2cP9nraSSUF9N2XwUwqfzlAFlMNYYl+ShE/V+H8a9uNl/oUqB1w2EL54Jh0OlyRSd8RfWYJ3coVS4TROP2w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-diff": "^1.1.2"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/punycode": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+      "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/queue-microtask": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
+      "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/randombytes": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
+      "integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "^5.1.0"
+      }
+    },
+    "node_modules/readdirp": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
+      "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "picomatch": "^2.2.1"
+      },
+      "engines": {
+        "node": ">=8.10.0"
+      }
+    },
+    "node_modules/rechoir": {
+      "version": "0.6.2",
+      "resolved": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz",
+      "integrity": "sha512-HFM8rkZ+i3zrV+4LQjwQ0W+ez98pApMGM3HUrN04j3CqzPOzl9nmP15Y8YXNm8QHGv/eacOVEjqhmWpkRV0NAw==",
+      "dev": true,
+      "dependencies": {
+        "resolve": "^1.1.6"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/resolve": {
+      "version": "1.22.10",
+      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.10.tgz",
+      "integrity": "sha512-NPRy+/ncIMeDlTAsuqwKIiferiawhefFJtkNSW0qZJEqMEb+qBt/77B/jGeeek+F0uOeN05CDa6HXbbIgtVX4w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "is-core-module": "^2.16.0",
+        "path-parse": "^1.0.7",
+        "supports-preserve-symlinks-flag": "^1.0.0"
+      },
+      "bin": {
+        "resolve": "bin/resolve"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/resolve-from": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz",
+      "integrity": "sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/reusify": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz",
+      "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==",
+      "license": "MIT",
+      "engines": {
+        "iojs": ">=1.0.0",
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/rfdc": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/rfdc/-/rfdc-1.4.1.tgz",
+      "integrity": "sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==",
+      "license": "MIT"
+    },
+    "node_modules/rollup": {
+      "version": "4.50.2",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.50.2.tgz",
+      "integrity": "sha512-BgLRGy7tNS9H66aIMASq1qSYbAAJV6Z6WR4QYTvj5FgF15rZ/ympT1uixHXwzbZUBDbkvqUI1KR0fH1FhMaQ9w==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "1.0.8"
+      },
+      "bin": {
+        "rollup": "dist/bin/rollup"
+      },
+      "engines": {
+        "node": ">=18.0.0",
+        "npm": ">=8.0.0"
+      },
+      "optionalDependencies": {
+        "@rollup/rollup-android-arm-eabi": "4.50.2",
+        "@rollup/rollup-android-arm64": "4.50.2",
+        "@rollup/rollup-darwin-arm64": "4.50.2",
+        "@rollup/rollup-darwin-x64": "4.50.2",
+        "@rollup/rollup-freebsd-arm64": "4.50.2",
+        "@rollup/rollup-freebsd-x64": "4.50.2",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.50.2",
+        "@rollup/rollup-linux-arm-musleabihf": "4.50.2",
+        "@rollup/rollup-linux-arm64-gnu": "4.50.2",
+        "@rollup/rollup-linux-arm64-musl": "4.50.2",
+        "@rollup/rollup-linux-loong64-gnu": "4.50.2",
+        "@rollup/rollup-linux-ppc64-gnu": "4.50.2",
+        "@rollup/rollup-linux-riscv64-gnu": "4.50.2",
+        "@rollup/rollup-linux-riscv64-musl": "4.50.2",
+        "@rollup/rollup-linux-s390x-gnu": "4.50.2",
+        "@rollup/rollup-linux-x64-gnu": "4.50.2",
+        "@rollup/rollup-linux-x64-musl": "4.50.2",
+        "@rollup/rollup-openharmony-arm64": "4.50.2",
+        "@rollup/rollup-win32-arm64-msvc": "4.50.2",
+        "@rollup/rollup-win32-ia32-msvc": "4.50.2",
+        "@rollup/rollup-win32-x64-msvc": "4.50.2",
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/run-parallel": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
+      "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "queue-microtask": "^1.2.2"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/sass": {
+      "version": "1.77.1",
+      "resolved": "https://registry.npmjs.org/sass/-/sass-1.77.1.tgz",
+      "integrity": "sha512-OMEyfirt9XEfyvocduUIOlUSkWOXS/LAt6oblR/ISXCTukyavjex+zQNm51pPCOiFKY1QpWvEH1EeCkgyV3I6w==",
+      "devOptional": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "chokidar": ">=3.0.0 <4.0.0",
+        "immutable": "^4.0.0",
+        "source-map-js": ">=0.6.2 <2.0.0"
+      },
+      "bin": {
+        "sass": "sass.js"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/sass-loader": {
+      "version": "16.0.4",
+      "resolved": "https://registry.npmjs.org/sass-loader/-/sass-loader-16.0.4.tgz",
+      "integrity": "sha512-LavLbgbBGUt3wCiYzhuLLu65+fWXaXLmq7YxivLhEqmiupCFZ5sKUAipK3do6V80YSU0jvSxNhEdT13IXNr3rg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "neo-async": "^2.6.2"
+      },
+      "engines": {
+        "node": ">= 18.12.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      },
+      "peerDependencies": {
+        "@rspack/core": "0.x || 1.x",
+        "node-sass": "^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0 || ^9.0.0",
+        "sass": "^1.3.0",
+        "sass-embedded": "*",
+        "webpack": "^5.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@rspack/core": {
+          "optional": true
+        },
+        "node-sass": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "webpack": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/schema-utils": {
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.3.0.tgz",
+      "integrity": "sha512-pN/yOAvcC+5rQ5nERGuwrjLlYvLTbCibnZ1I7B1LaiAz9BRBlE9GMgE/eqV30P7aJQUf7Ddimy/RsbYO/GrVGg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/json-schema": "^7.0.8",
+        "ajv": "^6.12.5",
+        "ajv-keywords": "^3.5.2"
+      },
+      "engines": {
+        "node": ">= 10.13.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      }
+    },
+    "node_modules/semver": {
+      "version": "7.7.2",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
+      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/serialize-javascript": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
+      "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "randombytes": "^2.1.0"
+      }
+    },
+    "node_modules/shebang-command": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
+      "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
+      "license": "MIT",
+      "dependencies": {
+        "shebang-regex": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/shebang-regex": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
+      "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/shelljs": {
+      "version": "0.8.5",
+      "resolved": "https://registry.npmjs.org/shelljs/-/shelljs-0.8.5.tgz",
+      "integrity": "sha512-TiwcRcrkhHvbrZbnRcFYMLl30Dfov3HKqzp5tO5b4pt6G/SezKcYhmDg15zXVBswHmctSAQKznqNW2LO5tTDow==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "glob": "^7.0.0",
+        "interpret": "^1.0.0",
+        "rechoir": "^0.6.2"
+      },
+      "bin": {
+        "shjs": "bin/shjs"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/source-map": {
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
+      "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
+      "devOptional": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/source-map-support": {
+      "version": "0.5.21",
+      "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz",
+      "integrity": "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "buffer-from": "^1.0.0",
+        "source-map": "^0.6.0"
+      }
+    },
+    "node_modules/speakingurl": {
+      "version": "14.0.1",
+      "resolved": "https://registry.npmjs.org/speakingurl/-/speakingurl-14.0.1.tgz",
+      "integrity": "sha512-1POYv7uv2gXoyGFpBCmpDVSNV74IfsWlDW216UPjbWufNf+bSU6GdbDsxdcxtfwb4xlI3yxzOTKClUosxARYrQ==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/strip-json-comments": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz",
+      "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/superjson": {
+      "version": "2.2.2",
+      "resolved": "https://registry.npmjs.org/superjson/-/superjson-2.2.2.tgz",
+      "integrity": "sha512-5JRxVqC8I8NuOUjzBbvVJAKNM8qoVuH0O77h4WInc/qC2q5IreqKxYwgkga3PfA22OayK2ikceb/B26dztPl+Q==",
+      "license": "MIT",
+      "dependencies": {
+        "copy-anything": "^3.0.2"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/supports-color": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/supports-preserve-symlinks-flag": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
+      "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/synckit": {
+      "version": "0.11.11",
+      "resolved": "https://registry.npmjs.org/synckit/-/synckit-0.11.11.tgz",
+      "integrity": "sha512-MeQTA1r0litLUf0Rp/iisCaL8761lKAZHaimlbGK4j0HysC4PLfqygQj9srcs0m2RdtDYnF8UuYyKpbjHYp7Jw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@pkgr/core": "^0.2.9"
+      },
+      "engines": {
+        "node": "^14.18.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/synckit"
+      }
+    },
+    "node_modules/tapable": {
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.2.3.tgz",
+      "integrity": "sha512-ZL6DDuAlRlLGghwcfmSn9sK3Hr6ArtyudlSAiCqQ6IfE+b+HHbydbYDIG15IfS5do+7XQQBdBiubF/cV2dnDzg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      }
+    },
+    "node_modules/terser": {
+      "version": "5.44.0",
+      "resolved": "https://registry.npmjs.org/terser/-/terser-5.44.0.tgz",
+      "integrity": "sha512-nIVck8DK+GM/0Frwd+nIhZ84pR/BX7rmXMfYwyg+Sri5oGVE99/E3KvXqpC2xHFxyqXyGHTKBSioxxplrO4I4w==",
+      "devOptional": true,
+      "license": "BSD-2-Clause",
+      "peer": true,
+      "dependencies": {
+        "@jridgewell/source-map": "^0.3.3",
+        "acorn": "^8.15.0",
+        "commander": "^2.20.0",
+        "source-map-support": "~0.5.20"
+      },
+      "bin": {
+        "terser": "bin/terser"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/terser-webpack-plugin": {
+      "version": "5.3.14",
+      "resolved": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.3.14.tgz",
+      "integrity": "sha512-vkZjpUjb6OMS7dhV+tILUW6BhpDR7P2L/aQSAv+Uwk+m8KATX9EccViHTJR2qDtACKPIYndLGCyl3FMo+r2LMw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "^0.3.25",
+        "jest-worker": "^27.4.5",
+        "schema-utils": "^4.3.0",
+        "serialize-javascript": "^6.0.2",
+        "terser": "^5.31.1"
+      },
+      "engines": {
+        "node": ">= 10.13.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      },
+      "peerDependencies": {
+        "webpack": "^5.1.0"
+      },
+      "peerDependenciesMeta": {
+        "@swc/core": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "uglify-js": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/terser-webpack-plugin/node_modules/ajv": {
+      "version": "8.17.1",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
+      "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/terser-webpack-plugin/node_modules/ajv-keywords": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-5.1.0.tgz",
+      "integrity": "sha512-YCS/JNFAUyr5vAuhk1DWm1CBxRHW9LbJ2ozWeemrIqpbsqKjHVxYPyi5GC0rjZIT5JxJ3virVTS8wk4i/Z+krw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3"
+      },
+      "peerDependencies": {
+        "ajv": "^8.8.2"
+      }
+    },
+    "node_modules/terser-webpack-plugin/node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/terser-webpack-plugin/node_modules/schema-utils": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.2.tgz",
+      "integrity": "sha512-Gn/JaSk/Mt9gYubxTtSn/QCV4em9mpAPiR1rqy/Ocu19u/G9J5WWdNoUT4SiV6mFC3y6cxyFcFwdzPM3FgxGAQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/json-schema": "^7.0.9",
+        "ajv": "^8.9.0",
+        "ajv-formats": "^2.1.1",
+        "ajv-keywords": "^5.1.0"
+      },
+      "engines": {
+        "node": ">= 10.13.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.15",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
+      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tinyglobby/node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/tinyglobby/node_modules/picomatch": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
+      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/to-regex-range": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
+      "integrity": "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==",
+      "license": "MIT",
+      "dependencies": {
+        "is-number": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=8.0"
+      }
+    },
+    "node_modules/ts-api-utils": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+      "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.12"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.8.4"
+      }
+    },
+    "node_modules/type-check": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz",
+      "integrity": "sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==",
+      "license": "MIT",
+      "dependencies": {
+        "prelude-ls": "^1.2.1"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/type-fest": {
+      "version": "4.41.0",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-4.41.0.tgz",
+      "integrity": "sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==",
+      "license": "(MIT OR CC0-1.0)",
+      "engines": {
+        "node": ">=16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.7.2",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.7.2.tgz",
+      "integrity": "sha512-i5t66RHxDvVN40HfDd1PsEThGNnlMCMT3jMUuoh9/0TaqWevNontacunWyN02LA9/fIbEWlcHZcgTKb9QoaLfg==",
+      "license": "Apache-2.0",
+      "peer": true,
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/typescript-eslint": {
+      "version": "8.44.0",
+      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.44.0.tgz",
+      "integrity": "sha512-ib7mCkYuIzYonCq9XWF5XNw+fkj2zg629PSa9KNIQ47RXFF763S5BIX4wqz1+FLPogTZoiw8KmCiRPRa8bL3qw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/eslint-plugin": "8.44.0",
+        "@typescript-eslint/parser": "8.44.0",
+        "@typescript-eslint/typescript-estree": "8.44.0",
+        "@typescript-eslint/utils": "8.44.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "6.20.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz",
+      "integrity": "sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg==",
+      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/universalify": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz",
+      "integrity": "sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 10.0.0"
+      }
+    },
+    "node_modules/upath": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/upath/-/upath-2.0.1.tgz",
+      "integrity": "sha512-1uEe95xksV1O0CYKXo8vQvN1JEbtJp7lb7C5U9HMsIp6IVwntkH/oNUzyVNQSd4S1sYk2FpSSW44FqMc8qee5w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4",
+        "yarn": "*"
+      }
+    },
+    "node_modules/update-browserslist-db": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.1.3.tgz",
+      "integrity": "sha512-UxhIZQ+QInVdunkDAaiazvvT/+fXL5Osr0JZlJulepYu6Jd7qJtDZjlur0emRlT71EN3ScPoE7gvsuIKKNavKw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "escalade": "^3.2.0",
+        "picocolors": "^1.1.1"
+      },
+      "bin": {
+        "update-browserslist-db": "cli.js"
+      },
+      "peerDependencies": {
+        "browserslist": ">= 4.21.0"
+      }
+    },
+    "node_modules/uri-js": {
+      "version": "4.4.1",
+      "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
+      "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==",
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "punycode": "^2.1.0"
+      }
+    },
+    "node_modules/util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/vee-validate": {
+      "version": "4.15.1",
+      "resolved": "https://registry.npmjs.org/vee-validate/-/vee-validate-4.15.1.tgz",
+      "integrity": "sha512-DkFsiTwEKau8VIxyZBGdO6tOudD+QoUBPuHj3e6QFqmbfCRj1ArmYWue9lEp6jLSWBIw4XPlDLjFIZNLdRAMSg==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/devtools-api": "^7.5.2",
+        "type-fest": "^4.8.3"
+      },
+      "peerDependencies": {
+        "vue": "^3.4.26"
+      }
+    },
+    "node_modules/vee-validate/node_modules/@vue/devtools-api": {
+      "version": "7.7.7",
+      "resolved": "https://registry.npmjs.org/@vue/devtools-api/-/devtools-api-7.7.7.tgz",
+      "integrity": "sha512-lwOnNBH2e7x1fIIbVT7yF5D+YWhqELm55/4ZKf45R9T8r9dE2AIOy8HKjfqzGsoTHFbWbr337O4E0A0QADnjBg==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/devtools-kit": "^7.7.7"
+      }
+    },
+    "node_modules/vite": {
+      "version": "6.0.6",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-6.0.6.tgz",
+      "integrity": "sha512-NSjmUuckPmDU18bHz7QZ+bTYhRR0iA72cs2QAxCqDpafJ0S6qetco0LB3WW2OxlMHS0JmAv+yZ/R3uPmMyGTjQ==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "esbuild": "^0.24.2",
+        "postcss": "^8.4.49",
+        "rollup": "^4.23.0"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0",
+        "jiti": ">=1.21.0",
+        "less": "*",
+        "lightningcss": "^1.21.0",
+        "sass": "*",
+        "sass-embedded": "*",
+        "stylus": "*",
+        "sugarss": "*",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "lightningcss": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vite-plugin-static-copy": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/vite-plugin-static-copy/-/vite-plugin-static-copy-3.1.2.tgz",
+      "integrity": "sha512-aVmYOzptLVOI2b1jL+cmkF7O6uhRv1u5fvOkQgbohWZp2CbR22kn9ZqkCUIt9umKF7UhdbsEpshn1rf4720QFg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "chokidar": "^3.6.0",
+        "fs-extra": "^11.3.0",
+        "p-map": "^7.0.3",
+        "picocolors": "^1.1.1",
+        "tinyglobby": "^0.2.14"
+      },
+      "engines": {
+        "node": "^18.0.0 || >=20.0.0"
+      },
+      "peerDependencies": {
+        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0"
+      }
+    },
+    "node_modules/vite-plugin-vuetify": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/vite-plugin-vuetify/-/vite-plugin-vuetify-2.0.4.tgz",
+      "integrity": "sha512-A4cliYUoP/u4AWSRVRvAPKgpgR987Pss7LpFa7s1GvOe8WjgDq92Rt3eVXrvgxGCWvZsPKziVqfHHdCMqeDhfw==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@vuetify/loader-shared": "^2.0.3",
+        "debug": "^4.3.3",
+        "upath": "^2.0.1"
+      },
+      "engines": {
+        "node": "^18.0.0 || >=20.0.0"
+      },
+      "peerDependencies": {
+        "vite": ">=5",
+        "vue": "^3.0.0",
+        "vuetify": "^3.0.0"
+      }
+    },
+    "node_modules/vscode-uri": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/vscode-uri/-/vscode-uri-3.1.0.tgz",
+      "integrity": "sha512-/BpdSx+yCQGnCvecbyXdxHDkuk55/G3xwnC0GqY4gmQ3j+A+g8kzzgB4Nk/SINjqn6+waqw3EgbVF2QKExkRxQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/vue": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/vue/-/vue-3.5.13.tgz",
+      "integrity": "sha512-wmeiSMxkZCSc+PM2w2VRsOYAZC8GdipNFRTsLSfodVqI9mbejKeXEGr8SckuLnrQPGe3oJN5c3K0vpoU9q/wCQ==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@vue/compiler-dom": "3.5.13",
+        "@vue/compiler-sfc": "3.5.13",
+        "@vue/runtime-dom": "3.5.13",
+        "@vue/server-renderer": "3.5.13",
+        "@vue/shared": "3.5.13"
+      },
+      "peerDependencies": {
+        "typescript": "*"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vue-cli-plugin-vuetify": {
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/vue-cli-plugin-vuetify/-/vue-cli-plugin-vuetify-2.5.8.tgz",
+      "integrity": "sha512-uqi0/URJETJBbWlQHD1l0pnY7JN8Ytu+AL1fw50HFlGByPa8/xx+mq19GkFXA9FcwFT01IqEc/TkxMPugchomg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "null-loader": "^4.0.1",
+        "semver": "^7.1.2",
+        "shelljs": "^0.8.3"
+      },
+      "peerDependencies": {
+        "webpack": "^4.0.0 || ^5.0.0"
+      },
+      "peerDependenciesMeta": {
+        "sass-loader": {
+          "optional": true
+        },
+        "vuetify-loader": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vue-eslint-parser": {
+      "version": "9.4.3",
+      "resolved": "https://registry.npmjs.org/vue-eslint-parser/-/vue-eslint-parser-9.4.3.tgz",
+      "integrity": "sha512-2rYRLWlIpaiN8xbPiDyXZXRgLGOtWxERV7ND5fFAv5qo1D2N9Fu9MNajBNc6o13lZ+24DAWCkQCvj4klgmcITg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.3.4",
+        "eslint-scope": "^7.1.1",
+        "eslint-visitor-keys": "^3.3.0",
+        "espree": "^9.3.1",
+        "esquery": "^1.4.0",
+        "lodash": "^4.17.21",
+        "semver": "^7.3.6"
+      },
+      "engines": {
+        "node": "^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/mysticatea"
+      },
+      "peerDependencies": {
+        "eslint": ">=6.0.0"
+      }
+    },
+    "node_modules/vue-eslint-parser/node_modules/eslint-scope": {
+      "version": "7.2.2",
+      "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-7.2.2.tgz",
+      "integrity": "sha512-dOt21O7lTMhDM+X9mB4GX+DZrZtCUJPL/wlcTqxyrx5IvO0IYtILdtrQGQp+8n5S0gwSVmOf9NQrjMOgfQZlIg==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "esrecurse": "^4.3.0",
+        "estraverse": "^5.2.0"
+      },
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/vue-eslint-parser/node_modules/eslint-visitor-keys": {
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz",
+      "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/vue-eslint-parser/node_modules/espree": {
+      "version": "9.6.1",
+      "resolved": "https://registry.npmjs.org/espree/-/espree-9.6.1.tgz",
+      "integrity": "sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "acorn": "^8.9.0",
+        "acorn-jsx": "^5.3.2",
+        "eslint-visitor-keys": "^3.4.1"
+      },
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/vue-router": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/vue-router/-/vue-router-4.5.0.tgz",
+      "integrity": "sha512-HDuk+PuH5monfNuY+ct49mNmkCRK4xJAV9Ts4z9UFc4rzdDnxQLyCMGGc8pKhZhHTVzfanpNwB/lwqevcBwI4w==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/devtools-api": "^6.6.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/posva"
+      },
+      "peerDependencies": {
+        "vue": "^3.2.0"
+      }
+    },
+    "node_modules/vue-tsc": {
+      "version": "2.2.12",
+      "resolved": "https://registry.npmjs.org/vue-tsc/-/vue-tsc-2.2.12.tgz",
+      "integrity": "sha512-P7OP77b2h/Pmk+lZdJ0YWs+5tJ6J2+uOQPo7tlBnY44QqQSPYvS0qVT4wqDJgwrZaLe47etJLLQRFia71GYITw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/typescript": "2.4.15",
+        "@vue/language-core": "2.2.12"
+      },
+      "bin": {
+        "vue-tsc": "bin/vue-tsc.js"
+      },
+      "peerDependencies": {
+        "typescript": ">=5.0.0"
+      }
+    },
+    "node_modules/vue/node_modules/@vue/compiler-core": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.13.tgz",
+      "integrity": "sha512-oOdAkwqUfW1WqpwSYJce06wvt6HljgY3fGeM9NcVA1HaYOij3mZG9Rkysn0OHuyUAGMbEbARIpsG+LPVlBJ5/Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.25.3",
+        "@vue/shared": "3.5.13",
+        "entities": "^4.5.0",
+        "estree-walker": "^2.0.2",
+        "source-map-js": "^1.2.0"
+      }
+    },
+    "node_modules/vue/node_modules/@vue/compiler-dom": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.5.13.tgz",
+      "integrity": "sha512-ZOJ46sMOKUjO3e94wPdCzQ6P1Lx/vhp2RSvfaab88Ajexs0AHeV0uasYhi99WPaogmBlRHNRuly8xV75cNTMDA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-core": "3.5.13",
+        "@vue/shared": "3.5.13"
+      }
+    },
+    "node_modules/vue/node_modules/@vue/compiler-sfc": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.5.13.tgz",
+      "integrity": "sha512-6VdaljMpD82w6c2749Zhf5T9u5uLBWKnVue6XWxprDobftnletJ8+oel7sexFfM3qIxNmVE7LSFGTpv6obNyaQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.25.3",
+        "@vue/compiler-core": "3.5.13",
+        "@vue/compiler-dom": "3.5.13",
+        "@vue/compiler-ssr": "3.5.13",
+        "@vue/shared": "3.5.13",
+        "estree-walker": "^2.0.2",
+        "magic-string": "^0.30.11",
+        "postcss": "^8.4.48",
+        "source-map-js": "^1.2.0"
+      }
+    },
+    "node_modules/vue/node_modules/@vue/compiler-ssr": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.13.tgz",
+      "integrity": "sha512-wMH6vrYHxQl/IybKJagqbquvxpWCuVYpoUJfCqFZwa/JY1GdATAQ+TgVtgrwwMZ0D07QhA99rs/EAAWfvG6KpA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-dom": "3.5.13",
+        "@vue/shared": "3.5.13"
+      }
+    },
+    "node_modules/vue/node_modules/@vue/shared": {
+      "version": "3.5.13",
+      "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.5.13.tgz",
+      "integrity": "sha512-/hnE/qP5ZoGpol0a5mDi45bOd7t3tjYJBjsgCsivow7D48cJeV5l05RD82lPqi7gRiphZM37rnhW1l6ZoCNNnQ==",
+      "license": "MIT"
+    },
+    "node_modules/vue3-perfect-scrollbar": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/vue3-perfect-scrollbar/-/vue3-perfect-scrollbar-2.0.0.tgz",
+      "integrity": "sha512-nSWVcRyViCgt0Pe3RhU3w/BllLcFSrEzYOGlRBjSyhVmiZlERHHziffW+9P8L0IMEWouC5t+uYrgNJGSAElqMA==",
+      "dependencies": {
+        "perfect-scrollbar": "^1.5.5"
+      },
+      "peerDependencies": {
+        "vue": "^3.0.0"
+      }
+    },
+    "node_modules/vuetify": {
+      "version": "3.7.6",
+      "resolved": "https://registry.npmjs.org/vuetify/-/vuetify-3.7.6.tgz",
+      "integrity": "sha512-lol0Va5HtMIqZfjccSD5DLv5v31R/asJXzc6s7ULy51PHr1DjXxWylZejhq0kVpMGW64MiV1FmA/p8eYQfOWfQ==",
+      "license": "MIT",
+      "peer": true,
+      "engines": {
+        "node": "^12.20 || >=14.13"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/johnleider"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.7",
+        "vite-plugin-vuetify": ">=1.0.0",
+        "vue": "^3.3.0",
+        "webpack-plugin-vuetify": ">=2.0.0"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        },
+        "vite-plugin-vuetify": {
+          "optional": true
+        },
+        "webpack-plugin-vuetify": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/watchpack": {
+      "version": "2.4.4",
+      "resolved": "https://registry.npmjs.org/watchpack/-/watchpack-2.4.4.tgz",
+      "integrity": "sha512-c5EGNOiyxxV5qmTtAB7rbiXxi1ooX1pQKMLX/MIabJjRA0SJBQOjKF+KSVfHkr9U1cADPon0mRiVe/riyaiDUA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "glob-to-regexp": "^0.4.1",
+        "graceful-fs": "^4.1.2"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/webpack": {
+      "version": "5.101.3",
+      "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.101.3.tgz",
+      "integrity": "sha512-7b0dTKR3Ed//AD/6kkx/o7duS8H3f1a4w3BYpIriX4BzIhjkn4teo05cptsxvLesHFKK5KObnadmCHBwGc+51A==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@types/eslint-scope": "^3.7.7",
+        "@types/estree": "^1.0.8",
+        "@types/json-schema": "^7.0.15",
+        "@webassemblyjs/ast": "^1.14.1",
+        "@webassemblyjs/wasm-edit": "^1.14.1",
+        "@webassemblyjs/wasm-parser": "^1.14.1",
+        "acorn": "^8.15.0",
+        "acorn-import-phases": "^1.0.3",
+        "browserslist": "^4.24.0",
+        "chrome-trace-event": "^1.0.2",
+        "enhanced-resolve": "^5.17.3",
+        "es-module-lexer": "^1.2.1",
+        "eslint-scope": "5.1.1",
+        "events": "^3.2.0",
+        "glob-to-regexp": "^0.4.1",
+        "graceful-fs": "^4.2.11",
+        "json-parse-even-better-errors": "^2.3.1",
+        "loader-runner": "^4.2.0",
+        "mime-types": "^2.1.27",
+        "neo-async": "^2.6.2",
+        "schema-utils": "^4.3.2",
+        "tapable": "^2.1.1",
+        "terser-webpack-plugin": "^5.3.11",
+        "watchpack": "^2.4.1",
+        "webpack-sources": "^3.3.3"
+      },
+      "bin": {
+        "webpack": "bin/webpack.js"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      },
+      "peerDependenciesMeta": {
+        "webpack-cli": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/webpack-sources": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-3.3.3.tgz",
+      "integrity": "sha512-yd1RBzSGanHkitROoPFd6qsrxt+oFhg/129YzheDGqeustzX0vTZJZsSsQjVQC4yzBQ56K55XU8gaNCtIzOnTg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/webpack/node_modules/ajv": {
+      "version": "8.17.1",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
+      "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/webpack/node_modules/ajv-keywords": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-5.1.0.tgz",
+      "integrity": "sha512-YCS/JNFAUyr5vAuhk1DWm1CBxRHW9LbJ2ozWeemrIqpbsqKjHVxYPyi5GC0rjZIT5JxJ3virVTS8wk4i/Z+krw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3"
+      },
+      "peerDependencies": {
+        "ajv": "^8.8.2"
+      }
+    },
+    "node_modules/webpack/node_modules/eslint-scope": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz",
+      "integrity": "sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "esrecurse": "^4.3.0",
+        "estraverse": "^4.1.1"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/webpack/node_modules/estraverse": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz",
+      "integrity": "sha512-39nnKffWz8xN1BU/2c79n9nB9HDzo0niYUqx6xyqUnyoAnQyyWpOTdZEeiCch8BBu515t4wp9ZmgVfVhn9EBpw==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=4.0"
+      }
+    },
+    "node_modules/webpack/node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/webpack/node_modules/schema-utils": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.2.tgz",
+      "integrity": "sha512-Gn/JaSk/Mt9gYubxTtSn/QCV4em9mpAPiR1rqy/Ocu19u/G9J5WWdNoUT4SiV6mFC3y6cxyFcFwdzPM3FgxGAQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/json-schema": "^7.0.9",
+        "ajv": "^8.9.0",
+        "ajv-formats": "^2.1.1",
+        "ajv-keywords": "^5.1.0"
+      },
+      "engines": {
+        "node": ">= 10.13.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      }
+    },
+    "node_modules/which": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
+      "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
+      "license": "ISC",
+      "dependencies": {
+        "isexe": "^2.0.0"
+      },
+      "bin": {
+        "node-which": "bin/node-which"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/word-wrap": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
+      "integrity": "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/wrappy": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/xml-name-validator": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-4.0.0.tgz",
+      "integrity": "sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/yocto-queue": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
+      "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    }
+  }
+}
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..4317b2a
--- /dev/null
+++ b/package.json
@@ -0,0 +1,53 @@
+{
+  "name": "ktrix",
+  "version": "0.0.1",
+  "private": false,
+  "license": "AGPL-3.0-or-later",
+  "author": "Sebastian Krupinski",
+  "type": "module",
+  "scripts": {
+    "build": "vite build --mode production",
+    "dev": "vite build --mode development",
+    "watch": "vite build --mode development --watch",
+    "typecheck": "vue-tsc --noEmit",
+    "lint": "eslint . --ext .vue,.js,.jsx,.cjs,.mjs,.ts,.tsx,.cts,.mts --fix --ignore-path .gitignore",
+    "build:modules": "for dir in modules/*/; do if [ -f \"$dir/package.json\" ]; then echo \"Building $dir\" && npm run build --prefix \"$dir\"; fi; done",
+    "build:all": "npm run build && npm run build:modules",
+    "dev:modules": "for dir in modules/*/; do if [ -f \"$dir/package.json\" ]; then echo \"Building $dir\" && npm run dev --prefix \"$dir\"; fi; done",
+    "dev:all": "npm run dev && npm run dev:modules"
+  },
+  "dependencies": {
+    "@fontsource/inter": "5.1.0",
+    "@fontsource/poppins": "5.1.0",
+    "@fontsource/public-sans": "5.1.1",
+    "@fontsource/roboto": "5.1.0",
+    "@tsconfig/node20": "20.1.4",
+    "@typescript-eslint/parser": "^8.18.2",
+    "@vue/compiler-sfc": "^3.5.16",
+    "pinia": "2.3.0",
+    "vee-validate": "^4.15.1",
+    "vite-plugin-vuetify": "2.0.4",
+    "vue": "3.5.13",
+    "vue-router": "4.5.0",
+    "vue3-perfect-scrollbar": "2.0.0",
+    "vuetify": "3.7.6"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.17.0",
+    "@types/node": "22.10.2",
+    "@vitejs/plugin-vue": "5.2.1",
+    "@vue/eslint-config-prettier": "10.1.0",
+    "@vue/tsconfig": "0.7.0",
+    "eslint": "9.17.0",
+    "eslint-plugin-vue": "9.32.0",
+    "prettier": "3.4.2",
+    "sass": "1.77.1",
+    "sass-loader": "16.0.4",
+    "typescript": "5.7.2",
+    "typescript-eslint": "^8.18.2",
+    "vite": "6.0.6",
+    "vite-plugin-static-copy": "^3.1.2",
+    "vue-cli-plugin-vuetify": "2.5.8",
+    "vue-tsc": "^2.2.10"
+  }
+}
diff --git a/phpunit.dist.xml b/phpunit.dist.xml
new file mode 100644
index 0000000..f9937ba
--- /dev/null
+++ b/phpunit.dist.xml
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!-- https://phpunit.readthedocs.io/en/latest/configuration.html -->
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
+         colors="true"
+         failOnDeprecation="true"
+         failOnNotice="true"
+         failOnWarning="true"
+         bootstrap="tests/php/bootstrap.php"
+         cacheDirectory=".phpunit.cache"
+>
+    <php>
+        <ini name="display_errors" value="1" />
+        <ini name="error_reporting" value="-1" />
+        <server name="APP_ENV" value="test" force="true" />
+        <server name="SHELL_VERBOSITY" value="-1" />
+    </php>
+
+    <testsuites>
+        <testsuite name="Project Test Suite">
+            <directory>tests/php</directory>
+        </testsuite>
+    </testsuites>
+
+    <source ignoreSuppressionOfDeprecations="true"
+            ignoreIndirectDeprecations="true"
+            restrictNotices="true"
+            restrictWarnings="true"
+    >
+        <include>
+            <directory>src</directory>
+        </include>
+
+        <deprecationTrigger>
+            <function>trigger_deprecation</function>
+        </deprecationTrigger>
+    </source>
+
+    <extensions>
+    </extensions>
+</phpunit>
diff --git a/scripts/generate-vendor-shims.ts b/scripts/generate-vendor-shims.ts
new file mode 100644
index 0000000..4c48694
--- /dev/null
+++ b/scripts/generate-vendor-shims.ts
@@ -0,0 +1,95 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const OUTPUT_DIR = path.resolve(__dirname, '../public/vendor');
+
+interface LibraryDefinition {
+  packageName: string;
+  globalName: string;
+  outputFile: string;
+}
+
+interface WriteShimOptions {
+  outputDir: string;
+  silent: boolean;
+}
+
+type ShimSource = Pick<LibraryDefinition, 'packageName' | 'globalName'>;
+
+const libraries: LibraryDefinition[] = [
+  { packageName: 'vue', globalName: 'Vue', outputFile: 'vue.mjs' },
+  { packageName: 'vue-router', globalName: 'VueRouter', outputFile: 'vue-router.mjs' },
+  { packageName: 'pinia', globalName: 'Pinia', outputFile: 'pinia.mjs' },
+];
+
+const formatLines = (globalName: string, exports: readonly string[]): string => {
+  const lines: string[] = [];
+  lines.push(`const ${globalName} = window.${globalName};`);
+  lines.push(`if (!${globalName}) {`);
+  lines.push(`  throw new Error('${globalName} runtime is not available on window.');`);
+  lines.push('}');
+  lines.push(`export default ${globalName};`);
+
+  for (const name of exports) {
+    lines.push(`export const ${name} = ${globalName}.${name};`);
+  }
+
+  lines.push('');
+  return lines.join('\n');
+};
+
+const generateShim = ({ packageName, globalName }: ShimSource): string => {
+  const mod = require(packageName) as Record<string, unknown>;
+  const exportNames = Object.keys(mod)
+    .filter((key) => key !== 'default')
+    .sort();
+
+  return formatLines(globalName, exportNames);
+};
+
+const writeShim = async (
+  { packageName, globalName, outputFile }: LibraryDefinition,
+  { outputDir, silent }: WriteShimOptions,
+): Promise<void> => {
+  const content = generateShim({ packageName, globalName });
+  await writeFile(path.join(outputDir, outputFile), content, 'utf8');
+
+  if (!silent) {
+    console.log(`Generated ${outputFile}`);
+  }
+};
+
+export interface GenerateVendorShimsOptions {
+  outputDir?: string;
+  silent?: boolean;
+}
+
+export type GenerateVendorShims = (options?: GenerateVendorShimsOptions) => Promise<void>;
+
+export const generateVendorShims: GenerateVendorShims = async (options = {}) => {
+  const { outputDir = OUTPUT_DIR, silent = false } = options;
+
+  await mkdir(outputDir, { recursive: true });
+
+  await Promise.all(libraries.map((library) => writeShim(library, { outputDir, silent })));
+
+  if (!silent) {
+    console.log(`[generate-vendor-shims] Vendor shims updated in ${outputDir}`);
+  }
+};
+
+const isCliExecution = Boolean(process.argv[1] && path.resolve(process.argv[1]) === __filename);
+
+if (isCliExecution) {
+  void generateVendorShims().catch((error) => {
+    console.error('[generate-vendor-shims] Failed to generate shims', error);
+    process.exitCode = 1;
+  });
+}
diff --git a/shared/lib/Blob/MimeTypes.php b/shared/lib/Blob/MimeTypes.php
new file mode 100644
index 0000000..c7c759f
--- /dev/null
+++ b/shared/lib/Blob/MimeTypes.php
@@ -0,0 +1,219 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Blob;
+
+/**
+ * MimeTypes - MIME type and format resolution utility
+ * 
+ * Provides bidirectional mapping between MIME types and file format identifiers.
+ */
+class MimeTypes {
+
+	/** Default MIME type for unknown/binary content */
+	public const MIME_BINARY = 'application/octet-stream';
+
+	/** Default format for unknown/binary content */
+	public const FORMAT_BINARY = 'binary';
+
+	/**
+	 * MIME type to format mapping
+	 */
+	private const MIME_TO_FORMAT = [
+		// Images
+		'image/jpeg' => 'jpeg',
+		'image/png' => 'png',
+		'image/gif' => 'gif',
+		'image/webp' => 'webp',
+		'image/bmp' => 'bmp',
+		'image/x-ms-bmp' => 'bmp',
+		'image/tiff' => 'tiff',
+		'image/x-icon' => 'ico',
+		'image/vnd.microsoft.icon' => 'ico',
+		'image/svg+xml' => 'svg',
+		'image/heic' => 'heic',
+		'image/heif' => 'heif',
+		'image/avif' => 'avif',
+		
+		// Documents
+		'application/pdf' => 'pdf',
+		'application/rtf' => 'rtf',
+		'text/rtf' => 'rtf',
+		'application/msword' => 'doc',
+		'application/vnd.openxmlformats-officedocument.wordprocessingml.document' => 'docx',
+		'application/vnd.ms-excel' => 'xls',
+		'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet' => 'xlsx',
+		'application/vnd.ms-powerpoint' => 'ppt',
+		'application/vnd.openxmlformats-officedocument.presentationml.presentation' => 'pptx',
+		'application/vnd.oasis.opendocument.text' => 'odt',
+		'application/vnd.oasis.opendocument.spreadsheet' => 'ods',
+		'application/vnd.oasis.opendocument.presentation' => 'odp',
+		
+		// Archives
+		'application/zip' => 'zip',
+		'application/x-zip-compressed' => 'zip',
+		'application/gzip' => 'gzip',
+		'application/x-gzip' => 'gzip',
+		'application/x-bzip2' => 'bzip2',
+		'application/x-xz' => 'xz',
+		'application/x-rar-compressed' => 'rar',
+		'application/vnd.rar' => 'rar',
+		'application/x-7z-compressed' => '7z',
+		'application/x-tar' => 'tar',
+		
+		// Audio
+		'audio/mpeg' => 'mp3',
+		'audio/mp3' => 'mp3',
+		'audio/ogg' => 'ogg',
+		'audio/flac' => 'flac',
+		'audio/x-flac' => 'flac',
+		'audio/wav' => 'wav',
+		'audio/x-wav' => 'wav',
+		'audio/aac' => 'aac',
+		'audio/mp4' => 'm4a',
+		'audio/x-m4a' => 'm4a',
+		'audio/webm' => 'webm',
+		
+		// Video
+		'video/mp4' => 'mp4',
+		'video/webm' => 'webm',
+		'video/x-msvideo' => 'avi',
+		'video/mpeg' => 'mpeg',
+		'video/quicktime' => 'mov',
+		'video/x-matroska' => 'mkv',
+		'video/x-flv' => 'flv',
+		'video/3gpp' => '3gp',
+		
+		// Fonts
+		'font/woff' => 'woff',
+		'font/woff2' => 'woff2',
+		'font/ttf' => 'ttf',
+		'font/otf' => 'otf',
+		'application/font-woff' => 'woff',
+		'application/font-woff2' => 'woff2',
+		'application/x-font-ttf' => 'ttf',
+		'application/x-font-otf' => 'otf',
+		
+		// Text/Code
+		'text/plain' => 'text',
+		'text/html' => 'html',
+		'text/css' => 'css',
+		'text/csv' => 'csv',
+		'text/xml' => 'xml',
+		'application/xml' => 'xml',
+		'application/json' => 'json',
+		'application/javascript' => 'js',
+		'text/javascript' => 'js',
+		'application/x-httpd-php' => 'php',
+		'text/x-php' => 'php',
+		'text/markdown' => 'md',
+		'text/x-python' => 'py',
+		'application/x-python-code' => 'py',
+		
+		// Other
+		'application/epub+zip' => 'epub',
+		'application/x-sqlite3' => 'sqlite',
+		'application/wasm' => 'wasm',
+		'application/octet-stream' => 'binary',
+	];
+
+	/** Cached reverse mapping (format -> mime) */
+	private static ?array $formatToMime = null;
+
+	/**
+	 * Get format from MIME type
+	 *
+	 * @param string $mime MIME type
+	 * @return string|null Format or null if not found
+	 */
+	public static function toFormat(string $mime): ?string {
+		return self::MIME_TO_FORMAT[$mime] ?? null;
+	}
+
+	/**
+	 * Get MIME type from format
+	 *
+	 * @param string $format Format identifier
+	 * @return string|null MIME type or null if not found
+	 */
+	public static function toMime(string $format): ?string {
+		if (self::$formatToMime === null) {
+			self::$formatToMime = [];
+			foreach (self::MIME_TO_FORMAT as $mime => $fmt) {
+				// Keep first occurrence (most canonical MIME type)
+				if (!isset(self::$formatToMime[$fmt])) {
+					self::$formatToMime[$fmt] = $mime;
+				}
+			}
+		}
+		return self::$formatToMime[$format] ?? null;
+	}
+
+	/**
+	 * Extract format from MIME type string (with fallback parsing)
+	 *
+	 * @param string $mime MIME type
+	 * @return string|null Format or null
+	 */
+	public static function parseFormat(string $mime): ?string {
+		// Check direct mapping first
+		if (isset(self::MIME_TO_FORMAT[$mime])) {
+			return self::MIME_TO_FORMAT[$mime];
+		}
+
+		// Try to extract from MIME subtype (e.g., "image/jpeg" -> "jpeg")
+		$parts = explode('/', $mime, 2);
+		if (count($parts) === 2) {
+			$subtype = $parts[1];
+			// Remove x- prefix and any parameters
+			$subtype = preg_replace('/^x-/', '', $subtype);
+			$subtype = explode(';', $subtype)[0];
+			$subtype = explode('+', $subtype)[0];
+			
+			if (strlen($subtype) > 0 && strlen($subtype) <= 10) {
+				return strtolower($subtype);
+			}
+		}
+
+		return null;
+	}
+
+	/**
+	 * Check if MIME type is known
+	 *
+	 * @param string $mime MIME type
+	 * @return bool
+	 */
+	public static function isKnownMime(string $mime): bool {
+		return isset(self::MIME_TO_FORMAT[$mime]);
+	}
+
+	/**
+	 * Check if format is known
+	 *
+	 * @param string $format Format identifier
+	 * @return bool
+	 */
+	public static function isKnownFormat(string $format): bool {
+		if (self::$formatToMime === null) {
+			self::toMime($format); // Initialize cache
+		}
+		return isset(self::$formatToMime[$format]);
+	}
+
+	/**
+	 * Get all known MIME types
+	 *
+	 * @return array<string, string> MIME type to format mapping
+	 */
+	public static function all(): array {
+		return self::MIME_TO_FORMAT;
+	}
+
+}
diff --git a/shared/lib/Blob/Signature.php b/shared/lib/Blob/Signature.php
new file mode 100644
index 0000000..497e267
--- /dev/null
+++ b/shared/lib/Blob/Signature.php
@@ -0,0 +1,230 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Blob;
+
+use finfo;
+
+/**
+ * Signature - Analyzes binary content to determine MIME type and format
+ * 
+ * This utility only requires the first bytes of a file to detect its format,
+ * making it compatible with streams, chunked uploads, and remote storage backends like S3.
+ * 
+ * Uses PHP's built-in finfo extension (libmagic) for reliable detection with
+ * fallback to custom magic byte detection if finfo is unavailable.
+ */
+class Signature {
+
+	/** Minimum bytes needed for reliable detection */
+	public const HEADER_SIZE = 256;
+
+	/**
+	 * Fallback magic byte signatures for when finfo is unavailable
+	 */
+	private const SIGNATURES = [
+		['offset' => 0, 'bytes' => 'FFD8FF', 'format' => 'jpeg'],
+		['offset' => 0, 'bytes' => '89504E470D0A1A0A', 'format' => 'png'],
+		['offset' => 0, 'bytes' => '47494638', 'format' => 'gif'],
+		['offset' => 0, 'bytes' => '25504446', 'format' => 'pdf'],
+		['offset' => 0, 'bytes' => '504B0304', 'format' => 'zip'],
+		['offset' => 0, 'bytes' => '1F8B08', 'format' => 'gzip'],
+		['offset' => 4, 'bytes' => '66747970', 'format' => 'mp4'],
+		['offset' => 0, 'bytes' => '494433', 'format' => 'mp3'],
+		['offset' => 0, 'bytes' => 'FFFB', 'format' => 'mp3'],
+		['offset' => 0, 'bytes' => '52494646', 'format' => 'riff'], // WAV/AVI/WEBP
+	];
+
+	/** Cached finfo instance */
+	private static ?finfo $finfo = null;
+
+	/**
+	 * Detect both MIME type and format from content bytes in a single operation
+	 *
+	 * @param string $headerBytes First bytes of the file content (256 recommended)
+	 * @return array{mime: string, format: string} Array with 'mime' and 'format' keys
+	 */
+	public static function detect(string $headerBytes): array {
+		if (strlen($headerBytes) === 0) {
+			return ['mime' => MimeTypes::MIME_BINARY, 'format' => MimeTypes::FORMAT_BINARY];
+		}
+
+		$mime = null;
+		$format = null;
+
+		// Try finfo first (most reliable)
+		if (extension_loaded('fileinfo')) {
+			$mime = self::detectMimeType($headerBytes);
+			if ($mime !== null) {
+				// Get format from MIME
+				$format = MimeTypes::toFormat($mime);
+				if ($format === null && $mime !== MimeTypes::MIME_BINARY) {
+					$format = MimeTypes::parseFormat($mime);
+				}
+			}
+		}
+
+		// Fallback to magic bytes if format not determined
+		if ($format === null) {
+			$format = self::detectFromMagicBytes($headerBytes);
+		}
+
+		// Ensure MIME type is set
+		if ($mime === null || $mime === MimeTypes::MIME_BINARY) {
+			$mime = MimeTypes::toMime($format) ?? MimeTypes::MIME_BINARY;
+		}
+
+		return ['mime' => $mime, 'format' => $format];
+	}
+
+	/**
+	 * Detect both MIME type and format from a stream in a single operation
+	 *
+	 * @param resource $stream File stream
+	 * @return array{mime: string, format: string} Array with 'mime' and 'format' keys
+	 */
+	public static function detectFromStream($stream): array {
+		$position = ftell($stream);
+		$headerBytes = fread($stream, self::HEADER_SIZE);
+		fseek($stream, $position);
+
+		if ($headerBytes === false || $headerBytes === '') {
+			return ['mime' => MimeTypes::MIME_BINARY, 'format' => MimeTypes::FORMAT_BINARY];
+		}
+
+		return self::detect($headerBytes);
+	}
+
+	/**
+	 * Detect file format from content bytes
+	 *
+	 * @param string $headerBytes First bytes of the file content (256 recommended)
+	 * @return string Detected format (e.g., 'jpeg', 'png', 'pdf') or 'binary' if unknown
+	 */
+	public static function detectFormat(string $headerBytes): string {
+		return self::detect($headerBytes)['format'];
+	}
+
+	/**
+	 * Detect MIME type from content bytes using finfo
+	 *
+	 * @param string $headerBytes Content bytes
+	 * @return string|null MIME type or null on failure
+	 */
+	public static function detectMimeType(string $headerBytes): ?string {
+		if (!extension_loaded('fileinfo')) {
+			return null;
+		}
+
+		if (self::$finfo === null) {
+			self::$finfo = new finfo(FILEINFO_MIME_TYPE);
+		}
+
+		$mime = self::$finfo->buffer($headerBytes);
+		return $mime !== false ? $mime : null;
+	}
+
+	/**
+	 * Detect file format from a stream
+	 * 
+	 * Reads the header bytes, detects format, and rewinds the stream.
+	 *
+	 * @param resource $stream File stream
+	 * @return string Detected format
+	 */
+	public static function detectFormatFromStream($stream): string {
+		$position = ftell($stream);
+		$headerBytes = fread($stream, self::HEADER_SIZE);
+		fseek($stream, $position);
+
+		if ($headerBytes === false || $headerBytes === '') {
+			return MimeTypes::FORMAT_BINARY;
+		}
+
+		return self::detectFormat($headerBytes);
+	}
+
+	/**
+	 * Detect MIME type from a stream
+	 *
+	 * @param resource $stream File stream
+	 * @return string|null MIME type or null
+	 */
+	public static function detectMimeTypeFromStream($stream): ?string {
+		$position = ftell($stream);
+		$headerBytes = fread($stream, self::HEADER_SIZE);
+		fseek($stream, $position);
+
+		if ($headerBytes === false || $headerBytes === '') {
+			return null;
+		}
+
+		return self::detectMimeType($headerBytes);
+	}
+
+	/**
+	 * Fallback detection using magic bytes
+	 *
+	 * @param string $headerBytes Content bytes
+	 * @return string Detected format or 'binary'
+	 */
+	private static function detectFromMagicBytes(string $headerBytes): string {
+		$headerHex = strtoupper(bin2hex($headerBytes));
+
+		foreach (self::SIGNATURES as $sig) {
+			$offset = $sig['offset'] * 2;
+			$sigBytes = strtoupper($sig['bytes']);
+			$sigLength = strlen($sigBytes);
+
+			if (strlen($headerHex) < $offset + $sigLength) {
+				continue;
+			}
+
+			$slice = substr($headerHex, $offset, $sigLength);
+			if ($slice === $sigBytes) {
+				return $sig['format'];
+			}
+		}
+
+		// Check if likely text
+		if (self::isLikelyText($headerBytes)) {
+			return 'text';
+		}
+
+		return MimeTypes::FORMAT_BINARY;
+	}
+
+	/**
+	 * Check if content appears to be text
+	 *
+	 * @param string $bytes Content bytes
+	 * @return bool
+	 */
+	private static function isLikelyText(string $bytes): bool {
+		// Check for UTF-8 BOM
+		if (str_starts_with($bytes, "\xEF\xBB\xBF")) {
+			return true;
+		}
+
+		$length = min(strlen($bytes), 256);
+		$printableCount = 0;
+
+		for ($i = 0; $i < $length; $i++) {
+			$byte = ord($bytes[$i]);
+			if (($byte >= 32 && $byte <= 126) || $byte === 9 || $byte === 10 || $byte === 13) {
+				$printableCount++;
+			} elseif ($byte >= 128 && $byte <= 247) {
+				$printableCount++; // UTF-8 bytes
+			}
+		}
+
+		return ($printableCount / $length) > 0.9;
+	}
+
+}
diff --git a/shared/lib/Cache/BlobCacheInterface.php b/shared/lib/Cache/BlobCacheInterface.php
new file mode 100644
index 0000000..b408d18
--- /dev/null
+++ b/shared/lib/Cache/BlobCacheInterface.php
@@ -0,0 +1,123 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache;
+
+/**
+ * Blob Cache Interface
+ * 
+ * For binary/media data like preview images, thumbnails, and file caches.
+ * Stored in storage/ rather than var/cache/ due to larger sizes and user ownership.
+ * 
+ * Use cases: contact previews, file thumbnails, generated images.
+ */
+interface BlobCacheInterface
+{
+    /**
+     * Default TTL for blob cache entries (7 days)
+     */
+    public const DEFAULT_TTL = 604800;
+
+    /**
+     * Get blob data as a string
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name (e.g., 'previews', 'thumbnails')
+     * @return string|null Blob data or null if not found
+     */
+    public function get(string $key, CacheScope $scope, string $usage): ?string;
+
+    /**
+     * Get blob data as a stream resource
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return resource|null Stream resource or null if not found
+     */
+    public function getStream(string $key, CacheScope $scope, string $usage);
+
+    /**
+     * Store blob data from a string
+     * 
+     * @param string $key Cache key
+     * @param string $data Blob data
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param string|null $mimeType MIME type of the blob
+     * @param int|null $ttl Time-to-live in seconds
+     * @return bool True if stored successfully
+     */
+    public function set(string $key, string $data, CacheScope $scope, string $usage, ?string $mimeType = null, ?int $ttl = null): bool;
+
+    /**
+     * Store blob data from a stream
+     * 
+     * @param string $key Cache key
+     * @param resource $stream Stream resource to read from
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param string|null $mimeType MIME type of the blob
+     * @param int|null $ttl Time-to-live in seconds
+     * @return bool True if stored successfully
+     */
+    public function putStream(string $key, $stream, CacheScope $scope, string $usage, ?string $mimeType = null, ?int $ttl = null): bool;
+
+    /**
+     * Check if a blob exists
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return bool True if exists and not expired
+     */
+    public function has(string $key, CacheScope $scope, string $usage): bool;
+
+    /**
+     * Delete a blob
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return bool True if deleted
+     */
+    public function delete(string $key, CacheScope $scope, string $usage): bool;
+
+    /**
+     * Get the local filesystem path to a blob (if available)
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return string|null Filesystem path or null if not available/not local
+     */
+    public function getPath(string $key, CacheScope $scope, string $usage): ?string;
+
+    /**
+     * Get metadata for a blob
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return array{mimeType: string|null, size: int, createdAt: int, expiresAt: int|null}|null
+     */
+    public function getMetadata(string $key, CacheScope $scope, string $usage): ?array;
+
+    /**
+     * Clear all blobs in a usage bucket
+     * 
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return int Number of blobs removed
+     */
+    public function clear(CacheScope $scope, string $usage): int;
+
+    /**
+     * Clean up expired blobs
+     * 
+     * @return int Number of blobs cleaned up
+     */
+    public function cleanup(): int;
+}
diff --git a/shared/lib/Cache/CacheInterface.php b/shared/lib/Cache/CacheInterface.php
new file mode 100644
index 0000000..3835b42
--- /dev/null
+++ b/shared/lib/Cache/CacheInterface.php
@@ -0,0 +1,72 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache;
+
+/**
+ * Base Cache Interface
+ * 
+ * Common interface for all cache implementations.
+ * Supports scoped caching with automatic key prefixing based on scope.
+ */
+interface CacheInterface
+{
+    /**
+     * Retrieve an item from the cache
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name (e.g., 'sessions', 'config')
+     * @return mixed|null Cached value or null if not found/expired
+     */
+    public function get(string $key, CacheScope $scope, string $usage): mixed;
+
+    /**
+     * Store an item in the cache
+     * 
+     * @param string $key Cache key
+     * @param mixed $value Value to cache (must be serializable)
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param int|null $ttl Time-to-live in seconds (null = default, 0 = indefinite)
+     * @return bool True if stored successfully
+     */
+    public function set(string $key, mixed $value, CacheScope $scope, string $usage, ?int $ttl = null): bool;
+
+    /**
+     * Check if an item exists in the cache
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return bool True if exists and not expired
+     */
+    public function has(string $key, CacheScope $scope, string $usage): bool;
+
+    /**
+     * Remove an item from the cache
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return bool True if deleted (or didn't exist)
+     */
+    public function delete(string $key, CacheScope $scope, string $usage): bool;
+
+    /**
+     * Remove all items matching a usage pattern
+     * 
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return int Number of items removed
+     */
+    public function clear(CacheScope $scope, string $usage): int;
+
+    /**
+     * Clean up expired entries
+     * 
+     * @return int Number of entries cleaned up
+     */
+    public function cleanup(): int;
+}
diff --git a/shared/lib/Cache/CacheScope.php b/shared/lib/Cache/CacheScope.php
new file mode 100644
index 0000000..415a9b2
--- /dev/null
+++ b/shared/lib/Cache/CacheScope.php
@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache;
+
+/**
+ * Cache Scope
+ * 
+ * Defines the scope/namespace level for cached entries:
+ * - Global: Shared across all tenants and users (e.g., routes, modules)
+ * - Tenant: Scoped to a specific tenant (e.g., config, sessions)
+ * - User: Scoped to a specific user within a tenant (e.g., rate limits)
+ */
+enum CacheScope: string
+{
+    case Global = 'global';
+    case Tenant = 'tenant';
+    case User = 'user';
+
+    /**
+     * Build the cache path prefix for this scope
+     * 
+     * @param string|null $tenantId Tenant identifier (required for Tenant/User scope)
+     * @param string|null $userId User identifier (required for User scope)
+     * @return string Path prefix (e.g., "global", "tenant/{tid}", "user/{tid}/{uid}")
+     */
+    public function buildPrefix(?string $tenantId = null, ?string $userId = null): string
+    {
+        return match ($this) {
+            self::Global => 'global',
+            self::Tenant => $tenantId ? "tenant/{$tenantId}" : 'tenant/_unknown',
+            self::User => $tenantId && $userId 
+                ? "user/{$tenantId}/{$userId}" 
+                : "user/_unknown/_unknown",
+        };
+    }
+
+    /**
+     * Validate that required identifiers are provided for this scope
+     */
+    public function validate(?string $tenantId, ?string $userId): bool
+    {
+        return match ($this) {
+            self::Global => true,
+            self::Tenant => $tenantId !== null,
+            self::User => $tenantId !== null && $userId !== null,
+        };
+    }
+}
diff --git a/shared/lib/Cache/EphemeralCacheInterface.php b/shared/lib/Cache/EphemeralCacheInterface.php
new file mode 100644
index 0000000..271de30
--- /dev/null
+++ b/shared/lib/Cache/EphemeralCacheInterface.php
@@ -0,0 +1,57 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache;
+
+/**
+ * Ephemeral Cache Interface
+ * 
+ * For short-lived cached data with automatic expiration.
+ * Use cases: sessions, rate limits, challenges, temporary config.
+ * 
+ * Default TTL is typically seconds to minutes.
+ */
+interface EphemeralCacheInterface extends CacheInterface
+{
+    /**
+     * Default TTL for ephemeral cache entries (5 minutes)
+     */
+    public const DEFAULT_TTL = 300;
+
+    /**
+     * Get or set a value with a callback
+     * 
+     * If the key doesn't exist, execute the callback and cache the result.
+     * 
+     * @param string $key Cache key
+     * @param callable $callback Function to generate value if not cached
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param int|null $ttl Time-to-live in seconds
+     * @return mixed Cached or generated value
+     */
+    public function remember(string $key, callable $callback, CacheScope $scope, string $usage, ?int $ttl = null): mixed;
+
+    /**
+     * Increment a numeric value
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param int $amount Amount to increment by
+     * @return int|false New value or false on failure
+     */
+    public function increment(string $key, CacheScope $scope, string $usage, int $amount = 1): int|false;
+
+    /**
+     * Decrement a numeric value
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param int $amount Amount to decrement by
+     * @return int|false New value or false on failure
+     */
+    public function decrement(string $key, CacheScope $scope, string $usage, int $amount = 1): int|false;
+}
diff --git a/shared/lib/Cache/PersistentCacheInterface.php b/shared/lib/Cache/PersistentCacheInterface.php
new file mode 100644
index 0000000..f4ed06d
--- /dev/null
+++ b/shared/lib/Cache/PersistentCacheInterface.php
@@ -0,0 +1,66 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache;
+
+/**
+ * Persistent Cache Interface
+ * 
+ * For long-lived cached data with optional tagging for bulk invalidation.
+ * Use cases: routes, modules, compiled configs, firewall rules.
+ * 
+ * Default TTL is typically hours to days, or indefinite until explicit invalidation.
+ */
+interface PersistentCacheInterface extends CacheInterface
+{
+    /**
+     * Default TTL for persistent cache entries (1 hour)
+     * Use 0 for indefinite storage
+     */
+    public const DEFAULT_TTL = 3600;
+
+    /**
+     * Store an item with tags for bulk invalidation
+     * 
+     * @param string $key Cache key
+     * @param mixed $value Value to cache
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param array<string> $tags Tags for grouping/invalidation
+     * @param int|null $ttl Time-to-live in seconds (null = default, 0 = indefinite)
+     * @return bool True if stored successfully
+     */
+    public function setWithTags(string $key, mixed $value, CacheScope $scope, string $usage, array $tags, ?int $ttl = null): bool;
+
+    /**
+     * Invalidate all entries with a specific tag
+     * 
+     * @param string $tag Tag to invalidate
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return int Number of entries invalidated
+     */
+    public function invalidateByTag(string $tag, CacheScope $scope, string $usage): int;
+
+    /**
+     * Get the version/timestamp of a cached entry
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @return int|null Timestamp when entry was cached, or null if not found
+     */
+    public function getVersion(string $key, CacheScope $scope, string $usage): ?int;
+
+    /**
+     * Check if an entry is stale based on a reference timestamp
+     * 
+     * @param string $key Cache key
+     * @param CacheScope $scope Cache scope level
+     * @param string $usage Usage/bucket name
+     * @param int $reference Reference timestamp to compare against
+     * @return bool True if entry is older than reference (or doesn't exist)
+     */
+    public function isStale(string $key, CacheScope $scope, string $usage, int $reference): bool;
+}
diff --git a/shared/lib/Cache/Store/FileBlobCache.php b/shared/lib/Cache/Store/FileBlobCache.php
new file mode 100644
index 0000000..0ad4da3
--- /dev/null
+++ b/shared/lib/Cache/Store/FileBlobCache.php
@@ -0,0 +1,412 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache\Store;
+
+use KTXF\Cache\BlobCacheInterface;
+use KTXF\Cache\CacheScope;
+
+/**
+ * File-based Blob Cache Implementation
+ * 
+ * Stores binary/media data with metadata in the storage directory.
+ * Directory structure: storage/{tid}/cache/{usage}/ or storage/{tid}/{uid}/cache/{usage}/
+ */
+class FileBlobCache implements BlobCacheInterface
+{
+    private string $basePath;
+    private ?string $tenantId = null;
+    private ?string $userId = null;
+
+    public function __construct(string $projectDir)
+    {
+        $this->basePath = rtrim($projectDir, '/') . '/storage';
+    }
+
+    /**
+     * Set the tenant context for scoped operations
+     */
+    public function setTenantContext(?string $tenantId): void
+    {
+        $this->tenantId = $tenantId;
+    }
+
+    /**
+     * Set the user context for scoped operations
+     */
+    public function setUserContext(?string $userId): void
+    {
+        $this->userId = $userId;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function get(string $key, CacheScope $scope, string $usage): ?string
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!$this->isValid($path)) {
+            return null;
+        }
+
+        $content = @file_get_contents($path);
+        
+        return $content !== false ? $content : null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getStream(string $key, CacheScope $scope, string $usage)
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!$this->isValid($path)) {
+            return null;
+        }
+
+        $handle = @fopen($path, 'rb');
+        
+        return $handle !== false ? $handle : null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function set(string $key, string $data, CacheScope $scope, string $usage, ?string $mimeType = null, ?int $ttl = null): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        $dir = dirname($path);
+
+        if (!is_dir($dir)) {
+            if (!mkdir($dir, 0755, true) && !is_dir($dir)) {
+                return false;
+            }
+        }
+
+        // Write data file
+        $tempPath = $path . '.tmp.' . getmypid();
+        
+        if (file_put_contents($tempPath, $data, LOCK_EX) === false) {
+            return false;
+        }
+
+        chmod($tempPath, 0600);
+        
+        if (!rename($tempPath, $path)) {
+            @unlink($tempPath);
+            return false;
+        }
+
+        // Write metadata
+        $this->writeMetadata($path, [
+            'mimeType' => $mimeType,
+            'size' => strlen($data),
+            'createdAt' => time(),
+            'expiresAt' => $ttl !== null && $ttl > 0 ? time() + $ttl : null,
+        ]);
+
+        return true;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function putStream(string $key, $stream, CacheScope $scope, string $usage, ?string $mimeType = null, ?int $ttl = null): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        $dir = dirname($path);
+
+        if (!is_dir($dir)) {
+            if (!mkdir($dir, 0755, true) && !is_dir($dir)) {
+                return false;
+            }
+        }
+
+        // Write data file from stream
+        $tempPath = $path . '.tmp.' . getmypid();
+        $dest = @fopen($tempPath, 'wb');
+        
+        if ($dest === false) {
+            return false;
+        }
+
+        $size = 0;
+        while (!feof($stream)) {
+            $chunk = fread($stream, 8192);
+            if ($chunk === false) {
+                fclose($dest);
+                @unlink($tempPath);
+                return false;
+            }
+            $written = fwrite($dest, $chunk);
+            if ($written === false) {
+                fclose($dest);
+                @unlink($tempPath);
+                return false;
+            }
+            $size += $written;
+        }
+
+        fclose($dest);
+        chmod($tempPath, 0600);
+        
+        if (!rename($tempPath, $path)) {
+            @unlink($tempPath);
+            return false;
+        }
+
+        // Write metadata
+        $this->writeMetadata($path, [
+            'mimeType' => $mimeType,
+            'size' => $size,
+            'createdAt' => time(),
+            'expiresAt' => $ttl !== null && $ttl > 0 ? time() + $ttl : null,
+        ]);
+
+        return true;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function has(string $key, CacheScope $scope, string $usage): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        return $this->isValid($path);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function delete(string $key, CacheScope $scope, string $usage): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        $metaPath = $path . '.meta';
+        
+        $result = true;
+        
+        if (file_exists($path)) {
+            $result = @unlink($path);
+        }
+        
+        if (file_exists($metaPath)) {
+            @unlink($metaPath);
+        }
+
+        return $result;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getPath(string $key, CacheScope $scope, string $usage): ?string
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!$this->isValid($path)) {
+            return null;
+        }
+
+        return $path;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getMetadata(string $key, CacheScope $scope, string $usage): ?array
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!file_exists($path)) {
+            return null;
+        }
+
+        return $this->readMetadata($path);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function clear(CacheScope $scope, string $usage): int
+    {
+        $dir = $this->buildDir($scope, $usage);
+        
+        if (!is_dir($dir)) {
+            return 0;
+        }
+
+        $count = 0;
+        $files = glob($dir . '/*');
+        
+        foreach ($files as $file) {
+            if (is_file($file) && !str_ends_with($file, '.meta')) {
+                if (@unlink($file)) {
+                    $count++;
+                    // Also remove metadata file
+                    @unlink($file . '.meta');
+                }
+            }
+        }
+
+        return $count;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function cleanup(): int
+    {
+        $count = 0;
+        $now = time();
+        
+        // Scan all tenant directories
+        $tenantDirs = glob($this->basePath . '/*', GLOB_ONLYDIR);
+        
+        foreach ($tenantDirs as $tenantDir) {
+            $files = $this->findBlobFiles($tenantDir);
+            
+            foreach ($files as $file) {
+                $meta = $this->readMetadata($file);
+                
+                if ($meta !== null && $meta['expiresAt'] !== null && $meta['expiresAt'] < $now) {
+                    if (@unlink($file)) {
+                        @unlink($file . '.meta');
+                        $count++;
+                    }
+                }
+            }
+        }
+
+        return $count;
+    }
+
+    /**
+     * Check if a blob is valid (exists and not expired)
+     */
+    private function isValid(string $path): bool
+    {
+        if (!file_exists($path)) {
+            return false;
+        }
+
+        $meta = $this->readMetadata($path);
+        
+        if ($meta !== null && $meta['expiresAt'] !== null && $meta['expiresAt'] < time()) {
+            @unlink($path);
+            @unlink($path . '.meta');
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * Build the full path for a blob
+     */
+    private function buildPath(string $key, CacheScope $scope, string $usage): string
+    {
+        $dir = $this->buildDir($scope, $usage);
+        $hash = $this->hashKey($key);
+        
+        return $dir . '/' . $hash;
+    }
+
+    /**
+     * Build the directory path for a scope/usage combination
+     */
+    private function buildDir(CacheScope $scope, string $usage): string
+    {
+        $usage = preg_replace('/[^a-zA-Z0-9_-]/', '_', $usage);
+        
+        return match ($scope) {
+            CacheScope::Global => $this->basePath . '/_global/cache/' . $usage,
+            CacheScope::Tenant => $this->basePath . '/' . ($this->tenantId ?? '_unknown') . '/cache/' . $usage,
+            CacheScope::User => $this->basePath . '/' . ($this->tenantId ?? '_unknown') . '/' . ($this->userId ?? '_unknown') . '/cache/' . $usage,
+        };
+    }
+
+    /**
+     * Hash a cache key for filesystem safety
+     */
+    private function hashKey(string $key): string
+    {
+        // Extract extension if present in key
+        $ext = '';
+        if (preg_match('/\.([a-zA-Z0-9]{2,5})$/', $key, $matches)) {
+            $ext = '.' . strtolower($matches[1]);
+        }
+        
+        $safe = preg_replace('/[^a-zA-Z0-9_-]/', '_', substr($key, 0, 32));
+        $hash = substr(hash('sha256', $key), 0, 16);
+        
+        return $safe . '_' . $hash . $ext;
+    }
+
+    /**
+     * Read metadata for a blob
+     */
+    private function readMetadata(string $path): ?array
+    {
+        $metaPath = $path . '.meta';
+        
+        if (!file_exists($metaPath)) {
+            // Return basic metadata from file stats
+            if (file_exists($path)) {
+                $stat = stat($path);
+                return [
+                    'mimeType' => null,
+                    'size' => $stat['size'] ?? 0,
+                    'createdAt' => $stat['ctime'] ?? time(),
+                    'expiresAt' => null,
+                ];
+            }
+            return null;
+        }
+
+        $content = @file_get_contents($metaPath);
+        
+        if ($content === false) {
+            return null;
+        }
+
+        $meta = @unserialize($content);
+        
+        return is_array($meta) ? $meta : null;
+    }
+
+    /**
+     * Write metadata for a blob
+     */
+    private function writeMetadata(string $path, array $metadata): bool
+    {
+        $metaPath = $path . '.meta';
+        
+        return file_put_contents($metaPath, serialize($metadata), LOCK_EX) !== false;
+    }
+
+    /**
+     * Recursively find all blob files in a directory
+     */
+    private function findBlobFiles(string $dir): array
+    {
+        $files = [];
+        
+        $cacheDirs = glob($dir . '/cache/*', GLOB_ONLYDIR) ?: [];
+        $cacheDirs = array_merge($cacheDirs, glob($dir . '/*/cache/*', GLOB_ONLYDIR) ?: []);
+        
+        foreach ($cacheDirs as $cacheDir) {
+            $blobFiles = glob($cacheDir . '/*');
+            foreach ($blobFiles as $file) {
+                if (is_file($file) && !str_ends_with($file, '.meta')) {
+                    $files[] = $file;
+                }
+            }
+        }
+
+        return $files;
+    }
+}
diff --git a/shared/lib/Cache/Store/FileEphemeralCache.php b/shared/lib/Cache/Store/FileEphemeralCache.php
new file mode 100644
index 0000000..aab51df
--- /dev/null
+++ b/shared/lib/Cache/Store/FileEphemeralCache.php
@@ -0,0 +1,346 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache\Store;
+
+use KTXF\Cache\CacheScope;
+use KTXF\Cache\EphemeralCacheInterface;
+
+/**
+ * File-based Ephemeral Cache Implementation
+ * 
+ * Stores cache entries as serialized files with expiration metadata.
+ * Directory structure: var/cache/{scope}/{usage}/{key_hash}.cache
+ */
+class FileEphemeralCache implements EphemeralCacheInterface
+{
+    private string $basePath;
+    private ?string $tenantId = null;
+    private ?string $userId = null;
+
+    public function __construct(string $projectDir)
+    {
+        $this->basePath = rtrim($projectDir, '/') . '/var/cache';
+    }
+
+    /**
+     * Set the tenant context for scoped operations
+     */
+    public function setTenantContext(?string $tenantId): void
+    {
+        $this->tenantId = $tenantId;
+    }
+
+    /**
+     * Set the user context for scoped operations
+     */
+    public function setUserContext(?string $userId): void
+    {
+        $this->userId = $userId;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function get(string $key, CacheScope $scope, string $usage): mixed
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!file_exists($path)) {
+            return null;
+        }
+
+        $entry = $this->readEntry($path);
+        
+        if ($entry === null) {
+            return null;
+        }
+
+        // Check expiration
+        if ($entry['expiresAt'] > 0 && $entry['expiresAt'] < time()) {
+            @unlink($path);
+            return null;
+        }
+
+        return $entry['value'];
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function set(string $key, mixed $value, CacheScope $scope, string $usage, ?int $ttl = null): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        $dir = dirname($path);
+
+        if (!is_dir($dir)) {
+            if (!mkdir($dir, 0755, true) && !is_dir($dir)) {
+                return false;
+            }
+        }
+
+        $ttl = $ttl ?? self::DEFAULT_TTL;
+        $entry = [
+            'key' => $key,
+            'value' => $value,
+            'createdAt' => time(),
+            'expiresAt' => $ttl > 0 ? time() + $ttl : 0,
+        ];
+
+        return $this->writeEntry($path, $entry);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function has(string $key, CacheScope $scope, string $usage): bool
+    {
+        return $this->get($key, $scope, $usage) !== null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function delete(string $key, CacheScope $scope, string $usage): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (file_exists($path)) {
+            return @unlink($path);
+        }
+
+        return true;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function clear(CacheScope $scope, string $usage): int
+    {
+        $dir = $this->buildDir($scope, $usage);
+        
+        if (!is_dir($dir)) {
+            return 0;
+        }
+
+        $count = 0;
+        $files = glob($dir . '/*.cache');
+        
+        foreach ($files as $file) {
+            if (@unlink($file)) {
+                $count++;
+            }
+        }
+
+        return $count;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function cleanup(): int
+    {
+        $count = 0;
+        $now = time();
+        
+        // Scan all scope directories
+        $scopeDirs = glob($this->basePath . '/*', GLOB_ONLYDIR);
+        
+        foreach ($scopeDirs as $scopeDir) {
+            $files = $this->findCacheFiles($scopeDir);
+            
+            foreach ($files as $file) {
+                $entry = $this->readEntry($file);
+                
+                if ($entry !== null && $entry['expiresAt'] > 0 && $entry['expiresAt'] < $now) {
+                    if (@unlink($file)) {
+                        $count++;
+                    }
+                }
+            }
+        }
+
+        return $count;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function remember(string $key, callable $callback, CacheScope $scope, string $usage, ?int $ttl = null): mixed
+    {
+        $value = $this->get($key, $scope, $usage);
+        
+        if ($value !== null) {
+            return $value;
+        }
+
+        $value = $callback();
+        $this->set($key, $value, $scope, $usage, $ttl);
+        
+        return $value;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function increment(string $key, CacheScope $scope, string $usage, int $amount = 1): int|false
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        // Use file locking for atomic increment
+        $handle = @fopen($path, 'c+');
+        if ($handle === false) {
+            // File doesn't exist, create with initial value
+            $dir = dirname($path);
+            if (!is_dir($dir)) {
+                if (!mkdir($dir, 0755, true) && !is_dir($dir)) {
+                    return false;
+                }
+            }
+            
+            $handle = @fopen($path, 'c+');
+            if ($handle === false) {
+                return false;
+            }
+        }
+
+        if (!flock($handle, LOCK_EX)) {
+            fclose($handle);
+            return false;
+        }
+
+        try {
+            $content = stream_get_contents($handle);
+            $entry = $content ? @unserialize($content) : null;
+            
+            if ($entry === null || ($entry['expiresAt'] > 0 && $entry['expiresAt'] < time())) {
+                // Initialize new entry
+                $newValue = $amount;
+                $entry = [
+                    'key' => $key,
+                    'value' => $newValue,
+                    'createdAt' => time(),
+                    'expiresAt' => time() + self::DEFAULT_TTL,
+                ];
+            } else {
+                $newValue = (int)$entry['value'] + $amount;
+                $entry['value'] = $newValue;
+            }
+
+            ftruncate($handle, 0);
+            rewind($handle);
+            fwrite($handle, serialize($entry));
+            
+            return $newValue;
+        } finally {
+            flock($handle, LOCK_UN);
+            fclose($handle);
+        }
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function decrement(string $key, CacheScope $scope, string $usage, int $amount = 1): int|false
+    {
+        return $this->increment($key, $scope, $usage, -$amount);
+    }
+
+    /**
+     * Build the full path for a cache entry
+     */
+    private function buildPath(string $key, CacheScope $scope, string $usage): string
+    {
+        $dir = $this->buildDir($scope, $usage);
+        $hash = $this->hashKey($key);
+        
+        return $dir . '/' . $hash . '.cache';
+    }
+
+    /**
+     * Build the directory path for a scope/usage combination
+     */
+    private function buildDir(CacheScope $scope, string $usage): string
+    {
+        $prefix = $scope->buildPrefix($this->tenantId, $this->userId);
+        $usage = preg_replace('/[^a-zA-Z0-9_-]/', '_', $usage);
+        
+        return $this->basePath . '/' . $prefix . '/' . $usage;
+    }
+
+    /**
+     * Hash a cache key for filesystem safety
+     */
+    private function hashKey(string $key): string
+    {
+        // Use a prefix of the original key for debugging + hash for uniqueness
+        $safe = preg_replace('/[^a-zA-Z0-9_-]/', '_', substr($key, 0, 32));
+        $hash = substr(hash('sha256', $key), 0, 16);
+        
+        return $safe . '_' . $hash;
+    }
+
+    /**
+     * Read and unserialize a cache entry
+     */
+    private function readEntry(string $path): ?array
+    {
+        $content = @file_get_contents($path);
+        
+        if ($content === false) {
+            return null;
+        }
+
+        $entry = @unserialize($content);
+        
+        if (!is_array($entry) || !isset($entry['value'])) {
+            return null;
+        }
+
+        return $entry;
+    }
+
+    /**
+     * Serialize and write a cache entry atomically
+     */
+    private function writeEntry(string $path, array $entry): bool
+    {
+        $content = serialize($entry);
+        $tempPath = $path . '.tmp.' . getmypid();
+        
+        if (file_put_contents($tempPath, $content, LOCK_EX) === false) {
+            return false;
+        }
+
+        chmod($tempPath, 0600);
+        
+        if (!rename($tempPath, $path)) {
+            @unlink($tempPath);
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * Recursively find all cache files in a directory
+     */
+    private function findCacheFiles(string $dir): array
+    {
+        $files = [];
+        
+        $iterator = new \RecursiveIteratorIterator(
+            new \RecursiveDirectoryIterator($dir, \RecursiveDirectoryIterator::SKIP_DOTS),
+            \RecursiveIteratorIterator::LEAVES_ONLY
+        );
+        
+        foreach ($iterator as $file) {
+            if ($file->isFile() && $file->getExtension() === 'cache') {
+                $files[] = $file->getPathname();
+            }
+        }
+
+        return $files;
+    }
+}
diff --git a/shared/lib/Cache/Store/FilePersistentCache.php b/shared/lib/Cache/Store/FilePersistentCache.php
new file mode 100644
index 0000000..25b780d
--- /dev/null
+++ b/shared/lib/Cache/Store/FilePersistentCache.php
@@ -0,0 +1,433 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Cache\Store;
+
+use KTXF\Cache\CacheScope;
+use KTXF\Cache\PersistentCacheInterface;
+
+/**
+ * File-based Persistent Cache Implementation
+ * 
+ * Stores long-lived cache entries with support for tagging and versioning.
+ * Directory structure: var/cache/{scope}/{usage}/{key_hash}.cache
+ */
+class FilePersistentCache implements PersistentCacheInterface
+{
+    private string $basePath;
+    private ?string $tenantId = null;
+    private ?string $userId = null;
+
+    public function __construct(string $projectDir)
+    {
+        $this->basePath = rtrim($projectDir, '/') . '/var/cache';
+    }
+
+    /**
+     * Set the tenant context for scoped operations
+     */
+    public function setTenantContext(?string $tenantId): void
+    {
+        $this->tenantId = $tenantId;
+    }
+
+    /**
+     * Set the user context for scoped operations
+     */
+    public function setUserContext(?string $userId): void
+    {
+        $this->userId = $userId;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function get(string $key, CacheScope $scope, string $usage): mixed
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!file_exists($path)) {
+            return null;
+        }
+
+        $entry = $this->readEntry($path);
+        
+        if ($entry === null) {
+            return null;
+        }
+
+        // Check expiration (0 = never expires)
+        if ($entry['expiresAt'] > 0 && $entry['expiresAt'] < time()) {
+            @unlink($path);
+            $this->removeFromTagIndex($key, $scope, $usage, $entry['tags'] ?? []);
+            return null;
+        }
+
+        return $entry['value'];
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function set(string $key, mixed $value, CacheScope $scope, string $usage, ?int $ttl = null): bool
+    {
+        return $this->setWithTags($key, $value, $scope, $usage, [], $ttl);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setWithTags(string $key, mixed $value, CacheScope $scope, string $usage, array $tags, ?int $ttl = null): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        $dir = dirname($path);
+
+        if (!is_dir($dir)) {
+            if (!mkdir($dir, 0755, true) && !is_dir($dir)) {
+                return false;
+            }
+        }
+
+        // Remove from old tags if entry exists
+        $existingEntry = $this->readEntry($path);
+        if ($existingEntry !== null && !empty($existingEntry['tags'])) {
+            $this->removeFromTagIndex($key, $scope, $usage, $existingEntry['tags']);
+        }
+
+        $ttl = $ttl ?? self::DEFAULT_TTL;
+        $entry = [
+            'key' => $key,
+            'value' => $value,
+            'tags' => $tags,
+            'createdAt' => time(),
+            'expiresAt' => $ttl > 0 ? time() + $ttl : 0,
+        ];
+
+        $result = $this->writeEntry($path, $entry);
+
+        if ($result && !empty($tags)) {
+            $this->addToTagIndex($key, $scope, $usage, $tags);
+        }
+
+        return $result;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function has(string $key, CacheScope $scope, string $usage): bool
+    {
+        return $this->get($key, $scope, $usage) !== null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function delete(string $key, CacheScope $scope, string $usage): bool
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (file_exists($path)) {
+            $entry = $this->readEntry($path);
+            if ($entry !== null && !empty($entry['tags'])) {
+                $this->removeFromTagIndex($key, $scope, $usage, $entry['tags']);
+            }
+            return @unlink($path);
+        }
+
+        return true;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function clear(CacheScope $scope, string $usage): int
+    {
+        $dir = $this->buildDir($scope, $usage);
+        
+        if (!is_dir($dir)) {
+            return 0;
+        }
+
+        $count = 0;
+        $files = glob($dir . '/*.cache');
+        
+        foreach ($files as $file) {
+            if (@unlink($file)) {
+                $count++;
+            }
+        }
+
+        // Clear tag index
+        $tagIndexPath = $dir . '/.tags';
+        if (file_exists($tagIndexPath)) {
+            @unlink($tagIndexPath);
+        }
+
+        return $count;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function cleanup(): int
+    {
+        $count = 0;
+        $now = time();
+        
+        // Scan all scope directories
+        $scopeDirs = glob($this->basePath . '/*', GLOB_ONLYDIR);
+        
+        foreach ($scopeDirs as $scopeDir) {
+            $files = $this->findCacheFiles($scopeDir);
+            
+            foreach ($files as $file) {
+                $entry = $this->readEntry($file);
+                
+                if ($entry !== null && $entry['expiresAt'] > 0 && $entry['expiresAt'] < $now) {
+                    if (@unlink($file)) {
+                        $count++;
+                    }
+                }
+            }
+        }
+
+        return $count;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function invalidateByTag(string $tag, CacheScope $scope, string $usage): int
+    {
+        $tagIndex = $this->readTagIndex($scope, $usage);
+        
+        if (!isset($tagIndex[$tag])) {
+            return 0;
+        }
+
+        $count = 0;
+        $keys = $tagIndex[$tag];
+
+        foreach ($keys as $key) {
+            if ($this->delete($key, $scope, $usage)) {
+                $count++;
+            }
+        }
+
+        return $count;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getVersion(string $key, CacheScope $scope, string $usage): ?int
+    {
+        $path = $this->buildPath($key, $scope, $usage);
+        
+        if (!file_exists($path)) {
+            return null;
+        }
+
+        $entry = $this->readEntry($path);
+        
+        return $entry['createdAt'] ?? null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function isStale(string $key, CacheScope $scope, string $usage, int $reference): bool
+    {
+        $version = $this->getVersion($key, $scope, $usage);
+        
+        if ($version === null) {
+            return true;
+        }
+
+        return $version < $reference;
+    }
+
+    /**
+     * Build the full path for a cache entry
+     */
+    private function buildPath(string $key, CacheScope $scope, string $usage): string
+    {
+        $dir = $this->buildDir($scope, $usage);
+        $hash = $this->hashKey($key);
+        
+        return $dir . '/' . $hash . '.cache';
+    }
+
+    /**
+     * Build the directory path for a scope/usage combination
+     */
+    private function buildDir(CacheScope $scope, string $usage): string
+    {
+        $prefix = $scope->buildPrefix($this->tenantId, $this->userId);
+        $usage = preg_replace('/[^a-zA-Z0-9_-]/', '_', $usage);
+        
+        return $this->basePath . '/' . $prefix . '/' . $usage;
+    }
+
+    /**
+     * Hash a cache key for filesystem safety
+     */
+    private function hashKey(string $key): string
+    {
+        $safe = preg_replace('/[^a-zA-Z0-9_-]/', '_', substr($key, 0, 32));
+        $hash = substr(hash('sha256', $key), 0, 16);
+        
+        return $safe . '_' . $hash;
+    }
+
+    /**
+     * Read and unserialize a cache entry
+     */
+    private function readEntry(string $path): ?array
+    {
+        $content = @file_get_contents($path);
+        
+        if ($content === false) {
+            return null;
+        }
+
+        $entry = @unserialize($content);
+        
+        if (!is_array($entry) || !isset($entry['value'])) {
+            return null;
+        }
+
+        return $entry;
+    }
+
+    /**
+     * Serialize and write a cache entry atomically
+     */
+    private function writeEntry(string $path, array $entry): bool
+    {
+        $content = serialize($entry);
+        $tempPath = $path . '.tmp.' . getmypid();
+        
+        if (file_put_contents($tempPath, $content, LOCK_EX) === false) {
+            return false;
+        }
+
+        chmod($tempPath, 0600);
+        
+        if (!rename($tempPath, $path)) {
+            @unlink($tempPath);
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * Read the tag index for a usage bucket
+     */
+    private function readTagIndex(CacheScope $scope, string $usage): array
+    {
+        $path = $this->buildDir($scope, $usage) . '/.tags';
+        
+        if (!file_exists($path)) {
+            return [];
+        }
+
+        $content = @file_get_contents($path);
+        
+        if ($content === false) {
+            return [];
+        }
+
+        $index = @unserialize($content);
+        
+        return is_array($index) ? $index : [];
+    }
+
+    /**
+     * Write the tag index for a usage bucket
+     */
+    private function writeTagIndex(CacheScope $scope, string $usage, array $index): bool
+    {
+        $path = $this->buildDir($scope, $usage) . '/.tags';
+        $dir = dirname($path);
+
+        if (!is_dir($dir)) {
+            if (!mkdir($dir, 0755, true) && !is_dir($dir)) {
+                return false;
+            }
+        }
+
+        return file_put_contents($path, serialize($index), LOCK_EX) !== false;
+    }
+
+    /**
+     * Add a key to the tag index
+     */
+    private function addToTagIndex(string $key, CacheScope $scope, string $usage, array $tags): void
+    {
+        $index = $this->readTagIndex($scope, $usage);
+
+        foreach ($tags as $tag) {
+            if (!isset($index[$tag])) {
+                $index[$tag] = [];
+            }
+            if (!in_array($key, $index[$tag], true)) {
+                $index[$tag][] = $key;
+            }
+        }
+
+        $this->writeTagIndex($scope, $usage, $index);
+    }
+
+    /**
+     * Remove a key from the tag index
+     */
+    private function removeFromTagIndex(string $key, CacheScope $scope, string $usage, array $tags): void
+    {
+        $index = $this->readTagIndex($scope, $usage);
+        $changed = false;
+
+        foreach ($tags as $tag) {
+            if (isset($index[$tag])) {
+                $pos = array_search($key, $index[$tag], true);
+                if ($pos !== false) {
+                    unset($index[$tag][$pos]);
+                    $index[$tag] = array_values($index[$tag]);
+                    $changed = true;
+                    
+                    if (empty($index[$tag])) {
+                        unset($index[$tag]);
+                    }
+                }
+            }
+        }
+
+        if ($changed) {
+            $this->writeTagIndex($scope, $usage, $index);
+        }
+    }
+
+    /**
+     * Recursively find all cache files in a directory
+     */
+    private function findCacheFiles(string $dir): array
+    {
+        $files = [];
+        
+        $iterator = new \RecursiveIteratorIterator(
+            new \RecursiveDirectoryIterator($dir, \RecursiveDirectoryIterator::SKIP_DOTS),
+            \RecursiveIteratorIterator::LEAVES_ONLY
+        );
+        
+        foreach ($iterator as $file) {
+            if ($file->isFile() && $file->getExtension() === 'cache') {
+                $files[] = $file->getPathname();
+            }
+        }
+
+        return $files;
+    }
+}
diff --git a/shared/lib/Chrono/Collection/CollectionContent.php b/shared/lib/Chrono/Collection/CollectionContent.php
new file mode 100644
index 0000000..9e0a403
--- /dev/null
+++ b/shared/lib/Chrono/Collection/CollectionContent.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Collection;
+
+use JsonSerializable;
+
+enum CollectionContent: string implements JsonSerializable {
+
+    case Event = 'event';
+    case Task = 'task';
+    case Journal = 'journal';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
diff --git a/shared/lib/Chrono/Collection/CollectionPermissions.php b/shared/lib/Chrono/Collection/CollectionPermissions.php
new file mode 100644
index 0000000..8c11f26
--- /dev/null
+++ b/shared/lib/Chrono/Collection/CollectionPermissions.php
@@ -0,0 +1,26 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Collection;
+
+use JsonSerializable;
+
+enum CollectionPermissions: string implements JsonSerializable {
+
+    case View = 'view';
+    case Create = 'create';
+    case Modify = 'modify';
+    case Destroy = 'destroy';
+    case Share = 'share';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+    
+}
diff --git a/shared/lib/Chrono/Collection/CollectionRoles.php b/shared/lib/Chrono/Collection/CollectionRoles.php
new file mode 100644
index 0000000..602c2c5
--- /dev/null
+++ b/shared/lib/Chrono/Collection/CollectionRoles.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Collection;
+
+use JsonSerializable;
+
+enum CollectionRoles: string implements JsonSerializable {
+
+    case System = 'system';
+    case Individual = 'individual';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
diff --git a/shared/lib/Chrono/Collection/ICollectionBase.php b/shared/lib/Chrono/Collection/ICollectionBase.php
new file mode 100644
index 0000000..cb5e438
--- /dev/null
+++ b/shared/lib/Chrono/Collection/ICollectionBase.php
@@ -0,0 +1,160 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Collection;
+
+use DateTimeImmutable;
+use JsonSerializable;
+
+interface ICollectionBase extends JsonSerializable {
+
+	public const JSON_TYPE = 'chrono.collection';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_PROVIDER = 'provider';
+	public const JSON_PROPERTY_SERVICE = 'service';
+	public const JSON_PROPERTY_IN = 'in';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_DESCRIPTION = 'description';
+	public const JSON_PROPERTY_PRIORITY = 'priority';
+	public const JSON_PROPERTY_VISIBILITY = 'visibility';
+	public const JSON_PROPERTY_COLOR = 'color';
+	public const JSON_PROPERTY_CREATED = 'created';
+	public const JSON_PROPERTY_MODIFIED = 'modified';
+	public const JSON_PROPERTY_ENABLED = 'enabled';
+	public const JSON_PROPERTY_SIGNATURE = 'signature';
+	public const JSON_PROPERTY_PERMISSIONS = 'permissions';
+	public const JSON_PROPERTY_ROLES = 'roles';
+	public const JSON_PROPERTY_CONTENTS = 'contents';
+
+	/**
+	 * Unique identifier of the service this collection belongs to
+	 *
+	 * @since 2025.05.01
+	 */
+	public function in(): string|int|null;
+
+	/**
+	 * Unique arbitrary text string identifying this collection (e.g. 1 or collection1 or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the creation date of this collection
+	 */
+	public function created(): ?DateTimeImmutable;
+	
+	/**
+	 * Gets the modification date of this collection
+	 */
+	public function modified(): ?DateTimeImmutable;
+
+	/**
+	 * Lists all supported attributes
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string,array<string,bool>>
+	 */
+	public function attributes(): array;
+
+	/**
+	 * Gets the signature of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function signature(): ?string;
+
+	/**
+	 * Gets the role(s) of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function roles(): array;
+
+	/**
+	 * Checks if this collection supports the given role
+	 *
+	 * @since 2025.05.01
+	 */
+	public function role(CollectionRoles $value): bool;
+
+	/**
+	 * Gets the content types of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function contents(): array;
+
+	/**
+	 * Checks if this collection contains the given content type
+	 *
+	 * @since 2025.05.01
+	 */
+	public function contains(CollectionContent $value): bool;
+
+	/**
+	 * Gets the active status of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getEnabled(): bool;
+
+	/**
+	 * Gets the permissions of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getPermissions(): array;
+
+	/**
+	 * Checks if this collection has the given permission
+	 *
+	 * @since 2025.05.01
+	 */
+	public function hasPermission(CollectionPermissions $permission): bool;
+
+	/**
+	 * Gets the human friendly name of this collection (e.g. Personal Calendar)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getLabel(): ?string;
+
+	/**
+	 * Gets the human friendly description of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getDescription(): ?string;
+
+	/**
+	 * Gets the priority of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getPriority(): ?int;
+
+	/**
+	 * Gets the visibility of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getVisibility(): ?bool;
+
+	/**
+	 * Gets the color of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getColor(): ?string;
+
+}
diff --git a/shared/lib/Chrono/Collection/ICollectionMutable.php b/shared/lib/Chrono/Collection/ICollectionMutable.php
new file mode 100644
index 0000000..167f02c
--- /dev/null
+++ b/shared/lib/Chrono/Collection/ICollectionMutable.php
@@ -0,0 +1,58 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Collection;
+
+use KTXF\Json\JsonDeserializable;
+
+interface ICollectionMutable extends ICollectionBase, JsonDeserializable {
+
+	/**
+	 * Sets the active status of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setEnabled(bool $value): self;
+
+	/**
+	 * Sets the human friendly name of this collection (e.g. Personal Calendar)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setLabel(string $value): self;
+
+	/**
+	 * Sets the human friendly description of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setDescription(?string $value): self;
+
+	/**
+	 * Sets the priority of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setPriority(?int $value): self;
+
+	/**
+	 * Sets the visibility of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setVisibility(?bool $value): self;
+
+	/**
+	 * Sets the color of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setColor(?string $value): self;
+
+}
diff --git a/shared/lib/Chrono/Entity/EntityPermissions.php b/shared/lib/Chrono/Entity/EntityPermissions.php
new file mode 100644
index 0000000..fd77959
--- /dev/null
+++ b/shared/lib/Chrono/Entity/EntityPermissions.php
@@ -0,0 +1,25 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Entity;
+
+use JsonSerializable;
+
+enum EntityPermissions: string implements JsonSerializable {
+
+    case View = 'view';
+    case Modify = 'modify';
+    case Delete = 'delete';
+    case Share = 'share';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
diff --git a/shared/lib/Chrono/Entity/IEntityBase.php b/shared/lib/Chrono/Entity/IEntityBase.php
new file mode 100644
index 0000000..d3cf50c
--- /dev/null
+++ b/shared/lib/Chrono/Entity/IEntityBase.php
@@ -0,0 +1,93 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Entity;
+
+use DateTimeImmutable;
+
+interface IEntityBase extends \JsonSerializable {
+
+	public const JSON_TYPE = 'chrono.entity';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_IN = 'in';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_DATA = 'data';
+	public const JSON_PROPERTY_CREATED = 'created';
+	public const JSON_PROPERTY_MODIFIED = 'modified';
+	public const JSON_PROPERTY_SIGNATURE = 'signature';
+
+	/**
+	 * Unique arbitrary text string identifying the collection this entity belongs to (e.g. 1 or Collection1 or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function in(): string|int;
+
+	/**
+	 * Unique arbitrary text string identifying this entity (e.g. 1 or Entity or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the creation date of this entity
+	 */
+	public function created(): ?DateTimeImmutable;
+
+	/**
+	 * Gets the modification date of this entity
+	 */
+	public function modified(): ?DateTimeImmutable;
+
+	/**
+	 * Gets the signature of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function signature(): ?string;
+
+	/**
+	 * Gets the priority of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getPriority(): ?int;
+
+	/**
+	 * Gets the visibility of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getVisibility(): ?bool;
+
+	/**
+	 * Gets the color of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getColor(): ?string;
+
+	/**
+	 * Gets the object data (event, task, or journal).
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getDataObject(): object|null;
+
+	/**
+	 * Gets the raw data as an associative array or JSON string.
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array|string|null
+	 */
+	public function getDataJson(): array|string|null;
+
+}
diff --git a/shared/lib/Chrono/Entity/IEntityMutable.php b/shared/lib/Chrono/Entity/IEntityMutable.php
new file mode 100644
index 0000000..244d313
--- /dev/null
+++ b/shared/lib/Chrono/Entity/IEntityMutable.php
@@ -0,0 +1,51 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Entity;
+
+use KTXF\Json\JsonDeserializable;
+
+interface IEntityMutable extends IEntityBase, JsonDeserializable {
+
+	/**
+	 * Sets the priority of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setPriority(?int $value): static;
+
+	/**
+	 * Sets the visibility of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setVisibility(?bool $value): static;
+
+	/**
+	 * Sets the color of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setColor(?string $value): static;
+
+	/**
+	 * Sets the object as a class instance.
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setDataObject(object $value): static;
+
+	/**
+	 * Sets the object data from a json string
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setDataJson(array|string $value): static;
+
+}
diff --git a/shared/lib/Chrono/Event/EventAvailabilityTypes.php b/shared/lib/Chrono/Event/EventAvailabilityTypes.php
new file mode 100644
index 0000000..8a5d6f7
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventAvailabilityTypes.php
@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventAvailabilityTypes: string {
+	case Free = 'free';
+	case Busy = 'busy';
+}
diff --git a/shared/lib/Chrono/Event/EventCommonObject.php b/shared/lib/Chrono/Event/EventCommonObject.php
new file mode 100644
index 0000000..0260e30
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventCommonObject.php
@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use DateInterval;
+use DateTime;
+use DateTimeImmutable;
+use DateTimeZone;
+use KTXF\Json\JsonSerializableObject;
+
+class EventCommonObject extends JsonSerializableObject {
+
+	public int|null $sequence = null;
+	public DateTimeZone|null $timeZone = null;
+	public DateTime|DateTimeImmutable|null $startsOn = null;
+	public DateTimeZone|null $startsTZ = null;
+	public DateTime|DateTimeImmutable|null $endsOn = null;
+	public DateTimeZone|null $endsTZ = null;
+	public DateInterval|null $duration = null;
+	public bool|null $timeless = false;
+	public string|null $label = null;
+	public string|null $description = null;
+	public EventLocationPhysicalCollection $locationsPhysical;
+	public EventLocationVirtualCollection $locationsVirtual;
+	public EventAvailabilityTypes|null $availability = null;
+	public EventSensitivityTypes|null $sensitivity = null;
+	public int|null $priority = null;
+	public string|null $color = null;
+	public EventTagCollection $tags;
+	public EventOrganizerObject $organizer;
+	public EventParticipantCollection $participants;
+	public EventNotificationCollection $notifications;
+	
+	public function __construct() {
+		$this->participants = new EventParticipantCollection();
+		$this->locationsPhysical = new EventLocationPhysicalCollection();
+		$this->locationsVirtual = new EventLocationVirtualCollection();
+		$this->notifications = new EventNotificationCollection();
+		$this->organizer = new EventOrganizerObject();
+		$this->tags = new EventTagCollection();
+	}
+
+}
diff --git a/shared/lib/Chrono/Event/EventLocationPhysicalCollection.php b/shared/lib/Chrono/Event/EventLocationPhysicalCollection.php
new file mode 100644
index 0000000..59a9db8
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventLocationPhysicalCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventLocationPhysicalCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, EventLocationPhysicalObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/Chrono/Event/EventLocationPhysicalObject.php b/shared/lib/Chrono/Event/EventLocationPhysicalObject.php
new file mode 100644
index 0000000..b6d1167
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventLocationPhysicalObject.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableObject;
+
+class EventLocationPhysicalObject extends JsonSerializableObject {
+
+	public string|null $identifier = null;
+	public string|null $label = null;
+	public string|null $description = null;
+	public string|null $relation = null; // e.g. start, end of event
+	public string|null $timeZone = null;
+
+}
diff --git a/shared/lib/Chrono/Event/EventLocationVirtualCollection.php b/shared/lib/Chrono/Event/EventLocationVirtualCollection.php
new file mode 100644
index 0000000..7565648
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventLocationVirtualCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventLocationVirtualCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, EventLocationVirtualObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/Chrono/Event/EventLocationVirtualObject.php b/shared/lib/Chrono/Event/EventLocationVirtualObject.php
new file mode 100644
index 0000000..9fe7624
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventLocationVirtualObject.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableObject;
+
+class EventLocationVirtualObject extends JsonSerializableObject {
+
+	public string|null $identifier = null;
+	public string|null $label = null;
+	public string|null $description = null;
+	public string|null $relation = null;
+	public string|null $location = null;
+
+}
diff --git a/shared/lib/Chrono/Event/EventMutationCollection.php b/shared/lib/Chrono/Event/EventMutationCollection.php
new file mode 100644
index 0000000..4d581b7
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventMutationCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventMutationCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, EventMutationObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/Chrono/Event/EventMutationObject.php b/shared/lib/Chrono/Event/EventMutationObject.php
new file mode 100644
index 0000000..6cf7c32
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventMutationObject.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use DateTime;
+use DateTimeImmutable;
+
+class EventMutationObject extends EventCommonObject {
+
+	public DateTime|DateTimeImmutable|null $mutationId = null;
+	public string|null $mutationTz = null;
+	public bool|null $mutationExclusion = null;
+
+}
diff --git a/shared/lib/Chrono/Event/EventNotificationAnchorTypes.php b/shared/lib/Chrono/Event/EventNotificationAnchorTypes.php
new file mode 100644
index 0000000..f4dab63
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventNotificationAnchorTypes.php
@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventNotificationAnchorTypes: string {
+	case Start = 'start';
+	case End = 'end';
+}
diff --git a/shared/lib/Chrono/Event/EventNotificationCollection.php b/shared/lib/Chrono/Event/EventNotificationCollection.php
new file mode 100644
index 0000000..817923e
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventNotificationCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventNotificationCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, EventNotificationObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/Chrono/Event/EventNotificationObject.php b/shared/lib/Chrono/Event/EventNotificationObject.php
new file mode 100644
index 0000000..0a5eb8f
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventNotificationObject.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use DateInterval;
+use DateTime;
+use DateTimeImmutable;
+use KTXF\Json\JsonSerializableObject;
+
+class EventNotificationObject extends JsonSerializableObject {
+	public string|null $identifier = null;
+	public EventNotificationTypes|null $Type = null;
+	public EventNotificationPatterns|null $Pattern = null;
+	public DateTime|DateTimeImmutable|null $When = null;
+	public EventNotificationAnchorTypes|null $Anchor = null;
+	public DateInterval|null $Offset = null;
+}
diff --git a/shared/lib/Chrono/Event/EventNotificationPatterns.php b/shared/lib/Chrono/Event/EventNotificationPatterns.php
new file mode 100644
index 0000000..1d35632
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventNotificationPatterns.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventNotificationPatterns: string {
+	case Absolute = 'absolute';
+	case Relative = 'relative';
+	case Unknown = 'unknown';
+}
diff --git a/shared/lib/Chrono/Event/EventNotificationTypes.php b/shared/lib/Chrono/Event/EventNotificationTypes.php
new file mode 100644
index 0000000..4ec49a7
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventNotificationTypes.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventNotificationTypes: string {
+	case Visual = 'visual';
+	case Audible = 'audible';
+	case Email = 'email';
+}
diff --git a/shared/lib/Chrono/Event/EventObject.php b/shared/lib/Chrono/Event/EventObject.php
new file mode 100644
index 0000000..3e1f206
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventObject.php
@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use DateTimeInterface;
+
+class EventObject extends EventCommonObject {
+
+	// Meta Information
+	public string $type = 'event';
+	public int $version = 1;
+	public string|null $urid = null;
+	public ?DateTimeInterface $created = null;
+	public ?DateTimeInterface $modified = null;
+
+	public EventOccurrenceObject|null $pattern = null;
+	public EventMutationCollection $mutations;
+	
+	public function __construct() {
+		parent::__construct();
+		$this->mutations = new EventMutationCollection();
+	}
+
+}
diff --git a/shared/lib/Chrono/Event/EventOccurrenceObject.php b/shared/lib/Chrono/Event/EventOccurrenceObject.php
new file mode 100644
index 0000000..e367a9f
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventOccurrenceObject.php
@@ -0,0 +1,36 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use DateTime;
+use DateTimeImmutable;
+use KTXF\Json\JsonSerializableObject;
+
+class EventOccurrenceObject extends JsonSerializableObject {
+	public EventOccurrencePatternTypes|null $pattern = null;        // Pattern - Absolute / Relative
+	public EventOccurrencePrecisionTypes|null $precision = null;    // Time Interval
+	public int|null $interval = null;           // Time Interval - Every 2 Days / Every 4 Weeks / Every 1 Year
+	public int|null $iterations = null;         // Number of recurrence
+	public DateTime|DateTimeImmutable|null $concludes = null;     // Date to stop recurrence
+	public String|null $scale = null;           // calendar system in which this recurrence rule operates
+	public array $onDayOfWeek = [];
+	public array $onDayOfMonth = [];
+	public array $onDayOfYear = [];
+	public array $onWeekOfMonth = [];
+	public array $onWeekOfYear = [];
+	public array $onMonthOfYear = [];
+	public array $onHour = [];
+	public array $onMinute = [];
+	public array $onSecond = [];
+	public array $onPosition = [];
+
+	public function __construct() {
+	}
+}
diff --git a/shared/lib/Chrono/Event/EventOccurrencePatternTypes.php b/shared/lib/Chrono/Event/EventOccurrencePatternTypes.php
new file mode 100644
index 0000000..05e4dc5
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventOccurrencePatternTypes.php
@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventOccurrencePatternTypes: string {
+	case Absolute = 'absolute';
+	case Relative = 'relative';
+}
diff --git a/shared/lib/Chrono/Event/EventOccurrencePrecisionTypes.php b/shared/lib/Chrono/Event/EventOccurrencePrecisionTypes.php
new file mode 100644
index 0000000..3ccf3a4
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventOccurrencePrecisionTypes.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventOccurrencePrecisionTypes: string {
+	case Yearly = 'yearly';
+	case Monthly = 'monthly';
+	case Weekly = 'weekly';
+	case Daily = 'daily';
+	case Hourly = 'hourly';
+	case Minutely = 'minutely';
+	case Secondly = 'secondly';
+}
diff --git a/shared/lib/Chrono/Event/EventOrganizerObject.php b/shared/lib/Chrono/Event/EventOrganizerObject.php
new file mode 100644
index 0000000..12f965b
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventOrganizerObject.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableObject;
+
+class EventOrganizerObject extends JsonSerializableObject {
+
+	public EventParticipantRealm|null $realm = null; // E - external, I - internal
+	public string|null $address = null;
+	public string|null $name = null;
+
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantCollection.php b/shared/lib/Chrono/Event/EventParticipantCollection.php
new file mode 100644
index 0000000..c5b9031
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventParticipantCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, EventParticipantObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantObject.php b/shared/lib/Chrono/Event/EventParticipantObject.php
new file mode 100644
index 0000000..353f83f
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantObject.php
@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableObject;
+
+class EventParticipantObject extends JsonSerializableObject {
+
+	public string|null $identifier = null;
+	public EventParticipantRealm|null $realm = null; // E - external, I - internal
+	public string|null $name = null;
+	public string|null $description = null;
+	public string|null $language = null;
+	public string|null $address = null;
+	public EventParticipantTypes|null $type = null;
+	public EventParticipantStatusTypes|null $status = null;
+	public string|null $comment = null;
+	public EventParticipantRoleCollection $roles;
+
+	public function __construct() {
+		$this->roles = new EventParticipantRoleCollection();
+	}
+
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantRealm.php b/shared/lib/Chrono/Event/EventParticipantRealm.php
new file mode 100644
index 0000000..0c8a1ac
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantRealm.php
@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventParticipantRealm: string {
+	case Internal = 'I';
+	case External = 'E';
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantRoleCollection.php b/shared/lib/Chrono/Event/EventParticipantRoleCollection.php
new file mode 100644
index 0000000..2405108
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantRoleCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventParticipantRoleCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, EventParticipantRoleTypes::class);
+	}
+	
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantRoleTypes.php b/shared/lib/Chrono/Event/EventParticipantRoleTypes.php
new file mode 100644
index 0000000..7d3e70c
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantRoleTypes.php
@@ -0,0 +1,19 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventParticipantRoleTypes: string {
+	case Owner = 'owner';
+	case Chair = 'chair';
+	case Attendee = 'attendee';
+	case Optional = 'optional';
+	case Informational = 'informational';
+	case Contact = 'contact';
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantStatusTypes.php b/shared/lib/Chrono/Event/EventParticipantStatusTypes.php
new file mode 100644
index 0000000..8925c9c
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantStatusTypes.php
@@ -0,0 +1,18 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventParticipantStatusTypes: string {
+	case None = 'none';
+	case Accepted = 'accepted';
+	case Declined = 'declined';
+	case Tentative = 'tentative';
+	case Delegated = 'delegated';
+}
diff --git a/shared/lib/Chrono/Event/EventParticipantTypes.php b/shared/lib/Chrono/Event/EventParticipantTypes.php
new file mode 100644
index 0000000..58e66d9
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventParticipantTypes.php
@@ -0,0 +1,18 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventParticipantTypes: string {
+	case Unknown = 'unknown';
+	case Individual = 'individual';
+	case Group = 'group';
+	case Resource = 'resource';
+	case Location = 'location';
+}
diff --git a/shared/lib/Chrono/Event/EventSensitivityTypes.php b/shared/lib/Chrono/Event/EventSensitivityTypes.php
new file mode 100644
index 0000000..55ca876
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventSensitivityTypes.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+enum EventSensitivityTypes: string {
+	case Public = 'public';
+	case Private = 'private';
+	case Secret = 'secret';
+}
diff --git a/shared/lib/Chrono/Event/EventTagCollection.php b/shared/lib/Chrono/Event/EventTagCollection.php
new file mode 100644
index 0000000..d1ebcd4
--- /dev/null
+++ b/shared/lib/Chrono/Event/EventTagCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Event;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class EventTagCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, 'string');
+	}
+	
+}
diff --git a/shared/lib/Chrono/Provider/IProviderBase.php b/shared/lib/Chrono/Provider/IProviderBase.php
new file mode 100644
index 0000000..d65d3d9
--- /dev/null
+++ b/shared/lib/Chrono/Provider/IProviderBase.php
@@ -0,0 +1,96 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Provider;
+
+use JsonSerializable;
+use KTXF\Chrono\Service\IServiceBase;
+
+interface IProviderBase extends JsonSerializable {
+
+	public const CAPABILITY_SERVICE_LIST = 'ServiceList';
+	public const CAPABILITY_SERVICE_FETCH = 'ServiceFetch';
+	public const CAPABILITY_SERVICE_EXTANT = 'ServiceExtant';
+
+	public const JSON_TYPE = 'chrono.provider';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+
+	/**
+	 * Confirms if specific capability is supported (e.g. 'ServiceList')
+	 *
+	 * @since 2025.05.01
+	 */
+	public function capable(string $value): bool;
+
+	/**
+	 * Lists all supported capabilities
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string,bool>
+	 */
+	public function capabilities(): array;
+
+	/**
+	 * An arbitrary unique text string identifying this provider (e.g. UUID or 'system' or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string;
+
+	/**
+	 * The localized human friendly name of this provider (e.g. System Calendar Provider)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function label(): string;
+
+	/**
+	 * Retrieve collection of services for a specific user
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param array $filter filter criteria
+	 *
+	 * @return array<string,IServiceBase> collection of service objects
+	 */
+	public function serviceList(string $tenantId, string $userId, array $filter): array;
+
+	/**
+	 * Determine if any services are configured for a specific user
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param int|string ...$identifiers variadic collection of service identifiers
+	 * 
+	 * @return array<string,bool> collection of service identifiers with boolean values indicating if the service is available
+	 */
+	public function serviceExtant(string $tenantId, string $userId, int|string ...$identifiers): array;
+
+	/**
+	 * Retrieve a service with a specific identifier
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param string|int $identifier service identifier
+	 *
+	 * @return IServiceBase|null returns service object or null if non found
+	 */
+	public function serviceFetch(string $tenantId, string $userId, string|int $identifier): ?IServiceBase;
+
+}
diff --git a/shared/lib/Chrono/Provider/IProviderServiceMutate.php b/shared/lib/Chrono/Provider/IProviderServiceMutate.php
new file mode 100644
index 0000000..6a90e27
--- /dev/null
+++ b/shared/lib/Chrono/Provider/IProviderServiceMutate.php
@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Provider;
+
+use KTXF\Json\JsonDeserializable;
+use KTXF\Chrono\Service\IServiceBase;
+
+interface IProviderServiceMutate extends JsonDeserializable {
+
+	public const CAPABILITY_SERVICE_FRESH = 'ServiceFresh';
+	public const CAPABILITY_SERVICE_CREATE = 'ServiceCreate';
+	public const CAPABILITY_SERVICE_UPDATE = 'ServiceUpdate';
+	public const CAPABILITY_SERVICE_DESTROY = 'ServiceDestroy';
+
+	/**
+	 * construct and new blank service instance
+	 *
+	 * @since 2025.05.01
+	 */
+	public function serviceFresh(string $uid = ''): IServiceBase;
+
+	/**
+	 * create a service configuration for a specific user
+	 *
+	 * @since 2025.05.01
+	 */
+	public function serviceCreate(string $uid, IServiceBase $service): string;
+
+	/**
+	 * modify a service configuration for a specific user
+	 *
+	 * @since 2025.05.01
+	 */
+	public function serviceModify(string $uid, IServiceBase $service): string;
+
+	/**
+	 * delete a service configuration for a specific user
+	 *
+	 * @since 2025.05.01
+	 */
+	public function serviceDestroy(string $uid, IServiceBase $service): bool;
+
+}
diff --git a/shared/lib/Chrono/Service/IServiceBase.php b/shared/lib/Chrono/Service/IServiceBase.php
new file mode 100644
index 0000000..424fd4f
--- /dev/null
+++ b/shared/lib/Chrono/Service/IServiceBase.php
@@ -0,0 +1,197 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Service;
+
+use JsonSerializable;
+use KTXF\Chrono\Collection\ICollectionBase;
+use KTXF\Resource\Filter\IFilter;
+use KTXF\Resource\Range\IRange;
+use KTXF\Resource\Range\RangeType;
+use KTXF\Resource\Sort\ISort;
+
+interface IServiceBase extends JsonSerializable {
+
+	public const CAPABILITY_COLLECTION_LIST = 'CollectionList';
+	public const CAPABILITY_COLLECTION_LIST_FILTER = 'CollectionListFilter';
+	public const CAPABILITY_COLLECTION_LIST_SORT = 'CollectionListSort';
+	public const CAPABILITY_COLLECTION_EXTANT = 'CollectionExtant';
+	public const CAPABILITY_COLLECTION_FETCH = 'CollectionFetch';
+
+	public const CAPABILITY_ENTITY_LIST = 'EntityList';
+	public const CAPABILITY_ENTITY_LIST_FILTER = 'EntityListFilter';
+	public const CAPABILITY_ENTITY_LIST_SORT = 'EntityListSort';
+	public const CAPABILITY_ENTITY_LIST_RANGE = 'EntityListRange';
+	public const CAPABILITY_ENTITY_DELTA = 'EntityDelta';
+	public const CAPABILITY_ENTITY_EXTANT = 'EntityExtant';
+	public const CAPABILITY_ENTITY_FETCH = 'EntityFetch';
+
+    public const CAPABILITY_FILTER_ANY = '*';
+    public const CAPABILITY_FILTER_ID = 'id';
+    public const CAPABILITY_FILTER_URID = 'urid';
+    public const CAPABILITY_FILTER_LABEL = 'label';
+    public const CAPABILITY_FILTER_DESCRIPTION = 'description';
+
+    public const CAPABILITY_SORT_ID = 'id';
+    public const CAPABILITY_SORT_URID = 'urid';
+    public const CAPABILITY_SORT_LABEL = 'label';
+    public const CAPABILITY_SORT_PRIORITY = 'priority';
+
+    public const CAPABILITY_RANGE_TALLY = 'tally';
+    public const CAPABILITY_RANGE_TALLY_ABSOLUTE = 'absolute';
+    public const CAPABILITY_RANGE_TALLY_RELATIVE = 'relative';
+    public const CAPABILITY_RANGE_DATE = 'date';
+
+	public const JSON_TYPE = 'chrono.service';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_PROVIDER = 'provider';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+	public const JSON_PROPERTY_ENABLED = 'enabled';
+
+	/**
+	 * Confirms if specific capability is supported
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $value required ability e.g. 'EntityList'
+	 *
+	 * @return bool
+	 */
+	public function capable(string $value): bool;
+
+	/**
+	 * Lists all supported capabilities
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string,bool>
+	 */
+	public function capabilities(): array;
+
+	/**
+	 * Unique identifier of the provider this service belongs to
+	 *
+	 * @since 2025.05.01
+	 */
+	public function in(): string;
+
+	/**
+	 * Unique arbitrary text string identifying this service (e.g. 1 or service1 or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the localized human friendly name of this service (e.g. ACME Company Calendar Service)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getLabel(): string;
+
+	/**
+	 * Gets the active status of this service
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getEnabled(): bool;
+
+	/**
+	 * Retrieve collection of collections for this service
+	 *
+	 * @since 2025.05.01
+	 */
+	public function collectionList(?IFilter $filter = null, ?ISort $sort = null): array;
+
+	/**
+	 * Retrieve filter object for collection list
+	 *
+	 * @since 2025.05.01
+	 */
+	public function collectionListFilter(): IFilter;
+
+	/**
+	 * Retrieve sort object for collection list
+	 *
+	 * @since 2025.05.01
+	 */
+	public function collectionListSort(): ISort;
+
+	/**
+	 * Determine if a collection exists
+	 *
+	 * @since 2025.05.01
+	 */
+	public function collectionExtant(string|int $identifier): bool;
+
+	/**
+	 * Retrieve a specific collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function collectionFetch(string|int $identifier): ?ICollectionBase;
+
+	/**
+	 * Retrieve collection of entities from a specific collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function entityList(string|int $collection, ?IFilter $filter = null, ?ISort $sort = null, ?IRange $range = null, ?array $elements = null): array;
+
+	/**
+	 * Retrieve filter object for entity list
+	 *
+	 * @since 2025.05.01
+	 */
+	public function entityListFilter(): IFilter;
+
+	/**
+	 * Retrieve sort object for entity list
+	 *
+	 * @since 2025.05.01
+	 */
+	public function entityListSort(): ISort;
+
+	/**
+	 * Retrieve range object for entity list
+	 *
+	 * @since 2025.05.01
+	 */
+	public function entityListRange(RangeType $type): IRange;
+
+	/**
+	 * Retrieve collection of entities that have changed since a given signature
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $collection collection identifier
+	 * @param string $signature signature to compare against
+	 * @param string $detail level of detail to return (ids, full, etc)
+	 *
+	 * @return array collection of entities or entity identifiers
+	 */
+	public function entityDelta(string|int $collection, string $signature, string $detail = 'ids'): array;
+
+	/**
+	 * Determine if entities exist in a specific collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function entityExtant(string|int $collection, string|int ...$identifiers): array;
+
+	/**
+	 * Retrieve specific entities from a specific collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function entityFetch(string|int $collection, string|int ...$identifiers): array;
+
+}
diff --git a/shared/lib/Chrono/Service/IServiceCollectionMutable.php b/shared/lib/Chrono/Service/IServiceCollectionMutable.php
new file mode 100644
index 0000000..78f6413
--- /dev/null
+++ b/shared/lib/Chrono/Service/IServiceCollectionMutable.php
@@ -0,0 +1,79 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Service;
+
+use KTXF\Chrono\Collection\ICollectionBase;
+use KTXF\Chrono\Collection\ICollectionMutable;
+
+interface IServiceCollectionMutable extends IServiceBase {
+
+	public const CAPABILITY_COLLECTION_CREATE = 'CollectionCreate';
+	public const CAPABILITY_COLLECTION_MODIFY = 'CollectionModify';
+	public const CAPABILITY_COLLECTION_DESTROY = 'CollectionDestroy';
+	public const CAPABILITY_COLLECTION_MOVE = 'CollectionMove';
+
+	/**
+	 * Creates a new, empty collection object
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return ICollectionMutable
+	 */
+	public function collectionFresh(): ICollectionMutable;
+
+	/**
+	 * Creates a new collection at the specified location
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $location The parent collection to create this collection in, or empty string for root
+	 * @param ICollectionMutable $collection The collection to create
+	 * @param array $options Additional options for the collection creation
+	 *
+	 * @return ICollectionBase
+	 * 
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionCreate(string|int $location, ICollectionMutable $collection, array $options): ICollectionBase;
+
+	/**
+	 * Modifies an existing collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $identifier The ID of the collection to modify
+	 * @param ICollectionMutable $collection The collection with modifications
+	 *
+	 * @return ICollectionBase
+	 * 
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionModify(string|int $identifier, ICollectionMutable $collection): ICollectionBase;
+
+	/**
+	 * Destroys an existing collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $identifier The ID of the collection to destroy
+	 *
+	 * @return bool
+	 * 
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionDestroy(string|int $identifier): bool;
+
+}
diff --git a/shared/lib/Chrono/Service/IServiceEntityMutable.php b/shared/lib/Chrono/Service/IServiceEntityMutable.php
new file mode 100644
index 0000000..ebe4575
--- /dev/null
+++ b/shared/lib/Chrono/Service/IServiceEntityMutable.php
@@ -0,0 +1,81 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Service;
+
+use KTXF\Chrono\Entity\IEntityMutable;
+
+interface IServiceEntityMutable extends IServiceBase {
+
+	public const CAPABILITY_ENTITY_CREATE = 'EntityCreate';
+	public const CAPABILITY_ENTITY_MODIFY = 'EntityModify';
+	public const CAPABILITY_ENTITY_DESTROY = 'EntityDestroy';
+	public const CAPABILITY_ENTITY_COPY = 'EntityCopy';
+	public const CAPABILITY_ENTITY_MOVE = 'EntityMove';
+
+	/**
+	 * Creates a fresh entity of the specified type
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return IEntityMutable
+	 */
+	public function entityFresh(): IEntityMutable;
+
+	/**
+	 * Creates a new entity in the specified collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $collection The collection to create this entity in
+	 * @param IEntityMutable $entity The entity to create
+	 * @param array $options Additional options for the entity creation
+	 *
+	 * @return IEntityMutable
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityCreate(string|int $collection, IEntityMutable $entity, array $options): IEntityMutable;
+
+	/**
+	 * Modifies an existing entity in the specified collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $collection The collection containing the entity to modify
+	 * @param string $identifier The ID of the entity to modify
+	 * @param IEntityMutable $entity The entity with modifications
+	 *
+	 * @return IEntityMutable
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityModify(string|int $collection, string|int $identifier, IEntityMutable $entity): IEntityMutable;
+
+	/**
+	 * Destroys an existing entity in the specified collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $collection The collection containing the entity to destroy
+	 * @param string $identifier The ID of the entity to destroy
+	 *
+	 * @return IEntityMutable
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityDestroy(string|int $collection, string|int $identifier): IEntityMutable;
+
+}
diff --git a/shared/lib/Chrono/Service/IServiceMutable.php b/shared/lib/Chrono/Service/IServiceMutable.php
new file mode 100644
index 0000000..02ece43
--- /dev/null
+++ b/shared/lib/Chrono/Service/IServiceMutable.php
@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Chrono\Service;
+
+use KTXF\Json\JsonDeserializable;
+
+interface IServiceMutable extends IServiceBase, JsonDeserializable {
+
+	/**
+	 * Sets the localized human friendly name of this service (e.g. ACME Company Calendar Service)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setLabel(string $value): self;
+
+	/**
+	 * Sets the active status of this service
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setEnabled(bool $value): self;
+
+}
diff --git a/shared/lib/Controller/ControllerAbstract.php b/shared/lib/Controller/ControllerAbstract.php
new file mode 100644
index 0000000..53840eb
--- /dev/null
+++ b/shared/lib/Controller/ControllerAbstract.php
@@ -0,0 +1,8 @@
+<?php
+
+namespace KTXF\Controller;
+
+abstract class ControllerAbstract
+{
+
+}
diff --git a/shared/lib/Event/Event.php b/shared/lib/Event/Event.php
new file mode 100644
index 0000000..a6454e8
--- /dev/null
+++ b/shared/lib/Event/Event.php
@@ -0,0 +1,146 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Event;
+
+/**
+ * Base event class for the event bus system
+ */
+class Event
+{
+    private bool $propagationStopped = false;
+    private array $data = [];
+    private float $timestamp;
+    private ?string $tenantId = null;
+    private ?string $identityId = null;
+
+    public function __construct(
+        private readonly string $name,
+        array $data = []
+    ) {
+        $this->data = $data;
+        $this->timestamp = microtime(true);
+    }
+
+    /**
+     * Get the event name
+     */
+    public function getName(): string
+    {
+        return $this->name;
+    }
+
+    /**
+     * Get a data value by key
+     */
+    public function get(string $key, mixed $default = null): mixed
+    {
+        return $this->data[$key] ?? $default;
+    }
+
+    /**
+     * Set a data value
+     */
+    public function set(string $key, mixed $value): self
+    {
+        $this->data[$key] = $value;
+        return $this;
+    }
+
+    /**
+     * Check if a data key exists
+     */
+    public function has(string $key): bool
+    {
+        return array_key_exists($key, $this->data);
+    }
+
+    /**
+     * Get all data
+     */
+    public function getData(): array
+    {
+        return $this->data;
+    }
+
+    /**
+     * Alias for getData() for backward compatibility
+     */
+    public function all(): array
+    {
+        return $this->data;
+    }
+
+    /**
+     * Get the event timestamp
+     */
+    public function getTimestamp(): float
+    {
+        return $this->timestamp;
+    }
+
+    /**
+     * Stop event propagation to subsequent listeners
+     */
+    public function stopPropagation(): void
+    {
+        $this->propagationStopped = true;
+    }
+
+    /**
+     * Check if propagation is stopped
+     */
+    public function isPropagationStopped(): bool
+    {
+        return $this->propagationStopped;
+    }
+
+    /**
+     * Get tenant ID for multi-tenant context
+     */
+    public function getTenantId(): ?string
+    {
+        return $this->tenantId;
+    }
+
+    /**
+     * Set tenant ID for multi-tenant context
+     */
+    public function setTenantId(?string $tenantId): self
+    {
+        $this->tenantId = $tenantId;
+        return $this;
+    }
+
+    /**
+     * Get identity ID (user who triggered the event)
+     */
+    public function getIdentityId(): ?string
+    {
+        return $this->identityId;
+    }
+
+    /**
+     * Set identity ID
+     */
+    public function setIdentityId(?string $identityId): self
+    {
+        $this->identityId = $identityId;
+        return $this;
+    }
+
+    /**
+     * Convert event to array for serialization/logging
+     */
+    public function toArray(): array
+    {
+        return [
+            'name' => $this->name,
+            'data' => $this->data,
+            'timestamp' => $this->timestamp,
+            'tenantId' => $this->tenantId,
+            'identityId' => $this->identityId,
+        ];
+    }
+}
\ No newline at end of file
diff --git a/shared/lib/Event/EventBus.php b/shared/lib/Event/EventBus.php
new file mode 100644
index 0000000..750a2c7
--- /dev/null
+++ b/shared/lib/Event/EventBus.php
@@ -0,0 +1,186 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Event;
+
+/**
+ * Simple event bus for decoupled pub/sub communication between services
+ * 
+ * Features:
+ * - Priority-based listener ordering
+ * - Synchronous and asynchronous (deferred) event handling
+ * - Event propagation control
+ */
+class EventBus
+{
+    /** @var array<string, array<array{callback: callable, priority: int}>> */
+    private array $listeners = [];
+    
+    /** @var array<string, array<callable>> */
+    private array $asyncListeners = [];
+    
+    /** @var Event[] */
+    private array $deferredEvents = [];
+
+    /**
+     * Subscribe to an event with optional priority
+     * Higher priority listeners are called first
+     */
+    public function subscribe(string $eventName, callable $listener, int $priority = 0): self
+    {
+        $this->listeners[$eventName][] = [
+            'callback' => $listener,
+            'priority' => $priority,
+        ];
+        
+        // Sort by priority (higher first)
+        usort(
+            $this->listeners[$eventName],
+            fn($a, $b) => $b['priority'] <=> $a['priority']
+        );
+        
+        return $this;
+    }
+
+    /**
+     * Subscribe to an event for async/deferred processing
+     * These handlers run at the end of the request cycle
+     */
+    public function subscribeAsync(string $eventName, callable $listener): self
+    {
+        $this->asyncListeners[$eventName][] = $listener;
+        return $this;
+    }
+
+    /**
+     * Unsubscribe a listener from an event
+     */
+    public function unsubscribe(string $eventName, callable $listener): self
+    {
+        if (isset($this->listeners[$eventName])) {
+            $this->listeners[$eventName] = array_filter(
+                $this->listeners[$eventName],
+                fn($item) => $item['callback'] !== $listener
+            );
+        }
+        
+        if (isset($this->asyncListeners[$eventName])) {
+            $this->asyncListeners[$eventName] = array_filter(
+                $this->asyncListeners[$eventName],
+                fn($item) => $item !== $listener
+            );
+        }
+        
+        return $this;
+    }
+
+    /**
+     * Publish an event to all subscribers
+     */
+    public function publish(Event $event): self
+    {
+        $eventName = $event->getName();
+        
+        // Execute synchronous listeners
+        if (isset($this->listeners[$eventName])) {
+            foreach ($this->listeners[$eventName] as $listenerData) {
+                if ($event->isPropagationStopped()) {
+                    break;
+                }
+                
+                try {
+                    call_user_func($listenerData['callback'], $event);
+                } catch (\Throwable $e) {
+                    // Log error but don't break the chain
+                    error_log(sprintf(
+                        'Event listener error for %s: %s',
+                        $eventName,
+                        $e->getMessage()
+                    ));
+                }
+            }
+        }
+        
+        // Queue for async processing if there are async listeners
+        if (isset($this->asyncListeners[$eventName]) && !empty($this->asyncListeners[$eventName])) {
+            $this->deferredEvents[] = $event;
+        }
+        
+        return $this;
+    }
+
+    /**
+     * Process deferred/async events
+     * Call this at the end of the request cycle
+     */
+    public function processDeferred(): int
+    {
+        $processed = 0;
+        
+        foreach ($this->deferredEvents as $event) {
+            $eventName = $event->getName();
+            
+            if (!isset($this->asyncListeners[$eventName])) {
+                continue;
+            }
+            
+            foreach ($this->asyncListeners[$eventName] as $listener) {
+                try {
+                    call_user_func($listener, $event);
+                    $processed++;
+                } catch (\Throwable $e) {
+                    // Log but don't fail - these are non-critical
+                    error_log(sprintf(
+                        'Async event handler error for %s: %s',
+                        $eventName,
+                        $e->getMessage()
+                    ));
+                }
+            }
+        }
+        
+        $this->deferredEvents = [];
+        
+        return $processed;
+    }
+
+    /**
+     * Check if an event has any listeners
+     */
+    public function hasListeners(string $eventName): bool
+    {
+        return !empty($this->listeners[$eventName]) || !empty($this->asyncListeners[$eventName]);
+    }
+
+    /**
+     * Get count of listeners for an event
+     */
+    public function getListenerCount(string $eventName): int
+    {
+        $sync = isset($this->listeners[$eventName]) ? count($this->listeners[$eventName]) : 0;
+        $async = isset($this->asyncListeners[$eventName]) ? count($this->asyncListeners[$eventName]) : 0;
+        
+        return $sync + $async;
+    }
+
+    /**
+     * Get count of pending deferred events
+     */
+    public function getDeferredCount(): int
+    {
+        return count($this->deferredEvents);
+    }
+
+    /**
+     * Clear all listeners (useful for testing)
+     */
+    public function clear(): self
+    {
+        $this->listeners = [];
+        $this->asyncListeners = [];
+        $this->deferredEvents = [];
+        
+        return $this;
+    }
+}
diff --git a/shared/lib/Event/SecurityEvent.php b/shared/lib/Event/SecurityEvent.php
new file mode 100644
index 0000000..82e1eba
--- /dev/null
+++ b/shared/lib/Event/SecurityEvent.php
@@ -0,0 +1,303 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Event;
+
+/**
+ * Security-specific event for authentication and access control events
+ */
+class SecurityEvent extends Event
+{
+    // Event names
+    public const AUTH_SUCCESS = 'security.auth.success';
+    public const AUTH_FAILURE = 'security.auth.failure';
+    public const AUTH_LOGOUT = 'security.auth.logout';
+    public const TOKEN_REFRESH = 'security.token.refresh';
+    public const TOKEN_REVOKED = 'security.token.revoked';
+    
+    public const ACCESS_DENIED = 'security.access.denied';
+    public const ACCESS_GRANTED = 'security.access.granted';
+    
+    public const BRUTE_FORCE_DETECTED = 'security.brute_force.detected';
+    public const RATE_LIMIT_EXCEEDED = 'security.rate_limit.exceeded';
+    public const SUSPICIOUS_ACTIVITY = 'security.suspicious.activity';
+    
+    public const IP_BLOCKED = 'security.ip.blocked';
+    public const IP_ALLOWED = 'security.ip.allowed';
+    public const DEVICE_BLOCKED = 'security.device.blocked';
+
+    private ?string $ipAddress = null;
+    private ?string $deviceFingerprint = null;
+    private ?string $userAgent = null;
+    private ?string $requestPath = null;
+    private ?string $requestMethod = null;
+    private ?string $userId = null;
+    private ?string $reason = null;
+    private int $severity = self::SEVERITY_INFO;
+
+    // Severity levels
+    public const SEVERITY_DEBUG = 0;
+    public const SEVERITY_INFO = 1;
+    public const SEVERITY_WARNING = 2;
+    public const SEVERITY_ERROR = 3;
+    public const SEVERITY_CRITICAL = 4;
+
+    /**
+     * Create a security event with common parameters
+     */
+    public static function create(
+        string $name,
+        ?string $ipAddress = null,
+        ?string $deviceFingerprint = null,
+        array $data = []
+    ): self {
+        $event = new self($name, $data);
+        $event->ipAddress = $ipAddress;
+        $event->deviceFingerprint = $deviceFingerprint;
+        
+        // Set default severity based on event type
+        $event->severity = self::getSeverityForEvent($name);
+        
+        return $event;
+    }
+
+    /**
+     * Create an authentication failure event
+     */
+    public static function authFailure(
+        string $ipAddress,
+        ?string $deviceFingerprint = null,
+        ?string $userId = null,
+        ?string $reason = null
+    ): self {
+        $event = self::create(self::AUTH_FAILURE, $ipAddress, $deviceFingerprint, [
+            'userId' => $userId,
+            'reason' => $reason,
+        ]);
+        $event->userId = $userId;
+        $event->reason = $reason;
+        return $event;
+    }
+
+    /**
+     * Create an authentication success event
+     */
+    public static function authSuccess(
+        string $ipAddress,
+        ?string $deviceFingerprint = null,
+        string $userId = null
+    ): self {
+        $event = self::create(self::AUTH_SUCCESS, $ipAddress, $deviceFingerprint, [
+            'userId' => $userId,
+        ]);
+        $event->userId = $userId;
+        return $event;
+    }
+
+    /**
+     * Create a brute force detection event
+     */
+    public static function bruteForceDetected(
+        string $ipAddress,
+        int $failureCount,
+        int $windowSeconds
+    ): self {
+        $event = self::create(self::BRUTE_FORCE_DETECTED, $ipAddress, null, [
+            'failureCount' => $failureCount,
+            'windowSeconds' => $windowSeconds,
+        ]);
+        $event->reason = sprintf(
+            '%d failed attempts in %d seconds',
+            $failureCount,
+            $windowSeconds
+        );
+        return $event;
+    }
+
+    /**
+     * Create a rate limit exceeded event
+     */
+    public static function rateLimitExceeded(
+        string $ipAddress,
+        int $requestCount,
+        int $windowSeconds,
+        ?string $endpoint = null
+    ): self {
+        $event = self::create(self::RATE_LIMIT_EXCEEDED, $ipAddress, null, [
+            'requestCount' => $requestCount,
+            'windowSeconds' => $windowSeconds,
+            'endpoint' => $endpoint,
+        ]);
+        $event->requestPath = $endpoint;
+        $event->reason = sprintf(
+            '%d requests in %d seconds',
+            $requestCount,
+            $windowSeconds
+        );
+        return $event;
+    }
+
+    /**
+     * Create an access denied event
+     */
+    public static function accessDenied(
+        string $ipAddress,
+        ?string $deviceFingerprint = null,
+        ?string $ruleId = null,
+        ?string $reason = null
+    ): self {
+        $event = self::create(self::ACCESS_DENIED, $ipAddress, $deviceFingerprint, [
+            'ruleId' => $ruleId,
+            'reason' => $reason,
+        ]);
+        $event->reason = $reason;
+        return $event;
+    }
+
+    /**
+     * Get default severity for event types
+     */
+    private static function getSeverityForEvent(string $eventName): int
+    {
+        return match ($eventName) {
+            self::AUTH_SUCCESS,
+            self::ACCESS_GRANTED,
+            self::TOKEN_REFRESH => self::SEVERITY_INFO,
+            
+            self::AUTH_FAILURE,
+            self::ACCESS_DENIED,
+            self::AUTH_LOGOUT,
+            self::TOKEN_REVOKED => self::SEVERITY_WARNING,
+            
+            self::RATE_LIMIT_EXCEEDED,
+            self::SUSPICIOUS_ACTIVITY => self::SEVERITY_ERROR,
+            
+            self::BRUTE_FORCE_DETECTED,
+            self::IP_BLOCKED,
+            self::DEVICE_BLOCKED => self::SEVERITY_CRITICAL,
+            
+            default => self::SEVERITY_INFO,
+        };
+    }
+
+    // Getters and setters
+
+    public function getIpAddress(): ?string
+    {
+        return $this->ipAddress;
+    }
+
+    public function setIpAddress(?string $ipAddress): self
+    {
+        $this->ipAddress = $ipAddress;
+        return $this;
+    }
+
+    public function getDeviceFingerprint(): ?string
+    {
+        return $this->deviceFingerprint;
+    }
+
+    public function setDeviceFingerprint(?string $deviceFingerprint): self
+    {
+        $this->deviceFingerprint = $deviceFingerprint;
+        return $this;
+    }
+
+    public function getUserAgent(): ?string
+    {
+        return $this->userAgent;
+    }
+
+    public function setUserAgent(?string $userAgent): self
+    {
+        $this->userAgent = $userAgent;
+        return $this;
+    }
+
+    public function getRequestPath(): ?string
+    {
+        return $this->requestPath;
+    }
+
+    public function setRequestPath(?string $requestPath): self
+    {
+        $this->requestPath = $requestPath;
+        return $this;
+    }
+
+    public function getRequestMethod(): ?string
+    {
+        return $this->requestMethod;
+    }
+
+    public function setRequestMethod(?string $requestMethod): self
+    {
+        $this->requestMethod = $requestMethod;
+        return $this;
+    }
+
+    public function getUserId(): ?string
+    {
+        return $this->userId;
+    }
+
+    public function setUserId(?string $userId): self
+    {
+        $this->userId = $userId;
+        return $this;
+    }
+
+    public function getReason(): ?string
+    {
+        return $this->reason;
+    }
+
+    public function setReason(?string $reason): self
+    {
+        $this->reason = $reason;
+        return $this;
+    }
+
+    public function getSeverity(): int
+    {
+        return $this->severity;
+    }
+
+    public function setSeverity(int $severity): self
+    {
+        $this->severity = $severity;
+        return $this;
+    }
+
+    public function getSeverityLabel(): string
+    {
+        return match ($this->severity) {
+            self::SEVERITY_DEBUG => 'DEBUG',
+            self::SEVERITY_INFO => 'INFO',
+            self::SEVERITY_WARNING => 'WARNING',
+            self::SEVERITY_ERROR => 'ERROR',
+            self::SEVERITY_CRITICAL => 'CRITICAL',
+            default => 'UNKNOWN',
+        };
+    }
+
+    /**
+     * Override toArray to include security-specific fields
+     */
+    public function toArray(): array
+    {
+        return array_merge(parent::toArray(), [
+            'ipAddress' => $this->ipAddress,
+            'deviceFingerprint' => $this->deviceFingerprint,
+            'userAgent' => $this->userAgent,
+            'requestPath' => $this->requestPath,
+            'requestMethod' => $this->requestMethod,
+            'userId' => $this->userId,
+            'reason' => $this->reason,
+            'severity' => $this->severity,
+            'severityLabel' => $this->getSeverityLabel(),
+        ]);
+    }
+}
diff --git a/shared/lib/Exception/BaseException.php b/shared/lib/Exception/BaseException.php
new file mode 100644
index 0000000..2ad830f
--- /dev/null
+++ b/shared/lib/Exception/BaseException.php
@@ -0,0 +1,175 @@
+<?php
+
+namespace KTXF\Exception;
+
+use Throwable;
+
+/**
+ * Exception is the base class for
+ * all Exceptions.
+ * @link https://php.net/manual/en/class.exception.php
+ */
+class BaseException implements Throwable
+{
+    /** The error message */
+    protected string $message = '';
+
+    /** The error code */
+    protected int $code = 0;
+
+    /** The filename where the error happened  */
+    protected string $file = '';
+
+    /** The line where the error happened */
+    protected int $line = 0;
+
+    /** Previous throwable in chain */
+    protected ?Throwable $previous = null;
+
+    /** Captured stack trace frames (excluding constructor frame) */
+    protected array $trace = [];
+
+    /**
+     * Construct the exception. Note: The message is NOT binary safe.
+     * @link https://php.net/manual/en/exception.construct.php
+     * @param string $message [optional] The Exception message to throw.
+     * @param int $code [optional] The Exception code.
+     * @param null|Throwable $previous [optional] The previous throwable used for the exception chaining.
+     */
+    public function __construct(string $message = "", int $code = 0, ?Throwable $previous = null)
+    {
+        $this->message = $message;
+        $this->code = $code;
+        $this->previous = $previous;
+
+        // Capture backtrace; first element is this constructor call site
+        $bt = debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS);
+        if (!empty($bt)) {
+            $first = $bt[0];
+            $this->file = $first['file'] ?? 'unknown';
+            $this->line = $first['line'] ?? 0;
+        }
+        // Exclude current frame for readability
+        $this->trace = array_slice($bt, 1);
+    }
+
+    /**
+     * Clone the exception
+     * Tries to clone the Exception, which results in Fatal error.
+     * @link https://php.net/manual/en/exception.clone.php
+     * @return void
+     */
+    public function __clone(): void
+    {
+        // Mimic internal Exception behavior: cloning not allowed.
+        trigger_error('Trying to clone an uncloneable object of class ' . static::class, E_USER_ERROR);
+    }
+    
+    /**
+     * String representation of the exception
+     * @link https://php.net/manual/en/exception.tostring.php
+     * @return string the string representation of the exception.
+     */
+    public function __toString(): string
+    {
+        return sprintf(
+            "%s: %s in %s:%d\nStack trace:\n%s",
+            static::class,
+            $this->getMessage(),
+            $this->getFile(),
+            $this->getLine(),
+            $this->getTraceAsString()
+        );
+    }
+
+    public function __wakeup(): void
+    {
+        // On wakeup we don't have original trace; reset trace to empty
+        $this->trace = [];
+    }
+
+    /**
+     * Gets the Exception message
+     * @link https://php.net/manual/en/exception.getmessage.php
+     * @return string the Exception message as a string.
+     */
+    final public function getMessage(): string
+    {
+        return $this->message;
+    }
+
+    /**
+     * Gets the Exception code
+     * @link https://php.net/manual/en/exception.getcode.php
+     * @return mixed|int the exception code as integer in
+     * <b>Exception</b> but possibly as other type in
+     * <b>Exception</b> descendants (for example as
+     * string in <b>PDOException</b>).
+     */
+    final public function getCode(): int
+    {
+        return $this->code;
+    }
+
+    /**
+     * Gets the file in which the exception occurred
+     * @link https://php.net/manual/en/exception.getfile.php
+     * @return string the filename in which the exception was created.
+     */
+    final public function getFile(): string
+    {
+        return $this->file;
+    }
+
+    /**
+     * Gets the line in which the exception occurred
+     * @link https://php.net/manual/en/exception.getline.php
+     * @return int the line number where the exception was created.
+     */
+    final public function getLine(): int
+    {
+        return $this->line;
+    }
+
+    /**
+     * Gets the stack trace
+     * @link https://php.net/manual/en/exception.gettrace.php
+     * @return array the Exception stack trace as an array.
+     */
+    final public function getTrace(): array
+    {
+        return $this->trace;
+    }
+
+    /**
+     * Returns previous Exception
+     * @link https://php.net/manual/en/exception.getprevious.php
+     * @return null|Throwable Returns the previous {@see Throwable} if available, or <b>NULL</b> otherwise.
+     * or null otherwise.
+     */
+    final public function getPrevious(): ?Throwable
+    {
+        return $this->previous;
+    }
+
+    /**
+     * Gets the stack trace as a string
+     * @link https://php.net/manual/en/exception.gettraceasstring.php
+     * @return string the Exception stack trace as a string.
+     */
+    final public function getTraceAsString(): string
+    {
+        $lines = [];
+        foreach ($this->trace as $i => $frame) {
+            $file = $frame['file'] ?? '[internal function]';
+            $line = $frame['line'] ?? 0;
+            $func = $frame['function'] ?? '';
+            $class = $frame['class'] ?? '';
+            $type = $frame['type'] ?? '';
+            $lines[] = sprintf('#%d %s(%s): %s%s%s()', $i, $file, $line, $class, $type, $func);
+        }
+        $lines[] = sprintf('#%d {main}', count($lines));
+        return implode("\n", $lines);
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/Exception/RuntimeException.php b/shared/lib/Exception/RuntimeException.php
new file mode 100644
index 0000000..87bc568
--- /dev/null
+++ b/shared/lib/Exception/RuntimeException.php
@@ -0,0 +1,9 @@
+<?php
+
+namespace KTXF\Exception;
+
+/**
+ * Exception thrown if an error which can only be found on runtime occurs.
+ * @link https://php.net/manual/en/class.runtimeexception.php
+ */
+class RuntimeException extends BaseException {}
\ No newline at end of file
diff --git a/shared/lib/Files/Node/INodeBase.php b/shared/lib/Files/Node/INodeBase.php
new file mode 100644
index 0000000..d76b348
--- /dev/null
+++ b/shared/lib/Files/Node/INodeBase.php
@@ -0,0 +1,105 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Node;
+
+use DateTimeImmutable;
+
+interface INodeBase extends \JsonSerializable {
+
+	public const JSON_TYPE = 'files.node';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_IN = 'in';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_CREATED_ON = 'createdOn';
+	public const JSON_PROPERTY_CREATED_BY = 'createdBy';
+	public const JSON_PROPERTY_MODIFIED_ON = 'modifiedOn';
+	public const JSON_PROPERTY_MODIFIED_BY = 'modifiedBy';
+	public const JSON_PROPERTY_OWNER = 'owner';
+	public const JSON_PROPERTY_SIGNATURE = 'signature';
+	public const JSON_PROPERTY_LABEL = 'label';
+
+	/**
+	 * Unique identifier of the parent node (folder) this node belongs to
+	 *
+	 * @since 2025.11.01
+	 */
+	public function in(): string|int|null;
+
+	/**
+	 * Unique identifier of this node
+	 *
+	 * @since 2025.11.01
+	 */
+	public function id(): string|int;
+	
+	/**
+	 * Node type (collection or entity)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function type(): NodeType;
+
+	/**
+	 * Creator user ID
+	 *
+	 * @since 2025.11.01
+	 */
+	public function createdBy(): string|null;
+	
+	/**
+	 * Creation timestamp
+	 *
+	 * @since 2025.11.01
+	 */
+	public function createdOn(): DateTimeImmutable|null;
+
+	/**
+	 * Last modifier user ID
+	 *
+	 * @since 2025.11.01
+	 */
+	public function modifiedBy(): string|null;
+
+	/**
+	 * Last modification timestamp
+	 *
+	 * @since 2025.11.01
+	 */
+	public function modifiedOn(): DateTimeImmutable|null;
+
+	/**
+	 * Signature/etag for sync and caching
+	 *
+	 * @since 2025.11.01
+	 */
+	public function signature(): string|null;
+
+	/**
+	 * Check if this node is a collection (folder)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function isCollection(): bool;
+
+	/**
+	 * Check if this node is an entity (file)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function isEntity(): bool;
+
+	/**
+	 * Human-readable name/label of this node
+	 *
+	 * @since 2025.11.01
+	 */
+	public function getLabel(): string|null;
+
+}
diff --git a/shared/lib/Files/Node/INodeCollectionBase.php b/shared/lib/Files/Node/INodeCollectionBase.php
new file mode 100644
index 0000000..b69a8cf
--- /dev/null
+++ b/shared/lib/Files/Node/INodeCollectionBase.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Node;
+
+/**
+ * Interface for collection (folder) nodes
+ * 
+ * Collections are containers that can hold other nodes (both collections and entities).
+ * They inherit common properties from INodeBase and add collection-specific properties.
+ */
+interface INodeCollectionBase extends INodeBase {
+
+	public const JSON_TYPE = 'files.collection';
+
+}
diff --git a/shared/lib/Files/Node/INodeCollectionMutable.php b/shared/lib/Files/Node/INodeCollectionMutable.php
new file mode 100644
index 0000000..e1e44fc
--- /dev/null
+++ b/shared/lib/Files/Node/INodeCollectionMutable.php
@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Node;
+
+/**
+ * Interface for mutable collection (folder) nodes
+ */
+interface INodeCollectionMutable extends INodeCollectionBase {
+
+	/**
+	 * Deserialize from JSON data
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param array|string $data JSON data to deserialize
+	 *
+	 * @return static
+	 */
+	public function jsonDeserialize(array|string $data): static;
+
+	/**
+	 * Sets the human-readable name/label of this collection
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setLabel(string $value): static;
+
+}
diff --git a/shared/lib/Files/Node/INodeEntityBase.php b/shared/lib/Files/Node/INodeEntityBase.php
new file mode 100644
index 0000000..d6bac3d
--- /dev/null
+++ b/shared/lib/Files/Node/INodeEntityBase.php
@@ -0,0 +1,54 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Node;
+
+/**
+ * Interface for entity (file) nodes
+ * 
+ * Entities are leaf nodes that contain actual file data.
+ * They inherit common properties from INodeBase and add file-specific properties.
+ */
+interface INodeEntityBase extends INodeBase {
+
+	public const JSON_TYPE = 'files.entity';
+	public const JSON_PROPERTY_SIZE = 'size';
+	public const JSON_PROPERTY_MIME = 'mime';
+	public const JSON_PROPERTY_FORMAT = 'format';
+	public const JSON_PROPERTY_ENCODING = 'encoding';
+
+	/**
+	 * File size in bytes
+	 *
+	 * @since 2025.11.01
+	 */
+	public function size(): int;
+
+	/**
+	 * MIME type of the file (e.g., 'application/pdf', 'image/png')
+	 *
+	 * @since 2025.11.01
+	 */
+	public function getMime(): string|null;
+
+	/**
+	 * File format/extension (e.g., 'pdf', 'png', 'txt')
+	 *
+	 * @since 2025.11.01
+	 */
+	public function getFormat(): string|null;
+
+	/**
+	 * Character encoding (e.g., 'utf-8')
+	 *
+	 * @since 2025.11.01
+	 */
+	public function getEncoding(): string|null;
+
+}
diff --git a/shared/lib/Files/Node/INodeEntityMutable.php b/shared/lib/Files/Node/INodeEntityMutable.php
new file mode 100644
index 0000000..520bd24
--- /dev/null
+++ b/shared/lib/Files/Node/INodeEntityMutable.php
@@ -0,0 +1,56 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Node;
+
+/**
+ * Interface for mutable entity (file) nodes
+ */
+interface INodeEntityMutable extends INodeEntityBase {
+
+	/**
+	 * Deserialize from JSON data
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param array|string $data JSON data to deserialize
+	 *
+	 * @return static
+	 */
+	public function jsonDeserialize(array|string $data): static;
+
+	/**
+	 * Sets the human-readable name/label of this entity
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setLabel(string $value): static;
+
+	/**
+	 * Sets the MIME type of the file
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setMime(string $value): static;
+
+	/**
+	 * Sets the file format/extension
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setFormat(string $value): static;
+
+	/**
+	 * Sets the character encoding
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setEncoding(string $value): static;
+
+}
diff --git a/shared/lib/Files/Node/NodeType.php b/shared/lib/Files/Node/NodeType.php
new file mode 100644
index 0000000..b09ba5c
--- /dev/null
+++ b/shared/lib/Files/Node/NodeType.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Node;
+
+use JsonSerializable;
+
+enum NodeType: string implements JsonSerializable {
+
+    case Collection = 'C';
+    case Entity = 'E';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
diff --git a/shared/lib/Files/Provider/IProviderBase.php b/shared/lib/Files/Provider/IProviderBase.php
new file mode 100644
index 0000000..b1313fd
--- /dev/null
+++ b/shared/lib/Files/Provider/IProviderBase.php
@@ -0,0 +1,96 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Provider;
+
+use JsonSerializable;
+use KTXF\Files\Service\IServiceBase;
+
+interface IProviderBase extends JsonSerializable {
+
+	public const CAPABILITY_SERVICE_LIST = 'ServiceList';
+	public const CAPABILITY_SERVICE_FETCH = 'ServiceFetch';
+	public const CAPABILITY_SERVICE_EXTANT = 'ServiceExtant';
+
+	public const JSON_TYPE = 'files.provider';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+
+	/**
+	 * Confirms if specific capability is supported (e.g. 'ServiceList')
+	 *
+	 * @since 2025.11.01
+	 */
+	public function capable(string $value): bool;
+
+	/**
+	 * Lists all supported capabilities
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @return array<string,bool>
+	 */
+	public function capabilities(): array;
+
+	/**
+	 * An arbitrary unique text string identifying this provider (e.g. UUID or 'system' or anything else)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function id(): string;
+
+	/**
+	 * The localized human friendly name of this provider (e.g. System File Provider)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function label(): string;
+
+	/**
+	 * Retrieve collection of services for a specific user
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param array $filter filter criteria
+	 *
+	 * @return array<string,IServiceBase> collection of service objects
+	 */
+	public function serviceList(string $tenantId, string $userId, array $filter): array;
+
+	/**
+	 * Determine if any services are configured for a specific user
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param int|string ...$identifiers variadic collection of service identifiers
+	 * 
+	 * @return array<string,bool> collection of service identifiers with boolean values indicating if the service is available
+	 */
+	public function serviceExtant(string $tenantId, string $userId, int|string ...$identifiers): array;
+
+	/**
+	 * Retrieve a service with a specific identifier
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param string|int $identifier service identifier
+	 *
+	 * @return IServiceBase|null returns service object or null if non found
+	 */
+	public function serviceFetch(string $tenantId, string $userId, string|int $identifier): ?IServiceBase;
+
+}
diff --git a/shared/lib/Files/Service/IServiceBase.php b/shared/lib/Files/Service/IServiceBase.php
new file mode 100644
index 0000000..92143e7
--- /dev/null
+++ b/shared/lib/Files/Service/IServiceBase.php
@@ -0,0 +1,333 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Service;
+
+use JsonSerializable;
+use KTXF\Files\Node\INodeBase;
+use KTXF\Files\Node\INodeCollectionBase;
+use KTXF\Files\Node\INodeEntityBase;
+use KTXF\Resource\Filter\IFilter;
+use KTXF\Resource\Range\IRange;
+use KTXF\Resource\Range\RangeType;
+use KTXF\Resource\Sort\ISort;
+
+interface IServiceBase extends JsonSerializable {
+
+	// Collection Capabilities
+	public const CAPABILITY_COLLECTION_LIST = 'CollectionList';
+	public const CAPABILITY_COLLECTION_LIST_FILTER = 'CollectionListFilter';
+	public const CAPABILITY_COLLECTION_LIST_SORT = 'CollectionListSort';
+	public const CAPABILITY_COLLECTION_EXTANT = 'CollectionExtant';
+	public const CAPABILITY_COLLECTION_FETCH = 'CollectionFetch';
+
+	// Entity Capabilities
+	public const CAPABILITY_ENTITY_LIST = 'EntityList';
+	public const CAPABILITY_ENTITY_LIST_FILTER = 'EntityListFilter';
+	public const CAPABILITY_ENTITY_LIST_SORT = 'EntityListSort';
+	public const CAPABILITY_ENTITY_LIST_RANGE = 'EntityListRange';
+	public const CAPABILITY_ENTITY_DELTA = 'EntityDelta';
+	public const CAPABILITY_ENTITY_EXTANT = 'EntityExtant';
+	public const CAPABILITY_ENTITY_FETCH = 'EntityFetch';
+	public const CAPABILITY_ENTITY_READ = 'EntityRead';
+	public const CAPABILITY_ENTITY_READ_STREAM = 'EntityReadStream';
+	public const CAPABILITY_ENTITY_READ_CHUNK = 'EntityReadChunk';
+
+	// Node Capabilities (recursive/unified)
+	public const CAPABILITY_NODE_LIST = 'NodeList';
+	public const CAPABILITY_NODE_LIST_FILTER = 'NodeListFilter';
+	public const CAPABILITY_NODE_LIST_SORT = 'NodeListSort';
+	public const CAPABILITY_NODE_LIST_RANGE = 'NodeListRange';
+	public const CAPABILITY_NODE_DELTA = 'NodeDelta';
+
+	// JSON Constants
+	public const JSON_TYPE = 'files.service';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_PROVIDER = 'provider';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+	public const JSON_PROPERTY_ENABLED = 'enabled';
+
+	/**
+	 * Confirms if specific capability is supported
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string $value required ability e.g. 'EntityList'
+	 *
+	 * @return bool
+	 */
+	public function capable(string $value): bool;
+
+	/**
+	 * Lists all supported capabilities
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @return array<string,bool>
+	 */
+	public function capabilities(): array;
+
+	/**
+	 * Unique identifier of the provider this service belongs to
+	 *
+	 * @since 2025.11.01
+	 */
+	public function in(): string;
+
+	/**
+	 * Unique arbitrary text string identifying this service (e.g. 1 or service1 or anything else)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the localized human friendly name of this service (e.g. ACME Company File Service)
+	 *
+	 * @since 2025.11.01
+	 */
+	public function getLabel(): string;
+
+	/**
+	 * Gets the active status of this service
+	 *
+	 * @since 2025.11.01
+	 */
+	public function getEnabled(): bool;
+
+	// ==================== Collection Methods ====================
+
+	/**
+	 * List of accessible collections at a specific location
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $location Parent collection identifier, null for root
+	 *
+	 * @return array<string|int,INodeCollectionBase>
+	 */
+	public function collectionList(string|int|null $location = null, ?IFilter $filter = null, ?ISort $sort = null): array;
+
+	/**
+	 * Fresh filter for collection list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function collectionListFilter(): IFilter;
+
+	/**
+	 * Fresh sort for collection list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function collectionListSort(): ISort;
+
+	/**
+	 * Confirms if specific collection exists
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $identifier Collection identifier
+	 */
+	public function collectionExtant(string|int|null $identifier): bool;
+
+	/**
+	 * Fetches details about a specific collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $identifier Collection identifier
+	 */
+	public function collectionFetch(string|int|null $identifier): ?INodeCollectionBase;
+
+	// ==================== Entity Methods ====================
+
+	/**
+	 * Lists all entities in a specific collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 *
+	 * @return array<string|int,INodeEntityBase>
+	 */
+	public function entityList(string|int|null $collection, ?IFilter $filter = null, ?ISort $sort = null, ?IRange $range = null): array;
+
+	/**
+	 * Fresh filter for entity list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function entityListFilter(): IFilter;
+
+	/**
+	 * Fresh sort for entity list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function entityListSort(): ISort;
+
+	/**
+	 * Fresh range for entity list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function entityListRange(RangeType $type): IRange;
+
+	/**
+	 * Lists all changes from a specific signature
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string $signature Sync token signature
+	 * @param string $detail Detail level: ids | meta | full
+	 *
+	 * @return array{
+	 *     added: array<string|int>,
+	 *     updated: array<string|int>,
+	 *     deleted: array<string|int>,
+	 *     signature: string
+	 * }
+	 */
+	public function entityDelta(string|int|null $collection, string $signature, string $detail = 'ids'): array;
+
+	/**
+	 * Confirms if specific entities exist in a collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int ...$identifiers Entity identifiers
+	 *
+	 * @return array<string|int,bool>
+	 */
+	public function entityExtant(string|int|null $collection, string|int ...$identifiers): array;
+
+	/**
+	 * Fetches details about specific entities in a collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int ...$identifiers Entity identifiers
+	 *
+	 * @return array<string|int,INodeEntityBase>
+	 */
+	public function entityFetch(string|int|null $collection, string|int ...$identifiers): array;
+
+	/**
+	 * Reads the entire content of an entity as a string
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 *
+	 * @return string|null File content or null if not found
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityRead(string|int|null $collection, string|int $identifier): ?string;
+
+	/**
+	 * Opens a stream to read the content of an entity
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 *
+	 * @return resource|null Stream resource or null if not found
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityReadStream(string|int|null $collection, string|int $identifier);
+
+	/**
+	 * Reads a chunk of content from an entity
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 * @param int $offset Starting byte position (0-indexed)
+	 * @param int $length Number of bytes to read
+	 *
+	 * @return string|null Chunk content or null if not found
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityReadChunk(string|int|null $collection, string|int $identifier, int $offset, int $length): ?string;
+
+	// ==================== Node Methods (Recursive/Unified) ====================
+
+	/**
+	 * Lists all nodes (collections and entities) at a location, optionally recursive
+	 * Returns a flat list with parent references via in()
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $location Starting location, null for root
+	 * @param bool $recursive Whether to list recursively
+	 *
+	 * @return array<string|int,INodeBase>
+	 */
+	public function nodeList(string|int|null $location = null, bool $recursive = false, ?IFilter $filter = null, ?ISort $sort = null, ?IRange $range = null): array;
+
+	/**
+	 * Fresh filter for node list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function nodeListFilter(): IFilter;
+
+	/**
+	 * Fresh sort for node list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function nodeListSort(): ISort;
+
+	/**
+	 * Fresh range for node list
+	 *
+	 * @since 2025.11.01
+	 */
+	public function nodeListRange(RangeType $type): IRange;
+
+	/**
+	 * Lists all node changes from a specific signature, optionally recursive
+	 * Returns flat list with parent references
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $location Starting location, null for root
+	 * @param string $signature Sync token signature
+	 * @param bool $recursive Whether to include recursive changes
+	 * @param string $detail Detail level: ids | meta | full
+	 *
+	 * @return array{
+	 *     added: array<string|int,INodeBase>|array<string|int>,
+	 *     updated: array<string|int,INodeBase>|array<string|int>,
+	 *     deleted: array<string|int>,
+	 *     signature: string
+	 * }
+	 */
+	public function nodeDelta(string|int|null $location, string $signature, bool $recursive = false, string $detail = 'ids'): array;
+
+}
diff --git a/shared/lib/Files/Service/IServiceCollectionMutable.php b/shared/lib/Files/Service/IServiceCollectionMutable.php
new file mode 100644
index 0000000..6b0cf4e
--- /dev/null
+++ b/shared/lib/Files/Service/IServiceCollectionMutable.php
@@ -0,0 +1,100 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Service;
+
+use KTXF\Files\Node\INodeCollectionBase;
+use KTXF\Files\Node\INodeCollectionMutable;
+
+interface IServiceCollectionMutable extends IServiceBase {
+
+	public const CAPABILITY_COLLECTION_CREATE = 'CollectionCreate';
+	public const CAPABILITY_COLLECTION_MODIFY = 'CollectionModify';
+	public const CAPABILITY_COLLECTION_DESTROY = 'CollectionDestroy';
+	public const CAPABILITY_COLLECTION_COPY = 'CollectionCopy';
+	public const CAPABILITY_COLLECTION_MOVE = 'CollectionMove';
+
+	/**
+	 * Creates a new, empty collection node
+	 *
+	 * @since 2025.11.01
+	 */
+	public function collectionFresh(): INodeCollectionMutable;
+
+	/**
+	 * Creates a new collection at the specified location
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $location Parent collection, null for root
+	 * @param INodeCollectionMutable $collection The collection to create
+	 * @param array $options Additional options
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionCreate(string|int|null $location, INodeCollectionMutable $collection, array $options = []): INodeCollectionBase;
+
+	/**
+	 * Modifies an existing collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int $identifier Collection identifier
+	 * @param INodeCollectionMutable $collection The collection with modifications
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionModify(string|int $identifier, INodeCollectionMutable $collection): INodeCollectionBase;
+
+	/**
+	 * Destroys an existing collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int $identifier Collection identifier
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionDestroy(string|int $identifier): bool;
+
+	/**
+	 * Copies an existing collection to a new location
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int $identifier Collection identifier
+	 * @param string|int|null $location Destination parent collection, null for root
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionCopy(string|int $identifier, string|int|null $location): INodeCollectionBase;
+
+	/**
+	 * Moves an existing collection to a new location
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int $identifier Collection identifier
+	 * @param string|int|null $location Destination parent collection, null for root
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionMove(string|int $identifier, string|int|null $location): INodeCollectionBase;
+
+}
diff --git a/shared/lib/Files/Service/IServiceEntityMutable.php b/shared/lib/Files/Service/IServiceEntityMutable.php
new file mode 100644
index 0000000..e505335
--- /dev/null
+++ b/shared/lib/Files/Service/IServiceEntityMutable.php
@@ -0,0 +1,158 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Service;
+
+use KTXF\Files\Node\INodeEntityBase;
+use KTXF\Files\Node\INodeEntityMutable;
+
+interface IServiceEntityMutable extends IServiceBase {
+
+	public const CAPABILITY_ENTITY_CREATE = 'EntityCreate';
+	public const CAPABILITY_ENTITY_MODIFY = 'EntityModify';
+	public const CAPABILITY_ENTITY_DESTROY = 'EntityDestroy';
+	public const CAPABILITY_ENTITY_COPY = 'EntityCopy';
+	public const CAPABILITY_ENTITY_MOVE = 'EntityMove';
+	public const CAPABILITY_ENTITY_WRITE = 'EntityWrite';
+	public const CAPABILITY_ENTITY_WRITE_STREAM = 'EntityWriteStream';
+	public const CAPABILITY_ENTITY_WRITE_CHUNK = 'EntityWriteChunk';
+
+	/**
+	 * Creates a new, empty entity node
+	 *
+	 * @since 2025.11.01
+	 */
+	public function entityFresh(): INodeEntityMutable;
+
+	/**
+	 * Creates a new entity in the specified collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier, null for root
+	 * @param INodeEntityMutable $entity The entity to create
+	 * @param array $options Additional options
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityCreate(string|int|null $collection, INodeEntityMutable $entity, array $options = []): INodeEntityBase;
+
+	/**
+	 * Modifies an existing entity in the specified collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 * @param INodeEntityMutable $entity The entity with modifications
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityModify(string|int|null $collection, string|int $identifier, INodeEntityMutable $entity): INodeEntityBase;
+
+	/**
+	 * Destroys an existing entity in the specified collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityDestroy(string|int|null $collection, string|int $identifier): bool;
+
+	/**
+	 * Copies an existing entity to a new collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Source collection identifier
+	 * @param string|int $identifier Entity identifier
+	 * @param string|int|null $destination Destination collection identifier, null for root
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityCopy(string|int|null $collection, string|int $identifier, string|int|null $destination): INodeEntityBase;
+
+	/**
+	 * Moves an existing entity to a new collection
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Source collection identifier
+	 * @param string|int $identifier Entity identifier
+	 * @param string|int|null $destination Destination collection identifier, null for root
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityMove(string|int|null $collection, string|int $identifier, string|int|null $destination): INodeEntityBase;
+
+	/**
+	 * Writes the entire content of an entity from a string
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 * @param string $data Content to write
+	 *
+	 * @return int Number of bytes written
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityWrite(string|int|null $collection, string|int $identifier, string $data): int;
+
+	/**
+	 * Opens a stream to write the content of an entity
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 *
+	 * @return resource Stream resource for writing
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityWriteStream(string|int|null $collection, string|int $identifier);
+
+	/**
+	 * Writes a chunk of content to an entity at a specific position
+	 *
+	 * @since 2025.11.01
+	 *
+	 * @param string|int|null $collection Collection identifier
+	 * @param string|int $identifier Entity identifier
+	 * @param int $offset Starting byte position (0-indexed)
+	 * @param string $data Chunk content to write
+	 *
+	 * @return int Number of bytes written
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityWriteChunk(string|int|null $collection, string|int $identifier, int $offset, string $data): int;
+
+}
diff --git a/shared/lib/Files/Service/IServiceMutable.php b/shared/lib/Files/Service/IServiceMutable.php
new file mode 100644
index 0000000..43fba83
--- /dev/null
+++ b/shared/lib/Files/Service/IServiceMutable.php
@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Files\Service;
+
+use KTXF\Json\JsonDeserializable;
+
+interface IServiceMutable extends IServiceBase, JsonDeserializable {
+
+	/**
+	 * Sets the localized human friendly name of this service
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setLabel(string $value): static;
+
+	/**
+	 * Sets the active status of this service
+	 *
+	 * @since 2025.11.01
+	 */
+	public function setEnabled(bool $value): static;
+
+}
diff --git a/shared/lib/IpUtils.php b/shared/lib/IpUtils.php
new file mode 100644
index 0000000..df12766
--- /dev/null
+++ b/shared/lib/IpUtils.php
@@ -0,0 +1,275 @@
+<?php
+
+declare(strict_types = 1);
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace KTXF;
+
+/**
+ * Http utility functions.
+ *
+ * @author Fabien Potencier <fabien@symfony.com>
+ */
+class IpUtils
+{
+    public const PRIVATE_SUBNETS = [
+        '127.0.0.0/8',    // RFC1700 (Loopback)
+        '10.0.0.0/8',     // RFC1918
+        '192.168.0.0/16', // RFC1918
+        '172.16.0.0/12',  // RFC1918
+        '169.254.0.0/16', // RFC3927
+        '0.0.0.0/8',      // RFC5735
+        '240.0.0.0/4',    // RFC1112
+        '::1/128',        // Loopback
+        'fc00::/7',       // Unique Local Address
+        'fe80::/10',      // Link Local Address
+        '::ffff:0:0/96',  // IPv4 translations
+        '::/128',         // Unspecified address
+    ];
+
+    private static array $checkedIps = [];
+
+    /**
+     * This class should not be instantiated.
+     */
+    private function __construct()
+    {
+    }
+
+    /**
+     * Checks if an IPv4 or IPv6 address is contained in the list of given IPs or subnets.
+     *
+     * @param string|array $ips List of IPs or subnets (can be a string if only a single one)
+     */
+    public static function checkIp(string $requestIp, string|array $ips): bool
+    {
+        if (!\is_array($ips)) {
+            $ips = [$ips];
+        }
+
+        $method = substr_count($requestIp, ':') > 1 ? 'checkIp6' : 'checkIp4';
+
+        foreach ($ips as $ip) {
+            if (self::$method($requestIp, $ip)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * Compares two IPv4 addresses.
+     * In case a subnet is given, it checks if it contains the request IP.
+     *
+     * @param string $ip IPv4 address or subnet in CIDR notation
+     *
+     * @return bool Whether the request IP matches the IP, or whether the request IP is within the CIDR subnet
+     */
+    public static function checkIp4(string $requestIp, string $ip): bool
+    {
+        $cacheKey = $requestIp.'-'.$ip.'-v4';
+        if (null !== $cacheValue = self::getCacheResult($cacheKey)) {
+            return $cacheValue;
+        }
+
+        if (!filter_var($requestIp, \FILTER_VALIDATE_IP, \FILTER_FLAG_IPV4)) {
+            return self::setCacheResult($cacheKey, false);
+        }
+
+        if (str_contains($ip, '/')) {
+            [$address, $netmask] = explode('/', $ip, 2);
+
+            if ('0' === $netmask) {
+                return self::setCacheResult($cacheKey, false !== filter_var($address, \FILTER_VALIDATE_IP, \FILTER_FLAG_IPV4));
+            }
+
+            if ($netmask < 0 || $netmask > 32) {
+                return self::setCacheResult($cacheKey, false);
+            }
+        } else {
+            $address = $ip;
+            $netmask = 32;
+        }
+
+        if (false === ip2long($address)) {
+            return self::setCacheResult($cacheKey, false);
+        }
+
+        return self::setCacheResult($cacheKey, 0 === substr_compare(\sprintf('%032b', ip2long($requestIp)), \sprintf('%032b', ip2long($address)), 0, $netmask));
+    }
+
+    /**
+     * Compares two IPv6 addresses.
+     * In case a subnet is given, it checks if it contains the request IP.
+     *
+     * @author David Soria Parra <dsp at php dot net>
+     *
+     * @see https://github.com/dsp/v6tools
+     *
+     * @param string $ip IPv6 address or subnet in CIDR notation
+     *
+     * @throws \RuntimeException When IPV6 support is not enabled
+     */
+    public static function checkIp6(string $requestIp, string $ip): bool
+    {
+        $cacheKey = $requestIp.'-'.$ip.'-v6';
+        if (null !== $cacheValue = self::getCacheResult($cacheKey)) {
+            return $cacheValue;
+        }
+
+        if (!((\extension_loaded('sockets') && \defined('AF_INET6')) || @inet_pton('::1'))) {
+            throw new \RuntimeException('Unable to check Ipv6. Check that PHP was not compiled with option "disable-ipv6".');
+        }
+
+        // Check to see if we were given a IP4 $requestIp or $ip by mistake
+        if (!filter_var($requestIp, \FILTER_VALIDATE_IP, \FILTER_FLAG_IPV6)) {
+            return self::setCacheResult($cacheKey, false);
+        }
+
+        if (str_contains($ip, '/')) {
+            [$address, $netmask] = explode('/', $ip, 2);
+
+            if (!filter_var($address, \FILTER_VALIDATE_IP, \FILTER_FLAG_IPV6)) {
+                return self::setCacheResult($cacheKey, false);
+            }
+
+            if ('0' === $netmask) {
+                return (bool) unpack('n*', @inet_pton($address));
+            }
+
+            if ($netmask < 1 || $netmask > 128) {
+                return self::setCacheResult($cacheKey, false);
+            }
+        } else {
+            if (!filter_var($ip, \FILTER_VALIDATE_IP, \FILTER_FLAG_IPV6)) {
+                return self::setCacheResult($cacheKey, false);
+            }
+
+            $address = $ip;
+            $netmask = 128;
+        }
+
+        $bytesAddr = unpack('n*', @inet_pton($address));
+        $bytesTest = unpack('n*', @inet_pton($requestIp));
+
+        if (!$bytesAddr || !$bytesTest) {
+            return self::setCacheResult($cacheKey, false);
+        }
+
+        for ($i = 1, $ceil = ceil($netmask / 16); $i <= $ceil; ++$i) {
+            $left = $netmask - 16 * ($i - 1);
+            $left = ($left <= 16) ? $left : 16;
+            $mask = ~(0xFFFF >> $left) & 0xFFFF;
+            if (($bytesAddr[$i] & $mask) != ($bytesTest[$i] & $mask)) {
+                return self::setCacheResult($cacheKey, false);
+            }
+        }
+
+        return self::setCacheResult($cacheKey, true);
+    }
+
+    /**
+     * Anonymizes an IP/IPv6.
+     *
+     * Removes the last bytes of IPv4 and IPv6 addresses (1 byte for IPv4 and 8 bytes for IPv6 by default).
+     *
+     * @param int<0, 4>  $v4Bytes
+     * @param int<0, 16> $v6Bytes
+     */
+    public static function anonymize(string $ip/* , int $v4Bytes = 1, int $v6Bytes = 8 */): string
+    {
+        $v4Bytes = 1 < \func_num_args() ? func_get_arg(1) : 1;
+        $v6Bytes = 2 < \func_num_args() ? func_get_arg(2) : 8;
+
+        if ($v4Bytes < 0 || $v6Bytes < 0) {
+            throw new \InvalidArgumentException('Cannot anonymize less than 0 bytes.');
+        }
+
+        if ($v4Bytes > 4 || $v6Bytes > 16) {
+            throw new \InvalidArgumentException('Cannot anonymize more than 4 bytes for IPv4 and 16 bytes for IPv6.');
+        }
+
+        /**
+         * If the IP contains a % symbol, then it is a local-link address with scoping according to RFC 4007
+         * In that case, we only care about the part before the % symbol, as the following functions, can only work with
+         * the IP address itself. As the scope can leak information (containing interface name), we do not want to
+         * include it in our anonymized IP data.
+         */
+        if (str_contains($ip, '%')) {
+            $ip = substr($ip, 0, strpos($ip, '%'));
+        }
+
+        $wrappedIPv6 = false;
+        if (str_starts_with($ip, '[') && str_ends_with($ip, ']')) {
+            $wrappedIPv6 = true;
+            $ip = substr($ip, 1, -1);
+        }
+
+        $mappedIpV4MaskGenerator = function (string $mask, int $bytesToAnonymize) {
+            $mask .= str_repeat('ff', 4 - $bytesToAnonymize);
+            $mask .= str_repeat('00', $bytesToAnonymize);
+
+            return '::'.implode(':', str_split($mask, 4));
+        };
+
+        $packedAddress = inet_pton($ip);
+        if (4 === \strlen($packedAddress)) {
+            $mask = rtrim(str_repeat('255.', 4 - $v4Bytes).str_repeat('0.', $v4Bytes), '.');
+        } elseif ($ip === inet_ntop($packedAddress & inet_pton('::ffff:ffff:ffff'))) {
+            $mask = $mappedIpV4MaskGenerator('ffff', $v4Bytes);
+        } elseif ($ip === inet_ntop($packedAddress & inet_pton('::ffff:ffff'))) {
+            $mask = $mappedIpV4MaskGenerator('', $v4Bytes);
+        } else {
+            $mask = str_repeat('ff', 16 - $v6Bytes).str_repeat('00', $v6Bytes);
+            $mask = implode(':', str_split($mask, 4));
+        }
+        $ip = inet_ntop($packedAddress & inet_pton($mask));
+
+        if ($wrappedIPv6) {
+            $ip = '['.$ip.']';
+        }
+
+        return $ip;
+    }
+
+    /**
+     * Checks if an IPv4 or IPv6 address is contained in the list of private IP subnets.
+     */
+    public static function isPrivateIp(string $requestIp): bool
+    {
+        return self::checkIp($requestIp, self::PRIVATE_SUBNETS);
+    }
+
+    private static function getCacheResult(string $cacheKey): ?bool
+    {
+        if (isset(self::$checkedIps[$cacheKey])) {
+            // Move the item last in cache (LRU)
+            $value = self::$checkedIps[$cacheKey];
+            unset(self::$checkedIps[$cacheKey]);
+            self::$checkedIps[$cacheKey] = $value;
+
+            return self::$checkedIps[$cacheKey];
+        }
+
+        return null;
+    }
+
+    private static function setCacheResult(string $cacheKey, bool $result): bool
+    {
+        if (1000 < \count(self::$checkedIps)) {
+            // stop memory leak if there are many keys
+            self::$checkedIps = \array_slice(self::$checkedIps, 500, null, true);
+        }
+
+        return self::$checkedIps[$cacheKey] = $result;
+    }
+}
diff --git a/shared/lib/Json/JsonDeserializable.php b/shared/lib/Json/JsonDeserializable.php
new file mode 100644
index 0000000..e07af2a
--- /dev/null
+++ b/shared/lib/Json/JsonDeserializable.php
@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Json;
+
+interface JsonDeserializable {
+
+    public function jsonDeserialize(array|string $data): static;
+
+}
diff --git a/shared/lib/Json/JsonSerializable.php b/shared/lib/Json/JsonSerializable.php
new file mode 100644
index 0000000..22af410
--- /dev/null
+++ b/shared/lib/Json/JsonSerializable.php
@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Json;
+
+interface JsonSerializable extends \JsonSerializable {
+
+    public function jsonSerialize(): mixed;
+
+}
diff --git a/shared/lib/Json/JsonSerializableCollection.php b/shared/lib/Json/JsonSerializableCollection.php
new file mode 100644
index 0000000..4335398
--- /dev/null
+++ b/shared/lib/Json/JsonSerializableCollection.php
@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Json;
+
+use KTXF\Json\JsonSerializable;
+use KTXF\Json\JsonDeserializable;
+use KTXF\Utile\Collection\CollectionAbstract;
+
+abstract class JsonSerializableCollection extends CollectionAbstract implements JsonSerializable, JsonDeserializable {
+
+	protected array $primitiveTypes = [
+		self::TYPE_STRING,
+		self::TYPE_INT,
+		self::TYPE_FLOAT,
+		self::TYPE_BOOL,
+		self::TYPE_ARRAY,
+		self::TYPE_DATE,
+	];
+
+	public function jsonSerialize(): mixed {
+		return $this->getArrayCopy();
+	}
+
+	public function jsonDeserialize(array|string $data): static {
+
+		if (is_string($data)) {
+			$data = json_decode($data, true);
+		}
+
+		$this->exchangeArray([]);
+
+		if (in_array($this->typeValue, $this->primitiveTypes)) {
+			if ($this->associative) {
+				foreach ($data as $key => $value) {
+					$this[$key] = $value;
+				}
+			} else {
+				foreach ($data as $value) {
+					$this[] = $value;
+				}
+			}
+		}
+
+		if (!in_array($this->typeValue, $this->primitiveTypes) && class_exists($this->typeValue)) {
+			$reflection = new \ReflectionClass($this->typeValue);
+			if ($reflection->implementsInterface(JsonDeserializable::class)) {
+				if ($this->associative) {
+					foreach ($data as $key => $value) {
+						$instance = $reflection->newInstance();
+						/** @var JsonDeserializable $instance */
+						$this[$key] = $instance->jsonDeserialize($value);
+					}
+				} else {
+					foreach ($data as $value) {
+						$instance = $reflection->newInstance();
+						/** @var JsonDeserializable $instance */
+						$this[] = $instance->jsonDeserialize($value);
+					}
+				}
+			}
+		}
+
+		return $this;
+	}
+
+}
\ No newline at end of file
diff --git a/shared/lib/Json/JsonSerializableObject.php b/shared/lib/Json/JsonSerializableObject.php
new file mode 100644
index 0000000..b198dd0
--- /dev/null
+++ b/shared/lib/Json/JsonSerializableObject.php
@@ -0,0 +1,165 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Json;
+
+use DateTimeInterface;
+use DateTimeZone;
+use DateInterval;
+
+use KTXF\Json\JsonSerializable;
+use KTXF\Json\JsonDeserializable;
+
+abstract class JsonSerializableObject implements JsonSerializable, JsonDeserializable {
+
+	protected string $dateTimeFormat = 'c'; // ISO 8601 format by default
+	protected array $serializableProperties = []; // Empty array means serialize all properties
+	protected array $nonSerializableProperties = ['dateTimeFormat', 'serializableProperties', 'nonSerializableProperties']; // Properties to exclude from serialization
+
+	public function jsonSerialize(): mixed {
+		$vars = get_object_vars($this);
+		
+		// Filter properties based on serializableProperties if specified
+		if (!empty($this->serializableProperties)) {
+			$vars = array_filter($vars, function($key) {
+				return in_array($key, $this->serializableProperties);
+			}, ARRAY_FILTER_USE_KEY);
+		}
+		
+		// Process each property for special types
+		foreach ($vars as $key => $value) {
+			// Skip internal control properties
+			if (in_array($key, $this->nonSerializableProperties)) {
+				unset($vars[$key]);
+				continue;
+			}
+			
+			// Handle DateTimeInterface (DateTime/DateTimeImmutable)
+			if ($value instanceof DateTimeInterface) {
+				$vars[$key] = $value->format($this->dateTimeFormat);
+			}
+			// Handle DateTimeZone
+			elseif ($value instanceof DateTimeZone) {
+				$vars[$key] = $value->getName();
+			}
+			// Handle DateInterval
+			elseif ($value instanceof DateInterval) {
+				$vars[$key] = $this->fromDateInterval($value);
+			}
+			// Handle backed enums
+			elseif ($value instanceof \BackedEnum) {
+				$vars[$key] = $value->value;
+			}
+			// Handle JsonSerializable objects
+			elseif ($value instanceof JsonSerializable) {
+				$vars[$key] = $value->jsonSerialize();
+			}
+		}
+		
+		return $vars;
+	}
+
+	public function jsonDeserialize(array|string $data): static {
+
+		if (is_string($data)) {
+			$data = json_decode($data, true);
+		}
+
+		foreach ($data as $key => $value) {
+			if (property_exists($this, $key)) {
+				// Skip internal control properties
+				if (in_array($key, $this->nonSerializableProperties)) {
+					continue;
+				}
+				
+				// Check if property should be deserialized (if serializableProperties is set)
+				if (!empty($this->serializableProperties) && !in_array($key, $this->serializableProperties)) {
+					continue;
+				}
+				
+				$type = gettype($this->$key);
+				
+				// Handle JsonDeserializable objects
+				if ($type === 'object' && $this->$key instanceof JsonDeserializable) {
+					$this->$key = $this->$key->jsonDeserialize($value);
+				}
+				// Handle DateTimeInterface (DateTime/DateTimeImmutable)
+				elseif ($type === 'object' && $this->$key instanceof DateTimeInterface) {
+					$this->$key = new \DateTimeImmutable($value);
+				}
+				// Handle DateTimeZone
+				elseif ($type === 'object' && $this->$key instanceof DateTimeZone) {
+					$this->$key = new DateTimeZone($value);
+				}
+				// Handle DateInterval
+				elseif ($type === 'object' && $this->$key instanceof DateInterval) {
+					$this->$key = $this->toDateInterval($value);
+				}
+				// Handle backed enums
+				elseif ($type === 'object' && $this->$key instanceof \BackedEnum) {
+					$enumClass = get_class($this->$key);
+					$this->$key = $enumClass::from($value);
+				}
+				// Handle regular values
+				else {
+					$this->$key = $value;
+				}
+			}
+		}
+
+		return $this;
+	}
+
+	protected function fromDateInterval(DateInterval $interval): string {
+		$spec = '';
+		
+		// Handle negative intervals
+		if ($interval->invert === 1) {
+			$spec = '-';
+		}
+		
+		$spec .= 'P';
+		
+		if ($interval->y > 0) $spec .= $interval->y . 'Y';
+		if ($interval->m > 0) $spec .= $interval->m . 'M';
+		if ($interval->d > 0) $spec .= $interval->d . 'D';
+		
+		$timePart = '';
+		if ($interval->h > 0) $timePart .= $interval->h . 'H';
+		if ($interval->i > 0) $timePart .= $interval->i . 'M';
+		if ($interval->s > 0) $timePart .= $interval->s . 'S';
+		
+		if (!empty($timePart)) {
+			$spec .= 'T' . $timePart;
+		}
+		
+		// Handle edge case of zero duration
+		if ($spec === 'P' || $spec === '-P') {
+			$spec = 'PT0S';
+		}
+		
+		return $spec;
+	}
+
+	protected function toDateInterval(string $value): DateInterval {
+		$isNegative = false;
+		
+		// Check for negative interval
+		if (str_starts_with($value, '-')) {
+			$isNegative = true;
+			$value = substr($value, 1);
+		}
+		
+		// Create the interval
+		$interval = new DateInterval($value);
+		
+		// Set invert property for negative intervals
+		if ($isNegative) {
+			$interval->invert = 1;
+		}
+		
+		return $interval;
+	}
+
+}
\ No newline at end of file
diff --git a/shared/lib/Mail/Collection/CollectionRoles.php b/shared/lib/Mail/Collection/CollectionRoles.php
new file mode 100644
index 0000000..28e9fec
--- /dev/null
+++ b/shared/lib/Mail/Collection/CollectionRoles.php
@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Collection;
+
+use JsonSerializable;
+
+/**
+ * Mail Collection Roles
+ * 
+ * Standard mailbox/folder roles for mail collections.
+ * 
+ * @since 2025.05.01
+ */
+enum CollectionRoles: string implements JsonSerializable {
+
+    case Inbox = 'inbox';
+    case Drafts = 'drafts';
+    case Sent = 'sent';
+    case Trash = 'trash';
+    case Junk = 'junk';
+    case Archive = 'archive';
+    case Outbox = 'outbox';
+    case Queue = 'queue';
+    case Custom = 'custom';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
diff --git a/shared/lib/Mail/Collection/ICollectionBase.php b/shared/lib/Mail/Collection/ICollectionBase.php
new file mode 100644
index 0000000..c3d3f7d
--- /dev/null
+++ b/shared/lib/Mail/Collection/ICollectionBase.php
@@ -0,0 +1,117 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Collection;
+
+use DateTimeImmutable;
+use JsonSerializable;
+
+/**
+ * Mail Collection Base Interface
+ * 
+ * Represents a mailbox/folder in a mail service.
+ * For future use with full mail providers (IMAP, JMAP, etc.)
+ * 
+ * @since 2025.05.01
+ */
+interface ICollectionBase extends JsonSerializable {
+
+    public const JSON_TYPE = 'mail.collection';
+    public const JSON_PROPERTY_TYPE = '@type';
+    public const JSON_PROPERTY_PROVIDER = 'provider';
+    public const JSON_PROPERTY_SERVICE = 'service';
+    public const JSON_PROPERTY_IN = 'in';
+    public const JSON_PROPERTY_ID = 'id';
+    public const JSON_PROPERTY_LABEL = 'label';
+    public const JSON_PROPERTY_ROLE = 'role';
+    public const JSON_PROPERTY_TOTAL = 'total';
+    public const JSON_PROPERTY_UNREAD = 'unread';
+
+    /**
+     * Gets the parent collection identifier (null for root)
+     *
+     * @since 2025.05.01
+     *
+     * @return string|int|null
+     */
+    public function in(): string|int|null;
+
+    /**
+     * Gets the collection identifier
+     *
+     * @since 2025.05.01
+     *
+     * @return string|int
+     */
+    public function id(): string|int;
+
+    /**
+     * Gets the collection label/name
+     *
+     * @since 2025.05.01
+     *
+     * @return string
+     */
+    public function getLabel(): string;
+
+    /**
+     * Gets the collection role
+     *
+     * @since 2025.05.01
+     *
+     * @return CollectionRoles
+     */
+    public function getRole(): CollectionRoles;
+
+    /**
+     * Gets the total message count
+     *
+     * @since 2025.05.01
+     *
+     * @return int|null
+     */
+    public function getTotal(): ?int;
+
+    /**
+     * Gets the unread message count
+     *
+     * @since 2025.05.01
+     *
+     * @return int|null
+     */
+    public function getUnread(): ?int;
+
+    /**
+     * Gets the collection signature/sync token
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null
+     */
+    public function getSignature(): ?string;
+
+    /**
+     * Gets the creation date
+     *
+     * @since 2025.05.01
+     *
+     * @return DateTimeImmutable|null
+     */
+    public function created(): ?DateTimeImmutable;
+
+    /**
+     * Gets the modification date
+     *
+     * @since 2025.05.01
+     *
+     * @return DateTimeImmutable|null
+     */
+    public function modified(): ?DateTimeImmutable;
+
+}
diff --git a/shared/lib/Mail/Entity/Address.php b/shared/lib/Mail/Entity/Address.php
new file mode 100644
index 0000000..047a4af
--- /dev/null
+++ b/shared/lib/Mail/Entity/Address.php
@@ -0,0 +1,141 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+/**
+ * Mail Address Implementation
+ * 
+ * Concrete implementation of IAddress for email addresses.
+ * 
+ * @since 2025.05.01
+ */
+class Address implements IAddress {
+
+    /**
+     * @param string $address Email address
+     * @param string|null $name Display name
+     */
+    public function __construct(
+        private string $address = '',
+        private ?string $name = null,
+    ) {}
+
+    /**
+     * Creates an Address from a formatted string
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $value Formatted as "Name <address>" or just "address"
+     * 
+     * @return self
+     */
+    public static function fromString(string $value): self {
+        $value = trim($value);
+        
+        // Match "Name <address>" format
+        if (preg_match('/^(.+?)\s*<([^>]+)>$/', $value, $matches)) {
+            return new self(trim($matches[2]), trim($matches[1], ' "\''));
+        }
+        
+        // Match "<address>" format
+        if (preg_match('/^<([^>]+)>$/', $value, $matches)) {
+            return new self(trim($matches[1]));
+        }
+        
+        // Assume plain address
+        return new self($value);
+    }
+
+    /**
+     * Creates an Address from an array
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array $data Array with 'address' and optional 'name' keys
+     * 
+     * @return self
+     */
+    public static function fromArray(array $data): self {
+        return new self(
+            $data[self::JSON_PROPERTY_ADDRESS] ?? $data['address'] ?? '',
+            $data[self::JSON_PROPERTY_NAME] ?? $data['name'] ?? null,
+        );
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getAddress(): string {
+        return $this->address;
+    }
+
+    /**
+     * Sets the email address
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $address
+     * 
+     * @return self
+     */
+    public function setAddress(string $address): self {
+        $this->address = $address;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getName(): ?string {
+        return $this->name;
+    }
+
+    /**
+     * Sets the display name
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string|null $name
+     * 
+     * @return self
+     */
+    public function setName(?string $name): self {
+        $this->name = $name;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function toString(): string {
+        if ($this->name !== null && $this->name !== '') {
+            return sprintf('"%s" <%s>', $this->name, $this->address);
+        }
+        return $this->address;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        return array_filter([
+            self::JSON_PROPERTY_ADDRESS => $this->address,
+            self::JSON_PROPERTY_NAME => $this->name,
+        ], fn($v) => $v !== null && $v !== '');
+    }
+
+    /**
+     * String representation
+     */
+    public function __toString(): string {
+        return $this->toString();
+    }
+
+}
diff --git a/shared/lib/Mail/Entity/Attachment.php b/shared/lib/Mail/Entity/Attachment.php
new file mode 100644
index 0000000..93caac5
--- /dev/null
+++ b/shared/lib/Mail/Entity/Attachment.php
@@ -0,0 +1,195 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+/**
+ * Mail Attachment Implementation
+ * 
+ * Concrete implementation of IAttachment for mail attachments.
+ * 
+ * @since 2025.05.01
+ */
+class Attachment implements IAttachment {
+
+    /**
+     * @param string $name File name
+     * @param string $mimeType MIME type
+     * @param string $content Binary content
+     * @param string|null $id Attachment ID
+     * @param int|null $size Size in bytes
+     * @param string|null $contentId Content-ID for inline attachments
+     * @param bool $inline Whether inline attachment
+     */
+    public function __construct(
+        private string $name,
+        private string $mimeType,
+        private string $content,
+        private ?string $id = null,
+        private ?int $size = null,
+        private ?string $contentId = null,
+        private bool $inline = false,
+    ) {
+        if ($this->size === null) {
+            $this->size = strlen($this->content);
+        }
+    }
+
+    /**
+     * Creates an attachment from a file path
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $path File path
+     * @param string|null $name Override file name
+     * @param string|null $mimeType Override MIME type
+     * 
+     * @return self
+     */
+    public static function fromFile(string $path, ?string $name = null, ?string $mimeType = null): self {
+        $content = file_get_contents($path);
+        $name = $name ?? basename($path);
+        $mimeType = $mimeType ?? mime_content_type($path) ?: 'application/octet-stream';
+        
+        return new self($name, $mimeType, $content);
+    }
+
+    /**
+     * Creates an attachment from base64 encoded content
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $name File name
+     * @param string $mimeType MIME type
+     * @param string $base64Content Base64 encoded content
+     * 
+     * @return self
+     */
+    public static function fromBase64(string $name, string $mimeType, string $base64Content): self {
+        return new self($name, $mimeType, base64_decode($base64Content));
+    }
+
+    /**
+     * Creates an inline attachment for embedding in HTML
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $name File name
+     * @param string $mimeType MIME type
+     * @param string $content Binary content
+     * @param string $contentId Content-ID (without cid: prefix)
+     * 
+     * @return self
+     */
+    public static function inline(string $name, string $mimeType, string $content, string $contentId): self {
+        return new self($name, $mimeType, $content, null, null, $contentId, true);
+    }
+
+    /**
+     * Creates from array data
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array $data
+     * 
+     * @return self
+     */
+    public static function fromArray(array $data): self {
+        $content = $data['content'] ?? '';
+        if (isset($data['contentBase64'])) {
+            $content = base64_decode($data['contentBase64']);
+        }
+        
+        return new self(
+            $data[self::JSON_PROPERTY_NAME] ?? $data['name'] ?? '',
+            $data[self::JSON_PROPERTY_MIME_TYPE] ?? $data['mimeType'] ?? 'application/octet-stream',
+            $content,
+            $data[self::JSON_PROPERTY_ID] ?? $data['id'] ?? null,
+            $data[self::JSON_PROPERTY_SIZE] ?? $data['size'] ?? null,
+            $data[self::JSON_PROPERTY_CONTENT_ID] ?? $data['contentId'] ?? null,
+            $data[self::JSON_PROPERTY_INLINE] ?? $data['inline'] ?? false,
+        );
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getId(): ?string {
+        return $this->id;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getName(): string {
+        return $this->name;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getMimeType(): string {
+        return $this->mimeType;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getSize(): ?int {
+        return $this->size;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getContentId(): ?string {
+        return $this->contentId;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function isInline(): bool {
+        return $this->inline;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getContent(): string {
+        return $this->content;
+    }
+
+    /**
+     * Gets the content as base64 encoded string
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function getContentBase64(): string {
+        return base64_encode($this->content);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        return array_filter([
+            self::JSON_PROPERTY_ID => $this->id,
+            self::JSON_PROPERTY_NAME => $this->name,
+            self::JSON_PROPERTY_MIME_TYPE => $this->mimeType,
+            self::JSON_PROPERTY_SIZE => $this->size,
+            self::JSON_PROPERTY_CONTENT_ID => $this->contentId,
+            self::JSON_PROPERTY_INLINE => $this->inline ?: null,
+            'contentBase64' => $this->getContentBase64(),
+        ], fn($v) => $v !== null);
+    }
+
+}
diff --git a/shared/lib/Mail/Entity/IAddress.php b/shared/lib/Mail/Entity/IAddress.php
new file mode 100644
index 0000000..57755df
--- /dev/null
+++ b/shared/lib/Mail/Entity/IAddress.php
@@ -0,0 +1,53 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+use JsonSerializable;
+
+/**
+ * Mail Address Interface
+ * 
+ * Represents an email address with optional display name.
+ * 
+ * @since 2025.05.01
+ */
+interface IAddress extends JsonSerializable {
+
+    public const JSON_PROPERTY_ADDRESS = 'address';
+    public const JSON_PROPERTY_NAME = 'name';
+
+    /**
+     * Gets the email address
+     *
+     * @since 2025.05.01
+     *
+     * @return string Email address (e.g., "user@example.com")
+     */
+    public function getAddress(): string;
+
+    /**
+     * Gets the display name
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null Display name (e.g., "John Doe") or null
+     */
+    public function getName(): ?string;
+
+    /**
+     * Gets the formatted address string
+     *
+     * @since 2025.05.01
+     *
+     * @return string Formatted as "Name <address>" or just "address" if no name
+     */
+    public function toString(): string;
+
+}
diff --git a/shared/lib/Mail/Entity/IAttachment.php b/shared/lib/Mail/Entity/IAttachment.php
new file mode 100644
index 0000000..92a44a1
--- /dev/null
+++ b/shared/lib/Mail/Entity/IAttachment.php
@@ -0,0 +1,93 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+use JsonSerializable;
+
+/**
+ * Mail Attachment Interface
+ * 
+ * Represents a file attachment on a mail message.
+ * 
+ * @since 2025.05.01
+ */
+interface IAttachment extends JsonSerializable {
+
+    public const JSON_PROPERTY_ID = 'id';
+    public const JSON_PROPERTY_NAME = 'name';
+    public const JSON_PROPERTY_MIME_TYPE = 'mimeType';
+    public const JSON_PROPERTY_SIZE = 'size';
+    public const JSON_PROPERTY_CONTENT_ID = 'contentId';
+    public const JSON_PROPERTY_INLINE = 'inline';
+
+    /**
+     * Gets the attachment identifier
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null Attachment ID or null for new attachments
+     */
+    public function getId(): ?string;
+
+    /**
+     * Gets the file name
+     *
+     * @since 2025.05.01
+     *
+     * @return string File name (e.g., "document.pdf")
+     */
+    public function getName(): string;
+
+    /**
+     * Gets the MIME type
+     *
+     * @since 2025.05.01
+     *
+     * @return string MIME type (e.g., "application/pdf")
+     */
+    public function getMimeType(): string;
+
+    /**
+     * Gets the file size in bytes
+     *
+     * @since 2025.05.01
+     *
+     * @return int|null Size in bytes or null if unknown
+     */
+    public function getSize(): ?int;
+
+    /**
+     * Gets the Content-ID for inline attachments
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null Content-ID for referencing in HTML body (e.g., "cid:image1")
+     */
+    public function getContentId(): ?string;
+
+    /**
+     * Checks if this is an inline attachment (embedded in body)
+     *
+     * @since 2025.05.01
+     *
+     * @return bool True if inline, false if regular attachment
+     */
+    public function isInline(): bool;
+
+    /**
+     * Gets the attachment content
+     *
+     * @since 2025.05.01
+     *
+     * @return string Binary content of the attachment
+     */
+    public function getContent(): string;
+
+}
diff --git a/shared/lib/Mail/Entity/IMessageBase.php b/shared/lib/Mail/Entity/IMessageBase.php
new file mode 100644
index 0000000..235d425
--- /dev/null
+++ b/shared/lib/Mail/Entity/IMessageBase.php
@@ -0,0 +1,176 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+use DateTimeImmutable;
+use JsonSerializable;
+
+/**
+ * Mail Message Base Interface
+ * 
+ * Read-only interface for mail message entities.
+ * 
+ * @since 2025.05.01
+ */
+interface IMessageBase extends JsonSerializable {
+
+    public const JSON_TYPE = 'mail.message';
+    public const JSON_PROPERTY_TYPE = '@type';
+    public const JSON_PROPERTY_ID = 'id';
+    public const JSON_PROPERTY_SUBJECT = 'subject';
+    public const JSON_PROPERTY_FROM = 'from';
+    public const JSON_PROPERTY_REPLY_TO = 'replyTo';
+    public const JSON_PROPERTY_TO = 'to';
+    public const JSON_PROPERTY_CC = 'cc';
+    public const JSON_PROPERTY_BCC = 'bcc';
+    public const JSON_PROPERTY_DATE = 'date';
+    public const JSON_PROPERTY_BODY_TEXT = 'bodyText';
+    public const JSON_PROPERTY_BODY_HTML = 'bodyHtml';
+    public const JSON_PROPERTY_ATTACHMENTS = 'attachments';
+    public const JSON_PROPERTY_HEADERS = 'headers';
+
+    /**
+     * Gets the message identifier
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null Message ID or null for unsent messages
+     */
+    public function getId(): ?string;
+
+    /**
+     * Gets the message subject
+     *
+     * @since 2025.05.01
+     *
+     * @return string
+     */
+    public function getSubject(): string;
+
+    /**
+     * Gets the sender address
+     *
+     * @since 2025.05.01
+     *
+     * @return IAddress|null
+     */
+    public function getFrom(): ?IAddress;
+
+    /**
+     * Gets the reply-to address
+     *
+     * @since 2025.05.01
+     *
+     * @return IAddress|null
+     */
+    public function getReplyTo(): ?IAddress;
+
+    /**
+     * Gets the primary recipients (To)
+     *
+     * @since 2025.05.01
+     *
+     * @return array<int, IAddress>
+     */
+    public function getTo(): array;
+
+    /**
+     * Gets the carbon copy recipients (CC)
+     *
+     * @since 2025.05.01
+     *
+     * @return array<int, IAddress>
+     */
+    public function getCc(): array;
+
+    /**
+     * Gets the blind carbon copy recipients (BCC)
+     *
+     * @since 2025.05.01
+     *
+     * @return array<int, IAddress>
+     */
+    public function getBcc(): array;
+
+    /**
+     * Gets the message date
+     *
+     * @since 2025.05.01
+     *
+     * @return DateTimeImmutable|null
+     */
+    public function getDate(): ?DateTimeImmutable;
+
+    /**
+     * Gets the plain text body
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null
+     */
+    public function getBodyText(): ?string;
+
+    /**
+     * Gets the HTML body
+     *
+     * @since 2025.05.01
+     *
+     * @return string|null
+     */
+    public function getBodyHtml(): ?string;
+
+    /**
+     * Gets the attachments
+     *
+     * @since 2025.05.01
+     *
+     * @return array<int, IAttachment>
+     */
+    public function getAttachments(): array;
+
+    /**
+     * Gets custom headers
+     *
+     * @since 2025.05.01
+     *
+     * @return array<string, string> Header name => value
+     */
+    public function getHeaders(): array;
+
+    /**
+     * Gets a specific header value
+     *
+     * @since 2025.05.01
+     *
+     * @param string $name Header name
+     *
+     * @return string|null Header value or null if not set
+     */
+    public function getHeader(string $name): ?string;
+
+    /**
+     * Checks if the message has any recipients
+     *
+     * @since 2025.05.01
+     *
+     * @return bool True if To, CC, or BCC has at least one recipient
+     */
+    public function hasRecipients(): bool;
+
+    /**
+     * Checks if the message has any body content
+     *
+     * @since 2025.05.01
+     *
+     * @return bool True if text or HTML body is set
+     */
+    public function hasBody(): bool;
+
+}
diff --git a/shared/lib/Mail/Entity/IMessageMutable.php b/shared/lib/Mail/Entity/IMessageMutable.php
new file mode 100644
index 0000000..7be4b3a
--- /dev/null
+++ b/shared/lib/Mail/Entity/IMessageMutable.php
@@ -0,0 +1,211 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+use DateTimeImmutable;
+
+/**
+ * Mail Message Mutable Interface
+ * 
+ * Interface for composing and modifying mail messages with fluent setters.
+ * 
+ * @since 2025.05.01
+ */
+interface IMessageMutable extends IMessageBase {
+
+    /**
+     * Sets the message identifier
+     *
+     * @since 2025.05.01
+     *
+     * @param string|null $id
+     *
+     * @return self
+     */
+    public function setId(?string $id): self;
+
+    /**
+     * Sets the message subject
+     *
+     * @since 2025.05.01
+     *
+     * @param string $subject
+     *
+     * @return self
+     */
+    public function setSubject(string $subject): self;
+
+    /**
+     * Sets the sender address
+     *
+     * @since 2025.05.01
+     *
+     * @param IAddress|null $from
+     *
+     * @return self
+     */
+    public function setFrom(?IAddress $from): self;
+
+    /**
+     * Sets the reply-to address
+     *
+     * @since 2025.05.01
+     *
+     * @param IAddress|null $replyTo
+     *
+     * @return self
+     */
+    public function setReplyTo(?IAddress $replyTo): self;
+
+    /**
+     * Sets the primary recipients (To)
+     *
+     * @since 2025.05.01
+     *
+     * @param array<int, IAddress> $to
+     *
+     * @return self
+     */
+    public function setTo(array $to): self;
+
+    /**
+     * Adds a primary recipient (To)
+     *
+     * @since 2025.05.01
+     *
+     * @param IAddress $address
+     *
+     * @return self
+     */
+    public function addTo(IAddress $address): self;
+
+    /**
+     * Sets the carbon copy recipients (CC)
+     *
+     * @since 2025.05.01
+     *
+     * @param array<int, IAddress> $cc
+     *
+     * @return self
+     */
+    public function setCc(array $cc): self;
+
+    /**
+     * Adds a carbon copy recipient (CC)
+     *
+     * @since 2025.05.01
+     *
+     * @param IAddress $address
+     *
+     * @return self
+     */
+    public function addCc(IAddress $address): self;
+
+    /**
+     * Sets the blind carbon copy recipients (BCC)
+     *
+     * @since 2025.05.01
+     *
+     * @param array<int, IAddress> $bcc
+     *
+     * @return self
+     */
+    public function setBcc(array $bcc): self;
+
+    /**
+     * Adds a blind carbon copy recipient (BCC)
+     *
+     * @since 2025.05.01
+     *
+     * @param IAddress $address
+     *
+     * @return self
+     */
+    public function addBcc(IAddress $address): self;
+
+    /**
+     * Sets the message date
+     *
+     * @since 2025.05.01
+     *
+     * @param DateTimeImmutable|null $date
+     *
+     * @return self
+     */
+    public function setDate(?DateTimeImmutable $date): self;
+
+    /**
+     * Sets the plain text body
+     *
+     * @since 2025.05.01
+     *
+     * @param string|null $text
+     *
+     * @return self
+     */
+    public function setBodyText(?string $text): self;
+
+    /**
+     * Sets the HTML body
+     *
+     * @since 2025.05.01
+     *
+     * @param string|null $html
+     *
+     * @return self
+     */
+    public function setBodyHtml(?string $html): self;
+
+    /**
+     * Sets the attachments
+     *
+     * @since 2025.05.01
+     *
+     * @param array<int, IAttachment> $attachments
+     *
+     * @return self
+     */
+    public function setAttachments(array $attachments): self;
+
+    /**
+     * Adds an attachment
+     *
+     * @since 2025.05.01
+     *
+     * @param IAttachment $attachment
+     *
+     * @return self
+     */
+    public function addAttachment(IAttachment $attachment): self;
+
+    /**
+     * Sets custom headers
+     *
+     * @since 2025.05.01
+     *
+     * @param array<string, string> $headers Header name => value
+     *
+     * @return self
+     */
+    public function setHeaders(array $headers): self;
+
+    /**
+     * Sets a specific header value
+     *
+     * @since 2025.05.01
+     *
+     * @param string $name Header name
+     * @param string $value Header value
+     *
+     * @return self
+     */
+    public function setHeader(string $name, string $value): self;
+
+}
diff --git a/shared/lib/Mail/Entity/Message.php b/shared/lib/Mail/Entity/Message.php
new file mode 100644
index 0000000..e2136a5
--- /dev/null
+++ b/shared/lib/Mail/Entity/Message.php
@@ -0,0 +1,383 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Entity;
+
+use DateTimeImmutable;
+
+/**
+ * Mail Message Implementation
+ * 
+ * Concrete implementation of IMessageMutable for composing mail messages.
+ * 
+ * @since 2025.05.01
+ */
+class Message implements IMessageMutable {
+
+    private ?string $id = null;
+    private string $subject = '';
+    private ?IAddress $from = null;
+    private ?IAddress $replyTo = null;
+    /** @var array<int, IAddress> */
+    private array $to = [];
+    /** @var array<int, IAddress> */
+    private array $cc = [];
+    /** @var array<int, IAddress> */
+    private array $bcc = [];
+    private ?DateTimeImmutable $date = null;
+    private ?string $bodyText = null;
+    private ?string $bodyHtml = null;
+    /** @var array<int, IAttachment> */
+    private array $attachments = [];
+    /** @var array<string, string> */
+    private array $headers = [];
+
+    /**
+     * Creates a message from array data
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array $data
+     * 
+     * @return self
+     */
+    public static function fromArray(array $data): self {
+        $message = new self();
+        
+        if (isset($data[self::JSON_PROPERTY_ID])) {
+            $message->setId($data[self::JSON_PROPERTY_ID]);
+        }
+        if (isset($data[self::JSON_PROPERTY_SUBJECT])) {
+            $message->setSubject($data[self::JSON_PROPERTY_SUBJECT]);
+        }
+        if (isset($data[self::JSON_PROPERTY_FROM])) {
+            $message->setFrom(Address::fromArray($data[self::JSON_PROPERTY_FROM]));
+        }
+        if (isset($data[self::JSON_PROPERTY_REPLY_TO])) {
+            $message->setReplyTo(Address::fromArray($data[self::JSON_PROPERTY_REPLY_TO]));
+        }
+        if (isset($data[self::JSON_PROPERTY_TO])) {
+            $message->setTo(array_map(fn($a) => Address::fromArray($a), $data[self::JSON_PROPERTY_TO]));
+        }
+        if (isset($data[self::JSON_PROPERTY_CC])) {
+            $message->setCc(array_map(fn($a) => Address::fromArray($a), $data[self::JSON_PROPERTY_CC]));
+        }
+        if (isset($data[self::JSON_PROPERTY_BCC])) {
+            $message->setBcc(array_map(fn($a) => Address::fromArray($a), $data[self::JSON_PROPERTY_BCC]));
+        }
+        if (isset($data[self::JSON_PROPERTY_DATE])) {
+            $message->setDate(new DateTimeImmutable($data[self::JSON_PROPERTY_DATE]));
+        }
+        if (isset($data[self::JSON_PROPERTY_BODY_TEXT])) {
+            $message->setBodyText($data[self::JSON_PROPERTY_BODY_TEXT]);
+        }
+        if (isset($data[self::JSON_PROPERTY_BODY_HTML])) {
+            $message->setBodyHtml($data[self::JSON_PROPERTY_BODY_HTML]);
+        }
+        if (isset($data[self::JSON_PROPERTY_ATTACHMENTS])) {
+            $message->setAttachments(array_map(fn($a) => Attachment::fromArray($a), $data[self::JSON_PROPERTY_ATTACHMENTS]));
+        }
+        if (isset($data[self::JSON_PROPERTY_HEADERS])) {
+            $message->setHeaders($data[self::JSON_PROPERTY_HEADERS]);
+        }
+        
+        return $message;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getId(): ?string {
+        return $this->id;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setId(?string $id): self {
+        $this->id = $id;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getSubject(): string {
+        return $this->subject;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setSubject(string $subject): self {
+        $this->subject = $subject;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getFrom(): ?IAddress {
+        return $this->from;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setFrom(?IAddress $from): self {
+        $this->from = $from;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getReplyTo(): ?IAddress {
+        return $this->replyTo;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setReplyTo(?IAddress $replyTo): self {
+        $this->replyTo = $replyTo;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getTo(): array {
+        return $this->to;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setTo(array $to): self {
+        $this->to = $to;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function addTo(IAddress $address): self {
+        $this->to[] = $address;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getCc(): array {
+        return $this->cc;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setCc(array $cc): self {
+        $this->cc = $cc;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function addCc(IAddress $address): self {
+        $this->cc[] = $address;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getBcc(): array {
+        return $this->bcc;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setBcc(array $bcc): self {
+        $this->bcc = $bcc;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function addBcc(IAddress $address): self {
+        $this->bcc[] = $address;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getDate(): ?DateTimeImmutable {
+        return $this->date;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setDate(?DateTimeImmutable $date): self {
+        $this->date = $date;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getBodyText(): ?string {
+        return $this->bodyText;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setBodyText(?string $text): self {
+        $this->bodyText = $text;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getBodyHtml(): ?string {
+        return $this->bodyHtml;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setBodyHtml(?string $html): self {
+        $this->bodyHtml = $html;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getAttachments(): array {
+        return $this->attachments;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setAttachments(array $attachments): self {
+        $this->attachments = $attachments;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function addAttachment(IAttachment $attachment): self {
+        $this->attachments[] = $attachment;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getHeaders(): array {
+        return $this->headers;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getHeader(string $name): ?string {
+        return $this->headers[$name] ?? null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setHeaders(array $headers): self {
+        $this->headers = $headers;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function setHeader(string $name, string $value): self {
+        $this->headers[$name] = $value;
+        return $this;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function hasRecipients(): bool {
+        return !empty($this->to) || !empty($this->cc) || !empty($this->bcc);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function hasBody(): bool {
+        return ($this->bodyText !== null && $this->bodyText !== '') 
+            || ($this->bodyHtml !== null && $this->bodyHtml !== '');
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        $data = [
+            self::JSON_PROPERTY_TYPE => self::JSON_TYPE,
+        ];
+        
+        if ($this->id !== null) {
+            $data[self::JSON_PROPERTY_ID] = $this->id;
+        }
+        
+        $data[self::JSON_PROPERTY_SUBJECT] = $this->subject;
+        
+        if ($this->from !== null) {
+            $data[self::JSON_PROPERTY_FROM] = $this->from;
+        }
+        if ($this->replyTo !== null) {
+            $data[self::JSON_PROPERTY_REPLY_TO] = $this->replyTo;
+        }
+        if (!empty($this->to)) {
+            $data[self::JSON_PROPERTY_TO] = $this->to;
+        }
+        if (!empty($this->cc)) {
+            $data[self::JSON_PROPERTY_CC] = $this->cc;
+        }
+        if (!empty($this->bcc)) {
+            $data[self::JSON_PROPERTY_BCC] = $this->bcc;
+        }
+        if ($this->date !== null) {
+            $data[self::JSON_PROPERTY_DATE] = $this->date->format('c');
+        }
+        if ($this->bodyText !== null) {
+            $data[self::JSON_PROPERTY_BODY_TEXT] = $this->bodyText;
+        }
+        if ($this->bodyHtml !== null) {
+            $data[self::JSON_PROPERTY_BODY_HTML] = $this->bodyHtml;
+        }
+        if (!empty($this->attachments)) {
+            $data[self::JSON_PROPERTY_ATTACHMENTS] = $this->attachments;
+        }
+        if (!empty($this->headers)) {
+            $data[self::JSON_PROPERTY_HEADERS] = $this->headers;
+        }
+        
+        return $data;
+    }
+
+}
diff --git a/shared/lib/Mail/Exception/SendException.php b/shared/lib/Mail/Exception/SendException.php
new file mode 100644
index 0000000..d670d87
--- /dev/null
+++ b/shared/lib/Mail/Exception/SendException.php
@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Exception;
+
+use Exception;
+
+/**
+ * Mail Send Exception
+ * 
+ * Exception thrown when mail delivery fails.
+ * 
+ * @since 2025.05.01
+ */
+class SendException extends Exception {
+
+    /**
+     * @param string $message Error message
+     * @param int $code Error code
+     * @param Exception|null $previous Previous exception
+     * @param string|null $recipient Specific recipient that failed (if applicable)
+     * @param bool $permanent Whether this is a permanent failure (no retry)
+     */
+    public function __construct(
+        string $message,
+        int $code = 0,
+        ?Exception $previous = null,
+        public readonly ?string $recipient = null,
+        public readonly bool $permanent = false,
+    ) {
+        parent::__construct($message, $code, $previous);
+    }
+
+    /**
+     * Creates a permanent failure exception (no retry)
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $message
+     * @param string|null $recipient
+     * 
+     * @return self
+     */
+    public static function permanent(string $message, ?string $recipient = null): self {
+        return new self($message, 0, null, $recipient, true);
+    }
+
+    /**
+     * Creates a temporary failure exception (will retry)
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $message
+     * @param Exception|null $previous
+     * 
+     * @return self
+     */
+    public static function temporary(string $message, ?Exception $previous = null): self {
+        return new self($message, 0, $previous, null, false);
+    }
+
+}
diff --git a/shared/lib/Mail/Provider/IProviderBase.php b/shared/lib/Mail/Provider/IProviderBase.php
new file mode 100644
index 0000000..8b83b65
--- /dev/null
+++ b/shared/lib/Mail/Provider/IProviderBase.php
@@ -0,0 +1,132 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Provider;
+
+use JsonSerializable;
+use KTXF\Mail\Selector\ServiceSelector;
+use KTXF\Mail\Service\IServiceBase;
+
+/**
+ * Mail Provider Base Interface
+ * 
+ * Core interface for mail providers with context-aware service discovery.
+ * 
+ * @since 2025.05.01
+ */
+interface IProviderBase extends JsonSerializable {
+
+    public const CAPABILITY_SERVICE_LIST = 'ServiceList';
+    public const CAPABILITY_SERVICE_FETCH = 'ServiceFetch';
+    public const CAPABILITY_SERVICE_EXTANT = 'ServiceExtant';
+    public const CAPABILITY_SERVICE_FIND_BY_ADDRESS = 'ServiceFindByAddress';
+
+    public const JSON_TYPE = 'mail.provider';
+    public const JSON_PROPERTY_TYPE = '@type';
+    public const JSON_PROPERTY_ID = 'id';
+    public const JSON_PROPERTY_LABEL = 'label';
+    public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+
+    /**
+     * Confirms if a specific capability is supported
+     *
+     * @since 2025.05.01
+     *
+     * @param string $value Required capability e.g. 'ServiceList'
+     *
+     * @return bool
+     */
+    public function capable(string $value): bool;
+
+    /**
+     * Lists all supported capabilities
+     *
+     * @since 2025.05.01
+     *
+     * @return array<string,bool>
+     */
+    public function capabilities(): array;
+
+    /**
+     * Gets the unique identifier for this provider
+     *
+     * @since 2025.05.01
+     *
+     * @return string Provider ID (e.g., 'smtp', 'imap', 'jmap')
+     */
+    public function id(): string;
+
+    /**
+     * Gets the localized human-friendly name of this provider
+     *
+     * @since 2025.05.01
+     *
+     * @return string Provider label (e.g., 'SMTP Mail Provider')
+     */
+    public function label(): string;
+
+    /**
+     * Lists services for a tenant, optionally filtered by user context
+     * 
+     * When userId is null, returns only System-scoped services.
+     * When userId is provided, returns System-scoped services plus
+     * User-scoped services owned by that user.
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId User identifier for context (null = system only)
+     * @param ServiceSelector|null $selector Optional filter criteria
+     *
+     * @return array<string|int, IServiceBase>
+     */
+    public function serviceList(string $tenantId, ?string $userId = null, ?ServiceSelector $selector = null): array;
+
+    /**
+     * Checks if specific services exist
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId User identifier for context
+     * @param string|int ...$identifiers Service identifiers to check
+     *
+     * @return array<string|int, bool> Identifier => exists
+     */
+    public function serviceExtant(string $tenantId, ?string $userId, string|int ...$identifiers): array;
+
+    /**
+     * Fetches a specific service by identifier
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId User identifier for context
+     * @param string|int $identifier Service identifier
+     *
+     * @return IServiceBase|null
+     */
+    public function serviceFetch(string $tenantId, ?string $userId, string|int $identifier): ?IServiceBase;
+
+    /**
+     * Finds a service that handles a specific email address
+     * 
+     * Searches within the appropriate scope based on userId context.
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId User identifier for context
+     * @param string $address Email address to find service for
+     *
+     * @return IServiceBase|null Service handling the address, or null
+     */
+    public function serviceFindByAddress(string $tenantId, ?string $userId, string $address): ?IServiceBase;
+
+}
diff --git a/shared/lib/Mail/Provider/IProviderServiceMutate.php b/shared/lib/Mail/Provider/IProviderServiceMutate.php
new file mode 100644
index 0000000..aeff98a
--- /dev/null
+++ b/shared/lib/Mail/Provider/IProviderServiceMutate.php
@@ -0,0 +1,77 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Provider;
+
+use KTXF\Json\JsonDeserializable;
+use KTXF\Mail\Service\IServiceBase;
+
+/**
+ * Mail Provider Service Mutate Interface
+ * 
+ * Optional interface for providers that support service CRUD operations.
+ * 
+ * @since 2025.05.01
+ */
+interface IProviderServiceMutate extends JsonDeserializable {
+
+    public const CAPABILITY_SERVICE_FRESH = 'ServiceFresh';
+    public const CAPABILITY_SERVICE_CREATE = 'ServiceCreate';
+    public const CAPABILITY_SERVICE_MODIFY = 'ServiceModify';
+    public const CAPABILITY_SERVICE_DESTROY = 'ServiceDestroy';
+
+    /**
+     * Creates a new blank service instance for configuration
+     *
+     * @since 2025.05.01
+     *
+     * @return IServiceBase Fresh service object
+     */
+    public function serviceFresh(): IServiceBase;
+
+    /**
+     * Creates a new service configuration
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId Owner user ID (null for system services)
+     * @param IServiceBase $service Service configuration to create
+     *
+     * @return string|int Created service identifier
+     */
+    public function serviceCreate(string $tenantId, ?string $userId, IServiceBase $service): string|int;
+
+    /**
+     * Modifies an existing service configuration
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId User identifier for authorization context
+     * @param IServiceBase $service Service configuration to update
+     *
+     * @return string|int Updated service identifier
+     */
+    public function serviceModify(string $tenantId, ?string $userId, IServiceBase $service): string|int;
+
+    /**
+     * Destroys a service configuration
+     *
+     * @since 2025.05.01
+     *
+     * @param string $tenantId Tenant identifier
+     * @param string|null $userId User identifier for authorization context
+     * @param IServiceBase $service Service to destroy
+     *
+     * @return bool True if destroyed, false if not found
+     */
+    public function serviceDestroy(string $tenantId, ?string $userId, IServiceBase $service): bool;
+
+}
diff --git a/shared/lib/Mail/Queue/SendOptions.php b/shared/lib/Mail/Queue/SendOptions.php
new file mode 100644
index 0000000..d346687
--- /dev/null
+++ b/shared/lib/Mail/Queue/SendOptions.php
@@ -0,0 +1,81 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Queue;
+
+use JsonSerializable;
+
+/**
+ * Mail Send Options
+ * 
+ * Configuration options for message delivery behavior.
+ * 
+ * @since 2025.05.01
+ */
+class SendOptions implements JsonSerializable {
+
+    /**
+     * @param bool $immediate Send immediately bypassing queue (for 2FA, etc.)
+     * @param int $priority Queue priority (-100 to 100, higher = sooner)
+     * @param int $retryCount Maximum retry attempts on failure
+     * @param int|null $delaySeconds Delay before first send attempt
+     */
+    public function __construct(
+        public readonly bool $immediate = false,
+        public readonly int $priority = 0,
+        public readonly int $retryCount = 3,
+        public readonly ?int $delaySeconds = null,
+    ) {}
+
+    /**
+     * Creates options for immediate delivery (bypasses queue)
+     * 
+     * @since 2025.05.01
+     * 
+     * @return self
+     */
+    public static function immediate(): self {
+        return new self(immediate: true);
+    }
+
+    /**
+     * Creates options for high-priority queued delivery
+     * 
+     * @since 2025.05.01
+     * 
+     * @return self
+     */
+    public static function highPriority(): self {
+        return new self(priority: 50);
+    }
+
+    /**
+     * Creates options for low-priority queued delivery (bulk mail)
+     * 
+     * @since 2025.05.01
+     * 
+     * @return self
+     */
+    public static function lowPriority(): self {
+        return new self(priority: -50);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        return [
+            'immediate' => $this->immediate,
+            'priority' => $this->priority,
+            'retryCount' => $this->retryCount,
+            'delaySeconds' => $this->delaySeconds,
+        ];
+    }
+
+}
diff --git a/shared/lib/Mail/Selector/ServiceSelector.php b/shared/lib/Mail/Selector/ServiceSelector.php
new file mode 100644
index 0000000..66071c3
--- /dev/null
+++ b/shared/lib/Mail/Selector/ServiceSelector.php
@@ -0,0 +1,183 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Selector;
+
+use JsonSerializable;
+use KTXF\Mail\Service\ServiceScope;
+
+/**
+ * Mail Service Selector
+ * 
+ * Filter criteria for selecting mail services from providers.
+ * 
+ * @since 2025.05.01
+ */
+class ServiceSelector implements JsonSerializable {
+
+    private ?ServiceScope $scope = null;
+    private ?string $owner = null;
+    private ?string $address = null;
+    private ?array $capabilities = null;
+    private ?bool $enabled = null;
+
+    /**
+     * Filter by service scope
+     * 
+     * @since 2025.05.01
+     * 
+     * @param ServiceScope|null $scope
+     * 
+     * @return self
+     */
+    public function setScope(?ServiceScope $scope): self {
+        $this->scope = $scope;
+        return $this;
+    }
+
+    /**
+     * Gets the scope filter
+     * 
+     * @since 2025.05.01
+     * 
+     * @return ServiceScope|null
+     */
+    public function getScope(): ?ServiceScope {
+        return $this->scope;
+    }
+
+    /**
+     * Filter by owner user ID
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string|null $owner
+     * 
+     * @return self
+     */
+    public function setOwner(?string $owner): self {
+        $this->owner = $owner;
+        return $this;
+    }
+
+    /**
+     * Gets the owner filter
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null
+     */
+    public function getOwner(): ?string {
+        return $this->owner;
+    }
+
+    /**
+     * Filter by email address (matches primary or secondary)
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string|null $address
+     * 
+     * @return self
+     */
+    public function setAddress(?string $address): self {
+        $this->address = $address;
+        return $this;
+    }
+
+    /**
+     * Gets the address filter
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null
+     */
+    public function getAddress(): ?string {
+        return $this->address;
+    }
+
+    /**
+     * Filter by required capabilities
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array<string>|null $capabilities
+     * 
+     * @return self
+     */
+    public function setCapabilities(?array $capabilities): self {
+        $this->capabilities = $capabilities;
+        return $this;
+    }
+
+    /**
+     * Gets the capabilities filter
+     * 
+     * @since 2025.05.01
+     * 
+     * @return array<string>|null
+     */
+    public function getCapabilities(): ?array {
+        return $this->capabilities;
+    }
+
+    /**
+     * Filter by enabled status
+     * 
+     * @since 2025.05.01
+     * 
+     * @param bool|null $enabled
+     * 
+     * @return self
+     */
+    public function setEnabled(?bool $enabled): self {
+        $this->enabled = $enabled;
+        return $this;
+    }
+
+    /**
+     * Gets the enabled filter
+     * 
+     * @since 2025.05.01
+     * 
+     * @return bool|null
+     */
+    public function getEnabled(): ?bool {
+        return $this->enabled;
+    }
+
+    /**
+     * Checks if any filter criteria are set
+     * 
+     * @since 2025.05.01
+     * 
+     * @return bool
+     */
+    public function hasFilters(): bool {
+        return $this->scope !== null
+            || $this->owner !== null
+            || $this->address !== null
+            || $this->capabilities !== null
+            || $this->enabled !== null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        return array_filter([
+            'scope' => $this->scope?->value,
+            'owner' => $this->owner,
+            'address' => $this->address,
+            'capabilities' => $this->capabilities,
+            'enabled' => $this->enabled,
+        ], fn($v) => $v !== null);
+    }
+
+}
diff --git a/shared/lib/Mail/Service/IServiceBase.php b/shared/lib/Mail/Service/IServiceBase.php
new file mode 100644
index 0000000..8d7cdfb
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceBase.php
@@ -0,0 +1,139 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+use JsonSerializable;
+use KTXF\Mail\Entity\IAddress;
+
+/**
+ * Mail Service Base Interface
+ * 
+ * Core interface for mail services providing identity, addressing, and capability information.
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceBase extends JsonSerializable {
+
+    public const JSON_TYPE = 'mail.service';
+    public const JSON_PROPERTY_TYPE = '@type';
+    public const JSON_PROPERTY_PROVIDER = 'provider';
+    public const JSON_PROPERTY_ID = 'id';
+    public const JSON_PROPERTY_LABEL = 'label';
+    public const JSON_PROPERTY_SCOPE = 'scope';
+    public const JSON_PROPERTY_OWNER = 'owner';
+    public const JSON_PROPERTY_ENABLED = 'enabled';
+    public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+    public const JSON_PROPERTY_PRIMARY_ADDRESS = 'primaryAddress';
+    public const JSON_PROPERTY_SECONDARY_ADDRESSES = 'secondaryAddresses';
+
+    /**
+     * Confirms if a specific capability is supported
+     *
+     * @since 2025.05.01
+     *
+     * @param string $value Required capability e.g. 'Send'
+     *
+     * @return bool
+     */
+    public function capable(string $value): bool;
+
+    /**
+     * Lists all supported capabilities
+     *
+     * @since 2025.05.01
+     *
+     * @return array<string,bool>
+     */
+    public function capabilities(): array;
+
+    /**
+     * Gets the unique identifier of the provider this service belongs to
+     *
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function in(): string;
+
+    /**
+     * Gets the unique identifier for this service
+     *
+     * @since 2025.05.01
+     * 
+     * @return string|int
+     */
+    public function id(): string|int;
+
+    /**
+     * Gets the localized human-friendly name of this service
+     *
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function getLabel(): string;
+
+    /**
+     * Gets the scope of this service (System or User)
+     *
+     * @since 2025.05.01
+     * 
+     * @return ServiceScope
+     */
+    public function getScope(): ServiceScope;
+
+    /**
+     * Gets the owner user ID for User-scoped services
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null User ID or null for System scope
+     */
+    public function getOwner(): ?string;
+
+    /**
+     * Gets whether this service is enabled
+     *
+     * @since 2025.05.01
+     * 
+     * @return bool
+     */
+    public function getEnabled(): bool;
+
+    /**
+     * Gets the primary mailing address for this service
+     *
+     * @since 2025.05.01
+     *
+     * @return IAddress
+     */
+    public function getPrimaryAddress(): IAddress;
+
+    /**
+     * Gets the secondary mailing addresses (aliases) for this service
+     *
+     * @since 2025.05.01
+     *
+     * @return array<int, IAddress>
+     */
+    public function getSecondaryAddresses(): array;
+
+    /**
+     * Checks if this service handles a specific email address
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $address Email address to check
+     * 
+     * @return bool True if address matches primary or any secondary address
+     */
+    public function handlesAddress(string $address): bool;
+
+}
diff --git a/shared/lib/Mail/Service/IServiceIdentity.php b/shared/lib/Mail/Service/IServiceIdentity.php
new file mode 100644
index 0000000..1fd951b
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceIdentity.php
@@ -0,0 +1,36 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+use JsonSerializable;
+
+/**
+ * Mail Service Identity Interface
+ * 
+ * Base interface for authentication credentials used by mail services.
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceIdentity extends JsonSerializable {
+
+    public const TYPE_BASIC = 'basic';
+    public const TYPE_OAUTH = 'oauth';
+    public const TYPE_APIKEY = 'apikey';
+
+    /**
+     * Gets the identity/authentication type
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string One of: 'basic', 'oauth', 'apikey'
+     */
+    public function getType(): string;
+
+}
diff --git a/shared/lib/Mail/Service/IServiceIdentityApiKey.php b/shared/lib/Mail/Service/IServiceIdentityApiKey.php
new file mode 100644
index 0000000..9d098f6
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceIdentityApiKey.php
@@ -0,0 +1,39 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+/**
+ * Mail Service API Key Identity Interface
+ * 
+ * API key authentication for transactional mail services (SendGrid, Mailgun, etc.)
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceIdentityApiKey extends IServiceIdentity {
+
+    /**
+     * Gets the API key
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function getApiKey(): string;
+
+    /**
+     * Gets the optional API key identifier/name
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null
+     */
+    public function getApiKeyId(): ?string;
+
+}
diff --git a/shared/lib/Mail/Service/IServiceIdentityBasic.php b/shared/lib/Mail/Service/IServiceIdentityBasic.php
new file mode 100644
index 0000000..bd55412
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceIdentityBasic.php
@@ -0,0 +1,39 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+/**
+ * Mail Service Basic Authentication Identity Interface
+ * 
+ * Username/password authentication for traditional mail services.
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceIdentityBasic extends IServiceIdentity {
+
+    /**
+     * Gets the username/login identifier
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function getUsername(): string;
+
+    /**
+     * Gets the password/secret
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function getPassword(): string;
+
+}
diff --git a/shared/lib/Mail/Service/IServiceIdentityOAuth.php b/shared/lib/Mail/Service/IServiceIdentityOAuth.php
new file mode 100644
index 0000000..cf090c6
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceIdentityOAuth.php
@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+use DateTimeImmutable;
+
+/**
+ * Mail Service OAuth Identity Interface
+ * 
+ * OAuth2 token-based authentication for modern mail APIs.
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceIdentityOAuth extends IServiceIdentity {
+
+    /**
+     * Gets the OAuth access token
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string
+     */
+    public function getAccessToken(): string;
+
+    /**
+     * Gets the OAuth refresh token
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null
+     */
+    public function getRefreshToken(): ?string;
+
+    /**
+     * Gets the token expiration time
+     * 
+     * @since 2025.05.01
+     * 
+     * @return DateTimeImmutable|null
+     */
+    public function getExpiresAt(): ?DateTimeImmutable;
+
+    /**
+     * Gets the granted OAuth scopes
+     * 
+     * @since 2025.05.01
+     * 
+     * @return array<string>
+     */
+    public function getScopes(): array;
+
+    /**
+     * Checks if the access token has expired
+     * 
+     * @since 2025.05.01
+     * 
+     * @return bool
+     */
+    public function isExpired(): bool;
+
+}
diff --git a/shared/lib/Mail/Service/IServiceLocation.php b/shared/lib/Mail/Service/IServiceLocation.php
new file mode 100644
index 0000000..d3b04fb
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceLocation.php
@@ -0,0 +1,105 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+use JsonSerializable;
+
+/**
+ * Mail Service Location Interface
+ * 
+ * Unified interface supporting both URI-based (API services) and socket-based
+ * (traditional IMAP/SMTP) connection configurations.
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceLocation extends JsonSerializable {
+
+    public const TYPE_URI = 'uri';
+    public const TYPE_SOCKET_SINGLE = 'socket-single';
+    public const TYPE_SOCKET_SPLIT = 'socket-split';
+
+    public const SECURITY_NONE = 'none';
+    public const SECURITY_SSL = 'ssl';
+    public const SECURITY_TLS = 'tls';
+    public const SECURITY_STARTTLS = 'starttls';
+
+    /**
+     * Gets the location type
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string One of: 'uri', 'socket-single', 'socket-split'
+     */
+    public function getType(): string;
+
+    /**
+     * Gets the URI for API-based services (JMAP, EWS, Graph API, HTTP relay)
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null URI or null if not URI-based
+     */
+    public function getUri(): ?string;
+
+    /**
+     * Gets the inbound/primary host for socket-based services
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null Hostname or null if URI-based
+     */
+    public function getInboundHost(): ?string;
+
+    /**
+     * Gets the inbound/primary port for socket-based services
+     * 
+     * @since 2025.05.01
+     * 
+     * @return int|null Port number or null if URI-based
+     */
+    public function getInboundPort(): ?int;
+
+    /**
+     * Gets the inbound/primary security mode
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null One of: 'none', 'ssl', 'tls', 'starttls'
+     */
+    public function getInboundSecurity(): ?string;
+
+    /**
+     * Gets the outbound host for split-socket services (e.g., SMTP separate from IMAP)
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null Hostname or null if not split-socket
+     */
+    public function getOutboundHost(): ?string;
+
+    /**
+     * Gets the outbound port for split-socket services
+     * 
+     * @since 2025.05.01
+     * 
+     * @return int|null Port number or null if not split-socket
+     */
+    public function getOutboundPort(): ?int;
+
+    /**
+     * Gets the outbound security mode for split-socket services
+     * 
+     * @since 2025.05.01
+     * 
+     * @return string|null One of: 'none', 'ssl', 'tls', 'starttls'
+     */
+    public function getOutboundSecurity(): ?string;
+
+}
diff --git a/shared/lib/Mail/Service/IServiceSend.php b/shared/lib/Mail/Service/IServiceSend.php
new file mode 100644
index 0000000..940c0bc
--- /dev/null
+++ b/shared/lib/Mail/Service/IServiceSend.php
@@ -0,0 +1,49 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+use KTXF\Mail\Entity\IMessageMutable;
+use KTXF\Mail\Exception\SendException;
+
+/**
+ * Mail Service Send Interface
+ * 
+ * Interface for mail services capable of sending outbound messages.
+ * This is the minimum capability for an outbound-only mail service.
+ * 
+ * @since 2025.05.01
+ */
+interface IServiceSend extends IServiceBase {
+
+    public const CAPABILITY_SEND = 'Send';
+
+    /**
+     * Creates a new fresh message object
+     *
+     * @since 2025.05.01
+     *
+     * @return IMessageMutable Fresh message object for composing
+     */
+    public function messageFresh(): IMessageMutable;
+
+    /**
+     * Sends an outbound message
+     *
+     * @since 2025.05.01
+     *
+     * @param IMessageMutable $message Message to send
+     *
+     * @return string Message ID assigned by the transport
+     * 
+     * @throws SendException On delivery failure
+     */
+    public function messageSend(IMessageMutable $message): string;
+
+}
diff --git a/shared/lib/Mail/Service/ServiceIdentityApiKey.php b/shared/lib/Mail/Service/ServiceIdentityApiKey.php
new file mode 100644
index 0000000..970ba23
--- /dev/null
+++ b/shared/lib/Mail/Service/ServiceIdentityApiKey.php
@@ -0,0 +1,78 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+/**
+ * Mail Service API Key Identity Implementation
+ * 
+ * API key authentication for transactional mail services.
+ * 
+ * @since 2025.05.01
+ */
+class ServiceIdentityApiKey implements IServiceIdentityApiKey {
+
+    /**
+     * @param string $apiKey API key
+     * @param string|null $apiKeyId Optional API key identifier
+     */
+    public function __construct(
+        private string $apiKey,
+        private ?string $apiKeyId = null,
+    ) {}
+
+    /**
+     * Creates from array data
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array $data
+     * 
+     * @return self
+     */
+    public static function fromArray(array $data): self {
+        return new self(
+            $data['apiKey'] ?? '',
+            $data['apiKeyId'] ?? null,
+        );
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getType(): string {
+        return self::TYPE_APIKEY;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getApiKey(): string {
+        return $this->apiKey;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getApiKeyId(): ?string {
+        return $this->apiKeyId;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        return array_filter([
+            'type' => self::TYPE_APIKEY,
+            'apiKeyId' => $this->apiKeyId,
+            // API key intentionally omitted from serialization for security
+        ], fn($v) => $v !== null);
+    }
+
+}
diff --git a/shared/lib/Mail/Service/ServiceIdentityBasic.php b/shared/lib/Mail/Service/ServiceIdentityBasic.php
new file mode 100644
index 0000000..a301955
--- /dev/null
+++ b/shared/lib/Mail/Service/ServiceIdentityBasic.php
@@ -0,0 +1,78 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+/**
+ * Mail Service Basic Identity Implementation
+ * 
+ * Username/password authentication credentials.
+ * 
+ * @since 2025.05.01
+ */
+class ServiceIdentityBasic implements IServiceIdentityBasic {
+
+    /**
+     * @param string $username Login username
+     * @param string $password Login password
+     */
+    public function __construct(
+        private string $username,
+        private string $password,
+    ) {}
+
+    /**
+     * Creates from array data
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array $data
+     * 
+     * @return self
+     */
+    public static function fromArray(array $data): self {
+        return new self(
+            $data['username'] ?? '',
+            $data['password'] ?? '',
+        );
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getType(): string {
+        return self::TYPE_BASIC;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getUsername(): string {
+        return $this->username;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getPassword(): string {
+        return $this->password;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        return [
+            'type' => self::TYPE_BASIC,
+            'username' => $this->username,
+            // Password intentionally omitted from serialization for security
+        ];
+    }
+
+}
diff --git a/shared/lib/Mail/Service/ServiceLocation.php b/shared/lib/Mail/Service/ServiceLocation.php
new file mode 100644
index 0000000..8d40791
--- /dev/null
+++ b/shared/lib/Mail/Service/ServiceLocation.php
@@ -0,0 +1,211 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+/**
+ * Mail Service Location Implementation
+ * 
+ * Unified implementation supporting URI-based and socket-based connections.
+ * 
+ * @since 2025.05.01
+ */
+class ServiceLocation implements IServiceLocation {
+
+    /**
+     * @param string $type Location type (uri, socket-single, socket-split)
+     * @param string|null $uri URI for API-based services
+     * @param string|null $inboundHost Inbound/primary host
+     * @param int|null $inboundPort Inbound/primary port
+     * @param string|null $inboundSecurity Inbound security (none, ssl, tls, starttls)
+     * @param string|null $outboundHost Outbound host (for split-socket)
+     * @param int|null $outboundPort Outbound port (for split-socket)
+     * @param string|null $outboundSecurity Outbound security (for split-socket)
+     */
+    public function __construct(
+        private string $type,
+        private ?string $uri = null,
+        private ?string $inboundHost = null,
+        private ?int $inboundPort = null,
+        private ?string $inboundSecurity = null,
+        private ?string $outboundHost = null,
+        private ?int $outboundPort = null,
+        private ?string $outboundSecurity = null,
+    ) {}
+
+    /**
+     * Creates a URI-based location (for API services)
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $uri
+     * 
+     * @return self
+     */
+    public static function uri(string $uri): self {
+        return new self(self::TYPE_URI, $uri);
+    }
+
+    /**
+     * Creates a single-socket location (e.g., SMTP only)
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $host
+     * @param int $port
+     * @param string $security
+     * 
+     * @return self
+     */
+    public static function socket(string $host, int $port, string $security = self::SECURITY_TLS): self {
+        return new self(
+            self::TYPE_SOCKET_SINGLE,
+            null,
+            $host,
+            $port,
+            $security
+        );
+    }
+
+    /**
+     * Creates a split-socket location (IMAP + SMTP)
+     * 
+     * @since 2025.05.01
+     * 
+     * @param string $inboundHost IMAP host
+     * @param int $inboundPort IMAP port
+     * @param string $inboundSecurity IMAP security
+     * @param string $outboundHost SMTP host
+     * @param int $outboundPort SMTP port
+     * @param string $outboundSecurity SMTP security
+     * 
+     * @return self
+     */
+    public static function splitSocket(
+        string $inboundHost,
+        int $inboundPort,
+        string $inboundSecurity,
+        string $outboundHost,
+        int $outboundPort,
+        string $outboundSecurity
+    ): self {
+        return new self(
+            self::TYPE_SOCKET_SPLIT,
+            null,
+            $inboundHost,
+            $inboundPort,
+            $inboundSecurity,
+            $outboundHost,
+            $outboundPort,
+            $outboundSecurity
+        );
+    }
+
+    /**
+     * Creates from array data
+     * 
+     * @since 2025.05.01
+     * 
+     * @param array $data
+     * 
+     * @return self
+     */
+    public static function fromArray(array $data): self {
+        return new self(
+            $data['type'] ?? self::TYPE_SOCKET_SINGLE,
+            $data['uri'] ?? null,
+            $data['inboundHost'] ?? $data['host'] ?? null,
+            $data['inboundPort'] ?? $data['port'] ?? null,
+            $data['inboundSecurity'] ?? $data['security'] ?? null,
+            $data['outboundHost'] ?? null,
+            $data['outboundPort'] ?? null,
+            $data['outboundSecurity'] ?? null,
+        );
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getType(): string {
+        return $this->type;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getUri(): ?string {
+        return $this->uri;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getInboundHost(): ?string {
+        return $this->inboundHost;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getInboundPort(): ?int {
+        return $this->inboundPort;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getInboundSecurity(): ?string {
+        return $this->inboundSecurity;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getOutboundHost(): ?string {
+        return $this->outboundHost ?? $this->inboundHost;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getOutboundPort(): ?int {
+        return $this->outboundPort ?? $this->inboundPort;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getOutboundSecurity(): ?string {
+        return $this->outboundSecurity ?? $this->inboundSecurity;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function jsonSerialize(): array {
+        $data = ['type' => $this->type];
+        
+        if ($this->type === self::TYPE_URI) {
+            $data['uri'] = $this->uri;
+        } else {
+            $data['inboundHost'] = $this->inboundHost;
+            $data['inboundPort'] = $this->inboundPort;
+            $data['inboundSecurity'] = $this->inboundSecurity;
+            
+            if ($this->type === self::TYPE_SOCKET_SPLIT) {
+                $data['outboundHost'] = $this->outboundHost;
+                $data['outboundPort'] = $this->outboundPort;
+                $data['outboundSecurity'] = $this->outboundSecurity;
+            }
+        }
+        
+        return array_filter($data, fn($v) => $v !== null);
+    }
+
+}
diff --git a/shared/lib/Mail/Service/ServiceScope.php b/shared/lib/Mail/Service/ServiceScope.php
new file mode 100644
index 0000000..bfdbff3
--- /dev/null
+++ b/shared/lib/Mail/Service/ServiceScope.php
@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Mail\Service;
+
+use JsonSerializable;
+
+/**
+ * Defines the scope/context of a mail service
+ * 
+ * @since 2025.05.01
+ */
+enum ServiceScope: string implements JsonSerializable {
+
+    /**
+     * System-level service for tenant-wide communications
+     * (e.g., notifications@, reports@, noreply@)
+     */
+    case System = 'system';
+
+    /**
+     * User-level service for personal mail accounts
+     * (e.g., user's own IMAP/SMTP accounts)
+     */
+    case User = 'user';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
diff --git a/shared/lib/Module/ModuleInstanceAbstract.php b/shared/lib/Module/ModuleInstanceAbstract.php
new file mode 100644
index 0000000..4d3907d
--- /dev/null
+++ b/shared/lib/Module/ModuleInstanceAbstract.php
@@ -0,0 +1,49 @@
+<?php
+
+namespace KTXF\Module;
+
+abstract class ModuleInstanceAbstract implements ModuleInstanceInterface
+{
+    // mandatory methods that must be implemented by each concrete module
+    abstract public function handle(): string;
+
+    abstract public function version(): string;
+
+    abstract public function label(): string;
+
+    abstract public function description(): string;
+
+    abstract public function author(): string;
+
+    // optional methods that can be overridden by specific modules
+    public function install(): void
+    {
+        // Override in specific modules if needed
+    }
+
+    public function uninstall(): void
+    {
+        // Override in specific modules if needed
+    }
+
+    public function enable(): void
+    {
+        // Override in specific modules if needed
+    }
+
+    public function disable(): void
+    {
+        // Override in specific modules if needed
+    }
+
+    public function upgrade(): void
+    {
+        // Override in specific modules if needed
+    }
+
+    public function boot(): void
+    {
+        // Override in specific modules if needed
+    }
+
+}
diff --git a/shared/lib/Module/ModuleInstanceInterface.php b/shared/lib/Module/ModuleInstanceInterface.php
new file mode 100644
index 0000000..4235538
--- /dev/null
+++ b/shared/lib/Module/ModuleInstanceInterface.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace KTXF\Module;
+
+interface ModuleInstanceInterface
+{
+    /**
+     * Get module version
+     */
+    public function handle(): string;
+
+    /**
+     * Get module version
+     */
+    public function version(): string;
+
+    /**
+     * Get module label
+     */
+    public function label(): string;
+
+    /**
+     * Get module description
+     */
+    public function description(): string;
+
+    /**
+     * Get module author
+     */
+    public function author(): string;
+
+    /**
+     * Install the module
+     */
+    public function install(): void;
+
+    /**
+     * Uninstall the module
+     */
+    public function uninstall(): void;
+    
+    /**
+     * Upgrade the module
+     */
+    public function upgrade(): void;
+
+    /**
+     * Enable the module
+     */
+    public function enable(): void;
+
+    /**
+     * Disable the module
+     */
+    public function disable(): void;
+
+    /**
+     * Bootstrap the module when enabled
+     */
+    public function boot(): void;
+}
diff --git a/shared/lib/People/Collection/CollectionContent.php b/shared/lib/People/Collection/CollectionContent.php
new file mode 100644
index 0000000..3adc508
--- /dev/null
+++ b/shared/lib/People/Collection/CollectionContent.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Collection;
+
+use JsonSerializable;
+
+enum CollectionContent: string implements JsonSerializable {
+
+    case Individual = 'individual';
+    case Organization = 'organization';
+    case Group = 'group';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/People/Collection/CollectionPermissions.php b/shared/lib/People/Collection/CollectionPermissions.php
new file mode 100644
index 0000000..3136ca7
--- /dev/null
+++ b/shared/lib/People/Collection/CollectionPermissions.php
@@ -0,0 +1,26 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Collection;
+
+use JsonSerializable;
+
+enum CollectionPermissions: string implements JsonSerializable {
+
+    case View = 'view';
+    case Create = 'create';
+    case Modify = 'modify';
+    case Destroy = 'destroy';
+    case Share = 'share';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+    
+}
\ No newline at end of file
diff --git a/shared/lib/People/Collection/CollectionRoles.php b/shared/lib/People/Collection/CollectionRoles.php
new file mode 100644
index 0000000..7a6bbbb
--- /dev/null
+++ b/shared/lib/People/Collection/CollectionRoles.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Collection;
+
+use JsonSerializable;
+
+enum CollectionRoles: string implements JsonSerializable {
+
+    case System = 'system';
+    case Individual = 'individual';
+    case Recent = 'recent';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/People/Collection/ICollectionBase.php b/shared/lib/People/Collection/ICollectionBase.php
new file mode 100644
index 0000000..cc1617e
--- /dev/null
+++ b/shared/lib/People/Collection/ICollectionBase.php
@@ -0,0 +1,160 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Collection;
+
+use DateTimeImmutable;
+use JsonSerializable;
+
+interface ICollectionBase extends JsonSerializable {
+
+	public const JSON_TYPE = 'people.collection';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_PROVIDER = 'provider';
+	public const JSON_PROPERTY_SERVICE = 'service';
+	public const JSON_PROPERTY_IN = 'in';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_DESCRIPTION = 'description';
+	public const JSON_PROPERTY_PRIORITY = 'priority';
+	public const JSON_PROPERTY_VISIBILITY = 'visibility';
+	public const JSON_PROPERTY_COLOR = 'color';
+	public const JSON_PROPERTY_CREATED = 'created';
+	public const JSON_PROPERTY_MODIFIED = 'modified';
+	public const JSON_PROPERTY_ENABLED = 'enabled';
+	public const JSON_PROPERTY_SIGNATURE = 'signature';
+	public const JSON_PROPERTY_PERMISSIONS = 'permissions';
+	public const JSON_PROPERTY_ROLES = 'roles';
+	public const JSON_PROPERTY_CONTENTS = 'contents';
+
+	/**
+	 * Unique identifier of the service this collection belongs to
+	 *
+	 * @since 2025.05.01
+	 */
+	public function in(): string|int|null;
+
+	/**
+	 * Unique arbitrary text string identifying this service (e.g. 1 or collection1 or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the creation date of this collection
+	 */
+	public function created(): ?DateTimeImmutable;
+	
+	/**
+	 * Gets the modification date of this collection
+	 */
+	public function modified(): ?DateTimeImmutable;
+
+	/**
+	 * Lists all supported attributes
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string,array<string,bool>>
+	 */
+	public function attributes(): array;
+
+	/**
+	 * Gets the signature of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function signature(): ?string;
+
+	/**
+	 * Gets the role(s) of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function roles(): array;
+
+	/**
+	 * Checks if this collection supports the given role
+	 *
+	 * @since 2025.05.01
+	 */
+	public function role(CollectionRoles $value): bool;
+
+	/**
+	 * Gets the content types of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function contents(): array;
+
+	/**
+	 * Checks if this collection contains the given content type
+	 *
+	 * @since 2025.05.01
+	 */
+	public function contains(CollectionContent $value): bool;
+
+	/**
+	 * Gets the active status of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getEnabled(): bool;
+
+	/**
+	 * Gets the active status of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getPermissions(): array;
+
+	/**
+	 * Checks if this collection has the given permission
+	 *
+	 * @since 2025.05.01
+	 */
+	public function hasPermission(CollectionPermissions $permission): bool;
+
+	/**
+	 * Gets the human friendly name of this collection (e.g. Personal Contacts)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getLabel(): ?string;
+
+	/**
+	 * Gets the human friendly description of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getDescription(): ?string;
+
+	/**
+	 * Gets the priority of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getPriority(): ?int;
+
+	/**
+	 * Gets the visibility of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getVisibility(): ?bool;
+
+	/**
+	 * Gets the color of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getColor(): ?string;
+
+}
diff --git a/shared/lib/People/Collection/ICollectionMutable.php b/shared/lib/People/Collection/ICollectionMutable.php
new file mode 100644
index 0000000..610a48b
--- /dev/null
+++ b/shared/lib/People/Collection/ICollectionMutable.php
@@ -0,0 +1,58 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Collection;
+
+use KTXF\Json\JsonDeserializable;
+
+interface ICollectionMutable extends ICollectionBase, JsonDeserializable {
+
+	/**
+	 * Sets the active status of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setEnabled(bool $value): self;
+
+	/**
+	 * Sets the human friendly name of this collection (e.g. Personal Contacts)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setLabel(string $value): self;
+
+	/**
+	 * Sets the human friendly description of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setDescription(?string $value): self;
+
+	/**
+	 * Sets the priority of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setPriority(?int $value): self;
+
+	/**
+	 * Sets the visibility of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setVisibility(?bool $value): self;
+
+	/**
+	 * Sets the color of this collection
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setColor(?string $value): self;
+
+}
diff --git a/shared/lib/People/Entity/EntityPermissions.php b/shared/lib/People/Entity/EntityPermissions.php
new file mode 100644
index 0000000..71a20a1
--- /dev/null
+++ b/shared/lib/People/Entity/EntityPermissions.php
@@ -0,0 +1,25 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity;
+
+use JsonSerializable;
+
+enum EntityPermissions: string implements JsonSerializable {
+
+    case View = 'view';
+    case Modify = 'modify';
+    case Delete = 'delete';
+    case Share = 'share';
+
+    public function jsonSerialize(): string {
+        return $this->value;
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/People/Entity/IEntityBase.php b/shared/lib/People/Entity/IEntityBase.php
new file mode 100644
index 0000000..88bdf47
--- /dev/null
+++ b/shared/lib/People/Entity/IEntityBase.php
@@ -0,0 +1,94 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity;
+
+use DateTimeImmutable;
+use KTXF\People\Entity\Individual\IndividualObject;
+
+interface IEntityBase extends \JsonSerializable {
+
+	public const JSON_TYPE = 'people.entity';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_IN = 'in';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_DATA = 'data';
+	public const JSON_PROPERTY_CREATED = 'created';
+	public const JSON_PROPERTY_MODIFIED = 'modified';
+	public const JSON_PROPERTY_SIGNATURE = 'signature';
+
+	/**
+	 * Unique arbitrary text string identifying the collection this entity belongs to (e.g. 1 or Collection1 or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function in(): string|int;
+
+	/**
+	 * Unique arbitrary text string identifying this service (e.g. 1 or Entity or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the creation date of this entity
+	 */
+	public function created(): ?DateTimeImmutable;
+
+	/**
+	 * Gets the modification date of this entity
+	 */
+	public function modified(): ?DateTimeImmutable;
+
+	/**
+	 * Gets the signature of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function signature(): ?string;
+
+	/**
+	 * Gets the priority of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getPriority(): ?int;
+
+	/**
+	 * Gets the visibility of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getVisibility(): ?bool;
+
+	/**
+	 * Gets the color of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getColor(): ?string;
+
+	/**
+	 * Gets the object as a class instance.
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getDataObject(): IndividualObject|null;
+
+	/**
+	 * Gets the raw data as an associative array or JSON string.
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array|string|null
+	 */
+	public function getDataJson(): array|string|null;
+
+}
diff --git a/shared/lib/People/Entity/IEntityMutable.php b/shared/lib/People/Entity/IEntityMutable.php
new file mode 100644
index 0000000..bd30af5
--- /dev/null
+++ b/shared/lib/People/Entity/IEntityMutable.php
@@ -0,0 +1,52 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity;
+
+use KTXF\Json\JsonDeserializable;
+use KTXF\People\Entity\Individual\IndividualObject;
+
+interface IEntityMutable extends IEntityBase, JsonDeserializable {
+
+	/**
+	 * Sets the priority of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setPriority(?int $value): static;
+
+	/**
+	 * Sets the visibility of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setVisibility(?bool $value): static;
+
+	/**
+	 * Sets the color of this entity
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setColor(?string $value): static;
+
+	/**
+	 * Sets the object as a class instance.
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setDataObject(IndividualObject $value): static;
+
+	/**
+	 * Sets the object data from a json string
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setDataJson(array|string $value): static;
+
+}
diff --git a/shared/lib/People/Individual/IndividualAliasCollection.php b/shared/lib/People/Individual/IndividualAliasCollection.php
new file mode 100644
index 0000000..cdc0497
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualAliasCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualAliasCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualAliasObject::class);
+	}
+
+}
diff --git a/shared/lib/People/Individual/IndividualAliasObject.php b/shared/lib/People/Individual/IndividualAliasObject.php
new file mode 100644
index 0000000..565808f
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualAliasObject.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualAliasObject extends JsonSerializableObject {
+
+	public string|null $label = null;
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualAnniversaryCollection.php b/shared/lib/People/Individual/IndividualAnniversaryCollection.php
new file mode 100644
index 0000000..b6a744d
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualAnniversaryCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualAnniversaryCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualAnniversaryObject::class);
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualAnniversaryObject.php b/shared/lib/People/Individual/IndividualAnniversaryObject.php
new file mode 100644
index 0000000..62d7050
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualAnniversaryObject.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use DateTimeInterface;
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualAnniversaryObject extends JsonSerializableObject {
+
+	public IndividualAnniversaryTypes|null $type = null;
+	public DateTimeInterface|null $when = null;
+	public string|null $location = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualAnniversaryTypes.php b/shared/lib/People/Individual/IndividualAnniversaryTypes.php
new file mode 100644
index 0000000..96598dd
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualAnniversaryTypes.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+enum IndividualAnniversaryTypes: string {
+	case Birth = 'birth';
+	case Death = 'death';
+	case Nuptial = 'nuptial';
+}
diff --git a/shared/lib/People/Individual/IndividualCryptoCollection.php b/shared/lib/People/Individual/IndividualCryptoCollection.php
new file mode 100644
index 0000000..8bea37d
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualCryptoCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualCryptoCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualCryptoObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualCryptoObject.php b/shared/lib/People/Individual/IndividualCryptoObject.php
new file mode 100644
index 0000000..250b4e4
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualCryptoObject.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualCryptoObject extends JsonSerializableObject {
+
+	public string|null $data = null;
+	public string|null $type = null;
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualEmailCollection.php b/shared/lib/People/Individual/IndividualEmailCollection.php
new file mode 100644
index 0000000..1ee18d1
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualEmailCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualEmailCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualEmailObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualEmailObject.php b/shared/lib/People/Individual/IndividualEmailObject.php
new file mode 100644
index 0000000..e9b9226
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualEmailObject.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualEmailObject extends JsonSerializableObject {
+
+	public string|null $address = null;
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualLanguageCollection.php b/shared/lib/People/Individual/IndividualLanguageCollection.php
new file mode 100644
index 0000000..ca596ab
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualLanguageCollection.php
@@ -0,0 +1,18 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualLanguageCollection extends JsonSerializableCollection {
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualLanguageObject::class);
+	}
+}
diff --git a/shared/lib/People/Individual/IndividualLanguageObject.php b/shared/lib/People/Individual/IndividualLanguageObject.php
new file mode 100644
index 0000000..a1fbc93
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualLanguageObject.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualLanguageObject extends JsonSerializableObject {
+
+	public string|null $Data = null;
+	
+	public string|null $Id = null;
+	public int|null $Priority = null;
+	public string|null $Context = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualMediaCollection.php b/shared/lib/People/Individual/IndividualMediaCollection.php
new file mode 100644
index 0000000..ca49666
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualMediaCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualMediaCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualMediaObject::class, 'string');
+	}
+	
+}
\ No newline at end of file
diff --git a/shared/lib/People/Individual/IndividualMediaObject.php b/shared/lib/People/Individual/IndividualMediaObject.php
new file mode 100644
index 0000000..0f226dd
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualMediaObject.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualMediaObject extends JsonSerializableObject {
+
+	public string $type = 'Media';
+	public string $kind;
+	public string $uri;
+	public string|null $mediaType = null;
+	public array|null $contexts = null;
+	public int|null $pref = null;
+	public string|null $label = null;
+
+}
\ No newline at end of file
diff --git a/shared/lib/People/Individual/IndividualNameObject.php b/shared/lib/People/Individual/IndividualNameObject.php
new file mode 100644
index 0000000..d134abe
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualNameObject.php
@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualNameObject extends JsonSerializableObject {
+
+	public string|null $family = null;
+	public string|null $given = null;
+	public string|null $additional = null;
+	public string|null $prefix = null;
+	public string|null $suffix = null;
+	public string|null $phoneticFamily = null;
+	public string|null $phoneticGiven = null;
+	public string|null $phoneticAdditional = null;
+	public IndividualAliasCollection $aliases;
+
+	public function __construct() {
+		$this->aliases = new IndividualAliasCollection();
+	}
+
+}
diff --git a/shared/lib/People/Individual/IndividualNoteCollection.php b/shared/lib/People/Individual/IndividualNoteCollection.php
new file mode 100644
index 0000000..2138aa9
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualNoteCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualNoteCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualNoteObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualNoteObject.php b/shared/lib/People/Individual/IndividualNoteObject.php
new file mode 100644
index 0000000..efd9c46
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualNoteObject.php
@@ -0,0 +1,25 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use DateTimeInterface;
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualNoteObject extends JsonSerializableObject {
+
+	public string|null $content = null;
+	public DateTimeInterface|null $date = null;
+	public string|null $authorUri = null;
+	public string|null $authorName = null;
+	
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualObject.php b/shared/lib/People/Individual/IndividualObject.php
new file mode 100644
index 0000000..55b5501
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualObject.php
@@ -0,0 +1,62 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use DateTimeInterface;
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualObject extends JsonSerializableObject {
+
+	// Meta Information
+	public string $type = 'individual';
+	public int $version = 1;
+	public string|null $urid = null;
+	public ?DateTimeInterface $created = null;
+	public ?DateTimeInterface $modified = null;
+	// Personal Information
+	public string|null $label = null;
+	public IndividualNameObject $names;
+	public IndividualTitleCollection $titles;
+	public IndividualAnniversaryCollection $anniversaries;
+	// Location Information
+	public IndividualPhysicalLocationCollection $physicalLocations;
+	// Communication Information
+	public IndividualPhoneCollection $phones;
+	public IndividualEmailCollection $emails;
+	public IndividualVirtualLocationCollection $virtualLocations;
+	// Media Information
+	public IndividualMediaCollection $media;
+	// Organizations Information
+	public IndividualOrganizationCollection $organizations;
+	// Organizational Information
+	public IndividualTagCollection $tags;
+	public IndividualNoteCollection $notes;
+	// Localization Information
+	public string|null $language = null;
+	public IndividualLanguageCollection $languages;
+	// Other Information
+	public IndividualCryptoCollection $crypto;
+	
+	public function __construct() {
+		$this->names = new IndividualNameObject();
+		$this->anniversaries = new IndividualAnniversaryCollection();
+		$this->phones = new IndividualPhoneCollection();
+		$this->emails = new IndividualEmailCollection();
+		$this->physicalLocations = new IndividualPhysicalLocationCollection();
+		$this->organizations = new IndividualOrganizationCollection();
+		$this->titles = new IndividualTitleCollection();
+		$this->tags = new IndividualTagCollection();
+		$this->notes = new IndividualNoteCollection();
+		$this->crypto = new IndividualCryptoCollection();
+		$this->virtualLocations = new IndividualVirtualLocationCollection();
+		$this->media = new IndividualMediaCollection();
+	}
+
+}
diff --git a/shared/lib/People/Individual/IndividualOrganizationCollection.php b/shared/lib/People/Individual/IndividualOrganizationCollection.php
new file mode 100644
index 0000000..fc51b67
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualOrganizationCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualOrganizationCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualOrganizationObject::class, 'string');
+	}
+
+}
diff --git a/shared/lib/People/Individual/IndividualOrganizationObject.php b/shared/lib/People/Individual/IndividualOrganizationObject.php
new file mode 100644
index 0000000..f5aaad3
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualOrganizationObject.php
@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+use OCA\JMAPC\Objects\BaseStringCollection;
+
+class IndividualOrganizationObject extends JsonSerializableObject {
+
+	public string|null $Label;
+	public BaseStringCollection $Units;
+
+	public string|null $sortName = null;
+
+	public string|null $context = null;
+	public int|null $priority = null;
+
+	public function __construct() {
+		$this->units = new BaseStringCollection();
+	}
+
+}
diff --git a/shared/lib/People/Individual/IndividualPhoneCollection.php b/shared/lib/People/Individual/IndividualPhoneCollection.php
new file mode 100644
index 0000000..342059b
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualPhoneCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualPhoneCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualPhoneObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualPhoneObject.php b/shared/lib/People/Individual/IndividualPhoneObject.php
new file mode 100644
index 0000000..8ada8bf
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualPhoneObject.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualPhoneObject extends JsonSerializableObject {
+
+	public string|null $number = null;
+	
+	public string|null $label = null;
+	public string|null $context = null;
+	public int|null $priority = null;
+}
diff --git a/shared/lib/People/Individual/IndividualPhysicalLocationCollection.php b/shared/lib/People/Individual/IndividualPhysicalLocationCollection.php
new file mode 100644
index 0000000..dc3459a
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualPhysicalLocationCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualPhysicalLocationCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualPhysicalLocationObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualPhysicalLocationObject.php b/shared/lib/People/Individual/IndividualPhysicalLocationObject.php
new file mode 100644
index 0000000..56f3926
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualPhysicalLocationObject.php
@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualPhysicalLocationObject extends JsonSerializableObject {
+
+	public string|null $box = null;
+	public string|null $unit = null;
+	public string|null $street = null;
+	public string|null $locality = null;
+	public string|null $region = null;
+	public string|null $code = null;
+	public string|null $country = null;
+
+	public string|null $label = null;
+	public string|null $coordinates = null;
+	public string|null $timeZone = null;
+
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualPronounCollection.php b/shared/lib/People/Individual/IndividualPronounCollection.php
new file mode 100644
index 0000000..d7366c8
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualPronounCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualPronounCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualPronounObject::class);
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualPronounObject.php b/shared/lib/People/Individual/IndividualPronounObject.php
new file mode 100644
index 0000000..c1392ae
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualPronounObject.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualPronounObject extends JsonSerializableObject {
+	
+	public string|null $pronoun = null;
+	
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualTagCollection.php b/shared/lib/People/Individual/IndividualTagCollection.php
new file mode 100644
index 0000000..56e7b08
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualTagCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualTagCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualTitleCollection.php b/shared/lib/People/Individual/IndividualTitleCollection.php
new file mode 100644
index 0000000..2c0c0cb
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualTitleCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualTitleCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualTitleObject::class, 'string');
+	}
+	
+}
diff --git a/shared/lib/People/Individual/IndividualTitleObject.php b/shared/lib/People/Individual/IndividualTitleObject.php
new file mode 100644
index 0000000..28c75c4
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualTitleObject.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualTitleObject extends JsonSerializableObject {
+
+	public IndividualTitleTypes|null $kind = null;
+	public string|null $label = null;	
+	public string|null $relation = null;
+	
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Individual/IndividualTitleTypes.php b/shared/lib/People/Individual/IndividualTitleTypes.php
new file mode 100644
index 0000000..7690c64
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualTitleTypes.php
@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+enum IndividualTitleTypes: string {
+	case Title = 't';
+	case Role = 'r';
+}
diff --git a/shared/lib/People/Individual/IndividualVirtualLocationCollection.php b/shared/lib/People/Individual/IndividualVirtualLocationCollection.php
new file mode 100644
index 0000000..9df4fc5
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualVirtualLocationCollection.php
@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableCollection;
+
+class IndividualVirtualLocationCollection extends JsonSerializableCollection {
+
+	public function __construct(array $data = []) {
+		parent::__construct($data, IndividualVirtualLocationObject::class, 'string');
+	}	
+
+}
diff --git a/shared/lib/People/Individual/IndividualVirtualLocationObject.php b/shared/lib/People/Individual/IndividualVirtualLocationObject.php
new file mode 100644
index 0000000..76cfa0a
--- /dev/null
+++ b/shared/lib/People/Individual/IndividualVirtualLocationObject.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Entity\Individual;
+
+use KTXF\Json\JsonSerializableObject;
+
+class IndividualVirtualLocationObject extends JsonSerializableObject {
+
+	public string|null $location = null;
+	
+	public string|null $label = null;
+	public string|null $context = null;
+	public int|null $priority = null;
+
+}
diff --git a/shared/lib/People/Provider/IProviderBase.php b/shared/lib/People/Provider/IProviderBase.php
new file mode 100644
index 0000000..5f778af
--- /dev/null
+++ b/shared/lib/People/Provider/IProviderBase.php
@@ -0,0 +1,96 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Provider;
+
+use JsonSerializable;
+use KTXF\People\Service\IServiceBase;
+
+interface IProviderBase extends JsonSerializable {
+
+	public const CAPABILITY_SERVICE_LIST = 'ServiceList';
+	public const CAPABILITY_SERVICE_FETCH = 'ServiceFetch';
+	public const CAPABILITY_SERVICE_EXTANT = 'ServiceExtant';
+
+	public const JSON_TYPE = 'people.provider';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+
+	/**
+	 * Confirms if specific capability is supported (e.g. 'ServiceList')
+	 *
+	 * @since 2025.05.01
+	 */
+	public function capable(string $value): bool;
+
+	/**
+	 * Lists all supported capabilities
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string,bool>
+	 */
+	public function capabilities(): array;
+
+	/**
+	 * An arbitrary unique text string identifying this provider (e.g. UUID or 'system' or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string;
+
+	/**
+	 * The localized human friendly name of this provider (e.g. System Contacts Provider)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function label(): string;
+
+	/**
+	 * Retrieve collection of services for a specific user
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param array $filter filter criteria
+	 *
+	 * @return array<string,IServiceBase> collection of service objects
+	 */
+	public function serviceList(string $tenantId, string $userId, array $filter): array;
+
+	/**
+	 * Determine if any services are configured for a specific user
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param int|string ...$identifiers variadic collection of service identifiers
+	 * 
+	 * @return array<string,bool> collection of service identifiers with boolean values indicating if the service is available
+	 */
+	public function serviceExtant(string $tenantId, string $userId, int|string ...$identifiers): array;
+
+	/**
+	 * Retrieve a service with a specific identifier
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $tenantId tenant identifier
+	 * @param string $userId user identifier
+	 * @param string|int $identifier service identifier
+	 *
+	 * @return IServiceBase|null returns service object or null if non found
+	 */
+	public function serviceFetch(string $tenantId, string $userId, string|int $identifier): ?IServiceBase;
+
+}
diff --git a/shared/lib/People/Provider/IProviderServiceMutate.php b/shared/lib/People/Provider/IProviderServiceMutate.php
new file mode 100644
index 0000000..e128c96
--- /dev/null
+++ b/shared/lib/People/Provider/IProviderServiceMutate.php
@@ -0,0 +1,69 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Provider;
+
+use KTXF\Json\JsonDeserializable;
+use KTXF\People\Service\IServiceBase;
+
+interface IProviderServiceMutate extends JsonDeserializable {
+
+	public const CAPABILITY_SERVICE_FRESH = 'ServiceFresh';
+	public const CAPABILITY_SERVICE_CREATE = 'ServiceCreate';
+	public const CAPABILITY_SERVICE_UPDATE = 'ServiceUpdate';
+	public const CAPABILITY_SERVICE_DESTROY = 'ServiceDestroy';
+
+	/**
+	 * construct and new blank service instance
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string $userId user identifier
+	 * 
+	 * @return IServiceBase
+	 */
+	public function serviceFresh(string $userId = ''): IServiceBase;
+
+	/**
+	 * create a service configuration for a specific user
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string $userId user identifier
+	 * @param IServiceBase $service service instance
+	 * 
+	 * @return string
+	 */
+	public function serviceCreate(string $userId, IServiceBase $service): string;
+
+	/**
+	 * modify a service configuration for a specific user
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string $userId user identifier
+	 * @param IServiceBase $service service instance
+	 * 
+	 * @return string
+	 */
+	public function serviceModify(string $userId, IServiceBase $service): string;
+
+	/**
+	 * delete a service configuration for a specific user
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string $userId user identifier
+	 * @param IServiceBase $service service instance
+	 * 
+	 * @return bool
+	 */
+	public function serviceDestroy(string $userId, IServiceBase $service): bool;
+
+}
diff --git a/shared/lib/People/Service/IServiceBase.php b/shared/lib/People/Service/IServiceBase.php
new file mode 100644
index 0000000..fe8901d
--- /dev/null
+++ b/shared/lib/People/Service/IServiceBase.php
@@ -0,0 +1,221 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Service;
+
+use JsonSerializable;
+use KTXF\People\Collection\ICollectionBase;
+use KTXF\Resource\Filter\IFilter;
+use KTXF\Resource\Range\IRange;
+use KTXF\Resource\Range\RangeType;
+use KTXF\Resource\Sort\ISort;
+
+interface IServiceBase extends JsonSerializable {
+
+	public const CAPABILITY_COLLECTION_LIST = 'CollectionList';
+	public const CAPABILITY_COLLECTION_LIST_FILTER = 'CollectionListFilter';
+	public const CAPABILITY_COLLECTION_LIST_SORT = 'CollectionListSort';
+	public const CAPABILITY_COLLECTION_EXTANT = 'CollectionExtant';
+	public const CAPABILITY_COLLECTION_FETCH = 'CollectionFetch';
+
+	public const CAPABILITY_ENTITY_LIST = 'EntityList';
+	public const CAPABILITY_ENTITY_LIST_FILTER = 'EntityListFilter';
+	public const CAPABILITY_ENTITY_LIST_SORT = 'EntityListSort';
+	public const CAPABILITY_ENTITY_LIST_RANGE = 'EntityListRange';
+	public const CAPABILITY_ENTITY_DELTA = 'EntityDelta';
+	public const CAPABILITY_ENTITY_EXTANT = 'EntityExtant';
+	public const CAPABILITY_ENTITY_FETCH = 'EntityFetch';
+
+	public const JSON_TYPE = 'people.service';
+	public const JSON_PROPERTY_TYPE = '@type';
+	public const JSON_PROPERTY_PROVIDER = 'provider';
+	public const JSON_PROPERTY_ID = 'id';
+	public const JSON_PROPERTY_LABEL = 'label';
+	public const JSON_PROPERTY_CAPABILITIES = 'capabilities';
+	public const JSON_PROPERTY_ENABLED = 'enabled';
+
+	/**
+	 * Confirms if specific capability is supported
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string $value required ability e.g. 'EntityList'
+	 *
+	 * @return bool
+	 */
+	public function capable(string $value): bool;
+
+	/**
+	 * Lists all supported capabilities
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string,bool>
+	 */
+	public function capabilities(): array;
+
+	/**
+	 * Unique identifier of the provider this service belongs to
+	 *
+	 * @since 2025.05.01
+	 */
+	public function in(): string;
+
+	/**
+	 * Unique arbitrary text string identifying this service (e.g. 1 or service1 or anything else)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function id(): string|int;
+
+	/**
+	 * Gets the localized human friendly name of this service (e.g. ACME Company Mail Service)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getLabel(): string;
+
+	/**
+	 * Gets the active status of this service
+	 *
+	 * @since 2025.05.01
+	 */
+	public function getEnabled(): bool;
+
+	/**
+	 * List of accessible collection
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @return array<string|int,ICollectionBase>
+	 */
+	public function collectionList(?IFilter $filter = null, ?ISort $sort = null): array;
+
+	/**
+	 * Fresh filter for collection list
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @return IFilter
+	 */
+	public function collectionListFilter(): IFilter;
+
+	/**
+	 * Fresh sort for collection list
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @return ISort
+	 */
+	public function collectionListSort(): ISort;
+
+	/**
+	 * Fetches details about a specific collection
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string|int $id collection identifier
+	 */
+	public function collectionExtant(string|int $identifier): bool;
+
+	/**
+	 * Fetches details about a specific collection
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string|int $identifier collection identifier
+	 */
+	public function collectionFetch(string|int $identifier): ?ICollectionBase;
+
+	/**
+	 * Lists all entities in a specific collection
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string|int $collection collection identifier
+	 * 
+	 * @return array<string|int,IEntityBase>
+	 */
+	public function entityList(string|int $collection, ?IFilter $filter = null, ?ISort $sort = null, ?IRange $range = null, ?array $elements = null): array;
+
+	/**
+	 * Fresh filter for entity list
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return Filter
+	 */
+	public function entityListFilter(): IFilter;
+
+	/**
+	 * Fresh sort for entity list
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @return ISort
+	 */
+	public function entityListSort(): ISort;
+
+	/**
+	 * Fresh range for entity list
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param RangeType $type range type
+	 * 
+	 * @return IRange
+	 */
+	public function entityListRange(RangeType $type): IRange;
+
+	/**
+	 * Lists of all changes from a specific token
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string|int $collection collection identifier
+	 * @param string $signature token signature
+	 * @param string $detail detail level ids | meta | full
+	 * 
+	 * @return array
+	 * 
+	 * [
+	 * 	'added' => array<string|int>,
+	 * 	'updated' => array<string|int>,
+	 * 	'deleted' => array<string|int>,
+	 * 	'signature' => string
+	 * ]
+	 * 
+	 */
+	public function entityDelta(string|int $collection, string $signature, string $detail = 'ids'): array;
+
+	/**
+	 * Confirms if specific entity exists in a collection
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string|int $collection collection identifier
+	 * @param string|int ...$identifiers list of entity identifiers
+	 * 
+	 * @return array<string|int,bool>
+	 */
+	public function entityExtant(string|int $collection, string|int ...$identifiers): array;
+
+	/**
+	 * Fetches details about a specific entities in a collection
+	 *
+	 * @since 2025.05.01
+	 * 
+	 * @param string|int $collection collection identifier
+	 * @param string|int ...$identifiers entity identifier
+	 * 
+	 * @return array<string|int,IEntityBase>
+	 */
+	public function entityFetch(string|int $collection, string|int ...$identifiers): array;
+
+}
diff --git a/shared/lib/People/Service/IServiceCollectionMutable.php b/shared/lib/People/Service/IServiceCollectionMutable.php
new file mode 100644
index 0000000..84fe128
--- /dev/null
+++ b/shared/lib/People/Service/IServiceCollectionMutable.php
@@ -0,0 +1,79 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Service;
+
+use KTXF\People\Collection\ICollectionBase;
+use KTXF\People\Collection\ICollectionMutable;
+
+interface IServiceCollectionMutable extends IServiceBase {
+
+	public const CAPABILITY_COLLECTION_CREATE = 'CollectionCreate';
+	public const CAPABILITY_COLLECTION_MODIFY = 'CollectionModify';
+	public const CAPABILITY_COLLECTION_DESTROY = 'CollectionDestroy';
+	public const CAPABILITY_COLLECTION_MOVE = 'CollectionMove';
+
+	/**
+	 * Creates a new, empty collection object
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return ICollectionMutable
+	 */
+	public function collectionFresh(): ICollectionMutable;
+
+	/**
+	 * Creates a new collection at the specified location
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $location The parent collection to create this collection in, or empty string for root
+	 * @param ICollectionMutable $collection The collection to create
+	 * @param array $options Additional options for the collection creation
+	 *
+	 * @return ICollectionBase
+	 * 
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionCreate(string|int $location, ICollectionMutable $collection, array $options): ICollectionBase;
+
+	/**
+	 * Modifies an existing collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $identifier The ID of the collection to modify
+	 * @param ICollectionMutable $collection The collection with modifications
+	 *
+	 * @return ICollectionBase
+	 * 
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionModify(string|int $identifier, ICollectionMutable $collection): ICollectionBase;
+
+	/**
+	 * Destroys an existing collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $identifier The ID of the collection to destroy
+	 *
+	 * @return bool
+	 * 
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function collectionDestroy(string|int $identifier): bool;
+
+}
diff --git a/shared/lib/People/Service/IServiceEntityMutable.php b/shared/lib/People/Service/IServiceEntityMutable.php
new file mode 100644
index 0000000..b80f840
--- /dev/null
+++ b/shared/lib/People/Service/IServiceEntityMutable.php
@@ -0,0 +1,82 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Service;
+
+use KTXF\People\Entity\IEntityBase;
+use KTXF\People\Entity\IEntityMutable;
+
+interface IServiceEntityMutable extends IServiceBase {
+
+	public const CAPABILITY_ENTITY_CREATE = 'EntityCreate';
+	public const CAPABILITY_ENTITY_MODIFY = 'EntityModify';
+	public const CAPABILITY_ENTITY_DESTROY = 'EntityDestroy';
+	public const CAPABILITY_ENTITY_COPY = 'EntityCopy';
+	public const CAPABILITY_ENTITY_MOVE = 'EntityMove';
+
+	/**
+	 * Creates a fresh entity of the specified type
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return IEntityMutable
+	 */
+	public function entityFresh(): IEntityMutable;
+
+	/**
+	 * Creates a new entity in the specified collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $collection The collection to create this entity in
+	 * @param IEntityMutable $entity The entity to create
+	 * @param array $options Additional options for the entity creation
+	 *
+	 * @return IEntityMutable
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityCreate(string|int $collection, IEntityMutable $entity, array $options): IEntityMutable;
+
+	/**
+	 * Modifies an existing entity in the specified collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $collection The collection containing the entity to modify
+	 * @param string|int $identifier The ID of the entity to modify
+	 * @param IEntityMutable $entity The entity with modifications
+	 *
+	 * @return IEntityMutable
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityModify(string|int $collection, string|int $identifier, IEntityMutable $entity): IEntityMutable;
+
+	/**
+	 * Destroys an existing entity in the specified collection
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param string|int $collection The collection containing the entity to destroy
+	 * @param string|int $identifier The ID of the entity to destroy
+	 *
+	 * @return bool
+	 *
+	 * @throws \KTXF\Resource\Exceptions\InvalidArgumentException
+	 * @throws \KTXF\Resource\Exceptions\UnsupportedException
+	 * @throws \KTXF\Resource\Exceptions\UnauthorizedException
+	 */
+	public function entityDestroy(string|int $collection, string|int $identifier): IEntityBase;
+
+}
diff --git a/shared/lib/People/Service/IServiceMutable.php b/shared/lib/People/Service/IServiceMutable.php
new file mode 100644
index 0000000..f35c8a9
--- /dev/null
+++ b/shared/lib/People/Service/IServiceMutable.php
@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\People\Service;
+
+use KTXF\Json\JsonDeserializable;
+
+interface IServiceMutable extends IServiceBase, JsonDeserializable {
+
+	/**
+	 * Sets the localized human friendly name of this service (e.g. ACME Company Mail Service)
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setLabel(string $value): self;
+
+	/**
+	 * Sets the active status of this service
+	 *
+	 * @since 2025.05.01
+	 */
+	public function setEnabled(bool $value): self;
+
+}
diff --git a/shared/lib/Resource/Exceptions/InvalidParameterException.php b/shared/lib/Resource/Exceptions/InvalidParameterException.php
new file mode 100644
index 0000000..ecf90ac
--- /dev/null
+++ b/shared/lib/Resource/Exceptions/InvalidParameterException.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace KTXF\Resource\Exceptions;
+
+use Exception;
+
+/**
+ * Exemption for unauthorized access
+ */
+class InvalidParameterException extends Exception {
+
+    /**
+     * @param string $message The exception message
+     * @param int $code The exception code
+     * @param Exception|null $previous The previous exception
+     */
+    public function __construct($message = "Invalid Parameter", $code = 0, ?Exception $previous = null) {
+        parent::__construct($message, $code, $previous);
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/Resource/Exceptions/UnauthorizedException.php b/shared/lib/Resource/Exceptions/UnauthorizedException.php
new file mode 100644
index 0000000..45de7d5
--- /dev/null
+++ b/shared/lib/Resource/Exceptions/UnauthorizedException.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace KTXF\Resource\Exceptions;
+
+use Exception;
+
+/**
+ * Exemption for unauthorized access
+ */
+class UnauthorizedException extends Exception {
+
+    /**
+     * @param string $message The exception message
+     * @param int $code The exception code
+     * @param Exception|null $previous The previous exception
+     */
+    public function __construct($message = "Unauthorized access", $code = 0, ?Exception $previous = null) {
+        parent::__construct($message, $code, $previous);
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/Resource/Exceptions/UnsupportedException.php b/shared/lib/Resource/Exceptions/UnsupportedException.php
new file mode 100644
index 0000000..fe94438
--- /dev/null
+++ b/shared/lib/Resource/Exceptions/UnsupportedException.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace KTXF\Resource\Exceptions;
+
+use Exception;
+
+/**
+ * Exemption for unauthorized access
+ */
+class UnsupportedException extends Exception {
+
+    /**
+     * @param string $message The exception message
+     * @param int $code The exception code
+     * @param Exception|null $previous The previous exception
+     */
+    public function __construct($message = "Function is not supported", $code = 0, ?Exception $previous = null) {
+        parent::__construct($message, $code, $previous);
+    }
+
+}
\ No newline at end of file
diff --git a/shared/lib/Resource/Filter/Filter.php b/shared/lib/Resource/Filter/Filter.php
new file mode 100644
index 0000000..4a4649a
--- /dev/null
+++ b/shared/lib/Resource/Filter/Filter.php
@@ -0,0 +1,129 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Filter;
+
+class Filter implements IFilter {
+
+	protected array $attributes = [];
+	protected array $conditions = [];
+
+	/**
+	 * Constructor
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @param array<string,string> $attributes List of attributes that can be used in the filter
+	 */
+	public function __construct(array $attributes) {
+		foreach ($attributes as $id => $value) {
+			// separate the value into components
+			[$type, $length, $comparatorDefault, $comparatorSupported] = explode(':', $value);
+			// validate the components
+			$this->attributes[$id]['type'] = match ($type) {
+				's' => 'string',
+				'i' => 'integer',
+				'b' => 'boolean',
+				'a' => 'array',
+				default => throw new \InvalidArgumentException("Invalid type '$type' for attribute '$id'."),
+			};
+			$this->attributes[$id]['length'] = (int)$length;
+			$this->attributes[$id]['comparatorDefault'] = FilterComparisonOperator::from((int)$comparatorDefault);
+			// comparatorSupported is a bitmask of supported comparators
+			if ($comparatorSupported !== '0') {
+				$comparators = FilterComparisonOperator::cases();
+				foreach ($comparators as $comparator) {
+					if (($comparatorSupported & $comparator->value) === $comparator->value) {
+						$this->attributes[$id]['comparatorSupported'][] = $comparator;
+					}
+				}
+			} else {
+				$this->attributes[$id]['comparatorSupported'] = [];
+			}
+		}
+	}
+
+	/**
+	 * List of attributes that can be used in the filter
+	 * 
+	 * @since 2025.05.01
+	 *
+	 * @return array<string>
+	 */
+	public function attributes(): array {
+		return $this->attributes;
+	}
+	
+	/**
+	 * List of comparison operators that can be used in the filter
+	 *
+	 * @since 2025.05.01
+	 */
+	public function comparators(): string {
+		return FilterComparisonOperator::class;
+	}
+
+	/**
+	 * List of conjunction operators that can be used in the filter
+	 * 
+	 * @since 2025.05.01
+	 */
+	public function conjunctions(): string {
+		return FilterConjunctionOperator::class;
+	}
+
+	/**
+	 * Define a condition for the filter
+	 *
+	 * @since 2025.05.01
+	 */
+	public function condition(string $attribute, mixed $value, ?FilterComparisonOperator $comparator = null, ?FilterConjunctionOperator $conjunction = null): void {
+		// check if the attribute is defined in the filter
+		if (!isset($this->attributes[$attribute])) {
+			throw new \InvalidArgumentException("Attribute '$attribute' is not defined in the filter");
+		}
+		// check if comparator is valid and supported for the attribute
+		if ($comparator === null) {
+			$comparator = $this->attributes[$attribute]['comparatorDefault'];
+		}
+		if (!in_array($comparator, $this->attributes[$attribute]['comparatorSupported'], true)) {
+			throw new \InvalidArgumentException("Comparator '$comparator' is not supported for attribute '$attribute'");
+		}
+		// check if the value type is valid for the attribute
+		if ($this->attributes[$attribute]['type'] !== gettype($value)) {
+			throw new \InvalidArgumentException("Value for attribute '$attribute' must be of type '" . $this->attributes[$attribute]['type'] . "'");
+		}
+		// check if the value length is within the defined limit
+		if ($this->attributes[$attribute]['type'] === 'array' && $this->attributes[$attribute]['length'] <= count($value)) {
+			throw new \InvalidArgumentException("Value for attribute '$attribute' exceeds the maximum length of " . $this->attributes[$attribute]['length'] . " items");
+		}
+		if ($this->attributes[$attribute]['type'] === 'string' && $this->attributes[$attribute]['length'] <= mb_strlen($value)) {
+			throw new \InvalidArgumentException("Value for attribute '$attribute' exceeds the maximum length of " . $this->attributes[$attribute]['length'] . " characters");
+		}
+		
+		$this->conditions[$attribute] = [
+			'attribute' => $attribute,
+			'value' => $value,
+			'comparator' => $comparator,
+			'conjunction' => $conjunction,
+		];
+	}
+
+	/**
+	 * List of defined conditions
+	 *
+	 * @since 2025.05.01
+	 *
+	 * @return array<string, array{attribute:string, value:mixed, comparator:FilterComparisonOperator, conjunction:FilterConjunctionOperator}>
+	 */
+	public function conditions(): array {
+		return $this->conditions;
+	}
+
+}
diff --git a/shared/lib/Resource/Filter/FilterComparisonOperator.php b/shared/lib/Resource/Filter/FilterComparisonOperator.php
new file mode 100644
index 0000000..1e3f4ca
--- /dev/null
+++ b/shared/lib/Resource/Filter/FilterComparisonOperator.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Filter;
+
+enum FilterComparisonOperator: int {
+	case EQ = 1;
+	case NEQ = 2;
+	case GT = 4;
+	case LT = 8;
+	case GTE = 16;
+	case LTE = 32;
+	case IN = 64;
+	case NIN = 128;
+	case LIKE = 256;
+	case NLIKE = 512;
+}
diff --git a/shared/lib/Resource/Filter/FilterConjunctionOperator.php b/shared/lib/Resource/Filter/FilterConjunctionOperator.php
new file mode 100644
index 0000000..2dc4243
--- /dev/null
+++ b/shared/lib/Resource/Filter/FilterConjunctionOperator.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Filter;
+
+enum FilterConjunctionOperator: string {
+	case NONE = '';
+	case AND = 'AND';
+	case OR = 'OR';
+}
diff --git a/shared/lib/Resource/Filter/IFilter.php b/shared/lib/Resource/Filter/IFilter.php
new file mode 100644
index 0000000..7d1b861
--- /dev/null
+++ b/shared/lib/Resource/Filter/IFilter.php
@@ -0,0 +1,53 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Filter;
+
+interface IFilter {
+
+	/**
+	 * List of attributes that can be used in the filter
+	 * 
+	 * @since 2025.05.01
+	 *
+	 * @return array<string>
+	 */
+	public function attributes(): array;
+
+	/**
+	 * List of comparison operators that can be used in the filter
+	 * 
+	 * @since 2025.05.01
+	 */
+	public function comparators(): string;
+
+	/**
+	 * List of conjunction operators that can be used in the filter
+	 *
+	 * @since 2025.05.01
+	 */
+	public function conjunctions(): string;
+
+	/**
+	 * Define a filter condition
+	 *
+	 * @since 2025.05.01
+	 */
+	public function condition(string $property, mixed $value, ?FilterComparisonOperator $comparator = null, ?FilterConjunctionOperator $conjunction = null): void;
+
+	/**
+	 * list of defined conditions
+	 * 
+	 * @since 2025.05.01
+	 *
+	 * @return array<int, array{attribute:string, value:mixed, comparator:FilterComparisonOperator, conjunction:FilterConjunctionOperator}>
+	 */
+	public function conditions(): array;
+
+}
diff --git a/shared/lib/Resource/Provider/ProviderInterface.php b/shared/lib/Resource/Provider/ProviderInterface.php
new file mode 100644
index 0000000..66027d5
--- /dev/null
+++ b/shared/lib/Resource/Provider/ProviderInterface.php
@@ -0,0 +1,44 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Resource\Provider;
+
+/**
+ * Resource Provider Interface
+ */
+interface ProviderInterface
+{
+
+    public const TYPE_AUTHENTICATION = 'authentication';
+    public const TYPE_PEOPLE = 'people';
+    public const TYPE_CHRONO = 'chrono';
+    public const TYPE_FILES = 'files';
+    public const TYPE_MAIL = 'mail';
+
+    /**
+     * Provider type (e.g., 'authentication', 'storage', 'notification')
+     */
+    public function type(): string;
+
+    /**
+     * Unique identifier for this provider instance (e.g., UUID or 'password-auth')
+     */
+    public function identifier(): string;
+
+    /**
+     * Human-friendly name (e.g., 'Password Authentication Provider', 'S3 Storage Provider')
+     */
+    public function label(): string;
+
+    /**
+     * human-friendly description of this provider's functionality
+     */
+    public function description(): string;
+
+    /**
+     * Icon representing this provider (e.g., FontAwesome class)
+     */
+    public function icon(): string;
+
+}
diff --git a/shared/lib/Resource/Range/IRange.php b/shared/lib/Resource/Range/IRange.php
new file mode 100644
index 0000000..4d3596a
--- /dev/null
+++ b/shared/lib/Resource/Range/IRange.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+interface IRange {
+
+	/**
+	 * Gets the type of this range
+	 * 
+	 * @since 1.0.0
+	 */
+	public function type(): RangeType;
+
+}
diff --git a/shared/lib/Resource/Range/IRangeDate.php b/shared/lib/Resource/Range/IRangeDate.php
new file mode 100644
index 0000000..c9b221f
--- /dev/null
+++ b/shared/lib/Resource/Range/IRangeDate.php
@@ -0,0 +1,40 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+use DateTimeInterface;
+
+interface IRangeDate extends IRange {
+
+	/**
+	 *
+	 * @since 1.0.0
+	 */
+	public function getStart(): DateTimeInterface;
+
+	/**
+	 *
+	 * @since 1.0.0
+	 */
+	public function setStart(DateTimeInterface $value): void;
+
+	/**
+	 *
+	 * @since 1.0.0
+	 */
+	public function getEnd(): DateTimeInterface;
+
+	/**
+	 *
+	 * @since 1.0.0
+	 */
+	public function setEnd(DateTimeInterface $value): void;
+
+}
diff --git a/shared/lib/Resource/Range/IRangeTally.php b/shared/lib/Resource/Range/IRangeTally.php
new file mode 100644
index 0000000..b26abfa
--- /dev/null
+++ b/shared/lib/Resource/Range/IRangeTally.php
@@ -0,0 +1,56 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+interface IRangeTally extends IRange {
+
+	/**
+	 * Gets the anchor type of the range
+	 * 
+	 * @since 1.0.0
+	 */
+	public function getAnchor(): RangeAnchorType;
+
+	/**
+	 * Sets the anchor type of the range
+	 * 
+	 * @since 1.0.0
+	 */
+	public function setAnchor(RangeAnchorType $value): void;
+
+	/**
+	 * Gets the start position of the range
+	 * 
+	 * @since 1.0.0
+	 */
+	public function getPosition(): string|int;
+
+	/**
+	 * Sets the start position of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setPosition(string|int $value): void;
+
+	/**
+	 * Gets the count of items in the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function getTally(): int;
+
+	/**
+	 * Sets the count of items in the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setTally(int $value): void;
+
+}
diff --git a/shared/lib/Resource/Range/Range.php b/shared/lib/Resource/Range/Range.php
new file mode 100644
index 0000000..49e38ac
--- /dev/null
+++ b/shared/lib/Resource/Range/Range.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+class Range implements IRange {
+
+	/**
+	 * Returns the type of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function type(): RangeType {
+		return RangeType::NONE;
+	}
+	
+}
diff --git a/shared/lib/Resource/Range/RangeAnchorType.php b/shared/lib/Resource/Range/RangeAnchorType.php
new file mode 100644
index 0000000..c6cb66f
--- /dev/null
+++ b/shared/lib/Resource/Range/RangeAnchorType.php
@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+enum RangeAnchorType: string {
+	case RELATIVE = 'relative'; // A relative anchor is used to indicate a starting position based on a record identifier
+	case ABSOLUTE = 'absolute'; // A absolute anchor is used to indicate a starting position based on record count
+}
diff --git a/shared/lib/Resource/Range/RangeDate.php b/shared/lib/Resource/Range/RangeDate.php
new file mode 100644
index 0000000..069049b
--- /dev/null
+++ b/shared/lib/Resource/Range/RangeDate.php
@@ -0,0 +1,65 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+use DateTime;
+use DateTimeInterface;
+
+class RangeDate extends Range implements IRangeDate {
+
+	protected DateTimeInterface $start;
+	protected DateTimeInterface $end;
+
+	/**
+	 * Returns the type of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function type(): RangeType {
+		return RangeType::DATE;
+	}
+	
+	/**
+	 * Gets the start date of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function getStart(): DateTimeInterface {
+		return $this->start;
+	}
+
+	/**
+	 * Sets the start date of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setStart(DateTimeInterface $value): void {
+		$this->start = $value;
+	}
+
+	/**
+	 * Gets the end date of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function getEnd(): DateTimeInterface {
+		return $this->end;
+	}
+
+	/**
+	 * Sets the end date of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setEnd(DateTimeInterface $value): void {
+		$this->end = $value;
+	}
+
+}
diff --git a/shared/lib/Resource/Range/RangeTally.php b/shared/lib/Resource/Range/RangeTally.php
new file mode 100644
index 0000000..4ce4e6d
--- /dev/null
+++ b/shared/lib/Resource/Range/RangeTally.php
@@ -0,0 +1,81 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+class RangeTally extends Range implements IRangeTally {
+
+	protected RangeAnchorType $anchor = RangeAnchorType::ABSOLUTE;
+	protected string|int $position = 0;
+	protected int $tally = 32;
+
+	/**
+	 * Returns the type of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function type(): RangeType {
+		return RangeType::TALLY;
+	}
+	
+	/**
+	 * Gets the anchor type of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function getAnchor(): RangeAnchorType {
+		return $this->anchor;
+	}
+
+	/**
+	 * Sets the anchor type of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setAnchor(RangeAnchorType $value): void {
+		$this->anchor = $value;
+	}
+
+	/**
+	 * Gets the start position of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function getPosition(): string|int {
+		return $this->position;
+	}
+
+	/**
+	 * Sets the start position of the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setPosition(string|int $value): void {
+		$this->position = $value;
+	}
+
+	/**
+	 * Gets the count of items in the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function getTally(): int {
+		return $this->tally;
+	}
+
+	/**
+	 * Sets the count of items in the range
+	 *
+	 * @since 1.0.0
+	 */
+	public function setTally(int $value): void {
+		$this->tally = $value;
+	}
+
+}
diff --git a/shared/lib/Resource/Range/RangeType.php b/shared/lib/Resource/Range/RangeType.php
new file mode 100644
index 0000000..7d4b6af
--- /dev/null
+++ b/shared/lib/Resource/Range/RangeType.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Range;
+
+enum RangeType: string {
+	case NONE = 'none';
+	case DATE = 'date';
+	case TALLY = 'tally';
+}
diff --git a/shared/lib/Resource/Selector/CollectionSelector.php b/shared/lib/Resource/Selector/CollectionSelector.php
new file mode 100644
index 0000000..d985f08
--- /dev/null
+++ b/shared/lib/Resource/Selector/CollectionSelector.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Selector;
+
+/**
+ * Collection-level selector
+ */
+class CollectionSelector extends SelectorAbstract {
+	
+	protected array $keyTypes = ['string', 'integer'];
+	protected array $valueTypes = ['boolean', EntitySelector::class];
+	protected string $nestedSelector = EntitySelector::class;
+	protected string $selectorName = 'CollectionSelector';
+
+}
diff --git a/shared/lib/Resource/Selector/EntitySelector.php b/shared/lib/Resource/Selector/EntitySelector.php
new file mode 100644
index 0000000..23ae89d
--- /dev/null
+++ b/shared/lib/Resource/Selector/EntitySelector.php
@@ -0,0 +1,46 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Selector;
+
+/**
+ * Entity-level selector (leaf node)
+ */
+class EntitySelector extends SelectorAbstract {
+
+	protected array $keyTypes = ['string', 'integer'];
+	protected array $valueTypes = ['boolean', 'array', 'string', 'integer'];
+	protected string $selectorName = 'EntitySelector';
+
+	public function append($value): void {
+		if (!is_string($value) && !is_int($value)) {
+			throw new \InvalidArgumentException('EntitySelector values must be string or int');
+		}
+		parent::append($value);
+	}
+
+	public function offsetSet($key, $value): void {
+		if ($key !== null && !is_int($key)) {
+			throw new \InvalidArgumentException('EntitySelector does not support associative keys');
+		}
+		if (!is_string($value) && !is_int($value)) {
+			throw new \InvalidArgumentException('EntitySelector values must be string or int');
+		}
+		parent::offsetSet($key, $value);
+	}
+
+	/**
+	 * Get all entity identifiers
+	 * @return array<string|int>
+	 */
+	public function identifiers(): array {
+		return $this->getArrayCopy();
+	}
+
+}
diff --git a/shared/lib/Resource/Selector/SelectorAbstract.php b/shared/lib/Resource/Selector/SelectorAbstract.php
new file mode 100644
index 0000000..143566d
--- /dev/null
+++ b/shared/lib/Resource/Selector/SelectorAbstract.php
@@ -0,0 +1,129 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Selector;
+
+use JsonSerializable;
+use KTXF\Json\JsonDeserializable;
+
+/**
+ * Abstract base class for all selector types
+ * Provides common functionality for hierarchical selectors
+ */
+abstract class SelectorAbstract extends \ArrayObject implements JsonSerializable, JsonDeserializable {
+	
+    protected const TYPE_STRING = 'string';
+	protected const TYPE_INT = 'int';
+	protected const TYPE_BOOL = 'bool';
+
+	/** @var array<mixed> Allowed key types: 'string', 'int' */
+	protected array $keyTypes = [];
+
+	/** @var array<mixed> Allowed scalar value types: 'string', 'int', 'bool' */
+	protected array $valueTypes = [];
+	
+	/** @var class-string selector class for nested structures */
+	protected string $nestedSelector = SelectorAbstract::class;
+	
+	/** @var string Human-readable name for this selector type */
+	protected string $selectorName = 'Selector';
+
+    /**
+	 * Serialize to JSON-compatible array
+	 * 
+	 * @return array
+	 */
+	public function jsonSerialize(): array {
+		$result = [];
+		foreach ($this as $key => $value) {
+			if ($value instanceof JsonSerializable) {
+				$result[$key] = $value->jsonSerialize();
+			} else {
+				$result[$key] = $value;
+			}
+		}
+		return $result;
+	}
+
+    /**
+     * Deserialize from JSON-compatible array
+     * @param array $data
+     * @return void
+     * @throws \InvalidArgumentException
+     */
+    public function jsonDeserialize(array|string $data): static {
+        if (is_string($data)) {
+            $data = json_decode($data, true);
+        }
+	    foreach ($data as $key => $value) {
+			if ($this->nestedSelector !== null && is_array($value)) {
+                $selector = new $this->nestedSelector();
+                $selector->jsonDeserialize($value);
+				$this->offsetSet($key, $selector);
+			} else {
+                $this->offsetSet($key, $value);
+			}
+		}
+
+		return $this;
+	}
+
+	/**
+	 * Validate if a key is of the correct type for this selector
+	 * 
+	 * @param mixed $key
+	 * @return bool
+	 */
+	protected function validateKey(mixed $key): bool {
+		return in_array(gettype($key), $this->keyTypes, true);
+	}
+
+	/**
+	 * Validate if a value is of the correct type for this selector
+	 * 
+	 * @param mixed $value
+	 * @return bool
+	 */
+	protected function validateValue(mixed $value): bool {
+        if ($this->nestedSelector !== null && $value instanceof $this->nestedSelector) {
+            return true;
+        }	
+		return in_array(gettype($value), $this->valueTypes, true);
+	}
+
+	/**
+	 * Override offsetSet to enforce type checking
+	 * 
+	 * @param mixed $key
+	 * @param mixed $value
+	 * @return void
+	 * @throws \InvalidArgumentException
+	 */
+    #[\Override]
+	public function offsetSet($key, $value): void {
+		if (!$this->validateKey($key)) {
+			throw new \InvalidArgumentException("{$this->selectorName} keys must be one of [" . implode(', ', $this->keyTypes) . "], got " . gettype($key));
+		}
+
+		if (!$this->validateValue($value)) {
+			throw new \InvalidArgumentException("{$this->selectorName} values must be one of [" . implode(', ', $this->valueTypes) . "], got " . gettype($value));
+		}
+		parent::offsetSet($key, $value);
+	}
+
+	/**
+	 * Get all identifiers (keys or values depending on selector type)
+	 * 
+	 * @return array
+	 */
+	public function identifiers(): array {
+		return array_keys($this->getArrayCopy());
+	}
+
+}
diff --git a/shared/lib/Resource/Selector/ServiceSelector.php b/shared/lib/Resource/Selector/ServiceSelector.php
new file mode 100644
index 0000000..7b0e2e6
--- /dev/null
+++ b/shared/lib/Resource/Selector/ServiceSelector.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Selector;
+
+/**
+ * Service-level selector
+ */
+class ServiceSelector extends SelectorAbstract {
+
+	protected array $keyTypes = ['string', 'int'];
+	protected array $valueTypes = ['boolean', CollectionSelector::class];
+	protected string $nestedSelector = CollectionSelector::class;
+	protected string $selectorName = 'CollectionSelector';
+
+}
diff --git a/shared/lib/Resource/Selector/SourceSelector.php b/shared/lib/Resource/Selector/SourceSelector.php
new file mode 100644
index 0000000..4c592e4
--- /dev/null
+++ b/shared/lib/Resource/Selector/SourceSelector.php
@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Selector;
+
+/**
+ * Top-level selector for sources
+ */
+class SourceSelector extends SelectorAbstract {
+
+	protected array $keyTypes = ['string'];
+	protected array $valueTypes = ['boolean', ServiceSelector::class];
+	protected string $nestedSelector = ServiceSelector::class;
+	protected string $selectorName = 'ProviderSelector';
+
+}
diff --git a/shared/lib/Resource/Sort/ISort.php b/shared/lib/Resource/Sort/ISort.php
new file mode 100644
index 0000000..6af666d
--- /dev/null
+++ b/shared/lib/Resource/Sort/ISort.php
@@ -0,0 +1,42 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Sort;
+
+interface ISort {
+	
+	/**
+	 * List of available attributes
+	 * 
+	 * @since 1.0.0
+	 *
+	 * @return array<string,bool>
+	 */
+	public function attributes(): array;
+
+	/**
+	 * Define sort condition
+	 * 
+	 * @since 1.0.0
+	 * 
+	 * @param string $attribute attribute name
+	 * @param bool $direction true for ascending, false for descending
+	 */
+	public function condition(string $property, bool $direction): void;
+
+	/**
+	 * List of sort conditions
+	 * 
+	 * @since 1.0.0
+	 *
+	 * @return array<string,array{attribute:string,direction:bool}>
+	 */
+	public function conditions(): array;
+
+}
diff --git a/shared/lib/Resource/Sort/Sort.php b/shared/lib/Resource/Sort/Sort.php
new file mode 100644
index 0000000..f2023b9
--- /dev/null
+++ b/shared/lib/Resource/Sort/Sort.php
@@ -0,0 +1,57 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Resource\Sort;
+
+class Sort implements ISort {
+
+	protected array $attributes = [];
+	protected array $conditions = [];
+
+	public function __construct(array $attributes) {
+		$this->attributes = $attributes;
+	}
+
+	/**
+	 *
+	 * @since 1.0.0
+	 *
+	 * @return array<string,bool>
+	 */
+	public function attributes(): array {
+		return $this->attributes;
+	}
+
+	/**
+	 *
+	 * @since 1.0.0
+	 * 
+	 * @param string $attribute attribute name
+	 * @param bool $direction true for ascending, false for descending
+	 */
+	public function condition(string $attribute, bool $direction): void {
+		if (isset($this->attributes[$attribute])) {
+			$this->conditions[$attribute] = [
+				'attribute' => $attribute,
+				'direction' => $direction,
+			];
+		}
+	}
+
+	/**
+	 *
+	 * @since 1.0.0
+	 *
+	 * @return array<string,array{attribute:string, direction:bool}>
+	 */
+	public function conditions(): array {
+		return $this->conditions;
+	}
+
+}
diff --git a/shared/lib/Routing/Attributes/AnonymousRoute.php b/shared/lib/Routing/Attributes/AnonymousRoute.php
new file mode 100644
index 0000000..7cb67ba
--- /dev/null
+++ b/shared/lib/Routing/Attributes/AnonymousRoute.php
@@ -0,0 +1,15 @@
+<?php
+
+namespace KTXF\Routing\Attributes;
+
+use Attribute;
+
+#[Attribute(Attribute::TARGET_METHOD | Attribute::TARGET_CLASS)]
+class AnonymousRoute
+{
+    public function __construct(
+        public readonly string $path,
+        public readonly string $name,
+        public readonly array $methods = ['GET'],
+    ) {}
+}
diff --git a/shared/lib/Routing/Attributes/AuthenticatedRoute.php b/shared/lib/Routing/Attributes/AuthenticatedRoute.php
new file mode 100644
index 0000000..1f37e42
--- /dev/null
+++ b/shared/lib/Routing/Attributes/AuthenticatedRoute.php
@@ -0,0 +1,16 @@
+<?php
+
+namespace KTXF\Routing\Attributes;
+
+use Attribute;
+
+#[Attribute(Attribute::TARGET_METHOD | Attribute::TARGET_CLASS)]
+class AuthenticatedRoute
+{
+    public function __construct(
+        public readonly string $path,
+        public readonly string $name,
+        public readonly array $methods = ['GET'],
+        public readonly array $permissions = [],
+    ) {}
+}
diff --git a/shared/lib/Security/Authentication/AuthenticationProviderAbstract.php b/shared/lib/Security/Authentication/AuthenticationProviderAbstract.php
new file mode 100644
index 0000000..9b77435
--- /dev/null
+++ b/shared/lib/Security/Authentication/AuthenticationProviderAbstract.php
@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Security\Authentication;
+
+use KTXF\Security\Authentication\ProviderContext;
+use KTXF\Security\Authentication\ProviderResult;
+
+/**
+ * Abstract base for authentication provider
+ */
+abstract class AuthenticationProviderAbstract implements AuthenticationProviderInterface
+{
+
+    abstract public function type(): string;
+
+    abstract public function identifier(): string;
+
+    abstract public function label(): string;
+
+    abstract public function description(): string;
+
+    abstract public function method(): string;
+
+    abstract public function icon(): string;
+
+    public function verify(ProviderContext $context, string $secret): ProviderResult
+    {
+        return ProviderResult::failed(
+            ProviderResult::ERROR_INVALID_PROVIDER,
+            'Credential authentication not supported by this provider'
+        );
+    }
+
+    public function beginChallenge(ProviderContext $context): ProviderResult
+    {
+        return ProviderResult::failed(
+            ProviderResult::ERROR_INVALID_PROVIDER,
+            'Challenge authentication not supported by this provider'
+        );
+    }
+
+    public function verifyChallenge(ProviderContext $context, string $code): ProviderResult
+    {
+        return ProviderResult::failed(
+            ProviderResult::ERROR_INVALID_PROVIDER,
+            'Challenge authentication not supported by this provider'
+        );
+    }
+
+    public function beginRedirect(ProviderContext $context, string $callbackUrl, ?string $returnUrl = null): ProviderResult
+    {
+        return ProviderResult::failed(
+            ProviderResult::ERROR_INVALID_PROVIDER,
+            'Redirect authentication not supported by this provider'
+        );
+    }
+
+    public function completeRedirect(ProviderContext $context, array $params): ProviderResult
+    {
+        return ProviderResult::failed(
+            ProviderResult::ERROR_INVALID_PROVIDER,
+            'Redirect authentication not supported by this provider'
+        );
+    }
+
+}
diff --git a/shared/lib/Security/Authentication/AuthenticationProviderInterface.php b/shared/lib/Security/Authentication/AuthenticationProviderInterface.php
new file mode 100644
index 0000000..82197cb
--- /dev/null
+++ b/shared/lib/Security/Authentication/AuthenticationProviderInterface.php
@@ -0,0 +1,100 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Security\Authentication;
+
+use KTXF\Resource\Provider\ProviderInterface;
+use KTXF\Security\Authentication\ProviderContext;
+use KTXF\Security\Authentication\ProviderResult;
+
+/**
+ * Unified Authentication Provider Interface
+ */
+interface AuthenticationProviderInterface extends ProviderInterface
+{
+    /** Secret style authentication (e.g. password, TOTP, etc) */
+    public const METHOD_CREDENTIAL = 'credential';
+
+    /** Challenge/response (e.g. SMS code, email code, etc) */
+    public const METHOD_CHALLENGE = 'challenge';
+    
+    /** Redirect-based (e.g. OIDC, SAML, OAuth) */
+    public const METHOD_REDIRECT = 'redirect';
+
+    /**
+     * Provider method - one of the METHOD_* constants
+     */
+    public function method(): string;
+
+    /**
+     * Provider icon
+     */
+    public function icon(): string;
+
+    // =========================================================================
+    // Credential Authentication
+    // =========================================================================
+
+    /**
+     * Authenticate with credentials (username/password style)
+     * 
+     * @param ProviderContext $context Authentication context
+     * @param string $secret Password, PIN, or secret
+     * 
+     * @return ProviderResult
+     */
+    public function verify(ProviderContext $context, string $secret): ProviderResult;
+        
+    // =========================================================================
+    // Challenge/Response Authentication
+    // =========================================================================
+
+    /**
+     * Begin a challenge (send code, prepare for verification)
+     * 
+     * For SMS/Email: Sends the code and returns confirmation
+     * For TOTP: Returns challenge metadata (digits, etc.)
+     * 
+     * @param ProviderContext $context Authentication context
+     * 
+     * @return ProviderResult Contains challenge metadata in clientData
+     */
+    public function beginChallenge(ProviderContext $context): ProviderResult;
+
+    /**
+     * Verify challenge response
+     * 
+     * @param ProviderContext $context Authentication context
+     * @param string $code User's response code
+     * 
+     * @return ProviderResult
+     */
+    public function verifyChallenge(ProviderContext $context, string $code): ProviderResult;
+
+    // =========================================================================
+    // Redirect Authentication (OIDC/SAML)
+    // =========================================================================
+
+    /**
+     * Begin redirect-based authentication
+     * 
+     * @param ProviderContext $context Authentication context (contains config)
+     * @param string $callbackUrl URL to redirect back to
+     * @param string|null $returnUrl Final destination after auth
+     * 
+     * @return ProviderResult Contains redirect_url in clientData, state/nonce in sessionData
+     */
+    public function beginRedirect(ProviderContext $context, string $callbackUrl, ?string $returnUrl = null): ProviderResult;
+
+    /**
+     * Complete redirect-based authentication
+     * 
+     * @param ProviderContext $context Authentication context (contains stored state/nonce in metadata)
+     * @param array $params Callback parameters (code, state, etc.)
+     * 
+     * @return ProviderResult Contains user attributes in identity on success
+     */
+    public function completeRedirect(ProviderContext $context, array $params): ProviderResult;
+
+}
diff --git a/shared/lib/Security/Authentication/AuthenticationSession.php b/shared/lib/Security/Authentication/AuthenticationSession.php
new file mode 100644
index 0000000..ec0de70
--- /dev/null
+++ b/shared/lib/Security/Authentication/AuthenticationSession.php
@@ -0,0 +1,217 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Security\Authentication;
+
+/**
+ * Authentication Session
+ * 
+ * Represents an in-progress authentication flow
+ */
+class AuthenticationSession
+{
+    // Session states
+    public const STATE_FRESH = 'fresh';                           // Fresh session, no auth yet
+    public const STATE_IDENTIFIED = 'identified';                 // User identity captured, awaiting auth method
+    public const STATE_AUTHENTICATING = 'authenticating';         // In the process of authenticating
+    public const STATE_COMPLETE = 'complete';                     // All factors verified
+
+    // Default TTL: 5 minutes
+    public const DEFAULT_TTL = 300;
+
+    public function __construct(
+        public readonly string $id,
+        protected string $state,
+        public readonly string $tenantIdentifier = '',
+        public ?string $userIdentifier = null,
+        public ?string $userIdentity = null,
+        public int $methodsRequired = 1,
+        public array $methodsAvailable = [],
+        public array $methodsCompleted = [],
+        public array $metadata = [],
+        public readonly int $createdAt = 0,
+        public readonly int $expiresAt = 0,
+    ) {}
+    
+    /**
+     * Create a new authentication session
+     */
+    public static function create(
+        string $tenantIdentifier,
+        string $state = self::STATE_FRESH,
+        int $ttl = self::DEFAULT_TTL
+    ): self {
+        $now = time();
+        return new self(
+            id: self::generateId(),
+            state: $state,
+            createdAt: $now,
+            expiresAt: $now + $ttl,
+            tenantIdentifier: $tenantIdentifier,
+        );
+    }
+
+    /**
+     * Generate a unique session ID
+     */
+    private static function generateId(): string
+    {
+        return 'auth_' . bin2hex(random_bytes(16));
+    }
+
+    /**
+     * Get current session state
+     */
+    public function state(): string {
+        return $this->state;
+    }
+
+    /**
+     * Check if session has expired
+     */
+    public function isExpired(): bool
+    {
+        return time() > $this->expiresAt;
+    }
+
+    /**
+     * Check if session is in initial state
+     */
+    public function isFresh(): bool
+    {
+        return $this->state === self::STATE_FRESH;
+    }
+
+    /**
+     * Check if session has identity but awaiting authentication
+     */
+    public function isIdentified(): bool
+    {
+        return $this->state === self::STATE_IDENTIFIED;
+    }
+
+    /**
+     * Check if session is in the process of authenticating
+     */
+    public function isAuthenticating(): bool
+    {
+        return $this->state === self::STATE_AUTHENTICATING;
+    }
+
+    /**
+     * Check if session is complete
+     */
+    public function isComplete(): bool
+    {
+        return $this->state === self::STATE_COMPLETE;
+    }
+
+    /**
+     * Set user identity (before authentication)
+     */
+    public function setIdentity(string $value): void
+    {
+        $this->userIdentity = $value;
+        $this->state = self::STATE_IDENTIFIED;
+    }
+
+    public function setMethods(array $methods, int $require = 1): void
+    {
+        $this->methodsAvailable = $methods;
+        $this->methodsRequired = $require;
+    }
+
+    public function methodEligible(string $method): bool
+    {
+        return in_array($method, $this->methodsAvailable, true)
+            && !in_array($method, $this->methodsCompleted, true);
+    }
+    /**
+     * Mark a method as completed
+     */
+    public function methodCompleted(string $method): void
+    {
+        if (!in_array($method, $this->methodsCompleted, true)) {
+            $this->methodsCompleted[] = $method;
+        }
+
+        // If we have required factors and all are complete, mark session complete
+        if (count($this->methodsCompleted) >= $this->methodsRequired) {
+            $this->state = self::STATE_COMPLETE;
+        }
+    }
+    
+    /**
+     * Get methods that still need to be completed
+     */
+    public function methodsRemaining(): array
+    {
+        return array_values(array_diff($this->methodsAvailable, $this->methodsCompleted));
+    }
+
+    /**
+     * Promote session after successful primary auth (set user info)
+     */
+    public function setUser(string $userIdentifier, string $userIdentity): void
+    {
+        $this->userIdentifier = $userIdentifier;
+        $this->userIdentity = $userIdentity;
+    }
+
+    /**
+     * Get metadata value
+     */
+    public function getMeta(string $key, mixed $default = null): mixed
+    {
+        return $this->metadata[$key] ?? $default;
+    }
+
+    /**
+     * Set metadata value
+     */
+    public function setMeta(string $key, mixed $value): void
+    {
+        $this->metadata[$key] = $value;
+    }
+
+    /**
+     * Serialize to array for storage
+     */
+    public function toArray(): array
+    {
+        return [
+            'id' => $this->id,
+            'state' => $this->state,
+            'tenant_identifier' => $this->tenantIdentifier,
+            'user_identifier' => $this->userIdentifier,
+            'user_identity' => $this->userIdentity,
+            'methods_required' => $this->methodsRequired,
+            'methods_available' => $this->methodsAvailable,
+            'methods_completed' => $this->methodsCompleted,
+            'metadata' => $this->metadata,
+            'created_at' => $this->createdAt,
+            'expires_at' => $this->expiresAt,
+        ];
+    }
+
+    /**
+     * Deserialize from array
+     */
+    public static function fromArray(array $data): self
+    {
+        return new self(
+            id: $data['id'],
+            state: $data['state'],
+            tenantIdentifier: $data['tenant_identifier'],
+            userIdentifier: $data['user_identifier'] ?? null,
+            userIdentity: $data['user_identity'] ?? null,
+            methodsRequired: $data['methods_required'] ?? 1,
+            methodsAvailable: $data['methods_available'] ?? [],
+            methodsCompleted: $data['methods_completed'] ?? [],
+            metadata: $data['metadata'] ?? [],
+            createdAt: $data['created_at'],
+            expiresAt: $data['expires_at'],
+        );
+    }
+}
diff --git a/shared/lib/Security/Authentication/ProviderContext.php b/shared/lib/Security/Authentication/ProviderContext.php
new file mode 100644
index 0000000..965eacc
--- /dev/null
+++ b/shared/lib/Security/Authentication/ProviderContext.php
@@ -0,0 +1,75 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Security\Authentication;
+
+/**
+ * Provider Context
+ * 
+ * Immutable context passed to authentication providers.
+ * Contains all information a provider needs to perform authentication.
+ */
+readonly class ProviderContext
+{
+    public function __construct(
+        /** Tenant identifier */
+        public string $tenantId,
+        
+        /** User's internal identifier (after lookup) */
+        public ?string $userIdentifier = null,
+        
+        /** User's identity input (email/username) */
+        public ?string $userIdentity = null,
+        
+        /** Provider-specific metadata from session */
+        public array $metadata = [],
+        
+        /** Provider configuration */
+        public array $config = [],
+    ) {}
+
+    /**
+     * Get metadata value
+     */
+    public function getMeta(string $key, mixed $default = null): mixed
+    {
+        return $this->metadata[$key] ?? $default;
+    }
+
+    /**
+     * Get config value
+     */
+    public function getConfig(string $key, mixed $default = null): mixed
+    {
+        return $this->config[$key] ?? $default;
+    }
+
+    /**
+     * Create context with updated metadata
+     */
+    public function withMetadata(array $metadata): self
+    {
+        return new self(
+            tenantId: $this->tenantId,
+            userIdentifier: $this->userIdentifier,
+            userIdentity: $this->userIdentity,
+            metadata: $metadata,
+            config: $this->config,
+        );
+    }
+
+    /**
+     * Create context with user identifier set
+     */
+    public function withUserIdentifier(string $userIdentifier): self
+    {
+        return new self(
+            tenantId: $this->tenantId,
+            userIdentifier: $userIdentifier,
+            userIdentity: $this->userIdentity,
+            metadata: $this->metadata,
+            config: $this->config,
+        );
+    }
+}
diff --git a/shared/lib/Security/Authentication/ProviderResult.php b/shared/lib/Security/Authentication/ProviderResult.php
new file mode 100644
index 0000000..3ac8f4e
--- /dev/null
+++ b/shared/lib/Security/Authentication/ProviderResult.php
@@ -0,0 +1,156 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Security\Authentication;
+
+/**
+ * Provider Result
+ * 
+ * Result returned from authentication providers.
+ * Separates client-facing data from session persistence data.
+ */
+readonly class ProviderResult
+{
+    // Status constants
+    public const SUCCESS = 'success';
+    public const FAILED = 'failed';
+    public const CHALLENGE = 'challenge';
+    public const REDIRECT = 'redirect';
+
+    // Error codes
+    public const ERROR_INVALID_CREDENTIALS = 'invalid_credentials';
+    public const ERROR_INVALID_PROVIDER = 'invalid_provider';
+    public const ERROR_INVALID_FACTOR = 'invalid_factor';
+    public const ERROR_FACTOR_FAILED = 'factor_failed';
+    public const ERROR_NOT_ENROLLED = 'not_enrolled';
+    public const ERROR_RATE_LIMITED = 'rate_limited';
+    public const ERROR_INTERNAL = 'internal_error';
+
+    public function __construct(
+        /** Result status */
+        public string $status,
+        
+        /** Error code for failures */
+        public ?string $errorCode = null,
+        
+        /** Human-readable error message */
+        public ?string $errorMessage = null,
+        
+        /** Verified identity claims (user_id, provider, etc.) */
+        public array $identity = [],
+        
+        /** Data to send to client (challenge info, redirect URL, etc.) */
+        public array $clientData = [],
+        
+        /** Data to persist in session for subsequent calls */
+        public array $sessionData = [],
+    ) {}
+
+    // =========================================================================
+    // Factory Methods
+    // =========================================================================
+
+    /**
+     * Create a success result
+     */
+    public static function success(array $identity = [], array $clientData = [], array $sessionData = []): self
+    {
+        return new self(
+            status: self::SUCCESS,
+            identity: $identity,
+            clientData: $clientData,
+            sessionData: $sessionData,
+        );
+    }
+
+    /**
+     * Create a failed result
+     */
+    public static function failed(
+        string $errorCode = self::ERROR_INVALID_CREDENTIALS,
+        ?string $errorMessage = null
+    ): self {
+        return new self(
+            status: self::FAILED,
+            errorCode: $errorCode,
+            errorMessage: $errorMessage,
+        );
+    }
+
+    /**
+     * Create a challenge result (for challenge-based auth)
+     */
+    public static function challenge(array $challengeInfo, array $sessionData = []): self
+    {
+        return new self(
+            status: self::CHALLENGE,
+            clientData: ['challenge' => $challengeInfo],
+            sessionData: $sessionData,
+        );
+    }
+
+    /**
+     * Create a redirect result (for OIDC/SAML)
+     */
+    public static function redirect(string $url, array $sessionData): self
+    {
+        return new self(
+            status: self::REDIRECT,
+            clientData: ['redirect_url' => $url],
+            sessionData: $sessionData,
+        );
+    }
+
+    // =========================================================================
+    // Status Checks
+    // =========================================================================
+
+    public function isSuccess(): bool
+    {
+        return $this->status === self::SUCCESS;
+    }
+
+    public function isFailed(): bool
+    {
+        return $this->status === self::FAILED;
+    }
+
+    public function isChallenge(): bool
+    {
+        return $this->status === self::CHALLENGE;
+    }
+
+    public function isRedirect(): bool
+    {
+        return $this->status === self::REDIRECT;
+    }
+
+    // =========================================================================
+    // Data Access
+    // =========================================================================
+
+    /**
+     * Get identity claim
+     */
+    public function getIdentity(string $key, mixed $default = null): mixed
+    {
+        return $this->identity[$key] ?? $default;
+    }
+
+    /**
+     * Get client data value
+     */
+    public function getClientData(string $key, mixed $default = null): mixed
+    {
+        return $this->clientData[$key] ?? $default;
+    }
+
+    /**
+     * Get session data value
+     */
+    public function getSessionData(string $key, mixed $default = null): mixed
+    {
+        return $this->sessionData[$key] ?? $default;
+    }
+}
diff --git a/shared/lib/Security/Crypto.php b/shared/lib/Security/Crypto.php
new file mode 100644
index 0000000..ff903ea
--- /dev/null
+++ b/shared/lib/Security/Crypto.php
@@ -0,0 +1,170 @@
+<?php
+
+namespace KTXF\Security;
+
+use KTXC\SessionTenant;
+use phpseclib3\Crypt\AES;
+
+/**
+ * Symmetric encryption helper
+ */
+class Crypto
+{
+    private const NONCE_LEN = 16;   // 128-bit nonce for GCM (phpseclib allows 12-16)
+    private const KEY_LEN   = 32;   // 256-bit key
+    private const TAG_LEN   = 16;   // 128-bit auth tag
+
+    // Binary envelope constants
+    // Layout:
+    // 0-3: magic 'KXCG' (4 bytes)
+    // 4: version (1 byte)
+    // 5: flags (1 byte)
+    // 6-7: nonce length (uint16 big-endian, 2 bytes)
+    // 8-9: tag length (uint16 big-endian, 2 bytes)
+    // 10-13: data length (uint32 big-endian, 4 bytes)
+    // 14...: nonce || tag || encryptedData
+    private const ENCODING_HEADER_TAG = "KXCG";
+    private const ENCODING_HEADER_VERSION = 1;
+    private const ENCODING_HEADER_LEN = 14;
+
+    public function __construct(protected SessionTenant $sessionTenant)
+    { }
+
+    /**
+     * Encrypt arbitrary string data.
+     * Returns hex string of length-prefixed binary envelope.
+     */
+    public function encrypt(string $data, ?string $password = null): string
+    {
+        if ($password === null) {
+            $password = $this->tenantSecret();
+            if ($password === null) {
+                throw new \RuntimeException('Tenant secret unavailable for encryption');
+            }
+        }
+
+        $nonce = random_bytes(self::NONCE_LEN);
+        $key = hash_hkdf('sha256', $password);
+        if ($key === false || strlen($key) !== self::KEY_LEN) {
+            throw new \RuntimeException('Key derivation failed');
+        }
+
+        $aes = new AES('gcm');
+        $aes->setKey($key);
+        $aes->setNonce($nonce);
+
+        $encryptedData = $aes->encrypt($data);
+        if ($encryptedData === false) {
+            throw new \RuntimeException('Encryption failed');
+        }
+        $tag = $aes->getTag(self::TAG_LEN);
+        if ($tag === false || strlen($tag) !== self::TAG_LEN) {
+            throw new \RuntimeException('Authentication tag retrieval failed');
+        }
+
+        $nonceLen = strlen($nonce);
+        $tagLen = strlen($tag);
+        $dataLen = strlen($encryptedData);
+
+        $header = self::ENCODING_HEADER_TAG
+            . chr(self::ENCODING_HEADER_VERSION)
+            . chr(0x00) // flags
+            . pack('n', $nonceLen) // uint16 BE
+            . pack('n', $tagLen)   // uint16 BE
+            . pack('N', $dataLen); // uint32 BE
+
+        $binary = $header . $nonce . $tag . $encryptedData;
+        return bin2hex($binary);
+    }
+
+    /**
+     * Decrypt hex-encoded length-prefixed binary envelope.
+     */
+    public function decrypt(string $data, ?string $password = null): string
+    {
+        if ($password === null) {
+            $password = $this->tenantSecret();
+            if ($password === null) {
+                throw new \RuntimeException('Tenant secret unavailable for decryption');
+            }
+        }
+
+        if (!ctype_xdigit($data) || strlen($data) % 2 !== 0) {
+            throw new \InvalidArgumentException('Invalid data format');
+        }
+        $binary = hex2bin($data);
+        if ($binary === false || strlen($binary) < self::ENCODING_HEADER_LEN) {
+            throw new \InvalidArgumentException('Invalid data format');
+        }
+
+        if (substr($binary, 0, 4) !== self::ENCODING_HEADER_TAG) {
+            throw new \InvalidArgumentException('Invalid data format');
+        }
+        
+        if (ord($binary[4]) !== self::ENCODING_HEADER_VERSION) {
+            throw new \InvalidArgumentException('Unsupported version');
+        }
+        $flags = ord($binary[5]); // currently unused; reserved for future
+        $nonceLen = unpack('n', substr($binary, 6, 2))[1];
+        $tagLen = unpack('n', substr($binary, 8, 2))[1];
+        $dataLen = unpack('N', substr($binary, 10, 4))[1];
+
+        if (strlen($binary) !== (self::ENCODING_HEADER_LEN + $nonceLen + $tagLen + $dataLen)) {
+            throw new \InvalidArgumentException('Invalid data format');
+        }
+
+        $nonce = substr($binary, 14, $nonceLen);
+        $tag = substr($binary, 14 + $nonceLen, $tagLen);
+        $encryptedData = substr($binary, 14 + $nonceLen + $tagLen, $dataLen);
+
+        $key = hash_hkdf('sha256', $password);
+        if ($key === false || strlen($key) !== self::KEY_LEN) {
+            throw new \RuntimeException('Key derivation failed');
+        }
+
+        $aes = new AES('gcm');
+        $aes->setKey($key);
+        $aes->setNonce($nonce);
+        $aes->setTag($tag);
+
+        $plainData = $aes->decrypt($encryptedData);
+        if ($plainData === false) {
+            throw new \RuntimeException('Decryption failed (auth)');
+        }
+        return $plainData;
+    }
+
+    private function tenantSecret(): ?string
+    {
+        $config = $this->sessionTenant->configuration();
+        return $config['security']['code'] ?? null;
+    }
+
+    // =========================================================================
+    // Password Hashing
+    // =========================================================================
+
+    /**
+     * Hash a password using bcrypt
+     */
+    public function hashPassword(string $password): string
+    {
+        return password_hash($password, PASSWORD_BCRYPT, ['cost' => 12]);
+    }
+
+    /**
+     * Verify a password against a hash
+     */
+    public function verifyPassword(string $password, string $hash): bool
+    {
+        return password_verify($password, $hash);
+    }
+
+    /**
+     * Check if a password hash needs to be rehashed
+     */
+    public function needsRehash(string $hash): bool
+    {
+        return password_needs_rehash($hash, PASSWORD_BCRYPT, ['cost' => 12]);
+    }
+}
diff --git a/shared/lib/Utile/Collection/CollectionAbstract.php b/shared/lib/Utile/Collection/CollectionAbstract.php
new file mode 100644
index 0000000..6bd5529
--- /dev/null
+++ b/shared/lib/Utile/Collection/CollectionAbstract.php
@@ -0,0 +1,136 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Utile\Collection;
+
+/**
+ * @template T
+ * @extends \ArrayObject<int, T>
+ */
+class CollectionAbstract extends \ArrayObject {
+
+	protected const TYPE_STRING = 'string';
+	protected const TYPE_INT = 'int';
+	protected const TYPE_FLOAT = 'float';
+	protected const TYPE_BOOL = 'bool';
+	protected const TYPE_ARRAY = 'array';
+	protected const TYPE_DATE = 'date';
+
+	protected bool $associative = false;
+	protected string $typeKey = 'int';
+	protected string $typeValue = 'string';
+
+	/**
+	 * @param array<T> $data
+	 * @param class-string<T>|string|null $typeValue
+	 * @param class-string<TKey>|string|null $typeKey
+	 */
+	public function __construct(array $data = [], string $typeValue, string|null $typeKey = null) {
+		// Ensure that all data entries are of the specified type
+		$this->typeValue = $typeValue;
+		if ($typeKey !== null) {
+			$this->typeKey = $typeKey;
+			$this->associative = true;
+		}
+		
+		foreach ($data as $key => $value) {
+			if ($this->associative && !$this->validateKey($key)) {
+				throw new \InvalidArgumentException('Type error: element key ' . $key . ' is not of type ' . $this->typeKey);
+			}
+			if (!$this->validateValue($value)) {
+				throw new \InvalidArgumentException('Type error: element value at index ' . $key . ' is not of type ' . $this->typeValue);
+			}
+		}
+
+		if (!$this->associative) {
+			parent::__construct(array_values($data));
+		} else {
+			parent::__construct($data);
+		}
+	}
+
+	private function validateValue($value): bool {
+		// Check if the value is of the specified type
+		return match ($this->typeValue) {
+			self::TYPE_STRING => is_string($value),
+			self::TYPE_INT, 'integer' => is_int($value),
+			self::TYPE_FLOAT => is_float($value),
+            self::TYPE_BOOL, 'boolean' => is_bool($value),
+			self::TYPE_ARRAY => is_array($value),
+			self::TYPE_DATE => $value instanceof \DateTimeInterface,
+			default => $value instanceof $this->typeValue
+		};
+	}
+
+	protected function validateKey($key): bool {
+		// Check if the key is of the specified type
+		return match ($this->typeKey) {
+			self::TYPE_STRING => is_string($key),
+			default => is_int($key),
+		};
+	}
+
+	public function add($value, string|int|null $key = null): void {
+		$this->offsetSet($key, $value);
+	}
+
+	public function remove(string|int $key): void {
+		$this->offsetUnset($key);
+	}
+
+	public function extant(string|int $key): bool {
+		return $this->offsetExists($key);
+	}
+
+	#[\Override]
+	public function append(mixed $value): void {
+		if ($this->associative) {
+			throw new \LogicException('Cannot append to an associative collection. Use add() or offsetSet() instead.');
+		}
+		// ensure that the value is of the specified type before appending
+		if (!$this->validateValue($value)) {
+			throw new \InvalidArgumentException('Type error: value is not of type ' . $this->typeValue);
+		}
+		parent::append($value);
+	}
+
+	#[\Override]
+	public function offsetSet(mixed $key, mixed $value): void {
+		if ($this->associative) {
+			if ($key === null) {
+				throw new \LogicException('Logic error: Key cannot be null for associative collections');
+			}
+			if (!$this->validateKey($key)) {
+				throw new \InvalidArgumentException('Type error: key is not of type ' . $this->typeKey);
+			}
+		} else {
+			if ($key !== null) {
+				throw new \LogicException('Logic error: Key must be null for non-associative collections');
+			}
+		}
+		if (!$this->validateValue($value)) {
+			throw new \InvalidArgumentException('Type error: value is not of type ' . $this->typeValue);
+		}
+		parent::offsetSet($key, $value);
+	}
+
+	#[\Override]
+	public function offsetUnset(mixed $key): void
+	{
+		if (!$this->validateKey($key)) {
+			throw new \InvalidArgumentException('Type error: key is not of type ' . $this->typeKey);
+		}
+		parent::offsetUnset($key);
+	}
+
+	#[\Override]
+	public function offsetExists(mixed $key): bool
+	{
+		if (!$this->validateKey($key)) {
+			throw new \InvalidArgumentException('Type error: key is not of type ' . $this->typeKey);
+		}
+		return parent::offsetExists($key);
+	}
+
+}
diff --git a/shared/lib/Utile/UUID.php b/shared/lib/Utile/UUID.php
new file mode 100644
index 0000000..ce93023
--- /dev/null
+++ b/shared/lib/Utile/UUID.php
@@ -0,0 +1,54 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: Sebastian Krupinski <krupinski01@gmail.com>
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace KTXF\Utile;
+
+/**
+ * UUID Generator Utility Class
+ * 
+ * Generates RFC 4122 compliant UUIDs (version 4 - random)
+ */
+class UUID {
+
+	/**
+	 * Generate a random UUID v4
+	 * 
+	 * @return string UUID in format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx
+	 */
+	public static function v4(): string {
+		// Generate 16 random bytes
+		$bytes = random_bytes(16);
+		
+		// Set version to 4 (random)
+		$bytes[6] = chr((ord($bytes[6]) & 0x0f) | 0x40);
+		
+		// Set variant to RFC 4122
+		$bytes[8] = chr((ord($bytes[8]) & 0x3f) | 0x80);
+		
+		// Format as UUID string
+		return vsprintf(
+			'%s%s-%s-%s-%s-%s%s%s',
+			str_split(bin2hex($bytes), 4)
+		);
+	}
+
+	/**
+	 * Validate a UUID string
+	 * 
+	 * @param string $uuid UUID to validate
+	 * @return bool True if valid UUID format
+	 */
+	public static function isValid(string $uuid): bool {
+		return (bool)preg_match(
+			'/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i',
+			$uuid
+		);
+	}
+
+}
diff --git a/tests/php/bootstrap.php b/tests/php/bootstrap.php
new file mode 100644
index 0000000..60aab4c
--- /dev/null
+++ b/tests/php/bootstrap.php
@@ -0,0 +1,7 @@
+<?php
+
+require dirname(__DIR__, 2).'/vendor/autoload.php';
+
+if (isset($_SERVER['APP_DEBUG']) && $_SERVER['APP_DEBUG']) {
+    umask(0000);
+}
diff --git a/tests/php/shared/Json/JsonSerializableObjectTest.php b/tests/php/shared/Json/JsonSerializableObjectTest.php
new file mode 100644
index 0000000..c4bb9d9
--- /dev/null
+++ b/tests/php/shared/Json/JsonSerializableObjectTest.php
@@ -0,0 +1,64 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\Json;
+
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Test for JsonSerializableObject base functionality
+ */
+class JsonSerializableObjectTest extends TestCase
+{
+    public function testJsonSerializeReturnsObjectVars(): void
+    {
+        $testObject = new class extends JsonSerializableObject {
+            public string $publicProperty = 'test';
+            private string $privateProperty = 'private';
+            protected string $protectedProperty = 'protected';
+        };
+
+        $serialized = $testObject->jsonSerialize();
+
+        $this->assertIsArray($serialized);
+        $this->assertArrayHasKey('publicProperty', $serialized);
+        $this->assertEquals('test', $serialized['publicProperty']);
+        $this->assertArrayHasKey('protectedProperty', $serialized); // get_object_vars includes protected
+        $this->assertEquals('protected', $serialized['protectedProperty']);
+        $this->assertArrayNotHasKey('privateProperty', $serialized); // but not private
+    }
+
+    public function testJsonDeserializeSetsProperties(): void
+    {
+        $testObject = new class extends JsonSerializableObject {
+            public string $name = '';
+            public int $age = 0;
+        };
+
+        $data = [
+            'name' => 'John Doe',
+            'age' => 30,
+            'nonexistent' => 'ignored'
+        ];
+
+        $result = $testObject->jsonDeserialize($data);
+
+        $this->assertSame($testObject, $result);
+        $this->assertEquals('John Doe', $testObject->name);
+        $this->assertEquals(30, $testObject->age);
+        $this->assertObjectNotHasProperty('nonexistent', $testObject);
+    }
+
+    public function testJsonDeserializeHandlesJsonString(): void
+    {
+        $testObject = new class extends JsonSerializableObject {
+            public string $message = '';
+        };
+
+        $jsonString = '{"message": "Hello World"}';
+        $testObject->jsonDeserialize($jsonString);
+
+        $this->assertEquals('Hello World', $testObject->message);
+    }
+}
\ No newline at end of file
diff --git a/tests/php/shared/People/Entity/Individual/IndividualObjectTest.php b/tests/php/shared/People/Entity/Individual/IndividualObjectTest.php
new file mode 100644
index 0000000..6d4cdd6
--- /dev/null
+++ b/tests/php/shared/People/Entity/Individual/IndividualObjectTest.php
@@ -0,0 +1,109 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXF\People\Entity\Individual;
+
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Test for IndividualObject JsonSerializable functionality
+ */
+class IndividualObjectTest extends TestCase
+{
+    public function testJsonSerialization(): void
+    {
+        // Create an IndividualObject instance
+        $individual = new IndividualObject();
+
+        // Set some basic properties
+        $individual->urid = 'test-urid-123';
+        $individual->label = 'Test Individual';
+        $individual->language = 'en';
+
+        // Set name
+        $individual->names->First = 'John';
+        $individual->names->Last = 'Doe';
+        $individual->names->Prefix = 'Mr.';
+
+        // Add an alias
+        $alias = new IndividualAliasObject();
+        $alias->label = 'Johnny';
+        $individual->names->Aliases[] = $alias;
+
+        // Serialize to JSON
+        $json = json_encode($individual);
+
+        // Verify JSON structure
+        $this->assertJson($json);
+
+        $data = json_decode($json, true);
+        $this->assertEquals('individual', $data['type']);
+        $this->assertEquals(1, $data['version']);
+        $this->assertEquals('test-urid-123', $data['urid']);
+        $this->assertEquals('Test Individual', $data['label']);
+        $this->assertEquals('en', $data['language']);
+        $this->assertEquals('John', $data['names']['First']);
+        $this->assertEquals('Doe', $data['names']['Last']);
+        $this->assertEquals('Mr.', $data['names']['Prefix']);
+        $this->assertCount(1, $data['names']['Aliases']);
+        $this->assertEquals('Johnny', $data['names']['Aliases'][0]['label']);
+    }
+
+    public function testJsonDeserialization(): void
+    {
+        $jsonData = [
+            'type' => 'individual',
+            'version' => 1,
+            'urid' => 'test-urid-456',
+            'label' => 'Deserialized Individual',
+            'language' => 'fr',
+            'names' => [
+                'First' => 'Jane',
+                'Last' => 'Smith',
+                'Prefix' => 'Ms.',
+                'Aliases' => [
+                    ['label' => 'Janie']
+                ]
+            ]
+        ];
+
+        $individual = new IndividualObject();
+        $individual->jsonDeserialize($jsonData);
+
+        $this->assertEquals('test-urid-456', $individual->urid);
+        $this->assertEquals('Deserialized Individual', $individual->label);
+        $this->assertEquals('fr', $individual->language);
+        $this->assertEquals('Jane', $individual->names->First);
+        $this->assertEquals('Smith', $individual->names->Last);
+        $this->assertEquals('Ms.', $individual->names->Prefix);
+        $this->assertCount(1, $individual->names->Aliases);
+        $this->assertEquals('Janie', $individual->names->Aliases[0]->label);
+    }
+
+    public function testJsonRoundTrip(): void
+    {
+        // Create original object
+        $original = new IndividualObject();
+        $original->urid = 'round-trip-urid';
+        $original->label = 'Round Trip Test';
+        $original->names->First = 'Alice';
+        $original->names->Last = 'Wonderland';
+
+        // Serialize and deserialize
+        $json = json_encode($original);
+        $deserialized = new IndividualObject();
+        $deserialized->jsonDeserialize($json);
+
+        // Verify round-trip integrity
+        $this->assertEquals($original->urid, $deserialized->urid);
+        $this->assertEquals($original->label, $deserialized->label);
+        $this->assertEquals($original->names->First, $deserialized->names->First);
+        $this->assertEquals($original->names->Last, $deserialized->names->Last);
+
+        // Verify JSON representations are identical
+        $originalJson = json_encode($original);
+        $deserializedJson = json_encode($deserialized);
+        $this->assertJsonStringEqualsJsonString($originalJson, $deserializedJson);
+    }
+}
\ No newline at end of file
diff --git a/tsconfig.app.json b/tsconfig.app.json
new file mode 100644
index 0000000..78c20a9
--- /dev/null
+++ b/tsconfig.app.json
@@ -0,0 +1,21 @@
+{
+  "extends": "@vue/tsconfig/tsconfig.dom.json",
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    
+    /* Linting */
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedSideEffectImports": true,
+    "paths": {
+      "@KTXC/*": ["./core/src/*"]
+    }
+  },
+  "include": [
+    "./core/src/**/*.ts",
+    "./core/src/**/*.tsx",
+    "./core/src/**/*.vue"]
+}
diff --git a/tsconfig.json b/tsconfig.json
new file mode 100644
index 0000000..1ffef60
--- /dev/null
+++ b/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}
diff --git a/tsconfig.node.json b/tsconfig.node.json
new file mode 100644
index 0000000..82882da
--- /dev/null
+++ b/tsconfig.node.json
@@ -0,0 +1,25 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
+    "target": "ES2023",
+    "lib": ["ES2023"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+
+    /* Linting */
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedSideEffectImports": true
+  },
+  "include": ["vite.config.ts", "scripts/**/*.ts"]
+}
diff --git a/vite.config.ts b/vite.config.ts
new file mode 100644
index 0000000..8106dff
--- /dev/null
+++ b/vite.config.ts
@@ -0,0 +1,108 @@
+import { defineConfig, type PluginOption } from 'vite';
+import vue from '@vitejs/plugin-vue';
+import vuetify from 'vite-plugin-vuetify';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { viteStaticCopy } from 'vite-plugin-static-copy';
+import { generateVendorShims } from './scripts/generate-vendor-shims';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const runVendorShimGenerator = async (outputDir: string) => {
+  await generateVendorShims({ outputDir, silent: true });
+};
+
+const generateVendorShimsPlugin = (): PluginOption => {
+  let outDir = 'dist';
+  let rootDir = process.cwd();
+
+  return {
+    name: 'generate-vendor-shims',
+    apply: 'build',
+    configResolved(config) {
+      outDir = config.build.outDir;
+      rootDir = config.root;
+    },
+    async closeBundle() {
+      try {
+        const resolvedOutDir = path.isAbsolute(outDir) ? outDir : path.resolve(rootDir, outDir);
+        const vendorDestination = path.resolve(resolvedOutDir, 'vendor');
+        await runVendorShimGenerator(vendorDestination);
+      } catch (error) {
+        console.warn('[generate-vendor-shims] Failed to update vendor shims', error);
+      }
+    },
+  };
+};
+
+// https://vite.dev/config/
+export default defineConfig(({ mode }) => ({
+  root: path.resolve(__dirname, 'core/src'),
+  plugins: [
+    vue(),
+    vuetify(),
+    generateVendorShimsPlugin(),
+    viteStaticCopy({
+      targets: [
+        {
+          src: path.resolve(__dirname, 'core/lib/index.php'),
+          dest: path.resolve(__dirname, 'public'),
+        },
+      ],
+    }),
+  ],
+  resolve: {
+    alias: {
+      '@KTXC': path.resolve(__dirname, 'core/src'),
+    },
+  },
+  server: {
+    fs: {
+      allow: ['..'], // Allow serving files from one level up to find the project root
+    },
+    host: true,
+  },
+  build: {
+    outDir: path.resolve(__dirname, 'public'),
+    emptyOutDir: true,
+    minify: mode === 'production',
+    sourcemap: true,
+    rollupOptions: {
+      input: {
+        public: path.resolve(__dirname, 'core/src/public.html'),
+        private: path.resolve(__dirname, 'core/src/private.html'),
+        'shared-utils': path.resolve(__dirname, 'core/src/utils/helpers/shared.ts'),
+      },
+      output: {
+        // Preserve export names for shared-utils (used via import map by modules)
+        minifyInternalExports: false,
+        entryFileNames: (chunkInfo) => {
+          // Keep shared-utils without hash for stable import map reference
+          if (chunkInfo.name === 'shared-utils') {
+            return `js/[name].js`;
+          }
+          return `js/[name]-[hash].js`;
+        },
+        chunkFileNames: (chunkInfo) => {
+          return `js/[name]-[hash].js`;
+        },
+        assetFileNames: (assetInfo) => {
+          if (assetInfo.name) {
+            const extType = assetInfo.name.split('.').pop();
+            if (extType && /png|jpe?g|svg|gif|tiff|bmp|ico/i.test(extType)) {
+              return `images/[name]-[hash][extname]`;
+            }
+            if (extType && /woff|woff2|eot|ttf|otf/i.test(extType)) {
+              return `fonts/[name]-[hash][extname]`;
+            }
+            if (extType === 'css') {
+              return `css/[name]-[hash][extname]`;
+            }
+          }
+          return `[name]-[hash][extname]`;
+        },
+      },
+    },
+  },
+}));