@zintrust/core 0.1.32 → 0.1.33

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "0.1.32",
+  "version": "0.1.33",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {

package/src/boot/Server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Server.d.ts","sourceRoot":"","sources":["../../../src/boot/Server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAM5C,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAG9C,MAAM,WAAW,OAAO;IACtB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC;CAC9B;AA2DD;;;GAGG;AACH,eAAO,MAAM,MAAM;IACjB;;OAEG;gBACS,YAAY,SAAS,MAAM,SAAS,MAAM,WAAU,OAAO,GAAG,IAAI,GAAU,OAAO;EA4D/F,CAAC;AAEH,eAAe,MAAM,CAAC"}
+{"version":3,"file":"Server.d.ts","sourceRoot":"","sources":["../../../src/boot/Server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAM5C,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAG9C,MAAM,WAAW,OAAO;IACtB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC;CAC9B;AA4DD;;;GAGG;AACH,eAAO,MAAM,MAAM;IACjB;;OAEG;gBACS,YAAY,SAAS,MAAM,SAAS,MAAM,WAAU,OAAO,GAAG,IAAI,GAAU,OAAO;EA4D/F,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/src/boot/Server.js

@@ -19,9 +19,10 @@ const getContentSecurityPolicyForPath = () => {
     // Default CSP for the API/framework
     return ("default-src 'self'; " +
         "script-src 'self' 'unsafe-inline'; " +
-        "style-src 'self' 'unsafe-inline'; " +
+        "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; " +
+        "style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; " +
         "img-src 'self' data:; " +
-        "font-src 'self';");
+        "font-src 'self' https://fonts.gstatic.com;");
 };
 const setSecurityHeaders = (res) => {
     res.setHeader(HTTP_HEADERS.X_POWERED_BY, 'ZinTrust');

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v0.1.32
+ * @zintrust/core v0.1.33
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-01-29T09:39:33.045Z
+ *   Built: 2026-01-29T09:58:51.202Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.23';
-export const ZINTRUST_BUILD_DATE = '2026-01-29T09:39:33.006Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-01-29T09:58:51.164Z'; // Replaced during build
 import { Application } from './boot/Application.js';
 import { AwsSigV4 } from './common/index.js';
 import { SignedRequest } from './security/SignedRequest.js';

package/src/routes/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../src/routes/error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAKnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAyJnD;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,OAAO,KAAG,IAGrD,CAAC;AAEF,eAAO,MAAM,YAAY;;kCALmB,OAAO,KAAG,IAAI;8BAlGzB,QAAQ,YAAY,SAAS,cAAc,MAAM,KAAG,IAAI;qDAiB9E,QAAQ,YACP,SAAS,SACZ,OAAO,cACF,MAAM,KACjB,IAAI;wCA0DoC,IAAI,CAAC,cAAc,KAAG,IAAI;EA8BnE,CAAC;AAEH,eAAe,YAAY,CAAC"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../src/routes/error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAKnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAoKnD;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,OAAO,KAAG,IAGrD,CAAC;AAEF,eAAO,MAAM,YAAY;;kCALmB,OAAO,KAAG,IAAI;8BA7GzB,QAAQ,YAAY,SAAS,cAAc,MAAM,KAAG,IAAI;qDA4B9E,QAAQ,YACP,SAAS,SACZ,OAAO,cACF,MAAM,KACjB,IAAI;wCA0DoC,IAAI,CAAC,cAAc,KAAG,IAAI;EA8BnE,CAAC;AAEH,eAAe,YAAY,CAAC"}

package/src/routes/error.js

@@ -4,6 +4,7 @@
  */
 import { appConfig } from '../config/app.js';
 import { HTTP_HEADERS, MIME_TYPES } from '../config/constants.js';
+import { serveErrorPagesFile, serveZintrustSvgFile } from './errorPages.js';
 import { getPublicRoot } from './publicRoot.js';
 import { Router } from './Router.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
@@ -50,6 +51,15 @@ const trySendHtmlErrorPage = (request, response, input) => {
     return true;
 };
 const handleNotFound = (request, response, requestId) => {
+    const path = request.getPath();
+    if (path.startsWith('/error-pages/')) {
+        serveErrorPagesFile(path, response);
+        return;
+    }
+    if (path === '/zintrust.svg') {
+        serveZintrustSvgFile(response);
+        return;
+    }
     response.setStatus(404);
     if (trySendHtmlErrorPage(request, response, {
         statusCode: 404,

package/src/routes/errorPages.d.ts

@@ -5,6 +5,7 @@
 import type { IRouter } from './Router';
 import type { IResponse } from '../http/Response';
 export declare const serveErrorPagesFile: (urlPath: string, response: IResponse) => boolean;
+export declare const serveZintrustSvgFile: (response: IResponse) => boolean;
 export declare const registerErrorPagesRoutes: (router: IRouter) => void;
 declare const _default: {
     registerErrorPagesRoutes: (router: IRouter) => void;

package/src/routes/errorPages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errorPages.d.ts","sourceRoot":"","sources":["../../../src/routes/errorPages.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAkChD,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,EAAE,UAAU,SAAS,KAAG,OAsD1E,CAAC;AAeF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,OAAO,KAAG,IAO1D,CAAC;;uCAP+C,OAAO,KAAG,IAAI;mCArElB,MAAM,YAAY,SAAS,KAAG,OAAO;;AA8ElF,wBAAiE"}
+{"version":3,"file":"errorPages.d.ts","sourceRoot":"","sources":["../../../src/routes/errorPages.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAoDhD,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,EAAE,UAAU,SAAS,KAAG,OAkD1E,CAAC;AAeF,eAAO,MAAM,oBAAoB,GAAI,UAAU,SAAS,KAAG,OAE1D,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,OAAO,KAAG,IAO1D,CAAC;;uCAP+C,OAAO,KAAG,IAAI;mCArElB,MAAM,YAAY,SAAS,KAAG,OAAO;;AA8ElF,wBAAiE"}

package/src/routes/errorPages.js

@@ -4,33 +4,51 @@
  */
 import { HTTP_HEADERS, MIME_TYPES } from '../config/constants.js';
 import { MIME_TYPES_MAP, resolveSafePath, tryDecodeURIComponent } from './common.js';
-import { getPublicRoot } from './publicRoot.js';
+import { getFrameworkPublicRoots } from './publicRoot.js';
 import { Router } from './Router.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import * as fs from '../node-singletons/fs.js';
 import * as path from '../node-singletons/path.js';
+const getCandidatePublicRoots = () => {
+    const roots = [path.join(process.cwd(), 'public'), ...getFrameworkPublicRoots()];
+    const unique = new Set(roots.map((root) => root.trim()).filter((root) => root !== ''));
+    return [...unique];
+};
+const findFirstExistingFile = (candidates) => {
+    for (const candidate of candidates) {
+        try {
+            if (fs.existsSync(candidate) && fs.statSync(candidate).isFile())
+                return candidate;
+        }
+        catch {
+            // ignore and continue
+        }
+    }
+    return undefined;
+};
 const servePublicRootFile = (relativePath, response, contentType) => {
-    const publicRoot = getPublicRoot();
-    const filePath = path.join(publicRoot, relativePath);
+    const candidateRoots = getCandidatePublicRoots();
+    const candidates = candidateRoots.map((root) => path.join(root, relativePath));
+    const filePath = findFirstExistingFile(candidates);
     try {
-        if (!fs.existsSync(filePath) || fs.statSync(filePath).isDirectory()) {
+        if (!filePath) {
             response.setStatus(404);
             response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
             response.send('Not Found');
-            return;
+            return false;
         }
         const content = fs.readFileSync(filePath);
         response.setStatus(200);
         response.setHeader(HTTP_HEADERS.CONTENT_TYPE, contentType);
         response.send(content);
-        return;
+        return true;
     }
     catch (error) {
         ErrorFactory.createTryCatchError(`Error serving public file ${filePath}`, error);
         response.setStatus(500);
         response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
         response.send('Internal Server Error');
-        return;
+        return false;
     }
 };
 export const serveErrorPagesFile = (urlPath, response) => {
@@ -42,45 +60,41 @@ export const serveErrorPagesFile = (urlPath, response) => {
     }
     if (!urlPath.startsWith('/error-pages/'))
         return false;
-    const publicRoot = getPublicRoot();
-    const baseDir = path.join(publicRoot, 'error-pages');
+    const candidateRoots = getCandidatePublicRoots();
     const rawRelative = urlPath.slice('/error-pages/'.length);
     const normalizedRelative = tryDecodeURIComponent(rawRelative).replaceAll('\\', '/');
-    const filePath = resolveSafePath(baseDir, normalizedRelative);
-    if (filePath === undefined) {
-        response.setStatus(404);
-        response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
-        response.send('Not Found');
-        return true;
-    }
-    try {
-        if (fs.existsSync(filePath) && fs.statSync(filePath).isDirectory()) {
-            response.setStatus(404);
-            response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
-            response.send('Not Found');
+    for (const root of candidateRoots) {
+        const baseDir = path.join(root, 'error-pages');
+        const filePath = resolveSafePath(baseDir, normalizedRelative);
+        if (filePath === undefined)
+            continue;
+        try {
+            if (fs.existsSync(filePath) && fs.statSync(filePath).isDirectory()) {
+                continue;
+            }
+            if (!fs.existsSync(filePath)) {
+                continue;
+            }
+            const ext = path.extname(filePath).toLowerCase();
+            const contentType = MIME_TYPES_MAP[ext] || 'application/octet-stream';
+            const content = fs.readFileSync(filePath);
+            response.setStatus(200);
+            response.setHeader(HTTP_HEADERS.CONTENT_TYPE, contentType);
+            response.send(content);
             return true;
         }
-        if (!fs.existsSync(filePath)) {
-            response.setStatus(404);
+        catch (error) {
+            ErrorFactory.createTryCatchError(`Error serving error-pages file ${filePath}`, error);
+            response.setStatus(500);
             response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
-            response.send('Not Found');
+            response.send('Internal Server Error');
             return true;
         }
-        const ext = path.extname(filePath).toLowerCase();
-        const contentType = MIME_TYPES_MAP[ext] || 'application/octet-stream';
-        const content = fs.readFileSync(filePath);
-        response.setStatus(200);
-        response.setHeader(HTTP_HEADERS.CONTENT_TYPE, contentType);
-        response.send(content);
-        return true;
-    }
-    catch (error) {
-        ErrorFactory.createTryCatchError(`Error serving error-pages file ${filePath}`, error);
-        response.setStatus(500);
-        response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
-        response.send('Internal Server Error');
-        return true;
     }
+    response.setStatus(404);
+    response.setHeader(HTTP_HEADERS.CONTENT_TYPE, MIME_TYPES.TEXT);
+    response.send('Not Found');
+    return true;
 };
 const handleErrorPagesRequest = (req, res) => {
     const urlPath = req.getPath();
@@ -93,6 +107,9 @@ const handleErrorPagesRequest = (req, res) => {
 const handleZintrustSvgRequest = (_req, res) => {
     servePublicRootFile('zintrust.svg', res, MIME_TYPES.SVG);
 };
+export const serveZintrustSvgFile = (response) => {
+    return servePublicRootFile('zintrust.svg', response, MIME_TYPES.SVG);
+};
 export const registerErrorPagesRoutes = (router) => {
     Router.get(router, '/error-pages', handleErrorPagesRequest);
     Router.get(router, '/error-pages/', handleErrorPagesRequest);