@zintrust/core 0.1.21 → 0.1.23

package/src/cli/scaffolding/RouteGenerator.js

@@ -5,6 +5,25 @@
 import { FileGenerator } from '../scaffolding/FileGenerator.js';
 import { Logger } from '../../config/logger.js';
 import * as path from '../../node-singletons/path.js';
+// Escape characters that can cause issues when embedding JSON.stringify output
+// into generated JavaScript source (e.g., inside <script> tags).
+const unsafeCharMap = {
+    '<': '\\u003C',
+    '>': '\\u003E',
+    '/': '\\u002F',
+    '\\': '\\\\',
+    '\b': '\\b',
+    '\f': '\\f',
+    '\n': '\\n',
+    '\r': '\\r',
+    '\t': '\\t',
+    '\0': '\\0',
+    '\u2028': '\\u2028',
+    '\u2029': '\\u2029',
+};
+function escapeUnsafeChars(str) {
+    return str.replace(/[<>/\\\b\f\n\r\t\0\u2028\u2029]/g, (ch) => unsafeCharMap[ch] ?? ch);
+}
 /**
  * Validate route options
  */
@@ -181,7 +200,7 @@ function buildMethodRoute(route, router, groupMiddlewareList) {
             .filter((v) => v.trim() !== '')
             .join(', ')}]`
         : '';
-    const metaProp = `meta: { summary: ${JSON.stringify(summary)}, tags: [${JSON.stringify(tag)}] }`;
+    const metaProp = `meta: { summary: ${escapeUnsafeChars(JSON.stringify(summary))}, tags: [${escapeUnsafeChars(JSON.stringify(tag))}] }`;
     const options = `{ ${[middlewareProp, metaProp].filter((v) => v !== '').join(', ')} }`;
     return `  Router.${method}(${router}, '${routePath}', (req, res) => ${controllerVar}.${action}(req, res), ${options});\n`;
 }
@@ -201,7 +220,7 @@ function buildResourceRoute(route, router, groupMiddlewareList) {
             .filter((v) => v.trim() !== '')
             .join(', ')}]`
         : '';
-    const resourceMeta = (action, routePattern) => `meta: { summary: ${JSON.stringify(action.toUpperCase() + ' ' + routePattern)}, tags: [${JSON.stringify(tag)}] }`;
+    const resourceMeta = (action, routePattern) => `meta: { summary: ${escapeUnsafeChars(JSON.stringify(action.toUpperCase() + ' ' + routePattern))}, tags: [${escapeUnsafeChars(JSON.stringify(tag))}] }`;
     const pathId = routePath + '/:id';
     const optsParts = [
         middlewareProp,

package/src/cli/scaffolding/TemplateEngine.js

@@ -62,7 +62,7 @@ export const TemplateEngine = Object.freeze({
 export const BUILT_IN_TEMPLATES = {
     basic: {
         name: 'basic',
-        description: 'Basic Zintrust application',
+        description: 'Basic ZinTrust application',
         directories: [
             'src',
             'app/Models',

package/src/cli/utils/EnvFileLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnvFileLoader.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/EnvFileLoader.ts"],"names":[],"mappings":"AA2GA,KAAK,WAAW,GAAG;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,OAAO,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAsFF,eAAO,MAAM,aAAa;qBA7DH,WAAW,KAAQ,SAAS;wBA8B1B,SAAS;mCAEI,YAAY,KAAG,IAAI;oBA2BpC,SAAS;EAO5B,CAAC"}
+{"version":3,"file":"EnvFileLoader.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/EnvFileLoader.ts"],"names":[],"mappings":"AAgHA,KAAK,WAAW,GAAG;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,OAAO,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAsFF,eAAO,MAAM,aAAa;qBA7DH,WAAW,KAAQ,SAAS;wBA8B1B,SAAS;mCAEI,YAAY,KAAG,IAAI;oBA2BpC,SAAS;EAO5B,CAAC"}

package/src/common/ExternalServiceUtils.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Shared Utilities for External Service Drivers
+ * Common patterns for API calls, environment variable reading, and error handling
+ */
+/**
+ * Environment variable reader with fallback support
+ * Handles both Env.get() and process.env for maximum compatibility
+ */
+export declare const readEnvString: (key: string, fallback?: string) => string;
+/**
+ * Validate required parameters for external service calls
+ */
+export declare const validateRequiredParams: (params: Record<string, unknown>, required: string[]) => void;
+/**
+ * Create standardized API error response
+ */
+export declare const createApiError: (message: string, service: string) => Error;
+/**
+ * Common fetch wrapper with error handling
+ */
+export declare const safeFetch: (url: string, options: RequestInit) => Promise<Response>;
+/**
+ * Standard API response builder
+ */
+export declare const buildApiResponse: <T>(success: boolean, data?: T, error?: string) => {
+    success: boolean;
+    data?: T;
+    error?: string;
+};
+/**
+ * Health check utilities
+ */
+export declare const HealthUtils: {
+    /**
+     * Get process uptime safely
+     */
+    getUptime(): number;
+    /**
+     * Get current timestamp
+     */
+    getTimestamp(): string;
+    /**
+     * Check if in production
+     */
+    isProduction(environment: string): boolean;
+    /**
+     * Build health response
+     */
+    buildHealthResponse(status: "healthy" | "unhealthy" | "alive" | "ready" | "not_ready", environment: string, extra?: Record<string, unknown>): {
+        status: "unhealthy" | "ready" | "healthy" | "alive" | "not_ready";
+        timestamp: string;
+        environment: string;
+    };
+    /**
+     * Build error health response
+     */
+    buildErrorResponse(status: "unhealthy" | "not_ready", environment: string, error: Error, extra?: Record<string, unknown>): {
+        status: "unhealthy" | "ready" | "healthy" | "alive" | "not_ready";
+        timestamp: string;
+        environment: string;
+    };
+};
+//# sourceMappingURL=ExternalServiceUtils.d.ts.map

package/src/common/ExternalServiceUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternalServiceUtils.d.ts","sourceRoot":"","sources":["../../../src/common/ExternalServiceUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,iBAAa,KAAG,MAS1D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,GACjC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,MAAM,EAAE,KACjB,IAWF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,cAAc,GAAI,SAAS,MAAM,EAAE,SAAS,MAAM,KAAG,KAEjE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,SAAS,GAAU,KAAK,MAAM,EAAE,SAAS,WAAW,KAAG,OAAO,CAAC,QAAQ,CAcnF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,EAChC,SAAS,OAAO,EAChB,OAAO,CAAC,EACR,QAAQ,MAAM,KACb;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAY9C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;iBACU,MAAM;IAMnB;;OAEG;oBACa,MAAM;IAItB;;OAEG;8BACuB,MAAM,GAAG,OAAO;IAI1C;;OAEG;gCAEO,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,eACpD,MAAM,UACX,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;IAYjC;;OAEG;+BAEO,WAAW,GAAG,WAAW,eACpB,MAAM,SACZ,KAAK,UACJ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;CASlC,CAAC"}

package/src/common/ExternalServiceUtils.js

@@ -0,0 +1,116 @@
+/**
+ * Shared Utilities for External Service Drivers
+ * Common patterns for API calls, environment variable reading, and error handling
+ */
+import { Env } from '../config/env.js';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+/**
+ * Environment variable reader with fallback support
+ * Handles both Env.get() and process.env for maximum compatibility
+ */
+export const readEnvString = (key, fallback = '') => {
+    const anyEnv = Env;
+    const fromEnv = typeof anyEnv.get === 'function' ? anyEnv.get(key, '') : '';
+    if (typeof fromEnv === 'string' && fromEnv.trim() !== '')
+        return fromEnv;
+    if (typeof process !== 'undefined') {
+        const raw = process.env?.[key];
+        if (typeof raw === 'string')
+            return raw;
+    }
+    return fromEnv ?? fallback;
+};
+/**
+ * Validate required parameters for external service calls
+ */
+export const validateRequiredParams = (params, required) => {
+    for (const param of required) {
+        const value = params[param];
+        if (value === null ||
+            value === undefined ||
+            (typeof value === 'string' && value.length === 0)) {
+            throw ErrorFactory.createValidationError(`${param} is required`);
+        }
+    }
+};
+/**
+ * Create standardized API error response
+ */
+export const createApiError = (message, service) => {
+    return ErrorFactory.createValidationError(`${service} API error: ${message}`);
+};
+/**
+ * Common fetch wrapper with error handling
+ */
+export const safeFetch = async (url, options) => {
+    try {
+        const response = await globalThis.fetch(url, options);
+        if (!response.ok) {
+            throw ErrorFactory.createValidationError(`HTTP ${response.status}: ${response.statusText}`);
+        }
+        return response;
+    }
+    catch (error) {
+        throw ErrorFactory.createValidationError(error instanceof Error ? error.message : 'Unknown fetch error');
+    }
+};
+/**
+ * Standard API response builder
+ */
+export const buildApiResponse = (success, data, error) => {
+    const response = { success };
+    if (data !== undefined) {
+        response.data = data;
+    }
+    if (error !== undefined) {
+        response.error = error;
+    }
+    return response;
+};
+/**
+ * Health check utilities
+ */
+export const HealthUtils = {
+    /**
+     * Get process uptime safely
+     */
+    getUptime() {
+        return typeof process !== 'undefined' && typeof process.uptime === 'function'
+            ? process.uptime()
+            : 0;
+    },
+    /**
+     * Get current timestamp
+     */
+    getTimestamp() {
+        return new Date().toISOString();
+    },
+    /**
+     * Check if in production
+     */
+    isProduction(environment) {
+        return environment === 'production';
+    },
+    /**
+     * Build health response
+     */
+    buildHealthResponse(status, environment, extra) {
+        const base = {
+            status,
+            timestamp: HealthUtils.getTimestamp(),
+            environment,
+            ...extra,
+        };
+        return base;
+    },
+    /**
+     * Build error health response
+     */
+    buildErrorResponse(status, environment, error, extra) {
+        const isProd = HealthUtils.isProduction(environment);
+        return HealthUtils.buildHealthResponse(status, environment, {
+            error: isProd ? 'Service unavailable' : error.message,
+            ...extra,
+        });
+    },
+};

package/src/common/HealthRoutes.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Shared Health Route Handlers
+ * Extracted to eliminate duplication between CoreRoutes.ts and routes/health.ts
+ */
+import type { IRouter } from '../routing/Router';
+/**
+ * Register all health routes
+ */
+export declare const registerHealthRoutes: (router: IRouter) => void;
+//# sourceMappingURL=HealthRoutes.d.ts.map

package/src/common/HealthRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HealthRoutes.d.ts","sourceRoot":"","sources":["../../../src/common/HealthRoutes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AA+HhD;;GAEG;AACH,eAAO,MAAM,oBAAoB,GAAI,QAAQ,OAAO,KAAG,IAItD,CAAC"}

package/src/common/HealthRoutes.js

@@ -0,0 +1,114 @@
+/**
+ * Shared Health Route Handlers
+ * Extracted to eliminate duplication between CoreRoutes.ts and routes/health.ts
+ */
+import { appConfig } from '../config/app.js';
+import { RuntimeHealthProbes } from '../health/RuntimeHealthProbes.js';
+import { Router } from '../routing/Router.js';
+import { HealthUtils } from './ExternalServiceUtils.js';
+import { Env } from '../config/env.js';
+import { Logger } from '../config/logger.js';
+import { useDatabase } from '../orm/Database.js';
+import { QueryBuilder } from '../orm/QueryBuilder.js';
+/**
+ * Health check endpoint handler
+ */
+async function handleHealthRoute(_req, res) {
+    const environment = Env.NODE_ENV ?? 'development';
+    try {
+        const db = useDatabase();
+        const maybeIsConnected = db.isConnected;
+        const maybeConnect = db.connect;
+        if (typeof maybeIsConnected === 'function' && maybeIsConnected.call(db) === false) {
+            if (typeof maybeConnect === 'function') {
+                await maybeConnect.call(db);
+            }
+        }
+        await QueryBuilder.ping(db);
+        const uptime = HealthUtils.getUptime();
+        res.json(HealthUtils.buildHealthResponse('healthy', environment, {
+            uptime,
+            database: 'connected',
+        }));
+    }
+    catch (error) {
+        Logger.error('Health check failed:', error);
+        res.setStatus(503).json(HealthUtils.buildErrorResponse('unhealthy', environment, error, {
+            database: 'disconnected',
+        }));
+    }
+}
+/**
+ * Liveness probe endpoint handler
+ */
+function handleHealthLiveRoute(_req, res) {
+    const uptime = HealthUtils.getUptime();
+    res.json(HealthUtils.buildHealthResponse('alive', Env.NODE_ENV ?? 'development', {
+        uptime,
+    }));
+}
+/**
+ * Readiness probe endpoint handler
+ */
+async function handleHealthReadyRoute(_req, res) {
+    const startTime = Date.now();
+    const environment = appConfig.environment;
+    let databaseResponseTime = null;
+    let cacheResponseTime = null;
+    try {
+        const db = useDatabase();
+        const maybeIsConnected = db.isConnected;
+        const maybeConnect = db.connect;
+        if (typeof maybeIsConnected === 'function' && maybeIsConnected.call(db) === false) {
+            if (typeof maybeConnect === 'function') {
+                await maybeConnect.call(db);
+            }
+        }
+        await QueryBuilder.ping(db);
+        databaseResponseTime = Date.now() - startTime;
+        cacheResponseTime = await RuntimeHealthProbes.pingKvCache(2000);
+        res.json(HealthUtils.buildHealthResponse('ready', environment, {
+            dependencies: {
+                database: {
+                    status: 'ready',
+                    responseTime: databaseResponseTime,
+                },
+                ...(cacheResponseTime === null
+                    ? {}
+                    : {
+                        cache: {
+                            status: 'ready',
+                            responseTime: cacheResponseTime,
+                        },
+                    }),
+            },
+        }));
+    }
+    catch (error) {
+        Logger.error('Readiness check failed:', error);
+        const responseTime = Date.now() - startTime;
+        const dependencies = {
+            database: {
+                status: databaseResponseTime === null ? 'unavailable' : 'ready',
+                responseTime: databaseResponseTime ?? responseTime,
+            },
+        };
+        if (RuntimeHealthProbes.getCacheDriverName() === 'kv') {
+            dependencies['cache'] = {
+                status: 'unavailable',
+                responseTime: cacheResponseTime ?? responseTime,
+            };
+        }
+        res.setStatus(503).json(HealthUtils.buildErrorResponse('not_ready', environment, error, {
+            dependencies,
+        }));
+    }
+}
+/**
+ * Register all health routes
+ */
+export const registerHealthRoutes = (router) => {
+    Router.get(router, '/health', handleHealthRoute);
+    Router.get(router, '/health/live', handleHealthLiveRoute);
+    Router.get(router, '/health/ready', handleHealthReadyRoute);
+};

package/src/config/SecretsManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecretsManager.d.ts","sourceRoot":"","sources":["../../../src/config/SecretsManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAiTtB;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,YAAY,GAAG,sBAAsB;IAY1D;;OAEG;mBACkB,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;OAEG;mBACkB,MAAM,SAAS,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAItD;;OAEG;qBACc,MAAM,GAAG,IAAI;EAG9B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;EA0BT,CAAC;AAEZ;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAOzD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"SecretsManager.d.ts","sourceRoot":"","sources":["../../../src/config/SecretsManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAiTtB;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,YAAY,GAAG,sBAAsB;IAY1D;;OAEG;mBACkB,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;OAEG;mBACkB,MAAM,SAAS,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAItD;;OAEG;qBACc,MAAM,GAAG,IAAI;EAG9B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;EA0BT,CAAC;AAEZ;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAOzD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/src/config/SecretsManager.js

@@ -3,6 +3,7 @@
  * Abstracts secrets retrieval across different cloud platforms
  * Supports: AWS Secrets Manager, Parameter Store, Cloudflare KV, Deno env
  */
+import { Env } from './env.js';
 import { Logger } from './logger.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 let instance;
@@ -242,7 +243,7 @@ async function getFromDenoEnv(key) {
  */
 // eslint-disable-next-line @typescript-eslint/require-await
 async function getFromEnv(key) {
-    const value = process.env[key];
+    const value = Env.get(key, '');
     if (value === undefined || value === null || value === '') {
         throw ErrorFactory.createNotFoundError(`Secret not found: ${key}`, { key });
     }

package/src/config/app.d.ts

@@ -49,8 +49,9 @@ export declare const appConfig: Readonly<{
     /**
      * Max request body size
      */
-    readonly maxBodySize: string;
+    readonly maxBodySize: number;
     readonly getSafeEnv: () => NodeJS.ProcessEnv;
+    readonly detectRuntime: () => string;
 }>;
 export { getSafeEnv };
 export type AppConfig = typeof appConfig;

package/src/config/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/config/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAA4B,SAAS,EAAE,MAAM,cAAc,CAAC;AAsCxE,QAAA,MAAM,UAAU,QAAO,MAAM,CAAC,UA0B7B,CAAC;AA0FF,eAAO,MAAM,SAAS;IA5EpB;;OAEG;;IAMH;;OAEG;;IAGH;;OAEG;;IAMH;;OAEG;;IAMH;;OAEG;kCACc,OAAO;IAIxB;;OAEG;iCACa,OAAO;IAIvB;;OAEG;8BACU,OAAO;IAIpB;;OAEG;;IAMH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;+BA9GkB,MAAM,CAAC,UAAU;EAoHY,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/config/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAe,SAAS,EAAE,MAAM,cAAc,CAAC;AAoI3D,QAAA,MAAM,UAAU,QAAO,MAAM,CAAC,UAA2B,CAAC;AA2E1D,eAAO,MAAM,SAAS;IAjEpB;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;kCACc,OAAO;IAIxB;;OAEG;iCACa,OAAO;IAIvB;;OAEG;8BACU,OAAO;IAIpB;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;+BApEkB,MAAM,CAAC,UAAU;kCAhDd,MAAM;EA2HoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}

package/src/config/app.js

@@ -4,60 +4,113 @@
  * Sealed namespace for immutability
  */
 import { Env } from './env.js';
-const getProcessLike = () => {
-    return typeof process === 'undefined' ? undefined : process;
-};
+// Cache getSafeEnv result at module load time to avoid repeated object creation
+const anyEnv = Env;
 const readEnvString = (key, defaultValue = '') => {
-    const anyEnv = Env;
     if (typeof anyEnv.get === 'function') {
-        return anyEnv.get(key, defaultValue);
+        return anyEnv.get(key, defaultValue) ?? '';
+    }
+    if (typeof process !== 'undefined') {
+        const raw = process.env?.[key];
+        if (typeof raw === 'string' && raw !== '')
+            return raw;
     }
-    const proc = getProcessLike();
-    const raw = proc?.env?.[key];
-    return raw ?? defaultValue;
+    return defaultValue;
 };
-const readEnvInt = (key, defaultValue) => {
-    const anyEnv = Env;
+const readEnvInt = (key, defaultValue = 0) => {
     if (typeof anyEnv.getInt === 'function') {
         return anyEnv.getInt(key, defaultValue);
     }
     const raw = readEnvString(key, String(defaultValue));
     const parsed = Number.parseInt(raw, 10);
-    return Number.isNaN(parsed) ? defaultValue : parsed;
+    return Number.isFinite(parsed) ? parsed : defaultValue;
 };
-const readEnvBool = (key, defaultValue) => {
-    const anyEnv = Env;
+const readEnvBool = (key, defaultValue = false) => {
     if (typeof anyEnv.getBool === 'function') {
         return anyEnv.getBool(key, defaultValue);
     }
-    const raw = readEnvString(key, defaultValue ? 'true' : 'false');
+    const raw = readEnvString(key, '');
+    if (raw === '')
+        return defaultValue;
     return raw.toLowerCase() === 'true' || raw === '1';
 };
-const getSafeEnv = () => {
-    const baseEnv = typeof process === 'undefined' ? {} : process.env;
-    return {
-        ...baseEnv,
-        // Ensure required keys exist (env.d.ts augments ProcessEnv with required fields)
-        NODE_ENV: baseEnv.NODE_ENV ??
-            readEnvString('NODE_ENV', 'development'),
-        USE_RAW_QRY: baseEnv.USE_RAW_QRY ?? (readEnvString('USE_RAW_QRY', '') || undefined),
-        SERVICE_API_KEY: baseEnv.SERVICE_API_KEY ?? readEnvString('SERVICE_API_KEY', ''),
-        SERVICE_JWT_SECRET: baseEnv.SERVICE_JWT_SECRET ??
-            readEnvString('SERVICE_JWT_SECRET', '') ??
-            readEnvString('APP_KEY', ''),
-        BASE_URL: baseEnv['BASE_URL'] ?? readEnvString('BASE_URL', ''),
-        MODE: baseEnv['MODE'] ?? readEnvString('MODE', ''),
-        // Hardening for child-process usage
-        PATH: typeof Env.SAFE_PATH === 'string'
-            ? Env.SAFE_PATH
-            : (baseEnv['PATH'] ?? ''),
-        npm_config_scripts_prepend_node_path: 'true',
-    };
+const readAppPort = () => {
+    if (typeof anyEnv.getInt === 'function') {
+        return anyEnv.getInt('PORT', anyEnv.getInt('APP_PORT', 3000));
+    }
+    if (typeof Env.PORT === 'number' && Number.isFinite(Env.PORT) && Env.PORT > 0) {
+        return Env.PORT;
+    }
+    const portRaw = readEnvString('PORT', readEnvString('APP_PORT', '3000'));
+    const parsed = Number.parseInt(portRaw, 10);
+    return Number.isFinite(parsed) ? parsed : 3000;
+};
+/**
+ * Check if running on AWS Lambda
+ */
+function isLambda() {
+    return (Env.getBool('LAMBDA_TASK_ROOT') === true ||
+        Env.getBool('AWS_LAMBDA_FUNCTION_NAME') === true ||
+        Env.getBool('AWS_EXECUTION_ENV') === true);
+}
+/**
+ * Check if running on Cloudflare Workers
+ */
+function isCloudflare() {
+    return globalThis.CF !== undefined;
+}
+/**
+ * Check if running on Deno
+ */
+function isDeno() {
+    return globalThis.Deno !== undefined;
+}
+/**
+ * Detect current runtime environment
+ */
+const detectRuntime = () => {
+    const explicit = Env.get('RUNTIME').trim();
+    if (explicit !== '' && explicit !== 'auto')
+        return explicit;
+    // Auto-detection logic
+    if (isLambda() === true) {
+        return 'lambda';
+    }
+    if (isCloudflare() === true) {
+        return 'cloudflare';
+    }
+    if (isDeno() === true) {
+        return 'deno';
+    }
+    // Default to nodejs for containers (Fargate, Docker, Cloud Run)
+    return 'nodejs';
+};
+const resolvedNodeEnv = readEnvString('NODE_ENV', 'development');
+// Cache getSafeEnv result at module load time to avoid repeated object creation
+const cachedSafeEnv = {
+    ...(typeof process === 'undefined' ? {} : process.env),
+    NODE_ENV: resolvedNodeEnv,
+    MODE: resolvedNodeEnv,
+    npm_config_scripts_prepend_node_path: 'true',
 };
+const useRawQry = readEnvString('USE_RAW_QRY');
+if (useRawQry !== '')
+    cachedSafeEnv.USE_RAW_QRY = useRawQry;
+const serviceApiKey = readEnvString('SERVICE_API_KEY');
+if (serviceApiKey !== '')
+    cachedSafeEnv.SERVICE_API_KEY = serviceApiKey;
+const serviceJwtSecret = readEnvString('SERVICE_JWT_SECRET') || readEnvString('APP_KEY');
+if (serviceJwtSecret !== '')
+    cachedSafeEnv.SERVICE_JWT_SECRET = serviceJwtSecret;
+const baseUrl = readEnvString('BASE_URL');
+if (baseUrl !== '')
+    cachedSafeEnv['BASE_URL'] = baseUrl;
+if (typeof Env.SAFE_PATH === 'string' && Env.SAFE_PATH !== '') {
+    cachedSafeEnv['PATH'] = Env.SAFE_PATH;
+}
+const getSafeEnv = () => cachedSafeEnv;
 const normalizeMode = () => {
-    const value = (typeof Env.NODE_ENV === 'string'
-        ? Env.NODE_ENV
-        : readEnvString('NODE_ENV', 'development'));
+    const value = readEnvString('NODE_ENV', Env.NODE_ENV ?? 'development');
     if (value === 'production' || value === 'pro' || value === 'prod')
         return 'production';
     if (value === 'testing' || value === 'test')
@@ -68,9 +121,7 @@ const appConfigObj = {
     /**
      * Application name
      */
-    name: typeof Env.APP_NAME === 'string'
-        ? Env.APP_NAME
-        : readEnvString('APP_NAME', 'ZinTrust'),
+    name: readEnvString('APP_NAME', Env.APP_NAME),
     /**
      * Application environment
      */
@@ -78,15 +129,11 @@ const appConfigObj = {
     /**
      * Application port
      */
-    port: typeof Env.PORT === 'number'
-        ? Env.PORT
-        : readEnvInt('APP_PORT', 3000),
+    port: readAppPort(),
     /**
      * Application host
      */
-    host: typeof Env.HOST === 'string'
-        ? Env.HOST
-        : readEnvString('HOST', 'localhost'),
+    host: readEnvString('HOST', Env.HOST),
     /**
      * Is development environment
      */
@@ -108,22 +155,21 @@ const appConfigObj = {
     /**
      * Application debug mode
      */
-    debug: typeof Env.DEBUG === 'boolean'
-        ? Env.DEBUG
-        : readEnvBool('DEBUG', false),
+    debug: readEnvBool('DEBUG', Env.DEBUG),
     /**
      * Application timezone
      */
-    timezone: readEnvString('APP_TIMEZONE', 'UTC'),
+    timezone: readEnvString('APP_TIMEZONE', Env.APP_TIMEZONE),
     /**
      * Request timeout (milliseconds)
      */
-    requestTimeout: readEnvInt('REQUEST_TIMEOUT', 30000),
+    requestTimeout: readEnvInt('REQUEST_TIMEOUT', Env.REQUEST_TIMEOUT),
     /**
      * Max request body size
      */
-    maxBodySize: readEnvString('MAX_BODY_SIZE', '10mb'),
+    maxBodySize: readEnvInt('MAX_BODY_SIZE', Env.MAX_BODY_SIZE),
     getSafeEnv,
+    detectRuntime,
 };
 export const appConfig = Object.freeze(appConfigObj);
 export { getSafeEnv };

package/src/config/broadcast.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../../src/config/broadcast.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAEV,gBAAgB,EAEhB,0BAA0B,EAI3B,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;CACrD,CAAC,CAAC;AAEH,KAAK,sBAAsB,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,0BAA0B,CAAC;CAChE,CAAC;AA0EF,QAAA,MAAM,qBAAqB,QAAO,sBAoDjC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAqBvE,QAAA,MAAM,eAAe,EAAE,eAYrB,CAAC;AAEH,eAAe,eAAe,CAAC"}
+{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../../src/config/broadcast.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAEV,gBAAgB,EAEhB,0BAA0B,EAI3B,MAAM,cAAc,CAAC;AAItB,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;CACrD,CAAC,CAAC;AAEH,KAAK,sBAAsB,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,0BAA0B,CAAC;CAChE,CAAC;AA0EF,QAAA,MAAM,qBAAqB,QAAO,sBAoDjC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAqBvE,QAAA,MAAM,eAAe,EAAE,eAYrB,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/src/config/broadcast.js

@@ -4,9 +4,9 @@
  * Centralizes broadcast driver selection and provider env mappings.
  * Driver selection must be dynamic (tests may mutate process.env).
  */
-import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
 import { Env } from './env.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
 const normalizeDriverName = (value) => value.trim().toLowerCase();
 const hasOwn = (obj, key) => {
     return Object.hasOwn(obj, key);
@@ -89,7 +89,7 @@ const createBroadcastConfig = () => {
                 pusher: getPusherConfig(),
                 redis: getRedisConfig(),
                 redishttps: getRedisHttpsConfig(),
-                ...(overrides.drivers ?? {}),
+                ...overrides.drivers,
             };
         },
         /**

package/src/config/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/config/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGxE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAAC;AA0BH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CA4Fb,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/config/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIxE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC,CAAC;AA0BH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CA4Fb,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}