@zintrust/core 0.1.19 → 0.1.21

package/src/config/notification.d.ts

@@ -5,33 +5,20 @@
  * Driver selection must be dynamic (tests may mutate process.env).
  */
 import type { KnownNotificationDriverConfig, NotificationDrivers, NotificationProviders } from './type';
-export declare const notificationConfig: Readonly<{
-    /**
-     * Default notification channel name (normalized).
-     */
-    readonly default: string;
-    /**
-     * Notification channels.
-     *
-     * You may add custom named channels (e.g. `opsSlack`, `smsMarketing`) that
-     * point to any known driver config.
-     */
-    readonly drivers: NotificationDrivers;
-    /**
-     * Legacy provider configs (kept for backwards compatibility with wrappers).
-     */
-    readonly providers: NotificationProviders;
-    /**
-     * Normalized notification channel name.
-     */
-    readonly getDriverName: () => string;
-    /**
-     * Resolve a channel config.
-     * - Unknown names throw when explicitly selected.
-     * - `default` is a reserved alias of the configured default.
-     */
-    readonly getDriverConfig: (name?: string) => KnownNotificationDriverConfig;
+export type NotificationConfigOverrides = Partial<{
+    default: string;
+    drivers: NotificationDrivers;
+    providers: NotificationProviders;
 }>;
-export type NotificationConfig = typeof notificationConfig;
+type NotificationRuntimeConfig = {
+    default: string;
+    drivers: NotificationDrivers;
+    providers: NotificationProviders;
+    getDriverName: () => string;
+    getDriverConfig: (name?: string) => KnownNotificationDriverConfig;
+};
+declare const createNotificationConfig: () => NotificationRuntimeConfig;
+export type NotificationConfig = ReturnType<typeof createNotificationConfig>;
+export declare const notificationConfig: NotificationConfig;
 export default notificationConfig;
 //# sourceMappingURL=notification.d.ts.map

package/src/config/notification.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../../../src/config/notification.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,6BAA6B,EAE7B,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,cAAc,CAAC;AAuHtB,eAAO,MAAM,kBAAkB;IA1C7B;;OAEG;sBACY,MAAM;IAIrB;;;;;OAKG;sBACY,mBAAmB;IAKlC;;OAEG;wBACc,qBAAqB;IAItC;;OAEG;kCACc,MAAM;IAIvB;;;;OAIG;sCACoB,MAAM,KAAG,6BAA6B;EAKO,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC;AAE3D,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../../../src/config/notification.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,6BAA6B,EAE7B,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,EAAE,qBAAqB,CAAC;CAClC,CAAC,CAAC;AAEH,KAAK,yBAAyB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,EAAE,qBAAqB,CAAC;IACjC,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,6BAA6B,CAAC;CACnE,CAAC;AA2EF,QAAA,MAAM,wBAAwB,QAAO,yBA+DpC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAqB7E,eAAO,MAAM,kBAAkB,EAAE,kBAY/B,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/src/config/notification.js

@@ -4,6 +4,7 @@
  * Config-first mapping of notification providers/channels.
  * Driver selection must be dynamic (tests may mutate process.env).
  */
+import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
 import { Env } from './env.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 const normalizeName = (value) => value.trim().toLowerCase();
@@ -61,43 +62,88 @@ const getBaseProviders = () => {
         },
     };
 };
-const notificationConfigObj = {
-    /**
-     * Default notification channel name (normalized).
-     */
-    get default() {
-        return getDefaultChannel(this.drivers);
-    },
-    /**
-     * Notification channels.
-     *
-     * You may add custom named channels (e.g. `opsSlack`, `smsMarketing`) that
-     * point to any known driver config.
-     */
-    get drivers() {
-        // Return a record of channels; can be extended by app-level config.
-        return getBaseProviders();
-    },
-    /**
-     * Legacy provider configs (kept for backwards compatibility with wrappers).
-     */
-    get providers() {
-        return getBaseProviders();
+const createNotificationConfig = () => {
+    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Notification) ??
+        {};
+    const notificationConfigObj = {
+        /**
+         * Default notification channel name (normalized).
+         */
+        get default() {
+            const overrideDefault = overrides.default;
+            if (typeof overrideDefault === 'string' && overrideDefault.trim().length > 0) {
+                const value = normalizeName(overrideDefault);
+                if (value.length > 0 && hasOwn(this.drivers, value))
+                    return value;
+                throw ErrorFactory.createConfigError(`Notification channel not configured: ${value}`);
+            }
+            return getDefaultChannel(this.drivers);
+        },
+        /**
+         * Notification channels.
+         *
+         * You may add custom named channels (e.g. `opsSlack`, `smsMarketing`) that
+         * point to any known driver config.
+         */
+        get drivers() {
+            // Return a record of channels; can be extended by app-level config.
+            return {
+                ...getBaseProviders(),
+                ...(overrides.providers ?? {}),
+                ...(overrides.drivers ?? {}),
+            };
+        },
+        /**
+         * Legacy provider configs (kept for backwards compatibility with wrappers).
+         */
+        get providers() {
+            return {
+                ...getBaseProviders(),
+                ...(overrides.providers ?? {}),
+            };
+        },
+        /**
+         * Normalized notification channel name.
+         */
+        getDriverName() {
+            return normalizeName(this.default);
+        },
+        /**
+         * Resolve a channel config.
+         * - Unknown names throw when explicitly selected.
+         * - `default` is a reserved alias of the configured default.
+         */
+        getDriverConfig(name) {
+            return getNotificationDriver(this, name);
+        },
+    };
+    return Object.freeze(notificationConfigObj);
+};
+let cached = null;
+const proxyTarget = {};
+const ensureNotificationConfig = () => {
+    if (cached)
+        return cached;
+    cached = createNotificationConfig();
+    try {
+        Object.defineProperties(proxyTarget, Object.getOwnPropertyDescriptors(cached));
+    }
+    catch {
+        // best-effort
+    }
+    return cached;
+};
+export const notificationConfig = new Proxy(proxyTarget, {
+    get(_target, prop) {
+        return ensureNotificationConfig()[prop];
     },
-    /**
-     * Normalized notification channel name.
-     */
-    getDriverName() {
-        return normalizeName(this.default);
+    ownKeys() {
+        ensureNotificationConfig();
+        return Reflect.ownKeys(proxyTarget);
     },
-    /**
-     * Resolve a channel config.
-     * - Unknown names throw when explicitly selected.
-     * - `default` is a reserved alias of the configured default.
-     */
-    getDriverConfig(name) {
-        return getNotificationDriver(this, name);
+    getOwnPropertyDescriptor(_target, prop) {
+        ensureNotificationConfig();
+        return Object.getOwnPropertyDescriptor(proxyTarget, prop);
     },
-};
-export const notificationConfig = Object.freeze(notificationConfigObj);
+});
 export default notificationConfig;

package/src/config/queue.d.ts

@@ -3,61 +3,14 @@
  * Background job and message queue settings
  * Sealed namespace for immutability
  */
-import type { QueueDriverName, QueueDriversConfig } from './type';
-export declare const queueConfig: Readonly<{
-    /**
-     * Default queue driver
-     */
+import type { QueueConfigWithDrivers, QueueDriverName, QueueDriversConfig } from './type';
+export type QueueConfigOverrides = Partial<{
     default: QueueDriverName;
-    /**
-     * Queue drivers
-     */
-    drivers: {
-        sync: {
-            driver: "sync";
-        };
-        database: {
-            driver: "database";
-            table: string;
-            connection: string;
-        };
-        redis: {
-            driver: "redis";
-            host: string;
-            port: number;
-            password: string;
-            database: number;
-        };
-        rabbitmq: {
-            driver: "rabbitmq";
-            host: string;
-            port: number;
-            username: string;
-            password: string;
-            vhost: string;
-        };
-        sqs: {
-            driver: "sqs";
-            key: string;
-            secret: string;
-            region: string;
-            queueUrl: string;
-        };
-    };
-    /**
-     * Get queue driver config
-     */
-    getDriver(): QueueDriversConfig[QueueDriverName];
-    /**
-     * Failed jobs table
-     */
+    drivers: Partial<QueueDriversConfig>;
     failed: {
         database: string;
         table: string;
     };
-    /**
-     * Job processing
-     */
     processing: {
         timeout: number;
         retries: number;
@@ -65,5 +18,22 @@ export declare const queueConfig: Readonly<{
         workers: number;
     };
 }>;
-export type QueueConfig = typeof queueConfig;
+declare const createQueueConfig: () => {
+    default: QueueDriverName;
+    drivers: QueueDriversConfig;
+    getDriver: (this: QueueConfigWithDrivers) => QueueDriversConfig[QueueDriverName];
+    failed: {
+        database: string;
+        table: string;
+    };
+    processing: {
+        timeout: number;
+        retries: number;
+        backoff: number;
+        workers: number;
+    };
+};
+export type QueueConfig = ReturnType<typeof createQueueConfig>;
+export declare const queueConfig: QueueConfig;
+export {};
 //# sourceMappingURL=queue.d.ts.map

package/src/config/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/config/queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAA0B,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AA2EhG,eAAO,MAAM,WAAW;IAnEtB;;OAEG;aACyC,eAAe;IAE3D;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkCH;;OAEG;iBACU,kBAAkB,CAAC,eAAe,CAAC;IAIhD;;OAEG;;;;;IAMH;;OAEG;;;;;;;EASmD,CAAC;AAEzD,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC"}
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/config/queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEhG,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACpF,CAAC,CAAC;AAOH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,CAAC,IAAI,EAAE,sBAAsB,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACjF,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CA4FpF,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}

package/src/config/queue.js

@@ -4,19 +4,15 @@
  * Sealed namespace for immutability
  */
 import { Env } from './env.js';
+import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
 const getQueueDriver = (config) => {
     const driverName = config.default;
     return config.drivers[driverName];
 };
-const queueConfigObj = {
-    /**
-     * Default queue driver
-     */
-    default: Env.get('QUEUE_DRIVER', 'sync'),
-    /**
-     * Queue drivers
-     */
-    drivers: {
+const createQueueConfig = () => {
+    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Queue) ?? {};
+    const baseDefault = Env.get('QUEUE_DRIVER', 'sync');
+    const baseDrivers = {
         sync: {
             driver: 'sync',
         },
@@ -47,28 +43,77 @@ const queueConfigObj = {
             region: Env.AWS_REGION,
             queueUrl: Env.get('AWS_SQS_QUEUE_URL'),
         },
-    },
-    /**
-     * Get queue driver config
-     */
-    getDriver() {
-        return getQueueDriver(this);
-    },
-    /**
-     * Failed jobs table
-     */
-    failed: {
+    };
+    const baseFailed = {
         database: Env.get('FAILED_JOBS_DB_CONNECTION', 'default'),
         table: Env.get('FAILED_JOBS_TABLE', 'failed_jobs'),
-    },
-    /**
-     * Job processing
-     */
-    processing: {
+    };
+    const baseProcessing = {
         timeout: Env.getInt('QUEUE_JOB_TIMEOUT', 60),
         retries: Env.getInt('QUEUE_JOB_RETRIES', 3),
         backoff: Env.getInt('QUEUE_JOB_BACKOFF', 0),
         workers: Env.getInt('QUEUE_WORKERS', 1),
-    },
+    };
+    const mergedDrivers = {
+        ...baseDrivers,
+        ...(overrides.drivers ?? {}),
+    };
+    const queueConfigObj = {
+        /**
+         * Default queue driver
+         */
+        default: (overrides.default ?? baseDefault),
+        /**
+         * Queue drivers
+         */
+        drivers: mergedDrivers,
+        /**
+         * Get queue driver config
+         */
+        getDriver() {
+            return getQueueDriver(this);
+        },
+        /**
+         * Failed jobs table
+         */
+        failed: {
+            ...baseFailed,
+            ...(overrides.failed ?? {}),
+        },
+        /**
+         * Job processing
+         */
+        processing: {
+            ...baseProcessing,
+            ...(overrides.processing ?? {}),
+        },
+    };
+    return Object.freeze(queueConfigObj);
+};
+let cached = null;
+const proxyTarget = {};
+const ensureQueueConfig = () => {
+    if (cached)
+        return cached;
+    cached = createQueueConfig();
+    try {
+        Object.defineProperties(proxyTarget, Object.getOwnPropertyDescriptors(cached));
+    }
+    catch {
+        // best-effort
+    }
+    return cached;
 };
-export const queueConfig = Object.freeze(queueConfigObj);
+export const queueConfig = new Proxy(proxyTarget, {
+    get(_target, prop) {
+        return ensureQueueConfig()[prop];
+    },
+    ownKeys() {
+        ensureQueueConfig();
+        return Reflect.ownKeys(proxyTarget);
+    },
+    getOwnPropertyDescriptor(_target, prop) {
+        ensureQueueConfig();
+        return Object.getOwnPropertyDescriptor(proxyTarget, prop);
+    },
+});

package/src/config/security.d.ts

@@ -23,7 +23,7 @@ export declare const securityConfig: Readonly<{
         readonly enabled: boolean;
         readonly secret: string;
         readonly algorithm: "HS256" | "HS512" | "RS256";
-        readonly expiresIn: string;
+        readonly expiresIn: number;
         readonly refreshExpiresIn: string;
         readonly issuer: string;
         readonly audience: string;

package/src/config/security.js

@@ -49,7 +49,7 @@ const securityConfigObj = {
             return cachedJwtSecret;
         },
         algorithm: Env.get('JWT_ALGORITHM', 'HS256'),
-        expiresIn: Env.get('JWT_EXPIRES_IN', '1h'),
+        expiresIn: Env.getInt('JWT_EXPIRES_IN', 60 * 60),
         refreshExpiresIn: Env.get('JWT_REFRESH_EXPIRES_IN', '7d'),
         issuer: Env.get('JWT_ISSUER', 'zintrust'),
         audience: Env.get('JWT_AUDIENCE', 'zintrust-api'),

package/src/config/storage.d.ts

@@ -4,49 +4,42 @@
  * Sealed namespace for immutability
  */
 import type { StorageConfigRuntime, StorageDriverConfig, StorageDrivers } from './type';
-export declare const storageConfig: Readonly<{
-    /**
-     * Default storage driver (dynamic; tests may mutate process.env)
-     */
-    readonly default: string;
-    /**
-     * Storage drivers configuration (dynamic; tests may mutate process.env)
-     */
-    readonly drivers: StorageDrivers;
-    /**
-     * Get storage driver config
-     */
-    getDriver(this: StorageConfigRuntime): StorageDriverConfig;
-    /**
-     * Get a storage disk configuration by name.
-     *
-     * - When `name` is provided and not configured, this throws.
-     * - When `name` is omitted, it resolves the configured default with a backwards-compatible fallback.
-     * - Reserved name `default` aliases the configured default.
-     */
-    getDriverConfig(this: StorageConfigRuntime, name?: string): StorageDriverConfig;
-    /**
-     * Temporary file settings
-     */
-    readonly temp: {
+export type StorageConfigOverrides = Partial<{
+    default: string;
+    drivers: Partial<StorageDrivers> & Record<string, StorageDriverConfig>;
+    temp: {
         path: string;
         maxAge: number;
     };
-    /**
-     * Uploads settings
-     */
-    readonly uploads: {
+    uploads: {
         maxSize: string;
         allowedMimes: string;
         path: string;
     };
-    /**
-     * Backups settings
-     */
-    readonly backups: {
+    backups: {
         path: string;
         driver: string;
     };
 }>;
-export type StorageConfig = typeof storageConfig;
+type StorageRuntimeConfig = StorageConfigRuntime & {
+    getDriver: (this: StorageConfigRuntime) => StorageDriverConfig;
+    getDriverConfig: (this: StorageConfigRuntime, name?: string) => StorageDriverConfig;
+    temp: {
+        path: string;
+        maxAge: number;
+    };
+    uploads: {
+        maxSize: string;
+        allowedMimes: string;
+        path: string;
+    };
+    backups: {
+        path: string;
+        driver: string;
+    };
+};
+declare const createStorageConfig: () => StorageRuntimeConfig;
+export type StorageConfig = ReturnType<typeof createStorageConfig>;
+export declare const storageConfig: StorageConfig;
+export {};
 //# sourceMappingURL=storage.d.ts.map

package/src/config/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/config/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAmI9F,eAAO,MAAM,aAAa;IAhExB;;OAEG;sBACY,MAAM;IAIrB;;OAEG;sBACY,cAAc;IAI7B;;OAEG;oBACa,oBAAoB,GAAG,mBAAmB;IAI1D;;;;;;OAMG;0BACmB,oBAAoB,SAAS,MAAM,GAAG,mBAAmB;IAI/E;;OAEG;mBACS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAO5C;;OAEG;sBACY;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAQtE;;OAEG;sBACY;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;EAQW,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/config/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9F,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACvE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,KAAK,oBAAoB,GAAG,oBAAoB,GAAG;IACjD,SAAS,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,mBAAmB,CAAC;IAC/D,eAAe,EAAE,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,mBAAmB,CAAC;IACpF,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C,CAAC;AAgEF,QAAA,MAAM,mBAAmB,QAAO,oBAgF/B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAqBnE,eAAO,MAAM,aAAa,EAAE,aAY1B,CAAC"}

package/src/config/storage.js

@@ -3,6 +3,7 @@
  * File storage and cloud storage settings
  * Sealed namespace for immutability
  */
+import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
 import { Env } from './env.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 const hasOwn = (obj, key) => {
@@ -59,62 +60,102 @@ const getDrivers = () => ({
         url: Env.get('GCS_URL', ''),
     },
 });
-const storageConfigObj = {
-    /**
-     * Default storage driver (dynamic; tests may mutate process.env)
-     */
-    get default() {
-        return Env.get('STORAGE_CONNECTION', Env.get('STORAGE_DRIVER', 'local')).trim().toLowerCase();
-    },
-    /**
-     * Storage drivers configuration (dynamic; tests may mutate process.env)
-     */
-    get drivers() {
-        return getDrivers();
-    },
-    /**
-     * Get storage driver config
-     */
-    getDriver() {
-        return getStorageDriver(this);
-    },
-    /**
-     * Get a storage disk configuration by name.
-     *
-     * - When `name` is provided and not configured, this throws.
-     * - When `name` is omitted, it resolves the configured default with a backwards-compatible fallback.
-     * - Reserved name `default` aliases the configured default.
-     */
-    getDriverConfig(name) {
-        return getStorageDriver(this, name);
-    },
-    /**
-     * Temporary file settings
-     */
-    get temp() {
-        return {
-            path: Env.get('TEMP_PATH', 'storage/temp'),
-            maxAge: Env.getInt('TEMP_FILE_MAX_AGE', 86400), // 24 hours
-        };
+const createStorageConfig = () => {
+    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Storage) ?? {};
+    const storageConfigObj = {
+        /**
+         * Default storage driver (dynamic; tests may mutate process.env)
+         */
+        get default() {
+            const base = Env.get('STORAGE_CONNECTION', Env.get('STORAGE_DRIVER', 'local'))
+                .trim()
+                .toLowerCase();
+            const selected = overrides.default ?? base;
+            return String(selected).trim().toLowerCase();
+        },
+        /**
+         * Storage drivers configuration (dynamic; tests may mutate process.env)
+         */
+        get drivers() {
+            return {
+                ...getDrivers(),
+                ...(overrides.drivers ?? {}),
+            };
+        },
+        /**
+         * Get storage driver config
+         */
+        getDriver() {
+            return getStorageDriver(this);
+        },
+        /**
+         * Get a storage disk configuration by name.
+         *
+         * - When `name` is provided and not configured, this throws.
+         * - When `name` is omitted, it resolves the configured default with a backwards-compatible fallback.
+         * - Reserved name `default` aliases the configured default.
+         */
+        getDriverConfig(name) {
+            return getStorageDriver(this, name);
+        },
+        /**
+         * Temporary file settings
+         */
+        get temp() {
+            return {
+                path: Env.get('TEMP_PATH', 'storage/temp'),
+                maxAge: Env.getInt('TEMP_FILE_MAX_AGE', 86400), // 24 hours
+                ...(overrides.temp ?? {}),
+            };
+        },
+        /**
+         * Uploads settings
+         */
+        get uploads() {
+            return {
+                maxSize: Env.get('MAX_UPLOAD_SIZE', '100mb'),
+                allowedMimes: Env.get('ALLOWED_UPLOAD_MIMES', 'jpg,jpeg,png,pdf,doc,docx'),
+                path: Env.get('UPLOADS_PATH', 'storage/uploads'),
+                ...(overrides.uploads ?? {}),
+            };
+        },
+        /**
+         * Backups settings
+         */
+        get backups() {
+            return {
+                path: Env.get('BACKUPS_PATH', 'storage/backups'),
+                driver: Env.get('BACKUP_DRIVER', 's3'),
+                ...(overrides.backups ?? {}),
+            };
+        },
+    };
+    return Object.freeze(storageConfigObj);
+};
+let cached = null;
+const proxyTarget = {};
+const ensureStorageConfig = () => {
+    if (cached)
+        return cached;
+    cached = createStorageConfig();
+    try {
+        Object.defineProperties(proxyTarget, Object.getOwnPropertyDescriptors(cached));
+    }
+    catch {
+        // best-effort
+    }
+    return cached;
+};
+export const storageConfig = new Proxy(proxyTarget, {
+    get(_target, prop) {
+        return ensureStorageConfig()[prop];
     },
-    /**
-     * Uploads settings
-     */
-    get uploads() {
-        return {
-            maxSize: Env.get('MAX_UPLOAD_SIZE', '100mb'),
-            allowedMimes: Env.get('ALLOWED_UPLOAD_MIMES', 'jpg,jpeg,png,pdf,doc,docx'),
-            path: Env.get('UPLOADS_PATH', 'storage/uploads'),
-        };
+    ownKeys() {
+        ensureStorageConfig();
+        return Reflect.ownKeys(proxyTarget);
     },
-    /**
-     * Backups settings
-     */
-    get backups() {
-        return {
-            path: Env.get('BACKUPS_PATH', 'storage/backups'),
-            driver: Env.get('BACKUP_DRIVER', 's3'),
-        };
+    getOwnPropertyDescriptor(_target, prop) {
+        ensureStorageConfig();
+        return Object.getOwnPropertyDescriptor(proxyTarget, prop);
     },
-};
-export const storageConfig = Object.freeze(storageConfigObj);
+});