@zintrust/core 2.2.6 → 2.2.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "2.2.6",
+  "version": "2.2.7",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {

package/src/cli/cloudflare/CloudflareSecretSync.d.ts

@@ -21,6 +21,7 @@ type CloudflareSecretSyncArgs = {
     target?: string;
     bulk?: boolean;
     requireSelection?: boolean;
+    all?: boolean;
 };
 export type CloudflareSecretSyncResult = {
     pushed: number;
@@ -31,9 +32,9 @@ export type CloudflareSecretSyncResult = {
 };
 export declare const uniq: (items: string[]) => string[];
 export declare const reportCloudflareSecretSync: (log: CloudflareSecretLog, result: Pick<CloudflareSecretSyncResult, "pushed" | "skippedEmptyKeys" | "failures">) => void;
-export declare const syncCloudflareSecrets: ({ log, cwd, wranglerEnvs, envPath, dryRun, configGroups, directKeys, inlineValues, configPath, target, bulk, requireSelection, }: CloudflareSecretSyncArgs) => Promise<CloudflareSecretSyncResult>;
+export declare const syncCloudflareSecrets: ({ log, cwd, wranglerEnvs, envPath, dryRun, configGroups, directKeys, inlineValues, configPath, target, bulk, requireSelection, all, }: CloudflareSecretSyncArgs) => Promise<CloudflareSecretSyncResult>;
 declare const _default: Readonly<{
-    syncCloudflareSecrets: ({ log, cwd, wranglerEnvs, envPath, dryRun, configGroups, directKeys, inlineValues, configPath, target, bulk, requireSelection, }: CloudflareSecretSyncArgs) => Promise<CloudflareSecretSyncResult>;
+    syncCloudflareSecrets: ({ log, cwd, wranglerEnvs, envPath, dryRun, configGroups, directKeys, inlineValues, configPath, target, bulk, requireSelection, all, }: CloudflareSecretSyncArgs) => Promise<CloudflareSecretSyncResult>;
     reportCloudflareSecretSync: (log: CloudflareSecretLog, result: Pick<CloudflareSecretSyncResult, "pushed" | "skippedEmptyKeys" | "failures">) => void;
 }>;
 export default _default;

package/src/cli/cloudflare/CloudflareSecretSync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareSecretSync.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloudflare/CloudflareSecretSync.ts"],"names":[],"mappings":"AAaA,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAcF,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,mBAAmB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,2BAA2B,EAAE,CAAC;IACxC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AASF,eAAO,MAAM,IAAI,GAAI,OAAO,MAAM,EAAE,KAAG,MAAM,EAY5C,CAAC;AAwSF,eAAO,MAAM,0BAA0B,GACrC,KAAK,mBAAmB,EACxB,QAAQ,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,kBAAkB,GAAG,UAAU,CAAC,KACnF,IAcF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAU,kIAazC,wBAAwB,KAAG,OAAO,CAAC,0BAA0B,CAiD/D,CAAC;;8JAjDC,wBAAwB,KAAG,OAAO,CAAC,0BAA0B,CAAC;sCA/B1D,mBAAmB,UAChB,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,kBAAkB,GAAG,UAAU,CAAC,KACnF,IAAI;;AAgFP,wBAGG"}
+{"version":3,"file":"CloudflareSecretSync.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloudflare/CloudflareSecretSync.ts"],"names":[],"mappings":"AAaA,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAcF,KAAK,wBAAwB,GAAG;IAC9B,GAAG,EAAE,mBAAmB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,CAAC;AAcF,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,2BAA2B,EAAE,CAAC;IACxC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AASF,eAAO,MAAM,IAAI,GAAI,OAAO,MAAM,EAAE,KAAG,MAAM,EAY5C,CAAC;AA+TF,eAAO,MAAM,0BAA0B,GACrC,KAAK,mBAAmB,EACxB,QAAQ,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,kBAAkB,GAAG,UAAU,CAAC,KACnF,IAcF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAU,uIAczC,wBAAwB,KAAG,OAAO,CAAC,0BAA0B,CAqD/D,CAAC;;mKArDC,wBAAwB,KAAG,OAAO,CAAC,0BAA0B,CAAC;sCAhC1D,mBAAmB,UAChB,IAAI,CAAC,0BAA0B,EAAE,QAAQ,GAAG,kBAAkB,GAAG,UAAU,CAAC,KACnF,IAAI;;AAqFP,wBAGG"}

package/src/cli/cloudflare/CloudflareSecretSync.js

@@ -38,16 +38,22 @@ const getConfigArray = (config, key) => {
         return [];
     return uniq(raw.filter((item) => typeof item === 'string'));
 };
-const resolveValue = (key, envMap) => {
+const resolveValue = (key, envMap, envPath, all = false) => {
     const fromFile = envMap[key];
     const fromProcess = process.env[key];
+    const isCustomEnvFile = envPath !== '.env' && envPath.trim() !== '';
+    // If custom env file is provided and all is false, only use values from the custom file
+    if (isCustomEnvFile && !all) {
+        return fromFile ?? '';
+    }
+    // Default behavior: fallback to process.env
     return fromFile ?? fromProcess ?? '';
 };
-const resolveValueWithOverrides = (key, envMap, inlineValues) => {
+const resolveValueWithOverrides = (key, envMap, inlineValues, envPath, all = false) => {
     const inlineValue = inlineValues[key];
     if (typeof inlineValue === 'string')
         return inlineValue;
-    return resolveValue(key, envMap);
+    return resolveValue(key, envMap, envPath, all);
 };
 const getPutTimeoutMs = () => {
     const raw = process.env['ZT_PUT_TIMEOUT_MS'];
@@ -131,13 +137,13 @@ const resolveSelectedKeys = ({ log, config, cwd, wranglerEnvs, configGroups = []
         ? 'No secret keys resolved from explicit keys or .zintrust.json cloudflare.shared_env/cloudflare.targets/cloudflare.wrangler_envs. Use --key/--keys, --var <group>, or add a Cloudflare env manifest.'
         : 'No secret keys resolved from selected groups.');
 };
-const resolveBulkPayload = (log, wranglerEnv, selectedKeys, envMap, inlineValues) => {
+const resolveBulkPayload = (log, wranglerEnv, selectedKeys, envMap, inlineValues, envPath, all = false) => {
     const payload = {};
     const includedKeys = [];
     const skippedEmptyKeys = [];
     const wranglerEnvLabel = describeWranglerEnv(wranglerEnv);
     for (const key of selectedKeys) {
-        const value = resolveValueWithOverrides(key, envMap, inlineValues);
+        const value = resolveValueWithOverrides(key, envMap, inlineValues, envPath, all);
         if (value.trim() === '') {
             log.warn(`skip ${key} -> ${wranglerEnvLabel}: empty value`);
             skippedEmptyKeys.push(key);
@@ -148,11 +154,12 @@ const resolveBulkPayload = (log, wranglerEnv, selectedKeys, envMap, inlineValues
     }
     return { payload, includedKeys, skippedEmptyKeys };
 };
-const processSecretSync = (log, wranglerEnvs, selectedKeys, envMap, dryRun, configPath, inlineValues) => {
+const processSecretSync = (args) => {
+    const { log, wranglerEnvs, selectedKeys, envMap, dryRun, configPath, inlineValues, envPath, all, } = args;
     const progress = createSyncProgress();
     forEachWranglerEnv(wranglerEnvs, (wranglerEnv, wranglerEnvLabel) => {
         for (const key of selectedKeys) {
-            const value = resolveValueWithOverrides(key, envMap, inlineValues);
+            const value = resolveValueWithOverrides(key, envMap, inlineValues, envPath, all);
             if (value.trim() === '') {
                 log.warn(`skip ${key} -> ${wranglerEnvLabel}: empty value`);
                 progress.skippedEmptyKeys.push(key);
@@ -174,10 +181,11 @@ const processSecretSync = (log, wranglerEnvs, selectedKeys, envMap, dryRun, conf
     });
     return progress;
 };
-const processSecretBulkSync = (log, wranglerEnvs, selectedKeys, envMap, dryRun, configPath, inlineValues) => {
+const processSecretBulkSync = (args) => {
+    const { log, wranglerEnvs, selectedKeys, envMap, dryRun, configPath, inlineValues, envPath, all, } = args;
     const progress = createSyncProgress();
     forEachWranglerEnv(wranglerEnvs, (wranglerEnv, wranglerEnvLabel) => {
-        const { payload, includedKeys, skippedEmptyKeys: skippedForEnv, } = resolveBulkPayload(log, wranglerEnv, selectedKeys, envMap, inlineValues);
+        const { payload, includedKeys, skippedEmptyKeys: skippedForEnv, } = resolveBulkPayload(log, wranglerEnv, selectedKeys, envMap, inlineValues, envPath, all);
         progress.skippedEmptyKeys.push(...skippedForEnv);
         if (includedKeys.length === 0) {
             log.info(`skip bulk upload -> ${wranglerEnvLabel}: no non-empty keys`);
@@ -222,7 +230,7 @@ export const reportCloudflareSecretSync = (log, result) => {
         log.warn(`${item.key} -> ${describeWranglerEnv(item.wranglerEnv)}: ${item.reason}`);
     }
 };
-export const syncCloudflareSecrets = async ({ log, cwd, wranglerEnvs, envPath, dryRun = false, configGroups = [], directKeys = [], inlineValues = {}, configPath, target, bulk = false, requireSelection = true, }) => {
+export const syncCloudflareSecrets = async ({ log, cwd, wranglerEnvs, envPath, dryRun = false, configGroups = [], directKeys = [], inlineValues = {}, configPath, target, bulk = false, requireSelection = true, all = false, }) => {
     const normalizedConfigPath = typeof configPath === 'string' && configPath.trim() !== '' ? configPath.trim() : undefined;
     if (normalizedConfigPath !== undefined && !existsSync(path.join(cwd, normalizedConfigPath))) {
         throw ErrorFactory.createCliError(`Wrangler config not found: ${normalizedConfigPath}`);
@@ -244,8 +252,28 @@ export const syncCloudflareSecrets = async ({ log, cwd, wranglerEnvs, envPath, d
     }
     const envMap = await EnvFile.read({ cwd, path: envPath });
     const syncResult = bulk
-        ? processSecretBulkSync(log, wranglerEnvs, selectedKeys, envMap, dryRun, normalizedConfigPath, inlineValues)
-        : processSecretSync(log, wranglerEnvs, selectedKeys, envMap, dryRun, normalizedConfigPath, inlineValues);
+        ? processSecretBulkSync({
+            log,
+            wranglerEnvs,
+            selectedKeys,
+            envMap,
+            dryRun,
+            configPath: normalizedConfigPath,
+            inlineValues,
+            envPath,
+            all,
+        })
+        : processSecretSync({
+            log,
+            wranglerEnvs,
+            selectedKeys,
+            envMap,
+            dryRun,
+            configPath: normalizedConfigPath,
+            inlineValues,
+            envPath,
+            all,
+        });
     return {
         ...syncResult,
         selectedKeys,

package/src/cli/commands/DeployCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DeployCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA0LrE;;;GAGG;AACH,eAAO,MAAM,aAAa;IACxB;;OAEG;cACO,YAAY;EAGtB,CAAC"}
+{"version":3,"file":"DeployCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAgMrE;;;GAGG;AACH,eAAO,MAAM,aAAa;IACxB;;OAEG;cACO,YAAY;EAGtB,CAAC"}

package/src/cli/commands/DeployCommand.js

@@ -58,6 +58,7 @@ const syncWranglerSecrets = async (cmd, cwd, wranglerEnv, options) => {
         configPath: typeof options.config === 'string' ? options.config.trim() : undefined,
         target: typeof options.target === 'string' ? options.target : undefined,
         requireSelection: false,
+        all: options.all === true,
     });
     if (result.selectedKeys.length === 0)
         return;
@@ -109,6 +110,7 @@ const createDeployCommand = () => {
             command.option('-c, --config <path>', 'Wrangler config file (e.g. wrangler.containers-proxy.jsonc)');
             command.option('--env-path <path>', 'Path to env file used when syncing Cloudflare secrets', '.env');
             command.option('--target <id>', 'Cloudflare worker target key from .zintrust.json cloudflare.targets');
+            command.option('--all', 'Sync both custom env file and process.env (only applies when custom env file is provided)');
             command.option('--no-sync-secrets', 'Skip Cloudflare secret sync before wrangler deploy');
         },
         execute: async (options) => {

package/src/cli/commands/DeployContainersProxyCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DeployContainersProxyCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployContainersProxyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA6ErE,eAAO,MAAM,4BAA4B;cAC7B,YAAY;EAyBtB,CAAC"}
+{"version":3,"file":"DeployContainersProxyCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/DeployContainersProxyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA+ErE,eAAO,MAAM,4BAA4B;cAC7B,YAAY;EA6BtB,CAAC"}

package/src/cli/commands/DeployContainersProxyCommand.js

@@ -31,6 +31,7 @@ const syncDeploySecrets = async (cmd, cwd, config, env, options) => {
         configPath: config,
         target: typeof options.target === 'string' ? options.target : undefined,
         requireSelection: false,
+        all: options.all === true,
     });
     if (result.selectedKeys.length === 0)
         return;
@@ -60,6 +61,7 @@ export const DeployContainersProxyCommand = Object.freeze({
                 command.option('-c, --config <path>', 'Wrangler config file', DEFAULT_CONFIG);
                 command.option('--env-path <path>', 'Path to env file used when syncing Cloudflare secrets', '.env');
                 command.option('--target <id>', 'Cloudflare worker target key from .zintrust.json cloudflare.targets');
+                command.option('--all', 'Sync both custom env file and process.env (only applies when custom env file is provided)');
                 command.option('--no-sync-secrets', 'Skip Cloudflare secret sync before wrangler deploy');
             },
             execute: async (options) => execute(cmd, options),

package/src/cli/commands/PutCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PutCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PutCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA6GvF,eAAO,MAAM,UAAU;cACX,YAAY;EAWtB,CAAC;AAEH,eAAe,UAAU,CAAC"}
+{"version":3,"file":"PutCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PutCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAmHvF,eAAO,MAAM,UAAU;cACX,YAAY;EAWtB,CAAC;AAEH,eAAe,UAAU,CAAC"}

package/src/cli/commands/PutCommand.js

@@ -50,6 +50,7 @@ const addOptions = (command) => {
         .option('--env_path <path>', 'Path to env file used as source values', '.env')
         .option('-c, --config <path>', 'Wrangler config file to target (optional)')
         .option('--bulk', 'Upload the final key set with one wrangler secret bulk call per target')
+        .option('--all', 'Sync both custom env file and process.env (only applies when custom env file is provided)')
         .option('--dry-run', 'Show what would be uploaded without calling wrangler');
 };
 const ensureCloudflareProvider = (providerRaw) => {
@@ -75,6 +76,7 @@ const execute = async (cmd, options) => {
         target: typeof options.target === 'string' ? options.target : undefined,
         bulk: options.bulk === true,
         requireSelection: true,
+        all: options.all === true,
     });
     reportCloudflareSecretSync(cmd, result);
 };

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v2.2.6
+ * @zintrust/core v2.2.7
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-05-28T20:15:36.566Z
+ *   Built: 2026-05-29T08:10:13.516Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.41';
-export const ZINTRUST_BUILD_DATE = '2026-05-28T20:15:36.526Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-05-29T08:10:13.484Z'; // Replaced during build
 export { Application } from './boot/Application.js';
 export { AwsSigV4 } from './common/index.js';
 export { SignedRequest } from './security/SignedRequest.js';