@zintrust/core 0.1.19 → 0.1.21

package/src/templates/project/basic/.env.tpl

@@ -1,166 +0,0 @@
-# Zintrust Framework - Environment Configuration
-# Copy this file to .env and configure for your environment
-
-# ============================================================================
-# APPLICATION
-# ============================================================================
-
-# Environment: development | staging | production
-NODE_ENV=development
-
-# Application Name
-APP_NAME=Zintrust App
-
-# Server Configuration
-HOST=
-PORT=
-
-# Application Encryption Key (base64 required for production)
-# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
-# Used for: encryption, CSRF tokens, session tokens, API keys
-APP_KEY=
-
-# ============================================================================
-# DATABASE
-# ============================================================================
-
-# Database Connection Driver
-# Options: sqlite | postgresql | mysql | sqlserver | d1
-DB_CONNECTION=
-
-# SQLite (default for development)
-DB_PATH=
-
-# PostgreSQL
-# DB_HOST=localhost
-# DB_PORT=5432
-# DB_DATABASE=zintrust
-# DB_USERNAME=postgres
-# DB_PASSWORD=postgres
-
-# MySQL
-# DB_HOST=localhost
-# DB_PORT=3306
-# DB_DATABASE=zintrust
-# DB_USERNAME=root
-# DB_PASSWORD=password
-
-# SQL Server
-# DB_HOST=localhost
-# DB_PORT=1433
-# DB_DATABASE=zintrust
-# DB_USERNAME=sa
-# DB_PASSWORD=Password123
-
-# ============================================================================
-# ADVANCED DATABASE FEATURES
-# ============================================================================
-
-# Raw SQL Query Support
-# WARNING: Only enable in development. Bypasses QueryBuilder safety.
-# This is checked once at application bootstrap, cached in memory.
-# Feature flag is initialized at startup - no runtime changes possible.
-USE_RAW_QRY=
-
-# ============================================================================
-# CACHE
-# ============================================================================
-
-# Cache Driver: memory | redis | mongodb | kv
-# - kv: Cloudflare Workers only (requires a KV binding named "CACHE")
-CACHE_DRIVER=
-
-# Redis Configuration (if using Redis)
-# REDIS_HOST=localhost
-# REDIS_PORT=6379
-
-# MongoDB Cache (if using mongodb)
-# Uses MongoDB Atlas Data API (HTTPS)
-# MONGO_URI=https://data.mongodb-api.com/app/<app-id>/endpoint/data/v1
-# MONGO_DB=zintrust_cache
-
-# ============================================================================
-# LOGGING
-# ============================================================================
-
-# Log Level: debug | info | warn | error
-LOG_LEVEL=
-
-# Log Channel: console | file | all
-LOG_CHANNEL=
-
-# ============================================================================
-# SECURITY
-# ============================================================================
-
-# JWT Secret for authentication
-JWT_SECRET=
-
-# Session Configuration
-SESSION_DRIVER=
-SESSION_LIFETIME=
-
-# CORS Configuration
-CORS_ORIGINS=
-
-# ============================================================================
-# MICROSERVICES
-# ============================================================================
-
-# Enable Microservices
-MICROSERVICES=
-
-# Comma-separated list of services to load
-SERVICES=
-
-# Service Discovery
-SERVICE_DISCOVERY=
-
-# Request Tracing
-MICROSERVICES_TRACING=
-MICROSERVICES_TRACING_RATE=
-
-# ============================================================================
-# SONARQUBE / SONARCLOUD
-# ============================================================================
-
-# SonarQube Server
-SONAR_HOST_URL=
-
-# SonarCloud
-# SONAR_HOST_URL=https://sonarcloud.io
-# SONAR_TOKEN=your_token
-# SONAR_ORGANIZATION=your-organization
-
-# ============================================================================
-# EXTERNAL SERVICES
-# ============================================================================
-
-# Snyk Security Token
-# SNYK_TOKEN=your_token
-
-# SendGrid (Email)
-# SENDGRID_API_KEY=your_api_key
-
-# Stripe (Payments)
-# STRIPE_SECRET_KEY=your_secret_key
-# STRIPE_PUBLIC_KEY=your_public_key
-
-# AWS S3 (File Storage)
-# AWS_ACCESS_KEY_ID=your_access_key
-# AWS_SECRET_ACCESS_KEY=your_secret_key
-# AWS_REGION=us-east-1
-# AWS_BUCKET=your_bucket_name
-
-# ============================================================================
-# DEVELOPMENT
-# ============================================================================
-
-# Debug Mode
-DEBUG=
-
-# Database Synchronization (auto-migrate on startup)
-DB_SYNCHRONIZE=
-
-# Database Logging
-DB_LOGGING=

package/src/templates/project/basic/config/logging/KvLogger.ts.tpl

@@ -1,181 +0,0 @@
-/**
- * KV Logger
- * Writes batches of log events to a KV namespace (Cloudflare Workers compatible)
- *
- * Enabled via env:
- *  - KV_LOG_ENABLED (default: false)
- *  - KV_NAMESPACE (binding name; default: 'CACHE')
- *  - KV_LOG_RETENTION_DAYS (default: 30)
- */
-
-import { Cloudflare } from '@zintrust/core';
-import { Env } from '@zintrust/core';
-
-export type KvLogEvent = {
-  timestamp: string;
-  level: 'debug' | 'info' | 'warn' | 'error' | 'fatal';
-  message: string;
-  category?: string;
-  data?: unknown;
-  error?: string;
-};
-
-type KVNamespace = NonNullable<ReturnType<typeof Cloudflare.getKVBinding>>;
-
-type PutOptions = { expiration?: number; expirationTtl?: number; metadata?: unknown };
-
-const getRetentionTtlSeconds = (): number => {
-  const days = Env.getInt('KV_LOG_RETENTION_DAYS', 30);
-  const safeDays = Number.isFinite(days) && days > 0 ? days : 30;
-  return safeDays * 24 * 60 * 60;
-};
-
-const getKvBindingName = (): string => {
-  const name = Env.get('KV_NAMESPACE', 'CACHE').trim();
-  return name.length > 0 ? name : 'CACHE';
-};
-
-const isEnabled = (): boolean => Env.getBool('KV_LOG_ENABLED', false);
-
-const safeRandom = (): string => {
-  try {
-    // Prefer crypto if available
-    const cryptoObj = (globalThis as unknown as { crypto?: Crypto }).crypto;
-    if (cryptoObj?.getRandomValues) {
-      const bytes = new Uint8Array(8);
-      cryptoObj.getRandomValues(bytes);
-      return Array.from(bytes)
-        .map((b) => b.toString(16).padStart(2, '0'))
-        .join('');
-    }
-  } catch {
-    // fall through
-  }
-  const generate = Math.random().toString(16).slice(2); // NOSONAR
-  const fallback = generate + Math.random().toString(16).slice(2); // NOSONAR this is not used for security
-  return fallback;
-};
-
-const buildKey = (timestampIso: string): string => {
-  const date = timestampIso.slice(0, 10);
-  const hour = timestampIso.slice(11, 13);
-  return `logs:${date}:${hour}:${safeRandom()}`;
-};
-
-let buffer: KvLogEvent[] = [];
-let flushTimer: ReturnType<typeof setTimeout> | undefined;
-let flushPromise: Promise<void> | undefined;
-
-const scheduleFlush = async (): Promise<void> => {
-  if (flushPromise !== undefined) return flushPromise;
-
-  // Fixed small batching window to reduce KV write volume.
-  const windowMs = 1000;
-
-  const promise = new Promise<void>((resolve) => {
-    const run = async (): Promise<void> => {
-      try {
-        await flushNow();
-      } finally {
-        resolve(undefined);
-      }
-    };
-
-    if (typeof globalThis.setTimeout !== 'function') {
-      // microtask-ish
-      void run();
-      return;
-    }
-
-    flushTimer = globalThis.setTimeout(() => {
-      flushTimer = undefined;
-      void run();
-    }, windowMs);
-  });
-
-  flushPromise = promise.finally(() => {
-    flushPromise = undefined;
-  });
-
-  return flushPromise;
-};
-
-const getKv = (): KVNamespace | null => {
-  const bindingName = getKvBindingName();
-  return Cloudflare.getKVBinding(bindingName);
-};
-
-const putBatch = async (kv: KVNamespace, events: KvLogEvent[]): Promise<void> => {
-  if (events.length === 0) return;
-
-  const timestamp = events.at(-1)?.timestamp ?? new Date().toISOString();
-  const key = buildKey(timestamp);
-
-  const payload = JSON.stringify({
-    version: 1,
-    createdAt: new Date().toISOString(),
-    count: events.length,
-    events,
-  });
-
-  const opts: PutOptions = { expirationTtl: getRetentionTtlSeconds() };
-
-  await kv.put(key, payload, opts);
-};
-
-const flushNow = async (): Promise<void> => {
-  if (!isEnabled()) {
-    buffer = [];
-    return;
-  }
-
-  const kv = getKv();
-  if (kv === null) {
-    buffer = [];
-    return;
-  }
-
-  const toSend = buffer;
-  buffer = [];
-
-  try {
-    await putBatch(kv, toSend);
-  } catch {
-    // Best-effort: never throw from logging.
-  }
-};
-
-const flushSoon = async (): Promise<void> => {
-  if (flushPromise !== undefined) return flushPromise;
-
-  flushPromise = Promise.resolve()
-    .then(async () => flushNow())
-    .finally(() => {
-      flushPromise = undefined;
-    });
-
-  return flushPromise;
-};
-
-export const KvLogger = Object.freeze({
-  async enqueue(event: KvLogEvent): Promise<void> {
-    if (!isEnabled()) return Promise.resolve();
-
-    buffer.push(event);
-
-    // Basic size guard: flush if it gets too large
-    const maxBatch = 100;
-    if (buffer.length >= maxBatch) {
-      // Cancel scheduled flush and flush immediately
-      if (flushTimer !== undefined) {
-        globalThis.clearTimeout(flushTimer);
-        flushTimer = undefined;
-      }
-      return flushSoon();
-    }
-
-    return scheduleFlush();
-  },
-});
-
-export default KvLogger;

package/src/templates/project/basic/config/logging/SlackLogger.ts.tpl

@@ -1,156 +0,0 @@
-/**
- * Slack Notification Logger
- * Sends warn/error/fatal log events to a Slack incoming webhook.
- *
- * Enabled via env:
- *  - SLACK_LOG_ENABLED (default: false)
- *  - SLACK_LOG_WEBHOOK_URL
- *  - SLACK_LOG_LEVELS (comma-separated; default: "warn,error,fatal")
- *  - SLACK_LOG_BATCH_WINDOW_MS (default: 5000)
- */
-
-import { Env } from '@zintrust/core';
-import { ErrorFactory } from '@zintrust/core';
-import { HttpClient } from '@zintrust/core';
-
-export type SlackLogEvent = {
-  timestamp: string;
-  level: 'debug' | 'info' | 'warn' | 'error' | 'fatal';
-  message: string;
-  category?: string;
-  data?: unknown;
-  error?: string;
-};
-
-type SlackPayload = {
-  text?: string;
-  attachments?: Array<{ color?: string; text: string }>;
-};
-
-const isEnabled = (): boolean => Env.getBool('SLACK_LOG_ENABLED', false);
-
-const getLevels = (): Set<string> => {
-  const raw = Env.get('SLACK_LOG_LEVELS', 'warn,error,fatal');
-  return new Set(
-    raw
-      .split(',')
-      .map((s) => s.trim().toLowerCase())
-      .filter((s) => s.length > 0)
-  );
-};
-
-const levelToColor = (level: SlackLogEvent['level']): string => {
-  if (level === 'fatal' || level === 'error') return '#D50200';
-  if (level === 'warn') return '#D39E00';
-  return '#439FE0';
-};
-
-const formatEventText = (ev: SlackLogEvent): string => {
-  const header = `*${ev.level.toUpperCase()}* ${ev.message}`;
-  const metaParts: string[] = [];
-  if (ev.category !== undefined) metaParts.push(`category=${ev.category}`);
-  metaParts.push(`ts=${ev.timestamp}`);
-
-  const meta = metaParts.length > 0 ? `\n_${metaParts.join(' ')}_` : '';
-
-  const err = ev.error === undefined ? '' : `\n*error:* ${String(ev.error)}`;
-  const data = ev.data === undefined ? '' : `\n*data:* \`${JSON.stringify(ev.data)}\``;
-
-  return `${header}${meta}${err}${data}`;
-};
-
-let buffer: SlackLogEvent[] = [];
-let flushPromise: Promise<void> | undefined;
-let dedupeKeys = new Set<string>();
-
-const dedupeKeyFor = (ev: SlackLogEvent): string => {
-  const base = `${ev.level}:${ev.message}:${ev.error ?? ''}`;
-  return base.length > 500 ? base.slice(0, 500) : base;
-};
-
-const sendBatch = async (events: SlackLogEvent[]): Promise<void> => {
-  const webhookUrl = Env.get('SLACK_LOG_WEBHOOK_URL').trim();
-  if (webhookUrl.length === 0) {
-    throw ErrorFactory.createConfigError(
-      'SLACK_LOG_WEBHOOK_URL is required when Slack logging is enabled'
-    );
-  }
-
-  const lines = events.map((e) => formatEventText(e)).join('\n\n');
-
-  const payload: SlackPayload = {
-    attachments: [
-      {
-        color: levelToColor(events[0]?.level ?? 'warn'),
-        text: lines,
-      },
-    ],
-  };
-
-  await HttpClient.post(webhookUrl, payload).send();
-};
-
-const flushNow = async (): Promise<void> => {
-  const toSend = buffer;
-  buffer = [];
-  dedupeKeys = new Set<string>();
-
-  if (!isEnabled()) return;
-  if (toSend.length === 0) return;
-
-  try {
-    await sendBatch(toSend);
-  } catch {
-    // Best-effort: never throw from logging.
-  }
-};
-
-const scheduleFlush = async (): Promise<void> => {
-  if (flushPromise !== undefined) return flushPromise;
-
-  const windowMs = Math.max(0, Env.getInt('SLACK_LOG_BATCH_WINDOW_MS', 5000));
-
-  const promise = new Promise<void>((resolve) => {
-    const run = async (): Promise<void> => {
-      try {
-        await flushNow();
-      } finally {
-        resolve(undefined);
-      }
-    };
-
-    if (windowMs === 0 || typeof globalThis.setTimeout !== 'function') {
-      void run();
-      return;
-    }
-
-    globalThis.setTimeout(() => {
-      void run();
-    }, windowMs);
-  });
-
-  flushPromise = promise.finally(() => {
-    flushPromise = undefined;
-  });
-
-  return flushPromise;
-};
-
-export const SlackLogger = Object.freeze({
-  async enqueue(event: SlackLogEvent): Promise<void> {
-    if (!isEnabled()) return Promise.resolve();
-
-    const levels = getLevels();
-    if (!levels.has(event.level)) return Promise.resolve();
-
-    const key = dedupeKeyFor(event);
-    if (dedupeKeys.has(key)) return scheduleFlush();
-
-    dedupeKeys.add(key);
-    buffer.push(event);
-
-    return scheduleFlush();
-  },
-});
-
-export default SlackLogger;

package/src/templates/project/basic/database/migrations/index.ts.tpl

@@ -1,2 +0,0 @@
-// Placeholder for migrations
-export const migrations = Object.freeze([] as const);