@zintrust/core 0.1.0

package/src/config/SecretsManager.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Unified Secrets Management Layer
+ * Abstracts secrets retrieval across different cloud platforms
+ * Supports: AWS Secrets Manager, Parameter Store, Cloudflare KV, Deno env
+ */
+export interface CloudflareKV {
+    get(key: string): Promise<string | null>;
+    put(key: string, value: string, options?: {
+        expirationTtl?: number;
+    }): Promise<void>;
+    delete(key: string): Promise<void>;
+    list(options?: {
+        prefix?: string;
+    }): Promise<{
+        keys: {
+            name: string;
+        }[];
+    }>;
+}
+export interface SecretConfig {
+    platform: 'aws' | 'cloudflare' | 'deno' | 'local';
+    region?: string;
+    kv?: CloudflareKV;
+}
+export interface SecretValue {
+    key: string;
+    value: string;
+    expiresAt?: number;
+    rotationEnabled?: boolean;
+}
+interface SecretsManagerInstance {
+    getSecret(key: string, options?: GetSecretOptions): Promise<string>;
+    setSecret(key: string, value: string, options?: SetSecretOptions): Promise<void>;
+    deleteSecret(key: string): Promise<void>;
+    rotateSecret(key: string): Promise<void>;
+    listSecrets(pattern?: string): Promise<string[]>;
+    clearCache(key?: string): void;
+}
+/**
+ * SecretsManager - Unified interface for retrieving secrets
+ * Sealed namespace for immutability
+ */
+export declare const SecretsManager: Readonly<{
+    /**
+     * Get or create singleton instance
+     */
+    getInstance(config?: SecretConfig): SecretsManagerInstance;
+    /**
+     * Get secret value from appropriate backend
+     */
+    getSecret(key: string, options?: GetSecretOptions): Promise<string>;
+    /**
+     * Set secret value
+     */
+    setSecret(key: string, value: string, options?: SetSecretOptions): Promise<void>;
+    /**
+     * Delete secret
+     */
+    deleteSecret(key: string): Promise<void>;
+    /**
+     * Rotate secret (trigger new secret generation)
+     */
+    rotateSecret(key: string): Promise<void>;
+    /**
+     * Get all secrets matching pattern
+     */
+    listSecrets(pattern?: string): Promise<string[]>;
+    /**
+     * Clear cache (useful after rotation)
+     */
+    clearCache(key?: string): void;
+}>;
+/**
+ * Predefined secret keys
+ * Sealed namespace for immutability
+ */
+export declare const SECRETS: Readonly<{
+    readonly DB_USERNAME: "db/username";
+    readonly DB_PASSWORD: "db/password";
+    readonly DB_HOST: "db/host";
+    readonly DB_PORT: "db/port";
+    readonly DB_DATABASE: "db/database";
+    readonly JWT_SECRET: "jwt/secret";
+    readonly JWT_REFRESH_SECRET: "jwt/refresh-secret";
+    readonly ENCRYPTION_KEY: "encryption/key";
+    readonly ENCRYPTION_IV: "encryption/iv";
+    readonly STRIPE_API_KEY: "stripe/api-key";
+    readonly STRIPE_WEBHOOK_SECRET: "stripe/webhook-secret";
+    readonly SENDGRID_API_KEY: "sendgrid/api-key";
+    readonly GITHUB_TOKEN: "github/token";
+    readonly SESSION_SECRET: "session/secret";
+    readonly CSRF_SECRET: "csrf/secret";
+}>;
+export interface GetSecretOptions {
+    cacheTtl?: number;
+    throwIfMissing?: boolean;
+}
+export interface SetSecretOptions {
+    expirationTtl?: number;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Helper to get database credentials using secrets manager
+ */
+export declare function getDatabaseCredentials(): Promise<DatabaseCredentials>;
+/**
+ * Helper to get JWT secrets
+ */
+export declare function getJwtSecrets(): Promise<JwtSecrets>;
+export interface DatabaseCredentials {
+    username: string;
+    password: string;
+    host: string;
+    port: number;
+    database: string;
+}
+export interface JwtSecrets {
+    secret: string;
+    refreshSecret: string;
+}
+export {};
+//# sourceMappingURL=SecretsManager.d.ts.map

package/src/config/SecretsManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretsManager.d.ts","sourceRoot":"","sources":["../../../src/config/SecretsManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,KAAK,GAAG,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,YAAY,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAID,UAAU,sBAAsB;IAC9B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AA+QD;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,YAAY,GAAG,sBAAsB;IAY1D;;OAEG;mBACkB,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;OAEG;mBACkB,MAAM,SAAS,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAItD;;OAEG;qBACc,MAAM,GAAG,IAAI;EAG9B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;EA0BT,CAAC;AAEZ,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAOzD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/src/config/SecretsManager.js

@@ -0,0 +1,328 @@
+/**
+ * Unified Secrets Management Layer
+ * Abstracts secrets retrieval across different cloud platforms
+ * Supports: AWS Secrets Manager, Parameter Store, Cloudflare KV, Deno env
+ */
+import { Logger } from './logger';
+import { ErrorFactory } from '../exceptions/ZintrustError';
+let instance;
+/**
+ * Get secret value from appropriate backend
+ */
+async function runGetSecret(config, cache, key, options) {
+    // Check cache first
+    const cached = cache.get(key);
+    if (cached !== undefined && cached.expiresAt > Date.now()) {
+        return cached.value;
+    }
+    let value;
+    switch (config.platform) {
+        case 'aws':
+            value = await getFromAWSSecretsManager(key);
+            break;
+        case 'cloudflare':
+            value = await getFromCloudflareKV(config, key);
+            break;
+        case 'deno':
+            value = await getFromDenoEnv(key);
+            break;
+        case 'local':
+        default:
+            value = await getFromEnv(key);
+    }
+    // Cache the value
+    const ttl = options?.cacheTtl ?? 3600000; // 1 hour default
+    cache.set(key, {
+        value,
+        expiresAt: Date.now() + ttl,
+    });
+    return value;
+}
+/**
+ * Set secret value
+ */
+async function runSetSecret(config, cache, key, value, options) {
+    switch (config.platform) {
+        case 'aws':
+            await setInAWSSecretsManager(key, value, options);
+            break;
+        case 'cloudflare':
+            await setInCloudflareKV(config, key, value, options);
+            break;
+        case 'deno':
+            throw ErrorFactory.createConfigError('Cannot set secrets in Deno environment');
+        case 'local':
+        default:
+            throw ErrorFactory.createConfigError('Cannot set secrets in local environment');
+    }
+    // Invalidate cache
+    cache.delete(key);
+}
+/**
+ * Delete secret
+ */
+async function runDeleteSecret(config, cache, key) {
+    switch (config.platform) {
+        case 'aws':
+            await deleteFromAWSSecretsManager(key);
+            break;
+        case 'cloudflare':
+            await deleteFromCloudflareKV(config, key);
+            break;
+        case 'deno':
+        case 'local':
+        default:
+            throw ErrorFactory.createConfigError('Cannot delete secrets in this environment');
+    }
+    // Invalidate cache
+    cache.delete(key);
+}
+/**
+ * SecretsManager implementation
+ * Refactored to Functional Object pattern
+ */
+const SecretsManagerImpl = {
+    /**
+     * Create a new secrets manager instance
+     */
+    create(config) {
+        const cache = new Map();
+        return {
+            /**
+             * Get secret value from appropriate backend
+             */
+            async getSecret(key, options) {
+                return runGetSecret(config, cache, key, options);
+            },
+            /**
+             * Set secret value
+             */
+            async setSecret(key, value, options) {
+                return runSetSecret(config, cache, key, value, options);
+            },
+            /**
+             * Delete secret
+             */
+            async deleteSecret(key) {
+                return runDeleteSecret(config, cache, key);
+            },
+            /**
+             * Rotate secret (trigger new secret generation)
+             */
+            async rotateSecret(_key) {
+                if (config.platform === 'aws') {
+                    // AWS Secrets Manager supports automatic rotation
+                    throw ErrorFactory.createConfigError('Secret rotation not implemented');
+                }
+                throw ErrorFactory.createConfigError('Secret rotation not supported on this platform');
+            },
+            /**
+             * Get all secrets matching pattern
+             */
+            async listSecrets(pattern) {
+                switch (config.platform) {
+                    case 'aws':
+                        return listFromAWSSecretsManager(pattern);
+                    case 'cloudflare':
+                        return listFromCloudflareKV(config, pattern);
+                    case 'deno':
+                    case 'local':
+                    default:
+                        return [];
+                }
+            },
+            /**
+             * Clear cache (useful after rotation)
+             */
+            clearCache(key) {
+                if (key === undefined) {
+                    cache.clear();
+                }
+                else {
+                    cache.delete(key);
+                }
+            },
+        };
+    },
+};
+/**
+ * AWS Secrets Manager integration
+ */
+async function getFromAWSSecretsManager(key) {
+    try {
+        Logger.debug(`[AWS] Getting secret: ${key}`);
+        throw ErrorFactory.createConfigError('AWS SDK not available in core - use wrapper module');
+    }
+    catch (error) {
+        throw ErrorFactory.createTryCatchError(`Failed to retrieve secret from AWS: ${error.message}`, error);
+    }
+}
+async function setInAWSSecretsManager(key, _value, _options) {
+    Logger.info(`[AWS] Setting secret: ${key}`);
+    throw ErrorFactory.createConfigError('AWS SDK not available in core - use wrapper module');
+}
+async function deleteFromAWSSecretsManager(key) {
+    Logger.info(`[AWS] Deleting secret: ${key}`);
+    throw ErrorFactory.createConfigError('AWS SDK not available in core - use wrapper module');
+}
+async function listFromAWSSecretsManager(pattern) {
+    Logger.info(`[AWS] Listing secrets with pattern: ${pattern ?? '*'}`);
+    return [];
+}
+/**
+ * Cloudflare KV integration
+ */
+async function getFromCloudflareKV(config, key) {
+    if (config.kv === undefined) {
+        throw ErrorFactory.createConfigError('Cloudflare KV namespace not configured');
+    }
+    const value = await config.kv.get(key);
+    if (value === null || value === '') {
+        throw ErrorFactory.createNotFoundError(`Secret not found: ${key}`, { key });
+    }
+    return value;
+}
+async function setInCloudflareKV(config, key, value, options) {
+    if (config.kv === undefined) {
+        throw ErrorFactory.createConfigError('Cloudflare KV namespace not configured');
+    }
+    const ttl = options?.expirationTtl;
+    await config.kv.put(key, value, { expirationTtl: ttl });
+}
+async function deleteFromCloudflareKV(config, key) {
+    if (config.kv === undefined) {
+        throw ErrorFactory.createConfigError('Cloudflare KV namespace not configured');
+    }
+    await config.kv.delete(key);
+}
+async function listFromCloudflareKV(config, pattern) {
+    if (config.kv === undefined) {
+        throw ErrorFactory.createConfigError('Cloudflare KV namespace not configured');
+    }
+    const result = await config.kv.list({ prefix: pattern });
+    return result.keys.map((k) => k.name);
+}
+/**
+ * Deno environment integration
+ */
+async function getFromDenoEnv(key) {
+    const value = globalThis['Deno']?.env?.get?.(key);
+    if (value === undefined || value === null || value === '') {
+        throw ErrorFactory.createNotFoundError(`Secret not found: ${key}`, { key });
+    }
+    return value;
+}
+/**
+ * Local environment variables (Node.js)
+ */
+async function getFromEnv(key) {
+    const value = process.env[key];
+    if (value === undefined || value === null || value === '') {
+        throw ErrorFactory.createNotFoundError(`Secret not found: ${key}`, { key });
+    }
+    return value;
+}
+/**
+ * SecretsManager - Unified interface for retrieving secrets
+ * Sealed namespace for immutability
+ */
+export const SecretsManager = Object.freeze({
+    /**
+     * Get or create singleton instance
+     */
+    getInstance(config) {
+        if (instance === undefined && config !== undefined) {
+            instance = SecretsManagerImpl.create(config);
+        }
+        if (instance === undefined) {
+            throw ErrorFactory.createConfigError('SecretsManager not initialized. Call getInstance(config) first.');
+        }
+        return instance;
+    },
+    /**
+     * Get secret value from appropriate backend
+     */
+    async getSecret(key, options) {
+        return this.getInstance().getSecret(key, options);
+    },
+    /**
+     * Set secret value
+     */
+    async setSecret(key, value, options) {
+        return this.getInstance().setSecret(key, value, options);
+    },
+    /**
+     * Delete secret
+     */
+    async deleteSecret(key) {
+        return this.getInstance().deleteSecret(key);
+    },
+    /**
+     * Rotate secret (trigger new secret generation)
+     */
+    async rotateSecret(key) {
+        return this.getInstance().rotateSecret(key);
+    },
+    /**
+     * Get all secrets matching pattern
+     */
+    async listSecrets(pattern) {
+        return this.getInstance().listSecrets(pattern);
+    },
+    /**
+     * Clear cache (useful after rotation)
+     */
+    clearCache(key) {
+        this.getInstance().clearCache(key);
+    },
+});
+/**
+ * Predefined secret keys
+ * Sealed namespace for immutability
+ */
+export const SECRETS = Object.freeze({
+    // Database credentials
+    DB_USERNAME: 'db/username',
+    // Secret identifier only (not a credential value)
+    DB_PASSWORD: 'db/password', // NOSONAR (typescript:S2068) - secret key name, not hardcoded password
+    DB_HOST: 'db/host',
+    DB_PORT: 'db/port',
+    DB_DATABASE: 'db/database',
+    // API keys
+    JWT_SECRET: 'jwt/secret',
+    JWT_REFRESH_SECRET: 'jwt/refresh-secret',
+    // Encryption
+    ENCRYPTION_KEY: 'encryption/key',
+    ENCRYPTION_IV: 'encryption/iv',
+    // Third-party APIs
+    STRIPE_API_KEY: 'stripe/api-key',
+    STRIPE_WEBHOOK_SECRET: 'stripe/webhook-secret',
+    SENDGRID_API_KEY: 'sendgrid/api-key',
+    GITHUB_TOKEN: 'github/token',
+    // Session/CSRF
+    SESSION_SECRET: 'session/secret',
+    CSRF_SECRET: 'csrf/secret',
+});
+/**
+ * Helper to get database credentials using secrets manager
+ */
+export async function getDatabaseCredentials() {
+    const manager = SecretsManager.getInstance();
+    return {
+        username: await manager.getSecret(SECRETS.DB_USERNAME),
+        password: await manager.getSecret(SECRETS.DB_PASSWORD),
+        host: await manager.getSecret(SECRETS.DB_HOST),
+        port: Number.parseInt(await manager.getSecret(SECRETS.DB_PORT), 10),
+        database: await manager.getSecret(SECRETS.DB_DATABASE),
+    };
+}
+/**
+ * Helper to get JWT secrets
+ */
+export async function getJwtSecrets() {
+    const manager = SecretsManager.getInstance();
+    return {
+        secret: await manager.getSecret(SECRETS.JWT_SECRET),
+        refreshSecret: await manager.getSecret(SECRETS.JWT_REFRESH_SECRET),
+    };
+}

package/src/config/app.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Application Configuration
+ * Core application settings
+ * Sealed namespace for immutability
+ */
+declare const getSafeEnv: () => NodeJS.ProcessEnv;
+export declare const appConfig: Readonly<{
+    /**
+     * Application name
+     */
+    readonly name: string;
+    /**
+     * Application environment
+     */
+    readonly environment: "development" | "production" | "testing";
+    /**
+     * Application port
+     */
+    readonly port: number;
+    /**
+     * Application host
+     */
+    readonly host: string;
+    /**
+     * Is development environment
+     */
+    readonly isDevelopment: () => boolean;
+    /**
+     * Is production environment
+     */
+    readonly isProduction: () => boolean;
+    /**
+     * Is testing environment
+     */
+    readonly isTesting: () => boolean;
+    /**
+     * Application debug mode
+     */
+    readonly debug: boolean;
+    /**
+     * Application timezone
+     */
+    readonly timezone: string;
+    /**
+     * Request timeout (milliseconds)
+     */
+    readonly requestTimeout: number;
+    /**
+     * Max request body size
+     */
+    readonly maxBodySize: string;
+    readonly getSafeEnv: () => NodeJS.ProcessEnv;
+}>;
+export { getSafeEnv };
+export type AppConfig = typeof appConfig;
+//# sourceMappingURL=app.d.ts.map

package/src/config/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/config/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,QAAA,MAAM,UAAU,QAAO,MAAM,CAAC,UAkB7B,CAAC;AAmEF,eAAO,MAAM,SAAS;IAhEpB;;OAEG;;IAGH;;OAEG;0BAC0B,aAAa,GAAG,YAAY,GAAG,SAAS;IAErE;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;kCACc,OAAO;IAIxB;;OAEG;iCACa,OAAO;IAIvB;;OAEG;8BACU,OAAO;IAIpB;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;+BA/EkB,MAAM,CAAC,UAAU;EAqFY,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}

package/src/config/app.js

@@ -0,0 +1,77 @@
+/**
+ * Application Configuration
+ * Core application settings
+ * Sealed namespace for immutability
+ */
+import { Env } from './env';
+const getSafeEnv = () => {
+    const baseEnv = typeof process === 'undefined' ? {} : process.env;
+    return {
+        ...baseEnv,
+        // Ensure required keys exist (env.d.ts augments ProcessEnv with required fields)
+        NODE_ENV: baseEnv.NODE_ENV ?? Env.NODE_ENV,
+        USE_RAW_QRY: baseEnv.USE_RAW_QRY ?? (Env.get('USE_RAW_QRY') || undefined),
+        SERVICE_API_KEY: baseEnv.SERVICE_API_KEY ?? Env.get('SERVICE_API_KEY', ''),
+        SERVICE_JWT_SECRET: baseEnv.SERVICE_JWT_SECRET ?? Env.get('SERVICE_JWT_SECRET', ''),
+        BASE_URL: baseEnv.BASE_URL ?? Env.get('BASE_URL', ''),
+        MODE: baseEnv.MODE ?? Env.get('MODE', ''),
+        // Hardening for child-process usage
+        PATH: Env.SAFE_PATH,
+        npm_config_scripts_prepend_node_path: 'true',
+    };
+};
+const appConfigObj = {
+    /**
+     * Application name
+     */
+    name: Env.APP_NAME,
+    /**
+     * Application environment
+     */
+    environment: Env.NODE_ENV,
+    /**
+     * Application port
+     */
+    port: Env.PORT,
+    /**
+     * Application host
+     */
+    host: Env.HOST,
+    /**
+     * Is development environment
+     */
+    isDevelopment() {
+        return this.environment === 'development';
+    },
+    /**
+     * Is production environment
+     */
+    isProduction() {
+        return this.environment === 'production';
+    },
+    /**
+     * Is testing environment
+     */
+    isTesting() {
+        return this.environment === 'testing';
+    },
+    /**
+     * Application debug mode
+     */
+    debug: Env.DEBUG,
+    /**
+     * Application timezone
+     */
+    timezone: Env.get('APP_TIMEZONE', 'UTC'),
+    /**
+     * Request timeout (milliseconds)
+     */
+    requestTimeout: Env.getInt('REQUEST_TIMEOUT', 30000),
+    /**
+     * Max request body size
+     */
+    maxBodySize: Env.get('MAX_BODY_SIZE', '10mb'),
+    getSafeEnv,
+};
+export const appConfig = Object.freeze(appConfigObj);
+export { getSafeEnv };

package/src/config/cache.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Cache Configuration
+ * Caching drivers and settings
+ * Sealed namespace for immutability
+ */
+type MemoryCacheDriverConfig = {
+    driver: 'memory';
+    ttl: number;
+};
+type RedisCacheDriverConfig = {
+    driver: 'redis';
+    host: string;
+    port: number;
+    password: string | undefined;
+    database: number;
+    ttl: number;
+};
+type MemcachedCacheDriverConfig = {
+    driver: 'memcached';
+    servers: string[];
+    ttl: number;
+};
+type FileCacheDriverConfig = {
+    driver: 'file';
+    path: string;
+    ttl: number;
+};
+type CacheDriverConfig = MemoryCacheDriverConfig | RedisCacheDriverConfig | MemcachedCacheDriverConfig | FileCacheDriverConfig;
+export declare const cacheConfig: Readonly<{
+    /**
+     * Default cache driver
+     */
+    default: string;
+    /**
+     * Cache drivers
+     */
+    drivers: {
+        memory: {
+            driver: "memory";
+            ttl: number;
+        };
+        redis: {
+            driver: "redis";
+            host: string;
+            port: number;
+            password: string;
+            database: number;
+            ttl: number;
+        };
+        memcached: {
+            driver: "memcached";
+            servers: string[];
+            ttl: number;
+        };
+        file: {
+            driver: "file";
+            path: string;
+            ttl: number;
+        };
+    };
+    /**
+     * Get cache driver config
+     */
+    getDriver(): CacheDriverConfig;
+    /**
+     * Key prefix for all cache keys
+     */
+    keyPrefix: string;
+    /**
+     * Default cache TTL (seconds)
+     */
+    ttl: number;
+}>;
+export type CacheConfig = typeof cacheConfig;
+export {};
+//# sourceMappingURL=cache.d.ts.map

package/src/config/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/config/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,KAAK,uBAAuB,GAAG;IAC7B,MAAM,EAAE,QAAQ,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,iBAAiB,GAClB,uBAAuB,GACvB,sBAAsB,GACtB,0BAA0B,GAC1B,qBAAqB,CAAC;AA6E1B,eAAO,MAAM,WAAW;IAnDtB;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;IA0BH;;OAEG;iBACU,iBAAiB;IAI9B;;OAEG;;IAGH;;OAEG;;EAImD,CAAC;AACzD,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC"}