@zintrust/core 0.1.4 → 0.1.6

package/src/common/index.js

@@ -1,8 +1,8 @@
-import { ErrorFactory } from '../exceptions/ZintrustError';
-import * as fs from '../node-singletons/fs';
-import * as path from '../node-singletons/path';
-import { fileURLToPath } from '../node-singletons/url';
-export { AwsSigV4 } from './AwsSigV4';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import * as fs from '../node-singletons/fs.js';
+import * as path from '../node-singletons/path.js';
+import { fileURLToPath } from '../node-singletons/url.js';
+export { AwsSigV4 } from './AwsSigV4.js';
 // Mutable FileChecker used to abstract FS checks for easier testing/mocking
 export const FileChecker = {
     exists(filePath) {

package/src/common/uuid.js

@@ -1,4 +1,4 @@
-import { ErrorFactory } from '../exceptions/ZintrustError';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
 export const generateUuid = () => {
     if (typeof globalThis?.crypto?.randomUUID === 'function')
         return globalThis.crypto.randomUUID();
@@ -15,7 +15,7 @@ export async function generateSecureJobId(errMsg = 'Secure crypto API not availa
     }
     // Node fallback for environments without Web Crypto
     try {
-        const nodeCrypto = await import('../node-singletons/crypto');
+        const nodeCrypto = await import('../node-singletons/crypto.js');
         return nodeCrypto.randomBytes(16).toString('hex');
     }
     catch (error) {

package/src/config/FileLogWriter.js

@@ -4,10 +4,10 @@
  * Provides best-effort file logging with daily + size-based rotation.
  * This module imports Node built-ins and should be loaded only in Node environments.
  */
-import { ensureDirSafe } from '../common/index';
-import { Env } from './env';
-import * as fs from '../node-singletons/fs';
-import * as path from '../node-singletons/path';
+import { ensureDirSafe } from '../common/index.js';
+import { Env } from './env.js';
+import * as fs from '../node-singletons/fs.js';
+import * as path from '../node-singletons/path.js';
 const getCwdSafe = () => {
     try {
         if (typeof process === 'undefined' || typeof process.cwd !== 'function')

package/src/config/SecretsManager.d.ts

@@ -3,39 +3,7 @@
  * Abstracts secrets retrieval across different cloud platforms
  * Supports: AWS Secrets Manager, Parameter Store, Cloudflare KV, Deno env
  */
-export interface CloudflareKV {
-    get(key: string): Promise<string | null>;
-    put(key: string, value: string, options?: {
-        expirationTtl?: number;
-    }): Promise<void>;
-    delete(key: string): Promise<void>;
-    list(options?: {
-        prefix?: string;
-    }): Promise<{
-        keys: {
-            name: string;
-        }[];
-    }>;
-}
-export interface SecretConfig {
-    platform: 'aws' | 'cloudflare' | 'deno' | 'local';
-    region?: string;
-    kv?: CloudflareKV;
-}
-export interface SecretValue {
-    key: string;
-    value: string;
-    expiresAt?: number;
-    rotationEnabled?: boolean;
-}
-interface SecretsManagerInstance {
-    getSecret(key: string, options?: GetSecretOptions): Promise<string>;
-    setSecret(key: string, value: string, options?: SetSecretOptions): Promise<void>;
-    deleteSecret(key: string): Promise<void>;
-    rotateSecret(key: string): Promise<void>;
-    listSecrets(pattern?: string): Promise<string[]>;
-    clearCache(key?: string): void;
-}
+import type { GetSecretOptions, SecretConfig, SecretsManagerInstance, SetSecretOptions } from './type';
 /**
  * SecretsManager - Unified interface for retrieving secrets
  * Sealed namespace for immutability
@@ -91,14 +59,6 @@ export declare const SECRETS: Readonly<{
     readonly SESSION_SECRET: "session/secret";
     readonly CSRF_SECRET: "csrf/secret";
 }>;
-export interface GetSecretOptions {
-    cacheTtl?: number;
-    throwIfMissing?: boolean;
-}
-export interface SetSecretOptions {
-    expirationTtl?: number;
-    metadata?: Record<string, unknown>;
-}
 /**
  * Helper to get database credentials using secrets manager
  */
@@ -118,5 +78,4 @@ export interface JwtSecrets {
     secret: string;
     refreshSecret: string;
 }
-export {};
 //# sourceMappingURL=SecretsManager.d.ts.map

package/src/config/SecretsManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecretsManager.d.ts","sourceRoot":"","sources":["../../../src/config/SecretsManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,KAAK,GAAG,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,YAAY,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAID,UAAU,sBAAsB;IAC9B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AA8SD;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,YAAY,GAAG,sBAAsB;IAY1D;;OAEG;mBACkB,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;OAEG;mBACkB,MAAM,SAAS,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAItD;;OAEG;qBACc,MAAM,GAAG,IAAI;EAG9B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;EA0BT,CAAC;AAEZ,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAOzD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"SecretsManager.d.ts","sourceRoot":"","sources":["../../../src/config/SecretsManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAiTtB;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,YAAY,GAAG,sBAAsB;IAY1D;;OAEG;mBACkB,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;OAEG;mBACkB,MAAM,SAAS,MAAM,YAAY,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAItD;;OAEG;qBACc,MAAM,GAAG,IAAI;EAG9B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;EA0BT,CAAC;AAEZ;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAOzD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/src/config/SecretsManager.js

@@ -3,8 +3,8 @@
  * Abstracts secrets retrieval across different cloud platforms
  * Supports: AWS Secrets Manager, Parameter Store, Cloudflare KV, Deno env
  */
-import { Logger } from './logger';
-import { ErrorFactory } from '../exceptions/ZintrustError';
+import { Logger } from './logger.js';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
 let instance;
 function pruneCache(cache, maxEntries) {
     if (cache.size <= maxEntries)

package/src/config/StartupConfigValidator.d.ts

@@ -1,12 +1,4 @@
-export type StartupConfigValidationError = {
-    key: string;
-    value: unknown;
-    message: string;
-};
-export type StartupConfigValidationResult = {
-    valid: boolean;
-    errors: StartupConfigValidationError[];
-};
+import type { StartupConfigValidationResult } from './type';
 export declare const StartupConfigValidator: Readonly<{
     validate(): StartupConfigValidationResult;
     assertValid(): void;

package/src/config/StartupConfigValidator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StartupConfigValidator.d.ts","sourceRoot":"","sources":["../../../src/config/StartupConfigValidator.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,4BAA4B,GAAG;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC,CAAC;AAwFF,eAAO,MAAM,sBAAsB;gBACrB,6BAA6B;mBAuC1B,IAAI;EAQnB,CAAC;AAEH,eAAe,sBAAsB,CAAC"}
+{"version":3,"file":"StartupConfigValidator.d.ts","sourceRoot":"","sources":["../../../src/config/StartupConfigValidator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgC,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAiPhG,eAAO,MAAM,sBAAsB;gBACrB,6BAA6B;mBAc1B,IAAI;EAQnB,CAAC;AAEH,eAAe,sBAAsB,CAAC"}

package/src/config/StartupConfigValidator.js

@@ -1,5 +1,5 @@
-import { appConfig } from './app';
-import { ErrorFactory } from '../exceptions/ZintrustError';
+import { appConfig } from './app.js';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
 const isSensitiveKey = (key) => {
     const normalized = key.toLowerCase();
     return (normalized.includes('password') ||
@@ -45,33 +45,126 @@ const getEnvString = (key, defaultValue) => {
     const env = proc?.env ?? {};
     return env[key] ?? defaultValue;
 };
+const getEnvOptionalString = (key) => {
+    const proc = getProcessLike();
+    const env = proc?.env ?? {};
+    const value = env[key];
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed === '' ? undefined : trimmed;
+};
+const getEnvBoolLoose = (key, defaultValue) => {
+    const raw = getEnvOptionalString(key);
+    if (raw === undefined)
+        return defaultValue;
+    const normalized = raw.toLowerCase();
+    return normalized === 'true' || normalized === '1' || normalized === 'yes' || normalized === 'on';
+};
 const getEnvInt = (key, defaultValue) => {
     const raw = getEnvString(key, String(defaultValue));
     return Number.parseInt(raw, 10);
 };
+const requireEnvString = (errors, key, options = {}) => {
+    const value = getEnvOptionalString(key) ??
+        (options.aliases ?? []).reduce((found, alias) => {
+            if (found !== undefined)
+                return found;
+            return getEnvOptionalString(alias);
+        }, undefined);
+    if (value === undefined) {
+        pushError(errors, key, value, options.requiredMessage ?? `${key} is required`);
+        return undefined;
+    }
+    if (options.minLength !== undefined && value.length < options.minLength) {
+        pushError(errors, key, value, options.minLengthMessage ?? `${key} must be at least ${options.minLength} characters`);
+    }
+    return value;
+};
+const validateSqliteDbFileRequired = (errors, dbConnection) => {
+    // sqlite convenience: accept DB_DATABASE or DB_PATH
+    if ((dbConnection ?? '').toLowerCase() !== 'sqlite')
+        return;
+    const dbFile = getEnvOptionalString('DB_DATABASE') ?? getEnvOptionalString('DB_PATH');
+    if (dbFile === undefined) {
+        pushError(errors, 'DB_DATABASE', dbFile, 'DB_DATABASE (or DB_PATH) is required for sqlite');
+    }
+};
+const validateStrictRequiredEnv = (errors) => {
+    const requireEnv = getEnvBoolLoose('STARTUP_REQUIRE_ENV', false);
+    if (!requireEnv)
+        return;
+    requireEnvString(errors, 'NODE_ENV');
+    requireEnvString(errors, 'APP_NAME');
+    requireEnvString(errors, 'HOST');
+    const portRaw = requireEnvString(errors, 'PORT', {
+        aliases: ['APP_PORT'],
+        requiredMessage: 'PORT (or APP_PORT) is required',
+    });
+    if (portRaw !== undefined) {
+        const port = Number.parseInt(portRaw, 10);
+        validateIntRange(errors, 'PORT', port, 1, 65535);
+    }
+    const dbConnection = requireEnvString(errors, 'DB_CONNECTION');
+    requireEnvString(errors, 'APP_KEY', { minLength: 16 });
+    requireEnvString(errors, 'LOG_LEVEL');
+    requireEnvString(errors, 'LOG_CHANNEL');
+    validateSqliteDbFileRequired(errors, dbConnection);
+};
+const validateNodeEnv = (errors) => {
+    const nodeEnv = getEnvString('NODE_ENV', 'development');
+    validateEnum(errors, 'NODE_ENV', nodeEnv, ['development', 'production', 'testing', 'test']);
+};
+const validatePort = (errors) => {
+    // Port can be provided as PORT or APP_PORT. In non-strict mode we keep defaults.
+    const portFromPort = getEnvOptionalString('PORT');
+    const portFromAppPort = getEnvOptionalString('APP_PORT');
+    const portRaw = portFromPort ?? portFromAppPort;
+    if (portRaw === undefined) {
+        const appPort = getEnvInt('APP_PORT', 3000);
+        validateIntRange(errors, 'APP_PORT', appPort, 1, 65535);
+        return;
+    }
+    const parsed = Number.parseInt(portRaw, 10);
+    const key = portFromPort === undefined ? 'APP_PORT' : 'PORT';
+    validateIntRange(errors, key, parsed, 1, 65535);
+};
+const validateLogging = (errors) => {
+    const logFormat = getEnvString('LOG_FORMAT', 'text');
+    validateEnum(errors, 'LOG_FORMAT', logFormat, ['text', 'json']);
+    const logLevel = getEnvString('LOG_LEVEL', 'debug');
+    validateEnum(errors, 'LOG_LEVEL', logLevel, ['debug', 'info', 'warn', 'error']);
+    // Optional (but validated when provided): LOG_CHANNEL (starter apps often use this)
+    const logChannel = getEnvOptionalString('LOG_CHANNEL');
+    if (logChannel !== undefined) {
+        validateEnum(errors, 'LOG_CHANNEL', logChannel, ['console', 'file', 'all']);
+    }
+};
+const validateRotationAndTimeout = (errors) => {
+    const logRotationSize = getEnvInt('LOG_ROTATION_SIZE', 10485760);
+    validatePositiveInt(errors, 'LOG_ROTATION_SIZE', logRotationSize);
+    const logRotationDays = getEnvInt('LOG_ROTATION_DAYS', 7);
+    validatePositiveInt(errors, 'LOG_ROTATION_DAYS', logRotationDays);
+    const startupHealthTimeoutMs = getEnvInt('STARTUP_HEALTH_TIMEOUT_MS', 2500);
+    validatePositiveInt(errors, 'STARTUP_HEALTH_TIMEOUT_MS', startupHealthTimeoutMs);
+};
+const validateProductionAppKey = (errors) => {
+    if (!appConfig.isProduction())
+        return;
+    const appKey = getEnvString('APP_KEY', '');
+    if (appKey.trim().length < 16) {
+        pushError(errors, 'APP_KEY', appKey, 'APP_KEY must be set and at least 16 characters in production');
+    }
+};
 export const StartupConfigValidator = Object.freeze({
     validate() {
         const errors = [];
-        const nodeEnv = getEnvString('NODE_ENV', 'development');
-        validateEnum(errors, 'NODE_ENV', nodeEnv, ['development', 'production', 'testing', 'test']);
-        const appPort = getEnvInt('APP_PORT', 3000);
-        validateIntRange(errors, 'APP_PORT', appPort, 1, 65535);
-        const logFormat = getEnvString('LOG_FORMAT', 'text');
-        validateEnum(errors, 'LOG_FORMAT', logFormat, ['text', 'json']);
-        const logLevel = getEnvString('LOG_LEVEL', 'debug');
-        validateEnum(errors, 'LOG_LEVEL', logLevel, ['debug', 'info', 'warn', 'error']);
-        const logRotationSize = getEnvInt('LOG_ROTATION_SIZE', 10485760);
-        validatePositiveInt(errors, 'LOG_ROTATION_SIZE', logRotationSize);
-        const logRotationDays = getEnvInt('LOG_ROTATION_DAYS', 7);
-        validatePositiveInt(errors, 'LOG_ROTATION_DAYS', logRotationDays);
-        const startupHealthTimeoutMs = getEnvInt('STARTUP_HEALTH_TIMEOUT_MS', 2500);
-        validatePositiveInt(errors, 'STARTUP_HEALTH_TIMEOUT_MS', startupHealthTimeoutMs);
-        if (appConfig.isProduction()) {
-            const appKey = getEnvString('APP_KEY', '');
-            if (appKey.trim().length < 16) {
-                pushError(errors, 'APP_KEY', appKey, 'APP_KEY must be set and at least 16 characters in production');
-            }
-        }
+        validateStrictRequiredEnv(errors);
+        validateNodeEnv(errors);
+        validatePort(errors);
+        validateLogging(errors);
+        validateRotationAndTimeout(errors);
+        validateProductionAppKey(errors);
         return { valid: errors.length === 0, errors };
     },
     assertValid() {

package/src/config/app.d.ts

@@ -3,7 +3,7 @@
  * Core application settings
  * Sealed namespace for immutability
  */
-type StartMode = 'development' | 'production' | 'testing';
+import type { StartMode } from './type';
 declare const getSafeEnv: () => NodeJS.ProcessEnv;
 export declare const appConfig: Readonly<{
     /**

package/src/config/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/config/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,KAAK,SAAS,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;AAsC1D,QAAA,MAAM,UAAU,QAAO,MAAM,CAAC,UAuB7B,CAAC;AA0FF,eAAO,MAAM,SAAS;IA5EpB;;OAEG;;IAMH;;OAEG;;IAGH;;OAEG;;IAMH;;OAEG;;IAMH;;OAEG;kCACc,OAAO;IAIxB;;OAEG;iCACa,OAAO;IAIvB;;OAEG;8BACU,OAAO;IAIpB;;OAEG;;IAMH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;+BA3GkB,MAAM,CAAC,UAAU;EAiHY,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/config/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAA4B,SAAS,EAAE,MAAM,cAAc,CAAC;AAsCxE,QAAA,MAAM,UAAU,QAAO,MAAM,CAAC,UAuB7B,CAAC;AA0FF,eAAO,MAAM,SAAS;IA5EpB;;OAEG;;IAMH;;OAEG;;IAGH;;OAEG;;IAMH;;OAEG;;IAMH;;OAEG;kCACc,OAAO;IAIxB;;OAEG;iCACa,OAAO;IAIvB;;OAEG;8BACU,OAAO;IAIpB;;OAEG;;IAMH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;+BA3GkB,MAAM,CAAC,UAAU;EAiHY,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}

package/src/config/app.js

@@ -3,7 +3,7 @@
  * Core application settings
  * Sealed namespace for immutability
  */
-import { Env } from './env';
+import { Env } from './env.js';
 const getProcessLike = () => {
     return typeof process === 'undefined' ? undefined : process;
 };

package/src/config/broadcast.d.ts

@@ -4,32 +4,7 @@
  * Centralizes broadcast driver selection and provider env mappings.
  * Driver selection must be dynamic (tests may mutate process.env).
  */
-export type KnownBroadcastDriverName = 'inmemory' | 'pusher' | 'redis' | 'redishttps';
-export type InMemoryBroadcastDriverConfig = {
-    driver: 'inmemory';
-};
-export type PusherBroadcastDriverConfig = {
-    driver: 'pusher';
-    appId: string;
-    key: string;
-    secret: string;
-    cluster: string;
-    useTLS: boolean;
-};
-export type RedisBroadcastDriverConfig = {
-    driver: 'redis';
-    host: string;
-    port: number;
-    password: string;
-    channelPrefix: string;
-};
-export type RedisHttpsBroadcastDriverConfig = {
-    driver: 'redishttps';
-    endpoint: string;
-    token: string;
-    channelPrefix: string;
-};
-export type KnownBroadcastDriverConfig = InMemoryBroadcastDriverConfig | PusherBroadcastDriverConfig | RedisBroadcastDriverConfig | RedisHttpsBroadcastDriverConfig;
+import { KnownBroadcastDriverConfig } from './type';
 declare const _default: Readonly<{
     /**
      * Normalized broadcast driver name.

package/src/config/broadcast.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../../src/config/broadcast.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,CAAC;AAEtF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAClC,6BAA6B,GAC7B,2BAA2B,GAC3B,0BAA0B,GAC1B,+BAA+B,CAAC;;IA6BlC;;;;OAIG;kCACc,MAAM;IAIvB;;;OAGG;oCACgB,0BAA0B;;AAW/C,wBAAiD"}
+{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../../src/config/broadcast.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,0BAA0B,EAI3B,MAAM,cAAc,CAAC;;IA6BpB;;;;OAIG;kCACc,MAAM;IAIvB;;;OAGG;oCACgB,0BAA0B;;AAW/C,wBAAiD"}

package/src/config/broadcast.js

@@ -4,7 +4,7 @@
  * Centralizes broadcast driver selection and provider env mappings.
  * Driver selection must be dynamic (tests may mutate process.env).
  */
-import { Env } from './env';
+import { Env } from './env.js';
 const normalizeDriverName = (value) => value.trim().toLowerCase();
 const getPusherConfig = () => ({
     driver: 'pusher',

package/src/config/cache.d.ts

@@ -3,27 +3,7 @@
  * Caching drivers and settings
  * Sealed namespace for immutability
  */
-type MemoryCacheDriverConfig = {
-    driver: 'memory';
-    ttl: number;
-};
-type RedisCacheDriverConfig = {
-    driver: 'redis';
-    host: string;
-    port: number;
-    ttl: number;
-};
-type MongoCacheDriverConfig = {
-    driver: 'mongodb';
-    uri: string;
-    db: string;
-    ttl: number;
-};
-type KvCacheDriverConfig = {
-    driver: 'kv';
-    ttl: number;
-};
-type CacheDriverConfig = MemoryCacheDriverConfig | RedisCacheDriverConfig | MongoCacheDriverConfig | KvCacheDriverConfig;
+import { CacheDriverConfig } from './type';
 export declare const cacheConfig: Readonly<{
     /**
      * Default cache driver
@@ -68,5 +48,4 @@ export declare const cacheConfig: Readonly<{
     ttl: number;
 }>;
 export type CacheConfig = typeof cacheConfig;
-export {};
 //# sourceMappingURL=cache.d.ts.map

package/src/config/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/config/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,KAAK,uBAAuB,GAAG;IAC7B,MAAM,EAAE,QAAQ,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,MAAM,EAAE,IAAI,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,KAAK,iBAAiB,GAClB,uBAAuB,GACvB,sBAAsB,GACtB,sBAAsB,GACtB,mBAAmB,CAAC;AA2ExB,eAAO,MAAM,WAAW;IAjDtB;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;IAwBH;;OAEG;iBACU,iBAAiB;IAI9B;;OAEG;;IAGH;;OAEG;;EAImD,CAAC;AACzD,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/config/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAoB,iBAAiB,EAAgB,MAAM,cAAc,CAAC;AA+DjF,eAAO,MAAM,WAAW;IAjDtB;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;IAwBH;;OAEG;iBACU,iBAAiB;IAI9B;;OAEG;;IAGH;;OAEG;;EAImD,CAAC;AACzD,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC"}

package/src/config/cache.js

@@ -3,7 +3,7 @@
  * Caching drivers and settings
  * Sealed namespace for immutability
  */
-import { Env } from './env';
+import { Env } from './env.js';
 const getCacheDriver = (config) => {
     const defaultDriver = config.default;
     if (Object.hasOwn(config.drivers, defaultDriver)) {

package/src/config/cloudflare.d.ts

@@ -4,23 +4,11 @@
  * Centralizes access to Workers bindings via globalThis.env.
  * This keeps runtime-specific globals out of adapters/drivers.
  */
+import { KVNamespace, WorkersEnv } from './type';
 import type { DatabaseConfig, ID1Database } from '../orm/DatabaseAdapter';
-export type WorkersEnv = Record<string, unknown>;
-type KVNamespace = {
-    get(key: string, options?: {
-        type: 'text' | 'json' | 'arrayBuffer' | 'stream';
-    }): Promise<unknown>;
-    put(key: string, value: string | ReadableStream | ArrayBuffer | FormData, options?: {
-        expiration?: number;
-        expirationTtl?: number;
-        metadata?: unknown;
-    }): Promise<void>;
-    delete(key: string): Promise<void>;
-};
 export declare const Cloudflare: Readonly<{
     getWorkersEnv: () => WorkersEnv | null;
     getD1Binding: (config: DatabaseConfig) => ID1Database | null;
     getKVBinding: (bindingName?: string) => KVNamespace | null;
 }>;
-export {};
 //# sourceMappingURL=cloudflare.d.ts.map

package/src/config/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../../src/config/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExE,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,KAAK,WAAW,GAAG;IACjB,GAAG,CACD,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAA;KAAE,GAC7D,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,GAAG,CACD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,GAAG,QAAQ,EACvD,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5E,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC,CAAC;AA8BF,eAAO,MAAM,UAAU;yBA5BG,UAAU,GAAG,IAAI;2BAOb,cAAc,KAAG,WAAW,GAAG,IAAI;4CAanB,WAAW,GAAG,IAAI;EAY9D,CAAC"}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../../src/config/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AA8BxE,eAAO,MAAM,UAAU;yBA5BG,UAAU,GAAG,IAAI;2BAOb,cAAc,KAAG,WAAW,GAAG,IAAI;4CAanB,WAAW,GAAG,IAAI;EAY9D,CAAC"}

package/src/config/database.d.ts

@@ -3,56 +3,12 @@
  * Database connections and pooling settings
  * Sealed namespace for immutability
  */
-type SqliteConnectionConfig = {
-    driver: 'sqlite';
-    database: string;
-    migrations: string;
-};
-type PostgresqlConnectionConfig = {
-    driver: 'postgresql';
-    host: string;
-    port: number;
-    database: string;
-    username: string;
-    password: string;
-    ssl: boolean;
-    pooling: {
-        enabled: boolean;
-        min: number;
-        max: number;
-        idleTimeout: number;
-        connectionTimeout: number;
-    };
-};
-type MysqlConnectionConfig = {
-    driver: 'mysql';
-    host: string;
-    port: number;
-    database: string;
-    username: string;
-    password: string;
-    pooling: {
-        enabled: boolean;
-        min: number;
-        max: number;
-    };
-};
-type DatabaseConnections = {
-    sqlite: SqliteConnectionConfig;
-    postgresql: PostgresqlConnectionConfig;
-    mysql: MysqlConnectionConfig;
-};
-type DatabaseConnectionName = keyof DatabaseConnections;
-type DatabaseConnectionConfig = DatabaseConnections[DatabaseConnectionName];
-type DatabaseConfigShape = {
-    default: DatabaseConnectionName;
-    connections: DatabaseConnections;
-};
+import { DatabaseConfigShape, DatabaseConnectionConfig } from './type';
 export declare const databaseConfig: Readonly<{
     /**
      * Default database connection
      */
-    default: keyof DatabaseConnections;
+    default: keyof import("./type").DatabaseConnections;
     /**
      * Database connections
      */
@@ -118,5 +74,4 @@ export declare const databaseConfig: Readonly<{
     };
 }>;
 export type DatabaseConfig = typeof databaseConfig;
-export {};
 //# sourceMappingURL=database.d.ts.map

package/src/config/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/config/database.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,KAAK,sBAAsB,GAAG;IAC5B,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,UAAU,EAAE,0BAA0B,CAAC;IACvC,KAAK,EAAE,qBAAqB,CAAC;CAC9B,CAAC;AAEF,KAAK,sBAAsB,GAAG,MAAM,mBAAmB,CAAC;AACxD,KAAK,wBAAwB,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;AAE5E,KAAK,mBAAmB,GAAG;IACzB,OAAO,EAAE,sBAAsB,CAAC;IAChC,WAAW,EAAE,mBAAmB,CAAC;CAClC,CAAC;AA6FF,eAAO,MAAM,cAAc;IA5EzB;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsCH;;OAEG;wBACiB,mBAAmB,GAAG,wBAAwB;IAIlE;;OAEG;;;;;IAMH;;OAEG;;;;;IAMH;;OAEG;;;;EAMyD,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/config/database.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EAEzB,MAAM,cAAc,CAAC;AA6FtB,eAAO,MAAM,cAAc;IA5EzB;;OAEG;;IAGH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsCH;;OAEG;wBACiB,mBAAmB,GAAG,wBAAwB;IAIlE;;OAEG;;;;;IAMH;;OAEG;;;;;IAMH;;OAEG;;;;EAMyD,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC"}

package/src/config/database.js

@@ -3,7 +3,7 @@
  * Database connections and pooling settings
  * Sealed namespace for immutability
  */
-import { Env } from './env';
+import { Env } from './env.js';
 const isDatabaseConnectionName = (value) => {
     return value === 'sqlite' || value === 'postgresql' || value === 'mysql';
 };

package/src/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkDH,eAAO,MAAM,GAAG;eA9BE,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAMnC,MAAM,iBAAiB,MAAM,KAAG,MAAM;mBAQrC,MAAM,iBAAiB,OAAO,KAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA+EP,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;EAkCxF,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+CH,eAAO,MAAM,GAAG;eA/BE,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAMnC,MAAM,iBAAiB,MAAM,KAAG,MAAM;mBASrC,MAAM,iBAAiB,OAAO,KAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAiFP,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;EAkCxF,CAAC"}

package/src/config/env.js

@@ -27,6 +27,8 @@ const getInt = (key, defaultValue) => {
     const value = env[key];
     if (value === undefined || value === null)
         return defaultValue ?? 0;
+    if (typeof value === 'string' && value.trim() === '')
+        return defaultValue ?? 0;
     return Number.parseInt(value, 10);
 };
 const getBool = (key, defaultValue) => {
@@ -53,7 +55,8 @@ export const Env = Object.freeze({
     getBool,
     // Core
     NODE_ENV: get('NODE_ENV', 'development'),
-    PORT: getInt('APP_PORT', 3000),
+    // Prefer PORT, fallback to APP_PORT for compatibility
+    PORT: getInt('PORT', getInt('APP_PORT', 3000)),
     HOST: get('HOST', 'localhost'),
     APP_NAME: get('APP_NAME', 'ZinTrust'),
     APP_KEY: get('APP_KEY', ''),
@@ -61,7 +64,8 @@ export const Env = Object.freeze({
     DB_CONNECTION: get('DB_CONNECTION', 'sqlite'),
     DB_HOST: get('DB_HOST', 'localhost'),
     DB_PORT: getInt('DB_PORT', 5432),
-    DB_DATABASE: get('DB_DATABASE', 'zintrust'),
+    // Accept DB_PATH as an alias for sqlite file path (many env templates use it).
+    DB_DATABASE: get('DB_DATABASE', get('DB_PATH', 'zintrust')),
     DB_USERNAME: get('DB_USERNAME', 'postgres'),
     DB_PASSWORD: get('DB_PASSWORD', ''),
     DB_READ_HOSTS: get('DB_READ_HOSTS', ''),

package/src/config/features.js

@@ -1,5 +1,5 @@
-import { Env } from './env';
-import { Logger } from './logger';
+import { Env } from './env.js';
+import { Logger } from './logger.js';
 /**
  * Feature Flags State
  * Internal state managed by the module