diff --git a/migrations/README.md b/migrations/README.md
new file mode 100644
index 0000000..6aa76e1
--- /dev/null
+++ b/migrations/README.md
@@ -0,0 +1,36 @@
+# Database Migrations
+
+All migrations are combined into a single idempotent script: `combined.sql`.
+
+## What It Does
+
+1. Adds rate limiting fields to users table
+2. Updates comments FK to SET NULL on user delete
+3. Adds FK + index on media.post_id, backfills from media_relations
+4. Adds 8 performance indexes
+5. Adds CASCADE FKs for user deletion (posts + blog)
+6. Removes unused posts.image_id column
+
+## How to Run
+
+```bash
+mysql -u your_user -p your_database < combined.sql
+```
+
+The script is safe to run multiple times (fully idempotent).
+
+## Verification
+
+```sql
+DESCRIBE users;
+SHOW CREATE TABLE comments;
+DESCRIBE media;
+SHOW INDEX FROM posts WHERE Key_name LIKE 'idx_%';
+```
+
+## Rollback
+
+Restore from backup:
+```bash
+mysql -u your_user -p your_database < backup.sql
+```
diff --git a/migrations/SCHEMA_UPDATE_SUMMARY.md b/migrations/SCHEMA_UPDATE_SUMMARY.md
new file mode 100644
index 0000000..d7356f2
--- /dev/null
+++ b/migrations/SCHEMA_UPDATE_SUMMARY.md
@@ -0,0 +1,199 @@
+# Schema Update Summary - API Project
+
+## Overview
+Successfully updated the Sequelize models to match the new Drizzle schema from the `bun-social` project.
+
+## Changes Completed
+
+### 1. SQL Migration Script Created
+Location: `./migrations/`
+
+Seven migrations combined into a single idempotent script (see migrations/README.md for execution instructions):
+- **combined.sql** - All schema changes in one file (001-007)
+
+### 2. Sequelize Model Updates
+
+#### users.js
+**Removed:**
+- `old_uid` field (legacy migration field)
+- `avatarpath` field (handled differently now)
+
+**Added:**
+- `failed_login_attempts` (INTEGER UNSIGNED, default 0)
+- `last_failed_login` (DATE, nullable)
+- `locked_until` (DATE, nullable)
+
+#### comment.js
+**Changed:**
+- `user_id` now nullable (allowNull: true)
+- Added `onDelete: 'SET NULL'` behavior
+- Added `onUpdate: 'CASCADE'` behavior
+- Comments will be preserved when user is deleted
+
+#### media.js
+**Added:**
+- `post_id` field (INTEGER UNSIGNED, nullable)
+- Foreign key to posts.id
+- `onDelete: 'CASCADE'` and `onUpdate: 'CASCADE'`
+
+#### posts.js
+**Changed:**
+- Updated `hasMediaAttribute` query to use `media.post_id` instead of `media_relations`
+- Added check for `deleted_at IS NULL` in media query
+
+#### groups.js
+**Added:**
+- `description` field (TEXT, required)
+- `slug` field (STRING, required, unique)
+- `title` field (STRING, required)
+
+#### groupsUsers.js
+**Changed:**
+- Removed `'weekly'` from type enum
+- Updated default value to `'direct'` (was `'none'`)
+- Valid values now: `'none'`, `'direct'`, `'daily'`
+
+#### index.js (associations)
+**Removed:**
+- MediaRelations associations (Post belongsToMany Media through MediaRelations)
+
+**Added:**
+- Direct Media → Post relationship via `post_id`
+- `db.Media.Post = db.Media.belongsTo(db.Post, { foreignKey: 'post_id' })`
+- `db.Post.Media = db.Post.hasMany(db.Media, { foreignKey: 'post_id' })`
+
+### 3. Deprecated Models
+**Status:** All deprecated model files have already been removed
+- No mediaRelations.js, groupsContent.js, or other deprecated models found
+- Models directory is clean
+
+### 4. GraphQL Code Review
+**Status:** All GraphQL queries and types are clean
+- No references to `media_relations` found
+- No references to `groups_content` found
+- No references to `'weekly'` notification type found
+- GraphQL type definitions are current and correct
+
+## Next Steps - Database Migration
+
+### Step 1: Backup Database
+```bash
+mysqldump -u your_user -p your_database > backup_$(date +%Y%m%d_%H%M%S).sql
+```
+
+### Step 2: Run SQL Migrations
+```bash
+mysql -u your_user -p your_database < ./migrations/combined.sql
+```
+
+### Step 3: Verify Database Changes
+```sql
+-- Check users table
+DESCRIBE users;
+SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS
+WHERE TABLE_NAME = 'users'
+AND COLUMN_NAME IN ('failed_login_attempts', 'last_failed_login', 'locked_until');
+
+-- Check comments foreign key
+SHOW CREATE TABLE comments;
+
+-- Check media table
+DESCRIBE media;
+SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS
+WHERE TABLE_NAME = 'media' AND COLUMN_NAME = 'post_id';
+
+-- Check indexes
+SHOW INDEX FROM posts WHERE Key_name LIKE 'idx_%';
+SHOW INDEX FROM comments WHERE Key_name LIKE 'idx_%';
+SHOW INDEX FROM media WHERE Key_name = 'idx_media_postId';
+
+-- Check groups_users enum
+SHOW COLUMNS FROM groups_users WHERE Field = 'type';
+```
+
+### Step 4: Test API
+```bash
+cd /path/to/API
+
+# Start API server
+npm start
+
+# Test key endpoints:
+# - Query posts with media
+# - Test user deletion (comments should remain with null user_id)
+# - Test notification preferences (no weekly option)
+```
+
+## Breaking Changes
+
+### 1. Notification Type Enum
+- The `'weekly'` notification type has been removed
+- Migration script automatically converts existing `'weekly'` values to `'daily'`
+- Any code that explicitly checks for `'weekly'` should be updated
+
+### 2. Comment User Relationship
+- Comments can now have null `user_id` (when user is deleted)
+- Code that assumes `user_id` is always present needs null checks
+- Example:
+  ```javascript
+  // Before
+  comment.user_id // always had a value
+
+  // After
+  comment.user_id || null // could be null if user deleted
+  ```
+
+### 3. Media Relations
+- Direct relationship via `post_id` instead of `media_relations` table
+- Any code that queries `media_relations` needs to be updated
+- Example:
+  ```javascript
+  // Before
+  SELECT * FROM media_relations WHERE id = ?
+
+  // After
+  SELECT * FROM media WHERE post_id = ?
+  ```
+
+## Files Modified
+
+### Created:
+- `./migrations/combined.sql`
+
+### Modified:
+- `./models/users.js`
+- `./models/comment.js`
+- `./models/media.js`
+- `./models/posts.js`
+- `./models/groups.js`
+- `./models/groupsUsers.js`
+- `./models/index.js`
+
+## Rollback Plan
+
+If you need to rollback:
+1. Restore from backup: `mysql -u your_user -p your_database < backup_YYYYMMDD_HHMMSS.sql`
+2. Revert git changes to model files: `git checkout HEAD -- models/`
+
+## Performance Improvements
+
+The migration includes 9 new composite indexes:
+- **Posts**: 3 indexes for status/groupId, status/userId, status/createdAt
+- **Comments**: 2 indexes for postId/createdAt, createdAt
+- **Messages**: 1 index for threadId/userId
+- **Blog**: 1 index for status/authorId
+- **GroupsUsers**: 1 index for userId/type
+- **Media**: 1 index for postId
+
+These indexes should significantly improve query performance for:
+- Homepage feed queries
+- Group page listings
+- User profile pages
+- Comment loading
+- Message thread retrieval
+
+## Migration Completed
+All code changes have been completed successfully. The API models now match the Drizzle schema from bun-social.
+
+**Date:** 2026-01-03
+**Status:** Ready for database migration
diff --git a/migrations/combined.sql b/migrations/combined.sql
new file mode 100644
index 0000000..2250696
--- /dev/null
+++ b/migrations/combined.sql
@@ -0,0 +1,417 @@
+-- Combined Migration
+-- Purpose: All database changes for user deletion, rate limiting, and performance
+-- Created: 2026-02-06
+--
+-- Combines migrations 001-007 into a single idempotent script safe to run
+-- against the production schema as of 2026-02-06.
+--
+-- Changes:
+--   001: Add rate limiting columns to users
+--   002: Change comments.user_id FK from CASCADE to SET NULL
+--   003: Add FK + index on media.post_id (column already exists)
+--   004: SKIPPED — posts.image_id FK removed in 007 anyway
+--   005: Add 8 performance indexes
+--   006: Add CASCADE FK on posts.user_id + blog.author_id (other tables already correct)
+--   007: Remove posts.image_id column
+
+SET @ORIG_FOREIGN_KEY_CHECKS = @@FOREIGN_KEY_CHECKS;
+SET FOREIGN_KEY_CHECKS = 0;
+
+
+-- ============================================================================
+-- 001: Add rate limiting fields to users table
+-- ============================================================================
+
+SET @col_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'users'
+    AND COLUMN_NAME = 'failed_login_attempts'
+);
+SET @sql = IF(@col_exists = 0,
+  'ALTER TABLE `users` ADD COLUMN `failed_login_attempts` int unsigned NOT NULL DEFAULT 0 AFTER `last_login`',
+  'SELECT "users.failed_login_attempts already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @col_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'users'
+    AND COLUMN_NAME = 'last_failed_login'
+);
+SET @sql = IF(@col_exists = 0,
+  'ALTER TABLE `users` ADD COLUMN `last_failed_login` timestamp NULL AFTER `failed_login_attempts`',
+  'SELECT "users.last_failed_login already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @col_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'users'
+    AND COLUMN_NAME = 'locked_until'
+);
+SET @sql = IF(@col_exists = 0,
+  'ALTER TABLE `users` ADD COLUMN `locked_until` timestamp NULL AFTER `last_failed_login`',
+  'SELECT "users.locked_until already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '001 done: Rate limiting fields added to users' AS status;
+
+
+-- ============================================================================
+-- 002: Update comments FK — CASCADE → SET NULL
+-- ============================================================================
+
+-- Find actual FK name on comments.user_id → users.id
+SET @fk_name = (
+  SELECT CONSTRAINT_NAME
+  FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'comments'
+    AND COLUMN_NAME = 'user_id'
+    AND REFERENCED_TABLE_NAME = 'users'
+    AND REFERENCED_COLUMN_NAME = 'id'
+  LIMIT 1
+);
+
+-- Drop it
+SET @sql = IF(@fk_name IS NOT NULL,
+  CONCAT('ALTER TABLE `comments` DROP FOREIGN KEY `', @fk_name, '`'),
+  'SELECT "No existing FK on comments.user_id" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Make user_id nullable
+ALTER TABLE `comments` MODIFY COLUMN `user_id` int unsigned NULL;
+
+-- Re-add with SET NULL
+SET @fk_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'comments'
+    AND COLUMN_NAME = 'user_id'
+    AND REFERENCED_TABLE_NAME = 'users'
+);
+SET @sql = IF(@fk_exists = 0,
+  'ALTER TABLE `comments` ADD CONSTRAINT `comments_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE SET NULL ON UPDATE CASCADE',
+  'SELECT "FK on comments.user_id already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '002 done: comments.user_id now nullable with SET NULL FK' AS status;
+
+
+-- ============================================================================
+-- 003: Add FK + index on media.post_id (column already exists in prod)
+-- ============================================================================
+
+-- Add column only if missing (it exists in prod, but be safe)
+SET @col_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'media'
+    AND COLUMN_NAME = 'post_id'
+);
+SET @sql = IF(@col_exists = 0,
+  'ALTER TABLE `media` ADD COLUMN `post_id` int unsigned NULL AFTER `user_id`',
+  'SELECT "media.post_id already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Add FK if missing
+SET @fk_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'media'
+    AND COLUMN_NAME = 'post_id'
+    AND REFERENCED_TABLE_NAME = 'posts'
+);
+SET @sql = IF(@fk_exists = 0,
+  'ALTER TABLE `media` ADD CONSTRAINT `media_post_id_posts_id_fk` FOREIGN KEY (`post_id`) REFERENCES `posts` (`id`) ON DELETE CASCADE ON UPDATE CASCADE',
+  'SELECT "FK on media.post_id already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Add index if missing
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'media'
+    AND INDEX_NAME = 'idx_media_postId'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_media_postId` ON `media` (`post_id`)',
+  'SELECT "Index idx_media_postId already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '003 done: media.post_id FK + index added' AS status;
+
+
+-- ============================================================================
+-- 003b: Backfill media.post_id from media_relations (if table exists)
+-- ============================================================================
+
+SET @tbl_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.TABLES
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'media_relations'
+);
+-- NOTE: mr.id is the entity/post ID (composite PK column), not an auto-increment PK.
+-- The old media_relations model used (id, media_id, type) where id = the related entity's PK.
+SET @sql = IF(@tbl_exists > 0,
+  'UPDATE `media` m JOIN `media_relations` mr ON mr.media_id = m.id AND mr.type = ''post'' SET m.post_id = mr.id WHERE m.post_id IS NULL',
+  'SELECT "media_relations table does not exist, skipping backfill" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '003b done: media.post_id backfilled from media_relations' AS status;
+
+
+-- ============================================================================
+-- 004: SKIPPED — image_id FK would be immediately removed by 007
+-- ============================================================================
+
+SELECT '004 skipped: posts.image_id FK not needed (removed in 007)' AS status;
+
+
+-- ============================================================================
+-- 005: Add performance indexes
+-- ============================================================================
+
+-- idx_posts_status_groupId
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'posts'
+    AND INDEX_NAME = 'idx_posts_status_groupId'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_posts_status_groupId` ON `posts` (`status`, `group_id`)',
+  'SELECT "idx_posts_status_groupId exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_posts_status_userId
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'posts'
+    AND INDEX_NAME = 'idx_posts_status_userId'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_posts_status_userId` ON `posts` (`status`, `user_id`)',
+  'SELECT "idx_posts_status_userId exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_posts_status_createdAt
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'posts'
+    AND INDEX_NAME = 'idx_posts_status_createdAt'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_posts_status_createdAt` ON `posts` (`status`, `created_at`)',
+  'SELECT "idx_posts_status_createdAt exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_comments_postId_createdAt
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'comments'
+    AND INDEX_NAME = 'idx_comments_postId_createdAt'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_comments_postId_createdAt` ON `comments` (`post_id`, `created_at`)',
+  'SELECT "idx_comments_postId_createdAt exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_comments_createdAt
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'comments'
+    AND INDEX_NAME = 'idx_comments_createdAt'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_comments_createdAt` ON `comments` (`created_at`)',
+  'SELECT "idx_comments_createdAt exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_messages_threadId_userId
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'messages'
+    AND INDEX_NAME = 'idx_messages_threadId_userId'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_messages_threadId_userId` ON `messages` (`thread_id`, `user_id`)',
+  'SELECT "idx_messages_threadId_userId exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_blog_status_authorId
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'blog'
+    AND INDEX_NAME = 'idx_blog_status_authorId'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_blog_status_authorId` ON `blog` (`status`, `author_id`)',
+  'SELECT "idx_blog_status_authorId exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- idx_groups_users_userId_type
+SET @idx_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.STATISTICS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'groups_users'
+    AND INDEX_NAME = 'idx_groups_users_userId_type'
+);
+SET @sql = IF(@idx_exists = 0,
+  'CREATE INDEX `idx_groups_users_userId_type` ON `groups_users` (`user_id`, `type`)',
+  'SELECT "idx_groups_users_userId_type exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '005 done: 8 performance indexes added' AS status;
+
+
+-- ============================================================================
+-- 006: CASCADE FKs for user deletion (posts + blog only)
+-- ============================================================================
+-- media, messages, messages_subscribers, groups_users, activations already
+-- have ON DELETE CASCADE in production — no changes needed.
+
+-- posts.user_id — no FK exists in production
+SET @fk_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'posts'
+    AND COLUMN_NAME = 'user_id'
+    AND REFERENCED_TABLE_NAME = 'users'
+);
+SET @sql = IF(@fk_exists = 0,
+  'ALTER TABLE `posts` ADD CONSTRAINT `fk_posts_user_id` FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE',
+  'SELECT "FK on posts.user_id already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- blog.author_id — FK exists but without CASCADE, need to replace
+-- Find existing FK name
+SET @fk_name = (
+  SELECT CONSTRAINT_NAME
+  FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'blog'
+    AND COLUMN_NAME = 'author_id'
+    AND REFERENCED_TABLE_NAME = 'users'
+    AND REFERENCED_COLUMN_NAME = 'id'
+  LIMIT 1
+);
+
+-- Drop old FK
+SET @sql = IF(@fk_name IS NOT NULL,
+  CONCAT('ALTER TABLE `blog` DROP FOREIGN KEY `', @fk_name, '`'),
+  'SELECT "No existing FK on blog.author_id" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Add new FK with CASCADE
+SET @fk_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'blog'
+    AND COLUMN_NAME = 'author_id'
+    AND REFERENCED_TABLE_NAME = 'users'
+);
+SET @sql = IF(@fk_exists = 0,
+  'ALTER TABLE `blog` ADD CONSTRAINT `fk_blog_author_id` FOREIGN KEY (`author_id`) REFERENCES `users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE',
+  'SELECT "FK on blog.author_id already exists" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '006 done: CASCADE FKs added for posts.user_id and blog.author_id' AS status;
+
+
+-- ============================================================================
+-- 007: Remove image_id from posts
+-- ============================================================================
+
+-- Drop any FK on posts.image_id (none in prod, but be safe)
+SET @fk_name = (
+  SELECT CONSTRAINT_NAME
+  FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
+  WHERE TABLE_SCHEMA = DATABASE()
+    AND TABLE_NAME = 'posts'
+    AND COLUMN_NAME = 'image_id'
+    AND REFERENCED_TABLE_NAME IS NOT NULL
+  LIMIT 1
+);
+SET @sql = IF(@fk_name IS NOT NULL,
+  CONCAT('ALTER TABLE `posts` DROP FOREIGN KEY `', @fk_name, '`'),
+  'SELECT "No FK on posts.image_id" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Drop column (index is dropped automatically with it)
+SET @col_exists = (
+  SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS
+  WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'posts'
+    AND COLUMN_NAME = 'image_id'
+);
+SET @sql = IF(@col_exists > 0,
+  'ALTER TABLE `posts` DROP COLUMN `image_id`',
+  'SELECT "posts.image_id does not exist" AS status'
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SELECT '007 done: posts.image_id removed' AS status;
+
+
+-- ============================================================================
+SET FOREIGN_KEY_CHECKS = @ORIG_FOREIGN_KEY_CHECKS;
+
+SELECT 'All migrations completed successfully' AS status;
diff --git a/models/activation.js b/models/activation.js
index 61edf43..996de20 100644
--- a/models/activation.js
+++ b/models/activation.js
@@ -7,6 +7,8 @@ module.exports = function ActivationModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: false,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     code: { type: DataTypes.STRING(42), allowNull: false, defaultValue: '' },
     verified_at: { type: DataTypes.DATE, allowNull: true },
diff --git a/models/blog.js b/models/blog.js
index 6a23139..3552bf3 100644
--- a/models/blog.js
+++ b/models/blog.js
@@ -12,6 +12,8 @@ module.exports = function BlogModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: false,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
   }, {
     tableName: 'blog',
diff --git a/models/comment.js b/models/comment.js
index b126a6e..28a9f3c 100644
--- a/models/comment.js
+++ b/models/comment.js
@@ -14,7 +14,9 @@ module.exports = (sequelize, DataTypes) => {
         model: 'users',
         key: 'id',
       },
-      allowNull: false,
+      allowNull: true,
+      onDelete: 'SET NULL',
+      onUpdate: 'CASCADE',
     },
     parent_id: { type: DataTypes.INTEGER.UNSIGNED, default: null },
     email_message_id: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
diff --git a/models/groups.js b/models/groups.js
index ac2186f..7276628 100644
--- a/models/groups.js
+++ b/models/groups.js
@@ -3,7 +3,7 @@ module.exports = function groupModel(sequelize, DataTypes) {
     type: { type: DataTypes.ENUM('open', 'private'), allowNull: false, defaultValue: 'open' },
     slug: { type: DataTypes.STRING, allowNull: false, unique: true },
     title: { type: DataTypes.STRING, allowNull: false },
-    description: { type: DataTypes.STRING, allowNull: true },
+    description: { type: DataTypes.STRING, allowNull: false },
   }, {
     tableName: 'groups',
     underscored: true,
diff --git a/models/groupsUsers.js b/models/groupsUsers.js
index 218b87d..d6190c4 100644
--- a/models/groupsUsers.js
+++ b/models/groupsUsers.js
@@ -8,6 +8,8 @@ module.exports = function groupsContentModel(sequelize, DataTypes) {
       },
       allowNull: false,
       primaryKey: true,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     group_id: {
       type: DataTypes.INTEGER.UNSIGNED,
diff --git a/models/index.js b/models/index.js
index b56253a..57be271 100644
--- a/models/index.js
+++ b/models/index.js
@@ -1,11 +1,19 @@
 const fs = require('fs')
 const path = require('path')
+const { promisify } = require('util')
 const Sequelize = require('sequelize')
 
+const fsUnlink = promisify(fs.unlink)
+
 const basename = path.basename(module.filename)
 const env = process.env.NODE_ENV || 'development'
 const config = require('../config/db')[env]
 const redisClient = require('../config/redis')
+const logger = require('../config/logger')
+
+const safePath = require('../utils/safePath')
+
+const { UPLOADS_DIR, THUMBNAIL_DIR } = process.env
 
 const db = {}
 
@@ -81,6 +89,81 @@ db.Message.addHook('afterCreate', message => {
   triggerEmail('new_pm', { message_id: message.id })
 })
 
+// Clean up physical files and thumbnails when media records are deleted
+db.Media.addHook('beforeDestroy', async media => {
+  if (!UPLOADS_DIR) {
+    logger.error('UPLOADS_DIR is not set, skipping file cleanup', { fileId: media.id })
+    return
+  }
+  let filePath
+  let userThumbDir
+  try {
+    filePath = safePath(UPLOADS_DIR, String(media.user_id), media.filename)
+    if (THUMBNAIL_DIR) {
+      userThumbDir = safePath(THUMBNAIL_DIR, String(media.user_id))
+    }
+  } catch (err) {
+    logger.error('PATH_TRAVERSAL_BLOCKED', {
+      error: err.message, fileId: media.id, userId: media.user_id, filename: media.filename,
+    })
+    return
+  }
+
+  // Delete original file
+  try {
+    await fsUnlink(filePath)
+    logger.info(`Deleted file: ${filePath}`)
+  } catch (err) {
+    logger.error('FILE_CLEANUP_ERROR', {
+      error: err, filePath, fileId: media.id, userId: media.user_id,
+    })
+    // Don't throw - allow DB deletion to proceed even if file delete fails
+  }
+
+  // Delete all generated thumbnails for this file
+  if (userThumbDir) {
+    try {
+      // Check if user thumbnail directory exists
+      const stat = await fs.promises.stat(userThumbDir)
+      if (stat.isDirectory()) {
+        // Recursively scan for all thumbnails of this file
+        await deleteThumbnailsRecursive(userThumbDir, media.filename)
+      }
+    } catch (err) {
+      // Directory doesn't exist or other error - log but don't fail
+      logger.error('THUMBNAIL_CLEANUP_ERROR', {
+        error: err, userThumbDir, fileId: media.id, userId: media.user_id,
+      })
+    }
+  }
+})
+
+// Helper function to recursively delete thumbnails
+async function deleteThumbnailsRecursive(dir, targetFilename) {
+  try {
+    const entries = await fs.promises.readdir(dir, { withFileTypes: true })
+
+    for (const entry of entries) {
+      const fullPath = path.join(dir, entry.name)
+
+      if (entry.isDirectory()) {
+        // Recursively scan subdirectories
+        await deleteThumbnailsRecursive(fullPath, targetFilename)
+      } else if (entry.isFile() && entry.name === targetFilename) {
+        // Found a thumbnail - delete it
+        try {
+          await fsUnlink(fullPath)
+          logger.info(`Deleted thumbnail: ${fullPath}`)
+        } catch (err) {
+          logger.error('THUMBNAIL_DELETE_ERROR', { error: err, path: fullPath })
+        }
+      }
+    }
+  } catch (err) {
+    logger.error('THUMBNAIL_SCAN_ERROR', { error: err, dir })
+  }
+}
+
 db.sequelize = sequelize
 db.Sequelize = Sequelize
 db.Op = Sequelize.Op
diff --git a/models/media.js b/models/media.js
index 36fe468..ad2b007 100644
--- a/models/media.js
+++ b/models/media.js
@@ -7,6 +7,8 @@ module.exports = function MediaModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: false,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     post_id: {
       type: DataTypes.INTEGER.UNSIGNED,
@@ -15,6 +17,8 @@ module.exports = function MediaModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: true,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     filename: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
     filepath: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
diff --git a/models/messages.js b/models/messages.js
index 192d714..951e555 100644
--- a/models/messages.js
+++ b/models/messages.js
@@ -15,6 +15,8 @@ module.exports = function MessageModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: false,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     subject: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
     message: { type: DataTypes.TEXT, allowNull: false, defaultValue: '' },
diff --git a/models/messagesSubscribers.js b/models/messagesSubscribers.js
index 55a568b..4289d9f 100644
--- a/models/messagesSubscribers.js
+++ b/models/messagesSubscribers.js
@@ -17,6 +17,8 @@ module.exports = function MessageSubscriberModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: false,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     seen: { type: DataTypes.DATE, allowNull: true },
   }, {
diff --git a/models/posts.js b/models/posts.js
index 4d4e340..18ff36a 100644
--- a/models/posts.js
+++ b/models/posts.js
@@ -13,9 +13,11 @@ module.exports = function PostModel(sequelize, DataTypes) {
         key: 'id',
       },
       allowNull: false,
+      onDelete: 'CASCADE',
+      onUpdate: 'CASCADE',
     },
     status: { type: DataTypes.ENUM('draft', 'published', 'deleted'), allowNull: false, defaultValue: 'draft' },
-    slug: { type: DataTypes.STRING, allowNull: false, unique: true },
+    slug: { type: DataTypes.STRING, allowNull: true, unique: true },
     group_id: {
       type: DataTypes.INTEGER.UNSIGNED,
       references: {
diff --git a/models/users.js b/models/users.js
index d14804c..e693ee8 100644
--- a/models/users.js
+++ b/models/users.js
@@ -57,6 +57,9 @@ module.exports = function userDefinition(sequelize, DataTypes) {
       },
     },
     last_login: { type: DataTypes.DATE, allowNull: true },
+    failed_login_attempts: { type: DataTypes.INTEGER.UNSIGNED, allowNull: false, defaultValue: 0 },
+    last_failed_login: { type: DataTypes.DATE, allowNull: true },
+    locked_until: { type: DataTypes.DATE, allowNull: true },
     timezone: { allowNull: false, defaultValue: 'Europe/Paris', type: DataTypes.ENUM('Africa/Abidjan', 'Africa/Accra', 'Africa/Addis_Ababa', 'Africa/Algiers', 'Africa/Asmera', 'Africa/Bamako', 'Africa/Bangui', 'Africa/Banjul', 'Africa/Bissau', 'Africa/Blantyre', 'Africa/Brazzaville', 'Africa/Bujumbura', 'Africa/Cairo', 'Africa/Casablanca', 'Africa/Ceuta', 'Africa/Conakry', 'Africa/Dakar', 'Africa/Dar_es_Salaam', 'Africa/Djibouti', 'Africa/Douala', 'Africa/El_Aaiun', 'Africa/Freetown', 'Africa/Gaborone', 'Africa/Harare', 'Africa/Johannesburg', 'Africa/Kampala', 'Africa/Khartoum', 'Africa/Kigali', 'Africa/Kinshasa', 'Africa/Lagos', 'Africa/Libreville', 'Africa/Lome', 'Africa/Luanda', 'Africa/Lubumbashi', 'Africa/Lusaka', 'Africa/Malabo', 'Africa/Maputo', 'Africa/Maseru', 'Africa/Mbabane', 'Africa/Mogadishu', 'Africa/Monrovia', 'Africa/Nairobi', 'Africa/Ndjamena', 'Africa/Niamey', 'Africa/Nouakchott', 'Africa/Ouagadougou', 'Africa/Porto-Novo', 'Africa/Sao_Tome', 'Africa/Timbuktu', 'Africa/Tripoli', 'Africa/Tunis', 'Africa/Windhoek', 'America/Adak', 'America/Anchorage', 'America/Anguilla', 'America/Antigua', 'America/Araguaina', 'America/Aruba', 'America/Asuncion', 'America/Atka', 'America/Barbados', 'America/Belem', 'America/Belize', 'America/Boa_Vista', 'America/Bogota', 'America/Boise', 'America/Buenos_Aires', 'America/Cambridge_Bay', 'America/Cancun', 'America/Caracas', 'America/Catamarca', 'America/Cayenne', 'America/Cayman', 'America/Chicago', 'America/Chihuahua', 'America/Cordoba', 'America/Costa_Rica', 'America/Cuiaba', 'America/Curacao', 'America/Danmarkshavn', 'America/Dawson', 'America/Dawson_Creek', 'America/Denver', 'America/Detroit', 'America/Dominica', 'America/Edmonton', 'America/Eirunepe', 'America/El_Salvador', 'America/Ensenada', 'America/Fort_Wayne', 'America/Fortaleza', 'America/Glace_Bay', 'America/Godthab', 'America/Goose_Bay', 'America/Grand_Turk', 'America/Grenada', 'America/Guadeloupe', 'America/Guatemala', 'America/Guayaquil', 'America/Guyana', 'America/Halifax', 'America/Havana', 'America/Hermosillo', 'America/Indiana/Indianapolis', 'America/Indiana/Knox', 'America/Indiana/Marengo', 'America/Indiana/Vevay', 'America/Indianapolis', 'America/Inuvik', 'America/Iqaluit', 'America/Jamaica', 'America/Jujuy', 'America/Juneau', 'America/Kentucky/Louisville', 'America/Kentucky/Monticello', 'America/Knox_IN', 'America/La_Paz', 'America/Lima', 'America/Los_Angeles', 'America/Louisville', 'America/Maceio', 'America/Managua', 'America/Manaus', 'America/Martinique', 'America/Mazatlan', 'America/Mendoza', 'America/Menominee', 'America/Merida', 'America/Mexico_City', 'America/Miquelon', 'America/Monterrey', 'America/Montevideo', 'America/Montreal', 'America/Montserrat', 'America/Nassau', 'America/New_York', 'America/Nipigon', 'America/Nome', 'America/Noronha', 'America/North_Dakota/Center', 'America/Panama', 'America/Pangnirtung', 'America/Paramaribo', 'America/Phoenix', 'America/Port-au-Prince', 'America/Port_of_Spain', 'America/Porto_Acre', 'America/Porto_Velho', 'America/Puerto_Rico', 'America/Rainy_River', 'America/Rankin_Inlet', 'America/Recife', 'America/Regina', 'America/Rio_Branco', 'America/Rosario', 'America/Santiago', 'America/Santo_Domingo', 'America/Sao_Paulo', 'America/Scoresbysund', 'America/Shiprock', 'America/St_Johns', 'America/St_Kitts', 'America/St_Lucia', 'America/St_Thomas', 'America/St_Vincent', 'America/Swift_Current', 'America/Tegucigalpa', 'America/Thule', 'America/Thunder_Bay', 'America/Tijuana', 'America/Tortola', 'America/Toronto', 'America/Vancouver', 'America/Virgin', 'America/Whitehorse', 'America/Winnipeg', 'America/Yakutat', 'America/Yellowknife', 'Antarctica/Casey', 'Antarctica/Davis', 'Antarctica/DumontDUrville', 'Antarctica/Mawson', 'Antarctica/McMurdo', 'Antarctica/Palmer', 'Antarctica/South_Pole', 'Antarctica/Syowa', 'Antarctica/Vostok', 'Arctic/Longyearbyen', 'Asia/Aden', 'Asia/Almaty', 'Asia/Amman', 'Asia/Anadyr', 'Asia/Aqtau', 'Asia/Aqtobe', 'Asia/Ashgabat', 'Asia/Ashkhabad', 'Asia/Baghdad', 'Asia/Bahrain', 'Asia/Baku', 'Asia/Bangkok', 'Asia/Beirut', 'Asia/Bishkek', 'Asia/Brunei', 'Asia/Calcutta', 'Asia/Choibalsan', 'Asia/Chongqing', 'Asia/Chungking', 'Asia/Colombo', 'Asia/Dacca', 'Asia/Damascus', 'Asia/Dhaka', 'Asia/Dili', 'Asia/Dubai', 'Asia/Dushanbe', 'Asia/Gaza', 'Asia/Harbin', 'Asia/Hong_Kong', 'Asia/Hovd', 'Asia/Irkutsk', 'Asia/Ishigaki', 'Asia/Istanbul', 'Asia/Jakarta', 'Asia/Jayapura', 'Asia/Jerusalem', 'Asia/Kabul', 'Asia/Kamchatka', 'Asia/Karachi', 'Asia/Kashgar', 'Asia/Katmandu', 'Asia/Krasnoyarsk', 'Asia/Kuala_Lumpur', 'Asia/Kuching', 'Asia/Kuwait', 'Asia/Macao', 'Asia/Macau', 'Asia/Magadan', 'Asia/Manila', 'Asia/Muscat', 'Asia/Nicosia', 'Asia/Novosibirsk', 'Asia/Omsk', 'Asia/Oral', 'Asia/Phnom_Penh', 'Asia/Pontianak', 'Asia/Pyongyang', 'Asia/Qatar', 'Asia/Qyzylorda', 'Asia/Rangoon', 'Asia/Riyadh', 'Asia/Riyadh87', 'Asia/Riyadh88', 'Asia/Riyadh89', 'Asia/Saigon', 'Asia/Sakhalin', 'Asia/Samarkand', 'Asia/Seoul', 'Asia/Shanghai', 'Asia/Singapore', 'Asia/Taipei', 'Asia/Tashkent', 'Asia/Tbilisi', 'Asia/Tehran', 'Asia/Tel_Aviv', 'Asia/Thimbu', 'Asia/Thimphu', 'Asia/Tokyo', 'Asia/Ujung_Pandang', 'Asia/Ulaanbaatar', 'Asia/Ulan_Bator', 'Asia/Urumqi', 'Asia/Vientiane', 'Asia/Vladivostok', 'Asia/Yakutsk', 'Asia/Yekaterinburg', 'Asia/Yerevan', 'Atlantic/Azores', 'Atlantic/Bermuda', 'Atlantic/Canary', 'Atlantic/Cape_Verde', 'Atlantic/Faeroe', 'Atlantic/Jan_Mayen', 'Atlantic/Madeira', 'Atlantic/Reykjavik', 'Atlantic/South_Georgia', 'Atlantic/St_Helena', 'Atlantic/Stanley', 'Australia/ACT', 'Australia/Adelaide', 'Australia/Brisbane', 'Australia/Broken_Hill', 'Australia/Canberra', 'Australia/Darwin', 'Australia/Hobart', 'Australia/LHI', 'Australia/Lindeman', 'Australia/Lord_Howe', 'Australia/Melbourne', 'Australia/NSW', 'Australia/North', 'Australia/Perth', 'Australia/Queensland', 'Australia/South', 'Australia/Sydney', 'Australia/Tasmania', 'Australia/Victoria', 'Australia/West', 'Australia/Yancowinna', 'Brazil/Acre', 'Brazil/DeNoronha', 'Brazil/East', 'Brazil/West', 'Canada/Atlantic', 'Canada/Central', 'Canada/East-Saskatchewan', 'Canada/Eastern', 'Canada/Mountain', 'Canada/Newfoundland', 'Canada/Pacific', 'Canada/Saskatchewan', 'Canada/Yukon', 'Chile/Continental', 'Chile/EasterIsland', 'China/Beijing', 'China/Shanghai', 'Cuba', 'Egypt', 'Eire', 'Europe/Amsterdam', 'Europe/Andorra', 'Europe/Athens', 'Europe/Belfast', 'Europe/Belgrade', 'Europe/Berlin', 'Europe/Bratislava', 'Europe/Brussels', 'Europe/Bucharest', 'Europe/Budapest', 'Europe/Chisinau', 'Europe/Copenhagen', 'Europe/Dublin', 'Europe/Gibraltar', 'Europe/Helsinki', 'Europe/Istanbul', 'Europe/Kaliningrad', 'Europe/Kiev', 'Europe/Lisbon', 'Europe/Ljubljana', 'Europe/London', 'Europe/Luxembourg', 'Europe/Madrid', 'Europe/Malta', 'Europe/Minsk', 'Europe/Monaco', 'Europe/Moscow', 'Europe/Nicosia', 'Europe/Oslo', 'Europe/Paris', 'Europe/Prague', 'Europe/Riga', 'Europe/Rome', 'Europe/Samara', 'Europe/San_Marino', 'Europe/Sarajevo', 'Europe/Simferopol', 'Europe/Skopje', 'Europe/Sofia', 'Europe/Stockholm', 'Europe/Tallinn', 'Europe/Tirane', 'Europe/Tiraspol', 'Europe/Uzhgorod', 'Europe/Vaduz', 'Europe/Vatican', 'Europe/Vienna', 'Europe/Vilnius', 'Europe/Warsaw', 'Europe/Zagreb', 'Europe/Zaporozhye', 'Europe/Zurich', 'Hongkong', 'Iceland', 'Indian/Antananarivo', 'Indian/Chagos', 'Indian/Christmas', 'Indian/Cocos', 'Indian/Comoro', 'Indian/Kerguelen', 'Indian/Mahe', 'Indian/Maldives', 'Indian/Mauritius', 'Indian/Mayotte', 'Indian/Reunion', 'Iran', 'Israel', 'Jamaica', 'Japan', 'Kwajalein', 'Libya', 'Mexico/BajaNorte', 'Mexico/BajaSur', 'Mexico/General', 'Mideast/Riyadh87', 'Mideast/Riyadh88', 'Mideast/Riyadh89', 'Pacific/Apia', 'Pacific/Auckland', 'Pacific/Chatham', 'Pacific/Easter', 'Pacific/Efate', 'Pacific/Enderbury', 'Pacific/Fakaofo', 'Pacific/Fiji', 'Pacific/Funafuti', 'Pacific/Galapagos', 'Pacific/Gambier', 'Pacific/Guadalcanal', 'Pacific/Guam', 'Pacific/Honolulu', 'Pacific/Johnston', 'Pacific/Kiritimati', 'Pacific/Kosrae', 'Pacific/Kwajalein', 'Pacific/Majuro', 'Pacific/Marquesas', 'Pacific/Midway', 'Pacific/Nauru', 'Pacific/Niue', 'Pacific/Norfolk', 'Pacific/Noumea', 'Pacific/Pago_Pago', 'Pacific/Palau', 'Pacific/Pitcairn', 'Pacific/Ponape', 'Pacific/Port_Moresby', 'Pacific/Rarotonga', 'Pacific/Saipan', 'Pacific/Samoa', 'Pacific/Tahiti', 'Pacific/Tarawa', 'Pacific/Tongatapu', 'Pacific/Truk', 'Pacific/Wake', 'Pacific/Wallis', 'Pacific/Yap', 'Poland', 'Portugal', 'Singapore', 'SystemV/AST4', 'SystemV/AST4ADT', 'SystemV/CST6', 'SystemV/CST6CDT', 'SystemV/EST5', 'SystemV/EST5EDT', 'SystemV/HST10', 'SystemV/MST7', 'SystemV/MST7MDT', 'SystemV/PST8', 'SystemV/PST8PDT', 'SystemV/YST9', 'SystemV/YST9YDT', 'Turkey', 'US/Alaska', 'US/Aleutian', 'US/Arizona', 'US/Central', 'US/East-Indiana', 'US/Eastern', 'US/Hawaii', 'US/Indiana-Starke', 'US/Michigan', 'US/Mountain', 'US/Pacific', 'US/Samoa') },
     first_name: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
     last_name: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
@@ -72,9 +75,7 @@ module.exports = function userDefinition(sequelize, DataTypes) {
     lang: { type: DataTypes.STRING, allowNull: false, defaultValue: 'en' },
     role: { type: DataTypes.INTEGER, allowNull: false, defaultValue: 0 },
     activated: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: 0 },
-    old_uid: { type: DataTypes.INTEGER, allowNull: false, defaultValue: 0 },
     auto_translate: { type: DataTypes.BOOLEAN, allowNull: true },
-    avatarpath: { type: DataTypes.STRING, allowNull: false, defaultValue: '' },
   }, {
     tableName: 'users',
     underscored: true,
diff --git a/package-lock.json b/package-lock.json
index 4751a5d..88b8c44 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -316,20 +316,20 @@
       }
     },
     "node_modules/@dabh/diagnostics": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/@dabh/diagnostics/-/diagnostics-2.0.3.tgz",
-      "integrity": "sha512-hrlQOIi7hAfzsMqlGSFyVucrx38O+j6wiGOf//H2ecvIEqYN4ADBSS2iLMh5UFyDunCNniUIPk/q3riFv45xRA==",
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/@dabh/diagnostics/-/diagnostics-2.0.8.tgz",
+      "integrity": "sha512-R4MSXTVnuMzGD7bzHdW2ZhhdPC/igELENcq5IjEverBvq5hn1SXCWcsi6eSsdWP0/Ur+SItRRjAktmdoX/8R/Q==",
       "license": "MIT",
       "dependencies": {
-        "colorspace": "1.1.x",
+        "@so-ric/colorspace": "^1.1.6",
         "enabled": "2.0.x",
         "kuler": "^2.0.0"
       }
     },
     "node_modules/@eslint-community/eslint-utils": {
-      "version": "4.7.0",
-      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.7.0.tgz",
-      "integrity": "sha512-dyybb3AcajC7uha6CvhdVRJqaKyn7w2YKqKyAN37NKYgZT36w+iRb0Dymmc5qEJ549c/S31cMMSFd75bteCpCw==",
+      "version": "4.9.1",
+      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz",
+      "integrity": "sha512-phrYmNiYppR7znFEdqgfWHXR6NCkZEK7hwWDHZUjit/2/U0r6XvkDl0SYnoM51Hq7FhCGdLDT6zxCCOY1hexsQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -346,9 +346,9 @@
       }
     },
     "node_modules/@eslint-community/regexpp": {
-      "version": "4.12.1",
-      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.1.tgz",
-      "integrity": "sha512-CCZCDJuduB9OUkFkY2IgppNZMi2lBQgD2qzwXkEia16cge2pijY/aXi96CJMquDMn3nJdlPV1A5KrJEXwfLNzQ==",
+      "version": "4.12.2",
+      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz",
+      "integrity": "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -484,9 +484,9 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/@ioredis/commands": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/@ioredis/commands/-/commands-1.3.0.tgz",
-      "integrity": "sha512-M/T6Zewn7sDaBQEqIZ8Rb+i9y8qfGmq+5SDFSf9sA2lUZTmdDLVdOiQaeDp+Q4wElZ9HG1GAX5KhDaidp6LQsQ==",
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@ioredis/commands/-/commands-1.5.0.tgz",
+      "integrity": "sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==",
       "license": "MIT"
     },
     "node_modules/@noble/hashes": {
@@ -540,9 +540,9 @@
       }
     },
     "node_modules/@paralleldrive/cuid2": {
-      "version": "2.2.2",
-      "resolved": "https://registry.npmjs.org/@paralleldrive/cuid2/-/cuid2-2.2.2.tgz",
-      "integrity": "sha512-ZOBkgDwEdoYVlSeRbYYXs0S9MejQofiVYoTbKzy/6GQa39/q5tQU2IX46+shYnUkpEl3wc+J6wRlar7r2EK2xA==",
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/@paralleldrive/cuid2/-/cuid2-2.3.1.tgz",
+      "integrity": "sha512-XO7cAxhnTZl0Yggq6jOgjiOHhbgcO4NqFqwSmQpjK3b6TEE6Uj/jfSk6wzYyemh3+I0sHirKSetjQwn5cZktFw==",
       "license": "MIT",
       "dependencies": {
         "@noble/hashes": "^1.1.5"
@@ -619,6 +619,62 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@so-ric/colorspace": {
+      "version": "1.1.6",
+      "resolved": "https://registry.npmjs.org/@so-ric/colorspace/-/colorspace-1.1.6.tgz",
+      "integrity": "sha512-/KiKkpHNOBgkFJwu9sh48LkHSMYGyuTcSFK/qMBdnOAlrRJzRSXAOFB5qwzaVQuDl8wAvHVMkaASQDReTahxuw==",
+      "license": "MIT",
+      "dependencies": {
+        "color": "^5.0.2",
+        "text-hex": "1.0.x"
+      }
+    },
+    "node_modules/@so-ric/colorspace/node_modules/color": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/color/-/color-5.0.3.tgz",
+      "integrity": "sha512-ezmVcLR3xAVp8kYOm4GS45ZLLgIE6SPAFoduLr6hTDajwb3KZ2F46gulK3XpcwRFb5KKGCSezCBAY4Dw4HsyXA==",
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^3.1.3",
+        "color-string": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@so-ric/colorspace/node_modules/color-convert": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-3.1.3.tgz",
+      "integrity": "sha512-fasDH2ont2GqF5HpyO4w0+BcewlhHEZOFn9c1ckZdHpJ56Qb7MHhH/IcJZbBGgvdtwdwNbLvxiBEdg336iA9Sg==",
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.6"
+      }
+    },
+    "node_modules/@so-ric/colorspace/node_modules/color-name": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-2.1.0.tgz",
+      "integrity": "sha512-1bPaDNFm0axzE4MEAzKPuqKWeRaT43U/hyxKPBdqTfmPF+d6n7FSoTFxLVULUJOmiLp01KjhIPPH+HrXZJN4Rg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.20"
+      }
+    },
+    "node_modules/@so-ric/colorspace/node_modules/color-string": {
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/color-string/-/color-string-2.1.4.tgz",
+      "integrity": "sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg==",
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@types/accepts": {
       "version": "1.3.7",
       "resolved": "https://registry.npmjs.org/@types/accepts/-/accepts-1.3.7.tgz",
@@ -673,9 +729,9 @@
       "license": "MIT"
     },
     "node_modules/@types/cookies": {
-      "version": "0.9.1",
-      "resolved": "https://registry.npmjs.org/@types/cookies/-/cookies-0.9.1.tgz",
-      "integrity": "sha512-E/DPgzifH4sM1UMadJMWd6mO2jOd4g1Ejwzx8/uRCDpJis1IrlyQEcGAYEomtAqRYmD5ORbNXMeI9U0RiVGZbg==",
+      "version": "0.9.2",
+      "resolved": "https://registry.npmjs.org/@types/cookies/-/cookies-0.9.2.tgz",
+      "integrity": "sha512-1AvkDdZM2dbyFybL4fxpuNCaWyv//0AwsuUk2DWeXyM1/5ZKm6W3z6mQi24RZ4l2ucY+bkSHzbDVpySqPGuV8A==",
       "license": "MIT",
       "dependencies": {
         "@types/connect": "*",
@@ -694,21 +750,21 @@
       }
     },
     "node_modules/@types/express": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.23.tgz",
-      "integrity": "sha512-Crp6WY9aTYP3qPi2wGDo9iUe/rceX01UMhnF1jmwDcKCFM6cx7YhGP/Mpr3y9AASpfHixIG0E6azCcL5OcDHsQ==",
+      "version": "4.17.25",
+      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.25.tgz",
+      "integrity": "sha512-dVd04UKsfpINUnK0yBoYHDF3xu7xVH4BuDotC/xGuycx4CgbP48X/KF/586bcObxT0HENHXEU8Nqtu6NR+eKhw==",
       "license": "MIT",
       "dependencies": {
         "@types/body-parser": "*",
         "@types/express-serve-static-core": "^4.17.33",
         "@types/qs": "*",
-        "@types/serve-static": "*"
+        "@types/serve-static": "^1"
       }
     },
     "node_modules/@types/express-serve-static-core": {
-      "version": "4.19.6",
-      "resolved": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.19.6.tgz",
-      "integrity": "sha512-N4LZ2xG7DatVqhCZzOGb1Yi5lMbXSZcmdLDe9EzSndPV2HpWYWzRbaerl2n27irrm94EPpprqa8KpskPT085+A==",
+      "version": "4.19.8",
+      "resolved": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.19.8.tgz",
+      "integrity": "sha512-02S5fmqeoKzVZCHPZid4b8JH2eM5HzQLZWN2FohQEy/0eXTq8VXZfSN6Pcr3F6N9R/vNrj7cpgbhjie6m/1tCA==",
       "license": "MIT",
       "dependencies": {
         "@types/node": "*",
@@ -768,9 +824,9 @@
       }
     },
     "node_modules/@types/koa-compose": {
-      "version": "3.2.8",
-      "resolved": "https://registry.npmjs.org/@types/koa-compose/-/koa-compose-3.2.8.tgz",
-      "integrity": "sha512-4Olc63RY+MKvxMwVknCUDhRQX1pFQoBZ/lXcRLP69PQkEpze/0cr8LNqJQe5NFb/b19DWi2a5bTi2VAlQzhJuA==",
+      "version": "3.2.9",
+      "resolved": "https://registry.npmjs.org/@types/koa-compose/-/koa-compose-3.2.9.tgz",
+      "integrity": "sha512-BroAZ9FTvPiCy0Pi8tjD1OfJ7bgU1gQf0eR6e1Vm+JJATy9eKOG3hQMFtMciMawiSOVnLMdmUOC46s7HBhSTsA==",
       "license": "MIT",
       "dependencies": {
         "@types/koa": "*"
@@ -795,12 +851,12 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "24.2.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.2.1.tgz",
-      "integrity": "sha512-DRh5K+ka5eJic8CjH7td8QpYEV6Zo10gfRkjHCO3weqZHWDtAaSTFtl4+VMqOJ4N5jcuhZ9/l+yy8rVgw7BQeQ==",
+      "version": "25.0.10",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.0.10.tgz",
+      "integrity": "sha512-zWW5KPngR/yvakJgGOmZ5vTBemDoSqF3AcV/LrO5u5wTWyEAVVh+IT39G4gtyAkh3CtTZs8aX/yRM82OfzHJRg==",
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~7.10.0"
+        "undici-types": "~7.16.0"
       }
     },
     "node_modules/@types/node-fetch": {
@@ -832,24 +888,33 @@
       "license": "MIT"
     },
     "node_modules/@types/send": {
-      "version": "0.17.5",
-      "resolved": "https://registry.npmjs.org/@types/send/-/send-0.17.5.tgz",
-      "integrity": "sha512-z6F2D3cOStZvuk2SaP6YrwkNO65iTZcwA2ZkSABegdkAh/lf+Aa/YQndZVfmEXT5vgAp6zv06VQ3ejSVjAny4w==",
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-1.2.1.tgz",
+      "integrity": "sha512-arsCikDvlU99zl1g69TcAB3mzZPpxgw0UQnaHeC1Nwb015xp8bknZv5rIfri9xTOcMuaVgvabfIRA7PSZVuZIQ==",
       "license": "MIT",
       "dependencies": {
-        "@types/mime": "^1",
         "@types/node": "*"
       }
     },
     "node_modules/@types/serve-static": {
-      "version": "1.15.8",
-      "resolved": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.8.tgz",
-      "integrity": "sha512-roei0UY3LhpOJvjbIP6ZZFngyLKl5dskOtDhxY5THRSpO+ZI+nzJ+m5yUMzGrp89YRa7lvknKkMYjqQFGwA7Sg==",
+      "version": "1.15.10",
+      "resolved": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.10.tgz",
+      "integrity": "sha512-tRs1dB+g8Itk72rlSI2ZrW6vZg0YrLI81iQSTkMmOqnqCaNr/8Ek4VwWcN5vZgCYWbg/JJSGBlUaYGAOP73qBw==",
       "license": "MIT",
       "dependencies": {
         "@types/http-errors": "*",
         "@types/node": "*",
-        "@types/send": "*"
+        "@types/send": "<1"
+      }
+    },
+    "node_modules/@types/serve-static/node_modules/@types/send": {
+      "version": "0.17.6",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-0.17.6.tgz",
+      "integrity": "sha512-Uqt8rPBE8SY0RK8JB1EzVOIZ32uqy8HwdxCnoCOsYrvnswqmFZ/k+9Ikidlk/ImhsdvBsloHbAlewb2IEBV/Og==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mime": "^1",
+        "@types/node": "*"
       }
     },
     "node_modules/@types/triple-beam": {
@@ -859,9 +924,9 @@
       "license": "MIT"
     },
     "node_modules/@types/validator": {
-      "version": "13.15.2",
-      "resolved": "https://registry.npmjs.org/@types/validator/-/validator-13.15.2.tgz",
-      "integrity": "sha512-y7pa/oEJJ4iGYBxOpfAKn5b9+xuihvzDVnC/OSvlVnGxVg0pOqmjiMafiJ1KVNQEaPZf9HsEp5icEwGg8uIe5Q==",
+      "version": "13.15.10",
+      "resolved": "https://registry.npmjs.org/@types/validator/-/validator-13.15.10.tgz",
+      "integrity": "sha512-T8L6i7wCuyoK8A/ZeLYt1+q0ty3Zb9+qbSSvrIVitzT3YjZqkTZ40IbRsPanlB4h1QB3JVL1SYCdR6ngtFYcuA==",
       "license": "MIT"
     },
     "node_modules/@ungap/structured-clone": {
@@ -1206,10 +1271,18 @@
       }
     },
     "node_modules/b4a": {
-      "version": "1.6.7",
-      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.6.7.tgz",
-      "integrity": "sha512-OnAYlL5b7LEkALw87fUVafQw5rVR9RjwGd4KUwNQ6DrrNmaVaUCgLipfVlzrPQ4tWOR9P0IXGNOx50jYCCdSJg==",
-      "license": "Apache-2.0"
+      "version": "1.7.3",
+      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.7.3.tgz",
+      "integrity": "sha512-5Q2mfq2WfGuFp3uS//0s6baOJLMoVduPYVeNmDYxu5OUA1/cBfvr2RIS7vi62LdNj/urk1hfmj867I3qt6uZ7Q==",
+      "license": "Apache-2.0",
+      "peerDependencies": {
+        "react-native-b4a": "*"
+      },
+      "peerDependenciesMeta": {
+        "react-native-b4a": {
+          "optional": true
+        }
+      }
     },
     "node_modules/balanced-match": {
       "version": "1.0.2",
@@ -1219,22 +1292,31 @@
       "license": "MIT"
     },
     "node_modules/bare-events": {
-      "version": "2.6.1",
-      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.6.1.tgz",
-      "integrity": "sha512-AuTJkq9XmE6Vk0FJVNq5QxETrSA/vKHarWVBG5l/JbdCL1prJemiyJqUS0jrlXO0MftuPq4m3YVYhoNc5+aE/g==",
+      "version": "2.8.2",
+      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.8.2.tgz",
+      "integrity": "sha512-riJjyv1/mHLIPX4RwiK+oW9/4c3TEUeORHKefKAKnZ5kyslbN+HXowtbaVEqt4IMUB7OXlfixcs6gsFeo/jhiQ==",
       "license": "Apache-2.0",
-      "optional": true
+      "peerDependencies": {
+        "bare-abort-controller": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-abort-controller": {
+          "optional": true
+        }
+      }
     },
     "node_modules/bare-fs": {
-      "version": "4.1.6",
-      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.1.6.tgz",
-      "integrity": "sha512-25RsLF33BqooOEFNdMcEhMpJy8EoR88zSMrnOQOaM3USnOK2VmaJ1uaQEwPA6AQjrv1lXChScosN6CzbwbO9OQ==",
+      "version": "4.5.3",
+      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.5.3.tgz",
+      "integrity": "sha512-9+kwVx8QYvt3hPWnmb19tPnh38c6Nihz8Lx3t0g9+4GoIf3/fTgYwM4Z6NxgI+B9elLQA7mLE9PpqcWtOMRDiQ==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
         "bare-events": "^2.5.4",
         "bare-path": "^3.0.0",
-        "bare-stream": "^2.6.4"
+        "bare-stream": "^2.6.4",
+        "bare-url": "^2.2.2",
+        "fast-fifo": "^1.3.2"
       },
       "engines": {
         "bare": ">=1.16.0"
@@ -1249,9 +1331,9 @@
       }
     },
     "node_modules/bare-os": {
-      "version": "3.6.1",
-      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.1.tgz",
-      "integrity": "sha512-uaIjxokhFidJP+bmmvKSgiMzj2sV5GPHaZVAIktcxcpCyBFFWO+YlikVAdhmUo2vYFvFhOXIAlldqV29L8126g==",
+      "version": "3.6.2",
+      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.2.tgz",
+      "integrity": "sha512-T+V1+1srU2qYNBmJCXZkUY5vQ0B4FSlL3QDROnKQYOqeiQR8UbjNHlPa+TIbM4cuidiN9GaTaOZgSEgsvPbh5A==",
       "license": "Apache-2.0",
       "optional": true,
       "engines": {
@@ -1269,9 +1351,9 @@
       }
     },
     "node_modules/bare-stream": {
-      "version": "2.6.5",
-      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.6.5.tgz",
-      "integrity": "sha512-jSmxKJNJmHySi6hC42zlZnq00rga4jjxcgNZjY9N5WlOe/iOoGRtdwGsHzQv2RlH2KOYMwGUXhf2zXd32BA9RA==",
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.7.0.tgz",
+      "integrity": "sha512-oyXQNicV1y8nc2aKffH+BUHFRXmx6VrPzlnaEvMhram0nPBrKcEdcyBg5r08D0i8VxngHFAiVyn1QKXpSG0B8A==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
@@ -1290,6 +1372,16 @@
         }
       }
     },
+    "node_modules/bare-url": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/bare-url/-/bare-url-2.3.2.tgz",
+      "integrity": "sha512-ZMq4gd9ngV5aTMa5p9+UfY0b3skwhHELaDkhEHetMdX0LRkW9kzaym4oo/Eh+Ghm0CCDuMTsRIGM/ytUc1ZYmw==",
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "bare-path": "^3.0.0"
+      }
+    },
     "node_modules/base64-js": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
@@ -1361,23 +1453,23 @@
       "license": "MIT"
     },
     "node_modules/body-parser": {
-      "version": "1.20.3",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz",
-      "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==",
+      "version": "1.20.4",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz",
+      "integrity": "sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==",
       "license": "MIT",
       "dependencies": {
-        "bytes": "3.1.2",
+        "bytes": "~3.1.2",
         "content-type": "~1.0.5",
         "debug": "2.6.9",
         "depd": "2.0.0",
-        "destroy": "1.2.0",
-        "http-errors": "2.0.0",
-        "iconv-lite": "0.4.24",
-        "on-finished": "2.4.1",
-        "qs": "6.13.0",
-        "raw-body": "2.5.2",
+        "destroy": "~1.2.0",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "on-finished": "~2.4.1",
+        "qs": "~6.14.0",
+        "raw-body": "~2.5.3",
         "type-is": "~1.6.18",
-        "unpipe": "1.0.0"
+        "unpipe": "~1.0.0"
       },
       "engines": {
         "node": ">= 0.8",
@@ -1694,41 +1786,6 @@
         "simple-swizzle": "^0.2.2"
       }
     },
-    "node_modules/colorspace": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/colorspace/-/colorspace-1.1.4.tgz",
-      "integrity": "sha512-BgvKJiuVu1igBUF2kEjRCZXol6wiiGbY5ipL/oVPwm0BL9sIpMIzM8IK7vwuxIIzOXMV3Ey5w+vxhm0rR/TN8w==",
-      "license": "MIT",
-      "dependencies": {
-        "color": "^3.1.3",
-        "text-hex": "1.0.x"
-      }
-    },
-    "node_modules/colorspace/node_modules/color": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/color/-/color-3.2.1.tgz",
-      "integrity": "sha512-aBl7dZI9ENN6fUGC7mWpMTPNHmWUSNan9tuWN6ahh5ZLNk9baLJOnSMlrQkHcrfFgz2/RigjUVAjdx36VcemKA==",
-      "license": "MIT",
-      "dependencies": {
-        "color-convert": "^1.9.3",
-        "color-string": "^1.6.0"
-      }
-    },
-    "node_modules/colorspace/node_modules/color-convert": {
-      "version": "1.9.3",
-      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz",
-      "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==",
-      "license": "MIT",
-      "dependencies": {
-        "color-name": "1.1.3"
-      }
-    },
-    "node_modules/colorspace/node_modules/color-name": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz",
-      "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==",
-      "license": "MIT"
-    },
     "node_modules/combined-stream": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
@@ -1786,18 +1843,18 @@
       }
     },
     "node_modules/cookie": {
-      "version": "0.7.1",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
-      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
       "license": "MIT",
       "engines": {
         "node": ">= 0.6"
       }
     },
     "node_modules/cookie-signature": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
-      "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+      "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
       "license": "MIT"
     },
     "node_modules/cookies": {
@@ -1820,9 +1877,9 @@
       "license": "MIT"
     },
     "node_modules/cors": {
-      "version": "2.8.5",
-      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
-      "integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
       "license": "MIT",
       "dependencies": {
         "object-assign": "^4",
@@ -1830,6 +1887,10 @@
       },
       "engines": {
         "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/crc": {
@@ -1923,9 +1984,9 @@
       "license": "MIT"
     },
     "node_modules/debug": {
-      "version": "4.4.1",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.1.tgz",
-      "integrity": "sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "license": "MIT",
       "dependencies": {
         "ms": "^2.1.3"
@@ -2074,9 +2135,9 @@
       }
     },
     "node_modules/detect-libc": {
-      "version": "2.0.4",
-      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.4.tgz",
-      "integrity": "sha512-3UDv+G9CsCKO1WKMGw9fwq/SWJYbI0c5Y7LU1AXYoDdbhE2AHQ6N6Nb34sG8Fj7T5APy8qXDCKuuIHd1BR0tVA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
       "license": "Apache-2.0",
       "engines": {
         "node": ">=8"
@@ -2182,9 +2243,9 @@
       }
     },
     "node_modules/es-abstract": {
-      "version": "1.24.0",
-      "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.24.0.tgz",
-      "integrity": "sha512-WSzPgsdLtTcQwm4CROfS5ju2Wa1QQcVeT37jFjYzdFz1r9ahadC8B8/a4qxJxM+09F18iumCdRmlr96ZYkQvEg==",
+      "version": "1.24.1",
+      "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.24.1.tgz",
+      "integrity": "sha512-zHXBLhP+QehSSbsS9Pt23Gg964240DPd6QCf8WpkqEXxQ7fhdZzYsocOr5u7apWonsS5EjZDmTF+/slGMyasvw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2700,9 +2761,9 @@
       }
     },
     "node_modules/esquery": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.6.0.tgz",
-      "integrity": "sha512-ca9pw9fomFcKPvFLXhBKUK90ZvGibiGOvRJNbjljY7s7uq/5YO4BOzcYtJqExdx99rF6aAcnRxHmcUHcz6sQsg==",
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.7.0.tgz",
+      "integrity": "sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
@@ -2753,6 +2814,15 @@
         "node": ">= 0.6"
       }
     },
+    "node_modules/events-universal": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz",
+      "integrity": "sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "bare-events": "^2.7.0"
+      }
+    },
     "node_modules/expand-template": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz",
@@ -2763,39 +2833,39 @@
       }
     },
     "node_modules/express": {
-      "version": "4.21.2",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
-      "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
+      "version": "4.22.1",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz",
+      "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==",
       "license": "MIT",
       "dependencies": {
         "accepts": "~1.3.8",
         "array-flatten": "1.1.1",
-        "body-parser": "1.20.3",
-        "content-disposition": "0.5.4",
+        "body-parser": "~1.20.3",
+        "content-disposition": "~0.5.4",
         "content-type": "~1.0.4",
-        "cookie": "0.7.1",
-        "cookie-signature": "1.0.6",
+        "cookie": "~0.7.1",
+        "cookie-signature": "~1.0.6",
         "debug": "2.6.9",
         "depd": "2.0.0",
         "encodeurl": "~2.0.0",
         "escape-html": "~1.0.3",
         "etag": "~1.8.1",
-        "finalhandler": "1.3.1",
-        "fresh": "0.5.2",
-        "http-errors": "2.0.0",
+        "finalhandler": "~1.3.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.0",
         "merge-descriptors": "1.0.3",
         "methods": "~1.1.2",
-        "on-finished": "2.4.1",
+        "on-finished": "~2.4.1",
         "parseurl": "~1.3.3",
-        "path-to-regexp": "0.1.12",
+        "path-to-regexp": "~0.1.12",
         "proxy-addr": "~2.0.7",
-        "qs": "6.13.0",
+        "qs": "~6.14.0",
         "range-parser": "~1.2.1",
         "safe-buffer": "5.2.1",
-        "send": "0.19.0",
-        "serve-static": "1.16.2",
+        "send": "~0.19.0",
+        "serve-static": "~1.16.2",
         "setprototypeof": "1.2.0",
-        "statuses": "2.0.1",
+        "statuses": "~2.0.1",
         "type-is": "~1.6.18",
         "utils-merge": "1.0.1",
         "vary": "~1.1.2"
@@ -2856,9 +2926,9 @@
       "license": "MIT"
     },
     "node_modules/fastq": {
-      "version": "1.19.1",
-      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz",
-      "integrity": "sha512-GwLTyxkCXjXbxqIhTsMI2Nui8huMPtnxg7krajPJAjnEG/iiOS7i+zCtWGZR9G0NBKbXKh6X9m9UIsYX/N6vvQ==",
+      "version": "1.20.1",
+      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz",
+      "integrity": "sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==",
       "dev": true,
       "license": "ISC",
       "dependencies": {
@@ -2904,17 +2974,17 @@
       }
     },
     "node_modules/finalhandler": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz",
-      "integrity": "sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+      "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
       "license": "MIT",
       "dependencies": {
         "debug": "2.6.9",
         "encodeurl": "~2.0.0",
         "escape-html": "~1.0.3",
-        "on-finished": "2.4.1",
+        "on-finished": "~2.4.1",
         "parseurl": "~1.3.3",
-        "statuses": "2.0.1",
+        "statuses": "~2.0.2",
         "unpipe": "~1.0.0"
       },
       "engines": {
@@ -3017,9 +3087,9 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
-      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
@@ -3187,6 +3257,15 @@
         "is-property": "^1.0.2"
       }
     },
+    "node_modules/generator-function": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/generator-function/-/generator-function-2.0.1.tgz",
+      "integrity": "sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/get-caller-file": {
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
@@ -3374,18 +3453,18 @@
       "license": "MIT"
     },
     "node_modules/graphql": {
-      "version": "16.11.0",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.11.0.tgz",
-      "integrity": "sha512-mS1lbMsxgQj6hge1XZ6p7GPhbrtFwUFYi3wRzXAC/FmYnyXMTvvI3td3rjmQ2u8ewXueaSvRPWaEcgVVOT9Jnw==",
+      "version": "16.12.0",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.12.0.tgz",
+      "integrity": "sha512-DKKrynuQRne0PNpEbzuEdHlYOMksHSUI8Zc9Unei5gTsMNA2/vMpoMz/yKba50pejK56qj98qM0SjYxAKi13gQ==",
       "license": "MIT",
       "engines": {
         "node": "^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0"
       }
     },
     "node_modules/graphql-scalars": {
-      "version": "1.24.2",
-      "resolved": "https://registry.npmjs.org/graphql-scalars/-/graphql-scalars-1.24.2.tgz",
-      "integrity": "sha512-FoZ11yxIauEnH0E5rCUkhDXHVn/A6BBfovJdimRZCQlFCl+h7aVvarKmI15zG4VtQunmCDdqdtNs6ixThy3uAg==",
+      "version": "1.25.0",
+      "resolved": "https://registry.npmjs.org/graphql-scalars/-/graphql-scalars-1.25.0.tgz",
+      "integrity": "sha512-b0xyXZeRFkne4Eq7NAnL400gStGqG/Sx9VqX0A05nHyEbv57UJnWKsjNnrpVqv5e/8N1MUxkt0wwcRXbiyKcFg==",
       "license": "MIT",
       "dependencies": {
         "tslib": "^2.5.0"
@@ -3593,19 +3672,23 @@
       }
     },
     "node_modules/http-errors": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
-      "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
       "license": "MIT",
       "dependencies": {
-        "depd": "2.0.0",
-        "inherits": "2.0.4",
-        "setprototypeof": "1.2.0",
-        "statuses": "2.0.1",
-        "toidentifier": "1.0.1"
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
       },
       "engines": {
         "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/http-proxy-agent": {
@@ -3797,12 +3880,12 @@
       }
     },
     "node_modules/ioredis": {
-      "version": "5.7.0",
-      "resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.7.0.tgz",
-      "integrity": "sha512-NUcA93i1lukyXU+riqEyPtSEkyFq8tX90uL659J+qpCZ3rEdViB/APC58oAhIh3+bJln2hzdlZbBZsGNrlsR8g==",
+      "version": "5.9.2",
+      "resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.9.2.tgz",
+      "integrity": "sha512-tAAg/72/VxOUW7RQSX1pIxJVucYKcjFjfvj60L57jrZpYCHC3XN0WCQ3sNYL4Gmvv+7GPvTAjc+KSdeNuE8oWQ==",
       "license": "MIT",
       "dependencies": {
-        "@ioredis/commands": "^1.3.0",
+        "@ioredis/commands": "1.5.0",
         "cluster-key-slot": "^1.1.0",
         "debug": "^4.3.4",
         "denque": "^2.1.0",
@@ -3854,9 +3937,9 @@
       }
     },
     "node_modules/is-arrayish": {
-      "version": "0.3.2",
-      "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.3.2.tgz",
-      "integrity": "sha512-eVRqCvVlZbuw3GrM63ovNSNAeA1K16kaR/LRY/92w0zxQ5/1YzwblUX652i4Xs9RwAGjW9d9y6X88t8OaAJfWQ==",
+      "version": "0.3.4",
+      "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.3.4.tgz",
+      "integrity": "sha512-m6UrgzFVUYawGBh1dUsWR5M2Clqic9RVXC/9f8ceNlv2IcO9j9J/z8UoCLPqtsPBFNzEpfR3xftohbfqDx8EQA==",
       "license": "MIT"
     },
     "node_modules/is-async-function": {
@@ -4030,13 +4113,14 @@
       }
     },
     "node_modules/is-generator-function": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.0.tgz",
-      "integrity": "sha512-nPUB5km40q9e8UfN/Zc24eLlzdSf9OfKByBw9CIdw4H1giPMeA0OIJvbchsCu4npfI2QcMVBsGEBHKZ7wLTWmQ==",
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.2.tgz",
+      "integrity": "sha512-upqt1SkGkODW9tsGNG5mtXTXtECizwtS2kA161M+gJPc1xdb/Ax629af6YrTwcOeQHbewrPNlE5Dx7kzvXTizA==",
       "license": "MIT",
       "dependencies": {
-        "call-bound": "^1.0.3",
-        "get-proto": "^1.0.0",
+        "call-bound": "^1.0.4",
+        "generator-function": "^2.0.0",
+        "get-proto": "^1.0.1",
         "has-tostringtag": "^1.0.2",
         "safe-regex-test": "^1.1.0"
       },
@@ -4312,9 +4396,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
+      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4377,6 +4461,7 @@
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/keygrip/-/keygrip-1.1.0.tgz",
       "integrity": "sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==",
+      "deprecated": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.",
       "license": "MIT",
       "dependencies": {
         "tsscmp": "1.0.6"
@@ -4396,9 +4481,9 @@
       }
     },
     "node_modules/koa": {
-      "version": "2.16.2",
-      "resolved": "https://registry.npmjs.org/koa/-/koa-2.16.2.tgz",
-      "integrity": "sha512-+CCssgnrWKx9aI3OeZwroa/ckG4JICxvIFnSiOUyl2Uv+UTI+xIw0FfFrWS7cQFpoePpr9o8csss7KzsTzNL8Q==",
+      "version": "2.16.3",
+      "resolved": "https://registry.npmjs.org/koa/-/koa-2.16.3.tgz",
+      "integrity": "sha512-zPPuIt+ku1iCpFBRwseMcPYQ1cJL8l60rSmKeOuGfOXyE6YnTBmf2aEFNL2HQGrD0cPcLO/t+v9RTgC+fwEh/g==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^1.3.5",
@@ -4774,9 +4859,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
+      "version": "4.17.23",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
       "license": "MIT"
     },
     "node_modules/lodash.clonedeep": {
@@ -4856,9 +4941,9 @@
       }
     },
     "node_modules/lru.min": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/lru.min/-/lru.min-1.1.2.tgz",
-      "integrity": "sha512-Nv9KddBcQSlQopmBHXSsZVY5xsdlZkdH/Iey0BlcBYggMd4two7cZnKOK9vmy3nY0O5RGH99z1PCeTpPqszUYg==",
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/lru.min/-/lru.min-1.1.3.tgz",
+      "integrity": "sha512-Lkk/vx6ak3rYkRR0Nhu4lFUT2VDnQSxBe8Hbl7f36358p6ow8Bnvr8lrLt98H8J1aGxfhbX4Fs5tYg2+FTwr5Q==",
       "license": "MIT",
       "engines": {
         "bun": ">=1.0.0",
@@ -5045,35 +5130,39 @@
       "license": "MIT"
     },
     "node_modules/mysql2": {
-      "version": "3.14.3",
-      "resolved": "https://registry.npmjs.org/mysql2/-/mysql2-3.14.3.tgz",
-      "integrity": "sha512-fD6MLV8XJ1KiNFIF0bS7Msl8eZyhlTDCDl75ajU5SJtpdx9ZPEACulJcqJWr1Y8OYyxsFc4j3+nflpmhxCU5aQ==",
+      "version": "3.16.2",
+      "resolved": "https://registry.npmjs.org/mysql2/-/mysql2-3.16.2.tgz",
+      "integrity": "sha512-JsqBpYNy7pH20lGfPuSyRSIcCxSeAIwxWADpV64nP9KeyN3ZKpHZgjKXuBKsh7dH6FbOvf1bOgoVKjSUPXRMTw==",
       "license": "MIT",
       "dependencies": {
-        "aws-ssl-profiles": "^1.1.1",
+        "aws-ssl-profiles": "^1.1.2",
         "denque": "^2.1.0",
         "generate-function": "^2.3.1",
-        "iconv-lite": "^0.6.3",
-        "long": "^5.2.1",
-        "lru.min": "^1.0.0",
-        "named-placeholders": "^1.1.3",
+        "iconv-lite": "^0.7.2",
+        "long": "^5.3.2",
+        "lru.min": "^1.1.3",
+        "named-placeholders": "^1.1.6",
         "seq-queue": "^0.0.5",
-        "sqlstring": "^2.3.2"
+        "sqlstring": "^2.3.3"
       },
       "engines": {
         "node": ">= 8.0"
       }
     },
     "node_modules/mysql2/node_modules/iconv-lite": {
-      "version": "0.6.3",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
-      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
+      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
       "license": "MIT",
       "dependencies": {
         "safer-buffer": ">= 2.1.2 < 3.0.0"
       },
       "engines": {
         "node": ">=0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/mysql2/node_modules/long": {
@@ -5083,15 +5172,15 @@
       "license": "Apache-2.0"
     },
     "node_modules/named-placeholders": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/named-placeholders/-/named-placeholders-1.1.3.tgz",
-      "integrity": "sha512-eLoBxg6wE/rZkJPhU/xRX1WTpkFEwDJEN96oxFrTsqBdbT5ec295Q+CoHrL9IT0DipqKhmGcaZmwOt8OON5x1w==",
+      "version": "1.1.6",
+      "resolved": "https://registry.npmjs.org/named-placeholders/-/named-placeholders-1.1.6.tgz",
+      "integrity": "sha512-Tz09sEL2EEuv5fFowm419c1+a/jSMiBjI9gHxVLrVdbUkkNUUfjsVYs9pVZu5oCon/kmRh9TfLEObFtkVxmY0w==",
       "license": "MIT",
       "dependencies": {
-        "lru-cache": "^7.14.1"
+        "lru.min": "^1.1.0"
       },
       "engines": {
-        "node": ">=12.0.0"
+        "node": ">=8.0.0"
       }
     },
     "node_modules/napi-build-utils": {
@@ -5126,9 +5215,9 @@
       }
     },
     "node_modules/node-abi": {
-      "version": "3.75.0",
-      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.75.0.tgz",
-      "integrity": "sha512-OhYaY5sDsIka7H7AtijtI9jwGYLyl29eQn/W623DiN/MIv5sUqc4g7BIDThX+gb7di9f6xK02nkp8sdfFWZLTg==",
+      "version": "3.87.0",
+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.87.0.tgz",
+      "integrity": "sha512-+CGM1L1CgmtheLcBuleyYOn7NWPVu0s0EJH2C4puxgEZb9h8QpR9G2dBfZJOAUhi7VQxuBPMd0hiISWcTyiYyQ==",
       "license": "MIT",
       "dependencies": {
         "semver": "^7.3.5"
@@ -5138,9 +5227,9 @@
       }
     },
     "node_modules/node-abi/node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -5205,9 +5294,9 @@
       }
     },
     "node_modules/nodemon": {
-      "version": "3.1.10",
-      "resolved": "https://registry.npmjs.org/nodemon/-/nodemon-3.1.10.tgz",
-      "integrity": "sha512-WDjw3pJ0/0jMFmyNDp3gvY2YizjLmmOUQo6DEBY+JgdvW/yQ9mEeSw6H5ythl5Ny2ytb7f9C2nIbjSxMNzbJXw==",
+      "version": "3.1.11",
+      "resolved": "https://registry.npmjs.org/nodemon/-/nodemon-3.1.11.tgz",
+      "integrity": "sha512-is96t8F/1//UHAjNPHpbsNY46ELPpftGUoSVNXwUfMk/qdjSylYrWSu1XavVTBOn526kFiOR733ATgNBCQyH0g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -5244,9 +5333,9 @@
       }
     },
     "node_modules/nodemon/node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "dev": true,
       "license": "ISC",
       "bin": {
@@ -5637,9 +5726,9 @@
       "license": "MIT"
     },
     "node_modules/pg-connection-string": {
-      "version": "2.9.1",
-      "resolved": "https://registry.npmjs.org/pg-connection-string/-/pg-connection-string-2.9.1.tgz",
-      "integrity": "sha512-nkc6NpDcvPVpZXxrreI/FOtX3XemeLl8E0qFr6F2Lrm/I8WOnaWNhIPK2Z7OHpw7gh5XJThi6j6ppgNoaT1w4w==",
+      "version": "2.10.1",
+      "resolved": "https://registry.npmjs.org/pg-connection-string/-/pg-connection-string-2.10.1.tgz",
+      "integrity": "sha512-iNzslsoeSH2/gmDDKiyMqF64DATUCWj3YJ0wP14kqcsf2TUklwimd+66yYojKwZCA7h2yRNLGug71hCBA2a4sw==",
       "license": "MIT"
     },
     "node_modules/picomatch": {
@@ -5705,9 +5794,9 @@
       }
     },
     "node_modules/prebuild-install/node_modules/tar-fs": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.3.tgz",
-      "integrity": "sha512-090nwYJDmlhwFwEW3QQl+vaNnxsO2yVsd45eTKRBzSzu+hlb1w2K9inVq5b0ngXuLVqQ4ApvsUHHnu/zQNkWAg==",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
       "license": "MIT",
       "dependencies": {
         "chownr": "^1.1.1",
@@ -5835,12 +5924,12 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.13.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
-      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "version": "6.14.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+      "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
       "license": "BSD-3-Clause",
       "dependencies": {
-        "side-channel": "^1.0.6"
+        "side-channel": "^1.1.0"
       },
       "engines": {
         "node": ">=0.6"
@@ -5889,15 +5978,15 @@
       }
     },
     "node_modules/raw-body": {
-      "version": "2.5.2",
-      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
-      "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
+      "version": "2.5.3",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+      "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
       "license": "MIT",
       "dependencies": {
-        "bytes": "3.1.2",
-        "http-errors": "2.0.0",
-        "iconv-lite": "0.4.24",
-        "unpipe": "1.0.0"
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "unpipe": "~1.0.0"
       },
       "engines": {
         "node": ">= 0.8"
@@ -6042,13 +6131,13 @@
       "license": "ISC"
     },
     "node_modules/resolve": {
-      "version": "1.22.10",
-      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.10.tgz",
-      "integrity": "sha512-NPRy+/ncIMeDlTAsuqwKIiferiawhefFJtkNSW0qZJEqMEb+qBt/77B/jGeeek+F0uOeN05CDa6HXbbIgtVX4w==",
+      "version": "1.22.11",
+      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
+      "integrity": "sha512-RfqAvLnMl313r7c9oclB1HhUEAezcpLjz95wFH4LVuhk9JF/r22qmVP9AMmOU4vMX7Q8pN8jwNg/CSpdFnMjTQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "is-core-module": "^2.16.0",
+        "is-core-module": "^2.16.1",
         "path-parse": "^1.0.7",
         "supports-preserve-symlinks-flag": "^1.0.0"
       },
@@ -6320,24 +6409,24 @@
       }
     },
     "node_modules/send": {
-      "version": "0.19.0",
-      "resolved": "https://registry.npmjs.org/send/-/send-0.19.0.tgz",
-      "integrity": "sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==",
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+      "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
       "license": "MIT",
       "dependencies": {
         "debug": "2.6.9",
         "depd": "2.0.0",
         "destroy": "1.2.0",
-        "encodeurl": "~1.0.2",
+        "encodeurl": "~2.0.0",
         "escape-html": "~1.0.3",
         "etag": "~1.8.1",
-        "fresh": "0.5.2",
-        "http-errors": "2.0.0",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.1",
         "mime": "1.6.0",
         "ms": "2.1.3",
-        "on-finished": "2.4.1",
+        "on-finished": "~2.4.1",
         "range-parser": "~1.2.1",
-        "statuses": "2.0.1"
+        "statuses": "~2.0.2"
       },
       "engines": {
         "node": ">= 0.8.0"
@@ -6358,15 +6447,6 @@
       "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
       "license": "MIT"
     },
-    "node_modules/send/node_modules/encodeurl": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
-      "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.8"
-      }
-    },
     "node_modules/seq-queue": {
       "version": "0.0.5",
       "resolved": "https://registry.npmjs.org/seq-queue/-/seq-queue-0.0.5.tgz",
@@ -6453,9 +6533,9 @@
       "license": "MIT"
     },
     "node_modules/sequelize/node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -6474,15 +6554,15 @@
       }
     },
     "node_modules/serve-static": {
-      "version": "1.16.2",
-      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz",
-      "integrity": "sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==",
+      "version": "1.16.3",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+      "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
       "license": "MIT",
       "dependencies": {
         "encodeurl": "~2.0.0",
         "escape-html": "~1.0.3",
         "parseurl": "~1.3.3",
-        "send": "0.19.0"
+        "send": "~0.19.1"
       },
       "engines": {
         "node": ">= 0.8.0"
@@ -6592,9 +6672,9 @@
       }
     },
     "node_modules/sharp/node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -6760,9 +6840,9 @@
       }
     },
     "node_modules/simple-swizzle": {
-      "version": "0.2.2",
-      "resolved": "https://registry.npmjs.org/simple-swizzle/-/simple-swizzle-0.2.2.tgz",
-      "integrity": "sha512-JA//kQgZtbuY83m+xT+tXJkmJncGMTFT+C+g2h2R9uxkYIrE2yy9sgmcLhCnw57/WSD+Eh3J97FPEDFnbXnDUg==",
+      "version": "0.2.4",
+      "resolved": "https://registry.npmjs.org/simple-swizzle/-/simple-swizzle-0.2.4.tgz",
+      "integrity": "sha512-nAu1WFPQSMNr2Zn9PGSZK9AGn4t/y97lEm+MXTtUDwfP0ksAIX4nO+6ruD9Jwut4C49SB1Ws+fbXsm/yScWOHw==",
       "license": "MIT",
       "dependencies": {
         "is-arrayish": "^0.3.1"
@@ -6782,9 +6862,9 @@
       }
     },
     "node_modules/simple-update-notifier/node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "dev": true,
       "license": "ISC",
       "bin": {
@@ -6893,9 +6973,9 @@
       "license": "MIT"
     },
     "node_modules/statuses": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
-      "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
       "license": "MIT",
       "engines": {
         "node": ">= 0.8"
@@ -6943,16 +7023,14 @@
       }
     },
     "node_modules/streamx": {
-      "version": "2.22.1",
-      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.22.1.tgz",
-      "integrity": "sha512-znKXEBxfatz2GBNK02kRnCXjV+AA4kjZIUxeWSr3UGirZMJfTE9uiwKHobnbgxWyL/JWro8tTq+vOqAK1/qbSA==",
+      "version": "2.23.0",
+      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.23.0.tgz",
+      "integrity": "sha512-kn+e44esVfn2Fa/O0CPFcex27fjIL6MkVae0Mm6q+E6f0hWv578YCERbv+4m02cjxvDsPKLnmxral/rR6lBMAg==",
       "license": "MIT",
       "dependencies": {
+        "events-universal": "^1.0.0",
         "fast-fifo": "^1.3.2",
         "text-decoder": "^1.1.0"
-      },
-      "optionalDependencies": {
-        "bare-events": "^2.2.0"
       }
     },
     "node_modules/string_decoder": {
@@ -7111,9 +7189,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.1.0.tgz",
-      "integrity": "sha512-5Mty5y/sOF1YWj1J6GiBodjlDc05CUR8PKXrsnFAiSG0xA+GHeWLovaZPYUDXkH/1iKRf2+M5+OrRgzC7O9b7w==",
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.1.1.tgz",
+      "integrity": "sha512-LZA0oaPOc2fVo82Txf3gw+AkEd38szODlptMYejQUhndHMLQ9M059uXR+AfS7DNo0NpINvSqDsvyaCrBVkptWg==",
       "license": "MIT",
       "dependencies": {
         "pump": "^3.0.0",
@@ -7164,9 +7242,9 @@
       "license": "MIT"
     },
     "node_modules/to-buffer": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.2.1.tgz",
-      "integrity": "sha512-tB82LpAIWjhLYbqjx3X4zEeHN6M8CiuOEy2JY8SEQVdYRe3CCHOFaqrBW1doLDrfpWhplcW7BL+bO3/6S3pcDQ==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.2.2.tgz",
+      "integrity": "sha512-db0E3UJjcFhpDhAF4tLo03oli3pwl3dbnzXOUIlRKrp+ldk/VUxzpWYZENsw2SZiuBjHAk7DfB0VU7NKdpb6sw==",
       "license": "MIT",
       "dependencies": {
         "isarray": "^2.0.5",
@@ -7428,9 +7506,9 @@
       "license": "MIT"
     },
     "node_modules/undici-types": {
-      "version": "7.10.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.10.0.tgz",
-      "integrity": "sha512-t5Fy/nfn+14LuOc2KNYg75vZqClpAiqscVvMygNnlsHBFpSXdJaYtXMcdNLpl/Qvc3P2cB3s6lOV51nqsFq4ag==",
+      "version": "7.16.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
+      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
       "license": "MIT"
     },
     "node_modules/unpipe": {
@@ -7487,9 +7565,9 @@
       }
     },
     "node_modules/validator": {
-      "version": "13.15.15",
-      "resolved": "https://registry.npmjs.org/validator/-/validator-13.15.15.tgz",
-      "integrity": "sha512-BgWVbCI72aIQy937xbawcs+hrVaN/CZ2UwutgaJ36hGqRrLNM+f5LUT/YPRbo8IV/ASeFzXszezV+y2+rq3l8A==",
+      "version": "13.15.26",
+      "resolved": "https://registry.npmjs.org/validator/-/validator-13.15.26.tgz",
+      "integrity": "sha512-spH26xU080ydGggxRyR1Yhcbgx+j3y5jbNXk/8L+iRvdIEQ4uTRH2Sgf2dokud6Q4oAtsbNvJ1Ft+9xmm6IZcA==",
       "license": "MIT",
       "engines": {
         "node": ">= 0.10"
@@ -7635,9 +7713,9 @@
       "license": "ISC"
     },
     "node_modules/which-typed-array": {
-      "version": "1.1.19",
-      "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.19.tgz",
-      "integrity": "sha512-rEvr90Bck4WZt9HHFC4DJMsjvu7x+r6bImz0/BrbWb7A2djJ8hnZMrWnHo9F8ssv0OMErasDhftrfROTyqSDrw==",
+      "version": "1.1.20",
+      "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.20.tgz",
+      "integrity": "sha512-LYfpUkmqwl0h9A2HL09Mms427Q1RZWuOHsukfVcKRq9q95iQxdw0ix1JQrqbcDR9PH1QDwf5Qo8OZb5lksZ8Xg==",
       "license": "MIT",
       "dependencies": {
         "available-typed-arrays": "^1.0.7",
@@ -7656,13 +7734,13 @@
       }
     },
     "node_modules/winston": {
-      "version": "3.17.0",
-      "resolved": "https://registry.npmjs.org/winston/-/winston-3.17.0.tgz",
-      "integrity": "sha512-DLiFIXYC5fMPxaRg832S6F5mJYvePtmO5G9v9IgUFPhXm9/GkXarH/TUrBAVzhTCzAj9anE/+GjrgXp/54nOgw==",
+      "version": "3.19.0",
+      "resolved": "https://registry.npmjs.org/winston/-/winston-3.19.0.tgz",
+      "integrity": "sha512-LZNJgPzfKR+/J3cHkxcpHKpKKvGfDZVPS4hfJCc4cCG0CgYzvlD6yE/S3CIL/Yt91ak327YCpiF/0MyeZHEHKA==",
       "license": "MIT",
       "dependencies": {
         "@colors/colors": "^1.6.0",
-        "@dabh/diagnostics": "^2.0.2",
+        "@dabh/diagnostics": "^2.0.8",
         "async": "^3.2.3",
         "is-stream": "^2.0.0",
         "logform": "^2.7.0",
@@ -7678,9 +7756,9 @@
       }
     },
     "node_modules/winston-loggly-bulk": {
-      "version": "3.3.2",
-      "resolved": "https://registry.npmjs.org/winston-loggly-bulk/-/winston-loggly-bulk-3.3.2.tgz",
-      "integrity": "sha512-fpxLAsi4dsn7xz3I6KBMf39fT0rJzIN2u9gWExz5HwB2Hq/HXy+/ABqyXNaqhel0GZVUb3lQrGTGTVcBAqj6gQ==",
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/winston-loggly-bulk/-/winston-loggly-bulk-3.3.3.tgz",
+      "integrity": "sha512-rZ1Ylq1XVJlGVDZJTgliktX6z8iJ1vD5gLU6eGehjSWKQHW4aRNsI/+4Ag6urfqMr1FyR97Z/vlsEV92SkxRLg==",
       "license": "MIT",
       "dependencies": {
         "lodash.clonedeep": "4.5.0",
diff --git a/routes/auth.js b/routes/auth.js
index b6d0e7a..26c9be3 100644
--- a/routes/auth.js
+++ b/routes/auth.js
@@ -5,6 +5,7 @@ const Hashids = require('hashids/cjs')
 const router = require('koa-router')()
 const sanitizeFilename = require('sanitize-filename')
 const logger = require('../config/logger')
+const safePath = require('../utils/safePath')
 const { User, GroupUser } = require('../models')
 
 
@@ -76,7 +77,7 @@ router.get('/img/:h/:w/uploads/:userId/:filename', async ctx => {
   if (Number.isNaN(width) || width < 10 || width > 2000) width = 500
   if (Number.isNaN(height) || height < 10 || height > 2000) height = 500
 
-  const file = path.resolve(UPLOADS_DIR, userId, filename)
+  const file = safePath(UPLOADS_DIR, userId, filename)
   try {
     await fs.promises.access(file)
     ctx.body = sharp(file).resize(width, height)
@@ -111,7 +112,7 @@ router.get('/thumb/:userId/:h/:w/:filename', missingImage, async ctx => {
   const ext = path.extname(cleanFilename).replace('.', '').toLowerCase()
   const mime = mimes[ext]
   if (
-    !isNumber.test(userId) && !isNumber.test(w) && !isNumber.test(h)
+    !isNumber.test(userId) || !isNumber.test(w) || !isNumber.test(h)
   ) throw new Error('Has to be numeric')
   if (!mime) throw new Error('Invalid file format')
   if (cleanFilename !== filename) throw new Error('Invalid file name')
@@ -120,11 +121,11 @@ router.get('/thumb/:userId/:h/:w/:filename', missingImage, async ctx => {
   if (Number.isNaN(width) || width < 10 || width > 2000) width = 500
   if (Number.isNaN(height) || height < 10 || height > 2000) height = 500
 
-  const file = path.resolve(UPLOADS_DIR, userId, cleanFilename)
+  const file = safePath(UPLOADS_DIR, userId, cleanFilename)
   await fs.promises.access(file)
 
   const relThumbPath = path.join(userId, h, w)
-  const absThumbPath = path.join(process.env.THUMBNAIL_DIR, relThumbPath)
+  const absThumbPath = safePath(process.env.THUMBNAIL_DIR, userId, h, w)
   try {
     await fs.promises.stat(absThumbPath)
   } catch (e) {
diff --git a/routes/graphql/mutations/media.js b/routes/graphql/mutations/media.js
index be30493..ca6ab32 100644
--- a/routes/graphql/mutations/media.js
+++ b/routes/graphql/mutations/media.js
@@ -5,11 +5,9 @@ const sharp = require('sharp')
 const { v4: uuidv4 } = require('uuid')
 const { GraphQLError } = require('graphql')
 const { Media } = require('../../../models')
-const logger = require('../../../config/logger')
 
 const fsStat = promisify(fs.stat)
 const fsMkdir = promisify(fs.mkdir)
-const fsUnlink = promisify(fs.unlink)
 
 const { UPLOADS_DIR } = process.env
 
@@ -65,14 +63,7 @@ const mediaMutations = {
     if (!media) throw new GraphQLError('No file found')
     if (media.user_id !== me.id) throw new GraphQLError('No, just no!')
 
-    const filePath = path.resolve(UPLOADS_DIR, String(media.user_id), media.filename)
-    try {
-      await fsUnlink(filePath)
-    } catch (err) {
-      logger.error('DELETE_FILE_ERROR', {
-        error: err, filePath, fileId: media.id, userId: me.id,
-      })
-    }
+    // File deletion handled in model hook
     await media.destroy({ force: true })
 
     return id
diff --git a/routes/graphql/mutations/posts.js b/routes/graphql/mutations/posts.js
index 87218f7..61f9553 100644
--- a/routes/graphql/mutations/posts.js
+++ b/routes/graphql/mutations/posts.js
@@ -20,11 +20,12 @@ const postMutations = {
     if (status === 'published' && !groupId) {
       throw new GraphQLError('Group missing', { errors: [{ message: 'A group has to be selected' }] })
     }
-    const slug = await generateSlug(Post, title)
+    const cleanTitle = cleanContent(title)
+    const slug = await generateSlug(Post, cleanTitle)
 
     return Post.create({
       user_id: me.id,
-      title: cleanContent(title),
+      title: cleanTitle,
       content: cleanContent(content),
       status,
       slug,
@@ -33,8 +34,9 @@ const postMutations = {
   },
 
   async editPost(_, args, { me }) {
-    const post = await Post.findByPk(args.id)
     if (!me) throw new GraphQLError('You must be logged in.')
+    const post = await Post.findByPk(args.id)
+    if (!post) throw new GraphQLError('Post not found.')
     if (post.user_id !== me.id) throw new GraphQLError('You can\'t edit some one else post.')
 
     post.title = cleanContent(args.title)
@@ -42,6 +44,10 @@ const postMutations = {
     post.status = args.status
     post.group_id = args.groupId
 
+    if (args.status === 'published' && !post.slug) {
+      post.slug = await generateSlug(Post, post.title)
+    }
+
     await post.save()
     return post
   },
diff --git a/routes/graphql/queries.js b/routes/graphql/queries.js
index 5ba63a7..8693a7e 100644
--- a/routes/graphql/queries.js
+++ b/routes/graphql/queries.js
@@ -209,12 +209,12 @@ const queries = {
         COUNT(posts.id) AS commentsMade
       FROM posts
       JOIN comments ON comments.post_id = posts.id
-      WHERE comments.user_id = 3506
+      WHERE comments.user_id = :userId
       AND posts.status = 'published'
       GROUP BY posts.id
       ORDER BY posts.id DESC
       LIMIT 200
-    `, { type: sequelize.QueryTypes.SELECT })
+    `, { replacements: { userId: me.id }, type: sequelize.QueryTypes.SELECT })
 
     return commentPosts
   },
diff --git a/routes/graphql/typeDefs/types.graphql b/routes/graphql/typeDefs/types.graphql
index f01c2af..4234adf 100644
--- a/routes/graphql/typeDefs/types.graphql
+++ b/routes/graphql/typeDefs/types.graphql
@@ -64,7 +64,7 @@ type PostsList {
 type Post {
   id: ID!
   title: String!
-  slug: String!
+  slug: String
   status: PostStatus
   content: String
   htmlContent: String
diff --git a/routes/graphql/types.js b/routes/graphql/types.js
index 33b652a..6e8297d 100644
--- a/routes/graphql/types.js
+++ b/routes/graphql/types.js
@@ -7,6 +7,26 @@ const {
   User, Comment, Post, Group, Op,
 } = require('../../models')
 
+// Deleted user representation for comments from deleted users
+const DELETED_USER = {
+  id: 0,
+  username: '[deleted]',
+  slug: 'deleted',
+  first_name: '',
+  last_name: '',
+  company_name: '',
+  is_company: false,
+  location: '',
+  interests: '',
+  aboutme: '',
+  jobtitle: '',
+  lang: 'en',
+  role: 0,
+  activated: false,
+  created_at: null,
+  email: 'deleted@deleted.local',
+}
+
 const types = {
   Upload: GraphQLUpload,
   DateTime: GraphQLDateTime,
@@ -34,7 +54,14 @@ const types = {
   Comment: {
     createdAt: comment => comment.created_at || comment.createdAt,
     parentId: comment => comment.parent_id,
-    author: comment => User.findByPk(comment.user_id),
+    content: comment => {
+      if (!comment.user_id) return '[deleted]'
+      return comment.content
+    },
+    author: comment => {
+      if (!comment.user_id) return DELETED_USER
+      return User.findByPk(comment.user_id)
+    },
     comments: comment => Comment.findAll({ where: { parent_id: comment.id }, limit: 500 }),
   },
   User: {
diff --git a/scripts/cleanup-orphaned-files.js b/scripts/cleanup-orphaned-files.js
new file mode 100755
index 0000000..c7cfb5f
--- /dev/null
+++ b/scripts/cleanup-orphaned-files.js
@@ -0,0 +1,298 @@
+#!/usr/bin/env node
+
+/**
+ * Orphaned File Cleanup Script
+ *
+ * Purpose: Find and optionally delete files in the uploads directory that have no corresponding
+ * database record in the media table.
+ *
+ * Usage:
+ *   node scripts/cleanup-orphaned-files.js              # Dry run (reports only)
+ *   node scripts/cleanup-orphaned-files.js --delete     # Actually delete orphaned files
+ *   node scripts/cleanup-orphaned-files.js --help       # Show help
+ *
+ * Output:
+ *   - Console output with progress and summary
+ *   - Log file: cleanup-orphaned-files-YYYYMMDD-HHMMSS.log
+ */
+
+const fs = require('fs').promises
+const path = require('path')
+const { Media, sequelize } = require('../models')
+
+const { UPLOADS_DIR, THUMBNAIL_DIR } = process.env
+
+const DELETE_MODE = process.argv.includes('--delete')
+const HELP_MODE = process.argv.includes('--help')
+
+const logEntries = []
+const timestamp = new Date().toISOString().replace(/[:.]/g, '-').substring(0, 19)
+const logFilePath = path.join(__dirname, `cleanup-orphaned-files-${timestamp}.log`)
+
+function log(message, level = 'INFO') {
+  const entry = `[${new Date().toISOString()}] [${level}] ${message}`
+  logEntries.push(entry)
+  console.log(entry)
+}
+
+function formatBytes(bytes) {
+  if (bytes === 0) return '0 Bytes'
+  const k = 1024
+  const sizes = ['Bytes', 'KB', 'MB', 'GB']
+  const i = Math.floor(Math.log(bytes) / Math.log(k))
+  return `${parseFloat((bytes / (k ** i)).toFixed(2))} ${sizes[i]}`
+}
+
+async function writeLogFile() {
+  try {
+    await fs.writeFile(logFilePath, logEntries.join('\n'), 'utf8')
+    console.log(`\nLog file written to: ${logFilePath}`)
+  } catch (err) {
+    console.error(`Failed to write log file: ${err.message}`)
+  }
+}
+
+function showHelp() {
+  console.log(`
+Orphaned File Cleanup Script
+=============================
+
+Purpose:
+  Find and optionally delete files in the uploads directory and generated
+  thumbnails that have no corresponding database record in the media table.
+
+Usage:
+  node scripts/cleanup-orphaned-files.js              # Dry run (reports only)
+  node scripts/cleanup-orphaned-files.js --delete     # Actually delete orphaned files
+  node scripts/cleanup-orphaned-files.js --help       # Show this help
+
+How it works:
+  1. Scans all files in ${UPLOADS_DIR}
+  2. Scans all generated thumbnails in ${THUMBNAIL_DIR} (if configured)
+  3. For each file, checks if a corresponding media record exists
+  4. Reports orphaned files (files without database records)
+  5. In --delete mode, removes orphaned files from disk
+  6. Generates a summary report with disk space recovered
+
+Output:
+  - Console output with progress and summary
+  - Log file: cleanup-orphaned-files-YYYYMMDD-HHMMSS.log
+
+Examples:
+  # Check for orphaned files without deleting
+  node scripts/cleanup-orphaned-files.js
+
+  # Delete orphaned files
+  node scripts/cleanup-orphaned-files.js --delete
+`)
+}
+
+async function scanDirectory(dirPath, relativePath = '') {
+  const files = []
+
+  try {
+    const entries = await fs.readdir(dirPath, { withFileTypes: true })
+
+    for (const entry of entries) {
+      const fullPath = path.join(dirPath, entry.name)
+      const relPath = path.join(relativePath, entry.name)
+
+      if (entry.isDirectory()) {
+        // Recursively scan subdirectories
+        const subFiles = await scanDirectory(fullPath, relPath)
+        files.push(...subFiles)
+      } else if (entry.isFile()) {
+        files.push({
+          fullPath,
+          relativePath: relPath,
+          filename: entry.name,
+          directory: path.basename(path.dirname(fullPath)),
+        })
+      }
+    }
+  } catch (err) {
+    log(`Error reading directory ${dirPath}: ${err.message}`, 'ERROR')
+  }
+
+  return files
+}
+
+async function findOrphanedFiles() {
+  log('Starting orphaned file scan...')
+  log(`Uploads directory: ${UPLOADS_DIR}`)
+  log(`Thumbnail directory: ${THUMBNAIL_DIR || 'Not configured'}`)
+  log(`Mode: ${DELETE_MODE ? 'DELETE' : 'DRY RUN'}`)
+  log('')
+
+  // Scan all files in uploads directory
+  log('Scanning files in uploads directory...')
+  const uploadFiles = await scanDirectory(UPLOADS_DIR)
+  log(`Found ${uploadFiles.length} files in uploads`)
+  log('')
+
+  // Scan thumbnails if THUMBNAIL_DIR is configured
+  let thumbnailFiles = []
+  if (THUMBNAIL_DIR) {
+    log('Scanning generated thumbnails...')
+    thumbnailFiles = await scanDirectory(THUMBNAIL_DIR)
+    log(`Found ${thumbnailFiles.length} generated thumbnails`)
+    log('')
+  }
+
+  const allFiles = [...uploadFiles, ...thumbnailFiles]
+  log(`Total files: ${allFiles.length}`)
+  log('')
+
+  // Load all media records from database
+  log('Loading media records from database...')
+  const mediaRecords = await Media.findAll({
+    attributes: ['id', 'user_id', 'filename'],
+    raw: true,
+  })
+
+  // Create a Set of valid user_id/filename pairs for fast lookup
+  const validFiles = new Set(mediaRecords.map(m => `${m.user_id}/${m.filename}`))
+  log(`Found ${validFiles.size} media records in database`)
+  log('')
+
+  // Find orphaned files (both original uploads and thumbnails)
+  log('Identifying orphaned files...')
+  const orphanedFiles = allFiles.filter(file => {
+    const parts = file.relativePath.split(path.sep)
+
+    // Files at root level have no user subdirectory — flag as orphaned with warning
+    if (parts.length === 1) {
+      log(`  Root-level file (no user subdirectory): ${file.relativePath}`, 'WARN')
+      return true
+    }
+
+    // Expected: user_id/filename or user_id/.../filename (thumbnails)
+    const key = `${parts[0]}/${file.filename}`
+    return !validFiles.has(key)
+  })
+
+  log(`Found ${orphanedFiles.length} orphaned files (uploads + thumbnails)`)
+  log('')
+
+  if (orphanedFiles.length === 0) {
+    log('No orphaned files found. Nothing to clean up!', 'SUCCESS')
+    return { orphanedFiles: [], totalSize: 0, deletedCount: 0 }
+  }
+
+  // Calculate total size
+  let totalSize = 0
+  const filesWithSize = []
+
+  for (const file of orphanedFiles) {
+    try {
+      const stats = await fs.stat(file.fullPath)
+      totalSize += stats.size
+      filesWithSize.push({ ...file, size: stats.size })
+    } catch (err) {
+      log(`Error getting file size for ${file.relativePath}: ${err.message}`, 'WARN')
+    }
+  }
+
+  log(`Total size of orphaned files: ${formatBytes(totalSize)}`)
+  log('')
+
+  // Display sample of orphaned files
+  log('Sample of orphaned files (first 20):')
+  filesWithSize.slice(0, 20).forEach(file => {
+    log(`  - ${file.relativePath} (${formatBytes(file.size)})`)
+  })
+
+  if (filesWithSize.length > 20) {
+    log(`  ... and ${filesWithSize.length - 20} more files`)
+  }
+  log('')
+
+  // Delete files if in delete mode
+  let deletedCount = 0
+  let deletedSize = 0
+  if (DELETE_MODE) {
+    log('Deleting orphaned files...')
+
+    for (const file of filesWithSize) {
+      try {
+        await fs.unlink(file.fullPath)
+        deletedCount++
+        deletedSize += file.size
+        log(`  Deleted: ${file.relativePath}`)
+      } catch (err) {
+        log(`  Failed to delete ${file.relativePath}: ${err.message}`, 'ERROR')
+      }
+    }
+
+    log('')
+    log(`Successfully deleted ${deletedCount} of ${orphanedFiles.length} orphaned files`, 'SUCCESS')
+  } else {
+    log('DRY RUN MODE - No files were deleted')
+    log('Run with --delete flag to actually remove these files')
+  }
+
+  // Count uploads vs thumbnails
+  const orphanedUploads = filesWithSize.filter(f => f.fullPath.startsWith(UPLOADS_DIR))
+  const orphanedThumbnails = filesWithSize.filter(f => THUMBNAIL_DIR && f.fullPath.startsWith(THUMBNAIL_DIR))
+
+  return {
+    orphanedFiles: filesWithSize,
+    orphanedUploads,
+    orphanedThumbnails,
+    totalSize,
+    deletedCount,
+    deletedSize,
+  }
+}
+
+async function main() {
+  if (HELP_MODE) {
+    showHelp()
+    process.exit(0)
+  }
+
+  if (!UPLOADS_DIR) {
+    console.error('ERROR: UPLOADS_DIR environment variable is not set')
+    process.exit(1)
+  }
+
+  try {
+    // Test database connection
+    await sequelize.authenticate()
+    log('Database connection established')
+    log('')
+
+    // Run cleanup scan
+    const result = await findOrphanedFiles()
+
+    // Summary
+    log('')
+    log('=== CLEANUP SUMMARY ===')
+    log(`Total files scanned: (see log)`)
+    log(`Orphaned uploads: ${result.orphanedUploads.length}`)
+    log(`Orphaned thumbnails: ${result.orphanedThumbnails.length}`)
+    log(`Total orphaned files: ${result.orphanedFiles.length}`)
+    log(`Total size: ${formatBytes(result.totalSize)}`)
+    if (DELETE_MODE) {
+      log(`Files deleted: ${result.deletedCount}`)
+      log(`Disk space recovered: ${formatBytes(result.deletedSize)}`)
+    } else {
+      log(`Potential disk space recovery: ${formatBytes(result.totalSize)}`)
+    }
+    log('========================')
+
+    // Write log file
+    await writeLogFile()
+
+    // Close database connection
+    await sequelize.close()
+
+  } catch (err) {
+    log(`Fatal error: ${err.message}`, 'ERROR')
+    log(err.stack, 'ERROR')
+    await writeLogFile()
+    process.exit(1)
+  }
+}
+
+main()
diff --git a/utils/safePath.js b/utils/safePath.js
new file mode 100644
index 0000000..d7d5ab4
--- /dev/null
+++ b/utils/safePath.js
@@ -0,0 +1,12 @@
+const path = require('path')
+
+function safePath(baseDir, ...segments) {
+  const resolved = path.resolve(baseDir, ...segments)
+  const normalizedBase = path.resolve(baseDir) + path.sep
+  if (!resolved.startsWith(normalizedBase)) {
+    throw new Error(`Path traversal detected: ${segments.join('/')}`)
+  }
+  return resolved
+}
+
+module.exports = safePath