@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

package/src/middleware/seed-registry.middleware.test.ts

@@ -1,97 +1,97 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect, beforeEach, vi } from 'vitest'
-import { Hono } from 'hono'
-import { seedRegistryMiddleware } from './seed-registry.middleware'
-import { __resetSeedRegistryCache } from '../shared/seed-registry-cache'
-import type { ISeedRepository, Seed } from '@beechcms/core'
-
-const mockSeed: Seed = {
-  slug: 'posts',
-  label: 'Posts',
-  displayNameAlias: 'title',
-  branches: [{ id: 'br_01', alias: 'title', label: 'Title', type: 'text' }],
-}
-
-function makeRepo(seeds: Seed[] = [mockSeed]): ISeedRepository {
-  return {
-    listActive: vi.fn().mockResolvedValue(seeds),
-    listAll: vi.fn().mockResolvedValue([]),
-    get: vi.fn().mockResolvedValue(null),
-    upsert: vi.fn().mockResolvedValue(undefined),
-    softDelete: vi.fn().mockResolvedValue(undefined),
-    getRegistryVersion: vi.fn().mockResolvedValue(1),
-    bumpRegistryVersion: vi.fn().mockResolvedValue(2),
-  }
-}
-
-describe('seedRegistryMiddleware', () => {
-  beforeEach(() => __resetSeedRegistryCache())
-
-  it('injects seedRegistry, getSeed, and backrefMap into context', async () => {
-    const app = new Hono()
-    const repo = makeRepo()
-
-    app.use('*', async (c, next) => {
-      c.set('seedRepository' as never, repo)
-      await next()
-    })
-    app.use('*', seedRegistryMiddleware())
-    app.get('/test', (c) => {
-      const registry = c.get('seedRegistry' as never) as any
-      const getSeed = c.get('getSeed' as never) as any
-      const backrefMap = c.get('backrefMap' as never) as any
-      return c.json({
-        hasRegistry: !!registry,
-        hasSeed: !!getSeed('posts'),
-        hasBackrefMap: !!backrefMap,
-      })
-    })
-
-    const res = await app.request('/test')
-    const body = await res.json() as any
-    expect(body.hasRegistry).toBe(true)
-    expect(body.hasSeed).toBe(true)
-    expect(body.hasBackrefMap).toBe(true)
-  })
-
-  it('getSeed returns null for unknown slug', async () => {
-    const app = new Hono()
-    const repo = makeRepo()
-
-    app.use('*', async (c, next) => {
-      c.set('seedRepository' as never, repo)
-      await next()
-    })
-    app.use('*', seedRegistryMiddleware())
-    app.get('/test', (c) => {
-      const getSeed = c.get('getSeed' as never) as any
-      return c.json({ result: getSeed('no-such-slug') })
-    })
-
-    const res = await app.request('/test')
-    const body = await res.json() as any
-    expect(body.result).toBeNull()
-  })
-
-  it('empty seed list yields empty registry without crashing', async () => {
-    const app = new Hono()
-    const repo = makeRepo([])
-
-    app.use('*', async (c, next) => {
-      c.set('seedRepository' as never, repo)
-      await next()
-    })
-    app.use('*', seedRegistryMiddleware())
-    app.get('/test', (c) => {
-      const registry = c.get('seedRegistry' as never) as any
-      return c.json({ count: registry.all().length })
-    })
-
-    const res = await app.request('/test')
-    const body = await res.json() as any
-    expect(body.count).toBe(0)
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect, beforeEach, vi } from 'vitest'
+import { Hono } from 'hono'
+import { seedRegistryMiddleware } from './seed-registry.middleware'
+import { __resetSeedRegistryCache } from '../shared/seed-registry-cache'
+import type { ISeedRepository, Seed } from '@beechcms/core'
+
+const mockSeed: Seed = {
+  slug: 'posts',
+  label: 'Posts',
+  displayNameAlias: 'title',
+  branches: [{ id: 'br_01', alias: 'title', label: 'Title', type: 'text' }],
+}
+
+function makeRepo(seeds: Seed[] = [mockSeed]): ISeedRepository {
+  return {
+    listActive: vi.fn().mockResolvedValue(seeds),
+    listAll: vi.fn().mockResolvedValue([]),
+    get: vi.fn().mockResolvedValue(null),
+    upsert: vi.fn().mockResolvedValue(undefined),
+    softDelete: vi.fn().mockResolvedValue(undefined),
+    getRegistryVersion: vi.fn().mockResolvedValue(1),
+    bumpRegistryVersion: vi.fn().mockResolvedValue(2),
+  }
+}
+
+describe('seedRegistryMiddleware', () => {
+  beforeEach(() => __resetSeedRegistryCache())
+
+  it('injects seedRegistry, getSeed, and backrefMap into context', async () => {
+    const app = new Hono()
+    const repo = makeRepo()
+
+    app.use('*', async (c, next) => {
+      c.set('seedRepository' as never, repo)
+      await next()
+    })
+    app.use('*', seedRegistryMiddleware())
+    app.get('/test', (c) => {
+      const registry = c.get('seedRegistry' as never) as any
+      const getSeed = c.get('getSeed' as never) as any
+      const backrefMap = c.get('backrefMap' as never) as any
+      return c.json({
+        hasRegistry: !!registry,
+        hasSeed: !!getSeed('posts'),
+        hasBackrefMap: !!backrefMap,
+      })
+    })
+
+    const res = await app.request('/test')
+    const body = await res.json() as any
+    expect(body.hasRegistry).toBe(true)
+    expect(body.hasSeed).toBe(true)
+    expect(body.hasBackrefMap).toBe(true)
+  })
+
+  it('getSeed returns null for unknown slug', async () => {
+    const app = new Hono()
+    const repo = makeRepo()
+
+    app.use('*', async (c, next) => {
+      c.set('seedRepository' as never, repo)
+      await next()
+    })
+    app.use('*', seedRegistryMiddleware())
+    app.get('/test', (c) => {
+      const getSeed = c.get('getSeed' as never) as any
+      return c.json({ result: getSeed('no-such-slug') })
+    })
+
+    const res = await app.request('/test')
+    const body = await res.json() as any
+    expect(body.result).toBeNull()
+  })
+
+  it('empty seed list yields empty registry without crashing', async () => {
+    const app = new Hono()
+    const repo = makeRepo([])
+
+    app.use('*', async (c, next) => {
+      c.set('seedRepository' as never, repo)
+      await next()
+    })
+    app.use('*', seedRegistryMiddleware())
+    app.get('/test', (c) => {
+      const registry = c.get('seedRegistry' as never) as any
+      return c.json({ count: registry.all().length })
+    })
+
+    const res = await app.request('/test')
+    const body = await res.json() as any
+    expect(body.count).toBe(0)
+  })
+})

package/src/middleware/seed-registry.middleware.ts

@@ -1,21 +1,21 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { createMiddleware } from 'hono/factory'
-import type { Env, Variables } from '../types'
-import { getHydratedRegistry } from '../shared/seed-registry-cache'
-
-/**
- * Hydrates the seed registry from D1 and injects seedRegistry, getSeed, and backrefMap
- * into the context. Must run AFTER repositoryMiddleware (needs seedRepository) and
- * BEFORE any handler that reads the registry.
- */
-export const seedRegistryMiddleware = () =>
-  createMiddleware<{ Bindings: Env; Variables: Variables }>(async (context, next) => {
-    const { registry, backrefMap } = await getHydratedRegistry(context.get('seedRepository'))
-    context.set('seedRegistry', registry)
-    context.set('getSeed', (slug: string) => registry.get(slug))
-    context.set('backrefMap', backrefMap)
-    await next()
-  })
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { createMiddleware } from 'hono/factory'
+import type { Env, Variables } from '../types'
+import { getHydratedRegistry } from '../shared/seed-registry-cache'
+
+/**
+ * Hydrates the seed registry from D1 and injects seedRegistry, getSeed, and backrefMap
+ * into the context. Must run AFTER repositoryMiddleware (needs seedRepository) and
+ * BEFORE any handler that reads the registry.
+ */
+export const seedRegistryMiddleware = () =>
+  createMiddleware<{ Bindings: Env; Variables: Variables }>(async (context, next) => {
+    const { registry, backrefMap } = await getHydratedRegistry(context.get('seedRepository'))
+    context.set('seedRegistry', registry)
+    context.set('getSeed', (slug: string) => registry.get(slug))
+    context.set('backrefMap', backrefMap)
+    await next()
+  })

package/src/middleware/storage.middleware.ts

@@ -1,25 +1,25 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { createMiddleware } from 'hono/factory'
-import { BeechBucket } from '@beechcms/core'
-import { AppEnv } from '../types'
-import { createBucketProvider } from '../shared/storage/factory'
-
-interface StorageOverrides {
-  bucket?: BeechBucket
-}
-
-export const storageMiddleware = (overrides?: StorageOverrides) => {
-  return createMiddleware<AppEnv>(async (context, next) => {
-    if (overrides?.bucket) {
-      context.set('bucket', overrides.bucket)
-    } else {
-      // Determine base URL for getUrl() only if we need to create the provider
-      const baseUrl = context.env.MEDIA_BASE_URL?.trim().replace(/\/$/, '') || new URL(context.req.url).origin
-      context.set('bucket', createBucketProvider(context.env, baseUrl))
-    }
-    await next()
-  })
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { createMiddleware } from 'hono/factory'
+import { BeechBucket } from '@beechcms/core'
+import { AppEnv } from '../types'
+import { createBucketProvider } from '../shared/storage/factory'
+
+interface StorageOverrides {
+  bucket?: BeechBucket
+}
+
+export const storageMiddleware = (overrides?: StorageOverrides) => {
+  return createMiddleware<AppEnv>(async (context, next) => {
+    if (overrides?.bucket) {
+      context.set('bucket', overrides.bucket)
+    } else {
+      // Determine base URL for getUrl() only if we need to create the provider
+      const baseUrl = context.env.MEDIA_BASE_URL?.trim().replace(/\/$/, '') || new URL(context.req.url).origin
+      context.set('bucket', createBucketProvider(context.env, baseUrl))
+    }
+    await next()
+  })
+}

package/src/middleware.ts

@@ -1,45 +1,45 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/// <reference types="@cloudflare/workers-types" />
-import type { Context, Next } from 'hono'
-import { HTTPException } from 'hono/http-exception'
-import type { Env, Variables } from './types'
-
-const UNAUTHORIZED_JSON = JSON.stringify({ error: 'Unauthorized' })
-
-function unauthorizedResponse() {
-  return new Response(UNAUTHORIZED_JSON, {
-    status: 401,
-    headers: { 'Content-Type': 'application/json' },
-  })
-}
-
-/**
- * JWT authentication middleware. Reads the Bearer token from the Authorization
- * header and delegates verification to the ITokenService injected in context.
- * Returns 401 on any missing or invalid token; never exposes failure details.
- */
-export function authMiddleware() {
-  return async (c: Context<{ Bindings: Env; Variables: Variables }>, next: Next): Promise<Response | void> => {
-    const authHeader = c.req.header('Authorization')
-    if (!authHeader?.startsWith('Bearer ')) {
-      throw new HTTPException(401, { res: unauthorizedResponse() })
-    }
-
-    const token = authHeader.slice(7)
-    if (!token) {
-      throw new HTTPException(401, { res: unauthorizedResponse() })
-    }
-
-    const claims = await c.get('tokenService').verify(token)
-
-    if (!claims) {
-      throw new HTTPException(401, { res: unauthorizedResponse() })
-    }
-
-    c.set('jwtPayload', claims)
-    await next()
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import type { Context, Next } from 'hono'
+import { HTTPException } from 'hono/http-exception'
+import type { Env, Variables } from './types'
+
+const UNAUTHORIZED_JSON = JSON.stringify({ error: 'Unauthorized' })
+
+function unauthorizedResponse() {
+  return new Response(UNAUTHORIZED_JSON, {
+    status: 401,
+    headers: { 'Content-Type': 'application/json' },
+  })
+}
+
+/**
+ * JWT authentication middleware. Reads the Bearer token from the Authorization
+ * header and delegates verification to the ITokenService injected in context.
+ * Returns 401 on any missing or invalid token; never exposes failure details.
+ */
+export function authMiddleware() {
+  return async (c: Context<{ Bindings: Env; Variables: Variables }>, next: Next): Promise<Response | void> => {
+    const authHeader = c.req.header('Authorization')
+    if (!authHeader?.startsWith('Bearer ')) {
+      throw new HTTPException(401, { res: unauthorizedResponse() })
+    }
+
+    const token = authHeader.slice(7)
+    if (!token) {
+      throw new HTTPException(401, { res: unauthorizedResponse() })
+    }
+
+    const claims = await c.get('tokenService').verify(token)
+
+    if (!claims) {
+      throw new HTTPException(401, { res: unauthorizedResponse() })
+    }
+
+    c.set('jwtPayload', claims)
+    await next()
+  }
+}

package/src/public/access-policy.ts

@@ -1,27 +1,27 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import type { Seed } from '@beechcms/core'
-
-export type PublicOperation = 'read' | 'add' | 'edit'
-
-function isAllowed(seed: Seed, operation: PublicOperation): boolean {
-  if (operation === 'read') return seed.allowPublicRead === true
-  if (operation === 'add') return seed.allowPublicPost === true
-  return seed.allowPublicEdit === true
-}
-
-export function checkPublicOperation(seed: Seed, operation: PublicOperation) {
-  if (isAllowed(seed, operation)) {
-    return { ok: true } as const
-  }
-
-  return {
-    ok: false,
-    error: {
-      error: 'Forbidden',
-      message: `Public ${operation.toUpperCase()} is not allowed for content type '${seed.slug}'.`,
-    },
-  } as const
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type { Seed } from '@beechcms/core'
+
+export type PublicOperation = 'read' | 'add' | 'edit'
+
+function isAllowed(seed: Seed, operation: PublicOperation): boolean {
+  if (operation === 'read') return seed.allowPublicRead === true
+  if (operation === 'add') return seed.allowPublicPost === true
+  return seed.allowPublicEdit === true
+}
+
+export function checkPublicOperation(seed: Seed, operation: PublicOperation) {
+  if (isAllowed(seed, operation)) {
+    return { ok: true } as const
+  }
+
+  return {
+    ok: false,
+    error: {
+      error: 'Forbidden',
+      message: `Public ${operation.toUpperCase()} is not allowed for content type '${seed.slug}'.`,
+    },
+  } as const
+}

package/src/public/api-key-middleware.ts

@@ -1,57 +1,57 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import type { Context, Next } from 'hono'
-import { PUBLIC_ERRORS } from './public-errors'
-import { publicProblem } from './problem-details'
-
-type PublicBindings = {
-  PUBLIC_READ_API_KEY?: string
-  PUBLIC_WRITE_API_KEY?: string
-}
-
-function isReadMethod(method: string): boolean {
-  return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
-}
-
-function getConfiguredKey(env: PublicBindings, method: string): string | undefined {
-  if (isReadMethod(method)) {
-    return env.PUBLIC_READ_API_KEY
-  }
-  return env.PUBLIC_WRITE_API_KEY
-}
-
-/**
- * API key auth middleware for Public API routes.
- * Uses X-API-Key header only.
- */
-export function apiKeyMiddleware() {
-  return async (c: Context, next: Next): Promise<Response | void> => {
-    const env = c.env as PublicBindings
-    const configuredKey = getConfiguredKey(env, c.req.method)
-
-    if (!configuredKey) {
-      return publicProblem(c, {
-        type: 'public-api-not-configured',
-        title: PUBLIC_ERRORS.API_KEY_FORBIDDEN.error,
-        status: 403,
-        detail: PUBLIC_ERRORS.API_KEY_FORBIDDEN.message,
-      })
-    }
-
-    const providedKey = c.req.header('X-API-Key')
-
-    if (!providedKey || providedKey !== configuredKey) {
-      return publicProblem(c, {
-        type: 'public-api-key-unauthorized',
-        title: PUBLIC_ERRORS.API_KEY_UNAUTHORIZED.error,
-        status: 401,
-        detail: PUBLIC_ERRORS.API_KEY_UNAUTHORIZED.message,
-      })
-    }
-
-    await next()
-  }
-}
-
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type { Context, Next } from 'hono'
+import { PUBLIC_ERRORS } from './public-errors'
+import { publicProblem } from './problem-details'
+
+type PublicBindings = {
+  PUBLIC_READ_API_KEY?: string
+  PUBLIC_WRITE_API_KEY?: string
+}
+
+function isReadMethod(method: string): boolean {
+  return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
+}
+
+function getConfiguredKey(env: PublicBindings, method: string): string | undefined {
+  if (isReadMethod(method)) {
+    return env.PUBLIC_READ_API_KEY
+  }
+  return env.PUBLIC_WRITE_API_KEY
+}
+
+/**
+ * API key auth middleware for Public API routes.
+ * Uses X-API-Key header only.
+ */
+export function apiKeyMiddleware() {
+  return async (c: Context, next: Next): Promise<Response | void> => {
+    const env = c.env as PublicBindings
+    const configuredKey = getConfiguredKey(env, c.req.method)
+
+    if (!configuredKey) {
+      return publicProblem(c, {
+        type: 'public-api-not-configured',
+        title: PUBLIC_ERRORS.API_KEY_FORBIDDEN.error,
+        status: 403,
+        detail: PUBLIC_ERRORS.API_KEY_FORBIDDEN.message,
+      })
+    }
+
+    const providedKey = c.req.header('X-API-Key')
+
+    if (!providedKey || providedKey !== configuredKey) {
+      return publicProblem(c, {
+        type: 'public-api-key-unauthorized',
+        title: PUBLIC_ERRORS.API_KEY_UNAUTHORIZED.error,
+        status: 401,
+        detail: PUBLIC_ERRORS.API_KEY_UNAUTHORIZED.message,
+      })
+    }
+
+    await next()
+  }
+}
+

package/src/public/cache-utils.ts

@@ -1,38 +1,38 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import type { Context } from 'hono'
-
-type EdgeCache = {
-  cache: Cache
-  executionCtx: { waitUntil: (p: Promise<unknown>) => void }
-} | null
-
-export function resolveEdgeCache(c: Context): EdgeCache {
-  try {
-    const cache = caches.default
-    let executionCtx: any
-    try {
-      executionCtx = c.executionCtx
-    } catch {
-      return null
-    }
-
-    if (!executionCtx?.waitUntil) return null
-    return { cache, executionCtx: executionCtx as { waitUntil: (p: Promise<unknown>) => void } }
-  } catch {
-    return null
-  }
-}
-
-export function withCachedResponse(edgeCache: EdgeCache, cacheKey: Request, response: Response): Response {
-  if (!edgeCache) return response
-  const cloned = response.clone()
-  const headers = new Headers(cloned.headers)
-  headers.set('Cache-Control', 'public, max-age=60')
-  edgeCache.executionCtx.waitUntil(
-    edgeCache.cache.put(cacheKey, new Response(cloned.body, { status: cloned.status, headers }))
-  )
-  return response
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type { Context } from 'hono'
+
+type EdgeCache = {
+  cache: Cache
+  executionCtx: { waitUntil: (p: Promise<unknown>) => void }
+} | null
+
+export function resolveEdgeCache(c: Context): EdgeCache {
+  try {
+    const cache = caches.default
+    let executionCtx: any
+    try {
+      executionCtx = c.executionCtx
+    } catch {
+      return null
+    }
+
+    if (!executionCtx?.waitUntil) return null
+    return { cache, executionCtx: executionCtx as { waitUntil: (p: Promise<unknown>) => void } }
+  } catch {
+    return null
+  }
+}
+
+export function withCachedResponse(edgeCache: EdgeCache, cacheKey: Request, response: Response): Response {
+  if (!edgeCache) return response
+  const cloned = response.clone()
+  const headers = new Headers(cloned.headers)
+  headers.set('Cache-Control', 'public, max-age=60')
+  edgeCache.executionCtx.waitUntil(
+    edgeCache.cache.put(cacheKey, new Response(cloned.body, { status: cloned.status, headers }))
+  )
+  return response
+}