@zintrust/core 0.1.28 → 0.1.30

package/src/exceptions/ZintrustError.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Base Exception Factory for ZinTrust Framework
+ * Implemented as plain functions (no classes / no prototype-based constructors).
+ */
+export interface IZintrustError extends Error {
+    statusCode: number;
+    code: string;
+    details?: unknown;
+}
+type StackTraceConstructorOpt = ((...args: never[]) => unknown) | (abstract new (...args: never[]) => unknown);
+export type ZintrustErrorInit = Readonly<{
+    statusCode?: number;
+    code?: string;
+    details?: unknown;
+    name?: string;
+    prototype?: object;
+    captureStackTraceCtor?: StackTraceConstructorOpt;
+}>;
+/**
+ * Plain initializer for ZinTrust framework errors.
+ */
+export declare function initZintrustError(target: Error, init?: ZintrustErrorInit): void;
+type TypedZintrustError<TCode extends string, TName extends string, TStatus extends number> = IZintrustError & {
+    readonly code: TCode;
+    name: TName;
+    readonly statusCode: TStatus;
+};
+export type ZintrustError = TypedZintrustError<'INTERNAL_ERROR', 'ZintrustError', 500>;
+export type DatabaseError = TypedZintrustError<'DATABASE_ERROR', 'DatabaseError', 500>;
+export type WorkerError = TypedZintrustError<'WORKER_ERROR', 'WorkerError', 500>;
+export type ValidationError = TypedZintrustError<'VALIDATION_ERROR', 'ValidationError', 400>;
+export type NotFoundError = TypedZintrustError<'NOT_FOUND', 'NotFoundError', 404>;
+export type UnauthorizedError = TypedZintrustError<'UNAUTHORIZED', 'UnauthorizedError', 401>;
+export type ForbiddenError = TypedZintrustError<'FORBIDDEN', 'ForbiddenError', 403>;
+export type ConnectionError = TypedZintrustError<'CONNECTION_ERROR', 'ConnectionError', 500>;
+export type ConfigError = TypedZintrustError<'CONFIG_ERROR', 'ConfigError', 500>;
+export type GeneralError = TypedZintrustError<'GENERAL_ERROR', 'GeneralError', 500>;
+export type CliError = TypedZintrustError<'CLI_ERROR', 'CliError', 1>;
+export type SecurityError = TypedZintrustError<'SECURITY_ERROR', 'SecurityError', 401>;
+export type CatchError = TypedZintrustError<'TRY_CATCH_ERROR', 'CatchError', 500>;
+export type SanitizerError = TypedZintrustError<'SANITIZER_ERROR', 'SanitizerError', 400>;
+/**
+ * Plain error creators.
+ */
+export declare function ZintrustError(message: string, details?: unknown): ZintrustError;
+export declare function createDatabaseError(message: string, details?: unknown): DatabaseError;
+export declare function createWorkerError(message: string, details?: unknown): WorkerError;
+export declare function createValidationError(message: string, details?: unknown): ValidationError;
+export declare function createNotFoundError(message?: string, details?: unknown): NotFoundError;
+export declare function createUnauthorizedError(message?: string, details?: unknown): UnauthorizedError;
+export declare function createForbiddenError(message?: string, details?: unknown): ForbiddenError;
+export declare function createConnectionError(message: string, details?: unknown): ConnectionError;
+export declare function createConfigError(message: string, details?: unknown): ConfigError;
+export declare function createGeneralError(message: string, details?: unknown): GeneralError;
+export declare function createCliError(message: string, details?: unknown): CliError;
+export declare function createSecurityError(message: string, details?: unknown): SecurityError;
+export declare function createTryCatchError(message: string, details?: unknown): CatchError;
+/**
+ * Create a sanitizer error with method name, reason, and redacted value
+ */
+export declare function createSanitizerError(method: string, reason: string, value: unknown): SanitizerError;
+/**
+ * Backward compatibility Errors object.
+ */
+export declare const Errors: Readonly<{
+    database: (message: string, details?: unknown) => Error;
+    notFound: (message?: string, details?: unknown) => Error;
+    validation: (message: string, details?: unknown) => Error;
+    unauthorized: (message?: string, details?: unknown) => Error;
+    forbidden: (message?: string, details?: unknown) => Error;
+    connection: (message: string, details?: unknown) => Error;
+    config: (message: string, details?: unknown) => Error;
+    general: (message: string, details?: unknown) => Error;
+    cli: (message: string, details?: unknown) => Error;
+    security: (message: string, details?: unknown) => Error;
+    catchError: (message: string, details?: unknown) => Error;
+    sanitizer: (method: string, reason: string, value: unknown) => Error;
+}>;
+/**
+ * Centralized ErrorFactory for creating standardized errors.
+ */
+export declare const ErrorFactory: Readonly<{
+    createDatabaseError: (message: string, details?: unknown) => DatabaseError;
+    createWorkerError: (message: string, details?: unknown) => WorkerError;
+    createConnectionError: (message: string, details?: unknown) => ConnectionError;
+    createConfigError: (message: string, details?: unknown) => ConfigError;
+    createValidationError: (message: string, details?: unknown) => ValidationError;
+    createGeneralError: (message: string, details?: unknown) => GeneralError;
+    createTryCatchError: (message: string, details?: unknown) => CatchError;
+    createCliError: (message: string, details?: unknown) => CliError;
+    createSecurityError: (message: string, details?: unknown) => SecurityError;
+    createNotFoundError: (message?: string, details?: unknown) => NotFoundError;
+    createUnauthorizedError: (message?: string, details?: unknown) => UnauthorizedError;
+    createSanitizerError: (method: string, reason: string, value: unknown) => SanitizerError;
+    createForbiddenError: (message?: string, details?: unknown) => ForbiddenError;
+}>;
+export {};
+//# sourceMappingURL=ZintrustError.d.ts.map

package/src/exceptions/ZintrustError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ZintrustError.d.ts","sourceRoot":"","sources":["../../../src/exceptions/ZintrustError.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,cAAe,SAAQ,KAAK;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,KAAK,wBAAwB,GACzB,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC,GAC/B,CAAC,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC,CAAC;AAEjD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,wBAAwB,CAAC;CAClD,CAAC,CAAC;AAEH;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,GAAE,iBAAsB,GAAG,IAAI,CAwBnF;AAED,KAAK,kBAAkB,CACrB,KAAK,SAAS,MAAM,EACpB,KAAK,SAAS,MAAM,EACpB,OAAO,SAAS,MAAM,IACpB,cAAc,GAAG;IACnB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,IAAI,EAAE,KAAK,CAAC;IACZ,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B,CAAC;AA0BF,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AACvF,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;AACjF,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC7F,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AAClF,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAC7F,MAAM,MAAM,cAAc,GAAG,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACpF,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC7F,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;AACjF,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC,eAAe,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;AACpF,MAAM,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AACvF,MAAM,MAAM,UAAU,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;AAClF,MAAM,MAAM,cAAc,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAE1F;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAE/E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAErF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAEjF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,eAAe,CAEzF;AAED,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA6B,EACtC,OAAO,CAAC,EAAE,OAAO,GAChB,aAAa,CAEf;AAED,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,MAAuB,EAChC,OAAO,CAAC,EAAE,OAAO,GAChB,iBAAiB,CAEnB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,MAAoB,EAC7B,OAAO,CAAC,EAAE,OAAO,GAChB,cAAc,CAEhB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,eAAe,CAEzF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAEjF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,YAAY,CAEnF;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,CAE3E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAErF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,UAAU,CAGlF;AAsDD;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,cAAc,CAQhB;AAED;;GAEG;AACH,eAAO,MAAM,MAAM;wBACG,MAAM,YAAY,OAAO,KAAG,KAAK;yBAChC,MAAM,YAAY,OAAO,KAAG,KAAK;0BAEhC,MAAM,YAAY,OAAO,KAAG,KAAK;6BAE9B,MAAM,YAAY,OAAO,KAAG,KAAK;0BAEpC,MAAM,YAAY,OAAO,KAAG,KAAK;0BAEjC,MAAM,YAAY,OAAO,KAAG,KAAK;sBAErC,MAAM,YAAY,OAAO,KAAG,KAAK;uBAChC,MAAM,YAAY,OAAO,KAAG,KAAK;mBACrC,MAAM,YAAY,OAAO,KAAG,KAAK;wBAC5B,MAAM,YAAY,OAAO,KAAG,KAAK;0BAC/B,MAAM,YAAY,OAAO,KAAG,KAAK;wBACnC,MAAM,UAAU,MAAM,SAAS,OAAO,KAAG,KAAK;EAElE,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY;mCACQ,MAAM,YAAY,OAAO;iCAE3B,MAAM,YAAY,OAAO;qCAErB,MAAM,YAAY,OAAO;iCAE7B,MAAM,YAAY,OAAO;qCACrB,MAAM,YAAY,OAAO;kCAE5B,MAAM,YAAY,OAAO;mCACxB,MAAM,YAAY,OAAO;8BAE9B,MAAM,YAAY,OAAO;mCACpB,MAAM,YAAY,OAAO;oCAExB,MAAM,YAAY,OAAO;wCAErB,MAAM,YAAY,OAAO;mCAE9B,MAAM,UAAU,MAAM,SAAS,OAAO;qCAEpC,MAAM,YAAY,OAAO;EAE1D,CAAC"}

package/src/exceptions/ZintrustError.js

@@ -0,0 +1,170 @@
+/**
+ * Base Exception Factory for ZinTrust Framework
+ * Implemented as plain functions (no classes / no prototype-based constructors).
+ */
+import { Logger } from '../config/logger.js';
+/**
+ * Plain initializer for ZinTrust framework errors.
+ */
+export function initZintrustError(target, init = {}) {
+    const mutable = target;
+    if (init.name !== undefined) {
+        target.name = init.name;
+    }
+    mutable.statusCode = init.statusCode ?? 500;
+    mutable.code = init.code ?? 'INTERNAL_ERROR';
+    if (init.details !== undefined) {
+        mutable.details = init.details;
+    }
+    if (init.prototype !== undefined) {
+        Object.setPrototypeOf(target, init.prototype);
+    }
+    if (Error?.captureStackTrace !== undefined) {
+        Error.captureStackTrace(target, (init.captureStackTraceCtor ?? initZintrustError));
+    }
+}
+function createTypedZintrustError(message, statusCode, code, name, details) {
+    // Use `globalThis.Error` to avoid the project's `new Error(...)` restricted syntax selector.
+    const error = new globalThis.Error(message);
+    initZintrustError(error, {
+        statusCode,
+        code,
+        details,
+        name,
+        prototype: Error.prototype,
+        captureStackTraceCtor: createTypedZintrustError,
+    });
+    return error;
+}
+/**
+ * Plain error creators.
+ */
+export function ZintrustError(message, details) {
+    return createTypedZintrustError(message, 500, 'INTERNAL_ERROR', 'ZintrustError', details);
+}
+export function createDatabaseError(message, details) {
+    return createTypedZintrustError(message, 500, 'DATABASE_ERROR', 'DatabaseError', details);
+}
+export function createWorkerError(message, details) {
+    return createTypedZintrustError(message, 500, 'WORKER_ERROR', 'WorkerError', details);
+}
+export function createValidationError(message, details) {
+    return createTypedZintrustError(message, 400, 'VALIDATION_ERROR', 'ValidationError', details);
+}
+export function createNotFoundError(message = 'Resource not found', details) {
+    return createTypedZintrustError(message, 404, 'NOT_FOUND', 'NotFoundError', details);
+}
+export function createUnauthorizedError(message = 'Unauthorized', details) {
+    return createTypedZintrustError(message, 401, 'UNAUTHORIZED', 'UnauthorizedError', details);
+}
+export function createForbiddenError(message = 'Forbidden', details) {
+    return createTypedZintrustError(message, 403, 'FORBIDDEN', 'ForbiddenError', details);
+}
+export function createConnectionError(message, details) {
+    return createTypedZintrustError(message, 500, 'CONNECTION_ERROR', 'ConnectionError', details);
+}
+export function createConfigError(message, details) {
+    return createTypedZintrustError(message, 500, 'CONFIG_ERROR', 'ConfigError', details);
+}
+export function createGeneralError(message, details) {
+    return createTypedZintrustError(message, 500, 'GENERAL_ERROR', 'GeneralError', details);
+}
+export function createCliError(message, details) {
+    return createTypedZintrustError(message, 1, 'CLI_ERROR', 'CliError', details);
+}
+export function createSecurityError(message, details) {
+    return createTypedZintrustError(message, 401, 'SECURITY_ERROR', 'SecurityError', details);
+}
+export function createTryCatchError(message, details) {
+    Logger.error(message, details);
+    return createTypedZintrustError(message, 500, 'TRY_CATCH_ERROR', 'CatchError', details);
+}
+/**
+ * Truncate a string if it exceeds maximum length
+ */
+function truncateString(str, maxLen) {
+    if (str.length <= maxLen)
+        return str;
+    return `${str.slice(0, 16)}...${str.slice(-8)}`;
+}
+/**
+ * Redact sensitive values for error messages
+ */
+function redactValue(value) {
+    if (value === null || value === undefined)
+        return String(value);
+    const MAX_LEN = 48;
+    if (typeof value === 'string') {
+        return truncateString(value, MAX_LEN);
+    }
+    if (typeof value === 'number' || typeof value === 'boolean' || typeof value === 'bigint') {
+        return String(value);
+    }
+    if (typeof value === 'symbol') {
+        return 'Symbol';
+    }
+    if (typeof value === 'function') {
+        return 'Function';
+    }
+    // Avoid stringifying binary buffers (can leak secrets and/or blow up logs).
+    if (typeof Buffer !== 'undefined' && Buffer.isBuffer(value)) {
+        return `Buffer(len=${value.length})`;
+    }
+    if (value instanceof Uint8Array) {
+        return `Uint8Array(len=${value.length})`;
+    }
+    if (Array.isArray(value)) {
+        return `Array(len=${value.length})`;
+    }
+    if (typeof value === 'object') {
+        return 'Object';
+    }
+    return truncateString(String(value), MAX_LEN);
+}
+/**
+ * Create a sanitizer error with method name, reason, and redacted value
+ */
+export function createSanitizerError(method, reason, value) {
+    const redacted = redactValue(value);
+    const message = `Sanitizer.${method}() failed: ${reason} (value: ${redacted})`;
+    return createTypedZintrustError(message, 400, 'SANITIZER_ERROR', 'SanitizerError', {
+        method,
+        reason,
+        redactedValue: redacted,
+    });
+}
+/**
+ * Backward compatibility Errors object.
+ */
+export const Errors = Object.freeze({
+    database: (message, details) => createDatabaseError(message, details),
+    notFound: (message, details) => createNotFoundError(message ?? 'Resource not found', details),
+    validation: (message, details) => createValidationError(message, details),
+    unauthorized: (message, details) => createUnauthorizedError(message ?? 'Unauthorized', details),
+    forbidden: (message, details) => createForbiddenError(message ?? 'Forbidden', details),
+    connection: (message, details) => createConnectionError(message, details),
+    config: (message, details) => createConfigError(message, details),
+    general: (message, details) => createGeneralError(message, details),
+    cli: (message, details) => createCliError(message, details),
+    security: (message, details) => createSecurityError(message, details),
+    catchError: (message, details) => createTryCatchError(message, details),
+    sanitizer: (method, reason, value) => createSanitizerError(method, reason, value),
+});
+/**
+ * Centralized ErrorFactory for creating standardized errors.
+ */
+export const ErrorFactory = Object.freeze({
+    createDatabaseError: (message, details) => createDatabaseError(message, details),
+    createWorkerError: (message, details) => createWorkerError(message, details),
+    createConnectionError: (message, details) => createConnectionError(message, details),
+    createConfigError: (message, details) => createConfigError(message, details),
+    createValidationError: (message, details) => createValidationError(message, details),
+    createGeneralError: (message, details) => createGeneralError(message, details),
+    createTryCatchError: (message, details) => createTryCatchError(message, details),
+    createCliError: (message, details) => createCliError(message, details),
+    createSecurityError: (message, details) => createSecurityError(message, details),
+    createNotFoundError: (message, details) => createNotFoundError(message ?? 'Resource not found', details),
+    createUnauthorizedError: (message, details) => createUnauthorizedError(message ?? 'Unauthorized', details),
+    createSanitizerError: (method, reason, value) => createSanitizerError(method, reason, value),
+    createForbiddenError: (message, details) => createForbiddenError(message ?? 'Forbidden', details),
+});

package/src/functions/cloudflare.d.ts

@@ -0,0 +1,5 @@
+declare const _default: {
+    fetch(request: Request, _env: unknown, _ctx: unknown): Promise<Response>;
+};
+export default _default;
+//# sourceMappingURL=cloudflare.d.ts.map

package/src/functions/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../../src/functions/cloudflare.ts"],"names":[],"mappings":";mBAOuB,OAAO,QAAQ,OAAO,QAAQ,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADhF,wBAqBE"}

package/src/functions/cloudflare.js

@@ -0,0 +1,23 @@
+import { Logger } from '../config/logger.js';
+import { CloudflareAdapter } from '../runtime/adapters/CloudflareAdapter.js';
+import { getKernel } from '../runtime/getKernel.js';
+export default {
+    async fetch(request, _env, _ctx) {
+        try {
+            // Make bindings available to framework code in Workers
+            globalThis.env = _env;
+            const kernel = await getKernel();
+            const adapter = CloudflareAdapter.create({
+                handler: async (req, res) => {
+                    await kernel.handle(req, res);
+                },
+            });
+            const platformResponse = await adapter.handle(request);
+            return adapter.formatResponse(platformResponse);
+        }
+        catch (error) {
+            Logger.error('Cloudflare handler error:', error);
+            return new Response('Internal Server Error', { status: 500 });
+        }
+    },
+};

package/src/functions/deno.d.ts

@@ -0,0 +1,3 @@
+declare const deno: (request: Request) => Promise<Response>;
+export default deno;
+//# sourceMappingURL=deno.d.ts.map

package/src/functions/deno.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../../../src/functions/deno.ts"],"names":[],"mappings":"AAMA,QAAA,MAAM,IAAI,GAAU,SAAS,OAAO,KAAG,OAAO,CAAC,QAAQ,CAgBtD,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/src/functions/deno.js

@@ -0,0 +1,20 @@
+import { Logger } from '../config/logger.js';
+import { DenoAdapter } from '../runtime/adapters/DenoAdapter.js';
+import { getKernel } from '../runtime/getKernel.js';
+const deno = async (request) => {
+    try {
+        const kernel = await getKernel();
+        const adapter = DenoAdapter.create({
+            handler: async (req, res) => {
+                await kernel.handle(req, res);
+            },
+        });
+        const platformResponse = await adapter.handle(request);
+        return adapter.formatResponse(platformResponse);
+    }
+    catch (error) {
+        Logger.error('Deno handler error:', error);
+        return new Response('Internal Server Error', { status: 500 });
+    }
+};
+export default deno;

package/src/functions/lambda.d.ts

@@ -0,0 +1,2 @@
+export declare const handler: (event: unknown, context: unknown) => Promise<unknown>;
+//# sourceMappingURL=lambda.d.ts.map

package/src/functions/lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../../src/functions/lambda.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,OAAO,GAAU,OAAO,OAAO,EAAE,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CAuB/E,CAAC"}

package/src/functions/lambda.js

@@ -0,0 +1,26 @@
+import { Logger } from '../config/logger.js';
+import { LambdaAdapter } from '../runtime/adapters/LambdaAdapter.js';
+import { getKernel } from '../runtime/getKernel.js';
+export const handler = async (event, context) => {
+    try {
+        const kernel = await getKernel();
+        const adapter = LambdaAdapter.create({
+            handler: async (req, res) => {
+                await kernel.handle(req, res);
+            },
+        });
+        return await adapter.handle(event, context);
+    }
+    catch (error) {
+        Logger.error('Lambda handler error:', error);
+        return {
+            statusCode: 500,
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                message: 'Internal Server Error',
+            }),
+        };
+    }
+};

package/src/health/RuntimeHealthProbes.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Runtime Health Probes
+ *
+ * Lightweight dependency probes intended for readiness endpoints.
+ *
+ * NOTE: Startup probes are handled separately by StartupHealthChecks.
+ */
+export declare const RuntimeHealthProbes: Readonly<{
+    getCacheDriverName: () => string;
+    pingKvCache: (timeoutMs?: number) => Promise<number | null>;
+}>;
+export default RuntimeHealthProbes;
+//# sourceMappingURL=RuntimeHealthProbes.d.ts.map

package/src/health/RuntimeHealthProbes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeHealthProbes.d.ts","sourceRoot":"","sources":["../../../src/health/RuntimeHealthProbes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+DH,eAAO,MAAM,mBAAmB;8BAzDD,MAAM;yCAgCS,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;EA4BlE,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/src/health/RuntimeHealthProbes.js

@@ -0,0 +1,62 @@
+/**
+ * Runtime Health Probes
+ *
+ * Lightweight dependency probes intended for readiness endpoints.
+ *
+ * NOTE: Startup probes are handled separately by StartupHealthChecks.
+ */
+import { Cloudflare } from '../config/cloudflare.js';
+import { Env } from '../config/env.js';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+const getCacheDriverName = () => {
+    return Env.get('CACHE_DRIVER', 'memory');
+};
+const withTimeout = async (label, ms, fn) => {
+    if (!Number.isFinite(ms) || ms <= 0) {
+        return fn();
+    }
+    let timeoutId;
+    const timeoutPromise = new Promise((_, reject) => {
+        timeoutId = globalThis.setTimeout(() => {
+            reject(ErrorFactory.createConfigError(`${label} timed out after ${ms}ms`, { label, ms }));
+        }, ms);
+        // Node: allow process to exit; other runtimes may not support unref()
+        if (typeof timeoutId.unref === 'function') {
+            timeoutId.unref();
+        }
+    });
+    try {
+        return await Promise.race([fn(), timeoutPromise]);
+    }
+    finally {
+        if (timeoutId !== undefined) {
+            clearTimeout(timeoutId);
+            timeoutId = undefined;
+        }
+    }
+};
+const pingKvCache = async (timeoutMs = 2000) => {
+    const driver = getCacheDriverName();
+    if (driver !== 'kv')
+        return null;
+    const start = Date.now();
+    const kv = Cloudflare.getKVBinding('CACHE');
+    if (kv === null) {
+        throw ErrorFactory.createConfigError('KV binding "CACHE" not found');
+    }
+    const key = `__runtime_health__:kv:${Date.now()}`;
+    await withTimeout('runtime.cache.kv.ping', timeoutMs, async () => {
+        await kv.put(key, JSON.stringify({ ok: true }), { expirationTtl: 60 });
+        const value = (await kv.get(key, { type: 'json' }));
+        if (value?.ok !== true) {
+            throw ErrorFactory.createConnectionError('KV probe failed: unexpected value');
+        }
+        await kv.delete(key);
+    });
+    return Date.now() - start;
+};
+export const RuntimeHealthProbes = Object.freeze({
+    getCacheDriverName,
+    pingKvCache,
+});
+export default RuntimeHealthProbes;

package/src/health/StartupHealthChecks.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Startup Health Checks
+ *
+ * Lightweight boot-time checks that validate the runtime environment before
+ * the server starts accepting requests.
+ */
+import type { DatabaseConfig } from '../orm/DatabaseAdapter';
+export type StartupHealthCheck = {
+    name: string;
+    ok: boolean;
+    durationMs?: number;
+    details?: unknown;
+};
+export type StartupHealthReport = {
+    ok: boolean;
+    checks: StartupHealthCheck[];
+};
+export declare const StartupHealthChecks: Readonly<{
+    run(): Promise<StartupHealthReport>;
+    assertHealthy(): Promise<StartupHealthReport>;
+    checkDatabase(config: DatabaseConfig): Promise<StartupHealthCheck>;
+    checkCache(): Promise<StartupHealthCheck>;
+    withTimeout(name: string, fn: () => Promise<void>): Promise<void>;
+}>;
+export default StartupHealthChecks;
+//# sourceMappingURL=StartupHealthChecks.d.ts.map

package/src/health/StartupHealthChecks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StartupHealthChecks.d.ts","sourceRoot":"","sources":["../../../src/health/StartupHealthChecks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,mBAAmB;WACjB,OAAO,CAAC,mBAAmB,CAAC;qBAwClB,OAAO,CAAC,mBAAmB,CAAC;0BAYvB,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;kBA0BpD,OAAO,CAAC,kBAAkB,CAAC;sBA2BvB,MAAM,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;EAiBvE,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/src/health/StartupHealthChecks.js

@@ -0,0 +1,124 @@
+/**
+ * Startup Health Checks
+ *
+ * Lightweight boot-time checks that validate the runtime environment before
+ * the server starts accepting requests.
+ */
+import { generateUuid } from '../common/utility.js';
+import { Cache } from '../cache/Cache.js';
+import { Env } from '../config/env.js';
+import { Logger } from '../config/logger.js';
+import { startupConfig } from '../config/startup.js';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { Database } from '../orm/Database.js';
+import { QueryBuilder } from '../orm/QueryBuilder.js';
+import { StartupSecretValidation } from '../security/StartupSecretValidation.js';
+export const StartupHealthChecks = Object.freeze({
+    async run() {
+        if (!startupConfig.healthChecksEnabled) {
+            return { ok: true, checks: [{ name: 'startup.healthChecks', ok: true }] };
+        }
+        const checks = [];
+        const secrets = StartupSecretValidation.validate();
+        checks.push({
+            name: 'startup.secrets',
+            ok: secrets.valid,
+            details: secrets.valid ? undefined : { errors: secrets.errors },
+        });
+        if (startupConfig.checkDatabase === true) {
+            // Minimal config derived from Env. For Workers D1, the adapter will resolve the binding via Cloudflare helpers.
+            const driver = (Env.DB_CONNECTION || 'sqlite');
+            const readHosts = Env.DB_READ_HOSTS.trim().length > 0 ? Env.DB_READ_HOSTS.split(',') : undefined;
+            const config = {
+                driver,
+                database: Env.DB_DATABASE,
+                host: Env.DB_HOST,
+                port: Env.DB_PORT,
+                username: Env.DB_USERNAME,
+                password: Env.DB_PASSWORD,
+                readHosts,
+            };
+            checks.push(await StartupHealthChecks.checkDatabase(config));
+        }
+        if (startupConfig.checkCache === true) {
+            checks.push(await StartupHealthChecks.checkCache());
+        }
+        return { ok: checks.every((c) => c.ok), checks };
+    },
+    async assertHealthy() {
+        const report = await StartupHealthChecks.run();
+        if (report.ok)
+            return report;
+        if (startupConfig.continueOnFailure === true) {
+            Logger.warn('Startup health checks failed but continuing due to configuration', { report });
+            return report;
+        }
+        throw ErrorFactory.createConfigError('Startup health checks failed', { report });
+    },
+    async checkDatabase(config) {
+        const startedAt = Date.now();
+        try {
+            await StartupHealthChecks.withTimeout('startup.database.connect', async () => {
+                const db = Database.create(config);
+                await db.connect();
+                try {
+                    await QueryBuilder.ping(db);
+                }
+                finally {
+                    await db.disconnect();
+                }
+            });
+            return { name: 'startup.database', ok: true, durationMs: Date.now() - startedAt };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                name: 'startup.database',
+                ok: false,
+                durationMs: Date.now() - startedAt,
+                details: { message },
+            };
+        }
+    },
+    async checkCache() {
+        const startedAt = Date.now();
+        const key = `__startup_health__:${generateUuid()}`;
+        try {
+            await StartupHealthChecks.withTimeout('startup.cache.probe', async () => {
+                await Cache.set(key, { ok: true }, 60);
+                const value = await Cache.get(key);
+                await Cache.delete(key);
+                if (value?.ok !== true) {
+                    throw ErrorFactory.createConfigError('Cache probe failed', { key });
+                }
+            });
+            return { name: 'startup.cache', ok: true, durationMs: Date.now() - startedAt };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                name: 'startup.cache',
+                ok: false,
+                durationMs: Date.now() - startedAt,
+                details: { message },
+            };
+        }
+    },
+    async withTimeout(name, fn) {
+        const timeoutMs = Math.max(1, Number(startupConfig.timeoutMs));
+        let timeoutId;
+        const timeoutPromise = new Promise((_, reject) => {
+            timeoutId = globalThis.setTimeout(() => {
+                reject(ErrorFactory.createConfigError(`Startup check timed out: ${name}`, { timeoutMs }));
+            }, timeoutMs);
+        });
+        try {
+            await Promise.race([fn(), timeoutPromise]);
+        }
+        finally {
+            if (timeoutId !== undefined)
+                globalThis.clearTimeout(timeoutId);
+        }
+    },
+});
+export default StartupHealthChecks;

package/src/http/Controller.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Base Controller
+ * All controllers extend this class
+ */
+import type { IRequest } from './Request';
+import type { IResponse } from './Response';
+export interface IController {
+    json(res: IResponse, data: unknown, statusCode?: number): void;
+    error(res: IResponse, message: string, statusCode?: number): void;
+    redirect(res: IResponse, url: string, statusCode?: number): void;
+    param(req: IRequest, name: string): string | undefined;
+    query(req: IRequest, name: string): string | string[] | undefined;
+    body(req: IRequest): unknown;
+}
+/**
+ * Base Controller
+ * Sealed namespace for immutability
+ */
+export declare const Controller: IController;
+//# sourceMappingURL=Controller.d.ts.map

package/src/http/Controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Controller.d.ts","sourceRoot":"","sources":["../../../src/http/Controller.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvD,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAClE,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,WA0CvB,CAAC"}