@zintrust/core 0.1.22 → 0.1.23

package/src/runtime/adapters/CloudflareAdapter.js

@@ -82,7 +82,7 @@ async function handleCloudflareRequest(adapter, config, logger, event) {
             });
         }, timeout);
         try {
-            // Process request through Zintrust handler
+            // Process request through ZinTrust handler
             await config.handler(req, res, body);
         }
         finally {

package/src/runtime/adapters/DenoAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DenoAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/DenoAdapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAMjD;;;GAGG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;mBACY,aAAa,GAAG,cAAc,GAAG;QAC9C,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1D;IAwDD;;OAEG;yBAEQ,cAAc,SACjB,MAAM,SACN,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IAQhB;;OAEG;aACY,OAAO,CAAC,OAAO,CAAC;IAK/B;;OAEG;mBACY,MAAM,iBAAiB,MAAM,GAAG,MAAM;IAKrD;;OAEG;2BACoB,OAAO;EAI9B,CAAC"}
+{"version":3,"file":"DenoAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/DenoAdapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC;;;GAGG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;mBACY,aAAa,GAAG,cAAc,GAAG;QAC9C,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1D;IAwDD;;OAEG;yBAEQ,cAAc,SACjB,MAAM,SACN,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IAQhB;;OAEG;aACY,OAAO,CAAC,OAAO,CAAC;IAK/B;;OAEG;mBACY,MAAM,iBAAiB,MAAM,GAAG,MAAM;IAKrD;;OAEG;2BACoB,OAAO;EAI9B,CAAC"}

package/src/runtime/adapters/DenoAdapter.js

@@ -176,7 +176,7 @@ function getDenoEnvironment() {
     // @ts-ignore - Deno.env is available in Deno runtime
     const env = (typeof Deno === 'undefined' ? {} : (Deno.env.toObject?.() ?? {}));
     return {
-        nodeEnv: env['DENO_ENV'] ?? 'production',
+        nodeEnv: (env['DENO_ENV'] ?? 'production'),
         runtime: 'deno',
         dbConnection: env['DB_CONNECTION'] ?? 'postgresql',
         dbHost: env['DB_HOST'],

package/src/runtime/adapters/FargateAdapter.d.ts

@@ -2,7 +2,7 @@ import { type IncomingMessage, type Server, type ServerResponse } from '../../no
 import type { AdapterConfig, RuntimeAdapter } from '../RuntimeAdapter';
 export interface FargateEnvironment {
     [key: string]: unknown;
-    nodeEnv: string;
+    nodeEnv: NodeJS.ProcessEnv['NODE_ENV'];
     runtime: string;
     dbConnection: string;
     dbHost: string | undefined;
@@ -17,7 +17,7 @@ export declare function createFargateAdapter(config: AdapterConfig): RuntimeAdap
     stop(): Promise<void>;
 };
 /**
- * Fargate/Container adapter for running Zintrust in AWS Fargate, Cloud Run, or Docker
+ * Fargate/Container adapter for running ZinTrust in AWS Fargate, Cloud Run, or Docker
  * Wraps existing Node.js HTTP server for container orchestration
  * Sealed namespace for immutability
  */

package/src/runtime/adapters/FargateAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FargateAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/FargateAdapter.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,eAAe,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,KACjE,MAAM,CAAC;AAEZ,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,GAAG;IAC5E,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB,CA0DA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc;;EAEzB,CAAC;AAEH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,aAAa,GAAE,iBAAgC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgB1F;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAIpD;AAED,wBAAgB,0BAA0B,IAAI,aAAa,CAAC,QAAQ,CAAC,CAUpE"}
+{"version":3,"file":"FargateAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/FargateAdapter.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,eAAe,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,KACjE,MAAM,CAAC;AAEZ,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,GAAG;IAC5E,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB,CA0DA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc;;EAEzB,CAAC;AAEH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,aAAa,GAAE,iBAAgC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgB1F;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAIpD;AAED,wBAAgB,0BAA0B,IAAI,aAAa,CAAC,QAAQ,CAAC,CAUpE"}

package/src/runtime/adapters/FargateAdapter.js

@@ -56,7 +56,7 @@ export function createFargateAdapter(config) {
     };
 }
 /**
- * Fargate/Container adapter for running Zintrust in AWS Fargate, Cloud Run, or Docker
+ * Fargate/Container adapter for running ZinTrust in AWS Fargate, Cloud Run, or Docker
  * Wraps existing Node.js HTTP server for container orchestration
  * Sealed namespace for immutability
  */

package/src/runtime/adapters/LambdaAdapter.d.ts

@@ -1,7 +1,7 @@
 import type { AdapterConfig, RuntimeAdapter } from '../RuntimeAdapter';
 /**
  * AWS Lambda adapter for API Gateway and ALB events
- * Converts Lambda events to standard HTTP format for Zintrust framework
+ * Converts Lambda events to standard HTTP format for ZinTrust framework
  * Sealed namespace for immutability
  */
 export declare const LambdaAdapter: Readonly<{

package/src/runtime/adapters/LambdaAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LambdaAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/LambdaAdapter.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAMjD;;;;GAIG;AACH,eAAO,MAAM,aAAa;IACxB;;OAEG;mBACY,aAAa,GAAG,cAAc;EA8D7C,CAAC"}
+{"version":3,"file":"LambdaAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/LambdaAdapter.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,eAAO,MAAM,aAAa;IACxB;;OAEG;mBACY,aAAa,GAAG,cAAc;EA8D7C,CAAC"}

package/src/runtime/adapters/LambdaAdapter.js

@@ -7,7 +7,7 @@ import { IncomingMessage, ServerResponse, } from '../../node-singletons/http.js'
 import { ErrorResponse, HttpResponse } from '../RuntimeAdapter.js';
 /**
  * AWS Lambda adapter for API Gateway and ALB events
- * Converts Lambda events to standard HTTP format for Zintrust framework
+ * Converts Lambda events to standard HTTP format for ZinTrust framework
  * Sealed namespace for immutability
  */
 export const LambdaAdapter = Object.freeze({
@@ -75,7 +75,7 @@ async function handleLambdaRequest(adapter, config, event, _context) {
             }));
         }, timeout);
         try {
-            // Process request through Zintrust handler
+            // Process request through ZinTrust handler
             await config.handler(req, res, body);
         }
         finally {
@@ -95,8 +95,10 @@ async function handleLambdaRequest(adapter, config, event, _context) {
     }
     catch (error) {
         Logger.error('Lambda handler error', error);
-        const nodeEnv = typeof Env.NODE_ENV === 'string' && Env.NODE_ENV !== '' ? Env.NODE_ENV : 'development';
-        const includeDetails = nodeEnv === 'development' || nodeEnv === 'dev';
+        const nodeEnv = typeof Env.NODE_ENV === 'string' && String(Env.NODE_ENV) !== ''
+            ? Env.NODE_ENV
+            : 'development';
+        const includeDetails = nodeEnv === 'development' || String(nodeEnv) === 'dev';
         const errorResponse = ErrorResponse.create(500, 'Internal Server Error', includeDetails ? { message: error.message } : undefined);
         return errorResponse.toResponse();
     }

package/src/runtime/adapters/NodeServerAdapter.js

@@ -136,7 +136,7 @@ function handleRequest(req, res, config, logger) {
                 }
             }, timeout);
             try {
-                // Call Zintrust handler
+                // Call ZinTrust handler
                 await config.handler(req, res, body);
             }
             finally {

package/src/scripts/GenerateEnvArtifacts.js

@@ -112,7 +112,7 @@ const renderEnvDts = (keys) => {
     return `declare namespace NodeJS {\n  interface ProcessEnv {\n    NODE_ENV: 'development' | 'production' | 'testing' | undefined;\n\n${lines}\n  }\n}\n`;
 };
 const renderEnvExample = (keys) => {
-    const header = `# Zintrust Framework - Environment Configuration\n# Generated by src/scripts/GenerateEnvArtifacts.ts\n# Copy this file to .env and configure for your environment\n\n`;
+    const header = `# ZinTrust Framework - Environment Configuration\n# Generated by src/scripts/GenerateEnvArtifacts.ts\n# Copy this file to .env and configure for your environment\n\n`;
     const sortedKeys = keys.toSorted((a, b) => a.localeCompare(b));
     const body = sortedKeys
         .filter((k) => k !== 'NODE_ENV')

package/src/security/SignedRequest.js

@@ -18,7 +18,7 @@ const timingSafeEquals = (a, b) => {
 const getCrypto = () => {
     if (typeof crypto === 'undefined' || crypto.subtle === undefined) {
         // Some runtimes (or test environments) may not expose WebCrypto.
-        // Keep this as a typed Zintrust error to satisfy lint rules.
+        // Keep this as a typed ZinTrust error to satisfy lint rules.
         throw ErrorFactory.createSecurityError('WebCrypto is not available in this runtime');
     }
     return crypto;

package/src/security/StartupSecretValidation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StartupSecretValidation.d.ts","sourceRoot":"","sources":["../../../src/security/StartupSecretValidation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,MAAM,4BAA4B,GAAG;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC,CAAC;AA2GF,eAAO,MAAM,uBAAuB;gBACtB,6BAA6B;mBAiB1B,IAAI;EAQnB,CAAC;AAEH,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"StartupSecretValidation.d.ts","sourceRoot":"","sources":["../../../src/security/StartupSecretValidation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,MAAM,4BAA4B,GAAG;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC,CAAC;AAgHF,eAAO,MAAM,uBAAuB;gBACtB,6BAA6B;mBAiB1B,IAAI;EAQnB,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/src/security/StartupSecretValidation.js

@@ -25,8 +25,14 @@ const validateJwtSecret = () => {
         return null;
     try {
         const secret = securityConfig.jwt.secret.trim();
+        const appKey = (Env.APP_KEY ?? '').trim();
         if (secret.length === 0) {
-            return { key: 'JWT_SECRET', message: 'JWT_SECRET must be set when JWT is enabled' };
+            if (appKey.length > 0)
+                return null;
+            return {
+                key: 'JWT_SECRET',
+                message: 'JWT_SECRET must be set when JWT is enabled (or provide APP_KEY)',
+            };
         }
         return null;
     }

package/src/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/start.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,UAAU,GAAI,eAAe,MAAM,KAAG,OAYlD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,KAAK,QAAa,OAAO,CAAC,IAAI,CAS1C,CAAC;AAEF;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEpE;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAElD;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/start.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,UAAU,GAAI,eAAe,MAAM,KAAG,OAYlD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,KAAK,QAAa,OAAO,CAAC,IAAI,CAO1C,CAAC;AAEF;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEpE;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAElD;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}

package/src/start.js

@@ -36,14 +36,12 @@ export const isNodeMain = (importMetaUrl) => {
  * This uses a non-literal dynamic import so Worker bundlers don't pull Node-only modules.
  */
 export const start = async () => {
-    /* c8 ignore start */
     if (!isNodeRuntime())
         return;
     // Compiled output places bootstrap at `dist/src/boot/bootstrap.js`.
     // This file compiles to `dist/src/start.js`, so relative import is stable.
     // In unit tests, importing bootstrap has heavy side effects (starts server + exits).
     await import('./boot/' + 'bootstrap.js');
-    /* c8 ignore stop */
 };
 /**
  * Cloudflare Workers entry (module worker style).

package/src/templates/features/Auth.ts.tpl

@@ -1,6 +1,6 @@
 // TEMPLATE_START
 import * as bcrypt from 'bcrypt';
-import { sign, verify, type Secret, type SignOptions } from 'jsonwebtoken';
+import jwt, { type Secret, type SignOptions } from 'jsonwebtoken';
 
 export const Auth = Object.freeze({
   /**
@@ -27,14 +27,14 @@ export const Auth = Object.freeze({
     expiresIn: NonNullable<SignOptions['expiresIn']> = '1h'
   ): string {
     const options: SignOptions = { expiresIn };
-    return sign(payload, secret, options);
+    return jwt.sign(payload, secret, options);
   },
 
   /**
    * Verify a JWT token
    */
   verifyToken<T>(token: string, secret: Secret): T {
-    return verify(token, secret) as T;
+    return jwt.verify(token, secret) as T;
   },
 });
-// TEMPLATE_END
+// TEMPLATE_END

package/src/templates/project/basic/README.md.tpl

@@ -1,6 +1,6 @@
 # {{projectName}}
 
-Starter Task API built with Zintrust.
+Starter Task API built with ZinTrust.
 
 ## Run
 

package/src/templates/project/basic/app/Middleware/index.ts.tpl

@@ -1,6 +1,6 @@
 /**
  * Example Middleware
- * Common middleware patterns for Zintrust
+ * Common middleware patterns for ZinTrust
  */
 
 import type { IJwtManager, JwtAlgorithm, JwtManagerType, ISchema, SchemaType, CsrfTokenManagerType, ICsrfTokenManager } from '@zintrust/core';

package/src/templates/project/basic/config/notification.ts.tpl

@@ -17,7 +17,7 @@ export default {
     termii: {
       driver: 'termii' as const,
       apiKey: Env.get('TERMII_API_KEY', ''),
-      sender: Env.get('TERMII_SENDER', 'Zintrust'),
+      sender: Env.get('TERMII_SENDER', 'ZinTrust'),
       endpoint: Env.get('TERMII_ENDPOINT', 'https://api.termii.com/sms/send'),
     },
     twilio: {

package/src/templates/project/basic/routes/api.ts.tpl

@@ -8,7 +8,6 @@ import { UserQueryBuilderController } from '@app/Controllers/UserQueryBuilderCon
 import { Env , Router } from '@zintrust/core';
 import type { MiddlewareKey ,  IRouter , IResponse, IRequest} from '@zintrust/core';
 import { registerBroadcastRoutes } from '@routes/broadcast';
-import { registerHealthRoutes } from '@routes/health';
 import { registerStorageRoutes } from '@routes/storage';
 
 export function registerRoutes(router: IRouter): void {
@@ -24,7 +23,6 @@ export function registerRoutes(router: IRouter): void {
  */
 function registerPublicRoutes(router: IRouter): void {
   registerRootRoute(router);
-  registerHealthRoutes(router);
   registerBroadcastRoutes(router);
   registerStorageRoutes(router);
 }
@@ -32,7 +30,7 @@ function registerPublicRoutes(router: IRouter): void {
 function registerRootRoute(router: IRouter): void {
   Router.get(router, '/', async (_req: IRequest, res:IResponse) => {
     res.json({
-      framework: 'Zintrust Framework',
+      framework: 'ZinTrust Framework',
       app_name: Env.APP_NAME,
       version: '0.1.0',
       env: Env.NODE_ENV ?? 'development',

package/src/templates/project/basic/src/index.ts.tpl

@@ -1,5 +1,5 @@
 /**
- * Zintrust Application Entry Point
+ * ZinTrust Application Entry Point
  */
 
 import { isNodeMain, start } from '@zintrust/core/start';

package/src/templates/project/basic/src/zintrust.plugins.ts.tpl

@@ -1,5 +1,5 @@
 /**
- * Zintrust plugin auto-imports
+ * ZinTrust plugin auto-imports
  *
  * This file is managed by `zin plugin install` and contains side-effect
  * imports that register optional adapters/drivers into core registries.

package/src/templates/project/basic/template.json

@@ -1,6 +1,6 @@
 {
   "name": "basic",
-  "description": "Basic Zintrust project structure",
+  "description": "Basic ZinTrust project structure",
   "directories": [
     "config",
     "app/Controllers",

package/src/toolkit/Secrets/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/toolkit/Secrets/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAY,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAI/E,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,CAAC;AA0GF,eAAO,MAAM,cAAc;kBACL,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;kBAkB1D,WAAW,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;oBAoB7D,aAAa,GAAG;QAC9B,QAAQ,EAAE,mBAAmB,CAAC;QAC9B,EAAE,EAAE,OAAO,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB;EASD,CAAC;AAEH,eAAe,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/toolkit/Secrets/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAY,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAI/E,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,CAAC;AA+GF,eAAO,MAAM,cAAc;kBACL,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;kBAe1D,WAAW,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;oBAiB7D,aAAa,GAAG;QAC9B,QAAQ,EAAE,mBAAmB,CAAC;QAC9B,EAAE,EAAE,OAAO,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB;EAMD,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/src/toolkit/Secrets/index.js

@@ -4,19 +4,26 @@
  * Internal framework module intended for CLI usage.
  * It may use Node APIs (via node-singletons) and should not be used by runtime apps.
  */
+import { Env } from '../../config/env.js';
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
 import { EnvFile } from '../Secrets/EnvFile.js';
 import { Manifest } from '../Secrets/Manifest.js';
 import { AwsSecretsManager } from '../Secrets/providers/AwsSecretsManager.js';
 import { CloudflareKv } from '../Secrets/providers/CloudflareKv.js';
+const resolveDefaultEnvFile = () => Env.ZINTRUST_ENV_FILE;
+const resolveDefaultManifest = () => Env.ZINTRUST_SECRETS_MANIFEST;
+const resolveDefaultInFile = () => Env.ZINTRUST_ENV_IN_FILE;
+const resolveSecretsProvider = () => {
+    return Env.ZINTRUST_SECRETS_PROVIDER;
+};
 const resolveProvider = (provider) => {
     if (provider === 'aws' || provider === 'cloudflare')
         return provider;
     throw ErrorFactory.createCliError('Missing/invalid provider. Use --provider aws|cloudflare or set ZINTRUST_SECRETS_PROVIDER.');
 };
-const resolveOutFile = (outFile) => outFile ?? process.env['ZINTRUST_ENV_FILE'] ?? '.env.pull';
-const resolveManifestPath = (manifestPath) => manifestPath ?? process.env['ZINTRUST_SECRETS_MANIFEST'] ?? 'secrets.manifest.json';
-const resolveInFile = (inFile) => inFile ?? process.env['ZINTRUST_ENV_IN_FILE'] ?? '.env';
+const resolveOutFile = (outFile) => outFile ?? resolveDefaultEnvFile();
+const resolveManifestPath = (manifestPath) => manifestPath ?? resolveDefaultManifest();
+const resolveInFile = (inFile) => inFile ?? resolveDefaultInFile();
 const pullAws = async (manifest) => {
     const client = AwsSecretsManager.createFromEnv();
     const entries = Object.entries(manifest.keys).filter(([, spec]) => spec.aws !== undefined);
@@ -85,8 +92,7 @@ const pushCloudflare = async (manifest, env, dryRun) => {
 };
 export const SecretsToolkit = Object.freeze({
     async pull(options) {
-        const provider = resolveProvider(options.provider ??
-            process.env['ZINTRUST_SECRETS_PROVIDER']);
+        const provider = resolveProvider(options.provider ?? resolveSecretsProvider());
         const outFile = resolveOutFile(options.outFile);
         const manifestPath = resolveManifestPath(options.manifestPath);
         const manifest = await Manifest.load({ cwd: options.cwd, path: manifestPath, provider });
@@ -97,8 +103,7 @@ export const SecretsToolkit = Object.freeze({
         return { outFile, keys: Object.keys(resolved) };
     },
     async push(options) {
-        const provider = resolveProvider(options.provider ??
-            process.env['ZINTRUST_SECRETS_PROVIDER']);
+        const provider = resolveProvider(options.provider ?? resolveSecretsProvider());
         const inFile = resolveInFile(options.inFile);
         const manifestPath = resolveManifestPath(options.manifestPath);
         const manifest = await Manifest.load({ cwd: options.cwd, path: manifestPath, provider });
@@ -110,8 +115,7 @@ export const SecretsToolkit = Object.freeze({
         return { inFile, keys };
     },
     doctor(options) {
-        const provider = resolveProvider(options.provider ??
-            process.env['ZINTRUST_SECRETS_PROVIDER']);
+        const provider = resolveProvider(options.provider ?? resolveSecretsProvider());
         const missing = provider === 'aws' ? AwsSecretsManager.doctorEnv() : CloudflareKv.doctorEnv();
         return { provider, ok: missing.length === 0, missing };
     },

package/src/toolkit/Secrets/providers/AwsSecretsManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AwsSecretsManager.d.ts","sourceRoot":"","sources":["../../../../../src/toolkit/Secrets/providers/AwsSecretsManager.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AA0GF,eAAO,MAAM,iBAAiB;qBACX;QACf,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACzE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9D;iBAsDY,MAAM,EAAE;EAcrB,CAAC;AAEH,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"AwsSecretsManager.d.ts","sourceRoot":"","sources":["../../../../../src/toolkit/Secrets/providers/AwsSecretsManager.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAqHF,eAAO,MAAM,iBAAiB;qBACX;QACf,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACzE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9D;iBAsDY,MAAM,EAAE;EAcrB,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/src/toolkit/Secrets/providers/AwsSecretsManager.js

@@ -1,6 +1,19 @@
 import { AwsSigV4 } from '../../../common/index.js';
+import { Env } from '../../../config/env.js';
 import { ErrorFactory } from '../../../exceptions/ZintrustError.js';
 const sha256Hex = (data) => AwsSigV4.sha256Hex(data);
+const readEnvString = (key) => {
+    const anyEnv = Env;
+    const fromEnv = typeof anyEnv.get === 'function' ? anyEnv.get(key, '') : '';
+    if (typeof fromEnv === 'string' && fromEnv.trim() !== '')
+        return fromEnv;
+    if (typeof process !== 'undefined') {
+        const raw = process.env?.[key];
+        if (typeof raw === 'string')
+            return raw;
+    }
+    return fromEnv ?? '';
+};
 const buildAuthorization = (params) => {
     const canonicalUri = '/';
     const canonicalQueryString = '';
@@ -78,10 +91,10 @@ const requestAwsSecretsManager = async (region, credentials, target, body) => {
 };
 export const AwsSecretsManager = Object.freeze({
     createFromEnv() {
-        const region = process.env['AWS_REGION'] ?? process.env['AWS_DEFAULT_REGION'] ?? '';
-        const accessKeyId = process.env['AWS_ACCESS_KEY_ID'] ?? '';
-        const secretAccessKey = process.env['AWS_SECRET_ACCESS_KEY'] ?? '';
-        const sessionToken = process.env['AWS_SESSION_TOKEN'] ?? undefined;
+        const region = readEnvString('AWS_REGION') || readEnvString('AWS_DEFAULT_REGION');
+        const accessKeyId = readEnvString('AWS_ACCESS_KEY_ID');
+        const secretAccessKey = readEnvString('AWS_SECRET_ACCESS_KEY');
+        const sessionToken = readEnvString('AWS_SESSION_TOKEN') || undefined;
         if (region.trim() === '' || accessKeyId.trim() === '' || secretAccessKey.trim() === '') {
             throw ErrorFactory.createCliError('AWS credentials missing: set AWS_REGION, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY');
         }
@@ -116,13 +129,13 @@ export const AwsSecretsManager = Object.freeze({
     },
     doctorEnv() {
         const missing = [];
-        const region = (process.env['AWS_REGION'] ?? process.env['AWS_DEFAULT_REGION'] ?? '').trim();
+        const region = (readEnvString('AWS_REGION') || readEnvString('AWS_DEFAULT_REGION')).trim();
         if (region === '')
             missing.push('AWS_REGION');
-        const accessKeyId = (process.env['AWS_ACCESS_KEY_ID'] ?? '').trim();
+        const accessKeyId = readEnvString('AWS_ACCESS_KEY_ID').trim();
         if (accessKeyId === '')
             missing.push('AWS_ACCESS_KEY_ID');
-        const secretAccessKey = (process.env['AWS_SECRET_ACCESS_KEY'] ?? '').trim();
+        const secretAccessKey = readEnvString('AWS_SECRET_ACCESS_KEY').trim();
         if (secretAccessKey === '')
             missing.push('AWS_SECRET_ACCESS_KEY');
         return missing;

package/src/toolkit/Secrets/providers/CloudflareKv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareKv.d.ts","sourceRoot":"","sources":["../../../../../src/toolkit/Secrets/providers/CloudflareKv.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY;qBACN;QACf,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACxE,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC/E;iBAsEY,MAAM,EAAE;EAcrB,CAAC;AAEH,eAAe,YAAY,CAAC"}
+{"version":3,"file":"CloudflareKv.d.ts","sourceRoot":"","sources":["../../../../../src/toolkit/Secrets/providers/CloudflareKv.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,YAAY;qBACN;QACf,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACxE,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC/E;iBAiFY,MAAM,EAAE;EAgBrB,CAAC;AAEH,eAAe,YAAY,CAAC"}

package/src/toolkit/Secrets/providers/CloudflareKv.js

@@ -1,9 +1,22 @@
+import { Env } from '../../../config/env.js';
 import { ErrorFactory } from '../../../exceptions/ZintrustError.js';
 export const CloudflareKv = Object.freeze({
     createFromEnv() {
-        const accountId = process.env['CLOUDFLARE_ACCOUNT_ID'] ?? '';
-        const apiToken = process.env['CLOUDFLARE_API_TOKEN'] ?? '';
-        const defaultNamespaceId = process.env['CLOUDFLARE_KV_NAMESPACE_ID'] ?? '';
+        const readEnvString = (key) => {
+            const anyEnv = Env;
+            const fromEnv = typeof anyEnv.get === 'function' ? anyEnv.get(key, '') : '';
+            if (typeof fromEnv === 'string' && fromEnv.trim() !== '')
+                return fromEnv;
+            if (typeof process !== 'undefined') {
+                const raw = process.env?.[key];
+                if (typeof raw === 'string')
+                    return raw;
+            }
+            return fromEnv ?? '';
+        };
+        const accountId = readEnvString('CLOUDFLARE_ACCOUNT_ID');
+        const apiToken = readEnvString('CLOUDFLARE_API_TOKEN');
+        const defaultNamespaceId = readEnvString('CLOUDFLARE_KV_NAMESPACE_ID');
         if (accountId.trim() === '' || apiToken.trim() === '') {
             throw ErrorFactory.createCliError('Cloudflare credentials missing: set CLOUDFLARE_ACCOUNT_ID, CLOUDFLARE_API_TOKEN');
         }
@@ -58,13 +71,13 @@ export const CloudflareKv = Object.freeze({
     },
     doctorEnv() {
         const missing = [];
-        const accountId = (process.env['CLOUDFLARE_ACCOUNT_ID'] ?? '').trim();
+        const accountId = (Env.get?.('CLOUDFLARE_ACCOUNT_ID', '') ?? Env.CLOUDFLARE_ACCOUNT_ID).trim();
         if (accountId === '')
             missing.push('CLOUDFLARE_ACCOUNT_ID');
-        const apiToken = (process.env['CLOUDFLARE_API_TOKEN'] ?? '').trim();
+        const apiToken = (Env.get?.('CLOUDFLARE_API_TOKEN', '') ?? Env.CLOUDFLARE_API_TOKEN).trim();
         if (apiToken === '')
             missing.push('CLOUDFLARE_API_TOKEN');
-        const namespaceId = (process.env['CLOUDFLARE_KV_NAMESPACE_ID'] ?? '').trim();
+        const namespaceId = (Env.get?.('CLOUDFLARE_KV_NAMESPACE_ID', '') ?? Env.CLOUDFLARE_KV_NAMESPACE_ID).trim();
         if (namespaceId === '')
             missing.push('CLOUDFLARE_KV_NAMESPACE_ID');
         return missing;

package/src/tools/http/Http.js

@@ -77,7 +77,7 @@ const createRequestBuilder = (method, url, initialBody) => {
         method,
         url,
         headers: {
-            'User-Agent': 'Zintrust/1.0',
+            'User-Agent': 'ZinTrust/1.0',
         },
         body: initialBody ? JSON.stringify(initialBody) : undefined,
     };

package/src/tools/mail/drivers/Ses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Ses.d.ts","sourceRoot":"","sources":["../../../../../src/tools/mail/drivers/Ses.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAsGF,eAAO,MAAM,SAAS;iBACD,SAAS,WAAW,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;EAgDxE,CAAC;AAEH,eAAe,SAAS,CAAC"}
+{"version":3,"file":"Ses.d.ts","sourceRoot":"","sources":["../../../../../src/tools/mail/drivers/Ses.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAsGF,eAAO,MAAM,SAAS;iBACD,SAAS,WAAW,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;EAgDxE,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/src/tools/mail/drivers/Ses.js

@@ -1,3 +1,4 @@
+import { readEnvString } from '../../../common/ExternalServiceUtils.js';
 import { AwsSigV4 } from '../../../common/index.js';
 import { ErrorFactory } from '../../../exceptions/ZintrustError.js';
 const sha256Hex = (data) => AwsSigV4.sha256Hex(data);
@@ -33,10 +34,10 @@ const ensureRegion = (config) => {
     return region;
 };
 const ensureCredentials = () => {
-    const accessKeyId = process.env['AWS_ACCESS_KEY_ID'] ?? '';
-    const secretAccessKey = process.env['AWS_SECRET_ACCESS_KEY'] ?? '';
-    const sessionToken = process.env['AWS_SESSION_TOKEN'] ?? undefined;
-    if (accessKeyId.trim() === '' || secretAccessKey.trim() === '') {
+    const accessKeyId = readEnvString('AWS_ACCESS_KEY_ID');
+    const secretAccessKey = readEnvString('AWS_SECRET_ACCESS_KEY');
+    const sessionToken = readEnvString('AWS_SESSION_TOKEN') ?? undefined;
+    if (accessKeyId.length === 0 || secretAccessKey.length === 0) {
         throw ErrorFactory.createConfigError('SES: missing AWS credentials (set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY)');
     }
     return { accessKeyId, secretAccessKey, sessionToken };

package/src/tools/mail/templates/index.js

@@ -28,8 +28,8 @@ export const MailTemplates = Object.freeze({
         // Example template. Apps can add their own workflows under app/Toolkit/Mail.
         welcome: Object.freeze({
             subject: 'Welcome, {{name}}!',
-            text: 'Hi {{name}},\n\nWelcome to Zintrust.',
-            html: '<p>Hi {{name}},</p><p>Welcome to Zintrust.</p>',
+            text: 'Hi {{name}},\n\nWelcome to ZinTrust.',
+            html: '<p>Hi {{name}},</p><p>Welcome to ZinTrust.</p>',
         }),
     }),
 });

package/src/tools/notification/drivers/Termii.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Termii.d.ts","sourceRoot":"","sources":["../../../../../src/tools/notification/drivers/Termii.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,YAAY;oBACD,MAAM,WAAW,MAAM,YAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;EA6C/E,CAAC;AAEH,eAAe,YAAY,CAAC"}
+{"version":3,"file":"Termii.d.ts","sourceRoot":"","sources":["../../../../../src/tools/notification/drivers/Termii.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,eAAO,MAAM,YAAY;oBACD,MAAM,WAAW,MAAM,YAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;EA+B/E,CAAC;AAEH,eAAe,YAAY,CAAC"}

package/src/tools/notification/drivers/Termii.js

@@ -1,3 +1,4 @@
+import { readEnvString, safeFetch, validateRequiredParams } from '../../../common/ExternalServiceUtils.js';
 import { ErrorFactory } from '../../../exceptions/ZintrustError.js';
 /**
  * Termii SMS Driver (skeleton)
@@ -6,14 +7,9 @@ import { ErrorFactory } from '../../../exceptions/ZintrustError.js';
  */
 export const TermiiDriver = Object.freeze({
     async send(recipient, message, options = {}) {
-        if (!recipient || typeof recipient !== 'string') {
-            throw ErrorFactory.createValidationError('Recipient phone number is required');
-        }
-        if (!message || typeof message !== 'string') {
-            throw ErrorFactory.createValidationError('Message body is required');
-        }
-        const apiKey = process.env['TERMII_API_KEY'] ?? '';
-        const sender = process.env['TERMII_SENDER'] ?? 'Zintrust';
+        validateRequiredParams({ recipient, message }, ['recipient', 'message']);
+        const apiKey = readEnvString('TERMII_API_KEY');
+        const sender = readEnvString('TERMII_SENDER');
         if (!apiKey) {
             throw ErrorFactory.createConfigError('TERMII_API_KEY is not configured');
         }
@@ -24,22 +20,15 @@ export const TermiiDriver = Object.freeze({
             api_key: apiKey,
             ...options,
         };
-        // Use global fetch — tests will mock this
+        // Use shared fetch wrapper
         const url = 'https://api.termii.com/sms/send';
-        const res = await globalThis.fetch(url, {
+        const res = await safeFetch(url, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
             },
             body: JSON.stringify(payload),
         });
-        if (!res.ok) {
-            const txt = await res.text().catch(() => '');
-            throw ErrorFactory.createTryCatchError(`Termii request failed (${res.status})`, {
-                status: res.status,
-                body: txt,
-            });
-        }
         const json = await res.json().catch(() => ({}));
         return json;
     },

package/src/tools/notification/testingHelpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testingHelpers.d.ts","sourceRoot":"","sources":["../../../../src/tools/notification/testingHelpers.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,aAAa,GACxB,aAA0B,EAC1B,OAAM,OAA0B,KAC/B;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CA2B3C,CAAC;;0CA5BM,OAAO,KACZ;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE;;AA6B9C,wBAAiC"}
+{"version":3,"file":"testingHelpers.d.ts","sourceRoot":"","sources":["../../../../src/tools/notification/testingHelpers.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,aAAa,GACxB,aAA0B,EAC1B,OAAM,OAA0B,KAC/B;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CA2B3C,CAAC;;0CA5BM,OAAO,KACZ;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE;;AA6B9C,wBAAiC"}

package/src/tools/queue/Queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Queue.d.ts","sourceRoot":"","sources":["../../../../src/tools/queue/Queue.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,UAAU,YAAY;IACpB,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1E,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAID,eAAO,MAAM,KAAK;mBACD,MAAM,UAAU,YAAY;aAIlC,IAAI;eAIF,MAAM,GAAG,YAAY;YAelB,CAAC,mBAAmB,MAAM,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAK7E,CAAC,mBACN,MAAM,eACA,MAAM,GAClB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;eAKtB,MAAM,MAAM,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;kBAKpD,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;iBAK9C,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EAI9D,CAAC;AAEH,eAAe,KAAK,CAAC"}
+{"version":3,"file":"Queue.d.ts","sourceRoot":"","sources":["../../../../src/tools/queue/Queue.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,UAAU,YAAY;IACpB,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1E,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAID,eAAO,MAAM,KAAK;mBACD,MAAM,UAAU,YAAY;aAIlC,IAAI;eAIF,MAAM,GAAG,YAAY;YAUlB,CAAC,mBAAmB,MAAM,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAK7E,CAAC,mBACN,MAAM,eACA,MAAM,GAClB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;eAKtB,MAAM,MAAM,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;kBAKpD,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;iBAK9C,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EAI9D,CAAC;AAEH,eAAe,KAAK,CAAC"}

package/src/tools/queue/Queue.js

@@ -1,3 +1,4 @@
+import { Env } from '../../config/env.js';
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
 const drivers = new Map();
 export const Queue = Object.freeze({
@@ -8,11 +9,8 @@ export const Queue = Object.freeze({
         drivers.clear();
     },
     get(name) {
-        const driverName = (name ??
-            process.env['QUEUE_CONNECTION'] ??
-            process.env['QUEUE_DRIVER'] ??
-            'inmemory')
-            .toString()
+        const resolved = (name ?? Env.QUEUE_CONNECTION) || Env.QUEUE_DRIVER || 'inmemory';
+        const driverName = (resolved !== null && resolved !== undefined ? String(resolved) : 'inmemory')
             .trim()
             .toLowerCase();
         const driver = drivers.get(driverName);