@beechcms/api 0.5.0 → 0.6.0-preview.2

package/src/features/notifications/notifications.handler.ts

@@ -1,101 +1,105 @@
-/// <reference types="@cloudflare/workers-types" />
-import { Hono } from 'hono'
-import type { Env, Variables } from '../../types'
-
-/**
- * Notifications Feature Handler.
- *
- * Manages retrieval, mark read/unread, and deletion of system notifications.
- * All persistence goes through the {@link INotificationRepository} injected
- * by `repositoryMiddleware`. The handler owns the HTTP concerns only:
- * ETag negotiation, status codes, error mapping.
- */
-const notificationsApp = new Hono<{ Bindings: Env; Variables: Variables }>()
-
-const NOTIFICATION_LIST_LIMIT = 50
-
-/**
- * GET /notifications
- *
- * Returns the most recent notifications. The ETag is built from aggregate
- * stats so unchanged inboxes return 304 without serialising the full list.
- */
-notificationsApp.get('/notifications', async (context) => {
-  try {
-    const notificationRepository = context.get('notificationRepository')
-    const notificationStats = await notificationRepository.stats()
-    const etagValue = `W/"${notificationStats.totalCount}-${notificationStats.latestCreatedAt}-${notificationStats.readCount}"`
-
-    const ifNoneMatch = context.req.header('If-None-Match')
-    if (ifNoneMatch === etagValue) {
-      return new Response(null, { status: 304 })
-    }
-
-    const notifications = await notificationRepository.list(NOTIFICATION_LIST_LIMIT)
-
-    context.header('ETag', etagValue)
-    context.header('Cache-Control', 'no-cache, must-revalidate')
-
-    return context.json(notifications)
-  } catch (error) {
-    console.error('[Notifications] Fetch error:', error)
-    return context.json({ error: 'Failed to fetch notifications' }, 500)
-  }
-})
-
-/**
- * PATCH /notifications/:id/read — mark a single notification as read.
- */
-notificationsApp.patch('/notifications/:id/read', async (context) => {
-  try {
-    const notificationId = context.req.param('id')
-    await context.get('notificationRepository').markRead(notificationId)
-    return context.json({ success: true })
-  } catch (error) {
-    console.error('[Notifications] Mark read error:', error)
-    return context.json({ error: 'Failed to update notification' }, 500)
-  }
-})
-
-/**
- * PATCH /notifications/:id/unread — mark a single notification as unread.
- */
-notificationsApp.patch('/notifications/:id/unread', async (context) => {
-  try {
-    const notificationId = context.req.param('id')
-    await context.get('notificationRepository').markUnread(notificationId)
-    return context.json({ success: true })
-  } catch (error) {
-    console.error('[Notifications] Mark unread error:', error)
-    return context.json({ error: 'Failed to update notification' }, 500)
-  }
-})
-
-/**
- * DELETE /notifications/:id — permanently remove a notification.
- */
-notificationsApp.delete('/notifications/:id', async (context) => {
-  try {
-    const notificationId = context.req.param('id')
-    await context.get('notificationRepository').delete(notificationId)
-    return context.json({ success: true })
-  } catch (error) {
-    console.error('[Notifications] Delete error:', error)
-    return context.json({ error: 'Failed to delete notification' }, 500)
-  }
-})
-
-/**
- * POST /notifications/mark-all-read — mark every notification as read.
- */
-notificationsApp.post('/notifications/mark-all-read', async (context) => {
-  try {
-    await context.get('notificationRepository').markAllRead()
-    return context.json({ success: true })
-  } catch (error) {
-    console.error('[Notifications] Mark all read error:', error)
-    return context.json({ error: 'Failed to update notifications' }, 500)
-  }
-})
-
-export { notificationsApp }
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import { Hono } from 'hono'
+import type { Env, Variables } from '../../types'
+
+/**
+ * Notifications Feature Handler.
+ *
+ * Manages retrieval, mark read/unread, and deletion of system notifications.
+ * All persistence goes through the {@link INotificationRepository} injected
+ * by `repositoryMiddleware`. The handler owns the HTTP concerns only:
+ * ETag negotiation, status codes, error mapping.
+ */
+const notificationsApp = new Hono<{ Bindings: Env; Variables: Variables }>()
+
+const NOTIFICATION_LIST_LIMIT = 50
+
+/**
+ * GET /notifications
+ *
+ * Returns the most recent notifications. The ETag is built from aggregate
+ * stats so unchanged inboxes return 304 without serialising the full list.
+ */
+notificationsApp.get('/notifications', async (context) => {
+  try {
+    const notificationRepository = context.get('notificationRepository')
+    const notificationStats = await notificationRepository.stats()
+    const etagValue = `W/"${notificationStats.totalCount}-${notificationStats.latestCreatedAt}-${notificationStats.readCount}"`
+
+    const ifNoneMatch = context.req.header('If-None-Match')
+    if (ifNoneMatch === etagValue) {
+      return new Response(null, { status: 304 })
+    }
+
+    const notifications = await notificationRepository.list(NOTIFICATION_LIST_LIMIT)
+
+    context.header('ETag', etagValue)
+    context.header('Cache-Control', 'no-cache, must-revalidate')
+
+    return context.json(notifications)
+  } catch (error) {
+    console.error('[Notifications] Fetch error:', error)
+    return context.json({ error: 'Failed to fetch notifications' }, 500)
+  }
+})
+
+/**
+ * PATCH /notifications/:id/read — mark a single notification as read.
+ */
+notificationsApp.patch('/notifications/:id/read', async (context) => {
+  try {
+    const notificationId = context.req.param('id')
+    await context.get('notificationRepository').markRead(notificationId)
+    return context.json({ success: true })
+  } catch (error) {
+    console.error('[Notifications] Mark read error:', error)
+    return context.json({ error: 'Failed to update notification' }, 500)
+  }
+})
+
+/**
+ * PATCH /notifications/:id/unread — mark a single notification as unread.
+ */
+notificationsApp.patch('/notifications/:id/unread', async (context) => {
+  try {
+    const notificationId = context.req.param('id')
+    await context.get('notificationRepository').markUnread(notificationId)
+    return context.json({ success: true })
+  } catch (error) {
+    console.error('[Notifications] Mark unread error:', error)
+    return context.json({ error: 'Failed to update notification' }, 500)
+  }
+})
+
+/**
+ * DELETE /notifications/:id — permanently remove a notification.
+ */
+notificationsApp.delete('/notifications/:id', async (context) => {
+  try {
+    const notificationId = context.req.param('id')
+    await context.get('notificationRepository').delete(notificationId)
+    return context.json({ success: true })
+  } catch (error) {
+    console.error('[Notifications] Delete error:', error)
+    return context.json({ error: 'Failed to delete notification' }, 500)
+  }
+})
+
+/**
+ * POST /notifications/mark-all-read — mark every notification as read.
+ */
+notificationsApp.post('/notifications/mark-all-read', async (context) => {
+  try {
+    await context.get('notificationRepository').markAllRead()
+    return context.json({ success: true })
+  } catch (error) {
+    console.error('[Notifications] Mark all read error:', error)
+    return context.json({ error: 'Failed to update notifications' }, 500)
+  }
+})
+
+export { notificationsApp }

package/src/features/password-reset/index.ts

@@ -1,15 +1,19 @@
-/// <reference types="@cloudflare/workers-types" />
-import { Hono } from 'hono'
-import type { Env, Variables } from '../../types'
-import { requestPasswordReset } from './request'
-import { resetPassword } from './reset'
-
-export const passwordResetApp = new Hono<{ Bindings: Env; Variables: Variables }>()
-
-// Feature flag: lets the dashboard know whether to show the forgot-password link
-passwordResetApp.get('/auth/features', (context) => {
-  return context.json({ passwordReset: Boolean(context.env.RESEND_API_KEY) })
-})
-
-passwordResetApp.post('/auth/forgot-password', requestPasswordReset)
-passwordResetApp.post('/auth/reset-password', resetPassword)
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import { Hono } from 'hono'
+import type { Env, Variables } from '../../types'
+import { requestPasswordReset } from './request'
+import { resetPassword } from './reset'
+
+export const passwordResetApp = new Hono<{ Bindings: Env; Variables: Variables }>()
+
+// Feature flag: lets the dashboard know whether to show the forgot-password link
+passwordResetApp.get('/auth/features', (context) => {
+  return context.json({ passwordReset: context.env.EMAIL_PROVIDER === 'smtp' || Boolean(context.env.RESEND_API_KEY) })
+})
+
+passwordResetApp.post('/auth/forgot-password', requestPasswordReset)
+passwordResetApp.post('/auth/reset-password', resetPassword)

package/src/features/password-reset/request.ts

@@ -1,82 +1,92 @@
-/// <reference types="@cloudflare/workers-types" />
-import type { Context } from 'hono'
-import type { Env, Variables } from '../../types'
-import { sendPasswordResetEmail, resolveEmailLocale } from '../email'
-import { sha256hex } from '@beechcms/core'
-import { getClientIp } from '../../shared/request-utils'
-
-const PASSWORD_RESET_TOKEN_EXPIRY_SECONDS = 30 * 60
-
-/**
- * Handles the password reset request.
- * Generates a reset token, stores its hash in the database, and sends an email to the user.
- */
-export async function requestPasswordReset(
-  context: Context<{ Bindings: Env; Variables: Variables }>
-): Promise<Response> {
-  const { env, req } = context
-
-  if (!env.RESEND_API_KEY) {
-    return context.json({ error: 'Service not available' }, 503)
-  }
-
-  let payload: Record<string, unknown>
-  try {
-    payload = await req.json()
-  } catch {
-    return context.json({ error: 'Invalid request body' }, 400)
-  }
-
-  const emailInput = payload.email
-  if (typeof emailInput !== 'string' || !emailInput.trim()) {
-    return context.json({ error: 'Invalid request' }, 400)
-  }
-
-  const normalizedEmail = emailInput.trim().toLowerCase()
-  const emailLocale = resolveEmailLocale(payload.locale)
-
-  const clientIpAddress = getClientIp(req)
-  const forgotPasswordRateLimit = await context.get('rateLimiters').getLimiter('forgotPassword').checkLimit(clientIpAddress)
-  if (!forgotPasswordRateLimit.isAllowed) {
-    return context.json({ error: 'Too many requests' }, 429)
-  }
-
-  // Always return 200 even when the user is not found to prevent user enumeration.
-  const registeredUser = await context.get('userRepository').findByEmail(normalizedEmail)
-  if (!registeredUser) {
-    return context.json({ success: true })
-  }
-
-  const nowTimestamp = Math.floor(Date.now() / 1000)
-  await context.get('passwordResetTokenRepository').invalidatePending(registeredUser.id, nowTimestamp)
-
-  const resetToken = crypto.randomUUID()
-  const tokenHash = await sha256hex(resetToken)
-  const expiresAt = nowTimestamp + PASSWORD_RESET_TOKEN_EXPIRY_SECONDS
-
-  await context.get('passwordResetTokenRepository').create({
-    userId: registeredUser.id,
-    tokenHash,
-    expiresAt,
-  })
-
-  const baseUrl = (env.APP_URL ?? new URL(req.url).origin).replace(/\/$/, '')
-  const resetUrl = `${baseUrl}/admin/reset-password?token=${resetToken}`
-
-  try {
-    await sendPasswordResetEmail({
-      to: normalizedEmail,
-      resetUrl,
-      locale: emailLocale,
-      apiKey: env.RESEND_API_KEY,
-      from: env.EMAIL_FROM,
-      isDev: env.ENV !== 'production',
-    })
-  } catch (error) {
-    if (env.ENV !== 'production') {
-      console.error('[password-reset] Failed to send email:', error)
-    }
-  }
-
-  return context.json({ success: true })
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import type { Context } from 'hono'
+import type { Env, Variables } from '../../types'
+import { sendPasswordResetEmail, resolveEmailLocale } from '../email'
+import { sha256hex } from '@beechcms/core'
+import { getClientIp } from '../../shared/request-utils'
+
+const PASSWORD_RESET_TOKEN_EXPIRY_SECONDS = 30 * 60
+
+/**
+ * Handles the password reset request.
+ * Generates a reset token, stores its hash in the database, and sends an email to the user.
+ */
+export async function requestPasswordReset(
+  context: Context<{ Bindings: Env; Variables: Variables }>
+): Promise<Response> {
+  const { env, req } = context
+
+  const useSmtp = env.EMAIL_PROVIDER === 'smtp'
+  if (!useSmtp && !env.RESEND_API_KEY) {
+    return context.json({ error: 'Service not available' }, 503)
+  }
+
+  let payload: Record<string, unknown>
+  try {
+    payload = await req.json()
+  } catch {
+    return context.json({ error: 'Invalid request body' }, 400)
+  }
+
+  const emailInput = payload.email
+  if (typeof emailInput !== 'string' || !emailInput.trim()) {
+    return context.json({ error: 'Invalid request' }, 400)
+  }
+
+  const normalizedEmail = emailInput.trim().toLowerCase()
+  const emailLocale = resolveEmailLocale(payload.locale)
+
+  const clientIpAddress = getClientIp(req)
+  const forgotPasswordRateLimit = await context.get('rateLimiters').getLimiter('forgotPassword').checkLimit(clientIpAddress)
+  if (!forgotPasswordRateLimit.isAllowed) {
+    return context.json({ error: 'Too many requests' }, 429)
+  }
+
+  // Always return 200 even when the user is not found to prevent user enumeration.
+  const registeredUser = await context.get('userRepository').findByEmail(normalizedEmail)
+  if (!registeredUser) {
+    return context.json({ success: true })
+  }
+
+  const nowTimestamp = Math.floor(Date.now() / 1000)
+  await context.get('passwordResetTokenRepository').invalidatePending(registeredUser.id, nowTimestamp)
+
+  const resetToken = crypto.randomUUID()
+  const tokenHash = await sha256hex(resetToken)
+  const expiresAt = nowTimestamp + PASSWORD_RESET_TOKEN_EXPIRY_SECONDS
+
+  await context.get('passwordResetTokenRepository').create({
+    userId: registeredUser.id,
+    tokenHash,
+    expiresAt,
+  })
+
+  const baseUrl = (env.APP_URL ?? new URL(req.url).origin).replace(/\/$/, '')
+  const resetUrl = `${baseUrl}/admin/reset-password?token=${resetToken}`
+
+  const smtpBaseUrl = env.SMTP_HOST
+    ? `http://${env.SMTP_HOST}:${env.SMTP_PORT ?? '8025'}`
+    : undefined
+  try {
+    await sendPasswordResetEmail({
+      to: normalizedEmail,
+      resetUrl,
+      locale: emailLocale,
+      apiKey: env.RESEND_API_KEY ?? '',
+      from: env.EMAIL_FROM,
+      isDev: env.ENV !== 'production',
+      provider: env.EMAIL_PROVIDER as 'smtp' | 'resend' | undefined,
+      smtpBaseUrl,
+    })
+  } catch (error) {
+    if (env.ENV !== 'production') {
+      console.error('[password-reset] Failed to send email:', error)
+    }
+  }
+
+  return context.json({ success: true })
+}

package/src/features/password-reset/reset.ts

@@ -1,92 +1,102 @@
-/// <reference types="@cloudflare/workers-types" />
-import type { Context } from 'hono'
-import type { Env, Variables } from '../../types'
-import { sendPasswordChangedEmail, resolveEmailLocale } from '../email'
-import { sha256hex } from '@beechcms/core'
-import { getClientIp } from '../../shared/request-utils'
-
-const MIN_PASSWORD_LENGTH = 8
-const MAX_PASSWORD_LENGTH = 128
-
-/**
- * Handles the actual password reset process using a valid token.
- */
-export async function resetPassword(
-  context: Context<{ Bindings: Env; Variables: Variables }>
-): Promise<Response> {
-  const { env, req, executionCtx } = context
-
-  if (!env.RESEND_API_KEY) {
-    return context.json({ error: 'Service not available' }, 503)
-  }
-
-  const clientIpAddress = getClientIp(req)
-  const resetPasswordRateLimit = await context.get('rateLimiters').getLimiter('resetPassword').checkLimit(clientIpAddress)
-  if (!resetPasswordRateLimit.isAllowed) {
-    return context.json({ error: 'Too many requests' }, 429)
-  }
-
-  let payload: Record<string, unknown>
-  try {
-    payload = await req.json()
-  } catch {
-    return context.json({ error: 'Invalid request body' }, 400)
-  }
-
-  const resetToken = payload.token
-  if (typeof resetToken !== 'string' || !resetToken) {
-    return context.json({ error: 'Invalid or expired token' }, 400)
-  }
-
-  const newPassword = payload.password
-  const isPasswordInvalid =
-    typeof newPassword !== 'string' ||
-    newPassword.length < MIN_PASSWORD_LENGTH ||
-    newPassword.length > MAX_PASSWORD_LENGTH
-
-  if (isPasswordInvalid) {
-    return context.json({
-      error: `Password must be between ${MIN_PASSWORD_LENGTH} and ${MAX_PASSWORD_LENGTH} characters`,
-    }, 400)
-  }
-
-  const emailLocale = resolveEmailLocale(payload.locale)
-  const tokenHash = await sha256hex(resetToken as string)
-  const nowTimestamp = Math.floor(Date.now() / 1000)
-
-  const tokenRecord = await context.get('passwordResetTokenRepository').findValidByHashWithEmail(tokenHash, nowTimestamp)
-  if (!tokenRecord) {
-    return context.json({ error: 'Invalid or expired token' }, 400)
-  }
-
-  const hashedNewPassword = await context.get('hashProvider').hash(newPassword as string)
-
-  await context.get('passwordResetTokenRepository').markUsed(tokenRecord.id, nowTimestamp)
-  await context.get('userRepository').updatePasswordHash(tokenRecord.userId, hashedNewPassword)
-  await context.get('sessionRepository').revokeAllForUser(tokenRecord.userId, nowTimestamp)
-
-  const sendNotification = async () => {
-    try {
-      await sendPasswordChangedEmail({
-        to: tokenRecord.email,
-        locale: emailLocale,
-        apiKey: env.RESEND_API_KEY!,
-        from: env.EMAIL_FROM,
-        isDev: env.ENV !== 'production',
-      })
-    } catch (error) {
-      if (env.ENV !== 'production') {
-        console.error('[password-reset] Failed to send password change notification:', error)
-      }
-    }
-  }
-
-  try {
-    executionCtx.waitUntil(sendNotification())
-  } catch {
-    // executionCtx might not be available in some testing environments
-    void sendNotification()
-  }
-
-  return context.json({ success: true })
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import type { Context } from 'hono'
+import type { Env, Variables } from '../../types'
+import { sendPasswordChangedEmail, resolveEmailLocale } from '../email'
+import { sha256hex } from '@beechcms/core'
+import { getClientIp } from '../../shared/request-utils'
+
+const MIN_PASSWORD_LENGTH = 8
+const MAX_PASSWORD_LENGTH = 128
+
+/**
+ * Handles the actual password reset process using a valid token.
+ */
+export async function resetPassword(
+  context: Context<{ Bindings: Env; Variables: Variables }>
+): Promise<Response> {
+  const { env, req, executionCtx } = context
+
+  const useSmtp = env.EMAIL_PROVIDER === 'smtp'
+  if (!useSmtp && !env.RESEND_API_KEY) {
+    return context.json({ error: 'Service not available' }, 503)
+  }
+
+  const clientIpAddress = getClientIp(req)
+  const resetPasswordRateLimit = await context.get('rateLimiters').getLimiter('resetPassword').checkLimit(clientIpAddress)
+  if (!resetPasswordRateLimit.isAllowed) {
+    return context.json({ error: 'Too many requests' }, 429)
+  }
+
+  let payload: Record<string, unknown>
+  try {
+    payload = await req.json()
+  } catch {
+    return context.json({ error: 'Invalid request body' }, 400)
+  }
+
+  const resetToken = payload.token
+  if (typeof resetToken !== 'string' || !resetToken) {
+    return context.json({ error: 'Invalid or expired token' }, 400)
+  }
+
+  const newPassword = payload.password
+  const isPasswordInvalid =
+    typeof newPassword !== 'string' ||
+    newPassword.length < MIN_PASSWORD_LENGTH ||
+    newPassword.length > MAX_PASSWORD_LENGTH
+
+  if (isPasswordInvalid) {
+    return context.json({
+      error: `Password must be between ${MIN_PASSWORD_LENGTH} and ${MAX_PASSWORD_LENGTH} characters`,
+    }, 400)
+  }
+
+  const emailLocale = resolveEmailLocale(payload.locale)
+  const tokenHash = await sha256hex(resetToken as string)
+  const nowTimestamp = Math.floor(Date.now() / 1000)
+
+  const tokenRecord = await context.get('passwordResetTokenRepository').findValidByHashWithEmail(tokenHash, nowTimestamp)
+  if (!tokenRecord) {
+    return context.json({ error: 'Invalid or expired token' }, 400)
+  }
+
+  const hashedNewPassword = await context.get('hashProvider').hash(newPassword as string)
+
+  await context.get('passwordResetTokenRepository').markUsed(tokenRecord.id, nowTimestamp)
+  await context.get('userRepository').updatePasswordHash(tokenRecord.userId, hashedNewPassword)
+  await context.get('sessionRepository').revokeAllForUser(tokenRecord.userId, nowTimestamp)
+
+  const smtpBaseUrl = env.SMTP_HOST
+    ? `http://${env.SMTP_HOST}:${env.SMTP_PORT ?? '8025'}`
+    : undefined
+  const sendNotification = async () => {
+    try {
+      await sendPasswordChangedEmail({
+        to: tokenRecord.email,
+        locale: emailLocale,
+        apiKey: env.RESEND_API_KEY ?? '',
+        from: env.EMAIL_FROM,
+        isDev: env.ENV !== 'production',
+        provider: env.EMAIL_PROVIDER as 'smtp' | 'resend' | undefined,
+        smtpBaseUrl,
+      })
+    } catch (error) {
+      if (env.ENV !== 'production') {
+        console.error('[password-reset] Failed to send password change notification:', error)
+      }
+    }
+  }
+
+  try {
+    executionCtx.waitUntil(sendNotification())
+  } catch {
+    // executionCtx might not be available in some testing environments
+    void sendNotification()
+  }
+
+  return context.json({ success: true })
+}

package/src/features/rotate-field/index.ts

@@ -1 +1,5 @@
-export { rotateFieldApp } from './rotate-field.handler'
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+export { rotateFieldApp } from './rotate-field.handler'