@zintrust/core 0.1.43 → 0.1.44

package/README.md

@@ -24,6 +24,7 @@ Your API is now running at `http://localhost:7777`
 If you’re targeting a different runtime:
 
 - Cloudflare Workers (Wrangler): `zin start --wg`
+- Cloudflare Containers proxy (Wrangler + Docker): `zin init:containers-proxy` then `zin docker -e staging`
 - AWS Lambda adapter mode: `zin start --lambda`
 - Deno adapter mode: `zin start --deno`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "0.1.43",
+  "version": "0.1.44",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {
@@ -65,6 +65,7 @@
     "node-forge": "1.3.3",
     "cross-spawn": "^7.0.5",
     "glob": "^11.1.0",
+    "minimatch": "^10.2.1",
     "undici": "^6.23.0"
   },
   "bin": {

package/src/cli/CLI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CLI.d.ts","sourceRoot":"","sources":["../../../src/cli/CLI.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,MAAM,WAAW,IAAI;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,UAAU,IAAI,OAAO,CAAC;CACvB;AAuPD;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;cACJ,IAAI;EAed,CAAC"}
+{"version":3,"file":"CLI.d.ts","sourceRoot":"","sources":["../../../src/cli/CLI.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,MAAM,WAAW,IAAI;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,UAAU,IAAI,OAAO,CAAC;CACvB;AA0PD;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;cACJ,IAAI;EAed,CAAC"}

package/src/cli/CLI.js

@@ -14,10 +14,13 @@ import { DbSeedCommand } from './commands/DbSeedCommand.js';
 import { DebugCommand } from './commands/DebugCommand.js';
 import { DeployCommand } from './commands/DeployCommand.js';
 import { DeployContainerProxiesCommand } from './commands/DeployContainerProxiesCommand.js';
+import { DeployContainersProxyCommand } from './commands/DeployContainersProxyCommand.js';
 import { DeployContainerWorkersCommand } from './commands/DeployContainerWorkersCommand.js';
+import { DockerCommand } from './commands/DockerCommand.js';
 import { DoctorArchitectureCommand } from './commands/DoctorArchitectureCommand.js';
 import { FixCommand } from './commands/FixCommand.js';
 import { InitContainerCommand } from './commands/InitContainerCommand.js';
+import { InitContainersProxyCommand } from './commands/InitContainersProxyCommand.js';
 import { InitEcosystemCommand } from './commands/InitEcosystemCommand.js';
 import { InitProducerCommand } from './commands/InitProducerCommand.js';
 import { InitProxyCommand } from './commands/InitProxyCommand.js';
@@ -75,6 +78,7 @@ const buildCommandRegistry = () => {
         UpgradeCommand.create(),
         PrepareCommand,
         InitContainerCommand.create(),
+        InitContainersProxyCommand.create(),
         InitProxyCommand.create(),
         InitProducerCommand.create(),
         InitEcosystemCommand.create(),
@@ -84,6 +88,7 @@ const buildCommandRegistry = () => {
         CreateMigrationCommand.create(),
         AddMigrationCommand.create(),
         StartCommand.create(),
+        DockerCommand.create(),
         QueueCommand.create(),
         QueueRecoveryCommand.create(),
         ScheduleListCommand.create(),
@@ -106,6 +111,7 @@ const buildCommandRegistry = () => {
         PublishCommand.create(),
         PutCommand.create(),
         DeployCommand.create(),
+        DeployContainersProxyCommand.create(),
         DeployContainerWorkersCommand.create(),
         DeployContainerProxiesCommand.create(),
         QACommand(),

package/src/cli/commands/DeployCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DeployCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA0HrE;;;GAGG;AACH,eAAO,MAAM,aAAa;IACxB;;OAEG;cACO,YAAY;EAGtB,CAAC"}
+{"version":3,"file":"DeployCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAyIrE;;;GAGG;AACH,eAAO,MAAM,aAAa;IACxB;;OAEG;cACO,YAAY;EAGtB,CAAC"}

package/src/cli/commands/DeployCommand.js

@@ -59,10 +59,20 @@ const runDeploy = async (target, options) => {
         return;
     }
     const environment = options.env ?? target ?? 'worker';
+    const config = typeof options.config === 'string' ? options.config.trim() : '';
+    if (config.length > 0) {
+        const full = join(process.cwd(), config);
+        if (existsSync(full)) {
+            // ok
+        }
+        else {
+            throw ErrorFactory.createCliError(`Wrangler config not found: ${config}`);
+        }
+    }
     Logger.info(`Deploying to Cloudflare environment: ${environment}`);
     const exitCode = await SpawnUtil.spawnAndWait({
         command: 'wrangler',
-        args: ['deploy', '--env', environment],
+        args: ['deploy', ...(config.length > 0 ? ['--config', config] : []), '--env', environment],
     });
     if (exitCode !== 0) {
         process.exit(exitCode);
@@ -76,6 +86,7 @@ const createDeployCommand = () => {
             command
                 .argument('[target]', 'Deployment target (worker, d1-proxy, kv-proxy, production, cw, cp)', 'worker')
                 .option('-e, --env <env>', 'Wrangler environment (overrides target)');
+            command.option('-c, --config <path>', 'Wrangler config file (e.g. wrangler.containers-proxy.jsonc)');
         },
         execute: async (options) => {
             // Note: BaseCommand.create sets up action handler that calls execute(options).

package/src/cli/commands/DeployContainersProxyCommand.d.ts

@@ -0,0 +1,5 @@
+import type { IBaseCommand } from '../BaseCommand';
+export declare const DeployContainersProxyCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+//# sourceMappingURL=DeployContainersProxyCommand.d.ts.map

package/src/cli/commands/DeployContainersProxyCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeployContainersProxyCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployContainersProxyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA2CrE,eAAO,MAAM,4BAA4B;cAC7B,YAAY;EAatB,CAAC"}

package/src/cli/commands/DeployContainersProxyCommand.js

@@ -0,0 +1,45 @@
+import { BaseCommand } from '../BaseCommand.js';
+import { SpawnUtil } from '../utils/spawn.js';
+import { Logger } from '../../config/logger.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { existsSync } from '../../node-singletons/fs.js';
+import { join } from '../../node-singletons/path.js';
+const DEFAULT_CONFIG = 'wrangler.containers-proxy.jsonc';
+const resolveConfig = (cwd, raw) => {
+    const normalized = typeof raw === 'string' ? raw.trim() : '';
+    const candidate = normalized.length > 0 ? normalized : DEFAULT_CONFIG;
+    const full = join(cwd, candidate);
+    if (existsSync(full))
+        return candidate;
+    throw ErrorFactory.createCliError(`Wrangler config not found: ${candidate}`);
+};
+const resolveEnv = (raw) => {
+    const normalized = typeof raw === 'string' ? raw.trim() : '';
+    return normalized.length > 0 ? normalized : 'production';
+};
+const execute = async (options) => {
+    const cwd = process.cwd();
+    const config = resolveConfig(cwd, options.config);
+    const env = resolveEnv(options.env);
+    Logger.info(`Deploying Containers proxy via Wrangler (env=${env})...`);
+    const exitCode = await SpawnUtil.spawnAndWait({
+        command: 'wrangler',
+        args: ['deploy', '--config', config, '--env', env],
+        env: process.env,
+    });
+    process.exit(exitCode);
+};
+export const DeployContainersProxyCommand = Object.freeze({
+    create() {
+        return BaseCommand.create({
+            name: 'deploy:ccp',
+            aliases: ['deploy:containers-proxy', 'deploy:cf-containers-proxy', 'd:ccp', 'ccp:deploy'],
+            description: 'Deploy Cloudflare Containers proxy Worker (wrangler.containers-proxy.jsonc)',
+            addOptions: (command) => {
+                command.option('-e, --env <name>', 'Wrangler environment name', 'production');
+                command.option('-c, --config <path>', 'Wrangler config file', DEFAULT_CONFIG);
+            },
+            execute: async (options) => execute(options),
+        });
+    },
+});

package/src/cli/commands/DockerCommand.d.ts

@@ -0,0 +1,5 @@
+import type { IBaseCommand } from '../BaseCommand';
+export declare const DockerCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+//# sourceMappingURL=DockerCommand.d.ts.map

package/src/cli/commands/DockerCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DockerCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DockerCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA0ErE,eAAO,MAAM,aAAa;cACd,YAAY;EAiBtB,CAAC"}

package/src/cli/commands/DockerCommand.js

@@ -0,0 +1,74 @@
+import { BaseCommand } from '../BaseCommand.js';
+import { SpawnUtil } from '../utils/spawn.js';
+import { Logger } from '../../config/logger.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { existsSync } from '../../node-singletons/fs.js';
+import { join } from '../../node-singletons/path.js';
+const resolveDefaultWranglerConfig = (cwd) => {
+    const candidates = [
+        'wrangler.containers-proxy.jsonc',
+        'wrangler.containers-proxy.json',
+        'wrangler.containers-proxy.toml',
+        'wrangler.jsonc',
+        'wrangler.json',
+        'wrangler.toml',
+    ];
+    for (const candidate of candidates) {
+        const full = join(cwd, candidate);
+        if (existsSync(full))
+            return candidate;
+    }
+    return undefined;
+};
+const resolvePort = (raw) => {
+    const value = typeof raw === 'string' ? raw.trim() : '';
+    if (value === '')
+        return undefined;
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0 || parsed >= 65536) {
+        throw ErrorFactory.createCliError(`Error: Invalid --port '${value}'. Expected 1-65535.`);
+    }
+    return String(parsed);
+};
+const resolveWranglerConfig = (cwd, options) => {
+    const fromCli = typeof options.wranglerConfig === 'string' ? options.wranglerConfig.trim() : '';
+    if (fromCli.length > 0) {
+        const full = join(cwd, fromCli);
+        if (existsSync(full))
+            return fromCli;
+        throw ErrorFactory.createCliError(`Wrangler config not found: ${fromCli}`);
+    }
+    const fallback = resolveDefaultWranglerConfig(cwd);
+    if (typeof fallback === 'string' && fallback.length > 0)
+        return fallback;
+    throw ErrorFactory.createCliError('Wrangler config not found. Expected wrangler.containers-proxy.jsonc (or wrangler.jsonc/toml).');
+};
+const executeDocker = async (options) => {
+    const cwd = process.cwd();
+    const config = resolveWranglerConfig(cwd, options);
+    const env = typeof options.env === 'string' ? options.env.trim() : '';
+    const port = resolvePort(options.port);
+    const args = ['dev', '--config', config];
+    if (typeof port === 'string' && port.length > 0)
+        args.push('--port', port);
+    if (env.length > 0)
+        args.push('--env', env);
+    Logger.info('Starting Wrangler dev (Containers/Docker-backed)...');
+    const exitCode = await SpawnUtil.spawnAndWait({ command: 'wrangler', args, env: process.env });
+    process.exit(exitCode);
+};
+export const DockerCommand = Object.freeze({
+    create() {
+        return BaseCommand.create({
+            name: 'docker',
+            aliases: ['dkr', 'dk'],
+            description: 'Run Wrangler dev using a Docker-backed Cloudflare Containers config',
+            addOptions: (command) => {
+                command.option('-c, --wrangler-config <path>', 'Wrangler config file (defaults if present)');
+                command.option('-e, --env <name>', 'Wrangler environment name');
+                command.option('-p, --port <number>', 'Port for wrangler dev');
+            },
+            execute: async (options) => executeDocker(options),
+        });
+    },
+});

package/src/cli/commands/InitContainersProxyCommand.d.ts

@@ -0,0 +1,5 @@
+import { type IBaseCommand } from '../BaseCommand';
+export declare const InitContainersProxyCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+//# sourceMappingURL=InitContainersProxyCommand.d.ts.map

package/src/cli/commands/InitContainersProxyCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InitContainersProxyCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/InitContainersProxyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA6JlE,eAAO,MAAM,0BAA0B;cAC3B,YAAY;EAuBtB,CAAC"}

package/src/cli/commands/InitContainersProxyCommand.js

@@ -0,0 +1,159 @@
+import { BaseCommand } from '../BaseCommand.js';
+import { PromptHelper } from '../PromptHelper.js';
+import { Logger } from '../../config/logger.js';
+import { copyFileSync, existsSync, mkdirSync, writeFileSync } from '../../node-singletons/fs.js';
+import { join } from '../../node-singletons/path.js';
+const WRANGLER_CONTAINERS_PROXY_TEMPLATE = `/**
+ * ============================================================================
+ * ZinTrust Cloudflare Containers Proxy
+ * ============================================================================
+ * This Worker acts as the "gateway" for the DB/KV/SMTP proxy stack.
+ *
+ * Requests are routed by path prefix:
+ *   /mysql/*     -> ZintrustMySqlProxyContainer (port 8789)
+ *   /postgres/*  -> ZintrustPostgresProxyContainer (port 8790)
+ *   /redis/*     -> ZintrustRedisProxyContainer (port 8791)
+ *   /mongodb/*   -> ZintrustMongoDbProxyContainer (port 8792)
+ *   /sqlserver/* -> ZintrustSqlServerProxyContainer (port 8793)
+ *   /smtp/*      -> ZintrustSmtpProxyContainer (port 8794)
+ *
+ * Notes:
+ * - You must install the runtime package: "@zintrust/cloudflare-containers-proxy".
+ * - Secrets should be uploaded with the same config file.
+ * ============================================================================
+ */
+
+{
+  "name": "zintrust-containers-proxy",
+  "main": "./src/containers-proxy.ts",
+
+  "compatibility_date": "2025-04-21",
+  "compatibility_flags": ["nodejs_compat"],
+
+  "workers_dev": true,
+  "minify": false,
+
+  "containers": [
+    { "class_name": "ZintrustMySqlProxyContainer", "image": "./Dockerfile", "max_instances": 10 },
+    { "class_name": "ZintrustPostgresProxyContainer", "image": "./Dockerfile", "max_instances": 10 },
+    { "class_name": "ZintrustRedisProxyContainer", "image": "./Dockerfile", "max_instances": 10 },
+    { "class_name": "ZintrustMongoDbProxyContainer", "image": "./Dockerfile", "max_instances": 10 },
+    { "class_name": "ZintrustSqlServerProxyContainer", "image": "./Dockerfile", "max_instances": 10 },
+    { "class_name": "ZintrustSmtpProxyContainer", "image": "./Dockerfile", "max_instances": 10 }
+  ],
+
+  "durable_objects": {
+    "bindings": [
+      { "name": "ZT_PROXY_MYSQL", "class_name": "ZintrustMySqlProxyContainer" },
+      { "name": "ZT_PROXY_POSTGRES", "class_name": "ZintrustPostgresProxyContainer" },
+      { "name": "ZT_PROXY_REDIS", "class_name": "ZintrustRedisProxyContainer" },
+      { "name": "ZT_PROXY_MONGODB", "class_name": "ZintrustMongoDbProxyContainer" },
+      { "name": "ZT_PROXY_SQLSERVER", "class_name": "ZintrustSqlServerProxyContainer" },
+      { "name": "ZT_PROXY_SMTP", "class_name": "ZintrustSmtpProxyContainer" }
+    ]
+  },
+
+  "migrations": [
+    {
+      "tag": "containers-proxy-v1",
+      "new_sqlite_classes": [
+        "ZintrustMySqlProxyContainer",
+        "ZintrustPostgresProxyContainer",
+        "ZintrustRedisProxyContainer",
+        "ZintrustMongoDbProxyContainer",
+        "ZintrustSqlServerProxyContainer",
+        "ZintrustSmtpProxyContainer"
+      ]
+    }
+  ],
+
+  "env": {
+    "staging": {
+      "name": "zintrust-containers-proxy-staging",
+      "minify": false,
+      "vars": {
+        "ENVIRONMENT": "staging",
+        "APP_NAME": "ZinTrust",
+        "CSRF_SKIP_PATHS": "/api/*,/queue-monitor/*"
+      },
+      // Add routes here when ready:
+      // "routes": [{ "pattern": "proxy-staging.example.com", "custom_domain": true }]
+    },
+    "production": {
+      "name": "zintrust-containers-proxy-production",
+      "minify": true,
+      "vars": {
+        "ENVIRONMENT": "production",
+        "APP_NAME": "ZinTrust",
+        "CSRF_SKIP_PATHS": "/api/*,/queue-monitor/*"
+      },
+      // Add routes here when ready:
+      // "routes": [{ "pattern": "proxy.example.com", "custom_domain": true }]
+    }
+  }
+}
+`;
+const WORKER_ENTRY_TEMPLATE = `export { default } from '@zintrust/cloudflare-containers-proxy';
+export * from '@zintrust/cloudflare-containers-proxy';
+`;
+const backupSuffix = () => new Date().toISOString().replaceAll(/[:.]/g, '-');
+const backupFileIfExists = (filePath) => {
+    if (!existsSync(filePath))
+        return;
+    const backupPath = `${filePath}.bak.${backupSuffix()}`;
+    copyFileSync(filePath, backupPath);
+    Logger.info(`🗂️ Backup created: ${backupPath}`);
+};
+async function writeWranglerConfig(cwd) {
+    const configPath = join(cwd, 'wrangler.containers-proxy.jsonc');
+    let shouldWrite = true;
+    if (existsSync(configPath)) {
+        shouldWrite = await PromptHelper.confirm('wrangler.containers-proxy.jsonc already exists. Overwrite?', false);
+    }
+    if (!shouldWrite) {
+        Logger.info('Skipped wrangler.containers-proxy.jsonc');
+        return;
+    }
+    backupFileIfExists(configPath);
+    writeFileSync(configPath, WRANGLER_CONTAINERS_PROXY_TEMPLATE);
+    Logger.info('✅ Created wrangler.containers-proxy.jsonc');
+}
+async function writeWorkerEntry(cwd) {
+    const srcDir = join(cwd, 'src');
+    const entryPath = join(srcDir, 'containers-proxy.ts');
+    if (!existsSync(srcDir)) {
+        mkdirSync(srcDir, { recursive: true });
+    }
+    let shouldWrite = true;
+    if (existsSync(entryPath)) {
+        shouldWrite = await PromptHelper.confirm('src/containers-proxy.ts already exists. Overwrite?', false);
+    }
+    if (!shouldWrite) {
+        Logger.info('Skipped src/containers-proxy.ts');
+        return;
+    }
+    backupFileIfExists(entryPath);
+    writeFileSync(entryPath, WORKER_ENTRY_TEMPLATE);
+    Logger.info('✅ Created src/containers-proxy.ts');
+}
+export const InitContainersProxyCommand = Object.freeze({
+    create() {
+        return BaseCommand.create({
+            name: 'init:containers-proxy',
+            aliases: ['init:ccp', 'init:cf-containers-proxy'],
+            description: 'Scaffold Cloudflare Containers proxy Worker (wrangler.containers-proxy.jsonc)',
+            async execute() {
+                Logger.info('Initializing Cloudflare Containers proxy scaffolding...');
+                const cwd = process.cwd();
+                await writeWranglerConfig(cwd);
+                await writeWorkerEntry(cwd);
+                Logger.info('✅ Containers proxy scaffolding complete.');
+                Logger.info('Install runtime: npm i @zintrust/cloudflare-containers-proxy');
+                Logger.info('Dev (Wrangler + Docker): zin docker --wrangler-config wrangler.containers-proxy.jsonc --env staging');
+                Logger.info('Dev (short): zin dk -e staging');
+                Logger.info('Deploy (short): zin d:ccp');
+                await Promise.resolve();
+            },
+        });
+    },
+});

package/src/cli/commands/PutCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PutCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PutCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAmNvF,eAAO,MAAM,UAAU;cACX,YAAY;EAWtB,CAAC;AAEH,eAAe,UAAU,CAAC"}
+{"version":3,"file":"PutCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PutCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA0OvF,eAAO,MAAM,UAAU;cACX,YAAY;EAWtB,CAAC;AAEH,eAAe,UAAU,CAAC"}

package/src/cli/commands/PutCommand.js

@@ -74,9 +74,14 @@ const getPutTimeoutMs = () => {
         return 120000;
     return parsed;
 };
-const putSecret = (wranglerEnv, key, value) => {
+const putSecret = (wranglerEnv, key, value, configPath) => {
     const npmPath = resolveNpmPath();
-    execFileSync(npmPath, ['exec', '--yes', '--', 'wrangler', 'secret', 'put', key, '--env', wranglerEnv], {
+    const args = ['exec', '--yes', '--', 'wrangler'];
+    if (typeof configPath === 'string' && configPath.trim().length > 0) {
+        args.push('--config', configPath.trim());
+    }
+    args.push('secret', 'put', key, '--env', wranglerEnv);
+    execFileSync(npmPath, args, {
         stdio: ['pipe', 'inherit', 'inherit'],
         input: value,
         encoding: 'utf8',
@@ -91,6 +96,7 @@ const addOptions = (command) => {
         .option('--wg <env...>', 'Wrangler environment target(s), e.g. d1-proxy kv-proxy')
         .option('--var <configKey...>', 'Config array key(s) from .zintrust.json (e.g. d1_env kv_env)')
         .option('--env_path <path>', 'Path to env file used as source values', '.env')
+        .option('-c, --config <path>', 'Wrangler config file to target (optional)')
         .option('--dry-run', 'Show what would be uploaded without calling wrangler');
 };
 const ensureCloudflareProvider = (providerRaw) => {
@@ -122,7 +128,7 @@ const reportResult = (cmd, pushed, failures) => {
         cmd.warn(`${item.key} -> ${item.wranglerEnv}: ${item.reason}`);
     }
 };
-const processPut = (cmd, wranglerEnvs, selectedKeys, envMap, dryRun) => {
+const processPut = (cmd, wranglerEnvs, selectedKeys, envMap, dryRun, configPath) => {
     let pushed = 0;
     const failures = [];
     for (const wranglerEnv of wranglerEnvs) {
@@ -135,7 +141,7 @@ const processPut = (cmd, wranglerEnvs, selectedKeys, envMap, dryRun) => {
             try {
                 if (!dryRun) {
                     cmd.info(`putting ${key} -> ${wranglerEnv}...`);
-                    putSecret(wranglerEnv, key, value);
+                    putSecret(wranglerEnv, key, value, configPath);
                 }
                 pushed += 1;
                 cmd.info(`${dryRun ? '[dry-run] ' : ''}put ${key} -> ${wranglerEnv}`);
@@ -156,7 +162,11 @@ const execute = async (cmd, options) => {
     const envMap = await EnvFile.read({ cwd, path: envFilePath });
     const wranglerEnvs = resolveWranglerEnvs(options);
     const dryRun = options.dryRun === true;
-    const result = processPut(cmd, wranglerEnvs, selectedKeys, envMap, dryRun);
+    const configPath = typeof options.config === 'string' ? options.config.trim() : '';
+    if (configPath !== '' && !existsSync(path.join(cwd, configPath))) {
+        throw ErrorFactory.createCliError(`Wrangler config not found: ${configPath}`);
+    }
+    const result = processPut(cmd, wranglerEnvs, selectedKeys, envMap, dryRun, configPath === '' ? undefined : configPath);
     reportResult(cmd, result.pushed, result.failures);
 };
 export const PutCommand = Object.freeze({

package/src/cli/commands/StartCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA2lBvF,eAAO,MAAM,YAAY;cACb,YAAY;EA4BtB,CAAC"}
+{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAwnBvF,eAAO,MAAM,YAAY;cACb,YAAY;EA6BtB,CAAC"}

package/src/cli/commands/StartCommand.js

@@ -241,16 +241,29 @@ const resolveNodeProdCommand = (cwd) => {
     }
     return { command: 'node', args: [compiled] };
 };
-const executeWranglerStart = async (cmd, cwd, port, runtime, envName) => {
+const executeWranglerStart = async (cmd, cwd, port, runtime, envName, wranglerConfig) => {
     if (runtime !== undefined) {
         throw ErrorFactory.createCliError('Error: --runtime is not supported with --wrangler (Wrangler controls Workers runtime).');
     }
-    const configPath = findWranglerConfig(cwd);
+    const normalizedConfig = typeof wranglerConfig === 'string' ? wranglerConfig.trim() : '';
+    const explicitConfigFullPath = normalizedConfig.length > 0 ? path.join(cwd, normalizedConfig) : undefined;
+    const configPath = explicitConfigFullPath ?? findWranglerConfig(cwd);
     const entry = resolveWranglerEntry(cwd);
+    if (explicitConfigFullPath !== undefined) {
+        if (existsSync(explicitConfigFullPath)) {
+            // ok
+        }
+        else {
+            throw ErrorFactory.createCliError(`Error: Wrangler config not found: ${normalizedConfig}`);
+        }
+    }
     if (configPath === undefined && entry === undefined) {
         throw ErrorFactory.createCliError("Error: wrangler config not found (wrangler.toml/json). Run 'wrangler init' first.");
     }
     const wranglerArgs = ['dev'];
+    if (normalizedConfig !== '') {
+        wranglerArgs.push('--config', normalizedConfig);
+    }
     if (configPath === undefined && entry !== undefined) {
         wranglerArgs.push(entry);
     }
@@ -429,7 +442,10 @@ const executeStart = async (options, cmd) => {
         ...(typeof cacheEnabled === 'boolean' ? { cacheEnabled } : {}),
     });
     if (variant === 'wrangler') {
-        await executeWranglerStart(cmd, cwd, port, runtime, envName === '' ? undefined : envName);
+        const wranglerConfig = typeof options.wranglerConfig === 'string' && options.wranglerConfig.trim() !== ''
+            ? options.wranglerConfig.trim()
+            : undefined;
+        await executeWranglerStart(cmd, cwd, port, runtime, envName === '' ? undefined : envName, wranglerConfig);
         return;
     }
     if (envName !== '') {
@@ -461,6 +477,7 @@ export const StartCommand = Object.freeze({
                 .option('--no-watch', 'Disable watch mode (Node only)')
                 .option('--mode <development|production|testing>', 'Override app mode')
                 .option('--env <name>', 'Wrangler environment name (Wrangler mode only)')
+                .option('--wrangler-config <path>', 'Wrangler config path (Wrangler mode only)')
                 .option('--runtime <nodejs|cloudflare|lambda|deno|auto>', 'Set RUNTIME for spawned Node')
                 .option('-p, --port <number>', 'Override server port');
         };

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v0.1.43
+ * @zintrust/core v0.1.44
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-02-18T18:05:00.416Z
+ *   Built: 2026-02-19T18:45:53.851Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.41';
-export const ZINTRUST_BUILD_DATE = '2026-02-18T18:05:00.386Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-02-19T18:45:53.822Z'; // Replaced during build
 export { Application } from './boot/Application.js';
 export { AwsSigV4 } from './common/index.js';
 export { SignedRequest } from './security/SignedRequest.js';