@zintrust/core 0.4.15 → 0.4.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "0.4.15",
+  "version": "0.4.16",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {

package/src/cli/commands/AddCommand.d.ts

@@ -32,6 +32,9 @@ interface ControllerPromptAnswers {
 interface RoutesPromptAnswers {
     name: string;
 }
+interface MiddlewarePromptAnswers {
+    name: string;
+}
 interface FactoryPromptAnswers {
     name: string;
     model: string;
@@ -80,6 +83,7 @@ export declare const AddCommand: Readonly<{
         promptModelConfig: () => Promise<ModelPromptAnswers>;
         promptControllerConfig: () => Promise<ControllerPromptAnswers>;
         promptRoutesConfig: () => Promise<RoutesPromptAnswers>;
+        promptMiddlewareConfig: () => Promise<MiddlewarePromptAnswers>;
         promptFactoryConfig: () => Promise<FactoryPromptAnswers>;
         promptSeederConfig: () => Promise<SeederPromptAnswers>;
         promptRequestFactoryConfig: () => Promise<RequestFactoryPromptAnswers>;

package/src/cli/commands/AddCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AddCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/AddCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAarE,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,2CAA2C,CAAC;AAwCnD,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAAC;IAChC,IAAI,EAAE,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;CAC7C;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,2BAA2B;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,4BAA4B;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAsmCD;;GAEG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,YAAY;IAWtB;;;OAGG;;2CAnlC2C,MAAM,KAAG,OAAO,CAAC,oBAAoB,CAAC;mCA2EhD,OAAO,CAAC,oBAAoB,CAAC;qCA8D3B,OAAO,CAAC,sBAAsB,CAAC;iCAwGnC,OAAO,CAAC,kBAAkB,CAAC;sCA4DtB,OAAO,CAAC,uBAAuB,CAAC;kCAwDpC,OAAO,CAAC,mBAAmB,CAAC;mCAkE3B,OAAO,CAAC,oBAAoB,CAAC;kCA8I9B,OAAO,CAAC,mBAAmB,CAAC;0CAiHpB,OAAO,CAAC,2BAA2B,CAAC;yCAwFrC,OAAO,CAAC,MAAM,CAAC;2DAkBpC,MAAM,KAC1B,OAAO,CAAC,4BAA4B,CAAC;4CAoHzB,MAAM,KAClB,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,GAAG,KAAK,CAAA;SAAE,CAAC;iDAlE5C,MAAM,KAAG,aAAa,EAAE;;EA+RtE,CAAC"}
+{"version":3,"file":"AddCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/AddCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAarE,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,2CAA2C,CAAC;AAwCnD,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAAC;IAChC,IAAI,EAAE,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;CAC7C;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,2BAA2B;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,4BAA4B;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAkwCD;;GAEG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,YAAY;IAWtB;;;OAGG;;2CA/uC2C,MAAM,KAAG,OAAO,CAAC,oBAAoB,CAAC;mCA2EhD,OAAO,CAAC,oBAAoB,CAAC;qCA8D3B,OAAO,CAAC,sBAAsB,CAAC;iCAwGnC,OAAO,CAAC,kBAAkB,CAAC;sCA4DtB,OAAO,CAAC,uBAAuB,CAAC;kCAwDpC,OAAO,CAAC,mBAAmB,CAAC;sCA4CxB,OAAO,CAAC,uBAAuB,CAAC;mCAiLnC,OAAO,CAAC,oBAAoB,CAAC;kCA8I9B,OAAO,CAAC,mBAAmB,CAAC;0CAiHpB,OAAO,CAAC,2BAA2B,CAAC;yCAwFrC,OAAO,CAAC,MAAM,CAAC;2DAkBpC,MAAM,KAC1B,OAAO,CAAC,4BAA4B,CAAC;4CAoHzB,MAAM,KAClB,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,GAAG,KAAK,CAAA;SAAE,CAAC;iDAlE5C,MAAM,KAAG,aAAa,EAAE;;EAiStE,CAAC"}

package/src/cli/commands/AddCommand.js

@@ -24,8 +24,8 @@ import { PluginManager } from '../../runtime/PluginManager.js';
 import inquirer from 'inquirer';
 const addOptions = (command) => {
     command
-        .argument('<type>', 'What to add: service, feature, migration, model, controller, routes, factory, seeder, requestfactory, responsefactory, workflow, or governance')
-        .argument('[name]', 'Name of service/feature/migration/model/controller/factory/seeder/requestfactory/responsefactory/workflow (governance takes no name)')
+        .argument('<type>', 'What to add: service, feature, migration, model, controller, routes, middleware, factory, seeder, requestfactory, responsefactory, workflow, or governance')
+        .argument('[name]', 'Name of service/feature/migration/model/controller/middleware/factory/seeder/requestfactory/responsefactory/workflow (governance takes no name)')
         .option('--package-manager <pm>', 'Specify package manager to use when installing plugins (npm|yarn|pnpm)')
         .option('--domain <name>', 'Service domain (e.g., ecommerce, payments) - for services')
         .option('--database <type>', 'Database (shared|isolated) - for services')
@@ -369,6 +369,119 @@ const addRoutes = async (cmd, routeName, opts) => {
     cmd.info(`File: ${path.basename(result.routeFile)}`);
     cmd.info(`\nNext steps:\n  • Add route definitions\n  • Import controllers\n  • Register in main router`);
 };
+const promptMiddlewareConfig = async () => {
+    return inquirer.prompt([
+        {
+            type: 'input',
+            name: 'name',
+            message: 'Middleware name (PascalCase, e.g., AuthMiddleware):',
+            validate: (value) => {
+                return /^[A-Z][a-zA-Z\d]*Middleware$/.test(value)
+                    ? true
+                    : 'Must be PascalCase ending with "Middleware"';
+            },
+        },
+    ]);
+};
+const buildMiddlewareKey = (middlewareName) => {
+    const withoutSuffix = middlewareName.replace(/Middleware$/, '');
+    return `${CommonUtils.camelCase(withoutSuffix)}Middleware`;
+};
+const buildMiddlewareSource = (middlewareName) => {
+    return `import type { Middleware } from '../../index.js';
+
+export const ${middlewareName}: Middleware = async (_req, _res, next) => {
+  await next();
+};
+`;
+};
+const registerMiddlewareImport = (configSource, middlewareName) => {
+    const importLine = `import { ${middlewareName} } from '@app/Middleware/${middlewareName}';`;
+    if (configSource.includes(importLine))
+        return configSource;
+    const lines = configSource.split('\n');
+    let insertAt = -1;
+    for (let index = 0; index < lines.length; index += 1) {
+        if (lines[index]?.startsWith('import '))
+            insertAt = index;
+    }
+    if (insertAt === -1) {
+        return `${importLine}\n${configSource}`;
+    }
+    lines.splice(insertAt + 1, 0, importLine);
+    return lines.join('\n');
+};
+const registerMiddlewareRouteKey = (configSource, middlewareName, middlewareKey) => {
+    if (configSource.includes(`${middlewareKey}: ${middlewareName}`)) {
+        return { content: configSource, updated: true };
+    }
+    const routeBlockPattern = /route:\s*\{([\s\S]*?)\n\s*\},/;
+    if (routeBlockPattern.test(configSource)) {
+        return {
+            content: configSource.replace(routeBlockPattern, (_match, inner) => {
+                const prefix = inner.trim() === '' ? '' : inner.replace(/\s*$/, '');
+                const nextInner = prefix === ''
+                    ? `\n    ${middlewareKey}: ${middlewareName},`
+                    : `${prefix}\n    ${middlewareKey}: ${middlewareName},`;
+                return `route: {${nextInner}\n  },`;
+            }),
+            updated: true,
+        };
+    }
+    const closingPattern = /\n\} as MiddlewaresType;\s*$/;
+    if (!closingPattern.test(configSource)) {
+        return { content: configSource, updated: false };
+    }
+    const inserted = configSource.replace(closingPattern, `\n  global: [],\n  route: {\n    ${middlewareKey}: ${middlewareName},\n  },\n} as MiddlewaresType;\n`);
+    return { content: inserted, updated: true };
+};
+const printManualMiddlewareRegistrationSnippet = (cmd, middlewareName, middlewareKey) => {
+    cmd.warn('Could not update config/middleware.ts automatically. Add this manually:');
+    cmd.info(`import { ${middlewareName} } from '@app/Middleware/${middlewareName}';`);
+    cmd.info(`route: { ${middlewareKey}: ${middlewareName} }`);
+    cmd.info(`Route typing example: type AppMiddlewareKey = MiddlewareKey | '${middlewareKey}';`);
+};
+const addMiddleware = async (cmd, middlewareName, opts) => {
+    const projectRoot = process.cwd();
+    let name = middlewareName ?? '';
+    if (name === '' && opts.noInteractive !== true) {
+        const answers = await promptMiddlewareConfig();
+        name = answers.name;
+    }
+    else if (name === '') {
+        throw ErrorFactory.createValidationError('Middleware name is required');
+    }
+    if (!/^[A-Z][a-zA-Z\d]*Middleware$/.test(name)) {
+        throw ErrorFactory.createValidationError('Middleware name must be PascalCase ending with "Middleware"');
+    }
+    const middlewareDir = path.join(projectRoot, 'app', 'Middleware');
+    const middlewarePath = path.join(middlewareDir, `${name}.ts`);
+    const configPath = path.join(projectRoot, 'config', 'middleware.ts');
+    const middlewareKey = buildMiddlewareKey(name);
+    ensureDirectoryExists(middlewareDir);
+    const created = FileGenerator.writeFile(middlewarePath, buildMiddlewareSource(name), {
+        overwrite: false,
+    });
+    if (!FileGenerator.fileExists(configPath)) {
+        cmd.success(`Middleware '${name}' created successfully!`);
+        cmd.warn('config/middleware.ts was not found, so registration was skipped.');
+        printManualMiddlewareRegistrationSnippet(cmd, name, middlewareKey);
+        return;
+    }
+    const currentConfig = FileGenerator.readFile(configPath);
+    const withImport = registerMiddlewareImport(currentConfig, name);
+    const registered = registerMiddlewareRouteKey(withImport, name, middlewareKey);
+    if (!registered.updated) {
+        cmd.success(`Middleware '${name}' created successfully!`);
+        printManualMiddlewareRegistrationSnippet(cmd, name, middlewareKey);
+        return;
+    }
+    fs.writeFileSync(configPath, registered.content, 'utf-8');
+    cmd.success(`Middleware '${name}' ${created ? 'created' : 'updated'} successfully!`);
+    cmd.info(`File: ${path.basename(middlewarePath)}`);
+    cmd.info(`Registered route key: ${middlewareKey}`);
+    cmd.info(`\nNext steps:\n  • Use '${middlewareKey}' in route metadata\n  • If your route file uses MiddlewareKey, extend it locally: type AppMiddlewareKey = MiddlewareKey | '${middlewareKey}'`);
+};
 const getFactoryInitialConfig = (factoryName, opts) => {
     return {
         name: factoryName ?? '',
@@ -833,6 +946,7 @@ const TYPE_HANDLERS = {
     model: addModel,
     controller: addController,
     routes: addRoutes,
+    middleware: addMiddleware,
     factory: addFactory,
     seeder: addSeeder,
     requestfactory: addRequestFactory,
@@ -845,7 +959,7 @@ const TYPE_HANDLERS = {
 const handleType = async (cmd, type, name, opts) => {
     const handler = TYPE_HANDLERS[type];
     if (handler === undefined) {
-        throw ErrorFactory.createCliError(`Unknown type "${type}". Use: service, feature, migration, model, controller, routes, factory, seeder, requestfactory, responsefactory, workflow, or governance`);
+        throw ErrorFactory.createCliError(`Unknown type "${type}". Use: service, feature, migration, model, controller, routes, middleware, factory, seeder, requestfactory, responsefactory, workflow, or governance`);
     }
     await handler(cmd, name, opts);
 };
@@ -874,7 +988,7 @@ const executeAdd = async (cmd, options) => {
     const addOpts = { ...options, ...commandOpts };
     try {
         if (type === undefined || type === '') {
-            throw ErrorFactory.createCliError('Please specify what to add: service, feature, migration, model, controller, routes, factory, or seeder');
+            throw ErrorFactory.createCliError('Please specify what to add: service, feature, migration, model, controller, routes, middleware, factory, or seeder');
         }
         // Planned modular adapter syntax: `zin add db:sqlite` (delegate to plugin installer)
         const normalizedType = type.toLowerCase();
@@ -921,6 +1035,7 @@ export const AddCommand = Object.freeze({
         promptModelConfig,
         promptControllerConfig,
         promptRoutesConfig,
+        promptMiddlewareConfig,
         promptFactoryConfig,
         promptSeederConfig,
         promptRequestFactoryConfig,

package/src/cli/commands/StartCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA21BvF,eAAO,MAAM,YAAY;cACb,YAAY;EAmCtB,CAAC"}
+{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAs4BvF,eAAO,MAAM,YAAY;cACb,YAAY;EAmCtB,CAAC"}

package/src/cli/commands/StartCommand.js

@@ -2,9 +2,9 @@ import { BaseCommand } from '../BaseCommand.js';
 import { createDenoRunnerSource, createLambdaRunnerSource } from '../commands/runner/index.js';
 import { EnvFileLoader } from '../utils/EnvFileLoader.js';
 import { SpawnUtil } from '../utils/spawn.js';
-import { generateUuid } from '../../common/utility.js';
 import { readEnvString } from '../../common/ExternalServiceUtils.js';
 import * as Common from '../../common/index.js';
+import { generateUuid } from '../../common/utility.js';
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
 import { isNonEmptyString } from '../../helper/index.js';
 import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from '../../node-singletons/fs.js';
@@ -418,6 +418,7 @@ const executeWranglerStart = async (cmd, context, port, runtime, envName, wrangl
     if (configPath === undefined && entry === undefined) {
         throw ErrorFactory.createCliError("Error: wrangler config not found (wrangler.toml/json). Run 'wrangler init' first.");
     }
+    warnOnUnsafeWranglerBootstrap(cmd, context.cwd, entry);
     const wranglerArgs = ['dev'];
     if (normalizedConfig !== '') {
         wranglerArgs.push('--config', normalizedConfig);
@@ -434,14 +435,42 @@ const executeWranglerStart = async (cmd, context, port, runtime, envName, wrangl
     logMySqlProxyHint(cmd);
     cmd.info('Starting in Wrangler dev mode...');
     const exitCode = await withWranglerEnvSnapshot(context.cwd, envName, async () => {
+        const startEnv = {
+            ...buildStartEnv(context.projectRoot),
+            WORKER_ENABLED: 'false',
+            CLOUDFLARE_WORKER: 'true',
+            DOCKER_WORKER: 'false',
+        };
         return SpawnUtil.spawnAndWait({
             command: 'wrangler',
             args: wranglerArgs,
-            env: buildStartEnv(context.projectRoot),
+            env: startEnv,
         });
     });
     process.exit(exitCode);
 };
+const isUnsafeWranglerBootstrapSource = (source) => {
+    const getKernelIndex = source.indexOf('getKernel(');
+    const cloudflareFetchIndex = source.indexOf('cloudflareWorker.fetch');
+    return (getKernelIndex !== -1 && cloudflareFetchIndex !== -1 && getKernelIndex < cloudflareFetchIndex);
+};
+const warnOnUnsafeWranglerBootstrap = (cmd, cwd, entry) => {
+    if (entry === undefined)
+        return;
+    const entryPath = path.join(cwd, entry);
+    if (!existsSync(entryPath))
+        return;
+    try {
+        const source = readFileSync(entryPath, 'utf-8');
+        if (!isUnsafeWranglerBootstrapSource(source))
+            return;
+        cmd.warn(`Unsafe Worker bootstrap detected in ${entry}: getKernel() runs before the core Cloudflare handler initializes Worker bindings.`);
+        cmd.warn('Use `export { default } from "../../start.js"` and keep custom middleware registration in config/middleware.ts or route metadata.');
+    }
+    catch {
+        // Best-effort warning only.
+    }
+};
 const ensureTmpRunnerFile = (cwd, filename, content) => {
     const tmpDir = path.join(cwd, 'tmp');
     try {

package/src/config/middleware.d.ts

@@ -1,4 +1,5 @@
 import type { MiddlewareConfigType } from './type';
+import type { Middleware } from '../middleware/MiddlewareStack';
 export declare const MiddlewareBody: {
     readonly email: "email";
     readonly password: "password";
@@ -6,7 +7,7 @@ export declare const MiddlewareBody: {
     readonly count: "count";
 };
 export type MiddlewaresType = {
-    skipPaths: string[];
+    skipPaths: ReadonlyArray<string>;
     fillRateLimit: {
         windowMs: number;
         max: number;
@@ -22,6 +23,8 @@ export type MiddlewaresType = {
         max: number;
         message: string;
     };
+    global?: ReadonlyArray<Middleware>;
+    route?: Record<string, Middleware>;
 };
 export declare const MiddlewareKeys: Readonly<{
     log: true;

package/src/config/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/config/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAiEzD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,qBAAqB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;EAkBuB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,cAAc,CAAC;AA2MxD,wBAAgB,sBAAsB,IAAI,oBAAoB,CAkC7D;AAID;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAAO,IAE7C,CAAC;AAwBF,eAAO,MAAM,gBAAgB,EAAE,oBAY7B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/config/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAUzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAwD9D,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,qBAAqB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,MAAM,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACpC,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;EAkBuB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,cAAc,CAAC;AAoOxD,wBAAgB,sBAAsB,IAAI,oBAAoB,CAwC7D;AAID;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAAO,IAE7C,CAAC;AAwBF,eAAO,MAAM,gBAAgB,EAAE,oBAY7B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/src/config/middleware.js

@@ -1,4 +1,5 @@
 import { Env } from './env.js';
+import { isArray, isObject } from '../helper/index.js';
 import { bodyParsingMiddleware } from '../http/middleware/BodyParsingMiddleware.js';
 import { fileUploadMiddleware } from '../http/middleware/FileUploadMiddleware.js';
 import { AuthMiddleware } from '../middleware/AuthMiddleware.js';
@@ -157,6 +158,22 @@ function createSharedMiddlewares(loadMiddlewareConfig) {
         ...validations,
     });
 }
+const resolveProjectGlobalMiddlewares = (loadMiddlewareConfig) => {
+    if (!isArray(loadMiddlewareConfig.global))
+        return [];
+    return loadMiddlewareConfig.global.filter((middleware) => {
+        return typeof middleware === 'function';
+    });
+};
+const resolveProjectRouteMiddlewares = (loadMiddlewareConfig) => {
+    if (!isObject(loadMiddlewareConfig.route))
+        return {};
+    const entries = Object.entries(loadMiddlewareConfig.route).filter((entry) => {
+        const [name, middleware] = entry;
+        return typeof name === 'string' && name.trim() !== '' && typeof middleware === 'function';
+    });
+    return Object.fromEntries(entries);
+};
 export function createMiddlewareConfig() {
     const loadMiddlewareConfig = StartupConfigFileRegistry.get(StartupConfigFile.Middleware) ?? {};
     const skipPathsFromEnv = Env.get('CSRF_SKIP_PATHS', '')
@@ -170,6 +187,8 @@ export function createMiddlewareConfig() {
             : skipPathsFromEnv,
     };
     const shared = createSharedMiddlewares(effectiveMiddlewareConfig);
+    const projectGlobal = resolveProjectGlobalMiddlewares(effectiveMiddlewareConfig);
+    const projectRoute = resolveProjectRouteMiddlewares(effectiveMiddlewareConfig);
     const middlewareConfigObj = {
         global: [
             shared.log,
@@ -180,8 +199,12 @@ export function createMiddlewareConfig() {
             bodyParsingMiddleware,
             shared.csrf,
             shared.sanitizeBody,
+            ...projectGlobal,
         ],
-        route: shared,
+        route: {
+            ...shared,
+            ...projectRoute,
+        },
     };
     return Object.freeze(middlewareConfigObj);
 }

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v0.4.15
+ * @zintrust/core v0.4.16
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-03-24T09:07:10.631Z
+ *   Built: 2026-03-24T13:49:16.905Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.41';
-export const ZINTRUST_BUILD_DATE = '2026-03-24T09:07:10.598Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-03-24T13:49:16.870Z'; // Replaced during build
 export { Application } from './boot/Application.js';
 export { AwsSigV4 } from './common/index.js';
 export { SignedRequest } from './security/SignedRequest.js';

package/src/middleware/CsrfMiddleware.d.ts

@@ -17,7 +17,7 @@ export interface CsrfOptions {
      * - `/api/*`
      * - `/api/v1/auth/login`
      */
-    skipPaths?: string[];
+    skipPaths?: ReadonlyArray<string>;
 }
 export declare const CsrfMiddleware: Readonly<{
     /**

package/src/middleware/CsrfMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CsrfMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/CsrfMiddleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAK9D,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAkDD,eAAO,MAAM,cAAc;IACzB;;OAEG;qBACa,WAAW,GAAQ,UAAU;EA6D7C,CAAC"}
+{"version":3,"file":"CsrfMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/CsrfMiddleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAK9D,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACnC;AAkDD,eAAO,MAAM,cAAc;IACzB;;OAEG;qBACa,WAAW,GAAQ,UAAU;EA6D7C,CAAC"}

package/src/runtime/WorkersModule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WorkersModule.d.ts","sourceRoot":"","sources":["../../../src/runtime/WorkersModule.ts"],"names":[],"mappings":"AAOA,KAAK,aAAa,GAAG,cAAc,mBAAmB,CAAC,CAAC;AACxD,KAAK,kBAAkB,GAAG,cAAc,yBAAyB,CAAC,CAAC;AAmUnE,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,aAAa,CAwB/D,CAAC;AA4CF,eAAO,MAAM,sBAAsB,QAAa,OAAO,CAAC,kBAAkB,CAkBzE,CAAC"}
+{"version":3,"file":"WorkersModule.d.ts","sourceRoot":"","sources":["../../../src/runtime/WorkersModule.ts"],"names":[],"mappings":"AAOA,KAAK,aAAa,GAAG,cAAc,mBAAmB,CAAC,CAAC;AACxD,KAAK,kBAAkB,GAAG,cAAc,yBAAyB,CAAC,CAAC;AA4WnE,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,aAAa,CAwB/D,CAAC;AA4CF,eAAO,MAAM,sBAAsB,QAAa,OAAO,CAAC,kBAAkB,CAkBzE,CAAC"}

package/src/runtime/WorkersModule.js

@@ -237,12 +237,35 @@ const applyInitialPatches = () => {
         Logger.warn('Rewrote @zintrust/queue-monitor ESM specifiers before import', monitorPatch);
     }
 };
+const getErrorChain = (error) => {
+    const chain = [];
+    const seen = new Set();
+    let current = error;
+    while (current !== null && current !== undefined && !seen.has(current)) {
+        seen.add(current);
+        const entry = current;
+        chain.push({
+            message: typeof entry.message === 'string' && entry.message !== '' ? entry.message : String(current),
+            code: typeof entry.code === 'string' ? entry.code : undefined,
+        });
+        current = entry.cause;
+    }
+    return chain;
+};
 const shouldRetryAfterFailure = (error) => {
     if (patchAfterFailureAttempted)
         return false;
-    const message = error instanceof Error ? error.message : String(error);
-    const code = error?.code;
-    return code === 'ERR_MODULE_NOT_FOUND' && message.includes('@zintrust/workers');
+    return getErrorChain(error).some(({ message, code }) => code === 'ERR_MODULE_NOT_FOUND' && message.includes('@zintrust/workers'));
+};
+const isMissingOptionalWorkersModuleError = (error) => {
+    return getErrorChain(error).some(({ message, code }) => {
+        if (!message.includes('@zintrust/workers'))
+            return false;
+        return (code === 'ERR_MODULE_NOT_FOUND' ||
+            message.includes('ERR_MODULE_NOT_FOUND') ||
+            message.includes('Cannot find package') ||
+            message.includes('No such module'));
+    });
 };
 const handleImportFailure = async (error) => {
     if (shouldRetryAfterFailure(error)) {
@@ -254,7 +277,12 @@ const handleImportFailure = async (error) => {
                 replacements,
             });
             workersModulePromise = importOptionalPackage('@zintrust/workers');
-            return workersModulePromise;
+            try {
+                return await workersModulePromise;
+            }
+            catch (retryError) {
+                error = retryError;
+            }
         }
     }
     const localFallback = await importLocalWorkersModule();
@@ -262,6 +290,11 @@ const handleImportFailure = async (error) => {
         workersModulePromise = Promise.resolve(localFallback);
         return localFallback;
     }
+    if (isMissingOptionalWorkersModuleError(error)) {
+        Logger.info('Optional @zintrust/workers package is unavailable; worker routes are disabled.');
+        workersModulePromise = Promise.resolve(createDisabledWorkersModule());
+        return workersModulePromise;
+    }
     throw error;
 };
 const tryLocalFallback = async () => {

package/src/templates/project/basic/config/middleware.ts.tpl

@@ -1,14 +1,21 @@
 // @ts-ignore - config templates are excluded from the main TS project in this repo
+import { Env } from '@zintrust/core';
+import type { MiddlewaresType } from '@zintrust/core';
 /**
  * Middleware Configuration (template)
  *
- * Keep this file declarative:
- * - Core owns middleware construction / any runtime behavior.
- * - Projects can override by editing `middlewareConfigObj`.
+ * Full project middleware flow:
+ * 1. Create `app/Middleware/YourMiddleware.ts` and export a `Middleware` function.
+ * 2. Import it below.
+ * 3. Register route middleware under `route` or append global middleware under `global`.
+ * 4. Use the route key in `routes/*.ts`.
+ *
+ * For custom route keys, extend the framework type locally in your route file:
+ * `type AppMiddlewareKey = MiddlewareKey | 'yourMiddleware';`
  */
 
-import { Env } from '@zintrust/core';
-import type { MiddlewaresType } from '@zintrust/core';
+// Example custom middleware import:
+// import { AuthMiddleware } from '@app/Middleware/AuthMiddleware';
 
 export default {
   skipPaths: Env.get('CSRF_SKIP_PATHS', '')
@@ -30,4 +37,10 @@ export default {
     max: 20,
     message: 'Too many user mutation requests, please try again later.',
   },
+  global: [
+    // AuthMiddleware,
+  ],
+  route: {
+    // authMiddleware: AuthMiddleware,
+  },
 } as MiddlewaresType;