@beechcms/api 0.4.0-preview.9 → 0.4.1

package/src/index.ts

@@ -1,11 +1,24 @@
-import { createBeechApp } from './factory'
-
-/**
- * Entry point per lo sviluppo locale del monorepo.
- * In produzione (progetto utente), viene usato worker.ts che importa createBeechApp.
- */
-const app = createBeechApp({ seeds: [] })
-
-app.get('/', (c) => c.text('Beech API is running (Production Ready Mode)'))
-
-export default app
+import { createBeechApp } from './factory'
+
+/**
+ * Entry point per lo sviluppo locale del monorepo.
+ * Carica dinamicamente seed.ts o seeds.ts dalla root di apps/api se presenti.
+ */
+let seeds: any = []
+
+try {
+  // @ts-ignore
+  const mod = await import('../seed.ts')
+  const registry = mod.default || mod.SEED_REGISTRY || mod
+  seeds = (typeof registry === 'object' && !Array.isArray(registry)) 
+    ? Object.values(registry) 
+    : registry
+} catch (e) {
+  // Fallback se seed.ts non esiste
+}
+
+const app = createBeechApp({ seeds })
+
+app.get('/', (c) => c.text('Beech API is running (Local Dev Mode)'))
+
+export default app

package/src/media-utils.ts

@@ -1,78 +1,78 @@
-/**
- * Media utils: estrazione chiavi R2 dal data di un'entry.
- * Usato alla cancellazione entry per eliminare i file associati da R2.
- *
- * @see docs/media-engine.md
- */
-import type { Seed } from '@beechcms/core'
-
-/** Pattern per estrarre la chiave R2 da URL in formato /api/media/KEY */
-const MEDIA_URL_PATTERN = /\/api\/media\/([^/?#]+)/
-
-/**
- * Estrae la chiave R2 da un URL di media.
- * Es: "https://x.com/api/media/1739123456-avatar.png" → "1739123456-avatar.png"
- *
- * @param mediaUrl - URL completo o path (es. /api/media/123-foto.png)
- * @returns Chiave R2 o null se l'URL non è valido
- */
-export function extractMediaKey(mediaUrl: string): string | null {
-  const match = MEDIA_URL_PATTERN.exec(String(mediaUrl))
-  return match ? decodeURIComponent(match[1]) : null
-}
-
-/**
- * Attraversa ricorsivamente un valore (stringa, array, oggetto) e raccoglie
- * tutte le chiavi R2 trovate in stringhe che matchano /api/media/KEY.
- */
-function collectMediaKeysRecursive(value: unknown, collectedKeys: Set<string>): void {
-  if (typeof value === 'string') {
-    const r2Key = extractMediaKey(value)
-    if (r2Key) {
-      collectedKeys.add(r2Key)
-      return
-    }
-    // Legacy compat: campi json/file possono contenere JSON serializzato.
-    try {
-      const parsed = JSON.parse(value) as unknown
-      if (parsed !== value) {
-        collectMediaKeysRecursive(parsed, collectedKeys)
-      }
-    } catch {
-      // ignore
-    }
-    return
-  }
-  if (Array.isArray(value)) {
-    for (const item of value) collectMediaKeysRecursive(item, collectedKeys)
-    return
-  }
-  if (value != null && typeof value === 'object') {
-    for (const nestedValue of Object.values(value)) {
-      collectMediaKeysRecursive(nestedValue, collectedKeys)
-    }
-  }
-}
-
-/**
- * Estrae tutte le chiavi R2 dal data di un'entry.
- * Cerca nei campi `file` (stringa URL) e `json` (array/oggetto con URL).
- * Il data è in formato DB: chiavi = branch.id (es. art_03, prd_05).
- *
- * @param seed - Schema del tipo di contenuto
- * @param entryData - Payload in formato DB (chiavi = branch ID)
- * @returns Array di chiavi R2 uniche da eliminare
- */
-export function extractMediaKeysFromData(
-  seed: Seed,
-  entryData: Record<string, unknown>
-): string[] {
-  const r2Keys = new Set<string>()
-  for (const branch of seed.branches) {
-    if (branch.type !== 'file' && branch.type !== 'json') continue
-    const fieldValue = entryData[branch.alias]
-    if (fieldValue == null) continue
-    collectMediaKeysRecursive(fieldValue, r2Keys)
-  }
-  return [...r2Keys]
-}
+/**
+ * Media utils: estrazione chiavi R2 dal data di un'entry.
+ * Usato alla cancellazione entry per eliminare i file associati da R2.
+ *
+ * @see docs/media-engine.md
+ */
+import type { Seed } from '@beechcms/core'
+
+/** Pattern per estrarre la chiave R2 da URL in formato /api/media/KEY */
+const MEDIA_URL_PATTERN = /\/api\/media\/([^/?#]+)/
+
+/**
+ * Estrae la chiave R2 da un URL di media.
+ * Es: "https://x.com/api/media/1739123456-avatar.png" → "1739123456-avatar.png"
+ *
+ * @param mediaUrl - URL completo o path (es. /api/media/123-foto.png)
+ * @returns Chiave R2 o null se l'URL non è valido
+ */
+export function extractMediaKey(mediaUrl: string): string | null {
+  const match = MEDIA_URL_PATTERN.exec(String(mediaUrl))
+  return match ? decodeURIComponent(match[1]) : null
+}
+
+/**
+ * Attraversa ricorsivamente un valore (stringa, array, oggetto) e raccoglie
+ * tutte le chiavi R2 trovate in stringhe che matchano /api/media/KEY.
+ */
+function collectMediaKeysRecursive(value: unknown, collectedKeys: Set<string>): void {
+  if (typeof value === 'string') {
+    const r2Key = extractMediaKey(value)
+    if (r2Key) {
+      collectedKeys.add(r2Key)
+      return
+    }
+    // Legacy compat: campi json/file possono contenere JSON serializzato.
+    try {
+      const parsed = JSON.parse(value) as unknown
+      if (parsed !== value) {
+        collectMediaKeysRecursive(parsed, collectedKeys)
+      }
+    } catch {
+      // ignore
+    }
+    return
+  }
+  if (Array.isArray(value)) {
+    for (const item of value) collectMediaKeysRecursive(item, collectedKeys)
+    return
+  }
+  if (value != null && typeof value === 'object') {
+    for (const nestedValue of Object.values(value)) {
+      collectMediaKeysRecursive(nestedValue, collectedKeys)
+    }
+  }
+}
+
+/**
+ * Estrae tutte le chiavi R2 dal data di un'entry.
+ * Cerca nei campi `file` (stringa URL) e `json` (array/oggetto con URL).
+ * Il data è in formato DB: chiavi = branch.id (es. art_03, prd_05).
+ *
+ * @param seed - Schema del tipo di contenuto
+ * @param entryData - Payload in formato DB (chiavi = branch ID)
+ * @returns Array di chiavi R2 uniche da eliminare
+ */
+export function extractMediaKeysFromData(
+  seed: Seed,
+  entryData: Record<string, unknown>
+): string[] {
+  const r2Keys = new Set<string>()
+  for (const branch of seed.branches) {
+    if (branch.type !== 'file' && branch.type !== 'json') continue
+    const fieldValue = entryData[branch.alias]
+    if (fieldValue == null) continue
+    collectMediaKeysRecursive(fieldValue, r2Keys)
+  }
+  return [...r2Keys]
+}

package/src/middleware/auth-providers.middleware.ts

@@ -0,0 +1,32 @@
+import { createMiddleware } from 'hono/factory'
+import type { IHashProvider, ITokenService, IClock } from '@beechcms/core'
+import { SystemClock } from '@beechcms/core'
+import type { AppEnv } from '../types'
+import { BcryptHashProvider } from '../auth/bcrypt-hash-provider'
+import { JoseTokenService } from '../auth/jose-token-service'
+
+export interface AuthProviderOverrides {
+  hashProvider?: IHashProvider
+  tokenService?: ITokenService
+  clock?: IClock
+}
+
+export const authProvidersMiddleware = (overrides?: AuthProviderOverrides) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    const resolvedClock = overrides?.clock ?? SystemClock
+    const hashProvider = overrides?.hashProvider ?? new BcryptHashProvider()
+    const tokenService = overrides?.tokenService ?? new JoseTokenService(
+      context.env.JWT_SECRET,
+      {
+        issuer: context.env.JWT_ISSUER,
+        audience: context.env.JWT_AUDIENCE,
+      },
+      resolvedClock,
+    )
+
+    context.set('hashProvider', hashProvider)
+    context.set('tokenService', tokenService)
+
+    await next()
+  })
+}

package/src/middleware/observability.middleware.ts

@@ -0,0 +1,52 @@
+import { createMiddleware } from 'hono/factory'
+import type { IActivityLogger, INotificationService, IClock, IIdGenerator } from '@beechcms/core'
+import { SystemClock, SystemIdGenerator } from '@beechcms/core'
+import type { AppEnv } from '../types'
+import { D1ActivityLogger } from '../shared/d1-activity-logger'
+import { BackgroundNotificationService } from '../shared/background-notification-service'
+
+export interface ObservabilityOverrides {
+  activityLogger?: IActivityLogger
+  notificationService?: INotificationService
+  clock?: IClock
+  idGenerator?: IIdGenerator
+}
+
+/**
+ * Observability middleware.
+ *
+ * Injects the activity logger and the notification service into the Hono
+ * context. Both depend on `executionCtx.waitUntil` to fire-and-forget their
+ * persistence work in production. The notification service additionally
+ * depends on the notification repository — `repositoryMiddleware` MUST run
+ * before this middleware in the factory pipeline.
+ *
+ * Tests can pass their own implementations via `overrides` to bypass D1.
+ */
+export const observabilityMiddleware = (overrides?: ObservabilityOverrides) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    let scheduleBackgroundTask: ((task: Promise<unknown>) => void) | undefined
+    try {
+      const executionContext = context.executionCtx
+      scheduleBackgroundTask = executionContext.waitUntil.bind(executionContext)
+    } catch {
+      scheduleBackgroundTask = undefined
+    }
+
+    const resolvedClock = overrides?.clock ?? SystemClock
+    const resolvedIdGenerator = overrides?.idGenerator ?? SystemIdGenerator
+
+    const activityLogger =
+      overrides?.activityLogger ??
+      new D1ActivityLogger(context.env.DB, resolvedClock, resolvedIdGenerator, scheduleBackgroundTask)
+
+    const notificationService =
+      overrides?.notificationService ??
+      new BackgroundNotificationService(context.get('notificationRepository'), scheduleBackgroundTask)
+
+    context.set('activityLogger', activityLogger)
+    context.set('notificationService', notificationService)
+
+    await next()
+  })
+}

package/src/middleware/rate-limit.middleware.ts

@@ -0,0 +1,41 @@
+/// <reference types="@cloudflare/workers-types" />
+import { createMiddleware } from 'hono/factory'
+import type { IRateLimiter } from '@beechcms/core'
+import type { AppEnv, Env } from '../types'
+import { CloudflareRateLimiter } from '../rate-limit/cloudflare-rate-limiter'
+import { NoOpRateLimiter } from '../rate-limit/no-op-rate-limiter'
+
+export type RateLimiterName =
+  | 'login'
+  | 'tokenRefresh'
+  | 'forgotPassword'
+  | 'resetPassword'
+  | 'publicApiRead'
+  | 'publicApiWrite'
+
+export interface IRateLimiterRegistry {
+  getLimiter(name: RateLimiterName): IRateLimiter
+}
+
+const NO_OP = new NoOpRateLimiter()
+
+function buildDefaultRegistry(env: Env): IRateLimiterRegistry {
+  const limiters: Record<RateLimiterName, IRateLimiter> = {
+    login: env.LOGIN_RATE_LIMITER ? new CloudflareRateLimiter(env.LOGIN_RATE_LIMITER) : NO_OP,
+    tokenRefresh: env.REFRESH_RATE_LIMITER ? new CloudflareRateLimiter(env.REFRESH_RATE_LIMITER) : NO_OP,
+    forgotPassword: env.FORGOT_PASSWORD_RATE_LIMITER ? new CloudflareRateLimiter(env.FORGOT_PASSWORD_RATE_LIMITER) : NO_OP,
+    resetPassword: env.RESET_PASSWORD_RATE_LIMITER ? new CloudflareRateLimiter(env.RESET_PASSWORD_RATE_LIMITER) : NO_OP,
+    publicApiRead: env.PUBLIC_READ_RATE_LIMITER ? new CloudflareRateLimiter(env.PUBLIC_READ_RATE_LIMITER) : NO_OP,
+    publicApiWrite: env.PUBLIC_WRITE_RATE_LIMITER ? new CloudflareRateLimiter(env.PUBLIC_WRITE_RATE_LIMITER) : NO_OP,
+  }
+
+  return { getLimiter: (name) => limiters[name] }
+}
+
+export const rateLimiterMiddleware = (overrides?: { registry?: IRateLimiterRegistry }) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    const registry = overrides?.registry ?? buildDefaultRegistry(context.env)
+    context.set('rateLimiters', registry)
+    await next()
+  })
+}

package/src/middleware/repository.middleware.ts

@@ -0,0 +1,60 @@
+import { createMiddleware } from 'hono/factory'
+import { D1ContentRepository } from '../shared/content.repository.d1'
+import { D1IdempotencyRepository } from '../shared/idempotency.repository.d1'
+import { D1MediaRepository } from '../shared/media.repository.d1'
+import { D1SystemStatsRepository } from '../shared/system-stats.repository.d1'
+import { D1UserRepository } from '../shared/d1-user.repository'
+import { D1SessionRepository } from '../shared/d1-session.repository'
+import { D1PasswordResetTokenRepository } from '../shared/d1-password-reset-token.repository'
+import { D1ActivityLogRepository } from '../shared/d1-activity-log.repository'
+import { D1NotificationRepository } from '../shared/d1-notification.repository'
+import { D1WidgetRepository } from '../shared/d1-widget.repository'
+import { D1SearchRepository } from '../shared/d1-search.repository'
+import { D1AnalyticsRepository } from '../shared/d1-analytics.repository'
+import { D1ContentScanRepository } from '../shared/d1-content-scan.repository'
+import { SystemClock, SystemIdGenerator } from '@beechcms/core'
+import type { ContentRepository, IdempotencyRepository, MediaRepository, SystemStatsRepository, IUserRepository, ISessionRepository, IPasswordResetTokenRepository, IActivityLogRepository, INotificationRepository, IWidgetRepository, ISearchRepository, IAnalyticsRepository, IContentScanRepository, IClock, IIdGenerator } from '@beechcms/core'
+import type { Env, Variables } from '../types'
+
+interface RepositoryOverrides {
+  repository?: ContentRepository
+  idempotencyRepository?: IdempotencyRepository
+  mediaRepository?: MediaRepository
+  systemStatsRepository?: SystemStatsRepository
+  userRepository?: IUserRepository
+  sessionRepository?: ISessionRepository
+  passwordResetTokenRepository?: IPasswordResetTokenRepository
+  activityLogRepository?: IActivityLogRepository
+  notificationRepository?: INotificationRepository
+  widgetRepository?: IWidgetRepository
+  searchRepository?: ISearchRepository
+  analyticsRepository?: IAnalyticsRepository
+  contentScanRepository?: IContentScanRepository
+  clock?: IClock
+  idGenerator?: IIdGenerator
+}
+
+export const repositoryMiddleware = (overrides?: RepositoryOverrides) => {
+  return createMiddleware<{ Bindings: Env; Variables: Variables }>(async (context, next) => {
+    const resolvedClock = overrides?.clock ?? SystemClock
+    const resolvedIdGenerator = overrides?.idGenerator ?? SystemIdGenerator
+    const database = context.env.DB
+
+    context.set('repository', overrides?.repository ?? new D1ContentRepository(database))
+    context.set('idempotencyRepository', overrides?.idempotencyRepository ?? new D1IdempotencyRepository(database))
+    context.set('mediaRepository', overrides?.mediaRepository ?? new D1MediaRepository(database))
+    context.set('systemStatsRepository', overrides?.systemStatsRepository ?? new D1SystemStatsRepository(database))
+    context.set('userRepository', overrides?.userRepository ?? new D1UserRepository(database))
+    context.set('sessionRepository', overrides?.sessionRepository ?? new D1SessionRepository(database, resolvedClock))
+    context.set('passwordResetTokenRepository', overrides?.passwordResetTokenRepository ?? new D1PasswordResetTokenRepository(database, resolvedIdGenerator))
+    context.set('activityLogRepository', overrides?.activityLogRepository ?? new D1ActivityLogRepository(database))
+    context.set('notificationRepository', overrides?.notificationRepository ?? new D1NotificationRepository(database, resolvedClock, resolvedIdGenerator))
+    context.set('widgetRepository', overrides?.widgetRepository ?? new D1WidgetRepository(database))
+    context.set('searchRepository', overrides?.searchRepository ?? new D1SearchRepository(database))
+    context.set('analyticsRepository', overrides?.analyticsRepository ?? new D1AnalyticsRepository(database, resolvedClock))
+    context.set('contentScanRepository', overrides?.contentScanRepository ?? new D1ContentScanRepository(database))
+    context.set('clock', resolvedClock)
+    context.set('idGenerator', resolvedIdGenerator)
+    await next()
+  })
+}

package/src/middleware/storage.middleware.ts

@@ -0,0 +1,21 @@
+import { createMiddleware } from 'hono/factory'
+import { BeechBucket } from '@beechcms/core'
+import { AppEnv } from '../types'
+import { createBucketProvider } from '../shared/storage/factory'
+
+interface StorageOverrides {
+  bucket?: BeechBucket
+}
+
+export const storageMiddleware = (overrides?: StorageOverrides) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    if (overrides?.bucket) {
+      context.set('bucket', overrides.bucket)
+    } else {
+      // Determine base URL for getUrl() only if we need to create the provider
+      const baseUrl = context.env.MEDIA_BASE_URL?.trim().replace(/\/$/, '') || new URL(context.req.url).origin
+      context.set('bucket', createBucketProvider(context.env, baseUrl))
+    }
+    await next()
+  })
+}

package/src/middleware.ts

@@ -1,67 +1,47 @@
-/// <reference types="@cloudflare/workers-types" />
-import type { Context, Next } from 'hono'
-import { HTTPException } from 'hono/http-exception'
-import { jwtVerify } from 'jose'
-
-/** Payload JWT decodificato (sub = userId, email opzionale, name opzionale) */
-export type JwtPayload = {
-  sub: string
-  email?: string
-  name?: string
-}
-
-/** Variabili iniettate nel context Hono dopo auth */
-export type AuthVariables = {
-  jwtPayload: JwtPayload
-}
-
-const UNAUTHORIZED_JSON = JSON.stringify({ error: 'Unauthorized' })
-
-function unauthorizedResponse() {
-  return new Response(UNAUTHORIZED_JSON, {
-    status: 401,
-    headers: { 'Content-Type': 'application/json' },
-  })
-}
-
-export type JwtVerifyOptions = {
-  issuer?: string
-  audience?: string
-}
-
-/**
- * Middleware di autenticazione JWT.
- * Intercetta Authorization: Bearer <token>, verifica con jose e JWT_SECRET.
- * Se valido: imposta jwtPayload nel context e chiama next().
- * Se invalido/mancante: lancia HTTPException 401 (gestita dal framework).
- */
-export function authMiddleware(secret: string, options: JwtVerifyOptions = {}) {
-  return async (c: Context, next: Next): Promise<Response | void> => {
-    const auth = c.req.header('Authorization')
-    if (!auth?.startsWith('Bearer ')) {
-      throw new HTTPException(401, { res: unauthorizedResponse() })
-    }
-
-    const token = auth.slice(7)
-    if (!token) {
-      throw new HTTPException(401, { res: unauthorizedResponse() })
-    }
-
-    try {
-      const secretBytes = new TextEncoder().encode(secret)
-      const { payload, protectedHeader } = await jwtVerify(token, secretBytes, {
-        algorithms: ['HS256'],
-        issuer: options.issuer,
-        audience: options.audience,
-      })
-      // Hardening: accetta solo token JWT standard (se presente il typ)
-      if (protectedHeader.typ && protectedHeader.typ !== 'JWT') {
-        throw new Error('Invalid typ header')
-      }
-      c.set('jwtPayload', payload as JwtPayload)
-      await next()
-    } catch {
-      throw new HTTPException(401, { res: unauthorizedResponse() })
-    }
-  }
-}
+/// <reference types="@cloudflare/workers-types" />
+import type { Context, Next } from 'hono'
+import { HTTPException } from 'hono/http-exception'
+import type { Env, Variables } from './types'
+
+export type JwtPayload = {
+  sub: string
+  email?: string
+  name?: string
+}
+
+const UNAUTHORIZED_JSON = JSON.stringify({ error: 'Unauthorized' })
+
+function unauthorizedResponse() {
+  return new Response(UNAUTHORIZED_JSON, {
+    status: 401,
+    headers: { 'Content-Type': 'application/json' },
+  })
+}
+
+/**
+ * JWT authentication middleware. Reads the Bearer token from the Authorization
+ * header and delegates verification to the ITokenService injected in context.
+ * Returns 401 on any missing or invalid token; never exposes failure details.
+ */
+export function authMiddleware() {
+  return async (c: Context<{ Bindings: Env; Variables: Variables }>, next: Next): Promise<Response | void> => {
+    const authHeader = c.req.header('Authorization')
+    if (!authHeader?.startsWith('Bearer ')) {
+      throw new HTTPException(401, { res: unauthorizedResponse() })
+    }
+
+    const token = authHeader.slice(7)
+    if (!token) {
+      throw new HTTPException(401, { res: unauthorizedResponse() })
+    }
+
+    const claims = await c.get('tokenService').verify(token)
+
+    if (!claims) {
+      throw new HTTPException(401, { res: unauthorizedResponse() })
+    }
+
+    c.set('jwtPayload', claims as JwtPayload)
+    await next()
+  }
+}

package/src/public/access-policy.ts

@@ -1,23 +1,23 @@
-import type { Seed } from '@beechcms/core'
-
-export type PublicOperation = 'read' | 'add' | 'edit'
-
-function isAllowed(seed: Seed, operation: PublicOperation): boolean {
-  if (operation === 'read') return seed.allowPublicRead === true
-  if (operation === 'add') return seed.allowPublicPost === true
-  return seed.allowPublicEdit === true
-}
-
-export function checkPublicOperation(seed: Seed, operation: PublicOperation) {
-  if (isAllowed(seed, operation)) {
-    return { ok: true } as const
-  }
-
-  return {
-    ok: false,
-    error: {
-      error: 'Forbidden',
-      message: `Public ${operation.toUpperCase()} is not allowed for content type '${seed.slug}'.`,
-    },
-  } as const
-}
+import type { Seed } from '@beechcms/core'
+
+export type PublicOperation = 'read' | 'add' | 'edit'
+
+function isAllowed(seed: Seed, operation: PublicOperation): boolean {
+  if (operation === 'read') return seed.allowPublicRead === true
+  if (operation === 'add') return seed.allowPublicPost === true
+  return seed.allowPublicEdit === true
+}
+
+export function checkPublicOperation(seed: Seed, operation: PublicOperation) {
+  if (isAllowed(seed, operation)) {
+    return { ok: true } as const
+  }
+
+  return {
+    ok: false,
+    error: {
+      error: 'Forbidden',
+      message: `Public ${operation.toUpperCase()} is not allowed for content type '${seed.slug}'.`,
+    },
+  } as const
+}