@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

package/src/middleware/observability.middleware.test.ts

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect, vi } from 'vitest'
+import { Hono } from 'hono'
+import { observabilityMiddleware } from './observability.middleware'
+import type { IClock, IIdGenerator } from '@beechcms/core'
+
+describe('observabilityMiddleware', () => {
+  it('injects default activityLogger and background notification service when no overrides are given', async () => {
+    const app = new Hono()
+    
+    app.use('*', async (c, next) => {
+      c.set('notificationRepository' as never, {} as any)
+      await next()
+    })
+    
+    app.use('*', observabilityMiddleware())
+    
+    app.get('/test', (c) => {
+      const logger = c.get('activityLogger' as never)
+      const notifications = c.get('notificationService' as never)
+      return c.json({
+        hasLogger: !!logger,
+        hasNotifications: !!notifications,
+      })
+    })
+
+    const executionCtx = {
+      waitUntil: vi.fn(),
+      passThroughOnException: vi.fn(),
+    }
+
+    // Mock env with DB
+    const res = await app.request('/test', undefined, { DB: {} }, executionCtx)
+    const body = await res.json() as any
+    expect(body.hasLogger).toBe(true)
+    expect(body.hasNotifications).toBe(true)
+  })
+
+  it('respects overrides when provided', async () => {
+    const app = new Hono()
+    
+    const mockLogger = { log: vi.fn() }
+    const mockNotifications = { send: vi.fn() }
+    const mockClock: IClock = { now: () => 12345 }
+    const mockIdGen: IIdGenerator = { nextId: () => 'custom-id' }
+
+    app.use('*', observabilityMiddleware({
+      activityLogger: mockLogger as any,
+      notificationService: mockNotifications as any,
+      clock: mockClock,
+      idGenerator: mockIdGen,
+    }))
+
+    app.get('/test', (c) => {
+      const logger = c.get('activityLogger' as never)
+      const notifications = c.get('notificationService' as never)
+      return c.json({
+        loggerIsOverridden: logger === mockLogger,
+        notificationsAreOverridden: notifications === mockNotifications,
+      })
+    })
+
+    const res = await app.request('/test')
+    const body = await res.json() as any
+    expect(body.loggerIsOverridden).toBe(true)
+    expect(body.notificationsAreOverridden).toBe(true)
+  })
+
+  it('uses QStashNotificationService when QSTASH_TOKEN and APP_URL are in Env', async () => {
+    const app = new Hono()
+    app.use('*', observabilityMiddleware())
+    
+    app.get('/test', (c) => {
+      const notifications = c.get('notificationService' as never) as any
+      return c.json({
+        type: notifications?.constructor?.name,
+      })
+    })
+
+    const env = {
+      QSTASH_TOKEN: 'token',
+      APP_URL: 'https://my-app.com',
+      DB: {},
+    }
+    
+    const res = await app.request('/test', undefined, env)
+    const body = await res.json() as any
+    expect(body.type).toBe('QStashNotificationService')
+  })
+})

package/src/middleware/observability.middleware.ts

@@ -1,70 +1,70 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { createMiddleware } from 'hono/factory'
-import type { IActivityLogger, INotificationService, IClock, IIdGenerator } from '@beechcms/core'
-import { SystemClock, SystemIdGenerator } from '@beechcms/core'
-import type { AppEnv } from '../types'
-import { D1ActivityLogger } from '../shared/d1-activity-logger'
-import { BackgroundNotificationService } from '../shared/background-notification-service'
-import { QStashNotificationService } from '../shared/qstash-notification-service'
-
-export interface ObservabilityOverrides {
-  activityLogger?: IActivityLogger
-  notificationService?: INotificationService
-  clock?: IClock
-  idGenerator?: IIdGenerator
-}
-
-/**
- * Observability middleware.
- *
- * Injects the activity logger and the notification service into the Hono
- * context. Both depend on `executionCtx.waitUntil` to fire-and-forget their
- * persistence work in production. The notification service additionally
- * depends on the notification repository — `repositoryMiddleware` MUST run
- * before this middleware in the factory pipeline.
- *
- * Tests can pass their own implementations via `overrides` to bypass D1.
- */
-export const observabilityMiddleware = (overrides?: ObservabilityOverrides) => {
-  return createMiddleware<AppEnv>(async (context, next) => {
-    let scheduleBackgroundTask: ((task: Promise<unknown>) => void) | undefined
-    try {
-      const executionContext = context.executionCtx
-      scheduleBackgroundTask = executionContext.waitUntil.bind(executionContext)
-    } catch {
-      scheduleBackgroundTask = undefined
-    }
-
-    const resolvedClock = overrides?.clock ?? SystemClock
-    const resolvedIdGenerator = overrides?.idGenerator ?? SystemIdGenerator
-
-    const activityLogger =
-      overrides?.activityLogger ??
-      new D1ActivityLogger(context.env.DB, resolvedClock, resolvedIdGenerator, scheduleBackgroundTask)
-
-    let notificationService: INotificationService
-    if (overrides?.notificationService) {
-      notificationService = overrides.notificationService
-    } else if (context.env.QSTASH_TOKEN && context.env.APP_URL) {
-      notificationService = new QStashNotificationService(
-        context.env.QSTASH_TOKEN,
-        context.env.APP_URL,
-        scheduleBackgroundTask,
-        context.env.QSTASH_URL
-      )
-    } else {
-      notificationService = new BackgroundNotificationService(
-        context.get('notificationRepository'),
-        scheduleBackgroundTask
-      )
-    }
-
-    context.set('activityLogger', activityLogger)
-    context.set('notificationService', notificationService)
-
-    await next()
-  })
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { createMiddleware } from 'hono/factory'
+import type { IActivityLogger, INotificationService, IClock, IIdGenerator } from '@beechcms/core'
+import { SystemClock, SystemIdGenerator } from '@beechcms/core'
+import type { AppEnv } from '../types'
+import { D1ActivityLogger } from '../shared/d1-activity-logger'
+import { BackgroundNotificationService } from '../shared/background-notification-service'
+import { QStashNotificationService } from '../shared/qstash-notification-service'
+
+export interface ObservabilityOverrides {
+  activityLogger?: IActivityLogger
+  notificationService?: INotificationService
+  clock?: IClock
+  idGenerator?: IIdGenerator
+}
+
+/**
+ * Observability middleware.
+ *
+ * Injects the activity logger and the notification service into the Hono
+ * context. Both depend on `executionCtx.waitUntil` to fire-and-forget their
+ * persistence work in production. The notification service additionally
+ * depends on the notification repository — `repositoryMiddleware` MUST run
+ * before this middleware in the factory pipeline.
+ *
+ * Tests can pass their own implementations via `overrides` to bypass D1.
+ */
+export const observabilityMiddleware = (overrides?: ObservabilityOverrides) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    let scheduleBackgroundTask: ((task: Promise<unknown>) => void) | undefined
+    try {
+      const executionContext = context.executionCtx
+      scheduleBackgroundTask = executionContext.waitUntil.bind(executionContext)
+    } catch {
+      scheduleBackgroundTask = undefined
+    }
+
+    const resolvedClock = overrides?.clock ?? SystemClock
+    const resolvedIdGenerator = overrides?.idGenerator ?? SystemIdGenerator
+
+    const activityLogger =
+      overrides?.activityLogger ??
+      new D1ActivityLogger(context.env.DB, resolvedClock, resolvedIdGenerator, scheduleBackgroundTask)
+
+    let notificationService: INotificationService
+    if (overrides?.notificationService) {
+      notificationService = overrides.notificationService
+    } else if (context.env.QSTASH_TOKEN && (context.env.QSTASH_CALLBACK_URL || context.env.APP_URL)) {
+      notificationService = new QStashNotificationService(
+        context.env.QSTASH_TOKEN,
+        (context.env.QSTASH_CALLBACK_URL ?? context.env.APP_URL) as string,
+        scheduleBackgroundTask,
+        context.env.QSTASH_URL
+      )
+    } else {
+      notificationService = new BackgroundNotificationService(
+        context.get('notificationRepository'),
+        scheduleBackgroundTask
+      )
+    }
+
+    context.set('activityLogger', activityLogger)
+    context.set('notificationService', notificationService)
+
+    await next()
+  })
+}

package/src/middleware/rate-limit.middleware.ts

@@ -1,45 +1,45 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/// <reference types="@cloudflare/workers-types" />
-import { createMiddleware } from 'hono/factory'
-import type { IRateLimiter } from '@beechcms/core'
-import type { AppEnv, Env } from '../types'
-import { CloudflareRateLimiter } from '../rate-limit/cloudflare-rate-limiter'
-import { NoOpRateLimiter } from '../rate-limit/no-op-rate-limiter'
-
-export type RateLimiterName =
-  | 'login'
-  | 'tokenRefresh'
-  | 'forgotPassword'
-  | 'resetPassword'
-  | 'publicApiRead'
-  | 'publicApiWrite'
-
-export interface IRateLimiterRegistry {
-  getLimiter(name: RateLimiterName): IRateLimiter
-}
-
-const NO_OP = new NoOpRateLimiter()
-
-function buildDefaultRegistry(env: Env): IRateLimiterRegistry {
-  const limiters: Record<RateLimiterName, IRateLimiter> = {
-    login: env.LOGIN_RATE_LIMITER ? new CloudflareRateLimiter(env.LOGIN_RATE_LIMITER) : NO_OP,
-    tokenRefresh: env.REFRESH_RATE_LIMITER ? new CloudflareRateLimiter(env.REFRESH_RATE_LIMITER) : NO_OP,
-    forgotPassword: env.FORGOT_PASSWORD_RATE_LIMITER ? new CloudflareRateLimiter(env.FORGOT_PASSWORD_RATE_LIMITER) : NO_OP,
-    resetPassword: env.RESET_PASSWORD_RATE_LIMITER ? new CloudflareRateLimiter(env.RESET_PASSWORD_RATE_LIMITER) : NO_OP,
-    publicApiRead: env.PUBLIC_READ_RATE_LIMITER ? new CloudflareRateLimiter(env.PUBLIC_READ_RATE_LIMITER) : NO_OP,
-    publicApiWrite: env.PUBLIC_WRITE_RATE_LIMITER ? new CloudflareRateLimiter(env.PUBLIC_WRITE_RATE_LIMITER) : NO_OP,
-  }
-
-  return { getLimiter: (name) => limiters[name] }
-}
-
-export const rateLimiterMiddleware = (overrides?: { registry?: IRateLimiterRegistry }) => {
-  return createMiddleware<AppEnv>(async (context, next) => {
-    const registry = overrides?.registry ?? buildDefaultRegistry(context.env)
-    context.set('rateLimiters', registry)
-    await next()
-  })
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import { createMiddleware } from 'hono/factory'
+import type { IRateLimiter } from '@beechcms/core'
+import type { AppEnv, Env } from '../types'
+import { CloudflareRateLimiter } from '../rate-limit/cloudflare-rate-limiter'
+import { NoOpRateLimiter } from '../rate-limit/no-op-rate-limiter'
+
+export type RateLimiterName =
+  | 'login'
+  | 'tokenRefresh'
+  | 'forgotPassword'
+  | 'resetPassword'
+  | 'publicApiRead'
+  | 'publicApiWrite'
+
+export interface IRateLimiterRegistry {
+  getLimiter(name: RateLimiterName): IRateLimiter
+}
+
+const NO_OP = new NoOpRateLimiter()
+
+function buildDefaultRegistry(env: Env): IRateLimiterRegistry {
+  const limiters: Record<RateLimiterName, IRateLimiter> = {
+    login: env.LOGIN_RATE_LIMITER ? new CloudflareRateLimiter(env.LOGIN_RATE_LIMITER) : NO_OP,
+    tokenRefresh: env.REFRESH_RATE_LIMITER ? new CloudflareRateLimiter(env.REFRESH_RATE_LIMITER) : NO_OP,
+    forgotPassword: env.FORGOT_PASSWORD_RATE_LIMITER ? new CloudflareRateLimiter(env.FORGOT_PASSWORD_RATE_LIMITER) : NO_OP,
+    resetPassword: env.RESET_PASSWORD_RATE_LIMITER ? new CloudflareRateLimiter(env.RESET_PASSWORD_RATE_LIMITER) : NO_OP,
+    publicApiRead: env.PUBLIC_READ_RATE_LIMITER ? new CloudflareRateLimiter(env.PUBLIC_READ_RATE_LIMITER) : NO_OP,
+    publicApiWrite: env.PUBLIC_WRITE_RATE_LIMITER ? new CloudflareRateLimiter(env.PUBLIC_WRITE_RATE_LIMITER) : NO_OP,
+  }
+
+  return { getLimiter: (name) => limiters[name] }
+}
+
+export const rateLimiterMiddleware = (overrides?: { registry?: IRateLimiterRegistry }) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    const registry = overrides?.registry ?? buildDefaultRegistry(context.env)
+    context.set('rateLimiters', registry)
+    await next()
+  })
+}

package/src/middleware/repository.middleware.ts

@@ -1,114 +1,117 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { createMiddleware } from 'hono/factory'
-import type { Context } from 'hono'
-import { D1ContentRepository } from '../shared/content.repository.d1'
-import { D1IdempotencyRepository } from '../shared/idempotency.repository.d1'
-import { D1MediaRepository } from '../shared/media.repository.d1'
-import { D1SystemStatsRepository } from '../shared/system-stats.repository.d1'
-import { D1UserRepository } from '../shared/d1-user.repository'
-import { D1SessionRepository } from '../shared/d1-session.repository'
-import { D1PasswordResetTokenRepository } from '../shared/d1-password-reset-token.repository'
-import { D1ActivityLogRepository } from '../shared/d1-activity-log.repository'
-import { D1NotificationRepository } from '../shared/d1-notification.repository'
-import { D1WidgetRepository } from '../shared/d1-widget.repository'
-import { D1SearchRepository } from '../shared/d1-search.repository'
-import { D1AnalyticsRepository } from '../shared/d1-analytics.repository'
-import { D1ContentScanRepository } from '../shared/d1-content-scan.repository'
-import { D1SiteSettingsRepository } from '../shared/site-settings.repository.d1'
-import { D1DemoDataRepository } from '../shared/demo-data.repository.d1'
-import { D1SetupChecklistRepository } from '../shared/d1-setup-checklist.repository'
-import { D1SeedLayoutRepository } from '../shared/seed-layout.repository.d1'
-import { D1SeedRepository } from '../shared/seed.repository.d1'
-import { D1SchemaMutator } from '../shared/schema-mutator.d1'
-import { SystemClock, SystemIdGenerator } from '@beechcms/core'
-import type { ContentRepository, IdempotencyRepository, MediaRepository, SystemStatsRepository, IUserRepository, ISessionRepository, IPasswordResetTokenRepository, IActivityLogRepository, INotificationRepository, IWidgetRepository, ISearchRepository, IAnalyticsRepository, IContentScanRepository, IClock, IIdGenerator, IAutomationRunner, IAutomationRepository, IScheduler, ISiteSettingsRepository, IDemoDataRepository, ISeedLayoutRepository, ISeedRepository, ISchemaMutator } from '@beechcms/core'
-import { NoOpScheduler } from '@beechcms/core'
-import { AutomationRunner } from '../features/automations'
-import { D1AutomationRepository } from '../shared/automations.repository.d1'
-import { ExecutionContextScheduler } from '../shared/execution-context-scheduler'
-import type { Env, Variables } from '../types'
-
-interface RepositoryOverrides {
-  repository?: ContentRepository
-  idempotencyRepository?: IdempotencyRepository
-  mediaRepository?: MediaRepository
-  systemStatsRepository?: SystemStatsRepository
-  userRepository?: IUserRepository
-  sessionRepository?: ISessionRepository
-  passwordResetTokenRepository?: IPasswordResetTokenRepository
-  activityLogRepository?: IActivityLogRepository
-  notificationRepository?: INotificationRepository
-  widgetRepository?: IWidgetRepository
-  searchRepository?: ISearchRepository
-  analyticsRepository?: IAnalyticsRepository
-  contentScanRepository?: IContentScanRepository
-  clock?: IClock
-  idGenerator?: IIdGenerator
-  automationRepository?: IAutomationRepository
-  automationRunner?: IAutomationRunner
-  scheduler?: IScheduler
-  siteSettingsRepository?: ISiteSettingsRepository
-  demoDataRepository?: IDemoDataRepository
-  seedLayoutRepository?: ISeedLayoutRepository
-  seedRepository?: ISeedRepository
-  schemaMutator?: ISchemaMutator
-}
-
-function buildScheduler(context: Context): IScheduler {
-  try {
-    return new ExecutionContextScheduler(context.executionCtx)
-  } catch {
-    return new NoOpScheduler()
-  }
-}
-
-export const repositoryMiddleware = (overrides?: RepositoryOverrides) => {
-  return createMiddleware<{ Bindings: Env; Variables: Variables }>(async (context, next) => {
-    const resolvedClock = overrides?.clock ?? SystemClock
-    const resolvedIdGenerator = overrides?.idGenerator ?? SystemIdGenerator
-    const database = context.env.DB
-
-    context.set('repository', overrides?.repository ?? new D1ContentRepository(database))
-    context.set('idempotencyRepository', overrides?.idempotencyRepository ?? new D1IdempotencyRepository(database))
-    context.set('mediaRepository', overrides?.mediaRepository ?? new D1MediaRepository(database))
-    context.set('systemStatsRepository', overrides?.systemStatsRepository ?? new D1SystemStatsRepository(database))
-    context.set('userRepository', overrides?.userRepository ?? new D1UserRepository(database))
-    context.set('sessionRepository', overrides?.sessionRepository ?? new D1SessionRepository(database, resolvedClock))
-    context.set('passwordResetTokenRepository', overrides?.passwordResetTokenRepository ?? new D1PasswordResetTokenRepository(database, resolvedIdGenerator))
-    context.set('activityLogRepository', overrides?.activityLogRepository ?? new D1ActivityLogRepository(database))
-    context.set('notificationRepository', overrides?.notificationRepository ?? new D1NotificationRepository(database, resolvedClock, resolvedIdGenerator))
-    context.set('widgetRepository', overrides?.widgetRepository ?? new D1WidgetRepository(database))
-    context.set('searchRepository', overrides?.searchRepository ?? new D1SearchRepository(database))
-    context.set('analyticsRepository', overrides?.analyticsRepository ?? new D1AnalyticsRepository(database, resolvedClock))
-    context.set('contentScanRepository', overrides?.contentScanRepository ?? new D1ContentScanRepository(database))
-    context.set('clock', resolvedClock)
-    context.set('idGenerator', resolvedIdGenerator)
-    const automationRepository = overrides?.automationRepository
-      ?? new D1AutomationRepository(database)
-
-    context.set('automationRepository', automationRepository)
-    // getSeed is set later by seedRegistryMiddleware — capture context by closure so the
-    // runner reads the live value at call time, not at middleware creation time.
-    context.set(
-      'automationRunner',
-      overrides?.automationRunner ?? new AutomationRunner({
-        automationRepository,
-        contentRepository: context.get('repository'),
-        getSeed: (slug: string) => context.get('getSeed')?.(slug) ?? null,
-        idGenerator: resolvedIdGenerator,
-        env: context.env as unknown as Record<string, string | undefined>,
-      }),
-    )
-    context.set('scheduler', overrides?.scheduler ?? buildScheduler(context))
-    context.set('siteSettingsRepository', overrides?.siteSettingsRepository ?? new D1SiteSettingsRepository(database))
-    context.set('demoDataRepository', overrides?.demoDataRepository ?? new D1DemoDataRepository(database))
-    context.set('setupChecklistRepository', new D1SetupChecklistRepository(database))
-    context.set('seedLayoutRepository', overrides?.seedLayoutRepository ?? new D1SeedLayoutRepository(database))
-    context.set('seedRepository', overrides?.seedRepository ?? new D1SeedRepository(database))
-    context.set('schemaMutator', overrides?.schemaMutator ?? new D1SchemaMutator(database))
-    await next()
-  })
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { createMiddleware } from 'hono/factory'
+import type { Context } from 'hono'
+import { D1ContentRepository } from '../shared/content.repository.d1'
+import { D1IdempotencyRepository } from '../shared/idempotency.repository.d1'
+import { D1MediaRepository } from '../shared/media.repository.d1'
+import { D1SystemStatsRepository } from '../shared/system-stats.repository.d1'
+import { D1UserRepository } from '../shared/d1-user.repository'
+import { D1SessionRepository } from '../shared/d1-session.repository'
+import { D1PasswordResetTokenRepository } from '../shared/d1-password-reset-token.repository'
+import { D1ActivityLogRepository } from '../shared/d1-activity-log.repository'
+import { D1NotificationRepository } from '../shared/d1-notification.repository'
+import { D1WidgetRepository } from '../shared/d1-widget.repository'
+import { D1SearchRepository } from '../shared/d1-search.repository'
+import { D1AnalyticsRepository } from '../shared/d1-analytics.repository'
+import { D1ContentScanRepository } from '../shared/d1-content-scan.repository'
+import { D1SiteSettingsRepository } from '../shared/site-settings.repository.d1'
+import { D1DemoDataRepository } from '../shared/demo-data.repository.d1'
+import { D1SetupChecklistRepository } from '../shared/d1-setup-checklist.repository'
+import { D1SeedLayoutRepository } from '../shared/seed-layout.repository.d1'
+import { D1DashboardLayoutRepository } from '../shared/dashboard-layout.repository.d1'
+import { D1SeedRepository } from '../shared/seed.repository.d1'
+import { D1SchemaMutator } from '../shared/schema-mutator.d1'
+import { SystemClock, SystemIdGenerator } from '@beechcms/core'
+import type { ContentRepository, IdempotencyRepository, MediaRepository, SystemStatsRepository, IUserRepository, ISessionRepository, IPasswordResetTokenRepository, IActivityLogRepository, INotificationRepository, IWidgetRepository, ISearchRepository, IAnalyticsRepository, IContentScanRepository, IClock, IIdGenerator, IAutomationRunner, IAutomationRepository, IScheduler, ISiteSettingsRepository, IDemoDataRepository, ISeedLayoutRepository, ISeedRepository, ISchemaMutator, IDashboardLayoutRepository } from '@beechcms/core'
+import { NoOpScheduler } from '@beechcms/core'
+import { AutomationRunner } from '../features/automations'
+import { D1AutomationRepository } from '../shared/automations.repository.d1'
+import { ExecutionContextScheduler } from '../shared/execution-context-scheduler'
+import type { Env, Variables } from '../types'
+
+interface RepositoryOverrides {
+  repository?: ContentRepository
+  idempotencyRepository?: IdempotencyRepository
+  mediaRepository?: MediaRepository
+  systemStatsRepository?: SystemStatsRepository
+  userRepository?: IUserRepository
+  sessionRepository?: ISessionRepository
+  passwordResetTokenRepository?: IPasswordResetTokenRepository
+  activityLogRepository?: IActivityLogRepository
+  notificationRepository?: INotificationRepository
+  widgetRepository?: IWidgetRepository
+  searchRepository?: ISearchRepository
+  analyticsRepository?: IAnalyticsRepository
+  contentScanRepository?: IContentScanRepository
+  clock?: IClock
+  idGenerator?: IIdGenerator
+  automationRepository?: IAutomationRepository
+  automationRunner?: IAutomationRunner
+  scheduler?: IScheduler
+  siteSettingsRepository?: ISiteSettingsRepository
+  demoDataRepository?: IDemoDataRepository
+  seedLayoutRepository?: ISeedLayoutRepository
+  seedRepository?: ISeedRepository
+  schemaMutator?: ISchemaMutator
+  dashboardLayoutRepository?: IDashboardLayoutRepository
+}
+
+function buildScheduler(context: Context): IScheduler {
+  try {
+    return new ExecutionContextScheduler(context.executionCtx)
+  } catch {
+    return new NoOpScheduler()
+  }
+}
+
+export const repositoryMiddleware = (overrides?: RepositoryOverrides) => {
+  return createMiddleware<{ Bindings: Env; Variables: Variables }>(async (context, next) => {
+    const resolvedClock = overrides?.clock ?? SystemClock
+    const resolvedIdGenerator = overrides?.idGenerator ?? SystemIdGenerator
+    const database = context.env.DB
+
+    context.set('repository', overrides?.repository ?? new D1ContentRepository(database))
+    context.set('idempotencyRepository', overrides?.idempotencyRepository ?? new D1IdempotencyRepository(database))
+    context.set('mediaRepository', overrides?.mediaRepository ?? new D1MediaRepository(database))
+    context.set('systemStatsRepository', overrides?.systemStatsRepository ?? new D1SystemStatsRepository(database))
+    context.set('userRepository', overrides?.userRepository ?? new D1UserRepository(database))
+    context.set('sessionRepository', overrides?.sessionRepository ?? new D1SessionRepository(database, resolvedClock))
+    context.set('passwordResetTokenRepository', overrides?.passwordResetTokenRepository ?? new D1PasswordResetTokenRepository(database, resolvedIdGenerator))
+    context.set('activityLogRepository', overrides?.activityLogRepository ?? new D1ActivityLogRepository(database))
+    context.set('notificationRepository', overrides?.notificationRepository ?? new D1NotificationRepository(database, resolvedClock, resolvedIdGenerator))
+    context.set('widgetRepository', overrides?.widgetRepository ?? new D1WidgetRepository(database))
+    context.set('searchRepository', overrides?.searchRepository ?? new D1SearchRepository(database))
+    context.set('analyticsRepository', overrides?.analyticsRepository ?? new D1AnalyticsRepository(database, resolvedClock))
+    context.set('contentScanRepository', overrides?.contentScanRepository ?? new D1ContentScanRepository(database))
+    context.set('clock', resolvedClock)
+    context.set('idGenerator', resolvedIdGenerator)
+    const automationRepository = overrides?.automationRepository
+      ?? new D1AutomationRepository(database)
+
+    context.set('automationRepository', automationRepository)
+    // getSeed is set later by seedRegistryMiddleware — capture context by closure so the
+    // runner reads the live value at call time, not at middleware creation time.
+    context.set(
+      'automationRunner',
+      overrides?.automationRunner ?? new AutomationRunner({
+        automationRepository,
+        contentRepository: context.get('repository'),
+        getSeed: (slug: string) => context.get('getSeed')?.(slug) ?? null,
+        idGenerator: resolvedIdGenerator,
+        env: context.env as unknown as Record<string, string | undefined>,
+      }),
+    )
+    context.set('scheduler', overrides?.scheduler ?? buildScheduler(context))
+    context.set('siteSettingsRepository', overrides?.siteSettingsRepository ?? new D1SiteSettingsRepository(database))
+    context.set('demoDataRepository', overrides?.demoDataRepository ?? new D1DemoDataRepository(database))
+    context.set('setupChecklistRepository', new D1SetupChecklistRepository(database))
+    context.set('seedLayoutRepository', overrides?.seedLayoutRepository ?? new D1SeedLayoutRepository(database))
+    context.set('seedRepository', overrides?.seedRepository ?? new D1SeedRepository(database))
+    context.set('schemaMutator', overrides?.schemaMutator ?? new D1SchemaMutator(database))
+    context.set('dashboardLayoutRepository', overrides?.dashboardLayoutRepository ?? new D1DashboardLayoutRepository(database))
+    await next()
+  })
+}