From 427efa738788638d0bdc48bde5450864ad5a272f Mon Sep 17 00:00:00 2001
From: initstring <26131150+initstring@users.noreply.github.com>
Date: Sat, 20 Sep 2025 19:22:33 +1000
Subject: [PATCH] fix: Remove unused enc key env var

---
 .github/workflows/ci.yml |  3 ---
 src/env.ts               | 14 --------------
 2 files changed, 17 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e92c95b..f73a7fe 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,6 @@ jobs:
         env:
           # Minimal env so prisma/next tooling and env schema are happy
           AUTH_SECRET: dummy_auth_secret_abcdefghijklmnopqrstuvwxyz_123456
-          ENCRYPTION_KEY: y965hZIGKilU0QsFD9VRoT4OAtgnRQx2F0nzXGQDPuU=
           DATABASE_URL: file:./dev.db
           NODE_ENV: test
           NEXT_TELEMETRY_DISABLED: 1
@@ -34,7 +33,6 @@ jobs:
       - name: Tests with coverage
         env:
           AUTH_SECRET: dummy_auth_secret_abcdefghijklmnopqrstuvwxyz_123456
-          ENCRYPTION_KEY: y965hZIGKilU0QsFD9VRoT4OAtgnRQx2F0nzXGQDPuU=
           DATABASE_URL: file:./dev.db
           NODE_ENV: test
           NEXT_TELEMETRY_DISABLED: 1
@@ -50,7 +48,6 @@ jobs:
       - name: Build
         env:
           AUTH_SECRET: dummy_auth_secret_abcdefghijklmnopqrstuvwxyz_123456
-          ENCRYPTION_KEY: y965hZIGKilU0QsFD9VRoT4OAtgnRQx2F0nzXGQDPuU=
           DATABASE_URL: file:./dev.db
           NODE_ENV: production
           NEXT_TELEMETRY_DISABLED: 1
diff --git a/src/env.ts b/src/env.ts
index b6e7e34..26e182e 100644
--- a/src/env.ts
+++ b/src/env.ts
@@ -29,19 +29,6 @@ export const env = createEnv({
     // Logging: default to debug in dev, info in prod; override with LOG_LEVEL
     LOG_LEVEL: z.enum(["fatal", "error", "warn", "info", "debug", "trace", "silent"]).optional(),
     AUTH_URL: z.string().url().optional(),
-    ENCRYPTION_KEY: z
-      .string()
-      .refine(
-        (val) => {
-          if (val.length === 32) return true;
-          try {
-            return Buffer.from(val, "base64").length === 32;
-          } catch {
-            return false;
-          }
-        },
-        "ENCRYPTION_KEY must be 32 bytes or a base64-encoded 32-byte value",
-      ),
     // Optional: toggle credentials provider (default enabled)
     AUTH_CREDENTIALS_ENABLED: z.enum(["true", "false"]).optional(),
     // Optional: Google OAuth client credentials (registers provider when present)
@@ -68,7 +55,6 @@ export const env = createEnv({
     NODE_ENV: process.env.NODE_ENV,
     LOG_LEVEL: process.env.LOG_LEVEL,
     AUTH_URL: process.env.AUTH_URL,
-    ENCRYPTION_KEY: process.env.ENCRYPTION_KEY,
     AUTH_CREDENTIALS_ENABLED: process.env.AUTH_CREDENTIALS_ENABLED,
     GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID,
     GOOGLE_CLIENT_SECRET: process.env.GOOGLE_CLIENT_SECRET,