@zintrust/core 0.1.39 → 0.1.41

package/src/runtime/WorkerAdapterImports.js

@@ -0,0 +1,17 @@
+// Worker-only adapter auto-imports for bundler-based runtimes (e.g. Cloudflare Workers).
+// Keep this list limited to database adapters needed by runtime config.
+// These imports resolve against the host project (developer working directory)
+// via the @/ alias configured by the ZinTrust app templates.
+const tryImportOptional = async () => {
+    try {
+        await import('../zintrust.plugins.wg.js');
+    }
+    catch {
+        // Log and swallow errors since these are optional imports that may not exist in all projects.
+    }
+};
+const ready = await tryImportOptional();
+export const WorkerAdapterImports = Object.freeze({
+    loaded: true,
+    ready,
+});

package/src/runtime/WorkersModule.d.ts

@@ -0,0 +1,6 @@
+type WorkersModule = typeof import('../../packages/workers/src/index.js');
+type QueueMonitorModule = typeof import('../../packages/queue-monitor/src/index.js');
+export declare const loadWorkersModule: () => Promise<WorkersModule>;
+export declare const loadQueueMonitorModule: () => Promise<QueueMonitorModule>;
+export {};
+//# sourceMappingURL=WorkersModule.d.ts.map

package/src/runtime/WorkersModule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkersModule.d.ts","sourceRoot":"","sources":["../../../src/runtime/WorkersModule.ts"],"names":[],"mappings":"AAOA,KAAK,aAAa,GAAG,cAAc,mBAAmB,CAAC,CAAC;AACxD,KAAK,kBAAkB,GAAG,cAAc,yBAAyB,CAAC,CAAC;AA8PnE,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,aAAa,CAiB/D,CAAC;AA2CF,eAAO,MAAM,sBAAsB,QAAa,OAAO,CAAC,kBAAkB,CAiBzE,CAAC"}

package/src/runtime/WorkersModule.js

@@ -0,0 +1,278 @@
+import * as Common from '../common/index.js';
+import { Logger } from '../config/logger.js';
+import * as fs from '../node-singletons/fs.js';
+import { createRequire } from '../node-singletons/module.js';
+import * as path from '../node-singletons/path.js';
+import { pathToFileURL } from '../node-singletons/url.js';
+const KNOWN_EXTENSIONS = ['.js', '.mjs', '.cjs', '.json', '.node'];
+const isNodeRuntime = () => typeof process !== 'undefined' && Boolean(process.versions?.node);
+const listJsFilesRecursive = (dir) => {
+    const out = [];
+    const stack = [dir];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        if (current === undefined)
+            continue;
+        let entries;
+        try {
+            entries = fs.readdirSync(current, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const full = path.join(current, entry.name);
+            if (entry.isDirectory()) {
+                stack.push(full);
+                continue;
+            }
+            if (entry.isFile() && full.endsWith('.js')) {
+                out.push(full);
+            }
+        }
+    }
+    return out;
+};
+const shouldConsiderSpecifier = (specifier) => {
+    if (!specifier.startsWith('./') && !specifier.startsWith('../'))
+        return false;
+    if (specifier.includes('?') || specifier.includes('#'))
+        return false;
+    const lower = specifier.toLowerCase();
+    return !KNOWN_EXTENSIONS.some((ext) => lower.endsWith(ext));
+};
+const resolveSpecifier = (filePath, specifier) => {
+    if (!shouldConsiderSpecifier(specifier))
+        return null;
+    const baseDir = path.dirname(filePath);
+    const resolved = path.resolve(baseDir, specifier);
+    try {
+        if (fs.statSync(resolved).isDirectory()) {
+            const indexJs = path.join(resolved, 'index.js');
+            if (fs.existsSync(indexJs))
+                return `${specifier.endsWith('/') ? specifier.slice(0, -1) : specifier}/index.js`;
+        }
+    }
+    catch {
+        // ignore stat errors
+    }
+    if (fs.existsSync(`${resolved}.js`))
+        return `${specifier}.js`;
+    return null;
+};
+const patchImportsInFile = (filePath) => {
+    let text;
+    try {
+        text = fs.readFileSync(filePath, 'utf8');
+    }
+    catch {
+        return 0;
+    }
+    let replacements = 0;
+    const rewrite = (match, quote, specifier) => {
+        const next = resolveSpecifier(filePath, specifier);
+        if (next === null)
+            return match;
+        replacements += 1;
+        return match.replace(`${quote}${specifier}${quote}`, `${quote}${next}${quote}`);
+    };
+    const updated = text
+        .replaceAll(/\bfrom\s+(['"])(\.[^'"]+)\1/g, rewrite)
+        .replaceAll(/\bimport\s+(['"])(\.[^'"]+)\1/g, rewrite)
+        .replaceAll(/\bimport\s*\(\s*(['"])(\.[^'"]+)\1\s*\)/g, rewrite);
+    if (updated !== text) {
+        try {
+            fs.writeFileSync(filePath, updated, 'utf8');
+        }
+        catch {
+            return 0;
+        }
+    }
+    return replacements;
+};
+const patchPackageDist = (packageName) => {
+    if (!isNodeRuntime())
+        return { replacements: 0, filesChanged: 0 };
+    let entryPath;
+    try {
+        const require = createRequire(import.meta.url);
+        entryPath = require.resolve(packageName);
+    }
+    catch {
+        return { replacements: 0, filesChanged: 0 };
+    }
+    const distDir = path.dirname(entryPath);
+    if (!fs.existsSync(distDir))
+        return { replacements: 0, filesChanged: 0 };
+    const files = listJsFilesRecursive(distDir);
+    let replacements = 0;
+    let filesChanged = 0;
+    for (const file of files) {
+        const changes = patchImportsInFile(file);
+        if (changes > 0) {
+            replacements += changes;
+            filesChanged += 1;
+        }
+    }
+    return { replacements, filesChanged };
+};
+const patchWorkersDist = () => patchPackageDist('@zintrust/workers');
+const patchQueueMonitorDist = () => patchPackageDist('@zintrust/queue-monitor');
+const resolveLocalModuleUrl = (packageDir) => {
+    if (!isNodeRuntime())
+        return null;
+    const root = process.cwd();
+    const mode = (process.env['NODE_ENV'] ?? 'development').toString().trim().toLowerCase();
+    const isProductionMode = mode === 'production' || mode === 'pro' || mode === 'prod';
+    const runFromSource = typeof Common.runFromSource === 'function' ? Common.runFromSource() : false;
+    const preferSource = runFromSource || !isProductionMode;
+    const candidates = preferSource
+        ? [
+            path.join(root, 'packages', packageDir, 'src', 'index.ts'),
+            path.join(root, 'dist', 'packages', packageDir, 'src', 'index.js'),
+        ]
+        : [
+            path.join(root, 'dist', 'packages', packageDir, 'src', 'index.js'),
+            path.join(root, 'packages', packageDir, 'src', 'index.ts'),
+        ];
+    for (const candidate of candidates) {
+        if (fs.existsSync(candidate)) {
+            return pathToFileURL(candidate).href;
+        }
+    }
+    return null;
+};
+const importLocalModule = async (packageDir, packageName) => {
+    const url = resolveLocalModuleUrl(packageDir);
+    if (url === null || url === '' || url === undefined)
+        return null;
+    try {
+        return (await import(url));
+    }
+    catch (error) {
+        Logger.warn(`Failed to import local ${packageName} fallback`, error);
+        return null;
+    }
+};
+const importLocalWorkersModule = async () => importLocalModule('workers', '@zintrust/workers');
+const importLocalQueueMonitorModule = async () => importLocalModule('queue-monitor', '@zintrust/queue-monitor');
+let workersModulePromise;
+let patchAttempted = false;
+let patchAfterFailureAttempted = false;
+let queueMonitorModulePromise;
+let queueMonitorPatchAfterFailureAttempted = false;
+const applyInitialPatches = () => {
+    if (patchAttempted)
+        return;
+    patchAttempted = true;
+    const workersPatch = patchWorkersDist();
+    if (workersPatch.filesChanged > 0) {
+        Logger.warn('Rewrote @zintrust/workers ESM specifiers before import', workersPatch);
+    }
+    const monitorPatch = patchQueueMonitorDist();
+    if (monitorPatch.filesChanged > 0) {
+        Logger.warn('Rewrote @zintrust/queue-monitor ESM specifiers before import', monitorPatch);
+    }
+};
+const shouldRetryAfterFailure = (error) => {
+    if (patchAfterFailureAttempted)
+        return false;
+    const message = error instanceof Error ? error.message : String(error);
+    const code = error?.code;
+    return code === 'ERR_MODULE_NOT_FOUND' && message.includes('@zintrust/workers');
+};
+const handleImportFailure = async (error) => {
+    if (shouldRetryAfterFailure(error)) {
+        patchAfterFailureAttempted = true;
+        const { replacements, filesChanged } = patchWorkersDist();
+        if (filesChanged > 0) {
+            Logger.warn('Rewrote @zintrust/workers ESM specifiers after import failure', {
+                filesChanged,
+                replacements,
+            });
+            workersModulePromise = import('@zintrust/workers');
+            return workersModulePromise;
+        }
+    }
+    const localFallback = await importLocalWorkersModule();
+    if (localFallback) {
+        workersModulePromise = Promise.resolve(localFallback);
+        return localFallback;
+    }
+    throw error;
+};
+const tryLocalFallback = async () => {
+    const localFallback = await importLocalWorkersModule();
+    if (localFallback) {
+        workersModulePromise = Promise.resolve(localFallback);
+        return localFallback;
+    }
+    return null;
+};
+export const loadWorkersModule = async () => {
+    applyInitialPatches();
+    if (workersModulePromise === undefined) {
+        const localFallback = await tryLocalFallback();
+        if (localFallback) {
+            return localFallback;
+        }
+    }
+    workersModulePromise ??= import('@zintrust/workers');
+    try {
+        return await workersModulePromise;
+    }
+    catch (error) {
+        return handleImportFailure(error);
+    }
+};
+const shouldRetryQueueMonitorAfterFailure = (error) => {
+    if (queueMonitorPatchAfterFailureAttempted)
+        return false;
+    const message = error instanceof Error ? error.message : String(error);
+    const code = error?.code;
+    return code === 'ERR_MODULE_NOT_FOUND' && message.includes('@zintrust/queue-monitor');
+};
+const handleQueueMonitorImportFailure = async (error) => {
+    if (shouldRetryQueueMonitorAfterFailure(error)) {
+        queueMonitorPatchAfterFailureAttempted = true;
+        const { replacements, filesChanged } = patchQueueMonitorDist();
+        if (filesChanged > 0) {
+            Logger.warn('Rewrote @zintrust/queue-monitor ESM specifiers after import failure', {
+                filesChanged,
+                replacements,
+            });
+            queueMonitorModulePromise = import('@zintrust/queue-monitor');
+            return queueMonitorModulePromise;
+        }
+    }
+    const localFallback = await importLocalQueueMonitorModule();
+    if (localFallback) {
+        queueMonitorModulePromise = Promise.resolve(localFallback);
+        return localFallback;
+    }
+    throw error;
+};
+const tryQueueMonitorLocalFallback = async () => {
+    const localFallback = await importLocalQueueMonitorModule();
+    if (localFallback) {
+        queueMonitorModulePromise = Promise.resolve(localFallback);
+        return localFallback;
+    }
+    return null;
+};
+export const loadQueueMonitorModule = async () => {
+    applyInitialPatches();
+    if (queueMonitorModulePromise === undefined) {
+        const localFallback = await tryQueueMonitorLocalFallback();
+        if (localFallback) {
+            return localFallback;
+        }
+    }
+    queueMonitorModulePromise ??= import('@zintrust/queue-monitor');
+    try {
+        return await queueMonitorModulePromise;
+    }
+    catch (error) {
+        return handleQueueMonitorImportFailure(error);
+    }
+};

package/src/runtime/adapters/CloudflareAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/CloudflareAdapter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;mBACY,aAAa,GAAG,cAAc;IAoD7C;;;OAGG;qBACc,OAAO;IAKxB;;;OAGG;qBACc,MAAM,GAAG,OAAO;EAIjC,CAAC;AA4IH;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH"}
+{"version":3,"file":"CloudflareAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/CloudflareAdapter.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;mBACY,aAAa,GAAG,cAAc;IAwD7C;;;OAGG;qBACc,OAAO;IAKxB;;;OAGG;qBACc,MAAM,GAAG,OAAO;EAIjC,CAAC;AAwJH;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH"}

package/src/runtime/adapters/CloudflareAdapter.js

@@ -2,6 +2,8 @@
  * Runtime adapter for Cloudflare Workers
  */
 import { appConfig } from '../../config/index.js';
+import { Cloudflare } from '../../config/cloudflare.js';
+import { Env } from '../../config/env.js';
 import { Logger } from '../../config/logger.js';
 import { createMockHttpObjects, ErrorResponse, HttpResponse } from '../RuntimeAdapter.js';
 /**
@@ -14,6 +16,10 @@ export const CloudflareAdapter = Object.freeze({
      * Create a new Cloudflare adapter instance
      */
     create(config) {
+        const workersEnv = Cloudflare.getWorkersEnv();
+        if (workersEnv !== null) {
+            Env.setSource(() => workersEnv);
+        }
         const logger = config.logger ?? createDefaultLogger();
         return {
             platform: 'cloudflare',
@@ -70,6 +76,7 @@ async function handleCloudflareRequest(adapter, config, logger, event) {
         const platformRequest = adapter.parseRequest(request);
         // Read request body
         const body = request.method !== 'GET' && request.method !== 'HEAD' ? await request.text() : null;
+        platformRequest.body = body;
         // Create mock Node.js request/response objects
         const { req, res, responseData } = createMockHttpObjects(platformRequest);
         // Set request timeout
@@ -100,7 +107,11 @@ async function handleCloudflareRequest(adapter, config, logger, event) {
         return response.toResponse();
     }
     catch (error) {
-        Logger.error('Cloudflare handler error', error);
+        const err = error;
+        Logger.error('Cloudflare handler error', err);
+        if (typeof err?.stack === 'string' && err.stack.trim() !== '') {
+            Logger.error('Cloudflare handler stack', err.stack);
+        }
         const errorResponse = ErrorResponse.create(500, 'Internal Server Error', appConfig.isDevelopment() ? { message: error.message } : undefined);
         return errorResponse.toResponse();
     }
@@ -121,6 +132,7 @@ function parseCloudflareRequest(event) {
         headers,
         query: Object.fromEntries(url.searchParams.entries()),
         remoteAddr: headers['cf-connecting-ip']?.toString() || '0.0.0.0',
+        signal: event.signal,
     };
 }
 /**
@@ -137,11 +149,16 @@ function formatCloudflareResponse(response) {
             headers.set(key, value);
         }
     }
-    let body = '';
+    let body = null;
     if (response.body !== null && response.body !== undefined) {
         if (typeof response.body === 'string') {
             body = response.body;
         }
+        else if (typeof ReadableStream !== 'undefined' &&
+            (response.body instanceof ReadableStream ||
+                response.body?.constructor?.name === 'ReadableStream')) {
+            body = response.body;
+        }
         else {
             body = response.body.toString();
         }

package/src/runtime/adapters/DenoAdapter.js

@@ -141,6 +141,7 @@ function parseDenoRequest(event) {
         headers,
         query: Object.fromEntries(url.searchParams.entries()),
         remoteAddr: headers['x-forwarded-for']?.toString().split(',')[0] ?? '0.0.0.0',
+        signal: event.signal,
     };
 }
 /**

package/src/runtime/adapters/FargateAdapter.js

@@ -48,7 +48,7 @@ export function createFargateAdapter(config) {
             return {
                 nodeEnv: Env.NODE_ENV,
                 runtime: 'fargate',
-                dbConnection: Env.DB_CONNECTION,
+                dbConnection: Env.DB_CONNECTION || 'sqlite',
                 dbHost: Env.DB_HOST,
                 dbPort: Env.DB_PORT,
             };

package/src/runtime/adapters/LambdaAdapter.js

@@ -45,7 +45,7 @@ export const LambdaAdapter = Object.freeze({
                 return {
                     nodeEnv: Env.NODE_ENV,
                     runtime: 'lambda',
-                    dbConnection: Env.DB_CONNECTION,
+                    dbConnection: Env.get('DB_CONNECTION', 'sqlite'),
                     dbHost: Env.DB_HOST,
                     dbPort: Env.DB_PORT,
                 };

package/src/runtime/adapters/NodeServerAdapter.js

@@ -102,7 +102,7 @@ function getNodeEnvironment() {
     return {
         nodeEnv: Env.NODE_ENV,
         runtime: 'nodejs',
-        dbConnection: Env.DB_CONNECTION,
+        dbConnection: Env.get('DB_CONNECTION', 'sqlite'),
         dbHost: Env.DB_HOST,
         dbPort: Env.DB_PORT,
     };

package/src/runtime/detectRuntime.d.ts

@@ -0,0 +1,10 @@
+export type RuntimeMode = 'cloudflare-workers' | 'containers' | 'node-server';
+export declare const isNodeRuntime: () => boolean;
+export declare const getRuntimeMode: () => RuntimeMode;
+export declare const detectRuntime: () => {
+    isCloudflare: boolean;
+    isNode: boolean;
+    isDeno: boolean;
+    isBun: boolean;
+};
+//# sourceMappingURL=detectRuntime.d.ts.map

package/src/runtime/detectRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectRuntime.d.ts","sourceRoot":"","sources":["../../../src/runtime/detectRuntime.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG,oBAAoB,GAAG,YAAY,GAAG,aAAa,CAAC;AAE9E,eAAO,MAAM,aAAa,QAAO,OAUhC,CAAC;AAUF,eAAO,MAAM,cAAc,QAAO,WA6BjC,CAAC;AAEF,eAAO,MAAM,aAAa,QAAO;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAwBhB,CAAC"}

package/src/runtime/detectRuntime.js

@@ -0,0 +1,57 @@
+import { ZintrustLang } from '../lang/lang.js';
+export const isNodeRuntime = () => {
+    // Avoid importing any `node:*` modules so this file remains Worker-safe.
+    // In Workers/Deno, `process` is typically undefined.
+    return (typeof process !== ZintrustLang.UNDEFINED &&
+        typeof process === ZintrustLang.OBJECT &&
+        process !== null &&
+        typeof process.versions === ZintrustLang.OBJECT);
+};
+const getGlobalThis = () => {
+    if (typeof globalThis === ZintrustLang.UNDEFINED) {
+        return undefined;
+    }
+    return globalThis;
+};
+export const getRuntimeMode = () => {
+    // 1. Explicit override via env var (if available)
+    if (typeof process !== 'undefined' && process.env?.['RUNTIME_MODE'] !== undefined) {
+        return process.env['RUNTIME_MODE'];
+    }
+    // 2. Detect Cloudflare Workers
+    // @ts-ignore - navigator is available in workers
+    if (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') {
+        return 'cloudflare-workers';
+    }
+    // 3. Detect Container (Docker/Kubernetes)
+    // Usually indicated by specific env vars or filesystem characteristics,
+    // but simpler to assume Node + invalidating CF check = Node/Container
+    if (isNodeRuntime()) {
+        // Check for Docker-specific env vars if possible, or default to containers/node-server
+        if (typeof process !== 'undefined' &&
+            (process.env?.['DOCKER'] !== undefined ||
+                process.env?.['KUBERNETES_SERVICE_HOST'] !== undefined)) {
+            return 'containers';
+        }
+        return 'node-server';
+    }
+    // Default fallback
+    return 'node-server';
+};
+export const detectRuntime = () => {
+    const globalRef = getGlobalThis();
+    const isNode = isNodeRuntime();
+    const isCloudflare = typeof globalRef !== ZintrustLang.UNDEFINED &&
+        globalRef !== null &&
+        ((globalRef.caches !== undefined &&
+            typeof globalRef.caches !== ZintrustLang.UNDEFINED) ||
+            typeof globalRef.WebSocketPair === 'function' ||
+            typeof globalRef.CF !== ZintrustLang.UNDEFINED);
+    const isDeno = typeof globalRef !== ZintrustLang.UNDEFINED &&
+        globalRef !== null &&
+        typeof globalRef.Deno !== ZintrustLang.UNDEFINED;
+    const isBun = typeof globalRef !== ZintrustLang.UNDEFINED &&
+        globalRef !== null &&
+        typeof globalRef.Bun !== ZintrustLang.UNDEFINED;
+    return { isCloudflare, isNode, isDeno, isBun };
+};

package/src/runtime/useFileLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useFileLoader.d.ts","sourceRoot":"","sources":["../../../src/runtime/useFileLoader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;IAChC,4DAA4D;IAC5D,UAAU,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;IACpC,wFAAwF;IACxF,IAAI,EAAE,MAAM,MAAM,CAAC;IACnB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB;;;;OAIG;IACH,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC;AAyIH,eAAO,MAAM,aAAa,GAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,KAAG,UA+DzE,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"useFileLoader.d.ts","sourceRoot":"","sources":["../../../src/runtime/useFileLoader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;IAChC,4DAA4D;IAC5D,UAAU,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;IACpC,wFAAwF;IACxF,IAAI,EAAE,MAAM,MAAM,CAAC;IACnB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB;;;;OAIG;IACH,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC;AA2IH,eAAO,MAAM,aAAa,GAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,KAAG,UA8EzE,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/src/runtime/useFileLoader.js

@@ -71,6 +71,8 @@ const normalizeProjectRelativePath = (raw) => {
 const resolveWithinProjectRoot = (projectRoot, relativePath) => {
     const rootAbs = resolve(projectRoot);
     const candidateAbs = resolve(projectRoot, relativePath);
+    if (rootAbs === sep)
+        return candidateAbs;
     if (candidateAbs === rootAbs)
         return candidateAbs;
     if (!candidateAbs.startsWith(rootAbs + sep)) {
@@ -127,6 +129,20 @@ const importModule = async (filePath) => {
     return (await import(url));
 };
 export const useFileLoader = (...args) => {
+    const isWorkersRuntime = () => {
+        const g = globalThis;
+        return g.CF !== undefined || g.caches !== undefined || g.WebSocketPair !== undefined;
+    };
+    if (isWorkersRuntime()) {
+        return Object.freeze({
+            candidates: () => [],
+            path: () => '',
+            exists: () => false,
+            get() {
+                throw ErrorFactory.createConfigError('File loading is not supported in Workers runtime');
+            },
+        });
+    }
     const relativePath = args.length === 1
         ? normalizeProjectRelativePath(args[0])
         : normalizeProjectRelativePath(args.join('/'));

package/src/scripts/TemplateImportsCheck.js

@@ -1,5 +1,5 @@
-import * as fs from 'node:fs';
-import * as path from 'node:path';
+import * as fs from '../node-singletons/fs.js';
+import * as path from '../node-singletons/path.js';
 import ts from 'typescript';
 const TEMPLATES_ROOT = path.resolve(process.cwd(), 'src/templates');
 const bannedPrefixes = [

package/src/scripts/TemplateSync.js

@@ -9,8 +9,7 @@ import { Logger } from '../config/logger.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import * as crypto from '../node-singletons/crypto.js';
 import fs from '../node-singletons/fs.js';
-import * as path from '../node-singletons/path.js';
-import * as nodePath from 'node:path';
+import path from '../node-singletons/path.js';
 const __dirname = esmDirname(import.meta.url);
 const ROOT_DIR = path.resolve(__dirname, '../../');
 /**
@@ -117,10 +116,10 @@ const rewriteStarterTemplateImports = (relPath, content) => {
         return content;
     }
     const rewriteConfigAlias = (aliasSuffix) => {
-        const currentDir = nodePath.posix.dirname(relPath);
+        const currentDir = path.posix.dirname(relPath);
         const from = currentDir === '.' ? '' : currentDir;
         const target = aliasSuffix;
-        const relative = nodePath.posix.relative(from, target);
+        const relative = path.posix.relative(from, target);
         return relative.startsWith('.') ? relative : `./${relative}`;
     };
     // Starter templates should import framework APIs from the public package surface,

package/src/security/CsrfTokenManager.d.ts

@@ -2,6 +2,7 @@
  * CSRF Token Manager
  * Generate, validate, and bind CSRF tokens to sessions
  */
+import type { Redis } from 'ioredis';
 export interface CsrfTokenData {
     token: string;
     sessionId: string;
@@ -9,18 +10,26 @@ export interface CsrfTokenData {
     expiresAt: Date;
 }
 export interface ICsrfTokenManager {
-    generateToken(sessionId: string): string;
-    validateToken(sessionId: string, token: string): boolean;
-    invalidateToken(sessionId: string): void;
-    getTokenData(sessionId: string): CsrfTokenData | null;
-    refreshToken(sessionId: string): string | null;
-    cleanup(): number;
-    clear(): void;
-    getTokenCount(): number;
+    generateToken(sessionId: string): Promise<string>;
+    validateToken(sessionId: string, token: string): Promise<boolean>;
+    invalidateToken(sessionId: string): Promise<void>;
+    getTokenData(sessionId: string): Promise<CsrfTokenData | null>;
+    refreshToken(sessionId: string): Promise<string | null>;
+    cleanup(): Promise<number>;
+    clear(): Promise<void>;
+    getTokenCount(): Promise<number>;
 }
 export interface CsrfTokenManagerType {
-    create(): ICsrfTokenManager;
+    create(options?: CsrfTokenManagerOptions): ICsrfTokenManager;
 }
+export type CsrfStoreName = 'memory' | 'redis';
+export type CsrfTokenManagerOptions = {
+    store?: CsrfStoreName;
+    redis?: Redis;
+    keyPrefix?: string;
+    tokenLength?: number;
+    tokenTtlMs?: number;
+};
 /**
  * CsrfTokenManager namespace - sealed for immutability
  */

package/src/security/CsrfTokenManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CsrfTokenManager.d.ts","sourceRoot":"","sources":["../../../src/security/CsrfTokenManager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACzD,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACtD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/C,OAAO,IAAI,MAAM,CAAC;IAClB,KAAK,IAAI,IAAI,CAAC;IACd,aAAa,IAAI,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,IAAI,iBAAiB,CAAC;CAC7B;AAoED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,oBAE7B,CAAC"}
+{"version":3,"file":"CsrfTokenManager.d.ts","sourceRoot":"","sources":["../../../src/security/CsrfTokenManager.ts"],"names":[],"mappings":"AACA;;;GAGG;AAQH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC/D,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,iBAAiB,CAAC;CAC9D;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE/C,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAkSF;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,oBAE7B,CAAC"}