nucleus-core-ts 0.8.0

package/schemas/bckp/config.nucleus.json

@@ -0,0 +1,1488 @@
+{
+	"title": "Nucleus Config",
+	"description": "Nucleus Plugin Configuration Schema",
+	"version": "1.0.0",
+	"author": "Hidayet Can Özcan",
+	"license": "MIT",
+	"type": "object",
+	"properties": {
+		"$schema": {
+			"type": "string",
+			"description": "JSON Schema reference"
+		},
+		"redis": {
+			"url": {
+				"type": "string",
+				"description": "Redis URL (defaults to REDIS_URL env)"
+			},
+			"host": {
+				"type": "string",
+				"description": "Redis host (defaults to REDIS_HOST env)"
+			},
+			"port": {
+				"type": "integer",
+				"description": "Redis port (defaults to REDIS_PORT env)"
+			},
+			"withDapr": {
+				"type": "boolean",
+				"description": "Use Dapr for Redis (defaults to REDIS_WITH_DAPR env)"
+			},
+			"stateStoreName": {
+				"type": "string",
+				"description": "State store name (defaults to REDIS_STATE_STORE_NAME env)"
+			}
+		},
+		"appId": {
+			"type": "string",
+			"description": "Your application ID (default: NUCLEUS_APP_ID env or '*')",
+			"minLength": 1
+		},
+		"database": {
+			"type": "object",
+			"description": "Database configuration",
+			"properties": {
+				"url": {
+					"type": "string",
+					"description": "Database URL (defaults to DATABASE_URL env)"
+				},
+				"isMultiTenant": {
+					"type": "boolean",
+					"description": "Whether multi-tenant mode is enabled",
+					"default": false
+				},
+				"allowDataLoss": {
+					"type": "boolean",
+					"description": "Apply changes even if there's potential data loss",
+					"default": false
+				},
+				"type": {
+					"type": "string",
+					"description": "Database type (defaults to DATABASE_TYPE env)",
+					"default": "postgres"
+				},
+				"schemas": {
+					"type": "array",
+					"description": "Database schemas (defaults to DATABASE_SCHEMAS env)",
+					"items": {
+						"type": "string"
+					},
+					"default": ["main"]
+				}
+			}
+		},
+		"authorization": {
+			"type": "object",
+			"description": "Authorization configuration",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"description": "Enable authorization",
+					"default": false
+				},
+				"autoSeedClaims": {
+					"type": "boolean",
+					"description": "Auto-seed claims for all entities on startup",
+					"default": true
+				},
+				"skipTables": {
+					"type": "array",
+					"description": "Tables to skip from claim generation",
+					"items": {
+						"type": "string"
+					},
+					"default": ["audit_logs"]
+				},
+				"skipColumns": {
+					"type": "array",
+					"description": "Columns to skip from field-level claims",
+					"items": {
+						"type": "string"
+					},
+					"default": [
+						"id",
+						"created_at",
+						"updated_at",
+						"is_active",
+						"password",
+						"version"
+					]
+				},
+				"excludedPaths": {
+					"type": "array",
+					"description": "Paths excluded from authorization checks",
+					"items": {
+						"type": "string"
+					},
+					"default": ["/health", "/swagger"]
+				},
+				"publicPaths": {
+					"type": "array",
+					"description": "Public paths that don't require authentication",
+					"items": {
+						"type": "string"
+					},
+					"default": ["/auth/login", "/auth/register"]
+				},
+				"godminEmail": {
+					"type": "string",
+					"description": "Email for the godmin user (bypasses all authorization)"
+				},
+				"godminPassword": {
+					"type": "string",
+					"description": "Password for the godmin user"
+				}
+			}
+		},
+		"audit": {
+			"type": "object",
+			"description": "Audit logging configuration",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"description": "Enable audit logging globally",
+					"default": true
+				},
+				"actions": {
+					"type": "object",
+					"description": "Enable/disable audit per action type",
+					"properties": {
+						"GET": {
+							"type": "boolean",
+							"default": false
+						},
+						"INSERT": {
+							"type": "boolean",
+							"default": true
+						},
+						"UPDATE": {
+							"type": "boolean",
+							"default": true
+						},
+						"DELETE": {
+							"type": "boolean",
+							"default": true
+						},
+						"TOGGLE": {
+							"type": "boolean",
+							"default": true
+						},
+						"VERIFICATION": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"entities": {
+					"type": "object",
+					"properties": {
+						"include": {
+							"type": "array",
+							"items": {
+								"type": "string"
+							}
+						},
+						"exclude": {
+							"type": "array",
+							"items": {
+								"type": "string"
+							}
+						}
+					}
+				},
+				"auth": {
+					"type": "object",
+					"properties": {
+						"LOGIN": {
+							"type": "boolean",
+							"default": true
+						},
+						"LOGOUT": {
+							"type": "boolean",
+							"default": true
+						},
+						"REGISTER": {
+							"type": "boolean",
+							"default": true
+						},
+						"PASSWORD_RESET": {
+							"type": "boolean",
+							"default": true
+						},
+						"TOKEN_REFRESH": {
+							"type": "boolean",
+							"default": false
+						}
+					}
+				},
+				"logConfigUpdates": {
+					"type": "boolean",
+					"default": false
+				}
+			}
+		},
+		"authentication": {
+			"type": "object",
+			"description": "Authentication configuration",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": true
+				},
+				"routePrefix": {
+					"type": "string",
+					"default": "/authentication"
+				},
+				"skipSecretValidation": {
+					"type": "boolean",
+					"default": false
+				},
+				"accessToken": {
+					"type": "object",
+					"properties": {
+						"secret": {
+							"type": "string"
+						},
+						"expiresIn": {
+							"type": "string",
+							"default": "15m"
+						},
+						"algorithm": {
+							"type": "string",
+							"default": "HS256"
+						},
+						"issuer": {
+							"type": "string"
+						},
+						"audience": {
+							"type": "string"
+						},
+						"name": {
+							"type": "string",
+							"default": "access_token"
+						},
+						"setHeadersEnabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"returnJson": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"refreshToken": {
+					"type": "object",
+					"properties": {
+						"secret": {
+							"type": "string"
+						},
+						"expiresIn": {
+							"type": "string",
+							"default": "30d"
+						},
+						"algorithm": {
+							"type": "string",
+							"default": "HS256"
+						},
+						"issuer": {
+							"type": "string"
+						},
+						"audience": {
+							"type": "string"
+						},
+						"name": {
+							"type": "string",
+							"default": "refresh_token"
+						},
+						"setHeadersEnabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"returnJson": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"sessionToken": {
+					"type": "object",
+					"properties": {
+						"secret": {
+							"type": "string"
+						},
+						"expiresIn": {
+							"type": "string",
+							"default": "7d"
+						},
+						"algorithm": {
+							"type": "string",
+							"default": "HS256"
+						},
+						"issuer": {
+							"type": "string"
+						},
+						"audience": {
+							"type": "string"
+						},
+						"name": {
+							"type": "string",
+							"default": "session_token"
+						},
+						"setHeadersEnabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"returnJson": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"login": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/login"
+						},
+						"rememberMe": {
+							"type": "boolean",
+							"default": false
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": true
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"register": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/register"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": true
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"logout": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/logout"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": false
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"refresh": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/refresh"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": false
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"passwordReset": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/password-reset"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": true
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"passwordChange": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/password-change"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": false
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"sessions": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/sessions"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": false
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"maxActiveSessions": {
+							"type": "integer",
+							"default": 10
+						},
+						"inactivityTimeout": {
+							"type": "string",
+							"default": "30d"
+						},
+						"allowMultipleDevices": {
+							"type": "boolean",
+							"default": true
+						},
+						"trustNewDevices": {
+							"type": "boolean",
+							"default": false
+						},
+						"notifyOnNewDevice": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"magicLink": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/magic-link"
+						},
+						"verifyRoute": {
+							"type": "string",
+							"default": "/magic-link/verify"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": true
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"expiresIn": {
+							"type": "string",
+							"default": "15m"
+						},
+						"redirectUrl": {
+							"type": "string"
+						}
+					}
+				},
+				"me": {
+					"type": "object",
+					"properties": {
+						"route": {
+							"type": "string",
+							"default": "/auth/me"
+						},
+						"isPublic": {
+							"type": "boolean",
+							"default": false
+						},
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"includeProfile": {
+							"type": "boolean",
+							"default": true
+						},
+						"includeAddresses": {
+							"type": "boolean",
+							"default": true
+						},
+						"includePhones": {
+							"type": "boolean",
+							"default": true
+						},
+						"includeFiles": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"password": {
+					"type": "object",
+					"properties": {
+						"hashAlgorithm": {
+							"type": "string",
+							"enum": ["bcrypt", "argon2"],
+							"default": "bcrypt"
+						},
+						"bcryptRounds": {
+							"type": "integer",
+							"minimum": 10,
+							"default": 12
+						},
+						"argon2Options": {
+							"type": "object",
+							"properties": {
+								"memoryCost": {
+									"type": "integer",
+									"default": 65536
+								},
+								"timeCost": {
+									"type": "integer",
+									"default": 3
+								},
+								"parallelism": {
+									"type": "integer",
+									"default": 4
+								}
+							}
+						},
+						"minLength": {
+							"type": "integer",
+							"minimum": 1,
+							"default": 8
+						},
+						"maxLength": {
+							"type": "integer",
+							"default": 128
+						},
+						"requireUppercase": {
+							"type": "boolean",
+							"default": true
+						},
+						"requireLowercase": {
+							"type": "boolean",
+							"default": true
+						},
+						"requireNumbers": {
+							"type": "boolean",
+							"default": true
+						},
+						"requireSpecialChars": {
+							"type": "boolean",
+							"default": false
+						}
+					}
+				},
+				"session": {
+					"type": "object",
+					"properties": {
+						"ttlSeconds": {
+							"type": "integer",
+							"default": 2592000
+						},
+						"maxSessionsPerUser": {
+							"type": "integer",
+							"default": 10
+						},
+						"extendOnActivity": {
+							"type": "boolean",
+							"default": true
+						},
+						"storeName": {
+							"type": "string",
+							"default": "statestore-redis"
+						}
+					}
+				},
+				"cookie": {
+					"type": "object",
+					"properties": {
+						"accessTokenCookieName": {
+							"type": "string",
+							"default": "access_token"
+						},
+						"refreshTokenCookieName": {
+							"type": "string",
+							"default": "refresh_token"
+						},
+						"sessionIdCookieName": {
+							"type": "string",
+							"default": "session_id"
+						},
+						"domain": {
+							"type": "string"
+						},
+						"path": {
+							"type": "string",
+							"default": "/"
+						},
+						"secure": {
+							"type": "boolean",
+							"default": true
+						},
+						"httpOnly": {
+							"type": "boolean",
+							"default": true
+						},
+						"sameSite": {
+							"type": "string",
+							"enum": ["strict", "lax", "none"],
+							"default": "strict"
+						}
+					}
+				},
+				"rateLimit": {
+					"type": "object",
+					"properties": {
+						"login": {
+							"type": "object",
+							"properties": {
+								"maxAttempts": {
+									"type": "integer",
+									"default": 5
+								},
+								"windowSeconds": {
+									"type": "integer",
+									"default": 60
+								},
+								"blockDurationSeconds": {
+									"type": "integer",
+									"default": 300
+								}
+							}
+						},
+						"register": {
+							"type": "object",
+							"properties": {
+								"maxAttempts": {
+									"type": "integer",
+									"default": 3
+								},
+								"windowSeconds": {
+									"type": "integer",
+									"default": 3600
+								},
+								"blockDurationSeconds": {
+									"type": "integer",
+									"default": 3600
+								}
+							}
+						},
+						"passwordReset": {
+							"type": "object",
+							"properties": {
+								"maxAttempts": {
+									"type": "integer",
+									"default": 3
+								},
+								"windowSeconds": {
+									"type": "integer",
+									"default": 3600
+								},
+								"blockDurationSeconds": {
+									"type": "integer",
+									"default": 3600
+								}
+							}
+						}
+					}
+				},
+				"accountLockout": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"maxFailedAttempts": {
+							"type": "integer",
+							"default": 10
+						},
+						"lockoutDurationSeconds": {
+							"type": "integer",
+							"default": 1800
+						},
+						"resetOnSuccess": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"proactiveRefresh": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"wsPath": {
+							"type": "string",
+							"default": "/ws/auth"
+						},
+						"skipWsTokenValidation": {
+							"type": "boolean",
+							"default": false
+						},
+						"refreshIntervalSeconds": {
+							"type": "integer",
+							"default": 60
+						},
+						"verifyUserBeforeRefresh": {
+							"type": "boolean",
+							"default": true
+						}
+					}
+				},
+				"email": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"fromName": {
+							"type": "string",
+							"default": "Nucleus"
+						}
+					}
+				},
+				"emailVerification": {
+					"type": "object",
+					"properties": {
+						"required": {
+							"type": "boolean",
+							"default": false
+						},
+						"tokenExpiresInSeconds": {
+							"type": "integer",
+							"default": 86400
+						}
+					}
+				},
+				"enableAudit": {
+					"type": "boolean",
+					"default": true
+				}
+			}
+		},
+		"rateLimit": {
+			"type": "object",
+			"description": "Rate limiting configuration",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": true
+				},
+				"strategy": {
+					"type": "string",
+					"enum": ["sliding-window", "fixed-window", "token-bucket"],
+					"default": "sliding-window"
+				},
+				"keyPrefix": {
+					"type": "string",
+					"default": "rl:"
+				},
+				"authRoutes": {
+					"type": "object",
+					"properties": {
+						"window": {
+							"type": "string",
+							"default": "1m"
+						},
+						"max": {
+							"type": "integer",
+							"default": 10
+						},
+						"login": {
+							"type": "object",
+							"properties": {
+								"window": {
+									"type": "string",
+									"default": "15m"
+								},
+								"max": {
+									"type": "integer",
+									"default": 5
+								},
+								"blockDuration": {
+									"type": "string",
+									"default": "30m"
+								}
+							}
+						},
+						"register": {
+							"type": "object",
+							"properties": {
+								"window": {
+									"type": "string",
+									"default": "1h"
+								},
+								"max": {
+									"type": "integer",
+									"default": 3
+								},
+								"blockDuration": {
+									"type": "string",
+									"default": "1h"
+								}
+							}
+						},
+						"passwordReset": {
+							"type": "object",
+							"properties": {
+								"window": {
+									"type": "string",
+									"default": "1h"
+								},
+								"max": {
+									"type": "integer",
+									"default": 3
+								},
+								"blockDuration": {
+									"type": "string",
+									"default": "1h"
+								}
+							}
+						},
+						"magicLink": {
+							"type": "object",
+							"properties": {
+								"window": {
+									"type": "string",
+									"default": "1h"
+								},
+								"max": {
+									"type": "integer",
+									"default": 5
+								},
+								"blockDuration": {
+									"type": "string",
+									"default": "1h"
+								}
+							}
+						}
+					}
+				},
+				"publicRoutes": {
+					"type": "object",
+					"properties": {
+						"window": {
+							"type": "string",
+							"default": "1m"
+						},
+						"max": {
+							"type": "integer",
+							"default": 100
+						}
+					}
+				},
+				"privateRoutes": {
+					"type": "object",
+					"properties": {
+						"window": {
+							"type": "string",
+							"default": "1m"
+						},
+						"max": {
+							"type": "integer",
+							"default": 60
+						}
+					}
+				},
+				"byIp": {
+					"type": "boolean",
+					"default": true
+				},
+				"byUserId": {
+					"type": "boolean",
+					"default": true
+				},
+				"byEndpoint": {
+					"type": "boolean",
+					"default": false
+				},
+				"skipSuccessfulRequests": {
+					"type": "boolean",
+					"default": false
+				},
+				"headers": {
+					"type": "object",
+					"properties": {
+						"remaining": {
+							"type": "string",
+							"default": "X-RateLimit-Remaining"
+						},
+						"reset": {
+							"type": "string",
+							"default": "X-RateLimit-Reset"
+						},
+						"limit": {
+							"type": "string",
+							"default": "X-RateLimit-Limit"
+						}
+					}
+				},
+				"whitelist": {
+					"type": "array",
+					"items": {
+						"type": "string"
+					},
+					"default": []
+				},
+				"blacklist": {
+					"type": "array",
+					"items": {
+						"type": "string"
+					},
+					"default": []
+				}
+			}
+		},
+		"monitoring": {
+			"type": "object",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": false
+				},
+				"system": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"collectInterval": {
+							"type": "string",
+							"default": "10s"
+						},
+						"metrics": {
+							"type": "object",
+							"properties": {
+								"cpu": {
+									"type": "boolean",
+									"default": true
+								},
+								"memory": {
+									"type": "boolean",
+									"default": true
+								},
+								"disk": {
+									"type": "boolean",
+									"default": true
+								},
+								"network": {
+									"type": "boolean",
+									"default": false
+								},
+								"process": {
+									"type": "boolean",
+									"default": true
+								}
+							}
+						}
+					}
+				},
+				"application": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"metrics": {
+							"type": "object",
+							"properties": {
+								"requests": {
+									"type": "boolean",
+									"default": true
+								},
+								"responseTime": {
+									"type": "boolean",
+									"default": true
+								},
+								"errors": {
+									"type": "boolean",
+									"default": true
+								},
+								"rateLimits": {
+									"type": "boolean",
+									"default": true
+								}
+							}
+						}
+					}
+				},
+				"database": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"metrics": {
+							"type": "object",
+							"properties": {
+								"connections": {
+									"type": "boolean",
+									"default": true
+								},
+								"queryTime": {
+									"type": "boolean",
+									"default": true
+								},
+								"slowQueryThreshold": {
+									"type": "string",
+									"default": "100ms"
+								}
+							}
+						}
+					}
+				},
+				"redis": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						}
+					}
+				},
+				"persistence": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"flushInterval": {
+							"type": "string",
+							"default": "1m"
+						},
+						"retentionDays": {
+							"type": "integer",
+							"default": 30
+						}
+					}
+				},
+				"alerts": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"email": {
+							"type": "object",
+							"properties": {
+								"enabled": {
+									"type": "boolean",
+									"default": false
+								},
+								"recipients": {
+									"type": "array",
+									"items": {
+										"type": "string",
+										"format": "email"
+									},
+									"default": []
+								}
+							}
+						},
+						"thresholds": {
+							"type": "object",
+							"properties": {
+								"cpuPercent": {
+									"type": "number",
+									"default": 80
+								},
+								"memoryPercent": {
+									"type": "number",
+									"default": 85
+								},
+								"diskPercent": {
+									"type": "number",
+									"default": 90
+								},
+								"errorRatePercent": {
+									"type": "number",
+									"default": 5
+								},
+								"responseTimeMs": {
+									"type": "number",
+									"default": 1000
+								},
+								"rateLimitBlocksPerMinute": {
+									"type": "number",
+									"default": 100
+								}
+							}
+						},
+						"cooldown": {
+							"type": "string",
+							"default": "5m"
+						}
+					}
+				},
+				"endpoints": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"basePath": {
+							"type": "string",
+							"default": "/monitoring"
+						},
+						"stream": {
+							"type": "object",
+							"properties": {
+								"enabled": {
+									"type": "boolean",
+									"default": true
+								},
+								"path": {
+									"type": "string",
+									"default": "/stream"
+								},
+								"interval": {
+									"type": "string",
+									"default": "5s"
+								}
+							}
+						},
+						"snapshot": {
+							"type": "object",
+							"properties": {
+								"enabled": {
+									"type": "boolean",
+									"default": true
+								},
+								"path": {
+									"type": "string",
+									"default": "/snapshot"
+								}
+							}
+						},
+						"history": {
+							"type": "object",
+							"properties": {
+								"enabled": {
+									"type": "boolean",
+									"default": true
+								},
+								"path": {
+									"type": "string",
+									"default": "/history"
+								},
+								"maxMinutes": {
+									"type": "integer",
+									"default": 60
+								}
+							}
+						},
+						"alerts": {
+							"type": "object",
+							"properties": {
+								"enabled": {
+									"type": "boolean",
+									"default": true
+								},
+								"path": {
+									"type": "string",
+									"default": "/alerts"
+								}
+							}
+						}
+					}
+				}
+			}
+		},
+		"fileUpload": {
+			"type": "object",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": true
+				},
+				"maxFileSizeBytes": {
+					"type": "integer",
+					"default": 10485760
+				},
+				"allowedMimeTypes": {
+					"type": "array",
+					"items": {
+						"type": "string"
+					}
+				},
+				"blockedMimeTypes": {
+					"type": "array",
+					"items": {
+						"type": "string"
+					},
+					"default": [
+						"application/x-executable",
+						"application/x-msdos-program",
+						"application/x-msdownload"
+					]
+				},
+				"uploadBasePath": {
+					"type": "string"
+				},
+				"generateUniqueNames": {
+					"type": "boolean",
+					"default": true
+				},
+				"cacheMaxAge": {
+					"type": "integer",
+					"default": 86400
+				},
+				"enableRangeRequests": {
+					"type": "boolean",
+					"default": true
+				}
+			}
+		},
+		"storage": {
+			"type": "object",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": false
+				},
+				"basePath": {
+					"type": "string",
+					"default": "./uploads"
+				},
+				"maxFileSizeBytes": {
+					"type": "integer",
+					"default": 104857600
+				},
+				"allowedMimeTypes": {
+					"type": "array",
+					"items": {
+						"type": "string"
+					},
+					"default": []
+				},
+				"blockedMimeTypes": {
+					"type": "array",
+					"items": {
+						"type": "string"
+					},
+					"default": ["application/x-executable", "application/x-msdos-program"]
+				},
+				"cdn": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"basePath": {
+							"type": "string",
+							"default": "/cdn"
+						},
+						"cacheMaxAge": {
+							"type": "integer",
+							"default": 86400
+						},
+						"enableRangeRequests": {
+							"type": "boolean",
+							"default": true
+						},
+						"enableEtag": {
+							"type": "boolean",
+							"default": true
+						},
+						"corsOrigins": {
+							"type": "array",
+							"items": {
+								"type": "string"
+							},
+							"default": ["*"]
+						}
+					}
+				},
+				"formData": {
+					"type": "object",
+					"properties": {
+						"filesField": {
+							"type": "string",
+							"default": "files"
+						},
+						"dataField": {
+							"type": "string",
+							"default": "data"
+						},
+						"maxFiles": {
+							"type": "integer",
+							"default": 10
+						}
+					}
+				}
+			}
+		},
+		"logging": {
+			"type": "object",
+			"properties": {
+				"debug": {
+					"type": "boolean",
+					"default": false
+				},
+				"info": {
+					"type": "boolean",
+					"default": true
+				},
+				"warn": {
+					"type": "boolean",
+					"default": true
+				},
+				"error": {
+					"type": "boolean",
+					"default": true
+				},
+				"prefix": {
+					"type": "string",
+					"default": "[Nucleus]"
+				},
+				"includeTimestamp": {
+					"type": "boolean",
+					"default": true
+				}
+			}
+		},
+		"entities": {
+			"type": "array",
+			"description": "List of database entities",
+			"items": {
+				"$ref": "table.schema.json"
+			},
+			"minItems": 1
+		},
+		"databaseUrl": {
+			"type": "string",
+			"description": "Database URL"
+		},
+		"mode": {
+			"type": "string",
+			"enum": ["development", "production"],
+			"default": "development"
+		},
+		"email": {
+			"type": "object",
+			"properties": {
+				"gmail": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": false
+						},
+						"json_file_path": {
+							"type": "string"
+						},
+						"from_email": {
+							"type": "string"
+						},
+						"from_name": {
+							"type": "string",
+							"default": "Nucleus"
+						}
+					}
+				}
+			}
+		},
+		"verification": {
+			"type": "object",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": false
+				},
+				"autoResetOnRejection": {
+					"type": "boolean",
+					"default": true
+				},
+				"requireSignatureByDefault": {
+					"type": "boolean",
+					"default": false
+				},
+				"diffTrackingEnabled": {
+					"type": "boolean",
+					"default": true
+				},
+				"endpoints": {
+					"type": "object",
+					"properties": {
+						"enabled": {
+							"type": "boolean",
+							"default": true
+						},
+						"basePath": {
+							"type": "string",
+							"default": "/verifications"
+						}
+					}
+				}
+			}
+		},
+		"notification": {
+			"type": "object",
+			"properties": {
+				"enabled": {
+					"type": "boolean",
+					"default": false
+				},
+				"portalEnabled": {
+					"type": "boolean",
+					"default": true
+				},
+				"emailEnabled": {
+					"type": "boolean",
+					"default": false
+				},
+				"defaultChannel": {
+					"type": "string",
+					"enum": ["portal", "email", "both"],
+					"default": "portal"
+				},
+				"templateVariables": {
+					"type": "object",
+					"additionalProperties": {
+						"type": "string"
+					}
+				}
+			}
+		}
+	},
+	"required": ["appId", "entities"],
+	"additionalProperties": false
+}