@zintrust/core 1.5.2 → 1.5.4

package/bin/z.js

@@ -3,5 +3,38 @@
  * ZinTrust CLI Shortcut - 'z'
  * Mirrors bin/zintrust.ts for convenience
  */
-import { run } from './zintrust-main.js';
-await run();
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const here = path.dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
+const tsTarget = path.join(here, 'zintrust-main.ts');
+const jsTarget = path.join(here, 'zintrust-main.js');
+const target = existsSync(tsTarget) ? tsTarget : jsTarget;
+const tsxImportPath = require.resolve('tsx');
+const nodeArgs = target.endsWith('.ts')
+    ? ['--import', tsxImportPath, target, ...process.argv.slice(2)]
+    : [target, ...process.argv.slice(2)];
+const child = spawn(process.execPath, nodeArgs, {
+    stdio: 'inherit',
+    env: process.env,
+});
+const result = await new Promise((resolve, reject) => {
+    let settled = false;
+    const finalize = (exitCode, signal) => {
+        if (settled) {
+            return;
+        }
+        settled = true;
+        child.off?.('error', reject);
+        child.off?.('exit', finalize);
+        child.off?.('close', finalize);
+        resolve({ exitCode, signal });
+    };
+    child.once('error', reject);
+    child.once('exit', finalize);
+    child.once('close', finalize);
+});
+process.exit(result.exitCode ?? (result.signal === 'SIGINT' || result.signal === 'SIGTERM' ? 0 : 1));

package/bin/zin.js

@@ -3,5 +3,38 @@
  * ZinTrust CLI Shortcut - 'zin'
  * Mirrors bin/zintrust.ts for convenience
  */
-import { run } from './zintrust-main.js';
-await run();
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const here = path.dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
+const tsTarget = path.join(here, 'zintrust-main.ts');
+const jsTarget = path.join(here, 'zintrust-main.js');
+const target = existsSync(tsTarget) ? tsTarget : jsTarget;
+const tsxImportPath = require.resolve('tsx');
+const nodeArgs = target.endsWith('.ts')
+    ? ['--import', tsxImportPath, target, ...process.argv.slice(2)]
+    : [target, ...process.argv.slice(2)];
+const child = spawn(process.execPath, nodeArgs, {
+    stdio: 'inherit',
+    env: process.env,
+});
+const result = await new Promise((resolve, reject) => {
+    let settled = false;
+    const finalize = (exitCode, signal) => {
+        if (settled) {
+            return;
+        }
+        settled = true;
+        child.off?.('error', reject);
+        child.off?.('exit', finalize);
+        child.off?.('close', finalize);
+        resolve({ exitCode, signal });
+    };
+    child.once('error', reject);
+    child.once('exit', finalize);
+    child.once('close', finalize);
+});
+process.exit(result.exitCode ?? (result.signal === 'SIGINT' || result.signal === 'SIGTERM' ? 0 : 1));

package/bin/zintrust-main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zintrust-main.d.ts","sourceRoot":"","sources":["../../bin/zintrust-main.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,KAAK,qBAAqB,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AA0WF,wBAAsB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAMzC;AAED,eAAO,MAAM,mBAAmB;;qCAzUQ,MAAM,KAAG,qBAAqB,GAAG,SAAS;mCA6C5C,MAAM,GAAG,IAAI,UAAU,MAAM,CAAC,OAAO,GAAG,IAAI,KAAG,MAAM;iCAnEzD,MAAM;8BAIP,MAAM,KAAG,MAAM;uCAsEtC,qBAAqB,WACpB,MAAM,EAAE,KAChB,OAAO,CAAC,KAAK,CAAC;oCAhEsB,MAAM,sBAAsB,MAAM,KAAG,OAAO;6CA2G7B,MAAM,EAAE,KAAG,OAAO,CAAC,OAAO,CAAC;yCAtE1E,MAAM,sBACS,MAAM,QACrB,MAAM,CAAC,UAAU,KACrB,qBAAqB,GAAG,SAAS;EAqTlC,CAAC;AAEH,OAAO,EAAE,CAAC"}
+{"version":3,"file":"zintrust-main.d.ts","sourceRoot":"","sources":["../../bin/zintrust-main.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,KAAK,qBAAqB,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAiYF,wBAAsB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAMzC;AAED,eAAO,MAAM,mBAAmB;;qCAhWQ,MAAM,KAAG,qBAAqB,GAAG,SAAS;mCA6C5C,MAAM,GAAG,IAAI,UAAU,MAAM,CAAC,OAAO,GAAG,IAAI,KAAG,MAAM;iCAnEzD,MAAM;8BAIP,MAAM,KAAG,MAAM;uCAoGtC,qBAAqB,WACpB,MAAM,EAAE,KAChB,OAAO,CAAC,KAAK,CAAC;oCA9FsB,MAAM,sBAAsB,MAAM,KAAG,OAAO;6CAkI7B,MAAM,EAAE,KAAG,OAAO,CAAC,OAAO,CAAC;yCA7F1E,MAAM,sBACS,MAAM,QACrB,MAAM,CAAC,UAAU,KACrB,qBAAqB,GAAG,SAAS;EA4UlC,CAAC;AAaH,OAAO,EAAE,CAAC"}

package/bin/zintrust-main.js

@@ -80,6 +80,28 @@ const getHandoffExitCode = (exitCode, signal) => {
         return 0;
     return 1;
 };
+const waitForChildTermination = async (child) => {
+    return await new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (exitCode, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            child.off?.('exit', onExit);
+            child.off?.('close', onClose);
+            resolve({ exitCode, signal });
+        };
+        const onExit = (exitCode, signal) => {
+            finish(exitCode, signal);
+        };
+        const onClose = (exitCode, signal) => {
+            finish(exitCode, signal);
+        };
+        child.once('error', reject);
+        child.once('exit', onExit);
+        child.once('close', onClose);
+    });
+};
 const handoffToProjectLocalCli = async (target, rawArgs) => {
     const child = spawn(process.execPath, [target.binPath, ...rawArgs], {
         stdio: 'inherit',
@@ -104,12 +126,7 @@ const handoffToProjectLocalCli = async (target, rawArgs) => {
     process.on('SIGINT', onSigint);
     process.on('SIGTERM', onSigterm);
     try {
-        const result = await new Promise((resolve, reject) => {
-            child.once('error', reject);
-            child.once('close', (exitCode, signal) => {
-                resolve({ exitCode, signal });
-            });
-        });
+        const result = await waitForChildTermination(child);
         process.exit(getHandoffExitCode(result.exitCode, result.signal));
     }
     finally {
@@ -317,3 +334,12 @@ export const CliLauncherInternal = Object.freeze({
     maybeHandoffToProjectLocalCli,
     resolveProjectLocalCliHandoff,
 });
+const shouldRunAsMain = () => {
+    const entryArg = process.argv[1];
+    if (typeof entryArg !== 'string' || entryArg.trim() === '')
+        return false;
+    return getRealPath(entryArg) === getRealPath(fileURLToPath(import.meta.url));
+};
+if (shouldRunAsMain()) {
+    await run();
+}

package/bin/zintrust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zintrust.d.ts","sourceRoot":"","sources":["../../bin/zintrust.ts"],"names":[],"mappings":";AAEA;;;;;;GAMG;AAKH,OAAO,EAAE,CAAC"}
+{"version":3,"file":"zintrust.d.ts","sourceRoot":"","sources":["../../bin/zintrust.ts"],"names":[],"mappings":";AAEA;;;;;;GAMG;AA8CH,OAAO,EAAE,CAAC"}

package/bin/zintrust.js

@@ -6,5 +6,38 @@
  * bin/zintrust-main.ts. Keeping the implementation hashbang-free allows other
  * shortcuts (zin/z/zt) to import it without parse issues.
  */
-import { run } from './zintrust-main.js';
-await run();
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const here = path.dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
+const tsTarget = path.join(here, 'zintrust-main.ts');
+const jsTarget = path.join(here, 'zintrust-main.js');
+const target = existsSync(tsTarget) ? tsTarget : jsTarget;
+const tsxImportPath = require.resolve('tsx');
+const nodeArgs = target.endsWith('.ts')
+    ? ['--import', tsxImportPath, target, ...process.argv.slice(2)]
+    : [target, ...process.argv.slice(2)];
+const child = spawn(process.execPath, nodeArgs, {
+    stdio: 'inherit',
+    env: process.env,
+});
+const result = await new Promise((resolve, reject) => {
+    let settled = false;
+    const finalize = (exitCode, signal) => {
+        if (settled) {
+            return;
+        }
+        settled = true;
+        child.off?.('error', reject);
+        child.off?.('exit', finalize);
+        child.off?.('close', finalize);
+        resolve({ exitCode, signal });
+    };
+    child.once('error', reject);
+    child.once('exit', finalize);
+    child.once('close', finalize);
+});
+process.exit(result.exitCode ?? (result.signal === 'SIGINT' || result.signal === 'SIGTERM' ? 0 : 1));

package/bin/zt.js

@@ -3,5 +3,25 @@
  * ZinTrust CLI Shortcut - 'z'
  * Mirrors bin/zintrust.ts for convenience
  */
-import { run } from './zintrust-main.js';
-await run();
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const here = path.dirname(fileURLToPath(import.meta.url));
+const tsTarget = path.join(here, 'zintrust-main.ts');
+const jsTarget = path.join(here, 'zintrust-main.js');
+const target = existsSync(tsTarget) ? tsTarget : jsTarget;
+const nodeArgs = target.endsWith('.ts')
+    ? ['--import', 'tsx', target, ...process.argv.slice(2)]
+    : [target, ...process.argv.slice(2)];
+const child = spawn(process.execPath, nodeArgs, {
+    stdio: 'inherit',
+    env: process.env,
+});
+const result = await new Promise((resolve, reject) => {
+    child.once('error', reject);
+    child.once('close', (exitCode, signal) => {
+        resolve({ exitCode, signal });
+    });
+});
+process.exit(result.exitCode ?? (result.signal === 'SIGINT' || result.signal === 'SIGTERM' ? 0 : 1));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "1.5.2",
+  "version": "1.5.4",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {

package/src/boot/bootstrap.d.ts

@@ -3,5 +3,5 @@
  * Entry point for running the ZinTrust server
  * Sealed namespace for immutability
  */
-export {};
+export declare const bootstrapReady: Promise<void>;
 //# sourceMappingURL=bootstrap.d.ts.map

package/src/boot/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/boot/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/boot/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAyWH,eAAO,MAAM,cAAc,eAAmB,CAAC"}

package/src/boot/bootstrap.js

@@ -283,15 +283,20 @@ const BootstrapFunctions = Object.freeze({
         });
     },
 });
-// Run bootstrap
-await BootstrapFunctions.start().catch((error) => {
+const startBootstrap = async () => {
     try {
-        Logger.error('Failed to bootstrap application:', error);
+        await BootstrapFunctions.start();
+        BootstrapFunctions.setupShutdownHandler();
     }
-    catch {
-        // best-effort logging
+    catch (error) {
+        try {
+            Logger.error('Failed to bootstrap application:', error);
+        }
+        catch {
+            // best-effort logging
+        }
+        process.exit(1);
     }
-    process.exit(1);
-});
-// Handle graceful shutdown
-BootstrapFunctions.setupShutdownHandler();
+};
+// Run bootstrap without parse-time top-level await so Worker bundles can load this module.
+export const bootstrapReady = startBootstrap();

package/src/cli/commands/StartCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAsgCvF,eAAO,MAAM,YAAY;cACb,YAAY;;mCA18BU,MAAM,KAAG,OAAO;4CAaP,MAAM,KAAG,MAAM;4CA4Bf,MAAM,KAAG,OAAO;sCAetB,MAAM,WAAW,MAAM,KAAG,OAAO;oCAmBnC,MAAM,KAAG,OAAO;;EA06BjD,CAAC"}
+{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAugCvF,eAAO,MAAM,YAAY;cACb,YAAY;;mCA38BU,MAAM,KAAG,OAAO;4CAaP,MAAM,KAAG,MAAM;4CA4Bf,MAAM,KAAG,OAAO;sCAetB,MAAM,WAAW,MAAM,KAAG,OAAO;oCAmBnC,MAAM,KAAG,OAAO;;EA26BjD,CAAC"}

package/src/cli/commands/StartCommand.js

@@ -635,6 +635,7 @@ const executeNodeStart = async (cmd, context, mode, watchEnabled, _port) => {
             command: dev.command,
             args: dev.args,
             forwardSignals: false,
+            ttySignalForwardDelayMs: 1500,
             env: {
                 ...buildStartEnv(context.projectRoot),
                 ZINTRUST_BOOTSTRAP_PREFERENCE: 'source',

package/src/cli/utils/spawn.d.ts

@@ -4,6 +4,7 @@ export interface SpawnAndWaitInput {
     cwd?: string;
     env?: NodeJS.ProcessEnv;
     forwardSignals?: boolean;
+    ttySignalForwardDelayMs?: number;
     shell?: boolean;
 }
 export declare const SpawnUtil: Readonly<{

package/src/cli/utils/spawn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/spawn.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAiDD,eAAO,MAAM,SAAS;wBACM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;EAiF7D,CAAC"}
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../../../src/cli/utils/spawn.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA8HD,eAAO,MAAM,SAAS;wBACM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;EA2F7D,CAAC"}

package/src/cli/utils/spawn.js

@@ -45,6 +45,60 @@ const buildCommandNotFoundMessage = (command) => {
     }
     return `Error: '${command}' not found on PATH.`;
 };
+const waitForChildExit = async (child, onExit) => {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            child.off?.('exit', onExitEvent);
+            child.off?.('close', onCloseEvent);
+            onExit();
+            resolve(result);
+        };
+        const onExitEvent = (code, signal) => {
+            finish({ exitCode: code, signal });
+        };
+        const onCloseEvent = (code, signal) => {
+            finish({ exitCode: code, signal });
+        };
+        child.once('error', (error) => {
+            reject(error);
+        });
+        child.once('exit', onExitEvent);
+        child.once('close', onCloseEvent);
+    });
+};
+const createDelayedSignalForwarder = (input) => {
+    let delayedSignalTimer;
+    const clear = () => {
+        if (delayedSignalTimer === undefined)
+            return;
+        clearTimeout(delayedSignalTimer);
+        delayedSignalTimer = undefined;
+    };
+    const schedule = (signal) => {
+        if (input.ttySignalForwardDelayMs <= 0 ||
+            delayedSignalTimer !== undefined ||
+            input.isChildClosed()) {
+            return;
+        }
+        delayedSignalTimer = globalThis.setTimeout(() => {
+            delayedSignalTimer = undefined;
+            if (input.isChildClosed())
+                return;
+            try {
+                input.forwardSignal(signal);
+            }
+            catch {
+                // best-effort fallback for interactive watch processes
+            }
+        }, input.ttySignalForwardDelayMs);
+        delayedSignalTimer.unref?.();
+    };
+    return { clear, schedule };
+};
 export const SpawnUtil = Object.freeze({
     async spawnAndWait(input) {
         const cwd = input.cwd ?? process.cwd();
@@ -59,6 +113,10 @@ export const SpawnUtil = Object.freeze({
         // (and often SIGTERM) so forwarding can cause duplicates. `tsx watch` is
         // especially sensitive here and can print "Previous process hasn't exited yet. Force killing...".
         const forwardSignals = typeof input.forwardSignals === 'boolean' ? input.forwardSignals : !process.stdin.isTTY;
+        const ttySignalForwardDelayMs = process.stdin.isTTY === true && forwardSignals === false
+            ? Math.max(0, input.ttySignalForwardDelayMs ?? 0)
+            : 0;
+        let childClosed = false;
         const forwardSignal = (signal) => {
             try {
                 child.kill(signal);
@@ -75,29 +133,34 @@ export const SpawnUtil = Object.freeze({
                 throw wrapped;
             }
         };
+        const delayedSignalForwarder = createDelayedSignalForwarder({
+            ttySignalForwardDelayMs,
+            isChildClosed: () => childClosed,
+            forwardSignal,
+        });
         const onSigint = () => {
             if (forwardSignals) {
                 forwardSignal('SIGINT');
+                return;
             }
-            // If not forwarding, handle to prevent the parent from exiting before the child
-            // finishes its graceful shutdown (child receives SIGINT directly in TTY).
+            // In interactive TTY mode, let the child receive the terminal SIGINT directly first.
+            // If it is still alive after a short grace period, send one fallback signal so the
+            // watcher exits without requiring a second Ctrl+C from the user.
+            delayedSignalForwarder.schedule('SIGINT');
         };
         const onSigterm = () => {
             if (forwardSignals) {
                 forwardSignal('SIGTERM');
+                return;
             }
-            // Same rationale as SIGINT: keep parent alive while waiting for child to exit.
+            delayedSignalForwarder.schedule('SIGTERM');
         };
         process.on('SIGINT', onSigint);
         process.on('SIGTERM', onSigterm);
         try {
-            const result = await new Promise((resolve, reject) => {
-                child.once('error', (error) => {
-                    reject(error);
-                });
-                child.once('close', (code, signal) => {
-                    resolve({ exitCode: code, signal });
-                });
+            const result = await waitForChildExit(child, () => {
+                childClosed = true;
+                delayedSignalForwarder.clear();
             });
             return getExitCode(result.exitCode, result.signal);
         }
@@ -109,6 +172,7 @@ export const SpawnUtil = Object.freeze({
             throw ErrorFactory.createTryCatchError('Failed to spawn child process', error);
         }
         finally {
+            delayedSignalForwarder.clear();
             process.off('SIGINT', onSigint);
             process.off('SIGTERM', onSigterm);
         }

package/src/config/index.d.ts

@@ -12,13 +12,13 @@ export { notificationConfig, type NotificationConfig } from './notification';
 export { queueConfig, type QueueConfig } from './queue';
 export { securityConfig } from './security';
 export { storageConfig, type StorageConfig } from './storage';
+export type { MiddlewareConfigType } from './type';
 export { createRedisConnection } from './workers';
 /**
  * Combined configuration object
  * Sealed namespace for immutability
  */
 export declare const config: Readonly<{
-    readonly middleware: import("./type").MiddlewareConfigType;
     readonly app: Readonly<{
         readonly name: string;
         readonly prefix: string;
@@ -211,6 +211,7 @@ export declare const config: Readonly<{
             readonly namespace: string;
         };
     }>;
+    readonly middleware: import("./type").MiddlewareConfigType;
     readonly cache: {
         default: string;
         drivers: import("./type").CacheConfigInput["drivers"];

package/src/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;8BAkC0f,CAAC;;;;;;;;;;;;;;;;;;;;2EA9C3e,CAAA;;;;;;;;;;;;;;;;;;;;8BAD2B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA+C8X,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAHnb,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;8BAkCgc,CAAC;;;;;;;;;;;;;;;;;;;;iFA/Cjb,CAAA;;;;;;;;;;;;;;;;;;;;8BAD2B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAgDoU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAHzX,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC"}

package/src/config/index.js

@@ -28,9 +28,6 @@ export { createRedisConnection } from './workers.js';
  * Sealed namespace for immutability
  */
 export const config = Object.freeze({
-    get middleware() {
-        return middlewareConfig;
-    },
     get app() {
         return appConfig;
     },
@@ -52,6 +49,9 @@ export const config = Object.freeze({
     get microservices() {
         return microservicesConfig;
     },
+    get middleware() {
+        return middlewareConfig;
+    },
     get cache() {
         return cacheConfig;
     },

package/src/config/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/config/queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGhG,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AA+EH;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAO,kBA4DnC,CAAC;AAgDH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,CAAC,YAAY,EAAE,sBAAsB,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACzF,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CAuEH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/config/queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAyChG,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;IACzC,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AA+EH;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAO,kBA4DnC,CAAC;AAgDH,QAAA,MAAM,iBAAiB,QAAO;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,CAAC,YAAY,EAAE,sBAAsB,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACzF,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CAuEH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAqB/D,eAAO,MAAM,WAAW,EAAE,WAYxB,CAAC"}

package/src/config/queue.js

@@ -6,10 +6,39 @@
 import { Cloudflare } from './cloudflare.js';
 import { Env } from './env.js';
 import { Logger } from './logger.js';
-import { isKnownMiddlewareName, middlewareConfig } from './middleware.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import { ZintrustLang } from '../lang/lang.js';
 import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';
+const StaticMiddlewareKeys = Object.freeze({
+    log: true,
+    error: true,
+    security: true,
+    rateLimit: true,
+    sanitizeBody: true,
+    fillRateLimit: true,
+    authRateLimit: true,
+    userMutationRateLimit: true,
+    csrf: true,
+    auth: true,
+    jwt: true,
+    bulletproof: true,
+    validateLogin: true,
+    validateRegister: true,
+    validateUserStore: true,
+    validateUserUpdate: true,
+    validateUserFill: true,
+});
+const isKnownQueueMonitorMiddlewareName = (value) => {
+    return (Object.hasOwn(StaticMiddlewareKeys, value) || /^rateLimit:\d+:\d+(?:\.\d+)?$/.test(value.trim()));
+};
+const getConfiguredQueueMonitorRouteKeys = () => {
+    const middlewareOverrides = StartupConfigFileRegistry.get(StartupConfigFile.Middleware) ?? {};
+    const routeConfig = middlewareOverrides.route;
+    if (typeof routeConfig !== 'object' || routeConfig === null || Array.isArray(routeConfig)) {
+        return new Set();
+    }
+    return new Set(Object.keys(routeConfig));
+};
 const getQueueDriver = (driverConfig) => {
     const driverName = driverConfig.default;
     return driverConfig.drivers[driverName];
@@ -124,9 +153,9 @@ const createBaseMonitor = () => {
         .map((m) => m.trim())
         .filter((m) => m.length > 0);
     if (enabled && middleware.length > 0) {
-        const knownKeys = new Set(Object.keys(middlewareConfig.route ?? {}));
+        const knownKeys = getConfiguredQueueMonitorRouteKeys();
         const unknownKeys = middleware.filter((name) => {
-            return !knownKeys.has(name) && !isKnownMiddlewareName(name);
+            return !knownKeys.has(name) && !isKnownQueueMonitorMiddlewareName(name);
         });
         if (unknownKeys.length > 0) {
             Logger.error('Unknown QUEUE_MONITOR_MIDDLEWARE keys configured', {

package/src/http/RequestContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RequestContext.d.ts","sourceRoot":"","sources":["../../../src/http/RequestContext.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAqGD,eAAO,MAAM,cAAc;QACf,CAAC,WAAW,eAAe,YAAY,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;eAKpD,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;YAK7C,eAAe,GAAG,SAAS;gBAIvB,QAAQ,GAAG,eAAe;gBAoC1B,QAAQ,WAAW,eAAe,GAAG,IAAI;aAS5C,QAAQ,GAAG,eAAe,GAAG,SAAS;oBAM/B,eAAe,UAAU,MAAM,GAAG,eAAe;mBASlD,QAAQ,UAAU,MAAM,GAAG,SAAS,GAAG,IAAI;qBAIzC,QAAQ,YAAY,MAAM,GAAG,SAAS,GAAG,IAAI;oBAI9C,QAAQ,WAAW,MAAM,GAAG,SAAS,GAAG,IAAI;EAG5D,CAAC;AAEH,eAAe,cAAc,CAAC"}
+{"version":3,"file":"RequestContext.d.ts","sourceRoot":"","sources":["../../../src/http/RequestContext.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAwGD,eAAO,MAAM,cAAc;QACf,CAAC,WAAW,eAAe,YAAY,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;eAKpD,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;YAK7C,eAAe,GAAG,SAAS;gBAIvB,QAAQ,GAAG,eAAe;gBAoC1B,QAAQ,WAAW,eAAe,GAAG,IAAI;aAS5C,QAAQ,GAAG,eAAe,GAAG,SAAS;oBAM/B,eAAe,UAAU,MAAM,GAAG,eAAe;mBASlD,QAAQ,UAAU,MAAM,GAAG,SAAS,GAAG,IAAI;qBAIzC,QAAQ,YAAY,MAAM,GAAG,SAAS,GAAG,IAAI;oBAI9C,QAAQ,WAAW,MAAM,GAAG,SAAS,GAAG,IAAI;EAG5D,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/src/http/RequestContext.js

@@ -77,9 +77,12 @@ const setContextField = (req, field, value) => {
         ctx[field] = value;
     }
 };
-const resolvedStorage = await resolveStorage();
-syncStorage = resolvedStorage;
-const STORAGE_PROMISE = Promise.resolve(resolvedStorage);
+const initializeStorage = async () => {
+    const storage = await resolveStorage();
+    syncStorage = storage;
+    return storage;
+};
+const STORAGE_PROMISE = initializeStorage();
 export const RequestContext = Object.freeze({
     async run(context, callback) {
         const storage = await STORAGE_PROMISE;

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v1.5.2
+ * @zintrust/core v1.5.4
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-04-25T12:35:41.534Z
+ *   Built: 2026-04-29T07:41:51.160Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.41';
-export const ZINTRUST_BUILD_DATE = '2026-04-25T12:35:41.502Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-04-29T07:41:51.121Z'; // Replaced during build
 export { Application } from './boot/Application.js';
 export { AwsSigV4 } from './common/index.js';
 export { SignedRequest } from './security/SignedRequest.js';

package/src/migrations/schema/Schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Schema.d.ts","sourceRoot":"","sources":["../../../../src/migrations/schema/Schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAM/C,OAAO,KAAK,EAAgC,aAAa,EAAE,MAAM,0BAA0B,CAAC;AA6M5F,iBAAS,mBAAmB,CAAC,EAAE,EAAE,SAAS,GAAG,aAAa,CAWzD;AAED,eAAO,MAAM,MAAM;;EAEjB,CAAC"}
+{"version":3,"file":"Schema.d.ts","sourceRoot":"","sources":["../../../../src/migrations/schema/Schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAM/C,OAAO,KAAK,EAKV,aAAa,EACd,MAAM,0BAA0B,CAAC;AAoYlC,iBAAS,mBAAmB,CAAC,EAAE,EAAE,SAAS,GAAG,aAAa,CAWzD;AAED,eAAO,MAAM,MAAM;;EAEjB,CAAC"}

package/src/migrations/schema/Schema.js

@@ -1,4 +1,5 @@
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { isNonEmptyString, isObject } from '../../helper/index.js';
 import { BaseAdapter } from '../../orm/DatabaseAdapter.js';
 import { isSqliteFamily } from '../enum/index.js';
 import { MigrationBlueprint } from '../schema/Blueprint.js';
@@ -9,18 +10,128 @@ function assertIdentifier(label, value) {
         throw ErrorFactory.createValidationError(`Invalid ${label} identifier: ${value}`);
     }
 }
-function isRecord(value) {
-    return typeof value === 'object' && value !== null;
-}
 function getStringProp(value, key) {
-    if (!isRecord(value))
+    if (!isObject(value))
         return null;
     const v = value[key];
-    return typeof v === 'string' ? v : null;
+    return isNonEmptyString(v) ? v : null;
 }
 function mapNames(rows) {
     return rows.map((r) => getStringProp(r, 'name') ?? '').filter((name) => name.length > 0);
 }
+function normalizeSqliteAffinity(type) {
+    if (!isNonEmptyString(type))
+        return null;
+    const normalized = type.trim().toUpperCase();
+    if (normalized.includes('INT'))
+        return 'INTEGER';
+    if (normalized.includes('CHAR') ||
+        normalized.includes('CLOB') ||
+        normalized.includes('TEXT') ||
+        normalized.includes('UUID') ||
+        normalized.includes('DATE') ||
+        normalized.includes('TIME') ||
+        normalized.includes('JSON')) {
+        return 'TEXT';
+    }
+    if (normalized.includes('BLOB'))
+        return 'BLOB';
+    if (normalized.includes('REAL') || normalized.includes('FLOA') || normalized.includes('DOUB')) {
+        return 'REAL';
+    }
+    return 'NUMERIC';
+}
+function getPlannedSqliteAffinity(def) {
+    switch (def.type) {
+        case 'STRING':
+        case 'DATE':
+        case 'UUID':
+        case 'TEXT':
+        case 'JSON':
+        case 'TIMESTAMP':
+            return 'TEXT';
+        case 'INTEGER':
+        case 'BIGINT':
+            return 'INTEGER';
+        case 'REAL':
+            return 'REAL';
+        case 'BLOB':
+            return 'BLOB';
+        case 'BOOLEAN':
+            return 'NUMERIC';
+        default:
+            return 'NUMERIC';
+    }
+}
+async function getSqliteTableColumns(db, tableName) {
+    assertIdentifier('table', tableName);
+    const rows = await db.query(`PRAGMA table_info("${tableName}")`, [], true);
+    return rows
+        .map((row) => {
+        const name = getStringProp(row, 'name');
+        if (!isNonEmptyString(name))
+            return null;
+        return {
+            name,
+            affinity: normalizeSqliteAffinity(getStringProp(row, 'type')),
+        };
+    })
+        .filter((row) => row !== null);
+}
+function getColumnAffinityLabel(affinity) {
+    return affinity ?? 'unknown';
+}
+function buildPlannedColumnMap(columns) {
+    return new Map(columns.map((column) => [column.name, getPlannedSqliteAffinity(column)]));
+}
+function getColumnAffinity(columnName, existingColumns, plannedColumns) {
+    return plannedColumns.get(columnName) ?? existingColumns.get(columnName) ?? null;
+}
+function describeSqliteForeignKey(tableName, fk, localColumns, plannedColumns, referencedColumns) {
+    const local = fk.columns.map((column) => {
+        const affinity = getColumnAffinity(column, localColumns, plannedColumns);
+        return `${tableName}.${column} [${getColumnAffinityLabel(affinity)}]`;
+    });
+    const referenced = fk.referencedColumns.map((column) => {
+        const affinity = referencedColumns.get(column) ?? null;
+        return `${fk.referencedTable}.${column} [${getColumnAffinityLabel(affinity)}]`;
+    });
+    const hasMismatch = fk.columns.some((column, index) => {
+        const localAffinity = getColumnAffinity(column, localColumns, plannedColumns);
+        const referencedAffinity = referencedColumns.get(fk.referencedColumns[index]) ?? null;
+        return (isNonEmptyString(localAffinity) &&
+            isNonEmptyString(referencedAffinity) &&
+            localAffinity !== referencedAffinity);
+    });
+    const mismatchSuffix = hasMismatch
+        ? ' (detected SQLite affinity mismatch between local and referenced columns)'
+        : '';
+    return `Add foreign key "${fk.name}": ${local.join(', ')} -> ${referenced.join(', ')}${mismatchSuffix}`;
+}
+async function buildSqliteAlterTableDiagnostic(db, tableName, plan) {
+    const details = [];
+    if (plan.dropColumns.length > 0) {
+        details.push(`Drop columns: ${plan.dropColumns.join(', ')}`);
+    }
+    if (plan.addForeignKeys.length > 0) {
+        const localColumns = await getSqliteTableColumns(db, tableName);
+        const localColumnMap = new Map(localColumns.map((column) => [column.name, column.affinity]));
+        const plannedColumnMap = buildPlannedColumnMap(plan.addColumns);
+        const foreignKeyDetails = await Promise.all(plan.addForeignKeys.map(async (fk) => {
+            const referenced = await getSqliteTableColumns(db, fk.referencedTable);
+            const referencedColumnMap = new Map(referenced.map((column) => [column.name, column.affinity]));
+            return describeSqliteForeignKey(tableName, fk, localColumnMap, plannedColumnMap, referencedColumnMap);
+        }));
+        details.push(...foreignKeyDetails);
+    }
+    if (plan.dropForeignKeys.length > 0) {
+        details.push(`Drop foreign keys: ${plan.dropForeignKeys.join(', ')}`);
+    }
+    return [
+        `SQLite/D1 schema.table('${tableName}') cannot drop columns or alter foreign keys without a table rebuild.`,
+        ...details,
+    ].join(' ');
+}
 function buildParameterized(db, sql, parameters) {
     const adapter = db.getAdapterInstance(false);
     return BaseAdapter.buildParameterizedQuery(sql, parameters, (i) => adapter.getPlaceholder(i));
@@ -58,6 +169,12 @@ async function schemaTable(db, tableName, callback) {
         addForeignKeys: def.foreignKeys,
         dropForeignKeys: blueprint.getDropForeignKeys(),
     };
+    if (isSqliteFamily(db.getType()) &&
+        (plan.dropColumns.length > 0 ||
+            plan.addForeignKeys.length > 0 ||
+            plan.dropForeignKeys.length > 0)) {
+        throw ErrorFactory.createValidationError(await buildSqliteAlterTableDiagnostic(db, tableName, plan));
+    }
     const statements = MigrationSchemaCompiler.compileAlterTable(db.getType(), tableName, plan);
     await runStatements(db, statements);
 }

package/src/runtime/PluginManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PluginManager.d.ts","sourceRoot":"","sources":["../../../src/runtime/PluginManager.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAsRhE,eAAO,MAAM,aAAa;IACxB;;OAEG;YACK,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAIxC;;OAEG;yBACkB,MAAM,GAAG,MAAM,GAAG,IAAI;IAW3C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0DrD;;OAEG;sBACqB,MAAM,YAAY;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BrF;;;;OAIG;wBACuB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EA2ChD,CAAC"}
+{"version":3,"file":"PluginManager.d.ts","sourceRoot":"","sources":["../../../src/runtime/PluginManager.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA2ShE,eAAO,MAAM,aAAa;IACxB;;OAEG;YACK,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAIxC;;OAEG;yBACkB,MAAM,GAAG,MAAM,GAAG,IAAI;IAW3C;;OAEG;0BACyB,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0DrD;;OAEG;sBACqB,MAAM,YAAY;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BrF;;;;OAIG;wBACuB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EA2ChD,CAAC"}

package/src/runtime/PluginManager.js

@@ -3,7 +3,6 @@
  * Plugin Manager
  * Handles installation and removal of framework plugins.
  */
-import { SpawnUtil } from '../cli/utils/spawn.js';
 import { readEnvString } from '../common/ExternalServiceUtils.js';
 import { esmDirname, resolvePackageManager } from '../common/index.js';
 import { Logger } from '../config/logger.js';
@@ -13,6 +12,11 @@ import * as path from '../node-singletons/path.js';
 import { PluginRegistry } from './PluginRegistry.js';
 const __dirname = esmDirname(import.meta.url);
 const MAX_PACKAGE_ROOT_SEARCH_DEPTH = 20;
+let spawnUtilPromise;
+const loadSpawnUtil = async () => {
+    spawnUtilPromise ??= import('../cli/utils/spawn.js').then((module) => module.SpawnUtil);
+    return spawnUtilPromise;
+};
 function findPackageRoot(startDir) {
     let current = startDir;
     for (let i = 0; i < MAX_PACKAGE_ROOT_SEARCH_DEPTH; i++) {
@@ -109,8 +113,9 @@ async function npmInstall(packages, options) {
             break;
     }
     try {
+        const spawnUtil = await loadSpawnUtil();
         // Use async spawn for all package managers to avoid blocking event loop
-        const exit = await SpawnUtil.spawnAndWait({ command: cmd, args, cwd: projectRoot });
+        const exit = await spawnUtil.spawnAndWait({ command: cmd, args, cwd: projectRoot });
         if (exit !== 0) {
             throw ErrorFactory.createCliError(`Package manager ${pm} failed to install ${options.label}`, {
                 exit,
@@ -213,7 +218,8 @@ async function runPostInstall(plugin) {
             Logger.info(`Running post-install command: ${plugin.postInstall.command}...`);
             let exit;
             try {
-                exit = await SpawnUtil.spawnAndWait({
+                const spawnUtil = await loadSpawnUtil();
+                exit = await spawnUtil.spawnAndWait({
                     command: plugin.postInstall.command,
                     args: [],
                     cwd: projectRoot,

package/src/runtime/WorkerAdapterImports.d.ts

@@ -1,5 +1,5 @@
 export declare const WorkerAdapterImports: Readonly<{
-    loaded: boolean;
-    ready: void;
+    loaded: true;
+    ready: Promise<void>;
 }>;
 //# sourceMappingURL=WorkerAdapterImports.d.ts.map

package/src/runtime/WorkerAdapterImports.js

@@ -22,7 +22,7 @@ const tryImportOptional = async () => {
     await tryImportProjectRuntime();
     await import('./WorkerProjectPlugins.js');
 };
-const ready = await tryImportOptional();
+const ready = tryImportOptional();
 export const WorkerAdapterImports = Object.freeze({
     loaded: true,
     ready,

package/src/runtime/plugins/trace-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace-runtime.d.ts","sourceRoot":"","sources":["../../../../src/runtime/plugins/trace-runtime.ts"],"names":[],"mappings":"AAAA,KAAK,cAAc,GAAG;IACpB,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,cAAc,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC;CACtC,CAAC;AAwEF,eAAO,MAAM,WAAW,QAAO,OAA0C,CAAC;AAE1E,eAAO,MAAM,WAAW,EAAE,cAIxB,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,eAIzB,CAAC;AAEH,eAAO,MAAM,sBAAsB,GACjC,QAAQ,OAAO,EACf,UAAU;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAE,KAClE,IAEF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,OAAO,EACf,SAAS,OAAO,EAChB,UAAU;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAE,KAClE,IAEF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,OAAO,OAAO,EACd,UAAU;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAChF,IASF,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAa,OAAO,CAAC,IAAI,CAIhE,CAAC"}
+{"version":3,"file":"trace-runtime.d.ts","sourceRoot":"","sources":["../../../../src/runtime/plugins/trace-runtime.ts"],"names":[],"mappings":"AAAA,KAAK,cAAc,GAAG;IACpB,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,cAAc,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC;CACtC,CAAC;AAwEF,eAAO,MAAM,WAAW,QAAO,OAA0C,CAAC;AAE1E,eAAO,MAAM,WAAW,EAAE,cAIxB,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,eAIzB,CAAC;AAEH,eAAO,MAAM,sBAAsB,GACjC,QAAQ,OAAO,EACf,UAAU;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAE,KAClE,IAEF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,OAAO,EACf,SAAS,OAAO,EAChB,UAAU;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAE,KAClE,IAEF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,OAAO,OAAO,EACd,UAAU;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAChF,IASF,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAa,OAAO,CAAC,IAAI,CAKhE,CAAC"}

package/src/runtime/plugins/trace-runtime.js

@@ -59,5 +59,6 @@ export const ensureSystemTraceRegistered = async () => {
     const module = await loadSystemTraceModule();
     if (module === undefined)
         return;
-    await import('../../../packages/trace/src/register.js').catch(() => undefined);
+    const registerModule = await import('../../../packages/trace/src/register.js').catch(() => undefined);
+    await registerModule?.registerTraceReady?.catch(() => undefined);
 };

package/src/runtime/plugins/trace.d.ts

@@ -1,2 +1,3 @@
 export type {};
+export declare const ready: Promise<void>;
 //# sourceMappingURL=trace.d.ts.map

package/src/runtime/plugins/trace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../../../src/runtime/plugins/trace.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,CAAC"}
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../../../src/runtime/plugins/trace.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,CAAC;AAmBf,eAAO,MAAM,KAAK,eAAoB,CAAC"}

package/src/runtime/plugins/trace.js

@@ -7,8 +7,10 @@ const tryImport = async (specifier) => {
         return false;
     }
 };
-const importedPackagePlugin = await tryImport('@zintrust/trace/plugin');
-if (!importedPackagePlugin) {
-    await import('../../../packages/trace/src/plugin.js').catch(() => undefined);
-}
-export {};
+const loadTracePlugin = async () => {
+    const importedPackagePlugin = await tryImport('@zintrust/trace/plugin');
+    if (!importedPackagePlugin) {
+        await import('../../../packages/trace/src/plugin.js').catch(() => undefined);
+    }
+};
+export const ready = loadTracePlugin();

package/src/templates/project/basic/config/middleware.ts.tpl

@@ -32,17 +32,17 @@ export default {
     .filter((m: string) => m.length > 0) as ReadonlyArray<string>,
   fillRateLimit: {
     windowMs: 60_000,
-    max: 5,
+    maxRequests: 5,
     message: 'Too many fill requests, please try again later.',
   },
   authRateLimit: {
     windowMs: 60_000,
-    max: 4,
+    maxRequests: 4,
     message: 'Too many authentication attempts, please try again later.',
   },
   userMutationRateLimit: {
     windowMs: 60_000,
-    max: 20,
+    maxRequests: 20,
     message: 'Too many user mutation requests, please try again later.',
   },
   responders: {

package/src/zintrust.plugins.d.ts

@@ -1,7 +1,10 @@
 /**
- * Auto-generated fallback module.
- * This file is created by scripts/ensure-worker-plugins.mjs when missing.
- * It allows optional runtime plugin imports to resolve in CI/scaffolded setups.
+ * ZinTrust plugin auto-imports
+ *
+ * In real projects, this file is managed by `zin plugin install` and contains
+ * side-effect imports (e.g. `@zintrust/db-sqlite/register`) that register
+ * optional adapters/drivers into core registries.
+ *
  */
 export type {};
 export declare const __zintrustGeneratedPluginStub = "zintrust.plugins.ts";

package/src/zintrust.plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zintrust.plugins.d.ts","sourceRoot":"","sources":["../../src/zintrust.plugins.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,YAAY,EAAE,CAAC;AAgBf,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;;AACnE,wBAAkB"}
+{"version":3,"file":"zintrust.plugins.d.ts","sourceRoot":"","sources":["../../src/zintrust.plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,YAAY,EAAE,CAAC;AAgBf,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;;AACnE,wBAAkB"}

package/src/zintrust.plugins.js

@@ -1,7 +1,10 @@
 /**
- * Auto-generated fallback module.
- * This file is created by scripts/ensure-worker-plugins.mjs when missing.
- * It allows optional runtime plugin imports to resolve in CI/scaffolded setups.
+ * ZinTrust plugin auto-imports
+ *
+ * In real projects, this file is managed by `zin plugin install` and contains
+ * side-effect imports (e.g. `@zintrust/db-sqlite/register`) that register
+ * optional adapters/drivers into core registries.
+ *
  */
 import * as TraceRuntime from './runtime/plugins/trace-runtime.js';
 globalThis.__zintrust_system_trace_plugin_requested__ = true;