@zintrust/core 0.1.39 → 0.1.41

package/src/config/env.d.ts

@@ -6,18 +6,28 @@
  * Safe for both Node.js and serverless runtimes (Cloudflare Workers, Deno, Lambda)
  */
 import type { ProcessLike } from './type';
+export type EnvSource = Record<string, unknown> | (() => Record<string, unknown>);
 export declare const getProcessLike: () => ProcessLike | undefined;
 export declare const dirnameFromExecPath: (execPath: string, platform?: string) => string;
 export declare const get: (key: string, defaultValue?: string) => string;
-export declare const getInt: (key: string, defaultValue?: number) => number;
+export declare const getInt: (key: string, defaultValue: number) => number;
 export declare const getFloat: (key: string, defaultValue?: number) => number;
 export declare const getBool: (key: string, defaultValue?: boolean) => boolean;
+export declare const set: (key: string, value: string) => void;
+export declare const unset: (key: string) => void;
+export declare const setSource: (source: EnvSource | null) => void;
+export declare const snapshot: () => Record<string, string>;
 export declare const getDefaultLogLevel: () => "debug" | "info" | "warn" | "error";
+export declare const ZT_PROXY_TIMEOUT_MS: number;
 export declare const Env: Readonly<{
     get: (key: string, defaultValue?: string) => string;
-    getInt: (key: string, defaultValue?: number) => number;
+    getInt: (key: string, defaultValue: number) => number;
     getBool: (key: string, defaultValue?: boolean) => boolean;
     getFloat: (key: string, defaultValue?: number) => number;
+    set: (key: string, value: string) => void;
+    unset: (key: string) => void;
+    setSource: (source: EnvSource | null) => void;
+    snapshot: () => Record<string, string>;
     NODE_ENV: NodeJS.ProcessEnv["NODE_ENV"];
     PORT: number;
     HOST: string;
@@ -49,6 +59,67 @@ export declare const Env: Readonly<{
     D1_REMOTE_KEY_ID: string;
     D1_REMOTE_SECRET: string;
     D1_REMOTE_MODE: string;
+    MYSQL_PROXY_URL: string;
+    MYSQL_PROXY_HOST: string;
+    MYSQL_PROXY_PORT: number;
+    MYSQL_PROXY_MAX_BODY_BYTES: number;
+    MYSQL_PROXY_POOL_LIMIT: number;
+    MYSQL_PROXY_KEY_ID: string;
+    MYSQL_PROXY_SECRET: string;
+    MYSQL_PROXY_TIMEOUT_MS: number;
+    MYSQL_PROXY_REQUIRE_SIGNING: boolean;
+    MYSQL_PROXY_SIGNING_WINDOW_MS: number;
+    POSTGRES_PROXY_URL: string;
+    POSTGRES_PROXY_HOST: string;
+    POSTGRES_PROXY_PORT: number;
+    POSTGRES_PROXY_MAX_BODY_BYTES: number;
+    POSTGRES_PROXY_POOL_LIMIT: number;
+    POSTGRES_PROXY_KEY_ID: string;
+    POSTGRES_PROXY_SECRET: string;
+    POSTGRES_PROXY_TIMEOUT_MS: number;
+    POSTGRES_PROXY_REQUIRE_SIGNING: boolean;
+    POSTGRES_PROXY_SIGNING_WINDOW_MS: number;
+    REDIS_PROXY_URL: string;
+    REDIS_PROXY_HOST: string;
+    REDIS_PROXY_PORT: number;
+    REDIS_PROXY_MAX_BODY_BYTES: number;
+    REDIS_PROXY_KEY_ID: string;
+    REDIS_PROXY_SECRET: string;
+    REDIS_PROXY_TIMEOUT_MS: number;
+    REDIS_PROXY_REQUIRE_SIGNING: boolean;
+    REDIS_PROXY_SIGNING_WINDOW_MS: number;
+    USE_REDIS_PROXY: boolean;
+    SMTP_PROXY_URL: string;
+    SMTP_PROXY_HOST: string;
+    SMTP_PROXY_PORT: number;
+    SMTP_PROXY_MAX_BODY_BYTES: number;
+    SMTP_PROXY_KEY_ID: string;
+    SMTP_PROXY_SECRET: string;
+    SMTP_PROXY_TIMEOUT_MS: number;
+    SMTP_PROXY_REQUIRE_SIGNING: boolean;
+    SMTP_PROXY_SIGNING_WINDOW_MS: number;
+    USE_SMTP_PROXY: boolean;
+    MONGODB_PROXY_URL: string;
+    MONGODB_PROXY_HOST: string;
+    MONGODB_PROXY_PORT: number;
+    MONGODB_PROXY_MAX_BODY_BYTES: number;
+    MONGODB_PROXY_KEY_ID: string;
+    MONGODB_PROXY_SECRET: string;
+    MONGODB_PROXY_TIMEOUT_MS: number;
+    MONGODB_PROXY_REQUIRE_SIGNING: boolean;
+    MONGODB_PROXY_SIGNING_WINDOW_MS: number;
+    USE_MONGODB_PROXY: boolean;
+    SQLSERVER_PROXY_URL: string;
+    SQLSERVER_PROXY_HOST: string;
+    SQLSERVER_PROXY_PORT: number;
+    SQLSERVER_PROXY_MAX_BODY_BYTES: number;
+    SQLSERVER_PROXY_POOL_LIMIT: number;
+    SQLSERVER_PROXY_KEY_ID: string;
+    SQLSERVER_PROXY_SECRET: string;
+    SQLSERVER_PROXY_TIMEOUT_MS: number;
+    SQLSERVER_PROXY_REQUIRE_SIGNING: boolean;
+    SQLSERVER_PROXY_SIGNING_WINDOW_MS: number;
+    USE_SQLSERVER_PROXY: boolean;
     KV_REMOTE_URL: string;
     KV_REMOTE_KEY_ID: string;
     KV_REMOTE_SECRET: string;
@@ -59,11 +130,22 @@ export declare const Env: Readonly<{
     REDIS_HOST: string;
     REDIS_PORT: number;
     REDIS_PASSWORD: string;
+    REDIS_DB: number;
     REDIS_URL: string;
     MONGO_URI: string;
     MONGO_DB: string;
     QUEUE_CONNECTION: string;
     QUEUE_DRIVER: string;
+    QUEUE_HTTP_PROXY_ENABLED: boolean;
+    QUEUE_HTTP_PROXY_GATEWAY_ENABLED: boolean;
+    QUEUE_HTTP_PROXY_URL: string;
+    QUEUE_HTTP_PROXY_PATH: string;
+    QUEUE_HTTP_PROXY_KEY_ID: string;
+    QUEUE_HTTP_PROXY_KEY: string;
+    QUEUE_HTTP_PROXY_TIMEOUT_MS: number;
+    QUEUE_HTTP_PROXY_MAX_SKEW_MS: number;
+    QUEUE_HTTP_PROXY_NONCE_TTL_MS: number;
+    QUEUE_HTTP_PROXY_MIDDLEWARE: string;
     RATE_LIMIT_STORE: string;
     RATE_LIMIT_DRIVER: string;
     RATE_LIMIT_KEY_PREFIX: string;
@@ -86,6 +168,9 @@ export declare const Env: Readonly<{
     ENABLE_MICROSERVICES: boolean;
     TOKEN_TTL: number;
     TOKEN_LENGTH: number;
+    CSRF_STORE: string;
+    CSRF_DRIVER: string;
+    CSRF_REDIS_DB: number;
     ENCRYPTION_CIPHER: string;
     ENVIRONMENT: string;
     REQUEST_TIMEOUT: number;
@@ -97,6 +182,7 @@ export declare const Env: Readonly<{
     LOG_LEVEL: "debug" | "info" | "warn" | "error";
     LOG_FORMAT: string;
     LOG_CHANNEL: string;
+    DOCKER_WORKER: boolean;
     DISABLE_LOGGING: boolean;
     LOG_HTTP_REQUEST: boolean;
     LOG_TO_FILE: boolean;
@@ -109,6 +195,7 @@ export declare const Env: Readonly<{
     ZINTRUST_ENV_IN_FILE: string;
     ZINTRUST_SECRETS_PROVIDER: string;
     ZINTRUST_ALLOW_AUTO_INSTALL: string;
+    WORKER_SHUTDOWN_ON_APP_EXIT: boolean;
     CLOUDFLARE_ACCOUNT_ID: string;
     CLOUDFLARE_API_TOKEN: string;
     CLOUDFLARE_KV_NAMESPACE_ID: string;
@@ -127,4 +214,5 @@ export declare const Env: Readonly<{
     NODE_BIN_DIR: string;
     SAFE_PATH: string;
 }>;
+export declare const buildRedisUrl: () => string;
 //# sourceMappingURL=env.d.ts.map

package/src/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAGF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAGxD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAM3D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAM7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAK7D,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AAGF,eAAO,MAAM,GAAG;eApCS,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAKnC,MAAM,iBAAiB,MAAM,KAAG,MAAM;mBAgBrC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBARvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;cA+BtB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAiHpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmExF,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBlF,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAGF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAIxD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,cAAc,MAAM,KAAG,MAI1D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAI7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAGhD,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,KAAG,IAInC,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,QAAQ,SAAS,GAAG,IAAI,KAAG,IAEpD,CAAC;AAEF,eAAO,MAAM,QAAQ,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAOhD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AACF,eAAO,MAAM,mBAAmB,QAAuC,CAAC;AAKxE,eAAO,MAAM,GAAG;eA3DS,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAMnC,MAAM,gBAAgB,MAAM,KAAG,MAAM;mBAYpC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBANvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;eAY3C,MAAM,SAAS,MAAM,KAAG,IAAI;iBAK1B,MAAM,KAAG,IAAI;wBAMN,SAAS,GAAG,IAAI,KAAG,IAAI;oBAI7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;cAgCJ,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAuNpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFxF,CAAC;AAEH,eAAO,MAAM,aAAa,QAAO,MAchC,CAAC"}

package/src/config/env.js

@@ -7,6 +7,24 @@
  */
 // Cache process check once at module load time
 const processLike = typeof process === 'undefined' ? undefined : process;
+let externalEnvSource = null;
+const getEnvSource = () => {
+    if (typeof externalEnvSource === 'function')
+        return externalEnvSource();
+    if (externalEnvSource !== null)
+        return externalEnvSource;
+    return processLike?.env ?? {};
+};
+const normalizeEnvValue = (value) => {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean' || typeof value === 'bigint') {
+        return String(value);
+    }
+    return '';
+};
 export const getProcessLike = () => processLike;
 export const dirnameFromExecPath = (execPath, platform) => {
     const separator = platform === 'win32' ? '\\' : '/';
@@ -17,34 +35,50 @@ export const dirnameFromExecPath = (execPath, platform) => {
 };
 // Private helper functions
 export const get = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    return env[key] ?? defaultValue ?? '';
+    const env = getEnvSource();
+    const value = normalizeEnvValue(env[key]);
+    return value === '' ? (defaultValue ?? '') : value;
 };
 export const getInt = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    const value = env[key];
-    if (value === undefined || value === null)
-        return defaultValue ?? 0;
-    if (typeof value === 'string' && value.trim() === '')
+    const value = get(key, String(defaultValue ?? 0));
+    if (value.trim() === '')
         return defaultValue ?? 0;
     return Number.parseInt(value, 10);
 };
 export const getFloat = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    const value = env[key];
-    if (value === undefined || value === null)
-        return defaultValue ?? 0;
-    if (typeof value === 'string' && value.trim() === '')
+    const value = get(key, String(defaultValue ?? 0));
+    if (value.trim() === '')
         return defaultValue ?? 0;
     return Number.parseFloat(value);
 };
 export const getBool = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    const value = env[key];
-    if (value === undefined || value === null)
+    const value = get(key, defaultValue === true ? 'true' : 'false');
+    if (value.trim() === '')
         return defaultValue ?? false;
     return value.toLowerCase() === 'true' || value === '1';
 };
+export const set = (key, value) => {
+    if (processLike?.env === undefined)
+        return;
+    processLike.env[key] = value;
+};
+export const unset = (key) => {
+    if (processLike?.env === undefined)
+        return;
+    // Use Reflect.deleteProperty to avoid deleting dynamically computed property keys
+    Reflect.deleteProperty(processLike.env, key);
+};
+export const setSource = (source) => {
+    externalEnvSource = source;
+};
+export const snapshot = () => {
+    const env = getEnvSource();
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        out[key] = normalizeEnvValue(value);
+    }
+    return out;
+};
 export const getDefaultLogLevel = () => {
     const NODE_ENV_VALUE = get('NODE_ENV', 'development');
     if (NODE_ENV_VALUE === 'production')
@@ -53,6 +87,9 @@ export const getDefaultLogLevel = () => {
         return 'error';
     return 'debug';
 };
+export const ZT_PROXY_TIMEOUT_MS = getInt('ZT_PROXY_TIMEOUT_MS', 30000);
+const PROXY_KEY_ID_FALLBACK = get('APP_NAME', 'ZinTrust');
+const PROXY_SECRET_FALLBACK = get('APP_KEY', '');
 // Sealed namespace with all environment configuration
 export const Env = Object.freeze({
     // Helper functions
@@ -60,6 +97,10 @@ export const Env = Object.freeze({
     getInt,
     getBool,
     getFloat,
+    set,
+    unset,
+    setSource,
+    snapshot,
     // Core
     NODE_ENV: get('NODE_ENV', 'development'),
     // Prefer PORT, fallback to APP_PORT for compatibility
@@ -100,6 +141,67 @@ export const Env = Object.freeze({
     D1_REMOTE_KEY_ID: get('D1_REMOTE_KEY_ID', ''),
     D1_REMOTE_SECRET: get('D1_REMOTE_SECRET', ''),
     D1_REMOTE_MODE: get('D1_REMOTE_MODE', 'registry'),
+    MYSQL_PROXY_URL: get('MYSQL_PROXY_URL', ''),
+    MYSQL_PROXY_HOST: get('MYSQL_PROXY_HOST', '127.0.0.1'),
+    MYSQL_PROXY_PORT: getInt('MYSQL_PROXY_PORT', 8789),
+    MYSQL_PROXY_MAX_BODY_BYTES: getInt('MYSQL_PROXY_MAX_BODY_BYTES', 131072),
+    MYSQL_PROXY_POOL_LIMIT: getInt('MYSQL_PROXY_POOL_LIMIT', 10),
+    MYSQL_PROXY_KEY_ID: get('MYSQL_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    MYSQL_PROXY_SECRET: get('MYSQL_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    MYSQL_PROXY_TIMEOUT_MS: getInt('MYSQL_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    MYSQL_PROXY_REQUIRE_SIGNING: getBool('MYSQL_PROXY_REQUIRE_SIGNING', true),
+    MYSQL_PROXY_SIGNING_WINDOW_MS: getInt('MYSQL_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    POSTGRES_PROXY_URL: get('POSTGRES_PROXY_URL', ''),
+    POSTGRES_PROXY_HOST: get('POSTGRES_PROXY_HOST', '127.0.0.1'),
+    POSTGRES_PROXY_PORT: getInt('POSTGRES_PROXY_PORT', 8790),
+    POSTGRES_PROXY_MAX_BODY_BYTES: getInt('POSTGRES_PROXY_MAX_BODY_BYTES', 131072),
+    POSTGRES_PROXY_POOL_LIMIT: getInt('POSTGRES_PROXY_POOL_LIMIT', 10),
+    POSTGRES_PROXY_KEY_ID: get('POSTGRES_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    POSTGRES_PROXY_SECRET: get('POSTGRES_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    POSTGRES_PROXY_TIMEOUT_MS: getInt('POSTGRES_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    POSTGRES_PROXY_REQUIRE_SIGNING: getBool('POSTGRES_PROXY_REQUIRE_SIGNING', true),
+    POSTGRES_PROXY_SIGNING_WINDOW_MS: getInt('POSTGRES_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    REDIS_PROXY_URL: get('REDIS_PROXY_URL', ''),
+    REDIS_PROXY_HOST: get('REDIS_PROXY_HOST', '127.0.0.1'),
+    REDIS_PROXY_PORT: getInt('REDIS_PROXY_PORT', 8791),
+    REDIS_PROXY_MAX_BODY_BYTES: getInt('REDIS_PROXY_MAX_BODY_BYTES', 131072),
+    REDIS_PROXY_KEY_ID: get('REDIS_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    REDIS_PROXY_SECRET: get('REDIS_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    REDIS_PROXY_TIMEOUT_MS: getInt('REDIS_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    REDIS_PROXY_REQUIRE_SIGNING: getBool('REDIS_PROXY_REQUIRE_SIGNING', true),
+    REDIS_PROXY_SIGNING_WINDOW_MS: getInt('REDIS_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_REDIS_PROXY: getBool('USE_REDIS_PROXY', false),
+    SMTP_PROXY_URL: get('SMTP_PROXY_URL', ''),
+    SMTP_PROXY_HOST: get('SMTP_PROXY_HOST', '127.0.0.1'),
+    SMTP_PROXY_PORT: getInt('SMTP_PROXY_PORT', 8794),
+    SMTP_PROXY_MAX_BODY_BYTES: getInt('SMTP_PROXY_MAX_BODY_BYTES', 131072),
+    SMTP_PROXY_KEY_ID: get('SMTP_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    SMTP_PROXY_SECRET: get('SMTP_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    SMTP_PROXY_TIMEOUT_MS: getInt('SMTP_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    SMTP_PROXY_REQUIRE_SIGNING: getBool('SMTP_PROXY_REQUIRE_SIGNING', true),
+    SMTP_PROXY_SIGNING_WINDOW_MS: getInt('SMTP_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_SMTP_PROXY: getBool('USE_SMTP_PROXY', false),
+    MONGODB_PROXY_URL: get('MONGODB_PROXY_URL', ''),
+    MONGODB_PROXY_HOST: get('MONGODB_PROXY_HOST', '127.0.0.1'),
+    MONGODB_PROXY_PORT: getInt('MONGODB_PROXY_PORT', 8792),
+    MONGODB_PROXY_MAX_BODY_BYTES: getInt('MONGODB_PROXY_MAX_BODY_BYTES', 131072),
+    MONGODB_PROXY_KEY_ID: get('MONGODB_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    MONGODB_PROXY_SECRET: get('MONGODB_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    MONGODB_PROXY_TIMEOUT_MS: getInt('MONGODB_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    MONGODB_PROXY_REQUIRE_SIGNING: getBool('MONGODB_PROXY_REQUIRE_SIGNING', true),
+    MONGODB_PROXY_SIGNING_WINDOW_MS: getInt('MONGODB_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_MONGODB_PROXY: getBool('USE_MONGODB_PROXY', false),
+    SQLSERVER_PROXY_URL: get('SQLSERVER_PROXY_URL', ''),
+    SQLSERVER_PROXY_HOST: get('SQLSERVER_PROXY_HOST', '127.0.0.1'),
+    SQLSERVER_PROXY_PORT: getInt('SQLSERVER_PROXY_PORT', 8793),
+    SQLSERVER_PROXY_MAX_BODY_BYTES: getInt('SQLSERVER_PROXY_MAX_BODY_BYTES', 131072),
+    SQLSERVER_PROXY_POOL_LIMIT: getInt('SQLSERVER_PROXY_POOL_LIMIT', 10),
+    SQLSERVER_PROXY_KEY_ID: get('SQLSERVER_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    SQLSERVER_PROXY_SECRET: get('SQLSERVER_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    SQLSERVER_PROXY_TIMEOUT_MS: getInt('SQLSERVER_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    SQLSERVER_PROXY_REQUIRE_SIGNING: getBool('SQLSERVER_PROXY_REQUIRE_SIGNING', true),
+    SQLSERVER_PROXY_SIGNING_WINDOW_MS: getInt('SQLSERVER_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_SQLSERVER_PROXY: getBool('USE_SQLSERVER_PROXY', false),
     KV_REMOTE_URL: get('KV_REMOTE_URL', ''),
     KV_REMOTE_KEY_ID: get('KV_REMOTE_KEY_ID', ''),
     KV_REMOTE_SECRET: get('KV_REMOTE_SECRET', ''),
@@ -112,12 +214,23 @@ export const Env = Object.freeze({
     REDIS_HOST: get('REDIS_HOST', 'localhost'),
     REDIS_PORT: getInt('REDIS_PORT', 6379),
     REDIS_PASSWORD: get('REDIS_PASSWORD', ''),
+    REDIS_DB: getInt('REDIS_DB', 0),
     REDIS_URL: get('REDIS_URL', ''),
     MONGO_URI: get('MONGO_URI'),
     MONGO_DB: get('MONGO_DB', 'zintrust_cache'),
     // Queue
     QUEUE_CONNECTION: get('QUEUE_CONNECTION', ''),
     QUEUE_DRIVER: get('QUEUE_DRIVER', ''),
+    QUEUE_HTTP_PROXY_ENABLED: getBool('QUEUE_HTTP_PROXY_ENABLED', false),
+    QUEUE_HTTP_PROXY_GATEWAY_ENABLED: getBool('QUEUE_HTTP_PROXY_GATEWAY_ENABLED', true),
+    QUEUE_HTTP_PROXY_URL: get('QUEUE_HTTP_PROXY_URL', ''),
+    QUEUE_HTTP_PROXY_PATH: get('QUEUE_HTTP_PROXY_PATH', '/api/_sys/queue/rpc'),
+    QUEUE_HTTP_PROXY_KEY_ID: get('QUEUE_HTTP_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    QUEUE_HTTP_PROXY_KEY: get('QUEUE_HTTP_PROXY_KEY', PROXY_SECRET_FALLBACK),
+    QUEUE_HTTP_PROXY_TIMEOUT_MS: getInt('QUEUE_HTTP_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    QUEUE_HTTP_PROXY_MAX_SKEW_MS: getInt('QUEUE_HTTP_PROXY_MAX_SKEW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    QUEUE_HTTP_PROXY_NONCE_TTL_MS: getInt('QUEUE_HTTP_PROXY_NONCE_TTL_MS', 120000),
+    QUEUE_HTTP_PROXY_MIDDLEWARE: get('QUEUE_HTTP_PROXY_MIDDLEWARE', ''),
     // Rate Limiting
     RATE_LIMIT_STORE: get('RATE_LIMIT_STORE', ''),
     RATE_LIMIT_DRIVER: get('RATE_LIMIT_DRIVER', ''),
@@ -145,6 +258,9 @@ export const Env = Object.freeze({
     ENABLE_MICROSERVICES: getBool('ENABLE_MICROSERVICES', false),
     TOKEN_TTL: getInt('TOKEN_TTL', 3600000),
     TOKEN_LENGTH: getInt('TOKEN_LENGTH', 32),
+    CSRF_STORE: get('CSRF_STORE', ''),
+    CSRF_DRIVER: get('CSRF_DRIVER', ''),
+    CSRF_REDIS_DB: getInt('CSRF_REDIS_DB', 1),
     // Encryption interop
     ENCRYPTION_CIPHER: get('ENCRYPTION_CIPHER', ''),
     // Deployment
@@ -160,6 +276,7 @@ export const Env = Object.freeze({
     LOG_LEVEL: get('LOG_LEVEL', getDefaultLogLevel()),
     LOG_FORMAT: get('LOG_FORMAT', 'text'),
     LOG_CHANNEL: get('LOG_CHANNEL', ''),
+    DOCKER_WORKER: getBool('DOCKER_WORKER', false),
     DISABLE_LOGGING: getBool('DISABLE_LOGGING', false),
     LOG_HTTP_REQUEST: getBool('LOG_HTTP_REQUEST', false),
     LOG_TO_FILE: getBool('LOG_TO_FILE', false),
@@ -173,6 +290,7 @@ export const Env = Object.freeze({
     ZINTRUST_ENV_IN_FILE: get('ZINTRUST_ENV_IN_FILE', '.env'),
     ZINTRUST_SECRETS_PROVIDER: get('ZINTRUST_SECRETS_PROVIDER', ''),
     ZINTRUST_ALLOW_AUTO_INSTALL: get('ZINTRUST_ALLOW_AUTO_INSTALL', ''),
+    WORKER_SHUTDOWN_ON_APP_EXIT: getBool('WORKER_SHUTDOWN_ON_APP_EXIT', true),
     // Cloudflare Credentials
     CLOUDFLARE_ACCOUNT_ID: get('CLOUDFLARE_ACCOUNT_ID', ''),
     CLOUDFLARE_API_TOKEN: get('CLOUDFLARE_API_TOKEN', ''),
@@ -188,9 +306,9 @@ export const Env = Object.freeze({
     HOME: get('HOME', ''),
     USERPROFILE: get('USERPROFILE', ''),
     // Template/Misc
-    TEMPLATE_COPYRIGHT: get('TEMPLATE_COPYRIGHT', '© 2025 ZinTrust Framework. All rights reserved.'),
+    TEMPLATE_COPYRIGHT: get('TEMPLATE_COPYRIGHT', `© ${new Date().getFullYear()} ZinTrust Framework. All rights reserved.`),
     SERVICE_NAME: get('SERVICE_NAME', ''),
-    APP_MODE: get('APP_MODE', ''),
+    APP_MODE: get('APP_MODE', get('NODE_ENV', 'development')),
     APP_PORT: getInt('APP_PORT', 3000),
     RUNTIME: get('RUNTIME', ''),
     // Paths (safely constructed for Node.js environments)
@@ -213,7 +331,15 @@ export const Env = Object.freeze({
             if (processLike.platform === 'win32') {
                 return [String.raw `C:\Windows\System32`, String.raw `C:\Windows`, binDir].join(';');
             }
-            return ['/usr/bin', '/bin', '/usr/sbin', '/sbin', binDir].join(':');
+            return [
+                '/opt/homebrew/bin',
+                '/usr/local/bin',
+                '/usr/bin',
+                '/bin',
+                '/usr/sbin',
+                '/sbin',
+                binDir,
+            ].join(':');
         }
         catch {
             // Fallback for non-Node environments
@@ -221,3 +347,19 @@ export const Env = Object.freeze({
         }
     })(),
 });
+export const buildRedisUrl = () => {
+    const raw = get('REDIS_URL', '').trim();
+    if (raw !== '')
+        return raw;
+    const host = get('REDIS_HOST', 'localhost');
+    const port = getInt('REDIS_PORT', 6379);
+    const password = get('REDIS_PASSWORD', '');
+    const db = getInt('REDIS_QUEUE_DB', 0);
+    let url = 'redis://';
+    if (password.trim() !== '')
+        url += `:${encodeURIComponent(password)}@`;
+    url += `${host}:${port}`;
+    if (db > 0)
+        url += `/${db}`;
+    return url;
+};

package/src/config/index.d.ts

@@ -28,6 +28,7 @@ export declare const config: Readonly<{
         readonly isProduction: () => boolean;
         readonly isTesting: () => boolean;
         readonly debug: boolean;
+        readonly dockerWorker: boolean;
         readonly timezone: string;
         readonly requestTimeout: number;
         readonly maxBodySize: number;

package/src/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;8BAZc,CAAC;;;;;;;;;;;;;;;;;;;;2EAAC,CAAA;;;;;;;;;;;;;;;;;;;;8BAD2B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAmBrD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAKA,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;8BAZc,CAAC;;;;;;;;;;;;;;;;;;;;2EAAC,CAAA;;;;;;;;;;;;;;;;;;;;8BAD2B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2BomB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAHzpB,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC"}

package/src/config/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/config/logger.ts"],"names":[],"mappings":"AAQA,UAAU,OAAO;IACf,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClE;AA4VD,eAAO,MAAM,aAAa,QAAa,OAAO,CAAC,MAAM,EAAE,CAYtD,CAAC;AAEF,eAAO,MAAM,MAAM;qBAzJQ,MAAM,SAAS,OAAO,aAAa,MAAM,KAAG,IAAI;oBAsBjD,MAAM,SAAS,OAAO,aAAa,MAAM,KAAG,IAAI;oBAoBhD,MAAM,SAAS,OAAO,aAAa,MAAM,KAAG,IAAI;qBAoB/C,MAAM,UAAU,OAAO,aAAa,MAAM,KAAG,IAAI;qBA0BjD,MAAM,UAAU,OAAO,aAAa,MAAM,KAAG,IAAI;yBAmDrC,OAAO,CAAC,MAAM,EAAE,CAAC;mBArBtB,MAAM,KAAG,OAAO;EA2ChD,CAAC;AAEH,eAAe,MAAM,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/config/logger.ts"],"names":[],"mappings":"AASA,UAAU,OAAO;IACf,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClE;AAiYD,eAAO,MAAM,aAAa,QAAa,OAAO,CAAC,MAAM,EAAE,CAYtD,CAAC;AAEF,eAAO,MAAM,MAAM;qBA5JQ,MAAM,SAAS,OAAO,aAAa,MAAM,KAAG,IAAI;oBAqBjD,MAAM,SAAS,OAAO,aAAa,MAAM,KAAG,IAAI;oBAqBhD,MAAM,SAAS,OAAO,aAAa,MAAM,KAAG,IAAI;qBAqB/C,MAAM,UAAU,OAAO,aAAa,MAAM,KAAG,IAAI;qBA2BjD,MAAM,UAAU,OAAO,aAAa,MAAM,KAAG,IAAI;yBAoDrC,OAAO,CAAC,MAAM,EAAE,CAAC;mBArBtB,MAAM,KAAG,OAAO;EA2ChD,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/src/config/logger.js

@@ -5,10 +5,42 @@
  */
 import { appConfig } from './app.js';
 import { Env } from './env.js';
-const isDevelopment = () => appConfig.isDevelopment();
 const isProduction = () => appConfig.isProduction();
 const getLogFormat = () => Env.get('LOG_FORMAT', 'text');
 const isJsonFormat = (value) => value === 'json';
+// Log level priority: lower means more verbose
+const levelPriority = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+    fatal: 4,
+};
+const getConfiguredLogLevel = () => {
+    const raw = Env.get('LOG_LEVEL', Env.LOG_LEVEL ?? 'debug')
+        .trim()
+        .toLowerCase();
+    if (raw === 'debug')
+        return 'debug';
+    if (raw === 'info')
+        return 'info';
+    if (raw === 'warn')
+        return 'warn';
+    if (raw === 'error')
+        return 'error';
+    return 'info';
+};
+const shouldEmit = (level) => {
+    // If global disable, never emit
+    if (Env.getBool('DISABLE_LOGGING', false))
+        return false;
+    // Respect configured LOG_LEVEL
+    const configured = getConfiguredLogLevel();
+    const lp = levelPriority[level];
+    const configuredLp = levelPriority[configured] ?? levelPriority['info'];
+    return lp >= configuredLp;
+};
+// TODO developers should be able to customize sensitive fields via config
 const SENSITIVE_FIELDS = new Set([
     'password',
     'token',
@@ -78,6 +110,9 @@ const getFileWriter = () => {
     });
 };
 const shouldLogToFile = () => {
+    // Respect global disable
+    if (Env.getBool('DISABLE_LOGGING', false))
+        return false;
     // Prefer dynamic lookup so late-bound env (tests, some runtimes) is respected.
     const channel = Env.get('LOG_CHANNEL', '').trim().toLowerCase();
     const channelWantsFile = channel === 'file' || channel === 'all';
@@ -182,26 +217,29 @@ const emitCloudLogs = (event) => {
 };
 // Private helper functions
 const logDebug = (message, data, category) => {
+    if (!shouldEmit('debug'))
+        return;
     String(category);
-    if (isDevelopment()) {
-        const timestamp = new Date().toISOString();
-        const out = formatLogMessage({ level: 'debug', message, data, category });
-        writeToFile(buildFileLine({ formatted: out, data }));
-        if (isJsonFormat(getLogFormat())) {
-            console.debug(out); // eslint-disable-line no-console
-            return;
-        }
+    const timestamp = new Date().toISOString();
+    const out = formatLogMessage({ level: 'debug', message, data, category });
+    writeToFile(buildFileLine({ formatted: out, data }));
+    if (isJsonFormat(getLogFormat())) {
+        console.debug(out); // eslint-disable-line no-console
+    }
+    else {
         console.debug(out, data ?? ''); // eslint-disable-line no-console
-        emitCloudLogs({
-            timestamp,
-            level: 'debug',
-            message,
-            category,
-            data: redactSensitiveData(data),
-        });
     }
+    emitCloudLogs({
+        timestamp,
+        level: 'debug',
+        message,
+        category,
+        data: redactSensitiveData(data),
+    });
 };
 const logInfo = (message, data, category) => {
+    if (!shouldEmit('info'))
+        return;
     String(category);
     const timestamp = new Date().toISOString();
     const out = formatLogMessage({ level: 'info', message, data, category });
@@ -221,6 +259,8 @@ const logInfo = (message, data, category) => {
     });
 };
 const logWarn = (message, data, category) => {
+    if (!shouldEmit('warn'))
+        return;
     String(category);
     const timestamp = new Date().toISOString();
     const out = formatLogMessage({ level: 'warn', message, data, category });
@@ -240,6 +280,8 @@ const logWarn = (message, data, category) => {
     });
 };
 const logError = (message, error, category) => {
+    if (!shouldEmit('error'))
+        return;
     const errorMessage = getErrorMessage(error);
     String(category);
     const timestamp = new Date().toISOString();
@@ -265,6 +307,8 @@ const logError = (message, error, category) => {
     });
 };
 const logFatal = (message, error, category) => {
+    if (!shouldEmit('fatal'))
+        return;
     const errorMessage = getErrorMessage(error);
     String(category);
     const timestamp = new Date().toISOString();

package/src/config/mail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mail.d.ts","sourceRoot":"","sources":["../../../src/config/mail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAItE,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C,CAAC,CAAC;AAmCH,QAAA,MAAM,gBAAgB,QAAO;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,SAAS,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;CAgGvE,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAqB7D,eAAO,MAAM,UAAU,EAAE,UAYvB,CAAC"}
+{"version":3,"file":"mail.d.ts","sourceRoot":"","sources":["../../../src/config/mail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAItE,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C,CAAC,CAAC;AA6FH,QAAA,MAAM,gBAAgB,QAAO;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,SAAS,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;CA6CvE,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAqB7D,eAAO,MAAM,UAAU,EAAE,UAYvB,CAAC"}

package/src/config/mail.js

@@ -35,16 +35,11 @@ const getMailDriver = (config, name) => {
     }
     throw ErrorFactory.createConfigError(`Mail driver not configured: ${selected}`);
 };
-const createMailConfig = () => {
-    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Mail) ?? {};
-    const baseDefault = Env.get('MAIL_CONNECTION', Env.get('MAIL_DRIVER', 'disabled'))
-        .trim()
-        .toLowerCase();
-    const baseFrom = {
-        address: Env.get('MAIL_FROM_ADDRESS', ''),
-        name: Env.get('MAIL_FROM_NAME', ''),
-    };
-    const baseDrivers = {
+/**
+ * Create base mail drivers configuration
+ */
+const createMailDrivers = () => {
+    return {
         disabled: {
             driver: 'disabled',
         },
@@ -97,6 +92,17 @@ const createMailConfig = () => {
             region: Env.get('AWS_REGION', 'us-east-1'),
         },
     };
+};
+const createMailConfig = () => {
+    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Mail) ?? {};
+    const baseDefault = Env.get('MAIL_CONNECTION', Env.get('MAIL_DRIVER', 'disabled'))
+        .trim()
+        .toLowerCase();
+    const baseFrom = {
+        address: Env.get('MAIL_FROM_ADDRESS', ''),
+        name: Env.get('MAIL_FROM_NAME', ''),
+    };
+    const baseDrivers = createMailDrivers();
     const mailConfigObj = {
         /**
          * Default mail driver

package/src/config/middleware.d.ts

@@ -43,6 +43,11 @@ export declare const MiddlewareKeys: Readonly<{
 }>;
 export type MiddlewareKey = keyof typeof MiddlewareKeys;
 export declare function createMiddlewareConfig(): MiddlewareConfigType;
+/**
+ * Clear the middleware configuration cache
+ * This ensures fresh config loading in watch mode
+ */
+export declare const clearMiddlewareConfigCache: () => void;
 export declare const middlewareConfig: MiddlewareConfigType;
 export default middlewareConfig;
 //# sourceMappingURL=middleware.d.ts.map

package/src/config/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/config/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA+DzD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,qBAAqB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;EAiBuB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,cAAc,CAAC;AA0MxD,wBAAgB,sBAAsB,IAAI,oBAAoB,CAqB7D;AA0BD,eAAO,MAAM,gBAAgB,EAAE,oBAY7B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/config/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA+DzD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,qBAAqB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;EAiBuB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,cAAc,CAAC;AA0MxD,wBAAgB,sBAAsB,IAAI,oBAAoB,CAkC7D;AAID;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAAO,IAE7C,CAAC;AAwBF,eAAO,MAAM,gBAAgB,EAAE,oBAY7B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}