@zintrust/core 0.1.42 → 0.1.43

package/src/cli/scaffolding/ProjectScaffolder.js

@@ -125,41 +125,56 @@ const toSafeDbBasename = (raw) => {
     }
     return out === '' ? 'zintrust' : out;
 };
-const buildDatabaseEnvLinesWithName = (database, name) => {
-    if (database === 'postgresql' || database === 'postgres') {
-        return [
-            'DB_HOST=localhost',
-            'DB_PORT=5432',
-            'DB_DATABASE=zintrust',
-            'DB_USERNAME=postgres',
-            'DB_PASSWORD=',
-        ];
+const readEnvScaffoldTemplate = () => {
+    const templateUrl = new URL('./templates/env.scaffold.dotenv.tpl', import.meta.url);
+    return fs.readFileSync(templateUrl, 'utf8');
+};
+const renderEnvScaffold = (template, vars) => {
+    let out = template;
+    for (const [key, value] of Object.entries(vars)) {
+        out = out.replaceAll(`{{${key}}}`, value);
     }
-    if (database === 'mysql') {
-        return [
-            'DB_HOST=localhost',
-            'DB_PORT=3306',
-            'DB_DATABASE=zintrust',
-            'DB_USERNAME=root',
-            'DB_PASSWORD=',
-        ];
+    // Normalize: if a placeholder resolves to empty, prevent excessive blank blocks.
+    out = out.replaceAll('\n\n\n', '\n\n');
+    return out;
+};
+const buildDbOverrides = (dbConnection) => {
+    const normalized = dbConnection.trim().toLowerCase();
+    if (normalized === 'mysql') {
+        return {
+            dbLines: [
+                'DB_HOST=localhost',
+                'DB_PORT=3306',
+                'DB_DATABASE=zintrust',
+                'DB_USERNAME=root',
+                'DB_PASSWORD=',
+            ],
+        };
     }
-    if (database === 'sqlite') {
-        // Provide both DB_DATABASE (used by the framework) and DB_PATH (common alias)
-        const base = toSafeDbBasename(name);
-        return [`DB_DATABASE=.zintrust/dbs/${base}.sqlite`, `DB_PATH=.zintrust/dbs/${base}.sqlite`];
+    if (normalized === 'postgres' || normalized === 'postgresql') {
+        return {
+            dbLines: [
+                'DB_HOST=localhost',
+                'DB_PORT=5432',
+                'DB_DATABASE=zintrust',
+                'DB_USERNAME=postgres',
+                'DB_PASSWORD=',
+            ],
+        };
     }
-    if (database === 'd1-remote' || database === 'd1-proxy') {
-        return [
-            '# Cloudflare D1 Remote Proxy (HTTPS)',
-            'D1_REMOTE_URL=',
-            'D1_REMOTE_KEY_ID=',
-            'D1_REMOTE_SECRET=',
-            'D1_REMOTE_MODE=registry',
-            'ZT_PROXY_TIMEOUT_MS=15000',
-        ];
+    if (normalized === 'sqlserver' || normalized === 'mssql') {
+        return {
+            dbLines: [
+                'DB_HOST_MSSQL=localhost',
+                'DB_PORT_MSSQL=1433',
+                'DB_DATABASE_MSSQL=zintrust',
+                'DB_USERNAME_MSSQL=sa',
+                'DB_PASSWORD_MSSQL=',
+            ],
+        };
     }
-    return [];
+    // sqlite/d1/d1-remote/etc: no overrides here (DB_PATH is handled via SQLITE_DB_PATH placeholder)
+    return { dbLines: [] };
 };
 const createEnvFile = (projectPath, variables) => {
     try {
@@ -174,56 +189,33 @@ const createEnvFile = (projectPath, variables) => {
                 HOST: 'localhost',
                 PORT: String(Number(variables['port'] ?? 7777)),
                 LOG_LEVEL: 'debug',
-                CSRF_SKIP_PATHS: '/api/*,/queue-monitor/*',
+                CSRF_SKIP_PATHS: '/api/*,/queue-monitor/*,/api/_sys/queue/*,/api/_sys/schedule/*',
             });
             return true;
         }
         const name = typeof variables['projectName'] === 'string' ? variables['projectName'] : 'zintrust-app';
         const port = Number(variables['port'] ?? 7777);
         const database = typeof variables['database'] === 'string' ? variables['database'] : 'sqlite';
+        const baseUrl = `http://localhost:${port}`;
+        const dbConnection = database.trim().toLowerCase();
+        const sqliteDbPath = `.zintrust/dbs/${toSafeDbBasename(name)}.sqlite`;
         // Generate a secure APP_KEY (32 bytes = 256-bit, base64 encoded)
         const appKeyBytes = randomBytes(32);
-        const appKey = appKeyBytes.toString('base64');
-        const baseLines = [
-            'NODE_ENV=development',
-            'STARTUP_REQUIRE_ENV=true',
-            `APP_NAME=${name}`,
-            'HOST=localhost',
-            `PORT=${port}`,
-            'APP_DEBUG=true',
-            // Auto-generated secure key for storage signing and encryption
-            `APP_KEY=${appKey}`,
-            `DB_CONNECTION=${database}`,
-        ];
-        const dbLines = buildDatabaseEnvLinesWithName(database, name);
-        const placeholderLines = [
-            '',
-            '# Logging',
-            'LOG_LEVEL=debug',
-            'LOG_CHANNEL=file',
-            'LOG_FORMAT=text',
-            '',
-            '# Auth / Security',
-            'JWT_SECRET=',
-            'JWT_EXPIRES_IN=1h',
-            'CSRF_SECRET=',
-            'CSRF_SKIP_PATHS=/api/*,/queue-monitor/*',
-            'ENCRYPTION_CIPHER=aes-256-cbc',
-            'APP_PREVIOUS_KEYS=',
-            '',
-            '# Cache / Queue',
-            'CACHE_DRIVER=memory',
-            'CACHE_TTL=300',
-            'QUEUE_DRIVER=sync',
-            '',
-            '# Microservices',
-            'SERVICE_DISCOVERY_ENABLED=false',
-            'SERVICE_DISCOVERY_TYPE=filesystem',
-            'SERVICE_NAME=',
-            'SERVICE_VERSION=1.0.0',
-        ];
-        const lines = [...baseLines, ...dbLines, ...placeholderLines];
-        fs.writeFileSync(fullPath, lines.join('\n') + '\n');
+        // Keep consistent with `zin key:generate` output.
+        const appKey = `base64:${appKeyBytes.toString('base64')}`;
+        const { dbLines } = buildDbOverrides(dbConnection);
+        const dbLinesBlock = dbLines.join('\n');
+        const template = readEnvScaffoldTemplate();
+        const content = renderEnvScaffold(template, {
+            APP_NAME: name,
+            PORT: String(port),
+            BASE_URL: baseUrl,
+            APP_KEY: appKey,
+            DB_CONNECTION: dbConnection,
+            SQLITE_DB_PATH: sqliteDbPath,
+            DB_LINES: dbLinesBlock,
+        });
+        fs.writeFileSync(fullPath, content.endsWith('\n') ? content : content + '\n');
         return true;
     }
     catch {

package/src/cli/utils/DistPackager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DistPackager.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/DistPackager.ts"],"names":[],"mappings":"AAoIA,eAAO,MAAM,YAAY;IACvB;;;OAGG;sBACe,MAAM,aAAY,MAAM,GAAmB,IAAI;EAgBjE,CAAC"}
+{"version":3,"file":"DistPackager.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/DistPackager.ts"],"names":[],"mappings":"AAsLA,eAAO,MAAM,YAAY;IACvB;;;OAGG;sBACe,MAAM,aAAY,MAAM,GAAmB,IAAI;EAgBjE,CAAC"}

package/src/cli/utils/DistPackager.js

@@ -49,6 +49,31 @@ const buildDistPackageJson = (rootPkg) => {
                 types: './start.d.ts',
                 default: './start.js',
             },
+            './cli': {
+                types: './src/cli.d.ts',
+                default: './src/cli.js',
+            },
+            './proxy': {
+                types: './src/proxy.d.ts',
+                default: './src/proxy.js',
+            },
+            './collections': {
+                types: './src/collections/index.d.ts',
+                default: './src/collections/index.js',
+            },
+            './helper': {
+                types: './src/helper/index.d.ts',
+                default: './src/helper/index.js',
+            },
+            './node': {
+                types: './src/node.d.ts',
+                default: './src/node.js',
+            },
+            './routes/*': {
+                types: './routes/*.d.ts',
+                default: './routes/*.js',
+            },
+            './package.json': './package.json',
         },
         dependencies: coerceDependencies(rootPkg.dependencies),
     };

package/src/cli/utils/EnvFileLoader.d.ts

@@ -11,6 +11,7 @@ type CliOverrides = {
     nodeEnv?: node_env;
     port?: number;
     runtime?: string;
+    cacheEnabled?: boolean;
 };
 export declare const EnvFileLoader: Readonly<{
     load: (options?: LoadOptions) => LoadState;

package/src/cli/utils/EnvFileLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnvFileLoader.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/EnvFileLoader.ts"],"names":[],"mappings":"AAQA,KAAK,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;AAwHzD,KAAK,WAAW,GAAG;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AA2FF,eAAO,MAAM,aAAa;qBAlEH,WAAW,KAAQ,SAAS;wBAmC1B,SAAS;mCAEI,YAAY,KAAG,IAAI;oBA2BpC,SAAS;EAO5B,CAAC"}
+{"version":3,"file":"EnvFileLoader.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/EnvFileLoader.ts"],"names":[],"mappings":"AAQA,KAAK,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;AAmIzD,KAAK,WAAW,GAAG;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AA+FF,eAAO,MAAM,aAAa;qBAtEH,WAAW,KAAQ,SAAS;wBAmC1B,SAAS;mCAEI,YAAY,KAAG,IAAI;oBA+BpC,SAAS;EAO5B,CAAC"}

package/src/cli/utils/EnvFileLoader.js

@@ -75,6 +75,13 @@ const parseEnvFile = (raw) => {
         const rhs = withoutExport.slice(eq + 1);
         const withoutComment = stripInlineComment(rhs);
         const value = unquote(withoutComment);
+        // DX: treat empty assignments as "no-op" if the key already had a non-empty value earlier
+        // in the same file. This prevents accidental overrides like:
+        //   KV_NAMESPACE_ID=abc
+        //   ...
+        //   KV_NAMESPACE_ID=
+        if (value.trim() === '' && (result[key]?.trim() ?? '') !== '')
+            continue;
         result[key] = value;
     }
     return result;
@@ -83,6 +90,10 @@ const applyToProcessEnv = (values, overrideExisting) => {
     for (const [key, value] of Object.entries(values)) {
         if (!overrideExisting && safeEnvGet(key, '') !== '')
             continue;
+        // DX: don't wipe an already-populated env var with an empty value from an env file.
+        // This avoids surprising behavior when env templates include duplicate keys with blanks.
+        if (value.trim() === '' && safeEnvGet(key, '').trim() !== '')
+            continue;
         safeEnvSet(key, value);
     }
     // Compatibility helpers
@@ -169,6 +180,9 @@ const applyCliOverrides = (overrides) => {
         safeEnvSet('PORT', String(overrides.port));
         safeEnvSet('APP_PORT', String(overrides.port));
     }
+    if (typeof overrides.cacheEnabled === 'boolean') {
+        safeEnvSet('CACHE_ENABLED', String(overrides.cacheEnabled));
+    }
     // Keep PORT/APP_PORT in sync if only one exists.
     if (safeEnvGet('PORT', '') === '' && safeEnvGet('APP_PORT', '') !== '') {
         safeEnvSet('PORT', safeEnvGet('APP_PORT', ''));

package/src/common/RemoteSignedJson.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RemoteSignedJson.d.ts","sourceRoot":"","sources":["../../../src/common/RemoteSignedJson.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yBAAyB,EAAE,MAAM,CAAC;IAElC,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH,CAAC;AAoHF,eAAO,MAAM,gBAAgB;YACb,CAAC,YACH,wBAAwB,QAC5B,MAAM,WACH,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;EAgCb,CAAC;AAEH,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"RemoteSignedJson.d.ts","sourceRoot":"","sources":["../../../src/common/RemoteSignedJson.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yBAAyB,EAAE,MAAM,CAAC;IAElC,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH,CAAC;AAoHF,eAAO,MAAM,gBAAgB;YACb,CAAC,YACH,wBAAwB,QAC5B,MAAM,WACH,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;EA0Cb,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/src/common/RemoteSignedJson.js

@@ -52,7 +52,7 @@ const requireConfigured = (settings) => {
         throw ErrorFactory.createConfigError(settings.missingCredentialsMessage);
     }
 };
-const createTimeoutSignal = (timeoutMs) => {
+const getNativeTimeoutSignal = (timeoutMs) => {
     if (timeoutMs <= 0)
         return undefined;
     const timeout = AbortSignal.timeout;
@@ -118,12 +118,16 @@ export const RemoteSignedJson = Object.freeze({
             keyId: normalized.keyId,
             secret: normalized.secret,
         });
+        const nativeSignal = getNativeTimeoutSignal(normalized.timeoutMs);
+        if (nativeSignal === undefined && normalized.timeoutMs > 0) {
+            throw ErrorFactory.createConfigError('RemoteSignedJson timeout requires AbortSignal.timeout() support in this runtime', { timeoutMs: normalized.timeoutMs });
+        }
         try {
             const resp = await fetch(url, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json', ...signed },
                 body,
-                signal: createTimeoutSignal(normalized.timeoutMs),
+                signal: nativeSignal,
             });
             if (!resp.ok) {
                 await throwForNonOkResponse(resp, normalized);
@@ -133,6 +137,9 @@ export const RemoteSignedJson = Object.freeze({
         catch (error) {
             return rethrowRequestError(error, normalized);
         }
+        finally {
+            // No timer cleanup needed: uses AbortSignal.timeout() when available.
+        }
     },
 });
 export default RemoteSignedJson;

package/src/config/cache.js

@@ -3,8 +3,8 @@
  * Caching drivers and settings
  * Sealed namespace for immutability
  */
-import { Env } from './env.js';
 import { Cloudflare } from './cloudflare.js';
+import { Env } from './env.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
 const getCacheDriver = (config, name) => {

package/src/config/env.d.ts

@@ -171,6 +171,13 @@ export declare const Env: Readonly<{
     CSRF_STORE: string;
     CSRF_DRIVER: string;
     CSRF_REDIS_DB: number;
+    JWT_REVOCATION_DRIVER: string;
+    JWT_REVOCATION_DB_CONNECTION: string;
+    JWT_REVOCATION_DB_TABLE: string;
+    JWT_REVOCATION_REDIS_DB: number;
+    JWT_REVOCATION_REDIS_PREFIX: string;
+    JWT_REVOCATION_KV_BINDING: string;
+    JWT_REVOCATION_KV_PREFIX: string;
     ENCRYPTION_CIPHER: string;
     ENVIRONMENT: string;
     REQUEST_TIMEOUT: number;

package/src/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBlF,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAGF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAIxD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,cAAc,MAAM,KAAG,MAI1D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAI7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAGhD,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,KAAG,IAInC,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,QAAQ,SAAS,GAAG,IAAI,KAAG,IAEpD,CAAC;AAEF,eAAO,MAAM,QAAQ,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAOhD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AACF,eAAO,MAAM,mBAAmB,QAAuC,CAAC;AAKxE,eAAO,MAAM,GAAG;eA3DS,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAMnC,MAAM,gBAAgB,MAAM,KAAG,MAAM;mBAYpC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBANvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;eAY3C,MAAM,SAAS,MAAM,KAAG,IAAI;iBAK1B,MAAM,KAAG,IAAI;wBAMN,SAAS,GAAG,IAAI,KAAG,IAAI;oBAI7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;cAgCJ,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAuNpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFxF,CAAC;AAEH,eAAO,MAAM,aAAa,QAAO,MAchC,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBlF,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAGF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAIxD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,cAAc,MAAM,KAAG,MAI1D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAI7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAGhD,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,KAAG,IAInC,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,QAAQ,SAAS,GAAG,IAAI,KAAG,IAEpD,CAAC;AAEF,eAAO,MAAM,QAAQ,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAOhD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AACF,eAAO,MAAM,mBAAmB,QAAuC,CAAC;AAKxE,eAAO,MAAM,GAAG;eA3DS,MAAM,iBAAiB,MAAM,KAAG,MAAM;kBAMnC,MAAM,gBAAgB,MAAM,KAAG,MAAM;mBAYpC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBANvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;eAY3C,MAAM,SAAS,MAAM,KAAG,IAAI;iBAK1B,MAAM,KAAG,IAAI;wBAMN,SAAS,GAAG,IAAI,KAAG,IAAI;oBAI7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;cAgCJ,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAgOpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFxF,CAAC;AAEH,eAAO,MAAM,aAAa,QAAO,MAchC,CAAC"}

package/src/config/env.js

@@ -261,6 +261,14 @@ export const Env = Object.freeze({
     CSRF_STORE: get('CSRF_STORE', ''),
     CSRF_DRIVER: get('CSRF_DRIVER', ''),
     CSRF_REDIS_DB: getInt('CSRF_REDIS_DB', 1),
+    // JWT revocation (token invalidation)
+    JWT_REVOCATION_DRIVER: get('JWT_REVOCATION_DRIVER', 'database'),
+    JWT_REVOCATION_DB_CONNECTION: get('JWT_REVOCATION_DB_CONNECTION', 'default'),
+    JWT_REVOCATION_DB_TABLE: get('JWT_REVOCATION_DB_TABLE', 'zintrust_jwt_revocations'),
+    JWT_REVOCATION_REDIS_DB: getInt('JWT_REVOCATION_REDIS_DB', 0),
+    JWT_REVOCATION_REDIS_PREFIX: get('JWT_REVOCATION_REDIS_PREFIX', 'zt:jwt:revoked:'),
+    JWT_REVOCATION_KV_BINDING: get('JWT_REVOCATION_KV_BINDING', 'CACHE'),
+    JWT_REVOCATION_KV_PREFIX: get('JWT_REVOCATION_KV_PREFIX', 'zt:jwt:revoked:'),
     // Encryption interop
     ENCRYPTION_CIPHER: get('ENCRYPTION_CIPHER', ''),
     // Deployment

package/src/config/queue.js

@@ -114,7 +114,7 @@ export const createBaseDrivers = () => ({
  * Helper: Create monitor configuration from environment
  */
 const createBaseMonitor = () => ({
-    enabled: Env.getBool('QUEUE_MONITOR_ENABLED', true),
+    enabled: Env.getBool('QUEUE_MONITOR_ENABLED', false),
     basePath: Env.get('QUEUE_MONITOR_BASE_PATH', '/queue-monitor'),
     middleware: Env.get('QUEUE_MONITOR_MIDDLEWARE', '')
         .split(',')

package/src/functions/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../../src/functions/cloudflare.ts"],"names":[],"mappings":";mBAqFuB,OAAO,QAAQ,OAAO,QAAQ,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADhF,wBA8BE"}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../../src/functions/cloudflare.ts"],"names":[],"mappings":";mBAmFuB,OAAO,QAAQ,OAAO,QAAQ,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADhF,wBAkCE"}

package/src/functions/cloudflare.js

@@ -1,5 +1,4 @@
 import { Logger } from '../config/logger.js';
-import * as AppRoutes from '../../routes/api.js';
 import { CloudflareAdapter } from '../runtime/adapters/CloudflareAdapter.js';
 import { StartupConfigFile } from '../runtime/StartupConfigFileRegistry.js';
 import { WorkerAdapterImports } from '../runtime/WorkerAdapterImports.js';
@@ -52,7 +51,10 @@ export default {
         try {
             // Make bindings available to framework code in Workers
             globalThis.env = _env;
-            globalThis.__zintrustRoutes = AppRoutes;
+            const AppRoutes = (await import('@routes/' + 'api.ts'));
+            if (AppRoutes !== undefined) {
+                globalThis.__zintrustRoutes = AppRoutes;
+            }
             await ensureStartupConfigOverridesLoaded();
             await WorkerAdapterImports.ready; // NOSONAR - Ensure adapter imports are ready before handling requests.
             await injectIoredisModule();

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v0.1.42
+ * @zintrust/core v0.1.43
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-02-17T17:13:53.553Z
+ *   Built: 2026-02-18T18:05:00.416Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.41';
-export const ZINTRUST_BUILD_DATE = '2026-02-17T17:13:53.521Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-02-18T18:05:00.386Z'; // Replaced during build
 export { Application } from './boot/Application.js';
 export { AwsSigV4 } from './common/index.js';
 export { SignedRequest } from './security/SignedRequest.js';

package/src/middleware/JwtAuthMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JwtAuthMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/JwtAuthMiddleware.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAItE,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA2BD,eAAO,MAAM,iBAAiB;qBACZ,cAAc,GAAQ,UAAU;EAwDhD,CAAC;AAEH,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"JwtAuthMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/JwtAuthMiddleware.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAItE,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA4BD,eAAO,MAAM,iBAAiB;qBACZ,cAAc,GAAQ,UAAU;EA4DhD,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/src/middleware/JwtAuthMiddleware.js

@@ -1,3 +1,4 @@
+import { Logger } from '../config/logger.js';
 import { securityConfig } from '../config/security.js';
 import { RequestContext } from '../http/RequestContext.js';
 import { JwtManager } from '../security/JwtManager.js';
@@ -11,10 +12,11 @@ const getBearerToken = (authorizationHeader) => {
     const trimmed = authorizationHeader.trim();
     if (trimmed === '')
         return null;
-    const [scheme, token] = trimmed.split(' ');
-    if (scheme !== 'Bearer')
+    const [scheme, ...rest] = trimmed.split(/\s+/);
+    if (typeof scheme !== 'string' || scheme.toLowerCase() !== 'bearer')
         return null;
-    if (typeof token !== 'string' || token.trim() === '')
+    const token = rest.join(' ').trim();
+    if (token === '')
         return null;
     return token;
 };
@@ -45,7 +47,7 @@ export const JwtAuthMiddleware = Object.freeze({
                 res.setStatus(401).json({ error: 'Invalid authorization header format' });
                 return;
             }
-            if (TokenRevocation.isRevoked(token)) {
+            if (await TokenRevocation.isRevoked(token)) {
                 res.setStatus(401).json({ error: 'Invalid or expired token' });
                 return;
             }
@@ -64,7 +66,11 @@ export const JwtAuthMiddleware = Object.freeze({
                 }
                 await next();
             }
-            catch {
+            catch (error) {
+                Logger.debug('JWT verification failed', {
+                    algorithm,
+                    error: error instanceof Error ? error.message : String(error),
+                });
                 res.setStatus(401).json({ error: 'Invalid or expired token' });
             }
         };

package/src/runtime/RuntimeAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeAdapter.d.ts","sourceRoot":"","sources":["../../../src/runtime/RuntimeAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAO7E,KAAK,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;IAElE;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAErE;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAAC;IAE9C;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAEpD;;OAEG;IACH,SAAS,IAAI;QACX,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;KACvC,CAAC;IAEF;;OAEG;IACH,6BAA6B,IAAI,OAAO,CAAC;IAEzC;;OAEG;IACH,cAAc,IAAI;QAChB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,KAAK,KACR,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;KACvC,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,CAAC;IACZ,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;IACvC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC;IAChE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,aAAa,CAAC;IACtE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACxD,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,CAAC;IACtC,UAAU,IAAI,gBAAgB,CAAC;CAChC;AAED,eAAO,MAAM,YAAY;cACb,aAAa;EA0EvB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;uBACL,MAAM,WAAW,MAAM,YAAY,OAAO,GAAG,aAAa;EAW7E,CAAC;AA4EH,KAAK,OAAO,GAAG;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAwGF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG;IAC/D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;CACvB,CAMA"}
+{"version":3,"file":"RuntimeAdapter.d.ts","sourceRoot":"","sources":["../../../src/runtime/RuntimeAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAO7E,KAAK,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;IAElE;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAErE;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAAC;IAE9C;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAEpD;;OAEG;IACH,SAAS,IAAI;QACX,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;KACvC,CAAC;IAEF;;OAEG;IACH,6BAA6B,IAAI,OAAO,CAAC;IAEzC;;OAEG;IACH,cAAc,IAAI;QAChB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,KAAK,KACR,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;KACvC,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,CAAC;IACZ,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;IACvC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC;IAChE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,aAAa,CAAC;IACtE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACxD,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,CAAC;IACtC,UAAU,IAAI,gBAAgB,CAAC;CAChC;AAED,eAAO,MAAM,YAAY;cACb,aAAa;EA0EvB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;uBACL,MAAM,WAAW,MAAM,YAAY,OAAO,GAAG,aAAa;EAW7E,CAAC;AAgGH,KAAK,OAAO,GAAG;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAwGF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG;IAC/D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;CACvB,CAMA"}

package/src/runtime/RuntimeAdapter.js

@@ -106,19 +106,37 @@ const createResponseData = () => ({
     headers: { 'content-type': 'application/json' },
     body: null,
 });
-const createMockRequest = (request, remoteAddress) => ({
-    method: request.method,
-    url: request.path,
-    headers: request.headers,
-    body: request.body ?? undefined,
-    remoteAddress,
-    socket: {
-        remoteAddress,
-    },
-    connection: {
+const createMockRequest = (request, remoteAddress) => {
+    const hasQuery = request.query !== undefined && request.query !== null && Object.keys(request.query).length > 0;
+    const queryString = (() => {
+        if (!hasQuery)
+            return '';
+        const params = new URLSearchParams();
+        for (const [key, rawValue] of Object.entries(request.query ?? {})) {
+            if (Array.isArray(rawValue)) {
+                for (const value of rawValue)
+                    params.append(key, value);
+                continue;
+            }
+            params.append(key, rawValue);
+        }
+        return params.toString();
+    })();
+    const url = queryString === '' ? request.path : `${request.path}?${queryString}`;
+    return {
+        method: request.method,
+        url,
+        headers: request.headers,
+        body: request.body ?? undefined,
         remoteAddress,
-    },
-});
+        socket: {
+            remoteAddress,
+        },
+        connection: {
+            remoteAddress,
+        },
+    };
+};
 const applyWriteHead = (responseData, statusCode, headers) => {
     responseData.statusCode = statusCode;
     if (headers) {

package/src/runtime/adapters/CloudflareAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/CloudflareAdapter.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;mBACY,aAAa,GAAG,cAAc;IAwD7C;;;OAGG;qBACc,OAAO;IAKxB;;;OAGG;qBACc,MAAM,GAAG,OAAO;EAIjC,CAAC;AAwJH;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH"}
+{"version":3,"file":"CloudflareAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/CloudflareAdapter.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;mBACY,aAAa,GAAG,cAAc;IAwD7C;;;OAGG;qBACc,OAAO;IAKxB;;;OAGG;qBACc,MAAM,GAAG,OAAO;EAIjC,CAAC;AAiKH;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH"}

package/src/runtime/adapters/CloudflareAdapter.js

@@ -2,6 +2,7 @@
  * Runtime adapter for Cloudflare Workers
  */
 import { appConfig } from '../../config/index.js';
+import { isUndefinedOrNull } from '../../helper/index.js';
 import { Cloudflare } from '../../config/cloudflare.js';
 import { Env } from '../../config/env.js';
 import { Logger } from '../../config/logger.js';
@@ -116,9 +117,6 @@ async function handleCloudflareRequest(adapter, config, logger, event) {
         return errorResponse.toResponse();
     }
 }
-/**
- * Parse Cloudflare request
- */
 function parseCloudflareRequest(event) {
     const url = new URL(event.url);
     const headers = {};
@@ -126,11 +124,24 @@ function parseCloudflareRequest(event) {
     event.headers.forEach((value, key) => {
         headers[key.toLowerCase()] = value;
     });
+    // Build query object manually to ensure it works
+    const query = {};
+    for (const [key, value] of url.searchParams.entries()) {
+        if (isUndefinedOrNull(query[key])) {
+            query[key] = value;
+        }
+        else if (Array.isArray(query[key])) {
+            query[key].push(value);
+        }
+        else {
+            query[key] = [query[key], value];
+        }
+    }
     return {
         method: event.method.toUpperCase(),
         path: url.pathname,
         headers,
-        query: Object.fromEntries(url.searchParams.entries()),
+        query,
         remoteAddr: headers['cf-connecting-ip']?.toString() || '0.0.0.0',
         signal: event.signal,
     };

package/src/scheduler/Schedule.js

@@ -37,7 +37,7 @@ const normalizeBackoffFactor = (factor) => {
     return Number.isFinite(factor) ? factor : undefined;
 };
 const wrapWithoutOverlapping = (scheduleName, handler, options) => {
-    const providerName = (options.provider ?? 'redis').trim();
+    const providerName = (options.provider ?? 'memory').trim();
     const lockKey = (options.key ?? `schedule:${scheduleName}`).trim();
     const ttlMs = Env.getInt('SCHEDULE_OVERLAP_LOCK_TTL_MS', options.ttlMs ?? 300000);
     const acquireTimeoutMs = Env.getInt('SCHEDULE_OVERLAP_LOCK_ACQUIRE_TIMEOUT_MS', 2000);

package/src/scheduler/leader/SchedulerLeader.js

@@ -6,7 +6,7 @@ import { createAdvancedQueue } from '../../tools/queue/AdvancedQueue.js';
 import { getLockProvider } from '../../tools/queue/LockProvider.js';
 const readSettings = () => {
     const enabled = Env.getBool('SCHEDULE_LEADER_ENABLED', false);
-    const provider = Env.get('SCHEDULE_LEADER_LOCK_PROVIDER', 'redis').trim() || 'redis';
+    const provider = Env.get('SCHEDULE_LEADER_LOCK_PROVIDER', 'memory').trim() || 'memory';
     const key = Env.get('SCHEDULE_LEADER_LOCK_KEY', 'scheduler:leader').trim() || 'scheduler:leader';
     const ttlMs = Env.getInt('SCHEDULE_LEADER_LOCK_TTL_MS', 30000);
     const renewEveryMs = Env.getInt('SCHEDULE_LEADER_LOCK_RENEW_MS', Math.floor(ttlMs / 2));

package/src/schedules/job-tracking-cleanup.js

@@ -110,7 +110,7 @@ const JobTrackingCleanupSchedule = Schedule.define('jobTracking.cleanup', async
     });
 })
     .intervalMs(intervalMs)
-    .withoutOverlapping({ provider: Env.get('JOB_TRACKING_CLEANUP_LOCK_PROVIDER', 'redis') })
+    .withoutOverlapping({ provider: Env.get('JOB_TRACKING_CLEANUP_LOCK_PROVIDER', 'memory') })
     .enabledWhen(enabled)
     .build();
 export default JobTrackingCleanupSchedule;

package/src/security/TokenRevocation.d.ts

@@ -1,7 +1,24 @@
 type AuthorizationHeader = string | string[] | undefined;
+export type TokenRevocationDriverName = 'database' | 'memory' | 'redis' | 'kv' | 'kv-remote';
 export declare const TokenRevocation: Readonly<{
-    revoke(header: AuthorizationHeader): string | null;
-    isRevoked(token: string): boolean;
+    /**
+     * Mark a token as revoked.
+     *
+     * Storage is keyed by JWT `jti` when present; otherwise falls back to the raw token string.
+     */
+    revoke(header: AuthorizationHeader): Promise<string | null>;
+    /**
+     * Check if a token is revoked.
+     */
+    isRevoked(token: string): Promise<boolean>;
+    /**
+     * For observability.
+     */
+    getDriver(): TokenRevocationDriverName;
+    /**
+     * Test/boot helper: reset cached driver.
+     */
+    _resetForTests(): void;
 }>;
 export default TokenRevocation;
 //# sourceMappingURL=TokenRevocation.d.ts.map