@zintrust/core 0.1.40 → 0.1.42

package/src/config/env.d.ts

@@ -6,18 +6,28 @@
  * Safe for both Node.js and serverless runtimes (Cloudflare Workers, Deno, Lambda)
  */
 import type { ProcessLike } from './type';
+export type EnvSource = Record<string, unknown> | (() => Record<string, unknown>);
 export declare const getProcessLike: () => ProcessLike | undefined;
 export declare const dirnameFromExecPath: (execPath: string, platform?: string) => string;
 export declare const get: (key: string, defaultValue?: string) => string;
-export declare const getInt: (key: string, defaultValue?: number) => number;
+export declare const getInt: (key: string, defaultValue: number) => number;
 export declare const getFloat: (key: string, defaultValue?: number) => number;
 export declare const getBool: (key: string, defaultValue?: boolean) => boolean;
+export declare const set: (key: string, value: string) => void;
+export declare const unset: (key: string) => void;
+export declare const setSource: (source: EnvSource | null) => void;
+export declare const snapshot: () => Record<string, string>;
 export declare const getDefaultLogLevel: () => "debug" | "info" | "warn" | "error";
+export declare const ZT_PROXY_TIMEOUT_MS: number;
 export declare const Env: Readonly<{
     get: (key: string, defaultValue?: string) => string;
-    getInt: (key: string, defaultValue?: number) => number;
+    getInt: (key: string, defaultValue: number) => number;
     getBool: (key: string, defaultValue?: boolean) => boolean;
     getFloat: (key: string, defaultValue?: number) => number;
+    set: (key: string, value: string) => void;
+    unset: (key: string) => void;
+    setSource: (source: EnvSource | null) => void;
+    snapshot: () => Record<string, string>;
     NODE_ENV: NodeJS.ProcessEnv["NODE_ENV"];
     PORT: number;
     HOST: string;
@@ -49,6 +59,67 @@ export declare const Env: Readonly<{
     D1_REMOTE_KEY_ID: string;
     D1_REMOTE_SECRET: string;
     D1_REMOTE_MODE: string;
+    MYSQL_PROXY_URL: string;
+    MYSQL_PROXY_HOST: string;
+    MYSQL_PROXY_PORT: number;
+    MYSQL_PROXY_MAX_BODY_BYTES: number;
+    MYSQL_PROXY_POOL_LIMIT: number;
+    MYSQL_PROXY_KEY_ID: string;
+    MYSQL_PROXY_SECRET: string;
+    MYSQL_PROXY_TIMEOUT_MS: number;
+    MYSQL_PROXY_REQUIRE_SIGNING: boolean;
+    MYSQL_PROXY_SIGNING_WINDOW_MS: number;
+    POSTGRES_PROXY_URL: string;
+    POSTGRES_PROXY_HOST: string;
+    POSTGRES_PROXY_PORT: number;
+    POSTGRES_PROXY_MAX_BODY_BYTES: number;
+    POSTGRES_PROXY_POOL_LIMIT: number;
+    POSTGRES_PROXY_KEY_ID: string;
+    POSTGRES_PROXY_SECRET: string;
+    POSTGRES_PROXY_TIMEOUT_MS: number;
+    POSTGRES_PROXY_REQUIRE_SIGNING: boolean;
+    POSTGRES_PROXY_SIGNING_WINDOW_MS: number;
+    REDIS_PROXY_URL: string;
+    REDIS_PROXY_HOST: string;
+    REDIS_PROXY_PORT: number;
+    REDIS_PROXY_MAX_BODY_BYTES: number;
+    REDIS_PROXY_KEY_ID: string;
+    REDIS_PROXY_SECRET: string;
+    REDIS_PROXY_TIMEOUT_MS: number;
+    REDIS_PROXY_REQUIRE_SIGNING: boolean;
+    REDIS_PROXY_SIGNING_WINDOW_MS: number;
+    USE_REDIS_PROXY: boolean;
+    SMTP_PROXY_URL: string;
+    SMTP_PROXY_HOST: string;
+    SMTP_PROXY_PORT: number;
+    SMTP_PROXY_MAX_BODY_BYTES: number;
+    SMTP_PROXY_KEY_ID: string;
+    SMTP_PROXY_SECRET: string;
+    SMTP_PROXY_TIMEOUT_MS: number;
+    SMTP_PROXY_REQUIRE_SIGNING: boolean;
+    SMTP_PROXY_SIGNING_WINDOW_MS: number;
+    USE_SMTP_PROXY: boolean;
+    MONGODB_PROXY_URL: string;
+    MONGODB_PROXY_HOST: string;
+    MONGODB_PROXY_PORT: number;
+    MONGODB_PROXY_MAX_BODY_BYTES: number;
+    MONGODB_PROXY_KEY_ID: string;
+    MONGODB_PROXY_SECRET: string;
+    MONGODB_PROXY_TIMEOUT_MS: number;
+    MONGODB_PROXY_REQUIRE_SIGNING: boolean;
+    MONGODB_PROXY_SIGNING_WINDOW_MS: number;
+    USE_MONGODB_PROXY: boolean;
+    SQLSERVER_PROXY_URL: string;
+    SQLSERVER_PROXY_HOST: string;
+    SQLSERVER_PROXY_PORT: number;
+    SQLSERVER_PROXY_MAX_BODY_BYTES: number;
+    SQLSERVER_PROXY_POOL_LIMIT: number;
+    SQLSERVER_PROXY_KEY_ID: string;
+    SQLSERVER_PROXY_SECRET: string;
+    SQLSERVER_PROXY_TIMEOUT_MS: number;
+    SQLSERVER_PROXY_REQUIRE_SIGNING: boolean;
+    SQLSERVER_PROXY_SIGNING_WINDOW_MS: number;
+    USE_SQLSERVER_PROXY: boolean;
     KV_REMOTE_URL: string;
     KV_REMOTE_KEY_ID: string;
     KV_REMOTE_SECRET: string;
@@ -59,11 +130,22 @@ export declare const Env: Readonly<{
     REDIS_HOST: string;
     REDIS_PORT: number;
     REDIS_PASSWORD: string;
+    REDIS_DB: number;
     REDIS_URL: string;
     MONGO_URI: string;
     MONGO_DB: string;
     QUEUE_CONNECTION: string;
     QUEUE_DRIVER: string;
+    QUEUE_HTTP_PROXY_ENABLED: boolean;
+    QUEUE_HTTP_PROXY_GATEWAY_ENABLED: boolean;
+    QUEUE_HTTP_PROXY_URL: string;
+    QUEUE_HTTP_PROXY_PATH: string;
+    QUEUE_HTTP_PROXY_KEY_ID: string;
+    QUEUE_HTTP_PROXY_KEY: string;
+    QUEUE_HTTP_PROXY_TIMEOUT_MS: number;
+    QUEUE_HTTP_PROXY_MAX_SKEW_MS: number;
+    QUEUE_HTTP_PROXY_NONCE_TTL_MS: number;
+    QUEUE_HTTP_PROXY_MIDDLEWARE: string;
     RATE_LIMIT_STORE: string;
     RATE_LIMIT_DRIVER: string;
     RATE_LIMIT_KEY_PREFIX: string;
@@ -100,6 +182,7 @@ export declare const Env: Readonly<{
     LOG_LEVEL: "debug" | "info" | "warn" | "error";
     LOG_FORMAT: string;
     LOG_CHANNEL: string;
+    DOCKER_WORKER: boolean;
     DISABLE_LOGGING: boolean;
     LOG_HTTP_REQUEST: boolean;
     LOG_TO_FILE: boolean;
@@ -112,6 +195,7 @@ export declare const Env: Readonly<{
     ZINTRUST_ENV_IN_FILE: string;
     ZINTRUST_SECRETS_PROVIDER: string;
     ZINTRUST_ALLOW_AUTO_INSTALL: string;
+    WORKER_SHUTDOWN_ON_APP_EXIT: boolean;
     CLOUDFLARE_ACCOUNT_ID: string;
     CLOUDFLARE_API_TOKEN: string;
     CLOUDFLARE_KV_NAMESPACE_ID: string;
@@ -130,4 +214,5 @@ export declare const Env: Readonly<{
     NODE_BIN_DIR: string;
     SAFE_PATH: string;
 }>;
+export declare const buildRedisUrl: () => string;
 //# sourceMappingURL=env.d.ts.map

package/src/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAGF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAGxD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAM3D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAM7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAK7D,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AAGF,eAAO,MAAM,GAAG;eApCS,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAKnC,MAAM,iBAAiB,MAAM,KAAG,MAAM;mBAgBrC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBARvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;cA+BtB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAoHpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmExF,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBlF,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAGF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAIxD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,cAAc,MAAM,KAAG,MAI1D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAI7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAGhD,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,KAAG,IAInC,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,QAAQ,SAAS,GAAG,IAAI,KAAG,IAEpD,CAAC;AAEF,eAAO,MAAM,QAAQ,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAOhD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AACF,eAAO,MAAM,mBAAmB,QAAuC,CAAC;AAKxE,eAAO,MAAM,GAAG;eA3DS,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAMnC,MAAM,gBAAgB,MAAM,KAAG,MAAM;mBAYpC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBANvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;eAY3C,MAAM,SAAS,MAAM,KAAG,IAAI;iBAK1B,MAAM,KAAG,IAAI;wBAMN,SAAS,GAAG,IAAI,KAAG,IAAI;oBAI7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;cAgCJ,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAuNpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFxF,CAAC;AAEH,eAAO,MAAM,aAAa,QAAO,MAchC,CAAC"}

package/src/config/env.js

@@ -7,6 +7,24 @@
  */
 // Cache process check once at module load time
 const processLike = typeof process === 'undefined' ? undefined : process;
+let externalEnvSource = null;
+const getEnvSource = () => {
+    if (typeof externalEnvSource === 'function')
+        return externalEnvSource();
+    if (externalEnvSource !== null)
+        return externalEnvSource;
+    return processLike?.env ?? {};
+};
+const normalizeEnvValue = (value) => {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean' || typeof value === 'bigint') {
+        return String(value);
+    }
+    return '';
+};
 export const getProcessLike = () => processLike;
 export const dirnameFromExecPath = (execPath, platform) => {
     const separator = platform === 'win32' ? '\\' : '/';
@@ -17,34 +35,50 @@ export const dirnameFromExecPath = (execPath, platform) => {
 };
 // Private helper functions
 export const get = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    return env[key] ?? defaultValue ?? '';
+    const env = getEnvSource();
+    const value = normalizeEnvValue(env[key]);
+    return value === '' ? (defaultValue ?? '') : value;
 };
 export const getInt = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    const value = env[key];
-    if (value === undefined || value === null)
-        return defaultValue ?? 0;
-    if (typeof value === 'string' && value.trim() === '')
+    const value = get(key, String(defaultValue ?? 0));
+    if (value.trim() === '')
         return defaultValue ?? 0;
     return Number.parseInt(value, 10);
 };
 export const getFloat = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    const value = env[key];
-    if (value === undefined || value === null)
-        return defaultValue ?? 0;
-    if (typeof value === 'string' && value.trim() === '')
+    const value = get(key, String(defaultValue ?? 0));
+    if (value.trim() === '')
         return defaultValue ?? 0;
     return Number.parseFloat(value);
 };
 export const getBool = (key, defaultValue) => {
-    const env = processLike?.env ?? {};
-    const value = env[key];
-    if (value === undefined || value === null)
+    const value = get(key, defaultValue === true ? 'true' : 'false');
+    if (value.trim() === '')
         return defaultValue ?? false;
     return value.toLowerCase() === 'true' || value === '1';
 };
+export const set = (key, value) => {
+    if (processLike?.env === undefined)
+        return;
+    processLike.env[key] = value;
+};
+export const unset = (key) => {
+    if (processLike?.env === undefined)
+        return;
+    // Use Reflect.deleteProperty to avoid deleting dynamically computed property keys
+    Reflect.deleteProperty(processLike.env, key);
+};
+export const setSource = (source) => {
+    externalEnvSource = source;
+};
+export const snapshot = () => {
+    const env = getEnvSource();
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        out[key] = normalizeEnvValue(value);
+    }
+    return out;
+};
 export const getDefaultLogLevel = () => {
     const NODE_ENV_VALUE = get('NODE_ENV', 'development');
     if (NODE_ENV_VALUE === 'production')
@@ -53,6 +87,9 @@ export const getDefaultLogLevel = () => {
         return 'error';
     return 'debug';
 };
+export const ZT_PROXY_TIMEOUT_MS = getInt('ZT_PROXY_TIMEOUT_MS', 30000);
+const PROXY_KEY_ID_FALLBACK = get('APP_NAME', 'ZinTrust');
+const PROXY_SECRET_FALLBACK = get('APP_KEY', '');
 // Sealed namespace with all environment configuration
 export const Env = Object.freeze({
     // Helper functions
@@ -60,6 +97,10 @@ export const Env = Object.freeze({
     getInt,
     getBool,
     getFloat,
+    set,
+    unset,
+    setSource,
+    snapshot,
     // Core
     NODE_ENV: get('NODE_ENV', 'development'),
     // Prefer PORT, fallback to APP_PORT for compatibility
@@ -97,9 +138,70 @@ export const Env = Object.freeze({
     KV_NAMESPACE_ID: get('KV_NAMESPACE_ID'),
     // Cloudflare proxy services (D1/KV outside Cloudflare)
     D1_REMOTE_URL: get('D1_REMOTE_URL', ''),
-    D1_REMOTE_KEY_ID: get('D1_REMOTE_KEY_ID', ''),
-    D1_REMOTE_SECRET: get('D1_REMOTE_SECRET', ''),
+    D1_REMOTE_KEY_ID: get('D1_REMOTE_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    D1_REMOTE_SECRET: get('D1_REMOTE_SECRET', PROXY_SECRET_FALLBACK),
     D1_REMOTE_MODE: get('D1_REMOTE_MODE', 'registry'),
+    MYSQL_PROXY_URL: get('MYSQL_PROXY_URL', ''),
+    MYSQL_PROXY_HOST: get('MYSQL_PROXY_HOST', '127.0.0.1'),
+    MYSQL_PROXY_PORT: getInt('MYSQL_PROXY_PORT', 8789),
+    MYSQL_PROXY_MAX_BODY_BYTES: getInt('MYSQL_PROXY_MAX_BODY_BYTES', 131072),
+    MYSQL_PROXY_POOL_LIMIT: getInt('MYSQL_PROXY_POOL_LIMIT', 10),
+    MYSQL_PROXY_KEY_ID: get('MYSQL_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    MYSQL_PROXY_SECRET: get('MYSQL_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    MYSQL_PROXY_TIMEOUT_MS: getInt('MYSQL_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    MYSQL_PROXY_REQUIRE_SIGNING: getBool('MYSQL_PROXY_REQUIRE_SIGNING', true),
+    MYSQL_PROXY_SIGNING_WINDOW_MS: getInt('MYSQL_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    POSTGRES_PROXY_URL: get('POSTGRES_PROXY_URL', ''),
+    POSTGRES_PROXY_HOST: get('POSTGRES_PROXY_HOST', '127.0.0.1'),
+    POSTGRES_PROXY_PORT: getInt('POSTGRES_PROXY_PORT', 8790),
+    POSTGRES_PROXY_MAX_BODY_BYTES: getInt('POSTGRES_PROXY_MAX_BODY_BYTES', 131072),
+    POSTGRES_PROXY_POOL_LIMIT: getInt('POSTGRES_PROXY_POOL_LIMIT', 10),
+    POSTGRES_PROXY_KEY_ID: get('POSTGRES_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    POSTGRES_PROXY_SECRET: get('POSTGRES_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    POSTGRES_PROXY_TIMEOUT_MS: getInt('POSTGRES_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    POSTGRES_PROXY_REQUIRE_SIGNING: getBool('POSTGRES_PROXY_REQUIRE_SIGNING', true),
+    POSTGRES_PROXY_SIGNING_WINDOW_MS: getInt('POSTGRES_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    REDIS_PROXY_URL: get('REDIS_PROXY_URL', ''),
+    REDIS_PROXY_HOST: get('REDIS_PROXY_HOST', '127.0.0.1'),
+    REDIS_PROXY_PORT: getInt('REDIS_PROXY_PORT', 8791),
+    REDIS_PROXY_MAX_BODY_BYTES: getInt('REDIS_PROXY_MAX_BODY_BYTES', 131072),
+    REDIS_PROXY_KEY_ID: get('REDIS_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    REDIS_PROXY_SECRET: get('REDIS_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    REDIS_PROXY_TIMEOUT_MS: getInt('REDIS_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    REDIS_PROXY_REQUIRE_SIGNING: getBool('REDIS_PROXY_REQUIRE_SIGNING', true),
+    REDIS_PROXY_SIGNING_WINDOW_MS: getInt('REDIS_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_REDIS_PROXY: getBool('USE_REDIS_PROXY', false),
+    SMTP_PROXY_URL: get('SMTP_PROXY_URL', ''),
+    SMTP_PROXY_HOST: get('SMTP_PROXY_HOST', '127.0.0.1'),
+    SMTP_PROXY_PORT: getInt('SMTP_PROXY_PORT', 8794),
+    SMTP_PROXY_MAX_BODY_BYTES: getInt('SMTP_PROXY_MAX_BODY_BYTES', 131072),
+    SMTP_PROXY_KEY_ID: get('SMTP_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    SMTP_PROXY_SECRET: get('SMTP_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    SMTP_PROXY_TIMEOUT_MS: getInt('SMTP_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    SMTP_PROXY_REQUIRE_SIGNING: getBool('SMTP_PROXY_REQUIRE_SIGNING', true),
+    SMTP_PROXY_SIGNING_WINDOW_MS: getInt('SMTP_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_SMTP_PROXY: getBool('USE_SMTP_PROXY', false),
+    MONGODB_PROXY_URL: get('MONGODB_PROXY_URL', ''),
+    MONGODB_PROXY_HOST: get('MONGODB_PROXY_HOST', '127.0.0.1'),
+    MONGODB_PROXY_PORT: getInt('MONGODB_PROXY_PORT', 8792),
+    MONGODB_PROXY_MAX_BODY_BYTES: getInt('MONGODB_PROXY_MAX_BODY_BYTES', 131072),
+    MONGODB_PROXY_KEY_ID: get('MONGODB_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    MONGODB_PROXY_SECRET: get('MONGODB_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    MONGODB_PROXY_TIMEOUT_MS: getInt('MONGODB_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    MONGODB_PROXY_REQUIRE_SIGNING: getBool('MONGODB_PROXY_REQUIRE_SIGNING', true),
+    MONGODB_PROXY_SIGNING_WINDOW_MS: getInt('MONGODB_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_MONGODB_PROXY: getBool('USE_MONGODB_PROXY', false),
+    SQLSERVER_PROXY_URL: get('SQLSERVER_PROXY_URL', ''),
+    SQLSERVER_PROXY_HOST: get('SQLSERVER_PROXY_HOST', '127.0.0.1'),
+    SQLSERVER_PROXY_PORT: getInt('SQLSERVER_PROXY_PORT', 8793),
+    SQLSERVER_PROXY_MAX_BODY_BYTES: getInt('SQLSERVER_PROXY_MAX_BODY_BYTES', 131072),
+    SQLSERVER_PROXY_POOL_LIMIT: getInt('SQLSERVER_PROXY_POOL_LIMIT', 10),
+    SQLSERVER_PROXY_KEY_ID: get('SQLSERVER_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    SQLSERVER_PROXY_SECRET: get('SQLSERVER_PROXY_SECRET', PROXY_SECRET_FALLBACK),
+    SQLSERVER_PROXY_TIMEOUT_MS: getInt('SQLSERVER_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    SQLSERVER_PROXY_REQUIRE_SIGNING: getBool('SQLSERVER_PROXY_REQUIRE_SIGNING', true),
+    SQLSERVER_PROXY_SIGNING_WINDOW_MS: getInt('SQLSERVER_PROXY_SIGNING_WINDOW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    USE_SQLSERVER_PROXY: getBool('USE_SQLSERVER_PROXY', false),
     KV_REMOTE_URL: get('KV_REMOTE_URL', ''),
     KV_REMOTE_KEY_ID: get('KV_REMOTE_KEY_ID', ''),
     KV_REMOTE_SECRET: get('KV_REMOTE_SECRET', ''),
@@ -112,12 +214,23 @@ export const Env = Object.freeze({
     REDIS_HOST: get('REDIS_HOST', 'localhost'),
     REDIS_PORT: getInt('REDIS_PORT', 6379),
     REDIS_PASSWORD: get('REDIS_PASSWORD', ''),
+    REDIS_DB: getInt('REDIS_DB', 0),
     REDIS_URL: get('REDIS_URL', ''),
     MONGO_URI: get('MONGO_URI'),
     MONGO_DB: get('MONGO_DB', 'zintrust_cache'),
     // Queue
     QUEUE_CONNECTION: get('QUEUE_CONNECTION', ''),
     QUEUE_DRIVER: get('QUEUE_DRIVER', ''),
+    QUEUE_HTTP_PROXY_ENABLED: getBool('QUEUE_HTTP_PROXY_ENABLED', false),
+    QUEUE_HTTP_PROXY_GATEWAY_ENABLED: getBool('QUEUE_HTTP_PROXY_GATEWAY_ENABLED', true),
+    QUEUE_HTTP_PROXY_URL: get('QUEUE_HTTP_PROXY_URL', ''),
+    QUEUE_HTTP_PROXY_PATH: get('QUEUE_HTTP_PROXY_PATH', '/api/_sys/queue/rpc'),
+    QUEUE_HTTP_PROXY_KEY_ID: get('QUEUE_HTTP_PROXY_KEY_ID', PROXY_KEY_ID_FALLBACK),
+    QUEUE_HTTP_PROXY_KEY: get('QUEUE_HTTP_PROXY_KEY', PROXY_SECRET_FALLBACK),
+    QUEUE_HTTP_PROXY_TIMEOUT_MS: getInt('QUEUE_HTTP_PROXY_TIMEOUT_MS', ZT_PROXY_TIMEOUT_MS),
+    QUEUE_HTTP_PROXY_MAX_SKEW_MS: getInt('QUEUE_HTTP_PROXY_MAX_SKEW_MS', getInt('ZT_PROXY_SIGNING_WINDOW_MS', 60000)),
+    QUEUE_HTTP_PROXY_NONCE_TTL_MS: getInt('QUEUE_HTTP_PROXY_NONCE_TTL_MS', 120000),
+    QUEUE_HTTP_PROXY_MIDDLEWARE: get('QUEUE_HTTP_PROXY_MIDDLEWARE', ''),
     // Rate Limiting
     RATE_LIMIT_STORE: get('RATE_LIMIT_STORE', ''),
     RATE_LIMIT_DRIVER: get('RATE_LIMIT_DRIVER', ''),
@@ -163,6 +276,7 @@ export const Env = Object.freeze({
     LOG_LEVEL: get('LOG_LEVEL', getDefaultLogLevel()),
     LOG_FORMAT: get('LOG_FORMAT', 'text'),
     LOG_CHANNEL: get('LOG_CHANNEL', ''),
+    DOCKER_WORKER: getBool('DOCKER_WORKER', false),
     DISABLE_LOGGING: getBool('DISABLE_LOGGING', false),
     LOG_HTTP_REQUEST: getBool('LOG_HTTP_REQUEST', false),
     LOG_TO_FILE: getBool('LOG_TO_FILE', false),
@@ -176,6 +290,7 @@ export const Env = Object.freeze({
     ZINTRUST_ENV_IN_FILE: get('ZINTRUST_ENV_IN_FILE', '.env'),
     ZINTRUST_SECRETS_PROVIDER: get('ZINTRUST_SECRETS_PROVIDER', ''),
     ZINTRUST_ALLOW_AUTO_INSTALL: get('ZINTRUST_ALLOW_AUTO_INSTALL', ''),
+    WORKER_SHUTDOWN_ON_APP_EXIT: getBool('WORKER_SHUTDOWN_ON_APP_EXIT', true),
     // Cloudflare Credentials
     CLOUDFLARE_ACCOUNT_ID: get('CLOUDFLARE_ACCOUNT_ID', ''),
     CLOUDFLARE_API_TOKEN: get('CLOUDFLARE_API_TOKEN', ''),
@@ -191,7 +306,7 @@ export const Env = Object.freeze({
     HOME: get('HOME', ''),
     USERPROFILE: get('USERPROFILE', ''),
     // Template/Misc
-    TEMPLATE_COPYRIGHT: get('TEMPLATE_COPYRIGHT', '© 2025 ZinTrust Framework. All rights reserved.'),
+    TEMPLATE_COPYRIGHT: get('TEMPLATE_COPYRIGHT', `© ${new Date().getFullYear()} ZinTrust Framework. All rights reserved.`),
     SERVICE_NAME: get('SERVICE_NAME', ''),
     APP_MODE: get('APP_MODE', get('NODE_ENV', 'development')),
     APP_PORT: getInt('APP_PORT', 3000),
@@ -216,7 +331,15 @@ export const Env = Object.freeze({
             if (processLike.platform === 'win32') {
                 return [String.raw `C:\Windows\System32`, String.raw `C:\Windows`, binDir].join(';');
             }
-            return ['/usr/bin', '/bin', '/usr/sbin', '/sbin', binDir].join(':');
+            return [
+                '/opt/homebrew/bin',
+                '/usr/local/bin',
+                '/usr/bin',
+                '/bin',
+                '/usr/sbin',
+                '/sbin',
+                binDir,
+            ].join(':');
         }
         catch {
             // Fallback for non-Node environments
@@ -224,3 +347,19 @@ export const Env = Object.freeze({
         }
     })(),
 });
+export const buildRedisUrl = () => {
+    const raw = get('REDIS_URL', '').trim();
+    if (raw !== '')
+        return raw;
+    const host = get('REDIS_HOST', 'localhost');
+    const port = getInt('REDIS_PORT', 6379);
+    const password = get('REDIS_PASSWORD', '');
+    const db = getInt('REDIS_QUEUE_DB', 0);
+    let url = 'redis://';
+    if (password.trim() !== '')
+        url += `:${encodeURIComponent(password)}@`;
+    url += `${host}:${port}`;
+    if (db > 0)
+        url += `/${db}`;
+    return url;
+};

package/src/config/index.d.ts

@@ -28,6 +28,7 @@ export declare const config: Readonly<{
         readonly isProduction: () => boolean;
         readonly isTesting: () => boolean;
         readonly debug: boolean;
+        readonly dockerWorker: boolean;
         readonly timezone: string;
         readonly requestTimeout: number;
         readonly maxBodySize: number;

package/src/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;8BAZc,CAAC;;;;;;;;;;;;;;;;;;;;2EAAC,CAAA;;;;;;;;;;;;;;;;;;;;8BAD2B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAmBrD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAKA,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;8BAZc,CAAC;;;;;;;;;;;;;;;;;;;;2EAAC,CAAA;;;;;;;;;;;;;;;;;;;;8BAD2B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2BomB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAHzpB,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC"}

package/src/config/mail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mail.d.ts","sourceRoot":"","sources":["../../../src/config/mail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAItE,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C,CAAC,CAAC;AAmCH,QAAA,MAAM,gBAAgB,QAAO;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,SAAS,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;CAgGvE,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAqB7D,eAAO,MAAM,UAAU,EAAE,UAYvB,CAAC"}
+{"version":3,"file":"mail.d.ts","sourceRoot":"","sources":["../../../src/config/mail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAItE,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C,CAAC,CAAC;AA6FH,QAAA,MAAM,gBAAgB,QAAO;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,SAAS,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;CA6CvE,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAqB7D,eAAO,MAAM,UAAU,EAAE,UAYvB,CAAC"}

package/src/config/mail.js

@@ -35,16 +35,11 @@ const getMailDriver = (config, name) => {
     }
     throw ErrorFactory.createConfigError(`Mail driver not configured: ${selected}`);
 };
-const createMailConfig = () => {
-    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Mail) ?? {};
-    const baseDefault = Env.get('MAIL_CONNECTION', Env.get('MAIL_DRIVER', 'disabled'))
-        .trim()
-        .toLowerCase();
-    const baseFrom = {
-        address: Env.get('MAIL_FROM_ADDRESS', ''),
-        name: Env.get('MAIL_FROM_NAME', ''),
-    };
-    const baseDrivers = {
+/**
+ * Create base mail drivers configuration
+ */
+const createMailDrivers = () => {
+    return {
         disabled: {
             driver: 'disabled',
         },
@@ -97,6 +92,17 @@ const createMailConfig = () => {
             region: Env.get('AWS_REGION', 'us-east-1'),
         },
     };
+};
+const createMailConfig = () => {
+    const overrides = StartupConfigFileRegistry.get(StartupConfigFile.Mail) ?? {};
+    const baseDefault = Env.get('MAIL_CONNECTION', Env.get('MAIL_DRIVER', 'disabled'))
+        .trim()
+        .toLowerCase();
+    const baseFrom = {
+        address: Env.get('MAIL_FROM_ADDRESS', ''),
+        name: Env.get('MAIL_FROM_NAME', ''),
+    };
+    const baseDrivers = createMailDrivers();
     const mailConfigObj = {
         /**
          * Default mail driver

package/src/config/middleware.d.ts

@@ -43,6 +43,11 @@ export declare const MiddlewareKeys: Readonly<{
 }>;
 export type MiddlewareKey = keyof typeof MiddlewareKeys;
 export declare function createMiddlewareConfig(): MiddlewareConfigType;
+/**
+ * Clear the middleware configuration cache
+ * This ensures fresh config loading in watch mode
+ */
+export declare const clearMiddlewareConfigCache: () => void;
 export declare const middlewareConfig: MiddlewareConfigType;
 export default middlewareConfig;
 //# sourceMappingURL=middleware.d.ts.map

package/src/config/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/config/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA+DzD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,qBAAqB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;EAiBuB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,cAAc,CAAC;AA0MxD,wBAAgB,sBAAsB,IAAI,oBAAoB,CAqB7D;AA0BD,eAAO,MAAM,gBAAgB,EAAE,oBAY7B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/config/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA+DzD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,qBAAqB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;EAiBuB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,cAAc,CAAC;AA0MxD,wBAAgB,sBAAsB,IAAI,oBAAoB,CAkC7D;AAID;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAAO,IAE7C,CAAC;AAwBF,eAAO,MAAM,gBAAgB,EAAE,oBAY7B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/src/config/middleware.js

@@ -1,3 +1,4 @@
+import { Env } from './env.js';
 import { bodyParsingMiddleware } from '../http/middleware/BodyParsingMiddleware.js';
 import { fileUploadMiddleware } from '../http/middleware/FileUploadMiddleware.js';
 import { AuthMiddleware } from '../middleware/AuthMiddleware.js';
@@ -155,7 +156,17 @@ function createSharedMiddlewares(loadMiddlewareConfig) {
 }
 export function createMiddlewareConfig() {
     const loadMiddlewareConfig = StartupConfigFileRegistry.get(StartupConfigFile.Middleware) ?? {};
-    const shared = createSharedMiddlewares(loadMiddlewareConfig);
+    const skipPathsFromEnv = Env.get('CSRF_SKIP_PATHS', '')
+        .split(',')
+        .map((path) => path.trim())
+        .filter((path) => path.length > 0);
+    const effectiveMiddlewareConfig = {
+        ...loadMiddlewareConfig,
+        skipPaths: Array.isArray(loadMiddlewareConfig.skipPaths) && loadMiddlewareConfig.skipPaths.length > 0
+            ? loadMiddlewareConfig.skipPaths
+            : skipPathsFromEnv,
+    };
+    const shared = createSharedMiddlewares(effectiveMiddlewareConfig);
     const middlewareConfigObj = {
         global: [
             shared.log,
@@ -172,6 +183,13 @@ export function createMiddlewareConfig() {
     return Object.freeze(middlewareConfigObj);
 }
 let cached = null;
+/**
+ * Clear the middleware configuration cache
+ * This ensures fresh config loading in watch mode
+ */
+export const clearMiddlewareConfigCache = () => {
+    cached = null;
+};
 // Proxy target must satisfy JS Proxy invariants.
 // When we lazily create a frozen config object (with non-configurable properties),
 // we mirror its property descriptors onto this target so reflective operations

package/src/config/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/config/queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGhG,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AASH;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAO,kBAmCnC,CAAC;AAsBH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,CAAC,YAAY,EAAE,sBAAsB,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACzF,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CAuEH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/config/queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGhG,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AA+EH;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAO,kBA4DnC,CAAC;AAsBH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,CAAC,YAAY,EAAE,sBAAsB,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACzF,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CAuEH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}

package/src/config/queue.js

@@ -3,6 +3,7 @@
  * Background job and message queue settings
  * Sealed namespace for immutability
  */
+import { Cloudflare } from './cloudflare.js';
 import { Env } from './env.js';
 import { ZintrustLang } from '../lang/lang.js';
 import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
@@ -10,6 +11,59 @@ const getQueueDriver = (driverConfig) => {
     const driverName = driverConfig.default;
     return driverConfig.drivers[driverName];
 };
+const readWorkersEnvString = (key) => {
+    const workerValue = Cloudflare.getWorkersVar(key);
+    if (workerValue !== null && workerValue.trim() !== '')
+        return workerValue;
+    return '';
+};
+const readWorkersFallbackString = (workersKey, fallbackKey, fallback = '') => {
+    const workerValue = readWorkersEnvString(workersKey);
+    if (workerValue.trim() !== '')
+        return workerValue;
+    return Env.get(fallbackKey, fallback);
+};
+const readWorkersFallbackInt = (workersKey, fallbackKey, fallback) => {
+    const raw = readWorkersFallbackString(workersKey, fallbackKey, String(fallback));
+    if (raw.trim() === '')
+        return fallback;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) ? parsed : fallback;
+};
+const parseRedisUrl = (rawUrl) => {
+    try {
+        const url = new URL(rawUrl);
+        if (url.protocol !== 'redis:' && url.protocol !== 'rediss:')
+            return null;
+        const host = url.hostname;
+        const port = url.port ? Number.parseInt(url.port, 10) : 6379;
+        const password = url.password ? decodeURIComponent(url.password) : undefined;
+        const db = url.pathname ? Number.parseInt(url.pathname.replace('/', ''), 10) : undefined;
+        return { host, port, password, database: Number.isFinite(db ?? Number.NaN) ? db : undefined };
+    }
+    catch {
+        return null;
+    }
+};
+const resolveRedisProxyConfig = () => {
+    const isWorkersRuntime = Cloudflare.getWorkersEnv() !== null;
+    if (!isWorkersRuntime) {
+        return null;
+    }
+    const proxyUrl = Env.get('REDIS_PROXY_URL', '').trim();
+    const parsed = proxyUrl ? parseRedisUrl(proxyUrl) : null;
+    if (parsed)
+        return parsed;
+    if (Env.getBool('USE_REDIS_PROXY', false)) {
+        return {
+            host: Env.get('REDIS_PROXY_HOST', ''),
+            port: Env.getInt('REDIS_PROXY_PORT', 6379),
+            password: Env.get('REDIS_PASSWORD', ''),
+            database: Env.getInt('REDIS_QUEUE_DB', ZintrustLang.REDIS_DEFAULT_DB),
+        };
+    }
+    return null;
+};
 /**
  * Helper: Create base driver configurations from environment
  */
@@ -28,18 +82,25 @@ export const createBaseDrivers = () => ({
     },
     redis: {
         driver: 'redis',
-        host: Env.get('REDIS_HOST', 'localhost'),
-        port: Env.getInt('REDIS_PORT', 6379),
-        password: Env.get('REDIS_PASSWORD'),
-        database: Env.getInt('REDIS_QUEUE_DB', ZintrustLang.REDIS_DEFAULT_DB),
+        host: resolveRedisProxyConfig()?.host ??
+            readWorkersFallbackString('WORKERS_REDIS_HOST', 'REDIS_HOST', 'localhost'),
+        port: resolveRedisProxyConfig()?.port ??
+            readWorkersFallbackInt('WORKERS_REDIS_PORT', 'REDIS_PORT', 6379),
+        password: resolveRedisProxyConfig()?.password ??
+            readWorkersFallbackString('WORKERS_REDIS_PASSWORD', 'REDIS_PASSWORD'),
+        database: resolveRedisProxyConfig()?.database ??
+            readWorkersFallbackInt('WORKERS_REDIS_QUEUE_DB', 'REDIS_QUEUE_DB', ZintrustLang.REDIS_DEFAULT_DB),
     },
     rabbitmq: {
         driver: 'rabbitmq',
-        host: Env.get('RABBITMQ_HOST', 'localhost'),
-        port: Env.getInt('RABBITMQ_PORT', 5672),
-        username: Env.get('RABBITMQ_USER', 'guest'),
-        password: Env.get('RABBITMQ_PASSWORD', 'guest'),
-        vhost: Env.get('RABBITMQ_VHOST', '/'),
+        host: readWorkersFallbackString('WORKERS_RABBITMQ_HOST', 'RABBITMQ_HOST', 'localhost'),
+        port: readWorkersFallbackInt('WORKERS_RABBITMQ_PORT', 'RABBITMQ_PORT', 5672),
+        username: readWorkersFallbackString('WORKERS_RABBITMQ_USER', 'RABBITMQ_USER', 'guest'),
+        password: readWorkersFallbackString('WORKERS_RABBITMQ_PASSWORD', 'RABBITMQ_PASSWORD', 'guest'),
+        vhost: readWorkersFallbackString('WORKERS_RABBITMQ_VHOST', 'RABBITMQ_VHOST', '/'),
+        httpGatewayUrl: readWorkersFallbackString('WORKERS_RABBITMQ_HTTP_GATEWAY_URL', 'RABBITMQ_HTTP_GATEWAY_URL'),
+        httpGatewayToken: readWorkersFallbackString('WORKERS_RABBITMQ_HTTP_GATEWAY_TOKEN', 'RABBITMQ_HTTP_GATEWAY_TOKEN'),
+        httpGatewayTimeoutMs: readWorkersFallbackInt('WORKERS_RABBITMQ_HTTP_GATEWAY_TIMEOUT_MS', 'RABBITMQ_HTTP_GATEWAY_TIMEOUT_MS', 15000),
     },
     sqs: {
         driver: 'sqs',