create-berna-stencil 2.6.0 → 2.6.2

package/out/backend/_core/index.php

@@ -0,0 +1,148 @@
+<?php
+
+declare(strict_types=1);
+
+define('CORE_ACCESS', true);
+define('CORE_PATH', __DIR__);
+
+/**
+ * Load dependencies and initial configuration.
+ */
+require_once __DIR__ . '/init.php';
+require_once __DIR__ . '/modules/Response.php';
+
+// =====================================================
+// 1. REQUEST PARSING
+// =====================================================
+
+$method = $_SERVER['REQUEST_METHOD'];
+$uri    = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
+
+$uri    = rtrim(preg_replace('#^/api#', '', $uri), '/') ?: '/';
+$parts  = array_values(array_filter(explode('/', $uri)));
+
+foreach ($parts as $part) {
+    if ($part === '..' || $part === '.') {
+        Response::error('Bad Request', 400);
+    }
+}
+
+// =====================================================
+// 2. ENDPOINT RESOLUTION (ROUTING WITH SUBDIRECTORIES)
+// =====================================================
+
+$basePublic    = __DIR__ . '/../api/public/';
+$baseProtected = __DIR__ . '/../api/protected/';
+
+$endpointFile  = null;
+$isProtected   = false;
+$requestParams = [];
+
+// Temporary variables for the lookup loop
+$checkParts = $parts;
+$params     = [];
+
+/**
+ * Dynamic routing logic: find the deepest matching endpoint file.
+ * At each iteration, the last URL segment is peeled off and stored
+ * as a route parameter until a matching file is found.
+ */
+while (count($checkParts) > 0) {
+    $relativePath = implode('/', $checkParts) . '.php';
+
+    // Check first whether this is a public route
+    if (file_exists($basePublic . $relativePath)) {
+        $endpointFile = $basePublic . $relativePath;
+        $isProtected  = false;
+        break;
+    }
+
+    // Then check whether this is a protected route
+    if (file_exists($baseProtected . $relativePath)) {
+        $endpointFile = $baseProtected . $relativePath;
+        $isProtected  = true;
+        break;
+    }
+
+    // No file matched: treat the last segment as a route parameter and try again
+    array_unshift($params, array_pop($checkParts));
+}
+
+/**
+ * IF THE ENDPOINT DOES NOT EXIST, RETURN AN HTML 404 PAGE.
+ */
+if (!$endpointFile) {
+    http_response_code(404);
+
+    // Look for the 404.html file generated by Eleventy in the server document root
+    $errorPage = $_SERVER['DOCUMENT_ROOT'] . '/404.html';
+
+    if (file_exists($errorPage)) {
+        header('Content-Type: text/html; charset=UTF-8');
+        echo file_get_contents($errorPage);
+    } else {
+        echo "<h1>404 Not Found</h1>";
+        echo "The requested URL was not found on this server.";
+    }
+    exit;
+}
+
+$base         = $isProtected ? $baseProtected : $basePublic;
+$base         = str_replace('\\', '/', $base);
+$endpointPath = str_replace('\\', '/', $endpointFile);
+$endpointPath = preg_replace('#\.php$#', '', str_replace($base, '', $endpointPath));
+
+// =====================================================
+// 3. HEADERS AND CORS (Only if the endpoint exists)
+// =====================================================
+
+header('Content-Type: application/json; charset=UTF-8');
+header('X-Content-Type-Options: nosniff');
+header('X-Frame-Options: DENY');
+header('Referrer-Policy: strict-origin-when-cross-origin');
+header('Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS');
+header('Access-Control-Allow-Headers: Content-Type, X-Api-Key');
+
+$originsForEndpoint = $config['CUSTOM_ENDPOINT_ORIGINS'][$endpointPath]
+    ?? $config['GENERAL_ALLOWED_ORIGINS']
+    ?? [];
+
+$origin = $_SERVER['HTTP_ORIGIN'] ?? '';
+
+if ($origin !== '' && in_array($origin, $originsForEndpoint, true)) {
+    header('Access-Control-Allow-Origin: ' . $origin);
+    header('Vary: Origin');
+} elseif (in_array('*', $originsForEndpoint, true)) {
+    header('Access-Control-Allow-Origin: *');
+}
+
+if ($method === 'OPTIONS') {
+    http_response_code(204);
+    exit;
+}
+
+require_once __DIR__ . '/modules/RateLimiter.php';
+RateLimiter::check($_SERVER['REMOTE_ADDR'] ?? '', 60, 60);
+
+// =====================================================
+// 4. AUTHENTICATION GUARD
+// =====================================================
+
+if ($isProtected) {
+    $validKey = $config['CUSTOM_ENDPOINT_KEYS'][$endpointPath] ?? $config['GENERAL_API_KEY'] ?? '';
+    $apiKey   = $_SERVER['HTTP_X_API_KEY'] ?? '';
+
+    if ($validKey === '' || !hash_equals($validKey, $apiKey)) {
+        Response::error('Unauthorized. X_API_KEY is incorrect or missing', 401);
+    }
+}
+
+// =====================================================
+// 5. DISPATCH
+// =====================================================
+
+// Parameters are the remaining URL segments not consumed during endpoint resolution
+$requestParams = $params;
+
+// Load and execute the matched endpoint file
+require $endpointFile;

package/out/backend/_core/init.php

@@ -0,0 +1,34 @@
+<?php
+
+declare(strict_types=1);
+
+require_once __DIR__ . '/vendor/autoload.php';
+require_once __DIR__ . '/modules/Response.php';
+
+// --- GESTORE GLOBALE ERRORI E ECCEZIONI ---
+set_exception_handler(function ($exception) use (&$config) {
+    $isDebug = ($config['APP_ENV'] ?? 'production') !== 'production';
+    Response::error(
+        $isDebug ? $exception->getMessage() : 'Internal server error',
+        500,
+        $isDebug ? ['file' => $exception->getFile(), 'line' => $exception->getLine()] : null
+    );
+});
+
+set_error_handler(function ($severity, $message, $file, $line) {
+    if (!(error_reporting() & $severity)) return;
+    throw new ErrorException($message, 0, $severity, $file, $line);
+});
+
+// --- CARICAMENTO CONFIGURAZIONE ---
+// dirname(__DIR__) punta alla cartella /api/ dove ora si trova config.php
+$config = require dirname(__DIR__) . '/config.php';
+
+// --- CONFIGURAZIONE AMBIENTE ---
+if (($config['APP_ENV'] ?? 'production') === 'production') {
+    ini_set('display_errors', '0');
+    error_reporting(0);
+} else {
+    ini_set('display_errors', '1');
+    error_reporting(E_ALL);
+}

package/out/backend/_core/modules/RateLimiter.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+class RateLimiter {
+    public static function check(string $ip, int $maxRequests = 60, int $windowSeconds = 60): void {
+        $cacheDir = __DIR__ . '/../../cache';
+        
+        if (!is_dir($cacheDir)) {
+            mkdir($cacheDir, 0755, true);
+        }
+
+        $cacheFile = $cacheDir . '/rl_' . md5($ip) . '.json';
+        $now = time();
+        $data = [];
+
+        if (file_exists($cacheFile)) {
+            $data = json_decode(file_get_contents($cacheFile), true) ?: [];
+        }
+
+        $data = array_filter($data, fn($ts) => $ts > ($now - $windowSeconds));
+        $data[] = $now;
+
+        file_put_contents($cacheFile, json_encode(array_values($data)), LOCK_EX);
+
+        if (count($data) > $maxRequests) {
+            header('Retry-After: ' . $windowSeconds);
+            Response::error('Too Many Requests', 429);
+        }
+    }
+}

package/out/backend/_core/modules/Response.php

@@ -0,0 +1,49 @@
+<?php
+
+declare(strict_types=1);
+
+if (!defined('CORE_ACCESS')) {
+    $errorPage = $_SERVER['DOCUMENT_ROOT'] . '/404.html';
+    http_response_code(404);
+    if (file_exists($errorPage)) {
+        header('Content-Type: text/html; charset=UTF-8');
+        echo file_get_contents($errorPage);
+    } else {
+        echo "404 Not Found";
+    }
+    exit;
+}
+
+class Response
+{
+    public static function success(mixed $data = null, int $code = 200): never
+    {
+        http_response_code($code);
+        echo json_encode([
+            'status' => 'success',
+            'data'   => $data,
+        ], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    public static function error(string $message, int $code = 400, mixed $details = null): never
+    {
+        http_response_code($code);
+        $body = [
+            'status'  => 'error',
+            'message' => $message,
+            'code'    => $code,
+        ];
+        if ($details !== null) {
+            $body['details'] = $details;
+        }
+        echo json_encode($body, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    public static function noContent(): never
+    {
+        http_response_code(204);
+        exit;
+    }
+}

package/{src → out}/backend/_core/vendor/composer/autoload_static.php

@@ -13,48 +13,48 @@ class ComposerStaticInit108be68e4e2b97fed51d36a10eed0849
     );
 
     public static $prefixLengthsPsr4 = array (
-        'S' =>
+        'S' => 
         array (
             'Symfony\\Polyfill\\Php80\\' => 23,
             'Symfony\\Polyfill\\Mbstring\\' => 26,
             'Symfony\\Polyfill\\Ctype\\' => 23,
         ),
-        'P' =>
+        'P' => 
         array (
             'PhpOption\\' => 10,
         ),
-        'G' =>
+        'G' => 
         array (
             'GrahamCampbell\\ResultType\\' => 26,
         ),
-        'D' =>
+        'D' => 
         array (
             'Dotenv\\' => 7,
         ),
     );
 
     public static $prefixDirsPsr4 = array (
-        'Symfony\\Polyfill\\Php80\\' =>
+        'Symfony\\Polyfill\\Php80\\' => 
         array (
             0 => __DIR__ . '/..' . '/symfony/polyfill-php80',
         ),
-        'Symfony\\Polyfill\\Mbstring\\' =>
+        'Symfony\\Polyfill\\Mbstring\\' => 
         array (
             0 => __DIR__ . '/..' . '/symfony/polyfill-mbstring',
         ),
-        'Symfony\\Polyfill\\Ctype\\' =>
+        'Symfony\\Polyfill\\Ctype\\' => 
         array (
             0 => __DIR__ . '/..' . '/symfony/polyfill-ctype',
         ),
-        'PhpOption\\' =>
+        'PhpOption\\' => 
         array (
             0 => __DIR__ . '/..' . '/phpoption/phpoption/src/PhpOption',
         ),
-        'GrahamCampbell\\ResultType\\' =>
+        'GrahamCampbell\\ResultType\\' => 
         array (
             0 => __DIR__ . '/..' . '/graham-campbell/result-type/src',
         ),
-        'Dotenv\\' =>
+        'Dotenv\\' => 
         array (
             0 => __DIR__ . '/..' . '/vlucas/phpdotenv/src',
         ),

package/{src → out}/backend/_core/vendor/composer/installed.json

@@ -24,7 +24,7 @@
             },
             "time": "2025-12-27T19:43:20+00:00",
             "type": "library",
-            "installation-source": "dist",
+            "installation-source": "source",
             "autoload": {
                 "psr-4": {
                     "GrahamCampbell\\ResultType\\": "src/"
@@ -98,7 +98,7 @@
                     "dev-master": "1.9-dev"
                 }
             },
-            "installation-source": "dist",
+            "installation-source": "source",
             "autoload": {
                 "psr-4": {
                     "PhpOption\\": "src/PhpOption/"
@@ -175,7 +175,7 @@
                     "name": "symfony/polyfill"
                 }
             },
-            "installation-source": "dist",
+            "installation-source": "source",
             "autoload": {
                 "files": [
                     "bootstrap.php"
@@ -262,7 +262,7 @@
                     "name": "symfony/polyfill"
                 }
             },
-            "installation-source": "dist",
+            "installation-source": "source",
             "autoload": {
                 "files": [
                     "bootstrap.php"
@@ -343,7 +343,7 @@
                     "name": "symfony/polyfill"
                 }
             },
-            "installation-source": "dist",
+            "installation-source": "source",
             "autoload": {
                 "files": [
                     "bootstrap.php"
@@ -447,7 +447,7 @@
                     "dev-master": "5.6-dev"
                 }
             },
-            "installation-source": "dist",
+            "installation-source": "source",
             "autoload": {
                 "psr-4": {
                     "Dotenv\\": "src/"

package/{src → out}/backend/_core/vendor/composer/installed.php

@@ -3,7 +3,7 @@
         'name' => '__root__',
         'pretty_version' => 'dev-main',
         'version' => 'dev-main',
-        'reference' => '9bbb36794fc27d6938523db2d4076661ad9ddab9',
+        'reference' => 'c0fb608d2f28aa6977fa76538d55db9be6530ce4',
         'type' => 'library',
         'install_path' => __DIR__ . '/../../',
         'aliases' => array(),
@@ -13,7 +13,7 @@
         '__root__' => array(
             'pretty_version' => 'dev-main',
             'version' => 'dev-main',
-            'reference' => '9bbb36794fc27d6938523db2d4076661ad9ddab9',
+            'reference' => 'c0fb608d2f28aa6977fa76538d55db9be6530ce4',
             'type' => 'library',
             'install_path' => __DIR__ . '/../../',
             'aliases' => array(),

package/out/backend/_core/vendor/graham-campbell/result-type/CHANGELOG.md

@@ -0,0 +1,53 @@
+CHANGE LOG
+==========
+
+
+## V1.1.4 (27/12/2025)
+
+* Added support for PHP 8.5
+
+
+## V1.1.3 (20/07/2024)
+
+* Added support for PHP 8.4
+
+
+## V1.1.2 (12/11/2023)
+
+* Added support for PHP 8.3
+
+
+## V1.1.1 (25/02/2023)
+
+* Cleaned up tests
+
+
+## V1.1 (30/07/2022)
+
+* Added support for PHP 8.2
+* Dropped support for PHP <7.2.5
+
+
+## V1.0.4 (21/11/2021)
+
+* Updated package metadata
+
+
+## V1.0.3 (17/10/2021)
+
+* Corrected docs
+
+
+## V1.0.2 (28/08/2021)
+
+* Added support for PHP 8.1
+
+
+## V1.0.1 (13/04/2020)
+
+* Updated funding information
+
+
+## V1.0 (21/03/2020)
+
+* Initial release

package/{src → out}/backend/_core/vendor/graham-campbell/result-type/LICENSE

@@ -1,21 +1,21 @@
-The MIT License (MIT)
-
-Copyright (c) 2020-2024 Graham Campbell <hello@gjcampbell.co.uk>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
+The MIT License (MIT)
+
+Copyright (c) 2020-2024 Graham Campbell <hello@gjcampbell.co.uk>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/out/backend/_core/vendor/graham-campbell/result-type/README.md

@@ -0,0 +1,42 @@
+Result Type
+===========
+
+Result Type was created by, and is maintained by [Graham Campbell](https://github.com/GrahamCampbell), and is an implementation of the result type. Feel free to check out the [change log](CHANGELOG.md), [releases](https://github.com/GrahamCampbell/Result-Type/releases), [security policy](https://github.com/GrahamCampbell/Result-Type/security/policy), [license](LICENSE), [code of conduct](.github/CODE_OF_CONDUCT.md), and [contribution guidelines](.github/CONTRIBUTING.md).
+
+![Banner](https://user-images.githubusercontent.com/2829600/77233209-f86aae80-6b9d-11ea-9cef-81501c9e858d.png)
+
+<p align="center">
+<a href="https://github.com/GrahamCampbell/Result-Type/actions?query=workflow%3ATests"><img src="https://img.shields.io/github/actions/workflow/status/GrahamCampbell/Result-Type/tests.yml?label=Tests&style=flat-square" alt="Build Status"></img></a>
+<a href="https://github.styleci.io/repos/249026522"><img src="https://github.styleci.io/repos/249026522/shield" alt="StyleCI Status"></img></a>
+<a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-brightgreen?style=flat-square" alt="Software License"></img></a>
+<a href="https://packagist.org/packages/graham-campbell/result-type"><img src="https://img.shields.io/packagist/dt/graham-campbell/result-type?style=flat-square" alt="Packagist Downloads"></img></a>
+<a href="https://github.com/GrahamCampbell/Result-Type/releases"><img src="https://img.shields.io/github/release/GrahamCampbell/Result-Type?style=flat-square" alt="Latest Version"></img></a>
+</p>
+
+
+## Installation
+
+This version requires [PHP](https://www.php.net/) 7.2.5-8.5.
+
+To get the latest version, simply require the project using [Composer](https://getcomposer.org/):
+
+```bash
+$ composer require "graham-campbell/result-type:^1.1"
+```
+
+
+## Security
+
+If you discover a security vulnerability within this package, please send an email to security@tidelift.com. All security vulnerabilities will be promptly addressed. You may view our full security policy [here](https://github.com/GrahamCampbell/Result-Type/security/policy).
+
+
+## License
+
+Result Type is licensed under [The MIT License (MIT)](LICENSE).
+
+
+## For Enterprise
+
+Available as part of the Tidelift Subscription
+
+The maintainers of `graham-campbell/result-type` and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. [Learn more.](https://tidelift.com/subscription/pkg/packagist-graham-campbell-result-type?utm_source=packagist-graham-campbell-result-type&utm_medium=referral&utm_campaign=enterprise&utm_term=repo)

package/{src → out}/backend/_core/vendor/graham-campbell/result-type/composer.json

@@ -1,33 +1,33 @@
-{
-    "name": "graham-campbell/result-type",
-    "description": "An Implementation Of The Result Type",
-    "keywords": ["result", "result-type", "Result", "Result Type", "Result-Type", "Graham Campbell", "GrahamCampbell"],
-    "license": "MIT",
-    "authors": [
-        {
-            "name": "Graham Campbell",
-            "email": "hello@gjcampbell.co.uk",
-            "homepage": "https://github.com/GrahamCampbell"
-        }
-    ],
-    "require": {
-        "php": "^7.2.5 || ^8.0",
-        "phpoption/phpoption": "^1.9.5"
-    },
-    "require-dev": {
-        "phpunit/phpunit": "^8.5.41 || ^9.6.22 || ^10.5.45 || ^11.5.7"
-    },
-    "autoload": {
-        "psr-4": {
-            "GrahamCampbell\\ResultType\\": "src/"
-        }
-    },
-    "autoload-dev": {
-        "psr-4": {
-            "GrahamCampbell\\Tests\\ResultType\\": "tests/"
-        }
-    },
-    "config": {
-        "preferred-install": "dist"
-    }
-}
+{
+    "name": "graham-campbell/result-type",
+    "description": "An Implementation Of The Result Type",
+    "keywords": ["result", "result-type", "Result", "Result Type", "Result-Type", "Graham Campbell", "GrahamCampbell"],
+    "license": "MIT",
+    "authors": [
+        {
+            "name": "Graham Campbell",
+            "email": "hello@gjcampbell.co.uk",
+            "homepage": "https://github.com/GrahamCampbell"
+        }
+    ],
+    "require": {
+        "php": "^7.2.5 || ^8.0",
+        "phpoption/phpoption": "^1.9.5"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "^8.5.41 || ^9.6.22 || ^10.5.45 || ^11.5.7"
+    },
+    "autoload": {
+        "psr-4": {
+            "GrahamCampbell\\ResultType\\": "src/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "GrahamCampbell\\Tests\\ResultType\\": "tests/"
+        }
+    },
+    "config": {
+        "preferred-install": "dist"
+    }
+}

package/out/backend/_core/vendor/graham-campbell/result-type/phpunit.xml.dist

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" backupGlobals="false" beStrictAboutTestsThatDoNotTestAnything="true" beStrictAboutOutputDuringTests="true" bootstrap="vendor/autoload.php" colors="true" failOnRisky="true" failOnWarning="true" processIsolation="false" stopOnError="false" stopOnFailure="false" xsi:noNamespaceSchemaLocation="https://schema.phpunit.de/10.4/phpunit.xsd">
+  <testsuites>
+    <testsuite name="Result Type Test Suite">
+      <directory suffix="Test.php">./tests</directory>
+    </testsuite>
+  </testsuites>
+  <source>
+    <include>
+      <directory suffix=".php">./src</directory>
+    </include>
+  </source>
+</phpunit>