@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.3

package/src/features/stats/stats.handler.ts

@@ -1,420 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/// <reference types="@cloudflare/workers-types" />
-import { Hono } from 'hono'
-import { SystemClock } from '@beechcms/core'
-import type { Env, Variables } from '../../types'
-import { publicProblem } from '../../public/problem-details'
-import { cleanStr } from '../../shared/query-utils'
-
-const DATABASE_ERROR = 'Database error'
-const INTERNAL_SERVER_ERROR = 'Internal Server Error'
-
-const SECONDS_PER_MINUTE = 60
-const SECONDS_PER_HOUR = 60 * SECONDS_PER_MINUTE
-const SECONDS_PER_DAY = 24 * SECONDS_PER_HOUR
-const HOURS_24_IN_SECONDS = 24 * SECONDS_PER_HOUR
-const DAYS_7_IN_SECONDS = 7 * SECONDS_PER_DAY
-const DAYS_30_IN_SECONDS = 30 * SECONDS_PER_DAY
-const MAX_MEDIA_SCAN = 1000
-const DEFAULT_LIMIT = 12
-const MAX_LIMIT = 100
-const R2_STORAGE_LIMIT = 10 * 1024 * 1024 * 1024 // 10GB
-const D1_MONTHLY_REQUESTS_LIMIT = 1000000 // 1M requests/month
-
-function getMimeType(extension: string): string {
-    if (extension === 'pdf') {
-        return 'application/pdf'
-    }
-    const type = extension === 'jpg' ? 'jpeg' : (extension || 'jpeg')
-    return `image/${type}`
-}
-
-const statsApp = new Hono<{ Bindings: Env; Variables: Variables }>()
-
-/**
- * GET /stats/media-library - Lists all files present in R2:
- * combines media_objects (tracked uploads) + /api/media/ URLs found in file columns of each seed
- */
-statsApp.get('/stats/media-library', async (context) => {
-    try {
-        const mediaRepository = context.get('mediaRepository')
-        const limit = Math.min(Number.parseInt(context.req.query('limit') ?? String(DEFAULT_LIMIT), 10), MAX_LIMIT)
-        const offset = Number.parseInt(context.req.query('offset') ?? '0', 10)
-        const mediaBaseUrl = (context.env.MEDIA_BASE_URL?.trim().replace(/\/$/, '')) ?? new URL(context.req.url).origin
-
-        // 1. Files tracked in the media library
-        // Take the first MAX_MEDIA_SCAN for cross-scanning
-        const { items: mediaRows } = await mediaRepository.list({ limit: MAX_MEDIA_SCAN, offset: 0 })
-
-        const trackedKeys = new Set<string>()
-        const allItems: Array<{ key: string; filename: string; mime_type: string; size_bytes: number; created_at: number; url: string }> = []
-
-        for (const mediaRow of mediaRows) {
-            trackedKeys.add(mediaRow.key)
-            allItems.push({ ...mediaRow, url: `${mediaBaseUrl}/api/media/${encodeURIComponent(mediaRow.key)}` })
-        }
-
-        // 2. /api/media/ URLs in the file columns of each seed (v0.4.0 — real columns)
-        const seeds = context.get('seedRegistry').all()
-        const contentScanRepository = context.get('contentScanRepository')
-        const referencedKeysFromContent = await contentScanRepository.getReferencedMediaKeys(seeds)
-
-        for (const key of referencedKeysFromContent) {
-            if (trackedKeys.has(key)) continue
-            trackedKeys.add(key)
-            const filename = key.replace(/^\d+-/, '')
-            const extension = filename.split('.').pop()?.toLowerCase() ?? ''
-            const mimeType = getMimeType(extension)
-            const createdAt = Number.parseInt(key.split('-')[0], 10) || 0
-            allItems.push({
-                key,
-                filename,
-                mime_type: mimeType,
-                size_bytes: 0,
-                created_at: createdAt,
-                url: `${mediaBaseUrl}/api/media/${encodeURIComponent(key)}`
-            })
-        }
-
-        allItems.sort((a, b) => b.created_at - a.created_at)
-        const total = allItems.length
-        const paginatedItems = allItems.slice(offset, offset + limit)
-
-        return context.json({ items: paginatedItems, total })
-    } catch (error) {
-        console.error('Media library error:', error)
-        return context.json({ error: INTERNAL_SERVER_ERROR }, 500)
-    }
-})
-
-/**
- * GET /stats/unused-media - Finds media in media_objects not referenced in any file column
- */
-statsApp.get('/stats/unused-media', async (context) => {
-    try {
-        const mediaRepository = context.get('mediaRepository')
-        const seeds = context.get('seedRegistry').all()
-
-        // All tracked media keys
-        const { items: mediaRows } = await mediaRepository.list({ limit: MAX_MEDIA_SCAN, offset: 0 })
-
-        if (mediaRows.length === 0) {
-            return context.json({ items: [] })
-        }
-
-        // Collect all referenced keys in the file columns of each seed
-        const contentScanRepository = context.get('contentScanRepository')
-        const referencedKeys = await contentScanRepository.getReferencedMediaKeys(seeds)
-
-        const unusedMedia = mediaRows.filter(mediaItem => !referencedKeys.has(mediaItem.key))
-        return context.json({ items: unusedMedia })
-    } catch (error) {
-        console.error('Unused media error:', error)
-        return context.json({ error: INTERNAL_SERVER_ERROR }, 500)
-    }
-})
-
-/**
- * GET /stats/setup-checklist - Project setup status for "Project Health" widget
- */
-statsApp.get('/stats/setup-checklist', async (context) => {
-    try {
-        const setupChecklistRepository = context.get('setupChecklistRepository')
-        const seeds = context.get('seedRegistry').all()
-
-        const existingTables = await setupChecklistRepository.getExistingTableNames()
-
-        const systemTableNames = [
-            'users', 'refresh_tokens', 'media_objects',
-            'analytics', 'system_stats', 'activity_logs',
-        ]
-        const systemTablesOk = systemTableNames.every(name => existingTables.has(name))
-
-        const seedsCount = seeds.length
-        const contentTablesOk = seedsCount > 0 && seeds.every(seed => existingTables.has(`content_${seed.slug}`))
-
-        let adminExists = false
-        try {
-            adminExists = (await setupChecklistRepository.countAdmins()) > 0
-        } catch {
-            // users table may not exist yet
-        }
-
-        let hasContent = false
-        const firstSeedSlug = seeds[0]?.slug ?? null
-        if (firstSeedSlug && existingTables.has(`content_${firstSeedSlug}`)) {
-            try {
-                hasContent = (await setupChecklistRepository.countEntriesInSeed(firstSeedSlug)) > 0
-            } catch {
-                // ignore
-            }
-        }
-
-        return context.json({
-            systemTablesOk,
-            seedsCount,
-            contentTablesOk,
-            adminExists,
-            hasContent,
-            firstSeedSlug,
-        })
-    } catch (error) {
-        console.error('Setup checklist error:', error)
-        return context.json({ error: 'Failed to compute setup checklist' }, 500)
-    }
-})
-
-/**
- * GET /stats/total - Global content statistics for dashboard
- */
-statsApp.get('/stats/total', async (context) => {
-    try {
-        const now = SystemClock.nowSeconds()
-        const twentyFourHoursAgo = now - HOURS_24_IN_SECONDS
-        const sevenDaysAgo       = now - DAYS_7_IN_SECONDS
-        const thirtyDaysAgo      = now - DAYS_30_IN_SECONDS
-
-        // Total: SUM of per-seed counts (current live entries)
-        const seeds = context.get('seedRegistry').all()
-        const widgetRepository = context.get('widgetRepository')
-        const countResults = await Promise.all(
-            seeds.map(seed => widgetRepository.aggregate(seed, { op: 'count' }, 'all'))
-        )
-        const totalEntriesCount = countResults.reduce((accumulator, count) => accumulator + count, 0)
-
-        // today/week/month: create events in activity_logs (entity_type = 'content')
-        const activityLogRepository = context.get('activityLogRepository')
-        const [todayCount, weekCount, monthCount] = await Promise.all([
-            activityLogRepository.countSince({ action: 'create', entityType: 'content', sinceTimestamp: twentyFourHoursAgo }),
-            activityLogRepository.countSince({ action: 'create', entityType: 'content', sinceTimestamp: sevenDaysAgo }),
-            activityLogRepository.countSince({ action: 'create', entityType: 'content', sinceTimestamp: thirtyDaysAgo }),
-        ])
-
-        return context.json({
-            total: totalEntriesCount,
-            today: todayCount,
-            week: weekCount,
-            month: monthCount,
-        })
-    } catch (error) {
-        console.error('Content stats error:', error)
-        return publicProblem(context, {
-            type: 'content-database-error',
-            title: INTERNAL_SERVER_ERROR,
-            status: 500,
-            detail: DATABASE_ERROR,
-        })
-    }
-})
-
-/**
- * GET /stats/recent-activity - Latest activities registered in the system
- * No ETag on this endpoint: the activity feed must always be fresh after
- * every mutation. Cache-Control: no-store prevents the browser from keeping a
- * response that could be returned as a 304 stale.
- */
-statsApp.get('/stats/recent-activity', async (context) => {
-    try {
-        const slug = cleanStr(context.req.query('slug'))
-
-        const entries = await context.get('activityLogRepository').list({
-            entitySlug: slug ?? undefined,
-            limit: 15,
-        })
-
-        // Preserve the legacy snake_case wire format consumed by the dashboard
-        // recent-activity widget. The repository returns camelCase records,
-        // so we reshape only on the way out.
-        const activities = entries.map((entry) => ({
-            id: entry.id,
-            user_id: entry.userId,
-            user_email: entry.userEmail,
-            user_name: entry.userName,
-            action: entry.action,
-            entity_type: entry.entityType,
-            entity_id: entry.entityId,
-            entity_slug: entry.entitySlug,
-            details: entry.details,
-            created_at: entry.createdAt,
-        }))
-
-        context.header('Cache-Control', 'no-store')
-
-        return context.json(activities)
-    } catch (error) {
-        console.error('Recent activity error:', error)
-        return publicProblem(context, {
-            type: 'content-database-error',
-            title: INTERNAL_SERVER_ERROR,
-            status: 500,
-            detail: DATABASE_ERROR,
-        })
-    }
-})
-
-/**
- * GET /stats/health - System health status and Cloudflare quotas
- */
-statsApp.get('/stats/health', async (context) => {
-    try {
-        const systemStatsRepository = context.get('systemStatsRepository')
-
-        // 1. Retrieve storage usage from repository (system_stats)
-        let storageUsedBytes = 0
-        try {
-            storageUsedBytes = await systemStatsRepository.getStorageUsage()
-        } catch (error) {
-            console.warn('Health: Could not fetch storage stats from repo:', error)
-        }
-
-        // 2. Aggregate D1 requests (proxy for database health) - last 30 days
-        const thirtyDaysAgo = SystemClock.nowSeconds() - DAYS_30_IN_SECONDS
-        const totalRequests = await context
-            .get('analyticsRepository')
-            .sumByMetric('requests', '', thirtyDaysAgo)
-
-        const storagePercentage = Math.min(Math.round((storageUsedBytes / R2_STORAGE_LIMIT) * 1000) / 10, 100)
-        const d1Percentage = Math.min(Math.round((totalRequests / D1_MONTHLY_REQUESTS_LIMIT) * 1000) / 10, 100)
-
-        return context.json({
-            storage: {
-                used: storageUsedBytes,
-                limit: R2_STORAGE_LIMIT,
-                percentage: storagePercentage
-            },
-            database: {
-                requests30d: totalRequests,
-                limit: D1_MONTHLY_REQUESTS_LIMIT,
-                percentage: d1Percentage
-            },
-            status: (storagePercentage < 90 && d1Percentage < 90) ? 'healthy' : 'warning',
-            lastUpdate: SystemClock.nowSeconds()
-        })
-    } catch (error) {
-        console.error('System health stats error:', error)
-        return context.json({ error: 'Failed to calculate system health' }, 500)
-    }
-})
-
-/**
- * GET /stats/cloudflare - Cloudflare-like metrics (Visitors, Requests, Bandwidth)
- */
-statsApp.get('/stats/cloudflare', async (context) => {
-    try {
-        const thirtyDaysAgo = SystemClock.nowSeconds() - DAYS_30_IN_SECONDS
-        const analyticsRepository = context.get('analyticsRepository')
-
-        const [recordedRequests, recordedVisitors] = await Promise.all([
-            analyticsRepository.sumByMetric('requests', '', thirtyDaysAgo),
-            analyticsRepository.sumByMetric('visitors', '', thirtyDaysAgo),
-        ])
-
-        // Simulate some Cloudflare metrics not directly tracked for a premium feel
-        const requestsCount = recordedRequests > 0 ? recordedRequests : Math.floor(Math.random() * 5000) + 1000
-        const visitorsCount = recordedVisitors > 0 ? recordedVisitors : Math.floor(requestsCount / 12) + 1
-        const bandwidthMB = Math.round((requestsCount * 0.15) * 10) / 10
-
-        const systemStatsRepository = context.get('systemStatsRepository')
-        let storageUsedBytes = 0
-        try {
-            storageUsedBytes = await systemStatsRepository.getStorageUsage()
-        } catch (error) {
-            console.warn('Could not fetch storage stats from repo:', error)
-        }
-
-        const storageUsedMB = Math.round((storageUsedBytes / (1024 * 1024)) * 10) / 10
-        const storageLimitMB = 10 * 1024 // 10 GB Free Tier
-
-        return context.json({
-            visitors: {
-                value: visitorsCount,
-                trend: 12, // simulated growth %
-                isPositive: true
-            },
-            requests: {
-                value: requestsCount,
-                trend: 8,
-                isPositive: true
-            },
-            bandwidth: {
-                value: bandwidthMB,
-                unit: 'MB',
-                trend: 5,
-                isPositive: false
-            },
-            cacheRate: {
-                value: 94.2,
-                unit: '%',
-                trend: 0.5,
-                isPositive: true
-            },
-            storage: {
-                used: storageUsedMB,
-                limit: storageLimitMB,
-                unit: 'MB',
-                percentage: Math.round((storageUsedMB / storageLimitMB) * 1000) / 10
-            }
-        })
-    } catch (error) {
-        console.error('Cloudflare stats error:', error)
-        return publicProblem(context, {
-            type: 'content-database-error',
-            title: INTERNAL_SERVER_ERROR,
-            status: 500,
-            detail: DATABASE_ERROR,
-        })
-    }
-})
-
-/**
- * GET /stats/breakdown - Content distribution for "Content Pulse" widget
- */
-statsApp.get('/stats/breakdown', async (context) => {
-    try {
-        const seeds = context.get('seedRegistry').all()
-
-        const widgetRepository = context.get('widgetRepository')
-        const counts = await Promise.all(
-            seeds.map(seed => widgetRepository.aggregate(seed, { op: 'count' }, 'all'))
-        )
-        
-        const breakdown = seeds.map((seed, index) => ({
-            slug:  seed.slug,
-            label: seed.labelPlural || seed.label,
-            count: counts[index] ?? 0,
-        }))
-
-        return context.json(breakdown)
-    } catch (error) {
-        console.error('Breakdown stats error:', error)
-        return publicProblem(context, {
-            type: 'content-database-error',
-            title: INTERNAL_SERVER_ERROR,
-            status: 500,
-            detail: DATABASE_ERROR,
-        })
-    }
-})
-
-/**
- * POST /stats/storage/sync - Recalculates space occupied on R2 (expensive operation, use with caution)
- */
-statsApp.post('/stats/storage/sync', async (context) => {
-    try {
-        const bucket = context.get('bucket')
-        const systemStatsRepository = context.get('systemStatsRepository')
-
-        const realSize = await bucket.getTotalSize()
-        await systemStatsRepository.setStorage(realSize)
-
-        return context.json({ success: true, size: realSize })
-    } catch (error) {
-        console.error('Storage sync error:', error)
-        return context.json({ error: INTERNAL_SERVER_ERROR }, 500)
-    }
-})
-
-export { statsApp }

package/src/features/webhooks/index.ts

@@ -1,63 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { Hono } from 'hono'
-import { Receiver } from '@upstash/qstash'
-import type { AppEnv } from '../../types'
-import type { CreateNotificationInput } from '@beechcms/core'
-
-export const webhooksApp = new Hono<AppEnv>()
-
-webhooksApp.post('/qstash', async (context) => {
-  const currentSigningKey = context.env.QSTASH_CURRENT_SIGNING_KEY
-  const nextSigningKey = context.env.QSTASH_NEXT_SIGNING_KEY
-
-  if (!currentSigningKey || !nextSigningKey) {
-    console.error('QStash webhook called but signing keys are not configured')
-    return context.text('Configuration error', 500)
-  }
-
-  const receiver = new Receiver({
-    currentSigningKey,
-    nextSigningKey,
-  })
-
-  const body = await context.req.text()
-  const signature = context.req.header('Upstash-Signature')
-
-  if (!signature) {
-    return context.text('Missing signature', 401)
-  }
-
-  try {
-    const isValid = await receiver.verify({
-      signature,
-      body,
-    })
-
-    if (!isValid) {
-      return context.text('Invalid signature', 401)
-    }
-  } catch (err) {
-    console.error('QStash signature verification failed', err)
-    return context.text('Invalid signature', 401)
-  }
-
-  try {
-    const input = JSON.parse(body) as CreateNotificationInput
-    
-    const notificationRepository = context.get('notificationRepository')
-    
-    await notificationRepository.create({
-      title: input.title,
-      message: input.message,
-      type: input.type ?? 'info',
-    })
-
-    return context.text('OK', 200)
-  } catch (error) {
-    console.error('Failed to process QStash webhook payload', error)
-    return context.text('Internal server error', 500)
-  }
-})

package/src/index.ts

@@ -1,65 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { createBeechApp } from './factory'
-import { SeedRegistry, SystemIdGenerator } from '@beechcms/core'
-import { runCronAutomations } from './features/automations'
-import { D1AutomationRepository } from './shared/automations.repository.d1'
-import { D1ContentRepository } from './shared/content.repository.d1'
-import { D1SeedRepository } from './shared/seed.repository.d1'
-import type { Env } from './types'
-
-const app = createBeechApp({ seeds: [] })
-
-app.get('/', (c) => c.text('Beech API is running'))
-
-export default {
-  fetch(request: Request, env: Env, ctx: ExecutionContext) {
-    if (env.ENV === 'development') {
-      const checks: Array<{ name: string; url: string }> = [
-        { name: 'MinIO',   url: (env.R2_ENDPOINT ?? 'http://localhost:9000') + '/minio/health/live' },
-        { name: 'Mailpit', url: `http://${env.SMTP_HOST ?? 'localhost'}:${env.SMTP_PORT ?? '8025'}/livez` },
-      ]
-      for (const c of checks) {
-        fetch(c.url).catch(() => {
-          console.warn(
-            `\n⚠️  ${c.name} non raggiungibile su ${c.url}\n` +
-            `   Beech in dev richiede lo stack Docker completo.\n` +
-            `   Avvialo con: npm run dev:full\n`
-          )
-        })
-      }
-    }
-    return app.fetch(request, env, ctx)
-  },
-
-  async scheduled(controller: ScheduledController, env: Env, ctx: ExecutionContext) {
-    const scheduledTime = controller?.scheduledTime ?? Date.now()
-
-    if (!env.DB) {
-      console.warn('[cron] D1 binding missing. Skipping cron automations.')
-      return
-    }
-
-    const automationRepository = new D1AutomationRepository(env.DB)
-    const contentRepository = new D1ContentRepository(env.DB)
-    const seedRepository = new D1SeedRepository(env.DB)
-    const seeds = await seedRepository.listActive()
-    const registry = new SeedRegistry(seeds)
-    const getSeed = (slug: string) => registry.get(slug) ?? null
-
-    ctx.waitUntil(
-      runCronAutomations(
-        {
-          automationRepository,
-          contentRepository,
-          getSeed,
-          env: env as unknown as Record<string, string | undefined>,
-          idGenerator: SystemIdGenerator,
-        },
-        scheduledTime,
-      ),
-    )
-  },
-} satisfies ExportedHandler<Env>

package/src/media-utils.ts

@@ -1,82 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/**
- * Media utils: estrazione chiavi R2 dal data di un'entry.
- * Usato alla cancellazione entry per eliminare i file associati da R2.
- *
- * @see docs/media-engine.md
- */
-import type { Seed } from '@beechcms/core'
-
-/** Pattern per estrarre la chiave R2 da URL in formato /api/media/KEY */
-const MEDIA_URL_PATTERN = /\/api\/media\/([^/?#]+)/
-
-/**
- * Estrae la chiave R2 da un URL di media.
- * Es: "https://x.com/api/media/1739123456-avatar.png" → "1739123456-avatar.png"
- *
- * @param mediaUrl - URL completo o path (es. /api/media/123-foto.png)
- * @returns Chiave R2 o null se l'URL non è valido
- */
-export function extractMediaKey(mediaUrl: string): string | null {
-  const match = MEDIA_URL_PATTERN.exec(String(mediaUrl))
-  return match ? decodeURIComponent(match[1]) : null
-}
-
-/**
- * Attraversa ricorsivamente un valore (stringa, array, oggetto) e raccoglie
- * tutte le chiavi R2 trovate in stringhe che matchano /api/media/KEY.
- */
-function collectMediaKeysRecursive(value: unknown, collectedKeys: Set<string>): void {
-  if (typeof value === 'string') {
-    const r2Key = extractMediaKey(value)
-    if (r2Key) {
-      collectedKeys.add(r2Key)
-      return
-    }
-    // Legacy compat: campi json/file possono contenere JSON serializzato.
-    try {
-      const parsed = JSON.parse(value) as unknown
-      if (parsed !== value) {
-        collectMediaKeysRecursive(parsed, collectedKeys)
-      }
-    } catch {
-      // ignore
-    }
-    return
-  }
-  if (Array.isArray(value)) {
-    for (const item of value) collectMediaKeysRecursive(item, collectedKeys)
-    return
-  }
-  if (value != null && typeof value === 'object') {
-    for (const nestedValue of Object.values(value)) {
-      collectMediaKeysRecursive(nestedValue, collectedKeys)
-    }
-  }
-}
-
-/**
- * Estrae tutte le chiavi R2 dal data di un'entry.
- * Cerca nei campi `file` (stringa URL) e `json` (array/oggetto con URL).
- * Il data è in formato DB: chiavi = branch.id (es. art_03, prd_05).
- *
- * @param seed - Schema del tipo di contenuto
- * @param entryData - Payload in formato DB (chiavi = branch ID)
- * @returns Array di chiavi R2 uniche da eliminare
- */
-export function extractMediaKeysFromData(
-  seed: Seed,
-  entryData: Record<string, unknown>
-): string[] {
-  const r2Keys = new Set<string>()
-  for (const branch of seed.branches) {
-    if (branch.type !== 'file' && branch.type !== 'json') continue
-    const fieldValue = entryData[branch.alias]
-    if (fieldValue == null) continue
-    collectMediaKeysRecursive(fieldValue, r2Keys)
-  }
-  return [...r2Keys]
-}

package/src/middleware/auth-providers.middleware.ts

@@ -1,45 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { createMiddleware } from 'hono/factory'
-import type { IHashProvider, ITokenService, IClock } from '@beechcms/core'
-import { SystemClock } from '@beechcms/core'
-import type { AppEnv } from '../types'
-import { BcryptHashProvider } from '../auth/bcrypt-hash-provider'
-import { JoseTokenService } from '../auth/jose-token-service'
-
-export interface AuthProviderOverrides {
-  hashProvider?: IHashProvider
-  tokenService?: ITokenService
-  clock?: IClock
-}
-
-// Valore di default presente in .dev.vars.example: mai accettabile in produzione.
-const DEV_JWT_SECRET = 'sviluppo-secret-cambiami-almeno-32-byte-per-sicurezza-hono'
-
-export const authProvidersMiddleware = (overrides?: AuthProviderOverrides) => {
-  return createMiddleware<AppEnv>(async (context, next) => {
-    if (context.env.ENV === 'production' && context.env.JWT_SECRET === DEV_JWT_SECRET) {
-      throw new Error(
-        'JWT_SECRET non configurato: in produzione impostare un segreto univoco con `wrangler secret put JWT_SECRET`',
-      )
-    }
-
-    const resolvedClock = overrides?.clock ?? SystemClock
-    const hashProvider = overrides?.hashProvider ?? new BcryptHashProvider()
-    const tokenService = overrides?.tokenService ?? new JoseTokenService(
-      context.env.JWT_SECRET,
-      {
-        issuer: context.env.JWT_ISSUER,
-        audience: context.env.JWT_AUDIENCE,
-      },
-      resolvedClock,
-    )
-
-    context.set('hashProvider', hashProvider)
-    context.set('tokenService', tokenService)
-
-    await next()
-  })
-}