Merge pull request #11 from initstring/remove-enc-key

fix: Remove unused enc key env var

Author: initstring

.github/workflows/ci.yml

@@ -25,7 +25,6 @@ jobs:
         env:
           # Minimal env so prisma/next tooling and env schema are happy
           AUTH_SECRET: dummy_auth_secret_abcdefghijklmnopqrstuvwxyz_123456
-          ENCRYPTION_KEY: y965hZIGKilU0QsFD9VRoT4OAtgnRQx2F0nzXGQDPuU=
           DATABASE_URL: file:./dev.db
           NODE_ENV: test
           NEXT_TELEMETRY_DISABLED: 1
@@ -34,7 +33,6 @@ jobs:
       - name: Tests with coverage
         env:
           AUTH_SECRET: dummy_auth_secret_abcdefghijklmnopqrstuvwxyz_123456
-          ENCRYPTION_KEY: y965hZIGKilU0QsFD9VRoT4OAtgnRQx2F0nzXGQDPuU=
           DATABASE_URL: file:./dev.db
           NODE_ENV: test
           NEXT_TELEMETRY_DISABLED: 1
@@ -50,7 +48,6 @@ jobs:
       - name: Build
         env:
           AUTH_SECRET: dummy_auth_secret_abcdefghijklmnopqrstuvwxyz_123456
-          ENCRYPTION_KEY: y965hZIGKilU0QsFD9VRoT4OAtgnRQx2F0nzXGQDPuU=
           DATABASE_URL: file:./dev.db
           NODE_ENV: production
           NEXT_TELEMETRY_DISABLED: 1

src/env.ts

@@ -29,19 +29,6 @@ export const env = createEnv({
     // Logging: default to debug in dev, info in prod; override with LOG_LEVEL
     LOG_LEVEL: z.enum(["fatal", "error", "warn", "info", "debug", "trace", "silent"]).optional(),
     AUTH_URL: z.string().url().optional(),
-    ENCRYPTION_KEY: z
-      .string()
-      .refine(
-        (val) => {
-          if (val.length === 32) return true;
-          try {
-            return Buffer.from(val, "base64").length === 32;
-          } catch {
-            return false;
-          }
-        },
-        "ENCRYPTION_KEY must be 32 bytes or a base64-encoded 32-byte value",
-      ),
     // Optional: toggle credentials provider (default enabled)
     AUTH_CREDENTIALS_ENABLED: z.enum(["true", "false"]).optional(),
     // Optional: Google OAuth client credentials (registers provider when present)
@@ -68,7 +55,6 @@ export const env = createEnv({
     NODE_ENV: process.env.NODE_ENV,
     LOG_LEVEL: process.env.LOG_LEVEL,
     AUTH_URL: process.env.AUTH_URL,
-    ENCRYPTION_KEY: process.env.ENCRYPTION_KEY,
     AUTH_CREDENTIALS_ENABLED: process.env.AUTH_CREDENTIALS_ENABLED,
     GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID,
     GOOGLE_CLIENT_SECRET: process.env.GOOGLE_CLIENT_SECRET,