@getstrata/core 0.5.63 → 0.5.65

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @getstrata/core changelog
 
+## 0.5.65
+
+- Identity helpers on `@getstrata/core/runtime/appKeyPrefix` (`smtpEhloHost`, `siemEventType`, `appUserAgent`, `otelServiceName`, `appDisplayName`, `webhookSignatureHeader`) so sibling apps are not stuck with WorkHub SMTP/SIEM/OTEL/OAuth names.
+- SIEM `event_type` and CEF vendor follow `SIEM_EVENT_TYPE` / `APP_NAME` (defaults stay `workhub.audit` / `WorkHub`).
+
+## 0.5.64
+
+- `APP_KEY_PREFIX` (default `workhub`) namespaces Redis cache, queue, and throttle keys so sibling apps do not share WorkHub’s keyspace.
+- `DispatchWebhookJob` implementation lives in the WorkHub webhook module. `@getstrata/core/jobs/dispatchWebhookJob` remains a compatibility re-export.
+
 ## 0.5.63
 
 - Flash cookies honor `FLASH_COOKIE_NAME` (default `workhub_flash`) so sibling apps do not inherit WorkHub’s cookie name.

package/README.md

@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
 Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
 
 1. Add `NPM_TOKEN` to GitHub repository secrets.
-2. Tag a release: `git tag v0.5.64 && git push origin v0.5.64`
+2. Tag a release: `git tag v0.5.67 && git push origin v0.5.67`
 3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
 
 Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.

package/dist/core/jobs/dispatchWebhookJob.d.ts

@@ -1,16 +1 @@
-import { Job } from "../queue";
-interface DispatchWebhookPayload {
-    webhookId: number;
-    tenantId: number;
-    event: string;
-    payload: Record<string, unknown>;
-}
-declare class DispatchWebhookJob extends Job<DispatchWebhookPayload> {
-    readonly maxAttempts = 3;
-    readonly backoffMs = 2000;
-    handle(payload: DispatchWebhookPayload): Promise<void>;
-    private deliver;
-}
-export { DispatchWebhookJob };
-export default DispatchWebhookJob;
-export type { DispatchWebhookPayload };
+export { DispatchWebhookJob, type DispatchWebhookPayload, default, } from "../../modules/webhook/dispatchWebhookJob";

package/dist/core/queue/redisQueue.d.ts

@@ -1,9 +1,9 @@
 import type FailedJobService from "./failedJobService";
 import type { Job, Queue, QueuePriority } from "./index";
 import { type QueueJobEnvelope } from "./jobRunner";
-declare const QUEUE_LIST_KEY = "workhub:queue:default";
-declare const QUEUE_HIGH_KEY = "workhub:queue:high";
-declare const QUEUE_LOW_KEY = "workhub:queue:low";
+declare const QUEUE_LIST_KEY: string;
+declare const QUEUE_HIGH_KEY: string;
+declare const QUEUE_LOW_KEY: string;
 declare function queueKeyForPriority(priority?: QueuePriority): string;
 declare function parseQueueJobEnvelope(rawPayload: string): QueueJobEnvelope | null;
 declare class RedisQueue implements Queue {

package/dist/core/runtime/appKeyPrefix.d.ts

@@ -0,0 +1,9 @@
+declare function appKeyPrefix(): string;
+declare function namespacedRedisKey(kind: string): string;
+declare function smtpEhloHost(): string;
+declare function siemEventType(): string;
+declare function appUserAgent(): string;
+declare function otelServiceName(): string;
+declare function webhookSignatureHeader(): string;
+declare function appDisplayName(): string;
+export { appDisplayName, appKeyPrefix, appUserAgent, namespacedRedisKey, otelServiceName, siemEventType, smtpEhloHost, webhookSignatureHeader, };

package/dist/entries/audit/exportAuditLogs.js

@@ -153,11 +153,39 @@ async function runWithMigrationBypass(callback) {
   }
 }
 
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/audit/siemFormatter.ts
 function formatSiemAuditEvent(input) {
   return {
     timestamp: input.created_at.toISOString(),
-    event_type: "workhub.audit",
+    event_type: siemEventType(),
     actor_user_id: input.user_id,
     tenant_id: input.tenant_id ?? null,
     trace_id: input.trace_id ?? null,
@@ -183,7 +211,7 @@ function formatCefLine(event) {
     `src=${event.ip_address ?? ""}`,
     `request=${event.trace_id ?? ""}`
   ].join(" ");
-  return `CEF:0|WorkHub|API|1.0|${event.action}|${event.subject_type}|5|${extension}`;
+  return `CEF:0|${appDisplayName()}|API|1.0|${event.action}|${event.subject_type}|5|${extension}`;
 }
 
 // ../../src/core/audit/exportAuditLogs.ts

package/dist/entries/audit/siemFormatter.js

@@ -1,9 +1,37 @@
 // @bun
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/audit/siemFormatter.ts
 function formatSiemAuditEvent(input) {
   return {
     timestamp: input.created_at.toISOString(),
-    event_type: "workhub.audit",
+    event_type: siemEventType(),
     actor_user_id: input.user_id,
     tenant_id: input.tenant_id ?? null,
     trace_id: input.trace_id ?? null,
@@ -29,7 +57,7 @@ function formatCefLine(event) {
     `src=${event.ip_address ?? ""}`,
     `request=${event.trace_id ?? ""}`
   ].join(" ");
-  return `CEF:0|WorkHub|API|1.0|${event.action}|${event.subject_type}|5|${extension}`;
+  return `CEF:0|${appDisplayName()}|API|1.0|${event.action}|${event.subject_type}|5|${extension}`;
 }
 export {
   formatCefLine,

package/dist/entries/auth/oauth/providers.js

@@ -1,4 +1,32 @@
 // @bun
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/auth/oauth/providers.ts
 class GitHubOAuthProvider {
   options;
@@ -37,7 +65,7 @@ class GitHubOAuthProvider {
       headers: {
         authorization: `Bearer ${tokenBody.access_token}`,
         accept: "application/json",
-        "user-agent": "workhub"
+        "user-agent": appUserAgent()
       }
     });
     const profile = await profileResponse.json();

package/dist/entries/auth/oauth/samlProvider.js

@@ -1,4 +1,32 @@
 // @bun
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/auth/oauth/samlProvider.ts
 class SamlProvider {
   loginUrl;
@@ -15,8 +43,8 @@ class SamlProvider {
     }
     const [, email, name] = code.split(":");
     return {
-      providerUserId: email ?? "saml-user",
-      email: email ?? "saml-user@workhub.test",
+      providerUserId: email || "saml-user",
+      email: email || `saml-user@${appKeyPrefix()}.test`,
       name: name ?? "SAML User"
     };
   }

package/dist/entries/cache/createCacheStore.js

@@ -1,8 +1,42 @@
 // @bun
 // ../../src/core/cache/redisCacheStore.ts
 var {RedisClient } = globalThis.Bun;
-var KEY_PREFIX = "workhub:cache:";
-var TAG_PREFIX = "workhub:cache:tag:";
+
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
+// ../../src/core/cache/redisCacheStore.ts
+function cacheKeyPrefix() {
+  return namespacedRedisKey("cache:");
+}
+function cacheTagPrefix() {
+  return namespacedRedisKey("cache:tag:");
+}
 
 class RedisCacheStore {
   ttlMs;
@@ -89,10 +123,10 @@ class RedisCacheStore {
     return deleted > 0;
   }
   async invalidateByPrefix(prefix) {
-    const keys = await this.client.keys(`${KEY_PREFIX}*`);
+    const keys = await this.client.keys(`${cacheKeyPrefix()}*`);
     let removed = 0;
     for (const storageKey of keys) {
-      const key = storageKey.slice(KEY_PREFIX.length);
+      const key = storageKey.slice(cacheKeyPrefix().length);
       if (key === prefix || key.startsWith(`${prefix}?`)) {
         if (await this.invalidate(key)) {
           removed += 1;
@@ -102,11 +136,11 @@ class RedisCacheStore {
     return removed;
   }
   async clear() {
-    const keys = await this.client.keys(`${KEY_PREFIX}*`);
+    const keys = await this.client.keys(`${cacheKeyPrefix()}*`);
     if (keys.length > 0) {
       await this.client.del(...keys);
     }
-    const tagKeys = await this.client.keys(`${TAG_PREFIX}*`);
+    const tagKeys = await this.client.keys(`${cacheTagPrefix()}*`);
     if (tagKeys.length > 0) {
       await this.client.del(...tagKeys);
     }
@@ -114,14 +148,14 @@ class RedisCacheStore {
     this.keyTags.clear();
   }
   async size() {
-    const keys = await this.client.keys(`${KEY_PREFIX}*`);
+    const keys = await this.client.keys(`${cacheKeyPrefix()}*`);
     return keys.length;
   }
   storageKey(key) {
-    return `${KEY_PREFIX}${key}`;
+    return `${cacheKeyPrefix()}${key}`;
   }
   tagKey(tag) {
-    return `${TAG_PREFIX}${tag}`;
+    return `${cacheTagPrefix()}${tag}`;
   }
   async detachKeyFromTags(key) {
     const tags = this.keyTags.get(key);
@@ -134,7 +168,7 @@ class RedisCacheStore {
     this.keyTags.delete(key);
   }
   async enforceMaxEntries() {
-    const keys = await this.client.keys(`${KEY_PREFIX}*`);
+    const keys = await this.client.keys(`${cacheKeyPrefix()}*`);
     if (keys.length <= this.maxEntries) {
       return;
     }

package/dist/entries/facades.js

@@ -11,6 +11,34 @@ import {
   resolveApplicationQueue
 } from "@getstrata/core/runtime/applicationRegistry";
 
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/mail/mailer.ts
 function resolveSmtpConfig() {
   const host = process.env.MAIL_HOST?.trim();
@@ -101,7 +129,7 @@ async function defaultSmtpTransport(config, message) {
   const { socket, readResponse } = await openSmtpConnection(config);
   try {
     await waitForSmtpResponse(readResponse, ["220"]);
-    await socket.write(`EHLO workhub.local\r
+    await socket.write(`EHLO ${smtpEhloHost()}\r
 `);
     await waitForSmtpResponse(readResponse, ["250"]);
     if (config.username && config.password) {

package/dist/entries/http/loginThrottleMiddleware.js

@@ -2,6 +2,34 @@
 // ../../src/core/http/loginThrottleMiddleware.ts
 var {RedisClient } = globalThis.Bun;
 
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/http/clientIp.ts
 function trustForwardedFor(env = process.env) {
   return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
@@ -37,7 +65,7 @@ async function resolveLoginEmail(request) {
 }
 function createLoginThrottleMiddleware(options) {
   const client = new RedisClient(options.redisUrl);
-  const prefix = options.keyPrefix ?? "workhub:login-throttle:";
+  const prefix = options.keyPrefix ?? namespacedRedisKey("login-throttle:");
   return async (request, next) => {
     const identity = resolveLoginIdentity(request);
     const email = await resolveLoginEmail(request);

package/dist/entries/http/memoryThrottleMiddleware.js

@@ -1,4 +1,32 @@
 // @bun
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/http/clientIp.ts
 function trustForwardedFor(env = process.env) {
   return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
@@ -17,7 +45,7 @@ function readClientIp(request, env = process.env) {
 // ../../src/core/http/memoryThrottleMiddleware.ts
 var throttleBucketRegistries = new Set;
 function createMemoryThrottleMiddleware(options) {
-  const prefix = options.keyPrefix ?? "workhub:memory-throttle:";
+  const prefix = options.keyPrefix ?? namespacedRedisKey("memory-throttle:");
   const buckets = new Map;
   throttleBucketRegistries.add(buckets);
   return async (request, next) => {

package/dist/entries/http/scimThrottleMiddleware.js

@@ -2,6 +2,34 @@
 // ../../src/core/http/scimThrottleMiddleware.ts
 var {RedisClient } = globalThis.Bun;
 
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/http/clientIp.ts
 function trustForwardedFor(env = process.env) {
   return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
@@ -39,7 +67,7 @@ function createScimThrottleMiddleware(options) {
   const client = options.redisUrl ? new RedisClient(options.redisUrl) : null;
   return async (request, next) => {
     const identity = resolveScimIdentity(request);
-    const key = `workhub:scim-throttle:${identity}`;
+    const key = `${namespacedRedisKey("scim-throttle:")}${identity}`;
     if (client) {
       const attempts = Number(await client.incr(key));
       if (attempts === 1) {

package/dist/entries/http/throttleMiddleware.js

@@ -4,6 +4,34 @@ import { currentAuthUser } from "@getstrata/core/auth/authContext";
 import { currentTenant, rateLimitMultiplierForPlan } from "@getstrata/core/tenant/tenantContext";
 var {RedisClient } = globalThis.Bun;
 
+// ../../src/core/runtime/appKeyPrefix.ts
+function appKeyPrefix() {
+  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+}
+function namespacedRedisKey(kind) {
+  return `${appKeyPrefix()}:${kind}`;
+}
+function smtpEhloHost() {
+  const raw = process.env.MAIL_EHLO?.trim() || `${appKeyPrefix()}.local`;
+  const safe = raw.replace(/[^a-zA-Z0-9.-]/g, "");
+  return safe || "strata.local";
+}
+function siemEventType() {
+  return process.env.SIEM_EVENT_TYPE?.trim() || `${appKeyPrefix()}.audit`;
+}
+function appUserAgent() {
+  return process.env.APP_USER_AGENT?.trim() || appKeyPrefix();
+}
+function otelServiceName() {
+  return process.env.OTEL_SERVICE_NAME?.trim() || `${appKeyPrefix()}-api`;
+}
+function webhookSignatureHeader() {
+  return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
+}
+function appDisplayName() {
+  return process.env.APP_NAME?.trim() || "WorkHub";
+}
+
 // ../../src/core/http/clientIp.ts
 function trustForwardedFor(env = process.env) {
   return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
@@ -32,7 +60,7 @@ function resolveThrottleIdentity(request) {
 }
 function createThrottleMiddleware(options) {
   const client = new RedisClient(options.redisUrl);
-  const prefix = options.keyPrefix ?? "workhub:throttle:";
+  const prefix = options.keyPrefix ?? namespacedRedisKey("throttle:");
   return async (request, next) => {
     const identity = resolveThrottleIdentity(request);
     const path = new URL(request.url).pathname;