@zintrust/core 0.1.41 → 0.1.43

package/src/boot/bootstrap.js

@@ -37,29 +37,45 @@ const logBootstrapErrorDetails = (error) => {
         // best-effort logging
     }
 };
-const startSchedulesIfNeeded = async (app) => {
+const startSchedulesIfNeeded = async (application) => {
     try {
+        if (Env.getBool('SCHEDULES_ENABLED', false) === false)
+            return;
         const runtime = appConfig.detectRuntime();
         if (runtime !== 'nodejs' && runtime !== 'fargate')
             return;
-        const { create: createScheduleRunner } = await import('../scheduler/ScheduleRunner.js');
-        const schedules = await import('../schedules/index.js');
-        const runner = createScheduleRunner();
-        for (const schedule of Object.values(schedules)) {
-            // Each schedule is expected to export a default ISchedule
-            // @ts-ignore
-            runner.register(schedule);
+        const { SchedulerRuntime } = await import('../scheduler/SchedulerRuntime.js');
+        const coreSchedules = await import('../schedules/index.js');
+        let appSchedules = {};
+        try {
+            const appSchedulesModuleId = '@app/' + 'Schedules';
+            appSchedules = (await import(appSchedulesModuleId));
+        }
+        catch {
+            /* v8 ignore next */
+            appSchedules = {};
         }
-        runner.start();
+        const isSchedule = (value) => {
+            if (value === null || value === undefined || typeof value !== 'object')
+                return false;
+            return ('name' in value &&
+                typeof value.name === 'string' &&
+                value.name.trim().length > 0);
+        };
+        const coreScheduleEntries = Object.values(coreSchedules).filter(isSchedule);
+        const appScheduleEntries = Object.values(appSchedules).filter(isSchedule);
+        SchedulerRuntime.registerMany(coreScheduleEntries, 'core');
+        SchedulerRuntime.registerMany(appScheduleEntries, 'app');
+        SchedulerRuntime.start();
         // Add shutdown hook to stop schedules gracefully
-        const shutdownManager = app.getContainer().get('shutdownManager');
+        const shutdownManager = application.getContainer().get('shutdownManager');
         if ((typeof shutdownManager === 'object' || typeof shutdownManager === 'function') &&
             shutdownManager !== null &&
             'add' in shutdownManager &&
             typeof shutdownManager.add === 'function') {
             shutdownManager.add(async () => {
                 const scheduleTimeoutMs = Env.getInt('SCHEDULE_SHUTDOWN_TIMEOUT_MS', 30000);
-                await runner.stop(scheduleTimeoutMs);
+                await SchedulerRuntime.stop(scheduleTimeoutMs);
             });
         }
     }

package/src/boot/registry/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/boot/registry/runtime.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AA+I9C,eAAO,MAAM,8BAA8B,GAAI,iBAAiB,gBAAgB,KAAG,IA4BlF,CAAC;AA+KF,eAAO,MAAM,eAAe,GAAI,QAAQ;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,gBAAgB,CAAC;IAClC,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrC,KAAG;IAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAsE7D,CAAC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/boot/registry/runtime.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AA+I9C,eAAO,MAAM,8BAA8B,GAAI,iBAAiB,gBAAgB,KAAG,IA4BlF,CAAC;AAyLF,eAAO,MAAM,eAAe,GAAI,QAAQ;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,gBAAgB,CAAC;IAClC,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrC,KAAG;IAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAuE7D,CAAC"}

package/src/boot/registry/runtime.js

@@ -293,6 +293,16 @@ const initializeQueueHttpGateway = async (router) => {
         Logger.warn('Failed to register Queue HTTP gateway routes', error);
     }
 };
+const initializeScheduleHttpGateway = async (router) => {
+    try {
+        const { ScheduleHttpGateway } = await import('../../scheduler/ScheduleHttpGateway.js');
+        ScheduleHttpGateway.create().registerRoutes(router);
+        Logger.info('Schedule HTTP gateway route registered at /api/_sys/schedule/rpc');
+    }
+    catch (error) {
+        Logger.warn('Failed to register Schedule HTTP gateway routes', error);
+    }
+};
 export const createLifecycle = (params) => {
     const boot = async () => {
         if (params.getBooted())
@@ -324,6 +334,7 @@ export const createLifecycle = (params) => {
             await initializeWorkers(params.router);
             await initializeQueueMonitor(params.router);
             await initializeQueueHttpGateway(params.router);
+            await initializeScheduleHttpGateway(params.router);
         }
         // Register service providers
         // Bootstrap services

package/src/cache/Cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Cache.d.ts","sourceRoot":"","sources":["../../../src/cache/Cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAmHtD,KAAK,UAAU,GAAG,QAAQ,CAAC;IACzB,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,WAAW,CAAC;CAC9B,CAAC,CAAC;AA0CH,eAAO,MAAM,KAAK;UA1FC,CAAC,OAAO,MAAM,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;UAQlC,CAAC,OAAO,MAAM,SAAS,CAAC,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;kBAOjD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;iBAOtB,OAAO,CAAC,IAAI,CAAC;eAOb,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;qBAQ3B,WAAW;mBAaX,MAAM,KAAG,UAAU;iBAmCvB,IAAI;EAcpB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,KAAK;UAxGC,CAAC,OAAO,MAAM,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;UAQlC,CAAC,OAAO,MAAM,SAAS,CAAC,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;kBAOjD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;iBAOtB,OAAO,CAAC,IAAI,CAAC;eAOb,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;qBAQ3B,WAAW;mBAaX,MAAM,KAAG,UAAU;iBAmCvB,IAAI;EAmBI,CAAC"}
+{"version":3,"file":"Cache.d.ts","sourceRoot":"","sources":["../../../src/cache/Cache.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAmJtD,KAAK,UAAU,GAAG,QAAQ,CAAC;IACzB,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,WAAW,CAAC;CAC9B,CAAC,CAAC;AA8CH,eAAO,MAAM,KAAK;UAlGC,CAAC,OAAO,MAAM,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;UASlC,CAAC,OAAO,MAAM,SAAS,CAAC,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;kBAQjD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;iBAQtB,OAAO,CAAC,IAAI,CAAC;eAOb,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;qBAS3B,WAAW;mBAaX,MAAM,KAAG,UAAU;iBAuCvB,IAAI;EAcpB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,KAAK;UAhHC,CAAC,OAAO,MAAM,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;UASlC,CAAC,OAAO,MAAM,SAAS,CAAC,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;kBAQjD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;iBAQtB,OAAO,CAAC,IAAI,CAAC;eAOb,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;qBAS3B,WAAW;mBAaX,MAAM,KAAG,UAAU;iBAuCvB,IAAI;EAmBI,CAAC"}

package/src/cache/Cache.js

@@ -1,3 +1,4 @@
+/* eslint-disable @typescript-eslint/require-await */
 /**
  * Cache Manager
  * Central cache management and driver resolution
@@ -10,8 +11,24 @@ import { MemoryDriver } from './drivers/MemoryDriver.js';
 import { MongoDriver } from './drivers/MongoDriver.js';
 import { RedisDriver } from './drivers/RedisDriver.js';
 import { cacheConfig } from '../config/cache.js';
+import { Env } from '../config/env.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 const instances = new Map();
+/**
+ * Auto-prefix cache keys with 'zt:' if not already prefixed
+ */
+function autoPrefixKey(key) {
+    return key.startsWith('zt:') ? key : `zt:${key}`;
+}
+function createNoOpDriver() {
+    return {
+        get: async () => null,
+        set: async () => { },
+        delete: async () => { },
+        clear: async () => { },
+        has: async () => false,
+    };
+}
 function buildDriver(driver) {
     const maybeCreate = driver.create;
     if (typeof maybeCreate === 'function') {
@@ -23,6 +40,13 @@ function buildDriver(driver) {
     throw ErrorFactory.createGeneralError('Invalid cache driver export');
 }
 function resolveDriver(storeName) {
+    const cacheEnabledRaw = Env.get('CACHE_ENABLED', 'true').trim().toLowerCase();
+    const cacheEnabled = !(cacheEnabledRaw === 'false' ||
+        cacheEnabledRaw === '0' ||
+        cacheEnabledRaw === 'no');
+    if (!cacheEnabled) {
+        return createNoOpDriver();
+    }
     const driverConfig = cacheConfig.getDriver(storeName);
     const externalFactory = CacheDriverRegistry.get(driverConfig.driver);
     if (externalFactory !== undefined) {
@@ -60,20 +84,23 @@ function getDriverInstance(storeName) {
  * Get an item from the cache
  */
 const get = async (key) => {
-    const value = await getDriverInstance().get(key);
+    const prefixedKey = autoPrefixKey(key);
+    const value = await getDriverInstance().get(prefixedKey);
     return value;
 };
 /**
  * Store an item in the cache
  */
 const set = async (key, value, ttl) => {
-    await getDriverInstance().set(key, value, ttl);
+    const prefixedKey = autoPrefixKey(key);
+    await getDriverInstance().set(prefixedKey, value, ttl);
 };
 /**
  * Remove an item from the cache
  */
 const del = async (key) => {
-    await getDriverInstance().delete(key);
+    const prefixedKey = autoPrefixKey(key);
+    await getDriverInstance().delete(prefixedKey);
 };
 /**
  * Clear all items from the cache
@@ -85,7 +112,8 @@ const clear = async () => {
  * Check if an item exists in the cache
  */
 const has = async (key) => {
-    const exists = await getDriverInstance().has(key);
+    const prefixedKey = autoPrefixKey(key);
+    const exists = await getDriverInstance().has(prefixedKey);
     return exists;
 };
 /**
@@ -96,19 +124,23 @@ const getDriver = () => {
 };
 const store = (name) => {
     const getFromStore = async (key) => {
-        return getDriverInstance(name).get(key);
+        const prefixedKey = autoPrefixKey(key);
+        return getDriverInstance(name).get(prefixedKey);
     };
     const setInStore = async (key, value, ttl) => {
-        await getDriverInstance(name).set(key, value, ttl);
+        const prefixedKey = autoPrefixKey(key);
+        await getDriverInstance(name).set(prefixedKey, value, ttl);
     };
     const delFromStore = async (key) => {
-        await getDriverInstance(name).delete(key);
+        const prefixedKey = autoPrefixKey(key);
+        await getDriverInstance(name).delete(prefixedKey);
     };
     const clearStore = async () => {
         await getDriverInstance(name).clear();
     };
     const hasInStore = async (key) => {
-        return getDriverInstance(name).has(key);
+        const prefixedKey = autoPrefixKey(key);
+        return getDriverInstance(name).has(prefixedKey);
     };
     const getStoreDriver = () => {
         return getDriverInstance(name);

package/src/cache/drivers/KVRemoteDriver.d.ts

@@ -5,7 +5,7 @@
  */
 import type { CacheDriver } from '../CacheDriver';
 export declare const KVRemoteDriver: Readonly<{
-    create(): CacheDriver;
+    create: () => CacheDriver;
 }>;
 export default KVRemoteDriver;
 //# sourceMappingURL=KVRemoteDriver.d.ts.map

package/src/cache/drivers/KVRemoteDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KVRemoteDriver.d.ts","sourceRoot":"","sources":["../../../../src/cache/drivers/KVRemoteDriver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAiCtD,eAAO,MAAM,cAAc;cACf,WAAW;EAkErB,CAAC;AAEH,eAAe,cAAc,CAAC"}
+{"version":3,"file":"KVRemoteDriver.d.ts","sourceRoot":"","sources":["../../../../src/cache/drivers/KVRemoteDriver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAqYtD,eAAO,MAAM,cAAc;kBAtFM,WAAW;EAwF1C,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/src/cache/drivers/KVRemoteDriver.js

@@ -6,6 +6,7 @@
 import { RemoteSignedJson } from '../../common/RemoteSignedJson.js';
 import { Env } from '../../config/env.js';
 import { Logger } from '../../config/logger.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
 const resolveSigningPrefix = (baseUrl) => {
     try {
         const parsed = new URL(baseUrl);
@@ -19,65 +20,279 @@ const resolveSigningPrefix = (baseUrl) => {
     }
 };
 const normalizeNamespace = (defaultNamespace) => defaultNamespace.trim() === '' ? undefined : defaultNamespace;
-export const KVRemoteDriver = Object.freeze({
-    create() {
-        const settings = {
-            baseUrl: Env.get('KV_REMOTE_URL'),
-            keyId: Env.get('KV_REMOTE_KEY_ID'),
-            secret: Env.get('KV_REMOTE_SECRET', Env.APP_KEY),
-            defaultNamespace: Env.get('KV_REMOTE_NAMESPACE'),
-            timeoutMs: Env.getInt('ZT_PROXY_TIMEOUT_MS', Env.REQUEST_TIMEOUT),
-        };
-        const remote = {
-            baseUrl: settings.baseUrl,
-            keyId: settings.keyId,
-            secret: settings.secret,
-            timeoutMs: settings.timeoutMs,
-            signaturePathPrefixToStrip: resolveSigningPrefix(settings.baseUrl),
-            missingUrlMessage: 'KV remote proxy URL is missing (KV_REMOTE_URL)',
-            missingCredentialsMessage: 'KV remote signing credentials are missing (KV_REMOTE_KEY_ID / KV_REMOTE_SECRET)',
-            messages: {
-                unauthorized: 'KV remote proxy unauthorized',
-                forbidden: 'KV remote proxy forbidden',
-                rateLimited: 'KV remote proxy rate limited',
-                rejected: 'KV remote proxy rejected request',
-                error: 'KV remote proxy error',
-                timedOut: 'KV remote proxy request timed out',
-            },
-        };
-        return {
-            async get(key) {
+const getSettings = () => ({
+    baseUrl: Env.get('KV_REMOTE_URL'),
+    keyId: Env.get('KV_REMOTE_KEY_ID'),
+    secret: Env.get('KV_REMOTE_SECRET', Env.APP_KEY),
+    defaultNamespace: Env.get('KV_REMOTE_NAMESPACE'),
+    timeoutMs: Env.getInt('ZT_PROXY_TIMEOUT_MS', Env.REQUEST_TIMEOUT),
+});
+const getCloudflareCreds = () => ({
+    accountId: Env.get('KV_ACCOUNT_ID', Env.get('CLOUDFLARE_ACCOUNT_ID', '')).trim(),
+    apiToken: Env.get('KV_API_TOKEN', Env.get('CLOUDFLARE_API_TOKEN', '')).trim(),
+    namespaceId: Env.get('KV_NAMESPACE_ID', Env.get('CLOUDFLARE_KV_NAMESPACE_ID', '')).trim(),
+    namespaceTitle: Env.get('KV_NAMESPACE', '').trim(),
+});
+const hasCloudflareApiCreds = () => {
+    const creds = getCloudflareCreds();
+    return creds.accountId !== '' && creds.apiToken !== '';
+};
+const hasProxySigningCreds = (settings) => settings.keyId.trim() !== '' && settings.secret.trim() !== '';
+const buildCloudflareValueUrl = (creds, key, ttlSeconds) => {
+    const base = `https://api.cloudflare.com/client/v4/accounts/${encodeURIComponent(creds.accountId)}/storage/kv/namespaces/${encodeURIComponent(creds.namespaceId)}/values/${encodeURIComponent(key)}`;
+    if (ttlSeconds === undefined)
+        return base;
+    const ttl = Math.max(60, Math.floor(ttlSeconds));
+    return ttl > 0 ? `${base}?expiration_ttl=${ttl}` : base;
+};
+const cfFetch = async (apiToken, url, init) => {
+    const headers = new Headers(init.headers);
+    headers.set('Authorization', `Bearer ${apiToken}`);
+    return fetch(url, { ...init, headers });
+};
+const parseJsonOrThrow = (text, message) => {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw ErrorFactory.createConnectionError(message, { body: text });
+    }
+};
+const listNamespacesPage = async (params) => {
+    const url = `https://api.cloudflare.com/client/v4/accounts/${encodeURIComponent(params.accountId)}/storage/kv/namespaces?page=${params.page}&per_page=${params.perPage}`;
+    const res = await cfFetch(params.apiToken, url, { method: 'GET' });
+    const text = await res.text();
+    if (!res.ok) {
+        throw ErrorFactory.createConnectionError(`Cloudflare KV namespaces list failed (${res.status})`, {
+            status: res.status,
+            body: text,
+        });
+    }
+    const parsed = parseJsonOrThrow(text, 'Cloudflare KV namespaces list returned invalid JSON');
+    const namespaces = (parsed.result ?? [])
+        .map((ns) => ({
+        id: typeof ns.id === 'string' ? ns.id.trim() : '',
+        title: typeof ns.title === 'string' ? ns.title.trim() : '',
+    }))
+        .filter((ns) => ns.id !== '' && ns.title !== '');
+    const totalPages = Number(parsed.result_info?.total_pages ?? 1);
+    return {
+        namespaces,
+        totalPages: Number.isFinite(totalPages) && totalPages > 0 ? totalPages : 1,
+    };
+};
+const findNamespaceIdByTitle = (namespaces, title) => {
+    const found = namespaces.find((ns) => ns.title === title);
+    return found?.id ?? null;
+};
+const createRemoteSettings = (settings) => ({
+    baseUrl: settings.baseUrl,
+    keyId: settings.keyId,
+    secret: settings.secret,
+    timeoutMs: settings.timeoutMs,
+    signaturePathPrefixToStrip: resolveSigningPrefix(settings.baseUrl),
+    missingUrlMessage: 'KV remote proxy URL is missing (KV_REMOTE_URL)',
+    missingCredentialsMessage: 'KV remote signing credentials are missing (KV_REMOTE_KEY_ID / KV_REMOTE_SECRET)',
+    messages: {
+        unauthorized: 'KV remote proxy unauthorized',
+        forbidden: 'KV remote proxy forbidden',
+        rateLimited: 'KV remote proxy rate limited',
+        rejected: 'KV remote proxy rejected request',
+        error: 'KV remote proxy error',
+        timedOut: 'KV remote proxy request timed out',
+    },
+});
+const fetchAllNamespaces = async (params) => {
+    const first = await listNamespacesPage({
+        accountId: params.accountId,
+        apiToken: params.apiToken,
+        page: 1,
+        perPage: 100,
+    });
+    if (first.totalPages <= 1)
+        return first.namespaces;
+    const pages = Array.from({ length: first.totalPages - 1 }, (_v, idx) => idx + 2);
+    const rest = await Promise.all(pages.map(async (page) => listNamespacesPage({
+        accountId: params.accountId,
+        apiToken: params.apiToken,
+        page,
+        perPage: 100,
+    })));
+    return first.namespaces.concat(...rest.map((r) => r.namespaces));
+};
+const createCloudflareNamespaceIdResolver = () => {
+    let cachedNamespaceId = null;
+    let cachedNamespaceTitle = null;
+    let cachedAccountId = null;
+    return async () => {
+        const creds = getCloudflareCreds();
+        if (creds.namespaceId !== '')
+            return creds.namespaceId;
+        if (cachedNamespaceId !== null &&
+            cachedNamespaceTitle === creds.namespaceTitle &&
+            cachedAccountId === creds.accountId) {
+            return cachedNamespaceId;
+        }
+        if (creds.namespaceTitle === '') {
+            throw ErrorFactory.createConfigError('Cloudflare KV namespace id is missing (KV_NAMESPACE_ID) and no namespace title is provided (KV_NAMESPACE)');
+        }
+        const all = await fetchAllNamespaces({ accountId: creds.accountId, apiToken: creds.apiToken });
+        const match = findNamespaceIdByTitle(all, creds.namespaceTitle);
+        if (match === null) {
+            throw ErrorFactory.createConfigError('Cloudflare KV namespace not found', {
+                namespaceTitle: creds.namespaceTitle,
+            });
+        }
+        cachedNamespaceId = match;
+        cachedNamespaceTitle = creds.namespaceTitle;
+        cachedAccountId = creds.accountId;
+        return match;
+    };
+};
+const createCloudflareKvApiClient = (resolveNamespaceId) => {
+    const getJson = async (key) => {
+        const creds = getCloudflareCreds();
+        const namespaceId = await resolveNamespaceId();
+        const url = buildCloudflareValueUrl({ accountId: creds.accountId, namespaceId }, key);
+        const res = await cfFetch(creds.apiToken, url, { method: 'GET' });
+        if (res.status === 404)
+            return null;
+        const text = await res.text();
+        if (!res.ok) {
+            throw ErrorFactory.createConnectionError(`Cloudflare KV GET failed (${res.status})`, {
+                status: res.status,
+                body: text,
+            });
+        }
+        if (text.trim() === '')
+            return null;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return null;
+        }
+    };
+    const putJson = async (key, value, ttlSeconds) => {
+        const creds = getCloudflareCreds();
+        const namespaceId = await resolveNamespaceId();
+        const url = buildCloudflareValueUrl({ accountId: creds.accountId, namespaceId }, key, ttlSeconds);
+        const body = JSON.stringify(value);
+        const res = await cfFetch(creds.apiToken, url, {
+            method: 'PUT',
+            headers: { 'content-type': 'application/json' },
+            body,
+        });
+        const text = await res.text();
+        if (!res.ok) {
+            throw ErrorFactory.createConnectionError(`Cloudflare KV PUT failed (${res.status})`, {
+                status: res.status,
+                body: text,
+            });
+        }
+    };
+    const deleteKey = async (key) => {
+        const creds = getCloudflareCreds();
+        const namespaceId = await resolveNamespaceId();
+        const url = buildCloudflareValueUrl({ accountId: creds.accountId, namespaceId }, key);
+        const res = await cfFetch(creds.apiToken, url, { method: 'DELETE' });
+        const text = await res.text();
+        if (!res.ok && res.status !== 404) {
+            throw ErrorFactory.createConnectionError(`Cloudflare KV DELETE failed (${res.status})`, {
+                status: res.status,
+                body: text,
+            });
+        }
+    };
+    return { getJson, putJson, deleteKey };
+};
+const createKvRemoteDriver = () => {
+    const resolveNamespaceId = createCloudflareNamespaceIdResolver();
+    const cf = createCloudflareKvApiClient(resolveNamespaceId);
+    return {
+        async get(key) {
+            const settings = getSettings();
+            if (!hasProxySigningCreds(settings) && hasCloudflareApiCreds())
+                return cf.getJson(key);
+            try {
+                const remote = createRemoteSettings(settings);
                 const out = await RemoteSignedJson.request(remote, '/zin/kv/get', {
                     namespace: normalizeNamespace(settings.defaultNamespace),
                     key,
                     type: 'json',
                 });
                 return out.value ?? null;
-            },
-            async set(key, value, ttl) {
+            }
+            catch (error) {
+                if (!hasCloudflareApiCreds())
+                    throw error;
+                Logger.warn('KV remote proxy GET failed; falling back to Cloudflare KV API', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                return cf.getJson(key);
+            }
+        },
+        async set(key, value, ttl) {
+            const settings = getSettings();
+            if (!hasProxySigningCreds(settings) && hasCloudflareApiCreds()) {
+                await cf.putJson(key, value, ttl);
+                return;
+            }
+            try {
+                const remote = createRemoteSettings(settings);
                 await RemoteSignedJson.request(remote, '/zin/kv/put', {
                     namespace: normalizeNamespace(settings.defaultNamespace),
                     key,
                     value,
                     ttlSeconds: ttl,
                 });
-            },
-            async delete(key) {
+            }
+            catch (error) {
+                if (!hasCloudflareApiCreds())
+                    throw error;
+                Logger.warn('KV remote proxy PUT failed; falling back to Cloudflare KV API', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                await cf.putJson(key, value, ttl);
+            }
+        },
+        async delete(key) {
+            const settings = getSettings();
+            if (!hasProxySigningCreds(settings) && hasCloudflareApiCreds()) {
+                await cf.deleteKey(key);
+                return;
+            }
+            try {
+                const remote = createRemoteSettings(settings);
                 await RemoteSignedJson.request(remote, '/zin/kv/delete', {
                     namespace: normalizeNamespace(settings.defaultNamespace),
                     key,
                 });
-            },
-            async clear() {
-                // KV proxy does not implement clear() (and KV itself does not support full namespace wipe efficiently).
-                Logger.warn('KV remote clear() is not implemented.');
-                await Promise.resolve();
-            },
-            async has(key) {
-                const value = await this.get(key);
-                return value !== null;
-            },
-        };
-    },
+            }
+            catch (error) {
+                if (!hasCloudflareApiCreds())
+                    throw error;
+                Logger.warn('KV remote proxy DELETE failed; falling back to Cloudflare KV API', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                await cf.deleteKey(key);
+            }
+        },
+        async clear() {
+            Logger.warn('KV remote clear() is not implemented.');
+            await Promise.resolve();
+        },
+        async has(key) {
+            if (!hasCloudflareApiCreds())
+                return (await this.get(key)) !== null;
+            const settings = getSettings();
+            if (!hasProxySigningCreds(settings))
+                return (await cf.getJson(key)) !== null;
+            return (await this.get(key)) !== null;
+        },
+    };
+};
+export const KVRemoteDriver = Object.freeze({
+    create: createKvRemoteDriver,
 });
 export default KVRemoteDriver;

package/src/cache/drivers/MemoryDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MemoryDriver.d.ts","sourceRoot":"","sources":["../../../../src/cache/drivers/MemoryDriver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA0EtD;;GAEG;AACH,eAAO,MAAM,YAAY;kBAtEN,WAAW;EAwE5B,CAAC"}
+{"version":3,"file":"MemoryDriver.d.ts","sourceRoot":"","sources":["../../../../src/cache/drivers/MemoryDriver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAuFtD;;GAEG;AACH,eAAO,MAAM,YAAY;kBAxEN,WAAW;EA0E5B,CAAC"}

package/src/cache/drivers/MemoryDriver.js

@@ -2,6 +2,12 @@
  * Memory Cache Driver
  * Simple in-memory storage for local development
  */
+function isUnrefableTimer(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'unref' in value &&
+        typeof value.unref === 'function');
+}
 /**
  * Memory Cache Driver
  * Simple in-memory storage for local development
@@ -18,8 +24,10 @@ const create = () => {
             }
         }
     }, 60_000); // 60 seconds
-    // Unref so it doesn't keep process alive
-    cleanupInterval.unref();
+    // Unref so it doesn't keep process alive (Node.js only)
+    if (isUnrefableTimer(cleanupInterval)) {
+        cleanupInterval.unref();
+    }
     return {
         async get(key) {
             await Promise.resolve();

package/src/cache/drivers/RedisDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RedisDriver.d.ts","sourceRoot":"","sources":["../../../../src/cache/drivers/RedisDriver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAoFtD;;GAEG;AACH,eAAO,MAAM,WAAW;kBA9EL,WAAW;EAgF5B,CAAC"}
+{"version":3,"file":"RedisDriver.d.ts","sourceRoot":"","sources":["../../../../src/cache/drivers/RedisDriver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAkXtD;;GAEG;AACH,eAAO,MAAM,WAAW;kBAXL,WAAW;EAa5B,CAAC"}