@zintrust/core 0.1.0 → 0.1.2

package/src/config/startup.js

@@ -0,0 +1,15 @@
+/**
+ * Startup Configuration
+ *
+ * Startup-only controls (evaluated during Application.boot()).
+ */
+import { Env } from './env';
+export const startupConfig = Object.freeze({
+    healthChecksEnabled: Env.getBool('STARTUP_HEALTH_CHECKS', true),
+    validateSecrets: Env.getBool('STARTUP_VALIDATE_SECRETS', true),
+    checkDatabase: Env.getBool('STARTUP_CHECK_DB', false),
+    checkCache: Env.getBool('STARTUP_CHECK_CACHE', false),
+    timeoutMs: Env.getInt('STARTUP_HEALTH_TIMEOUT_MS', 2500),
+    continueOnFailure: Env.getBool('STARTUP_CONTINUE_ON_FAILURE', false),
+});
+export default startupConfig;

package/src/config/storage.d.ts

@@ -14,14 +14,23 @@ type LocalStorageDriverConfig = {
 };
 type S3StorageDriverConfig = {
     driver: 's3';
-    key: EnvGetValue;
-    secret: EnvGetValue;
+    accessKeyId: EnvGetValue;
+    secretAccessKey: EnvGetValue;
     region: typeof Env.AWS_REGION;
     bucket: EnvGetValue;
     url: EnvGetValue;
     endpoint: EnvGetValue;
     usePathStyleUrl: EnvGetBoolValue;
 };
+type R2StorageDriverConfig = {
+    driver: 'r2';
+    accessKeyId: EnvGetValue;
+    secretAccessKey: EnvGetValue;
+    region: EnvGetValue;
+    bucket: EnvGetValue;
+    endpoint: EnvGetValue;
+    url: EnvGetValue;
+};
 type GcsStorageDriverConfig = {
     driver: 'gcs';
     projectId: EnvGetValue;
@@ -32,47 +41,24 @@ type GcsStorageDriverConfig = {
 type StorageDrivers = {
     local: LocalStorageDriverConfig;
     s3: S3StorageDriverConfig;
+    r2: R2StorageDriverConfig;
     gcs: GcsStorageDriverConfig;
 };
 type StorageDriverName = keyof StorageDrivers;
 type StorageDriverConfig = StorageDrivers[StorageDriverName];
 type StorageConfigRuntime = {
-    default: string;
-    drivers: StorageDrivers;
+    readonly default: string;
+    readonly drivers: StorageDrivers;
 };
 export declare const storageConfig: Readonly<{
     /**
-     * Default storage driver
+     * Default storage driver (dynamic; tests may mutate process.env)
      */
-    default: string;
+    readonly default: string;
     /**
-     * Storage drivers configuration
+     * Storage drivers configuration (dynamic; tests may mutate process.env)
      */
-    drivers: {
-        local: {
-            driver: "local";
-            root: string;
-            url: string;
-            visibility: string;
-        };
-        s3: {
-            driver: "s3";
-            key: string;
-            secret: string;
-            region: string;
-            bucket: string;
-            url: string;
-            endpoint: string;
-            usePathStyleUrl: boolean;
-        };
-        gcs: {
-            driver: "gcs";
-            projectId: string;
-            keyFile: string;
-            bucket: string;
-            url: string;
-        };
-    };
+    readonly drivers: StorageDrivers;
     /**
      * Get storage driver config
      */
@@ -80,14 +66,14 @@ export declare const storageConfig: Readonly<{
     /**
      * Temporary file settings
      */
-    temp: {
+    readonly temp: {
         path: string;
         maxAge: number;
     };
     /**
      * Uploads settings
      */
-    uploads: {
+    readonly uploads: {
         maxSize: string;
         allowedMimes: string;
         path: string;
@@ -95,7 +81,7 @@ export declare const storageConfig: Readonly<{
     /**
      * Backups settings
      */
-    backups: {
+    readonly backups: {
         path: string;
         driver: string;
     };

package/src/config/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/config/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9C,KAAK,eAAe,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;AAEtD,KAAK,wBAAwB,GAAG;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,WAAW,CAAC;IACjB,UAAU,EAAE,WAAW,CAAC;CACzB,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,IAAI,CAAC;IACb,GAAG,EAAE,WAAW,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,CAAC,UAAU,CAAC;IAC9B,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,EAAE,WAAW,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;CAClC,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,MAAM,EAAE,KAAK,CAAC;IACd,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,WAAW,CAAC;CAClB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,KAAK,EAAE,wBAAwB,CAAC;IAChC,EAAE,EAAE,qBAAqB,CAAC;IAC1B,GAAG,EAAE,sBAAsB,CAAC;CAC7B,CAAC;AAEF,KAAK,iBAAiB,GAAG,MAAM,cAAc,CAAC;AAC9C,KAAK,mBAAmB,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;AAE7D,KAAK,oBAAoB,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;CACzB,CAAC;AAoFF,eAAO,MAAM,aAAa;IAnExB;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BH;;OAEG;oBACa,oBAAoB,GAAG,mBAAmB;IAI1D;;OAEG;;;;;IAMH;;OAEG;;;;;;IAOH;;OAEG;;;;;EAOuD,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/config/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9C,KAAK,eAAe,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;AAEtD,KAAK,wBAAwB,GAAG;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,WAAW,CAAC;IACjB,UAAU,EAAE,WAAW,CAAC;CACzB,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,IAAI,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,WAAW,CAAC;IAC7B,MAAM,EAAE,OAAO,GAAG,CAAC,UAAU,CAAC;IAC9B,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,EAAE,WAAW,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;CAClC,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,IAAI,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,WAAW,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,WAAW,CAAC;IACtB,GAAG,EAAE,WAAW,CAAC;CAClB,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,MAAM,EAAE,KAAK,CAAC;IACd,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,WAAW,CAAC;CAClB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,KAAK,EAAE,wBAAwB,CAAC;IAChC,EAAE,EAAE,qBAAqB,CAAC;IAC1B,EAAE,EAAE,qBAAqB,CAAC;IAC1B,GAAG,EAAE,sBAAsB,CAAC;CAC7B,CAAC;AAEF,KAAK,iBAAiB,GAAG,MAAM,cAAc,CAAC;AAC9C,KAAK,mBAAmB,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;AAE7D,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC,CAAC;AA4GF,eAAO,MAAM,aAAa;IArDxB;;OAEG;sBACY,MAAM;IAIrB;;OAEG;sBACY,cAAc;IAI7B;;OAEG;oBACa,oBAAoB,GAAG,mBAAmB;IAI1D;;OAEG;mBACS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAO5C;;OAEG;sBACY;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAQtE;;OAEG;sBACY;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;EAQW,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC"}

package/src/config/storage.js

@@ -14,38 +14,52 @@ const getStorageDriver = (config) => {
     }
     return config.drivers.local;
 };
+const getDrivers = () => ({
+    local: {
+        driver: 'local',
+        root: Env.get('STORAGE_PATH', 'storage'),
+        url: Env.get('STORAGE_URL', '/storage'),
+        visibility: Env.get('STORAGE_VISIBILITY', 'private'),
+    },
+    s3: {
+        driver: 's3',
+        accessKeyId: Env.get('AWS_ACCESS_KEY_ID', ''),
+        secretAccessKey: Env.get('AWS_SECRET_ACCESS_KEY', ''),
+        region: Env.AWS_REGION,
+        bucket: Env.get('AWS_S3_BUCKET', ''),
+        url: Env.get('AWS_S3_URL', ''),
+        endpoint: Env.get('AWS_S3_ENDPOINT', ''),
+        usePathStyleUrl: Env.getBool('AWS_S3_USE_PATH_STYLE_URL', false),
+    },
+    r2: {
+        driver: 'r2',
+        accessKeyId: Env.get('R2_ACCESS_KEY_ID', ''),
+        secretAccessKey: Env.get('R2_SECRET_ACCESS_KEY', ''),
+        region: Env.get('R2_REGION', ''),
+        bucket: Env.get('R2_BUCKET', ''),
+        endpoint: Env.get('R2_ENDPOINT', ''),
+        url: Env.get('R2_URL', ''),
+    },
+    gcs: {
+        driver: 'gcs',
+        projectId: Env.get('GCS_PROJECT_ID', ''),
+        keyFile: Env.get('GCS_KEY_FILE', ''),
+        bucket: Env.get('GCS_BUCKET', ''),
+        url: Env.get('GCS_URL', ''),
+    },
+});
 const storageConfigObj = {
     /**
-     * Default storage driver
+     * Default storage driver (dynamic; tests may mutate process.env)
      */
-    default: Env.get('STORAGE_DRIVER', 'local'),
+    get default() {
+        return Env.get('STORAGE_DRIVER', 'local');
+    },
     /**
-     * Storage drivers configuration
+     * Storage drivers configuration (dynamic; tests may mutate process.env)
      */
-    drivers: {
-        local: {
-            driver: 'local',
-            root: Env.get('STORAGE_PATH', 'storage'),
-            url: Env.get('STORAGE_URL', '/storage'),
-            visibility: Env.get('STORAGE_VISIBILITY', 'private'),
-        },
-        s3: {
-            driver: 's3',
-            key: Env.get('AWS_ACCESS_KEY_ID'),
-            secret: Env.get('AWS_SECRET_ACCESS_KEY'),
-            region: Env.AWS_REGION,
-            bucket: Env.get('AWS_S3_BUCKET'),
-            url: Env.get('AWS_S3_URL'),
-            endpoint: Env.get('AWS_S3_ENDPOINT'),
-            usePathStyleUrl: Env.getBool('AWS_S3_USE_PATH_STYLE_URL', false),
-        },
-        gcs: {
-            driver: 'gcs',
-            projectId: Env.get('GCS_PROJECT_ID'),
-            keyFile: Env.get('GCS_KEY_FILE'),
-            bucket: Env.get('GCS_BUCKET'),
-            url: Env.get('GCS_URL'),
-        },
+    get drivers() {
+        return getDrivers();
     },
     /**
      * Get storage driver config
@@ -56,24 +70,30 @@ const storageConfigObj = {
     /**
      * Temporary file settings
      */
-    temp: {
-        path: Env.get('TEMP_PATH', 'storage/temp'),
-        maxAge: Env.getInt('TEMP_FILE_MAX_AGE', 86400), // 24 hours
+    get temp() {
+        return {
+            path: Env.get('TEMP_PATH', 'storage/temp'),
+            maxAge: Env.getInt('TEMP_FILE_MAX_AGE', 86400), // 24 hours
+        };
     },
     /**
      * Uploads settings
      */
-    uploads: {
-        maxSize: Env.get('MAX_UPLOAD_SIZE', '100mb'),
-        allowedMimes: Env.get('ALLOWED_UPLOAD_MIMES', 'jpg,jpeg,png,pdf,doc,docx'),
-        path: Env.get('UPLOADS_PATH', 'storage/uploads'),
+    get uploads() {
+        return {
+            maxSize: Env.get('MAX_UPLOAD_SIZE', '100mb'),
+            allowedMimes: Env.get('ALLOWED_UPLOAD_MIMES', 'jpg,jpeg,png,pdf,doc,docx'),
+            path: Env.get('UPLOADS_PATH', 'storage/uploads'),
+        };
     },
     /**
      * Backups settings
      */
-    backups: {
-        path: Env.get('BACKUPS_PATH', 'storage/backups'),
-        driver: Env.get('BACKUP_DRIVER', 's3'),
+    get backups() {
+        return {
+            path: Env.get('BACKUPS_PATH', 'storage/backups'),
+            driver: Env.get('BACKUP_DRIVER', 's3'),
+        };
     },
 };
 export const storageConfig = Object.freeze(storageConfigObj);

package/src/database/migrations/index.d.ts

@@ -1,2 +1,2 @@
-export {};
+export declare const migrations: readonly [];
 //# sourceMappingURL=index.d.ts.map

package/src/database/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/database/migrations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/database/migrations/index.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,UAAU,aAA6B,CAAC"}

package/src/database/migrations/index.js

@@ -1 +1,2 @@
-export {};
+// Placeholder for migrations
+export const migrations = Object.freeze([]);

package/src/features/Queue.js

@@ -1,6 +1,6 @@
 // TEMPLATE_START
+import { generateSecureJobId } from '../common/uuid';
 import { Logger } from '../config/logger';
-import { ErrorFactory } from '../exceptions/ZintrustError';
 /**
  * Simple In-Memory Queue
  * For production, replace with Redis or similar.
@@ -32,28 +32,4 @@ export const Queue = Object.freeze({
         await Promise.all(jobsToProcess.map(async (job) => handler(job)));
     },
 });
-async function generateSecureJobId() {
-    if (typeof globalThis.crypto?.randomUUID === 'function') {
-        return globalThis.crypto.randomUUID();
-    }
-    if (typeof globalThis.crypto?.getRandomValues === 'function') {
-        const bytes = new Uint8Array(16);
-        globalThis.crypto.getRandomValues(bytes);
-        return bytesToHex(bytes);
-    }
-    // Node fallback for environments without Web Crypto
-    try {
-        const nodeCrypto = await import('node:crypto');
-        return nodeCrypto.randomBytes(16).toString('hex');
-    }
-    catch (error) {
-        throw ErrorFactory.createTryCatchError('Secure crypto API not available to generate a job id.', error);
-    }
-}
-function bytesToHex(bytes) {
-    let out = '';
-    for (const b of bytes)
-        out += b.toString(16).padStart(2, '0');
-    return out;
-}
 // TEMPLATE_END

package/src/functions/lambda.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../../src/functions/lambda.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,OAAO,GAAU,OAAO,OAAO,EAAE,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CAkB/E,CAAC"}
+{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../../src/functions/lambda.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,OAAO,GAAU,OAAO,OAAO,EAAE,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CAuB/E,CAAC"}

package/src/functions/lambda.js

@@ -26,7 +26,12 @@ export const handler = async (event, context) => {
         Logger.error('Lambda handler error:', error);
         return {
             statusCode: 500,
-            body: JSON.stringify({ message: 'Internal Server Error' }),
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                message: 'Internal Server Error',
+            }),
         };
     }
 };

package/src/health/RuntimeHealthProbes.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Runtime Health Probes
+ *
+ * Lightweight dependency probes intended for readiness endpoints.
+ *
+ * NOTE: Startup probes are handled separately by StartupHealthChecks.
+ */
+export declare const RuntimeHealthProbes: Readonly<{
+    getCacheDriverName: () => string;
+    pingKvCache: (timeoutMs?: number) => Promise<number | null>;
+}>;
+export default RuntimeHealthProbes;
+//# sourceMappingURL=RuntimeHealthProbes.d.ts.map

package/src/health/RuntimeHealthProbes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeHealthProbes.d.ts","sourceRoot":"","sources":["../../../src/health/RuntimeHealthProbes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+DH,eAAO,MAAM,mBAAmB;8BAzDD,MAAM;yCAgCS,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;EA4BlE,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/src/health/RuntimeHealthProbes.js

@@ -0,0 +1,62 @@
+/**
+ * Runtime Health Probes
+ *
+ * Lightweight dependency probes intended for readiness endpoints.
+ *
+ * NOTE: Startup probes are handled separately by StartupHealthChecks.
+ */
+import { Cloudflare } from '../config/cloudflare';
+import { Env } from '../config/env';
+import { ErrorFactory } from '../exceptions/ZintrustError';
+const getCacheDriverName = () => {
+    return Env.get('CACHE_DRIVER', 'memory');
+};
+const withTimeout = async (label, ms, fn) => {
+    if (!Number.isFinite(ms) || ms <= 0) {
+        return fn();
+    }
+    let timeoutId;
+    const timeoutPromise = new Promise((_, reject) => {
+        timeoutId = globalThis.setTimeout(() => {
+            reject(ErrorFactory.createConfigError(`${label} timed out after ${ms}ms`, { label, ms }));
+        }, ms);
+        // Node: allow process to exit; other runtimes may not support unref()
+        if (typeof timeoutId.unref === 'function') {
+            timeoutId.unref();
+        }
+    });
+    try {
+        return await Promise.race([fn(), timeoutPromise]);
+    }
+    finally {
+        if (timeoutId !== undefined) {
+            clearTimeout(timeoutId);
+            timeoutId = undefined;
+        }
+    }
+};
+const pingKvCache = async (timeoutMs = 2000) => {
+    const driver = getCacheDriverName();
+    if (driver !== 'kv')
+        return null;
+    const start = Date.now();
+    const kv = Cloudflare.getKVBinding('CACHE');
+    if (kv === null) {
+        throw ErrorFactory.createConfigError('KV binding "CACHE" not found');
+    }
+    const key = `__runtime_health__:kv:${Date.now()}`;
+    await withTimeout('runtime.cache.kv.ping', timeoutMs, async () => {
+        await kv.put(key, JSON.stringify({ ok: true }), { expirationTtl: 60 });
+        const value = (await kv.get(key, { type: 'json' }));
+        if (value?.ok !== true) {
+            throw ErrorFactory.createConnectionError('KV probe failed: unexpected value');
+        }
+        await kv.delete(key);
+    });
+    return Date.now() - start;
+};
+export const RuntimeHealthProbes = Object.freeze({
+    getCacheDriverName,
+    pingKvCache,
+});
+export default RuntimeHealthProbes;

package/src/health/StartupHealthChecks.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Startup Health Checks
+ *
+ * Lightweight boot-time checks that validate the runtime environment before
+ * the server starts accepting requests.
+ */
+import type { DatabaseConfig } from '../orm/DatabaseAdapter';
+export type StartupHealthCheck = {
+    name: string;
+    ok: boolean;
+    durationMs?: number;
+    details?: unknown;
+};
+export type StartupHealthReport = {
+    ok: boolean;
+    checks: StartupHealthCheck[];
+};
+export declare const StartupHealthChecks: Readonly<{
+    run(): Promise<StartupHealthReport>;
+    assertHealthy(): Promise<StartupHealthReport>;
+    checkDatabase(config: DatabaseConfig): Promise<StartupHealthCheck>;
+    checkCache(): Promise<StartupHealthCheck>;
+    withTimeout(name: string, fn: () => Promise<void>): Promise<void>;
+}>;
+export default StartupHealthChecks;
+//# sourceMappingURL=StartupHealthChecks.d.ts.map

package/src/health/StartupHealthChecks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StartupHealthChecks.d.ts","sourceRoot":"","sources":["../../../src/health/StartupHealthChecks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,mBAAmB;WACjB,OAAO,CAAC,mBAAmB,CAAC;qBAwClB,OAAO,CAAC,mBAAmB,CAAC;0BAYvB,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;kBA0BpD,OAAO,CAAC,kBAAkB,CAAC;sBA2BvB,MAAM,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;EAiBvE,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/src/health/StartupHealthChecks.js

@@ -0,0 +1,124 @@
+/**
+ * Startup Health Checks
+ *
+ * Lightweight boot-time checks that validate the runtime environment before
+ * the server starts accepting requests.
+ */
+import { Cache } from '../cache/Cache';
+import { generateUuid } from '../common/uuid';
+import { Env } from '../config/env';
+import { Logger } from '../config/logger';
+import { startupConfig } from '../config/startup';
+import { ErrorFactory } from '../exceptions/ZintrustError';
+import { Database } from '../orm/Database';
+import { QueryBuilder } from '../orm/QueryBuilder';
+import { StartupSecretValidation } from '../security/StartupSecretValidation';
+export const StartupHealthChecks = Object.freeze({
+    async run() {
+        if (!startupConfig.healthChecksEnabled) {
+            return { ok: true, checks: [{ name: 'startup.healthChecks', ok: true }] };
+        }
+        const checks = [];
+        const secrets = StartupSecretValidation.validate();
+        checks.push({
+            name: 'startup.secrets',
+            ok: secrets.valid,
+            details: secrets.valid ? undefined : { errors: secrets.errors },
+        });
+        if (startupConfig.checkDatabase === true) {
+            // Minimal config derived from Env. For Workers D1, the adapter will resolve the binding via Cloudflare helpers.
+            const driver = (Env.DB_CONNECTION || 'sqlite');
+            const readHosts = Env.DB_READ_HOSTS.trim().length > 0 ? Env.DB_READ_HOSTS.split(',') : undefined;
+            const config = {
+                driver,
+                database: Env.DB_DATABASE,
+                host: Env.DB_HOST,
+                port: Env.DB_PORT,
+                username: Env.DB_USERNAME,
+                password: Env.DB_PASSWORD,
+                readHosts,
+            };
+            checks.push(await StartupHealthChecks.checkDatabase(config));
+        }
+        if (startupConfig.checkCache === true) {
+            checks.push(await StartupHealthChecks.checkCache());
+        }
+        return { ok: checks.every((c) => c.ok), checks };
+    },
+    async assertHealthy() {
+        const report = await StartupHealthChecks.run();
+        if (report.ok)
+            return report;
+        if (startupConfig.continueOnFailure === true) {
+            Logger.warn('Startup health checks failed but continuing due to configuration', { report });
+            return report;
+        }
+        throw ErrorFactory.createConfigError('Startup health checks failed', { report });
+    },
+    async checkDatabase(config) {
+        const startedAt = Date.now();
+        try {
+            await StartupHealthChecks.withTimeout('startup.database.connect', async () => {
+                const db = Database.create(config);
+                await db.connect();
+                try {
+                    await QueryBuilder.ping(db);
+                }
+                finally {
+                    await db.disconnect();
+                }
+            });
+            return { name: 'startup.database', ok: true, durationMs: Date.now() - startedAt };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                name: 'startup.database',
+                ok: false,
+                durationMs: Date.now() - startedAt,
+                details: { message },
+            };
+        }
+    },
+    async checkCache() {
+        const startedAt = Date.now();
+        const key = `__startup_health__:${generateUuid()}`;
+        try {
+            await StartupHealthChecks.withTimeout('startup.cache.probe', async () => {
+                await Cache.set(key, { ok: true }, 60);
+                const value = await Cache.get(key);
+                await Cache.delete(key);
+                if (value?.ok !== true) {
+                    throw ErrorFactory.createConfigError('Cache probe failed', { key });
+                }
+            });
+            return { name: 'startup.cache', ok: true, durationMs: Date.now() - startedAt };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                name: 'startup.cache',
+                ok: false,
+                durationMs: Date.now() - startedAt,
+                details: { message },
+            };
+        }
+    },
+    async withTimeout(name, fn) {
+        const timeoutMs = Math.max(1, Number(startupConfig.timeoutMs));
+        let timeoutId;
+        const timeoutPromise = new Promise((_, reject) => {
+            timeoutId = globalThis.setTimeout(() => {
+                reject(ErrorFactory.createConfigError(`Startup check timed out: ${name}`, { timeoutMs }));
+            }, timeoutMs);
+        });
+        try {
+            await Promise.race([fn(), timeoutPromise]);
+        }
+        finally {
+            if (timeoutId !== undefined)
+                globalThis.clearTimeout(timeoutId);
+        }
+    },
+});
+export default StartupHealthChecks;

package/src/http/ErrorResponse.d.ts

@@ -0,0 +1,28 @@
+export interface IErrorResponse {
+    statusCode: number;
+    message: string;
+    code: string;
+    requestId: string;
+    timestamp: string;
+    details?: Record<string, unknown>;
+    stack?: string;
+}
+export declare const ErrorResponse: Readonly<{
+    create: (params: {
+        statusCode: number;
+        message: string;
+        code: string;
+        requestId?: string;
+        details?: Record<string, unknown>;
+        stack?: string;
+    }) => IErrorResponse;
+    notFound(resource: string, requestId?: string): IErrorResponse;
+    badRequest(message: string, requestId?: string, details?: Record<string, unknown>): IErrorResponse;
+    unauthorized(message: string, requestId?: string): IErrorResponse;
+    forbidden(message: string, requestId?: string): IErrorResponse;
+    conflict(message: string, requestId?: string): IErrorResponse;
+    internalServerError(message?: string, requestId?: string, stack?: string): IErrorResponse;
+    serviceUnavailable(message?: string, requestId?: string): IErrorResponse;
+}>;
+export default ErrorResponse;
+//# sourceMappingURL=ErrorResponse.d.ts.map

package/src/http/ErrorResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorResponse.d.ts","sourceRoot":"","sources":["../../../src/http/ErrorResponse.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsBD,eAAO,MAAM,aAAa;qBApBF;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KAAG,cAAc;uBAgBG,MAAM,cAAc,MAAM,GAAG,cAAc;wBAUnD,MAAM,cACH,MAAM,YACR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,cAAc;0BAIK,MAAM,cAAc,MAAM,GAAG,cAAc;uBAI9C,MAAM,cAAc,MAAM,GAAG,cAAc;sBAI5C,MAAM,cAAc,MAAM,GAAG,cAAc;kCAKlD,MAAM,cACH,MAAM,UACV,MAAM,GACb,cAAc;iCAIW,MAAM,cAAsC,MAAM,GAAG,cAAc;EAG/F,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/src/http/ErrorResponse.js

@@ -0,0 +1,42 @@
+const create = (params) => {
+    const hasStack = typeof params.stack === 'string' && params.stack.trim().length > 0;
+    return {
+        statusCode: params.statusCode,
+        message: params.message,
+        code: params.code,
+        requestId: params.requestId ?? '',
+        timestamp: new Date().toISOString(),
+        ...(params.details ? { details: params.details } : {}),
+        ...(hasStack ? { stack: params.stack } : {}),
+    };
+};
+export const ErrorResponse = Object.freeze({
+    create,
+    notFound(resource, requestId) {
+        return create({
+            statusCode: 404,
+            message: `${resource} not found`,
+            code: 'NOT_FOUND',
+            requestId,
+        });
+    },
+    badRequest(message, requestId, details) {
+        return create({ statusCode: 400, message, code: 'BAD_REQUEST', requestId, details });
+    },
+    unauthorized(message, requestId) {
+        return create({ statusCode: 401, message, code: 'UNAUTHORIZED', requestId });
+    },
+    forbidden(message, requestId) {
+        return create({ statusCode: 403, message, code: 'FORBIDDEN', requestId });
+    },
+    conflict(message, requestId) {
+        return create({ statusCode: 409, message, code: 'CONFLICT', requestId });
+    },
+    internalServerError(message = 'Internal server error', requestId, stack) {
+        return create({ statusCode: 500, message, code: 'INTERNAL_SERVER_ERROR', requestId, stack });
+    },
+    serviceUnavailable(message = 'Service unavailable', requestId) {
+        return create({ statusCode: 503, message, code: 'SERVICE_UNAVAILABLE', requestId });
+    },
+});
+export default ErrorResponse;

package/src/http/Kernel.d.ts

@@ -7,6 +7,7 @@ import { IResponse } from './Response';
 import { IMiddlewareStack, Middleware } from '../middleware/MiddlewareStack';
 import type { IncomingMessage, ServerResponse } from '../node-singletons/http';
 import { IRouter } from '../routing/Router';
+import type { ISchedule } from '../scheduler/types';
 export interface IKernel {
     handle(req: IncomingMessage, res: ServerResponse): Promise<void>;
     handleRequest(req: IRequest, res: IResponse): Promise<void>;
@@ -16,6 +17,10 @@ export interface IKernel {
     getRouter(): IRouter;
     getContainer(): IServiceContainer;
     getMiddlewareStack(): IMiddlewareStack;
+    registerSchedule(schedule: ISchedule): void;
+    startSchedules(): void;
+    stopSchedules(): Promise<void>;
+    runScheduleOnce(name: string): Promise<void>;
 }
 export declare const Kernel: Readonly<{
     create: (router: IRouter, container: IServiceContainer) => IKernel;

package/src/http/Kernel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Kernel.d.ts","sourceRoot":"","sources":["../../../src/http/Kernel.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAW,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,SAAS,EAAY,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAmB,MAAM,6BAA6B,CAAC;AAC5F,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAU,MAAM,iBAAiB,CAAC;AAElD,MAAM,WAAW,OAAO;IACtB,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/C,wBAAwB,CAAC,GAAG,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5D,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IACpE,SAAS,IAAI,OAAO,CAAC;IACrB,YAAY,IAAI,iBAAiB,CAAC;IAClC,kBAAkB,IAAI,gBAAgB,CAAC;CACxC;AAqED,eAAO,MAAM,MAAM;qBAzDK,OAAO,aAAa,iBAAiB,KAAG,OAAO;EA2DrE,CAAC;AAEH,eAAe,MAAM,CAAC"}
+{"version":3,"file":"Kernel.d.ts","sourceRoot":"","sources":["../../../src/http/Kernel.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,QAAQ,EAAW,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,SAAS,EAAY,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAmB,MAAM,6BAA6B,CAAC;AAC5F,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAU,MAAM,iBAAiB,CAAC;AAGlD,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAGpE,MAAM,WAAW,OAAO;IACtB,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/C,wBAAwB,CAAC,GAAG,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5D,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IACpE,SAAS,IAAI,OAAO,CAAC;IACrB,YAAY,IAAI,iBAAiB,CAAC;IAClC,kBAAkB,IAAI,gBAAgB,CAAC;IAGvC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5C,cAAc,IAAI,IAAI,CAAC;IACvB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAuJD,eAAO,MAAM,MAAM;qBA1DK,OAAO,aAAa,iBAAiB,KAAG,OAAO;EA4DrE,CAAC;AAEH,eAAe,MAAM,CAAC"}