@de-otio/trellis 0.4.0

package/dist/lib/routes/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/lib/routes/notifications.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,gEAA2D;AAC3D,sCAAmC;AACnC,8CAIuB;AACvB,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AACpD,8CAA0C;AAC1C,kEAAyF;AACzF,0FAAqF;AAGxE,QAAA,mBAAmB,GAAY;IAC1C,iEAAiE;IACjE;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;gBACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;gBAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAC3C,OAAO,CAAC,MAAM,EACd,MAAM,EACN,KAAK,EACL,GAAG,CACJ,CAAC;gBAEF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACnC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;gBACpD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,uCAAiB,GAAE;YACnB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,oBAAoB;KAClC;IAED,sEAAsE;IACtE;QACE,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,QAAQ;qBAC5B,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;qBAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAErB,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;gBAE5D,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,gDAAyB,EAAE,CAAC;oBAC/C,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;gBAC3D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,2BAA2B;KACzC;IAED,oEAAoE;IACpE;QACE,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAE/C,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,gCAAgC;KAC9C;IAED,yDAAyD;IACzD;QACE,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CACzC,OAAO,CAAC,MAAM,EACd,OAAO,EACP,GAAG,CACJ,CAAC;gBAEF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACnC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,uCAAiB,GAAE;YACnB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC3D;QACD,WAAW,EAAE,+BAA+B;KAC7C;IAED,oEAAoE;IACpE;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,IAAI,iEAA8B,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,cAAc,CAChD,OAAO,CAAC,MAAM,EACd,GAAG,CACJ,CAAC;gBACF,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;gBAC/D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,8BAA8B;KAC5C;IAED,uEAAuE;IACvE;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,IAAI,iEAA8B,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;gBAE3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,iBAAiB,CACnD,OAAO,CAAC,MAAM,EACd,OAAO,EACP,IAAW,EACX,GAAG,CACJ,CAAC;gBACF,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;oBACjC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,kBAAkB;wBACzB,OAAO,EAAE,mBAAmB;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}

package/dist/lib/routes/orphaned-media-health.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Orphaned Media Health Check Routes
+ *
+ * Provides health monitoring endpoints for the orphaned media cleanup system.
+ * Used by monitoring tools to verify cleanup jobs are running correctly.
+ */
+import type { Route } from "./types";
+export declare const orphanedMediaHealthRoutes: Route[];
+//# sourceMappingURL=orphaned-media-health.d.ts.map

package/dist/lib/routes/orphaned-media-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphaned-media-health.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/orphaned-media-health.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAqHrC,eAAO,MAAM,yBAAyB,EAAE,KAAK,EAe5C,CAAC"}

package/dist/lib/routes/orphaned-media-health.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * Orphaned Media Health Check Routes
+ *
+ * Provides health monitoring endpoints for the orphaned media cleanup system.
+ * Used by monitoring tools to verify cleanup jobs are running correctly.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.orphanedMediaHealthRoutes = void 0;
+const logger_1 = require("../logger");
+const orphaned_media_monitor_1 = require("../scheduled/orphaned-media-monitor");
+const security_headers_1 = require("../security-headers");
+/**
+ * GET /api/admin/orphaned-media/health
+ *
+ * Returns health status of orphaned media cleanup system.
+ * Checks:
+ * - Last run time (should run daily)
+ * - Error rates (should be low)
+ * - Backlog size (should not grow indefinitely)
+ *
+ * Response:
+ * {
+ *   healthy: boolean,
+ *   lastRun: string | null,
+ *   hoursSinceLastRun: number | null,
+ *   backlogEstimate: number,
+ *   errorRate: number,
+ *   issues: string[]
+ * }
+ */
+async function getHealthStatus(request, env) {
+    const logger = logger_1.Logger.getInstance(env);
+    const securityHeaders = new security_headers_1.SecurityHeaders(env);
+    try {
+        const monitor = new orphaned_media_monitor_1.OrphanedMediaMonitor(env);
+        const health = await monitor.checkHealth(env);
+        // Return appropriate status code based on health
+        const statusCode = health.healthy ? 200 : 503;
+        return securityHeaders.createSecureResponse(JSON.stringify(health, null, 2), {
+            status: statusCode,
+            headers: {
+                "content-type": "application/json",
+                "Cache-Control": "no-cache, no-store, must-revalidate",
+            },
+        });
+    }
+    catch (error) {
+        logger.error("[OrphanedMediaHealth] Health check failed", {
+            error: error.message,
+        });
+        return securityHeaders.createSecureResponse(JSON.stringify({
+            healthy: false,
+            error: "Health check failed",
+            message: error.message,
+        }), {
+            status: 500,
+            headers: { "content-type": "application/json" },
+        });
+    }
+}
+/**
+ * GET /api/admin/orphaned-media/backlog
+ *
+ * Returns current backlog size by querying database.
+ * More expensive than health check, use sparingly.
+ *
+ * Response:
+ * {
+ *   orphanedCount: number,      // Ready for soft delete
+ *   softDeletedCount: number,   // Ready for R2 deletion
+ *   timestamp: string
+ * }
+ */
+async function getBacklogSize(request, env) {
+    const logger = logger_1.Logger.getInstance(env);
+    const securityHeaders = new security_headers_1.SecurityHeaders(env);
+    try {
+        const monitor = new orphaned_media_monitor_1.OrphanedMediaMonitor(env);
+        const backlog = await monitor.getBacklogSize(env);
+        return securityHeaders.createSecureResponse(JSON.stringify({
+            ...backlog,
+            timestamp: new Date().toISOString(),
+        }, null, 2), {
+            status: 200,
+            headers: {
+                "content-type": "application/json",
+                "Cache-Control": "no-cache, no-store, must-revalidate",
+            },
+        });
+    }
+    catch (error) {
+        logger.error("[OrphanedMediaHealth] Backlog check failed", {
+            error: error.message,
+        });
+        return securityHeaders.createSecureResponse(JSON.stringify({
+            error: "Backlog check failed",
+            message: error.message,
+        }), {
+            status: 500,
+            headers: { "content-type": "application/json" },
+        });
+    }
+}
+exports.orphanedMediaHealthRoutes = [
+    {
+        path: "/api/admin/orphaned-media/health",
+        method: "GET",
+        handler: getHealthStatus,
+        middleware: [],
+        description: "Get orphaned media cleanup health status",
+    },
+    {
+        path: "/api/admin/orphaned-media/backlog",
+        method: "GET",
+        handler: getBacklogSize,
+        middleware: [],
+        description: "Get orphaned media backlog size",
+    },
+];
+//# sourceMappingURL=orphaned-media-health.js.map

package/dist/lib/routes/orphaned-media-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphaned-media-health.js","sourceRoot":"","sources":["../../../src/lib/routes/orphaned-media-health.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,sCAAmC;AACnC,gFAA2E;AAC3E,0DAAsD;AAGtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,GAAQ;IACvD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAE9C,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAE9C,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAC/B;YACE,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,qCAAqC;aACvD;SACF,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACxD,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,EACF;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,cAAc,CAAC,OAAgB,EAAE,GAAQ;IACtD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAElD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CACZ;YACE,GAAG,OAAO;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,IAAI,EACJ,CAAC,CACF,EACD;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,qCAAqC;aACvD;SACF,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;YACzD,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,EACF;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAEY,QAAA,yBAAyB,GAAY;IAChD;QACE,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,eAAe;QACxB,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}

package/dist/lib/routes/orphaned-media.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Orphaned Media Routes
+ *
+ * Handles marking media as orphaned for optimistic image uploads.
+ */
+import type { Route } from "./types";
+export declare const orphanedMediaRoutes: Route[];
+//# sourceMappingURL=orphaned-media.d.ts.map

package/dist/lib/routes/orphaned-media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphaned-media.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/orphaned-media.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAuGrC,eAAO,MAAM,mBAAmB,EAAE,KAAK,EAAwB,CAAC"}

package/dist/lib/routes/orphaned-media.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * Orphaned Media Routes
+ *
+ * Handles marking media as orphaned for optimistic image uploads.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.orphanedMediaRoutes = void 0;
+const cors_handler_1 = require("../cors-handler");
+const logger_1 = require("../logger");
+const middleware_1 = require("../middleware");
+const secret_resolver_1 = require("../secret-resolver");
+const security_headers_1 = require("../security-headers");
+const session_manager_1 = require("../session-manager");
+const orphaned_media_handler_1 = require("../orphaned-media-handler");
+/**
+ * POST /api/media/:id/mark-orphaned
+ * Mark a media file as orphaned
+ */
+const markMediaOrphaned = {
+    method: "POST",
+    path: "/api/media/:id/mark-orphaned",
+    handler: async (request, env, context) => {
+        const logger = logger_1.Logger.getInstance(env);
+        const securityHeaders = new security_headers_1.SecurityHeaders(env);
+        const sessionManager = new session_manager_1.SessionManager();
+        const orphanedMediaHandler = new orphaned_media_handler_1.OrphanedMediaHandler(env);
+        try {
+            // Authenticate user
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session?.userId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Get media ID from params
+            const mediaId = context.params?.id;
+            if (!mediaId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Media ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Detect region
+            const { RegionDetector } = await Promise.resolve().then(() => __importStar(require("../region-detection")));
+            const regionDetector = new RegionDetector(env);
+            const region = await regionDetector.detectRegion(request, undefined, undefined);
+            // Mark media as orphaned with timeout
+            const timeoutPromise = new Promise((_, reject) => {
+                setTimeout(() => reject(new Error("Request timeout")), 5000);
+            });
+            const resultPromise = orphanedMediaHandler.markMediaAsOrphaned(mediaId, session.userId, region, env);
+            const result = await Promise.race([resultPromise, timeoutPromise]);
+            if (!result.success) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: result.error }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            const response = securityHeaders.createSecureResponse(JSON.stringify(result), { status: 200, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(response, request, env);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message === "Request timeout") {
+                logger.warn("Mark media as orphaned request timeout", {
+                    mediaId: context.params?.id,
+                });
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Request timeout" }), { status: 504, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            logger.error("Failed to mark media as orphaned", {
+                mediaId: context.params?.id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+        }
+    },
+    middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+    description: "Mark a media file as orphaned",
+};
+exports.orphanedMediaRoutes = [markMediaOrphaned];
+//# sourceMappingURL=orphaned-media.js.map

package/dist/lib/routes/orphaned-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphaned-media.js","sourceRoot":"","sources":["../../../src/lib/routes/orphaned-media.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,kDAA8C;AAC9C,sCAAmC;AACnC,8CAA+D;AAC/D,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AACpD,sEAAiE;AAGjE;;;GAGG;AACH,MAAM,iBAAiB,GAAU;IAC/B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,8BAA8B;IACpC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;QAC5C,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,2BAA2B;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,EACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,CACV,CAAC;YAEF,sCAAsC;YACtC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,oBAAoB,CAAC,mBAAmB,CAC5D,OAAO,EACP,OAAO,CAAC,MAAM,EACd,MAAM,EACN,GAAG,CACJ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;YAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EACvC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;oBACpD,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;iBAC5B,CAAC,CAAC;gBACH,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAC5C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAC/C,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;gBAC3B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;IAChD,WAAW,EAAE,+BAA+B;CAC7C,CAAC;AAEW,QAAA,mBAAmB,GAAY,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/lib/routes/out.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Out Redirector Routes
+ *
+ * Handles safe link redirection with security warnings for risky links.
+ * This endpoint acts as an intermediary between users and external links,
+ * providing warnings for unknown or suspicious domains.
+ */
+import type { Route } from "./types";
+export interface Env {
+    DATABASE_URL: string;
+    US_DATABASE_URL?: string;
+    EU_DATABASE_URL?: string;
+    CN_DATABASE_URL?: string;
+    DEFAULT_REGION?: string;
+}
+export declare const outRoutes: Route[];
+//# sourceMappingURL=out.d.ts.map

package/dist/lib/routes/out.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"out.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/out.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,WAAW,GAAG;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAkPD,eAAO,MAAM,SAAS,EAAE,KAAK,EAoJ5B,CAAC"}

package/dist/lib/routes/out.js

@@ -0,0 +1,339 @@
+"use strict";
+/**
+ * Out Redirector Routes
+ *
+ * Handles safe link redirection with security warnings for risky links.
+ * This endpoint acts as an intermediary between users and external links,
+ * providing warnings for unknown or suspicious domains.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.outRoutes = void 0;
+const domain_reputation_service_1 = require("../domain-reputation-service");
+const link_security_handler_1 = require("../link-security-handler");
+const logger_1 = require("../logger");
+const middleware_1 = require("../middleware");
+const rate_limit_1 = require("../rate-limit");
+const security_headers_1 = require("../security-headers");
+/**
+ * HTML template for warning page
+ */
+function getWarningPageHtml(url, domain, reason) {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Warning: External Link</title>
+  <style>
+    * {
+      margin: 0;
+      padding: 0;
+      box-sizing: border-box;
+    }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
+      background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      padding: 20px;
+    }
+    .container {
+      background: white;
+      border-radius: 12px;
+      box-shadow: 0 20px 60px rgba(0, 0, 0, 0.3);
+      max-width: 500px;
+      width: 100%;
+      padding: 40px;
+      text-align: center;
+    }
+    .warning-icon {
+      font-size: 64px;
+      margin-bottom: 20px;
+    }
+    h1 {
+      color: #333;
+      margin-bottom: 16px;
+      font-size: 24px;
+    }
+    .message {
+      color: #666;
+      margin-bottom: 24px;
+      line-height: 1.6;
+    }
+    .url-display {
+      background: #f5f5f5;
+      border-radius: 8px;
+      padding: 16px;
+      margin-bottom: 24px;
+      word-break: break-all;
+      font-family: monospace;
+      font-size: 14px;
+      color: #333;
+    }
+    .domain {
+      font-weight: bold;
+      color: #d97706;
+    }
+    .buttons {
+      display: flex;
+      gap: 12px;
+      flex-direction: column;
+    }
+    button {
+      padding: 14px 28px;
+      border: none;
+      border-radius: 8px;
+      font-size: 16px;
+      font-weight: 600;
+      cursor: pointer;
+      transition: all 0.2s;
+    }
+    .continue-btn {
+      background: #667eea;
+      color: white;
+    }
+    .continue-btn:hover {
+      background: #5568d3;
+      transform: translateY(-1px);
+      box-shadow: 0 4px 12px rgba(102, 126, 234, 0.4);
+    }
+    .cancel-btn {
+      background: #e5e7eb;
+      color: #374151;
+    }
+    .cancel-btn:hover {
+      background: #d1d5db;
+    }
+    .reason {
+      background: #fef3c7;
+      border-left: 4px solid #f59e0b;
+      padding: 12px;
+      margin-bottom: 24px;
+      text-align: left;
+      border-radius: 4px;
+      font-size: 14px;
+      color: #92400e;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="warning-icon">⚠️</div>
+    <h1>Warning: External Link</h1>
+    <p class="message">
+      You are about to visit a link from an unknown or suspicious domain.
+      Please proceed with caution.
+    </p>
+    ${reason ? `<div class="reason"><strong>Reason:</strong> ${reason}</div>` : ""}
+    <div class="url-display">
+      <div class="domain">${escapeHtml(domain)}</div>
+      <div style="margin-top: 8px; font-size: 12px; color: #666;">${escapeHtml(url)}</div>
+    </div>
+    <div class="buttons">
+      <button class="continue-btn" onclick="window.location.href='${escapeHtml(url)}'">
+        Continue to Site
+      </button>
+      <button class="cancel-btn" onclick="window.history.back()">
+        Go Back
+      </button>
+    </div>
+  </div>
+</body>
+</html>`;
+}
+/**
+ * HTML template for blocked page
+ */
+function getBlockedPageHtml(url, reason) {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Link Blocked</title>
+  <style>
+    * {
+      margin: 0;
+      padding: 0;
+      box-sizing: border-box;
+    }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
+      background: linear-gradient(135deg, #ef4444 0%, #dc2626 100%);
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      padding: 20px;
+    }
+    .container {
+      background: white;
+      border-radius: 12px;
+      box-shadow: 0 20px 60px rgba(0, 0, 0, 0.3);
+      max-width: 500px;
+      width: 100%;
+      padding: 40px;
+      text-align: center;
+    }
+    .blocked-icon {
+      font-size: 64px;
+      margin-bottom: 20px;
+    }
+    h1 {
+      color: #333;
+      margin-bottom: 16px;
+      font-size: 24px;
+    }
+    .message {
+      color: #666;
+      margin-bottom: 24px;
+      line-height: 1.6;
+    }
+    .reason {
+      background: #fee2e2;
+      border-left: 4px solid #ef4444;
+      padding: 12px;
+      margin-bottom: 24px;
+      text-align: left;
+      border-radius: 4px;
+      font-size: 14px;
+      color: #991b1b;
+    }
+    button {
+      padding: 14px 28px;
+      border: none;
+      border-radius: 8px;
+      font-size: 16px;
+      font-weight: 600;
+      cursor: pointer;
+      background: #e5e7eb;
+      color: #374151;
+      transition: all 0.2s;
+    }
+    button:hover {
+      background: #d1d5db;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="blocked-icon">🚫</div>
+    <h1>Link Blocked</h1>
+    <p class="message">
+      This link has been blocked for security reasons.
+    </p>
+    <div class="reason">
+      <strong>Reason:</strong> ${escapeHtml(reason)}
+    </div>
+    <button onclick="window.history.back()">
+      Go Back
+    </button>
+  </div>
+</body>
+</html>`;
+}
+/**
+ * Escape HTML to prevent XSS
+ */
+function escapeHtml(text) {
+    const map = {
+        "&": "&amp;",
+        "<": "&lt;",
+        ">": "&gt;",
+        '"': "&quot;",
+        "'": "&#039;",
+    };
+    return text.replace(/[&<>"']/g, (m) => map[m]);
+}
+exports.outRoutes = [
+    {
+        path: "/out",
+        method: "GET",
+        handler: async (request, env, { url: requestUrl }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const rateLimiter = new rate_limit_1.RateLimiter();
+            const linkSecurityHandler = new link_security_handler_1.LinkSecurityHandler(env);
+            const domainReputationService = new domain_reputation_service_1.DomainReputationService(env);
+            try {
+                // Parse URL parameter
+                const url = new URL(requestUrl);
+                const targetUrl = url.searchParams.get("url");
+                if (!targetUrl) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Missing url parameter" }), { status: 400, headers: { "content-type": "application/json" } });
+                }
+                // Apply rate limiting: 100 redirects per hour per IP
+                const clientIP = request.headers.get("CF-Connecting-IP") ||
+                    request.headers.get("X-Forwarded-For")?.split(",")[0] ||
+                    "unknown";
+                const rateLimitResponse = await rateLimiter.applyRateLimitKV(env, request, "/out", 100, 3600, clientIP);
+                if (rateLimitResponse) {
+                    return securityHeaders.addSecurityHeaders(rateLimitResponse);
+                }
+                // Validate and normalize URL
+                const normalized = linkSecurityHandler.normalizeUrl(targetUrl);
+                if (!normalized) {
+                    return securityHeaders.createSecureResponse(getBlockedPageHtml(targetUrl, "Invalid URL format"), {
+                        status: 403,
+                        headers: { "content-type": "text/html; charset=utf-8" },
+                    });
+                }
+                // Validate URL synchronously
+                const validation = linkSecurityHandler.validateUrlSync(targetUrl);
+                if (validation.status === link_security_handler_1.LinkStatus.BLOCKED) {
+                    logger.info(`[Out] Blocked link: ${targetUrl} - ${validation.reason}`);
+                    return securityHeaders.createSecureResponse(getBlockedPageHtml(targetUrl, validation.reason || "Link blocked for security reasons"), {
+                        status: 403,
+                        headers: { "content-type": "text/html; charset=utf-8" },
+                    });
+                }
+                // Check domain reputation
+                const region = env.DEFAULT_REGION || "EU";
+                const reputation = await domainReputationService.getReputation(normalized.domain, region, env);
+                // Determine final status based on reputation
+                let finalStatus = validation.status;
+                if (reputation.status === "blocked") {
+                    finalStatus = link_security_handler_1.LinkStatus.BLOCKED;
+                }
+                else if (reputation.status === "warning" ||
+                    validation.status === link_security_handler_1.LinkStatus.PENDING) {
+                    finalStatus = link_security_handler_1.LinkStatus.WARNING;
+                }
+                else if (reputation.status === "safe") {
+                    finalStatus = link_security_handler_1.LinkStatus.SAFE;
+                }
+                // Handle based on status
+                if (finalStatus === link_security_handler_1.LinkStatus.BLOCKED) {
+                    logger.info(`[Out] Blocked link (reputation): ${targetUrl} - domain: ${normalized.domain}`);
+                    return securityHeaders.createSecureResponse(getBlockedPageHtml(targetUrl, `Domain ${normalized.domain} is blocked`), {
+                        status: 403,
+                        headers: { "content-type": "text/html; charset=utf-8" },
+                    });
+                }
+                if (finalStatus === link_security_handler_1.LinkStatus.WARNING ||
+                    finalStatus === link_security_handler_1.LinkStatus.PENDING) {
+                    // Show warning page
+                    logger.info(`[Out] Warning page for: ${targetUrl} - domain: ${normalized.domain}`);
+                    return securityHeaders.createSecureResponse(getWarningPageHtml(normalized.normalized, normalized.domain, reputation.status === "warning"
+                        ? "Domain has low reputation"
+                        : undefined), {
+                        status: 200,
+                        headers: { "content-type": "text/html; charset=utf-8" },
+                    });
+                }
+                // Safe link - redirect directly
+                logger.info(`[Out] Safe redirect: ${targetUrl} - domain: ${normalized.domain}`);
+                return Response.redirect(normalized.normalized, 302);
+            }
+            catch (error) {
+                logger.error("[Out] Error processing redirect:", error);
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Failed to process link" }), { status: 500, headers: { "content-type": "application/json" } });
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Safe link redirector with security warnings",
+    },
+];
+//# sourceMappingURL=out.js.map