Env configuration

Source: src/config/env.ts

This document lists all supported environment variables, their defaults, and what they control.

Usage

import { Env } from '@zintrust/core';

// Example
// Env.NODE_ENV

Core application

Key	Default	Description
NODE_ENV	development	Runtime mode: development, staging, production.
APP_MODE	NODE_ENV	App mode override (defaults to NODE_ENV).
APP_PORT	3000	Alternate port; PORT wins when set.
PORT	3000	HTTP server port.
HOST	localhost	Bind address for server listeners.
BASE_URL	empty	Base origin used to build fully-qualified URLs.
APP_NAME	ZinTrust	Application name (also used for proxy signing fallback).
APP_KEY	empty	Primary app secret (base64 or raw) used for encryption and signing.
APP_PREVIOUS_KEYS	empty	Optional rotation keys (comma-separated or JSON array).
APP_TIMEZONE	UTC	Default timezone for the app runtime.
CSRF_SKIP_PATHS	empty	Comma-separated paths to bypass CSRF, e.g. /api/*.
RUNTIME	empty	Optional runtime identifier.
DOCKER_WORKER	false	Marks a dedicated Docker worker container runtime mode.

Database (generic)

Key	Default	Description
DB_CONNECTION	sqlite	Database driver: sqlite, postgresql, mysql, sqlserver, d1.
DB_HOST	localhost	Default database host.
DB_PORT	5432	Default database port.
DB_DATABASE	zintrust	Default database name.
DB_USERNAME	postgres	Default database user.
DB_PASSWORD	empty	Default database password.
DB_READ_HOSTS	empty	Optional read replica hosts (comma-separated).

PostgreSQL-specific

Key	Default	Description
DB_PORT_POSTGRESQL	5432	PostgreSQL port.
DB_DATABASE_POSTGRESQL	postgres	PostgreSQL database name.
DB_USERNAME_POSTGRESQL	postgres	PostgreSQL user.
DB_PASSWORD_POSTGRESQL	empty	PostgreSQL password.
DB_READ_HOSTS_POSTGRESQL	empty	PostgreSQL read replica hosts.

SQL Server (MSSQL)

Key	Default	Description
DB_HOST_MSSQL	DB_HOST	SQL Server host override.
DB_PORT_MSSQL	1433	SQL Server port.
DB_DATABASE_MSSQL	zintrust	SQL Server database name.
DB_USERNAME_MSSQL	sa	SQL Server user.
DB_PASSWORD_MSSQL	empty	SQL Server password.
DB_READ_HOSTS_MSSQL	empty	SQL Server read replica hosts.

Cloudflare & remote services

Key	Default	Description
D1_DATABASE_ID	empty	D1 database binding ID.
KV_NAMESPACE_ID	empty	KV namespace binding ID.
D1_REMOTE_URL	empty	Remote D1 proxy URL.
D1_REMOTE_KEY_ID	empty	Remote D1 key id for request signing.
D1_REMOTE_SECRET	empty	Remote D1 secret for request signing.
D1_REMOTE_MODE	registry	Remote D1 mode: registry or proxy.
KV_REMOTE_URL	empty	Remote KV proxy URL.
KV_REMOTE_KEY_ID	empty	Remote KV key id.
KV_REMOTE_SECRET	empty	Remote KV secret.
KV_REMOTE_NAMESPACE	empty	Remote KV namespace.
CLOUDFLARE_ACCOUNT_ID	empty	Cloudflare account id.
CLOUDFLARE_API_TOKEN	empty	Cloudflare API token.
CLOUDFLARE_KV_NAMESPACE_ID	empty	Optional Cloudflare KV namespace id.

Proxy client defaults

Key	Default	Description
ZT_PROXY_TIMEOUT_MS	30000	Default proxy request timeout in milliseconds.
ZT_PROXY_SIGNING_WINDOW_MS	60000	Default signing window in milliseconds.

Statement registry / learning mode

Key	Default	Description
ZT_D1_LEARN_FILE	empty	When set, captures executed SQL statements to a JSONL file as { statementId, sql } (best-effort).
SQL_WRITER	false	Allow SQL capture outside development when ZT_D1_LEARN_FILE is set (use with care; avoid in production).

MySQL proxy (HTTP)

Key	Default	Description
MYSQL_PROXY_URL	empty	Full proxy URL (overrides host/port).
MYSQL_PROXY_HOST	127.0.0.1	Proxy host.
MYSQL_PROXY_PORT	8789	Proxy port.
MYSQL_PROXY_MAX_BODY_BYTES	131072	Max request body size in bytes.
MYSQL_PROXY_POOL_LIMIT	10	Max connection pool size.
MYSQL_PROXY_KEY_ID	empty	Signing key id (defaults to APP_NAME when empty).
MYSQL_PROXY_SECRET	empty	Signing secret (defaults to APP_KEY when empty).
MYSQL_PROXY_TIMEOUT_MS	ZT_PROXY_TIMEOUT_MS	Request timeout in milliseconds.
MYSQL_PROXY_REQUIRE_SIGNING	true	Require request signing.
MYSQL_PROXY_SIGNING_WINDOW_MS	ZT_PROXY_SIGNING_WINDOW_MS	Allowed clock skew window.
MYSQL_PROXY_MODE	sql	Proxy client mode: sql (send SQL) or registry (send { statementId, params }).
ZT_MYSQL_STATEMENTS_FILE	empty	Optional: path to JSON registry { statementId: sql } used by POST /zin/mysql/statement.
ZT_MYSQL_STATEMENTS_JSON	empty	Optional fallback: inline JSON registry (small setups only).

Postgres proxy (HTTP)

Key	Default	Description
POSTGRES_PROXY_URL	empty	Full proxy URL (overrides host/port).
POSTGRES_PROXY_HOST	127.0.0.1	Proxy host.
POSTGRES_PROXY_PORT	8790	Proxy port.
POSTGRES_PROXY_MAX_BODY_BYTES	131072	Max request body size in bytes.
POSTGRES_PROXY_POOL_LIMIT	10	Max connection pool size.
POSTGRES_PROXY_KEY_ID	empty	Signing key id (defaults to APP_NAME when empty).
POSTGRES_PROXY_SECRET	empty	Signing secret (defaults to APP_KEY when empty).
POSTGRES_PROXY_TIMEOUT_MS	ZT_PROXY_TIMEOUT_MS	Request timeout in milliseconds.
POSTGRES_PROXY_REQUIRE_SIGNING	true	Require request signing.
POSTGRES_PROXY_SIGNING_WINDOW_MS	ZT_PROXY_SIGNING_WINDOW_MS	Allowed clock skew window.
POSTGRES_PROXY_MODE	sql	Proxy client mode: sql (send SQL) or registry (send { statementId, params }).
ZT_POSTGRES_STATEMENTS_FILE	empty	Optional: path to JSON registry { statementId: sql } used by POST /zin/postgres/statement.
ZT_POSTGRES_STATEMENTS_JSON	empty	Optional fallback: inline JSON registry (small setups only).

Redis proxy (HTTP)

Key	Default	Description
REDIS_PROXY_URL	empty	Full proxy URL (overrides host/port).
REDIS_PROXY_HOST	127.0.0.1	Proxy host.
REDIS_PROXY_PORT	8791	Proxy port.
REDIS_PROXY_MAX_BODY_BYTES	131072	Max request body size in bytes.
REDIS_PROXY_KEY_ID	empty	Signing key id (defaults to APP_NAME when empty).
REDIS_PROXY_SECRET	empty	Signing secret (defaults to APP_KEY when empty).
REDIS_PROXY_TIMEOUT_MS	ZT_PROXY_TIMEOUT_MS	Request timeout in milliseconds.
REDIS_PROXY_REQUIRE_SIGNING	true	Require request signing.
REDIS_PROXY_SIGNING_WINDOW_MS	ZT_PROXY_SIGNING_WINDOW_MS	Allowed clock skew window.
USE_REDIS_PROXY	false	Enable Redis proxy.

MongoDB proxy (HTTP)

Key	Default	Description
MONGODB_PROXY_URL	empty	Full proxy URL (overrides host/port).
MONGODB_PROXY_HOST	127.0.0.1	Proxy host.
MONGODB_PROXY_PORT	8792	Proxy port.
MONGODB_PROXY_MAX_BODY_BYTES	131072	Max request body size in bytes.
MONGODB_PROXY_KEY_ID	empty	Signing key id (defaults to APP_NAME when empty).
MONGODB_PROXY_SECRET	empty	Signing secret (defaults to APP_KEY when empty).
MONGODB_PROXY_TIMEOUT_MS	ZT_PROXY_TIMEOUT_MS	Request timeout in milliseconds.
MONGODB_PROXY_REQUIRE_SIGNING	true	Require request signing.
MONGODB_PROXY_SIGNING_WINDOW_MS	ZT_PROXY_SIGNING_WINDOW_MS	Allowed clock skew window.
USE_MONGODB_PROXY	false	Enable MongoDB proxy.

SQL Server proxy (HTTP)

Key	Default	Description
SQLSERVER_PROXY_URL	empty	Full proxy URL (overrides host/port).
SQLSERVER_PROXY_HOST	127.0.0.1	Proxy host.
SQLSERVER_PROXY_PORT	8793	Proxy port.
SQLSERVER_PROXY_MAX_BODY_BYTES	131072	Max request body size in bytes.
SQLSERVER_PROXY_POOL_LIMIT	10	Max connection pool size.
SQLSERVER_PROXY_KEY_ID	empty	Signing key id (defaults to APP_NAME when empty).
SQLSERVER_PROXY_SECRET	empty	Signing secret (defaults to APP_KEY when empty).
SQLSERVER_PROXY_TIMEOUT_MS	ZT_PROXY_TIMEOUT_MS	Request timeout in milliseconds.
SQLSERVER_PROXY_REQUIRE_SIGNING	true	Require request signing.
SQLSERVER_PROXY_SIGNING_WINDOW_MS	ZT_PROXY_SIGNING_WINDOW_MS	Allowed clock skew window.
USE_SQLSERVER_PROXY	false	Enable SQL Server proxy.
SQLSERVER_PROXY_MODE	sql	Proxy client mode: sql (send SQL) or registry (send { statementId, params }).
ZT_SQLSERVER_STATEMENTS_FILE	empty	Optional: path to JSON registry { statementId: sql } used by POST /zin/sqlserver/statement.
ZT_SQLSERVER_STATEMENTS_JSON	empty	Optional fallback: inline JSON registry (small setups only).

Cache

Key	Default	Description
CACHE_DRIVER	memory	Cache driver: memory, redis, mongodb, kv.
REDIS_HOST	localhost	Redis host.
REDIS_PORT	6379	Redis port.
REDIS_PASSWORD	empty	Redis password.
REDIS_DB	0	Redis database index.
REDIS_URL	empty	Optional full Redis URL.
MONGO_URI	empty	MongoDB Data API endpoint (cache).
MONGO_DB	zintrust_cache	MongoDB cache database name.

Queue

Key	Default	Description
QUEUE_CONNECTION	empty	Queue connection name.
QUEUE_DRIVER	empty	Queue driver.
QUEUE_HTTP_PROXY_ENABLED	false	Enable HTTP proxy transport for queue operations (Cloudflare/serverless fallback).
QUEUE_HTTP_PROXY_GATEWAY_ENABLED	true	Mount Queue HTTP gateway route in Node/Docker API runtime.
QUEUE_HTTP_PROXY_URL	empty	Gateway base URL used by producer client.
QUEUE_HTTP_PROXY_PATH	/api/_sys/queue/rpc	Gateway RPC path mounted by API server and called by producer client.
QUEUE_HTTP_PROXY_KEY_ID	APP_NAME	Signing key id used to sign/verify queue RPC calls.
QUEUE_HTTP_PROXY_KEY	APP_KEY	Signing secret used to sign/verify queue RPC calls.
QUEUE_HTTP_PROXY_TIMEOUT_MS	ZT_PROXY_TIMEOUT_MS	Queue RPC request timeout in milliseconds.
QUEUE_HTTP_PROXY_RETRY_MAX	2	Number of timeout retries for HTTP queue proxy enqueue operations.
QUEUE_HTTP_PROXY_RETRY_DELAY_MS	500	Base retry delay in milliseconds for HTTP queue proxy retries.
QUEUE_HTTP_PROXY_MAX_SKEW_MS	ZT_PROXY_SIGNING_WINDOW_MS	Allowed signature timestamp skew for gateway verification.
QUEUE_HTTP_PROXY_NONCE_TTL_MS	120000	Nonce TTL used for replay protection on queue gateway requests.
QUEUE_HTTP_PROXY_MIDDLEWARE	empty	Optional comma-separated middleware names applied to gateway route registration.

Job tracking

Key	Default	Description
JOB_TRACKING_ENABLED	true	Enable in-memory job lifecycle tracking (includes pending_recovery and enqueued handoff state).
JOB_TRACKING_MAX_JOBS	20000	Maximum in-memory tracked job records before pruning oldest entries.
JOB_TRACKING_MAX_TRANSITIONS	50000	Maximum in-memory transition records before pruning oldest entries.
JOB_TRACKING_PERSISTENCE_ENABLED	false	Enable durable persistence for tracking records.
JOB_TRACKING_PERSISTENCE_DRIVER	database	Persistence backend driver (database currently supported).
JOB_TRACKING_DB_CONNECTION	default	Database connection name for tracker persistence.
JOB_TRACKING_DB_TABLE	zintrust_jobs	Table used for latest job state snapshots.
JOB_TRACKING_DB_TRANSITIONS_TABLE	zintrust_job_transitions	Table used for append-only state transitions.
JOB_TRACKING_PERSIST_TRANSITIONS_ENABLED	false	Persist append-only transition rows to JOB_TRACKING_DB_TRANSITIONS_TABLE (disable to store only snapshots in JOB_TRACKING_DB_TABLE).
JOB_HEARTBEAT_INTERVAL_MS	10000	Worker heartbeat interval used for stalled-job detection.
JOB_HEARTBEAT_GRACE_MS	20000	Heartbeat grace window before active jobs are marked stalled.
JOB_RECONCILIATION_INTERVAL_MS	60000	Interval for in-memory and persisted reconciliation scans.
JOB_RECONCILIATION_STALE_MS	120000	Staleness threshold for persisted enqueue-fallback (pending_recovery) buffer records.
JOB_RECOVERY_INTERVAL_MS	30000	Interval for automatic recovery daemon scans.
JOB_RECOVERY_MIN_AGE_MS	5000	Minimum age before a recoverable state is eligible for re-queue.
JOB_RECOVERY_DB_SCAN_LIMIT	100	Max rows scanned from JOB_TRACKING_DB_TABLE for persisted pending_recovery recovery attempts per daemon run.
JOB_TRACKING_CLEANUP_ENABLED	false	Enable scheduled cleanup of JOB_TRACKING_DB_TABLE and JOB_TRACKING_DB_TRANSITIONS_TABLE.
JOB_TRACKING_CLEANUP_INTERVAL_MS	21600000	Cleanup schedule interval in ms (default: 6 hours).
JOB_TRACKING_CLEANUP_RETENTION_DAYS	30	Retention window for cleanup (rows older than this are eligible).
JOB_TRACKING_CLEANUP_RETENTION_HOURS	empty	Optional (overrides days): retention window in hours (supports fractional values like 0.4).
JOB_TRACKING_CLEANUP_BATCH_SIZE	5000	Batch size for cleanup deletes when using MySQL (DELETE ... LIMIT).
JOB_TRACKING_CLEANUP_MAX_BATCHES	1	Max number of cleanup batches to run per schedule tick (bounded).
JOB_TRACKING_CLEANUP_LOCK_PROVIDER	redis	Lock provider used for cleanup schedule withoutOverlapping() (e.g. redis or memory).
DLQ_REPLAY_MAX_BATCH_SIZE	25	Maximum number of dead-letter records replayed in one governed replay batch.
DLQ_REPLAY_MAX_QPS	5	Ceiling for dead-letter replay throughput (jobs per second).
DLQ_REPLAY_MIN_AGE_MS	60000	Minimum dead-letter age required before replay eligibility.
DLQ_REPLAY_ALLOWED_ACTORS	empty	Optional comma-separated allow-list of actor IDs allowed to execute DLQ replay.
JOB_DASHBOARD_DEFAULT_QUEUE	default	Default queue name used by reliability dashboard snapshots when queue name is omitted.
JOB_RUNBOOK_BASE_URL	/docs/runbooks	Base path/URL used to generate alert-to-runbook links for queue reliability alerts.
JOB_ALERT_FAILURE_RATE_THRESHOLD	0.1	Alert threshold for failure rate ((failed + dead_letter) / completed).
JOB_ALERT_STALLED_THRESHOLD	50	Alert threshold for stalled job count.
JOB_ALERT_QUEUE_DEPTH_THRESHOLD	1000	Alert threshold for queue depth.
JOB_ALERT_MANUAL_REVIEW_THRESHOLD	10	Alert threshold for manual-review backlog count.
QUEUE_TRACING_ENABLED	false	Enable queue operation tracing pipeline (enqueue, dequeue, ack, length, drain).
QUEUE_TRACING_SAMPLE_RATE	1	Queue trace sampling rate in range 0..1.
QUEUE_TRACING_MAX_EVENTS	5000	Maximum in-memory queue trace events retained after pruning.
QUEUE_TRACING_RETENTION_MS	86400000	Queue trace retention window in milliseconds before prune removes older events.
QUEUE_TRACING_EXPORT_BATCH_SIZE	20	Number of pending queue trace events before automatic exporter flush.
QUEUE_TRACING_EXPORT_OTEL	true	Export queue trace events to OpenTelemetry spans when OTEL_ENABLED=true.
STALLED_JOB_CHECK_INTERVAL_MS	30000	Interval for heartbeat table stalled checks.

Scheduling

Key	Default	Description
SCHEDULES_ENABLED	false	Enable schedule autostart in long-running runtimes (Node.js/Fargate only).
SCHEDULE_SHUTDOWN_TIMEOUT_MS	30000	Max time to wait for schedules to stop during shutdown (ms).
SCHEDULE_OVERLAP_LOCK_TTL_MS	300000	Default TTL for schedule overlap locks (ms).
SCHEDULE_OVERLAP_LOCK_ACQUIRE_TIMEOUT_MS	2000	Max time to wait for overlap-lock acquisition before running anyway (ms).
SCHEDULE_LEADER_ENABLED	false	Enable leader lease gating so only one instance auto-runs schedules.
SCHEDULE_LEADER_LOCK_PROVIDER	redis	Lock provider used for leader lease (redis or memory).
SCHEDULE_LEADER_LOCK_KEY	scheduler:leader	Lock key used for leader election.
SCHEDULE_LEADER_LOCK_TTL_MS	30000	TTL for leader lease lock (ms).
SCHEDULE_LEADER_LOCK_RENEW_MS	15000	How often to renew/extend leader lease TTL (ms).
SCHEDULE_LEADER_LOCK_RETRY_MS	5000	How often followers retry acquiring leadership (ms).
SCHEDULE_LEADER_LOCK_ACQUIRE_TIMEOUT_MS	2000	Max time to wait for leader-lock acquisition (ms).

Schedule HTTP gateway

Key	Default	Description
SCHEDULE_HTTP_PROXY_PATH	/api/_sys/schedule/rpc	Internal signed endpoint for schedule RPC (list, run).
SCHEDULE_HTTP_PROXY_KEY_ID	APP_NAME	Signing key id used to sign/verify schedule RPC calls.
SCHEDULE_HTTP_PROXY_KEY	APP_KEY	Signing secret used to sign/verify schedule RPC calls.
SCHEDULE_HTTP_PROXY_MAX_SKEW_MS	60000	Allowed signature timestamp skew for gateway verification.
SCHEDULE_HTTP_PROXY_NONCE_TTL_MS	120000	Nonce TTL used for replay protection on schedule gateway requests.
SCHEDULE_HTTP_PROXY_MIDDLEWARE	empty	Optional comma-separated middleware names applied to schedule gateway route.
IDEMPOTENCY_DEFAULT_TTL_MS	86400000	Default TTL for idempotency keys and dedup locks (milliseconds).
JOB_RELIABILITY_ENABLED	true	Master toggle for queue reliability orchestration features.
JOB_RELIABILITY_AUTOSTART	false	Auto-start reliability orchestrator when queue drivers are registered.

Rate limiting

Key	Default	Description
RATE_LIMIT_STORE	empty	Store type for rate limiting.
RATE_LIMIT_DRIVER	empty	Rate limit driver implementation.
RATE_LIMIT_KEY_PREFIX	zintrust:ratelimit:	Key prefix used by rate limiter.

Notifications

Key	Default	Description
NOTIFICATION_DRIVER	empty	Notification driver.
TERMII_API_KEY	empty	Termii API key.
TERMII_SENDER	ZinTrust	Termii sender name.

AWS

Key	Default	Description
AWS_REGION	us-east-1	AWS region.
AWS_DEFAULT_REGION	empty	AWS default region override.
AWS_ACCESS_KEY_ID	empty	AWS access key.
AWS_SECRET_ACCESS_KEY	empty	AWS secret key.
AWS_SESSION_TOKEN	empty	AWS session token.
AWS_LAMBDA_FUNCTION_NAME	empty	Lambda function name.
AWS_LAMBDA_FUNCTION_VERSION	empty	Lambda function version.
AWS_EXECUTION_ENV	empty	Lambda execution environment.
LAMBDA_TASK_ROOT	empty	Lambda task root path.

Microservices

Key	Default	Description
MICROSERVICES	empty	Comma-separated list of microservices.
SERVICES	empty	Service names to load.
MICROSERVICES_TRACING	false	Enable distributed tracing.
MICROSERVICES_TRACING_RATE	1.0	Trace sampling rate.
DATABASE_ISOLATION	shared	Database isolation mode.
SERVICE_API_KEY	empty	Service API key for inter-service auth.
SERVICE_JWT_SECRET	empty	Service JWT secret.

Security

Key	Default	Description
DEBUG	false	Enable debug mode.
ENABLE_MICROSERVICES	false	Global microservices feature flag.
TOKEN_TTL	3600000	Access token TTL in milliseconds.
TOKEN_LENGTH	32	Token length (random bytes/characters).
CSRF_STORE	empty	CSRF store (e.g., redis).
CSRF_DRIVER	empty	CSRF driver implementation.
CSRF_REDIS_DB	1	Redis DB index for CSRF store.
ENCRYPTION_CIPHER	empty	Cipher used by EncryptedEnvelope (aes-256-cbc or aes-256-gcm).
JWT_REVOCATION_DRIVER	database	JWT revocation store driver (database/redis/kv/kv-remote/memory).
JWT_REVOCATION_DB_CONNECTION	default	DB connection name used by JWT revocation store.
JWT_REVOCATION_DB_TABLE	zintrust_jwt_revocations	Table name for JWT revocations.
JWT_REVOCATION_REDIS_DB	0	Redis DB index for JWT revocation store.
JWT_REVOCATION_REDIS_PREFIX	zt:jwt:revoked:	Redis key prefix for revoked JTIs.
JWT_REVOCATION_KV_BINDING	CACHE	Cloudflare KV binding name for revocation store.
JWT_REVOCATION_KV_PREFIX	zt:jwt:revoked:	KV key prefix for revoked JTIs.

Deployment

Key	Default	Description
ENVIRONMENT	development	Deployment environment label.
REQUEST_TIMEOUT	30000	Global request timeout (ms).
MAX_BODY_SIZE	10485760	Max request body size in bytes.
SHUTDOWN_TIMEOUT	10000	Graceful shutdown timeout (ms).

SSE

Key	Default	Description
SSE_HEARTBEAT_INTERVAL	15000	SSE heartbeat interval in ms.
SSE_SNAPSHOT_INTERVAL	5000	SSE snapshot interval in ms.

Logging

Key	Default	Description
LOG_LEVEL	debug/info/error	Log level (depends on NODE_ENV).
LOG_FORMAT	text	Log format (text or json).
LOG_CHANNEL	empty	Log channel override (console/file/cloud).
SENSITIVE_FIELDS	empty	Comma-separated extra keys to redact in logs.
DISABLE_LOGGING	false	Disable logging entirely.
LOG_HTTP_REQUEST	false	Enable request logging middleware.
LOG_TO_FILE	false	Enable file logging output.
LOG_ROTATION_SIZE	10485760	Max log file size in bytes.
LOG_ROTATION_DAYS	7	Days to keep rotated logs.

ZinTrust tooling

Key	Default	Description
ZINTRUST_PROJECT_ROOT	empty	Project root override.
ZINTRUST_ALLOW_POSTINSTALL	empty	Allow postinstall scripts (CLI).
ZINTRUST_ENV_FILE	.env.pull	Pull env file name.
ZINTRUST_SECRETS_MANIFEST	secrets.manifest.json	Secrets manifest file.
ZINTRUST_ENV_IN_FILE	.env	Env input file name.
ZINTRUST_SECRETS_PROVIDER	empty	Secrets provider (vault, cloud, etc.).
ZINTRUST_ALLOW_AUTO_INSTALL	empty	Allow auto-install of dependencies.

CI / system

Key	Default	Description
CI	empty	CI indicator.
HOME	empty	User home directory (system).
USERPROFILE	empty	User profile directory (Windows).

Templates

Key	Default	Description
TEMPLATE_COPYRIGHT	© 2025 ZinTrust Framework. All rights reserved.	Template copyright text.
SERVICE_NAME	empty	Service name override for templates.

Computed values (read-only)

These are derived at runtime and do not need to be set:

Key	Description
NODE_BIN_DIR	Derived from the runtime execPath.
SAFE_PATH	Safe PATH constructed from system defaults and runtime bin dir.