@de-otio/trellis 0.4.0

package/dist/lib/routes/upload-sessions.js

@@ -0,0 +1,268 @@
+"use strict";
+/**
+ * Upload Session Routes
+ *
+ * Handles upload session management for optimistic image uploads.
+ * Provides endpoints for creating, managing, and completing upload sessions.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadSessionRoutes = void 0;
+const cors_handler_1 = require("../cors-handler");
+const logger_1 = require("../logger");
+const middleware_1 = require("../middleware");
+const rate_limit_1 = require("../rate-limit");
+const secret_resolver_1 = require("../secret-resolver");
+const security_headers_1 = require("../security-headers");
+const session_manager_1 = require("../session-manager");
+const upload_session_handler_1 = require("../upload-session-handler");
+/**
+ * POST /api/upload-sessions
+ * Create a new upload session
+ */
+const createUploadSession = {
+    method: "POST",
+    path: "/api/upload-sessions",
+    handler: async (request, env, context) => {
+        const logger = logger_1.Logger.getInstance(env);
+        const securityHeaders = new security_headers_1.SecurityHeaders(env);
+        const sessionManager = new session_manager_1.SessionManager();
+        const rateLimiter = new rate_limit_1.RateLimiter();
+        const uploadSessionHandler = new upload_session_handler_1.UploadSessionHandler(env);
+        try {
+            // Authenticate user
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session?.userId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Rate limiting: 10 sessions per hour per user
+            const rateLimitResponse = await rateLimiter.applyRateLimitKV(env, request, "/api/upload-sessions", 10, // 10 requests
+            3600, // per hour
+            session.userId);
+            if (rateLimitResponse) {
+                return securityHeaders.addSecurityHeaders(rateLimitResponse);
+            }
+            // Detect region
+            const { RegionDetector } = await Promise.resolve().then(() => __importStar(require("../region-detection")));
+            const regionDetector = new RegionDetector(env);
+            const region = await regionDetector.detectRegion(request, undefined, undefined);
+            // Create upload session
+            const result = await uploadSessionHandler.createSession(session.userId, region, env);
+            const response = securityHeaders.createSecureResponse(JSON.stringify(result), { status: 201, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(response, request, env);
+        }
+        catch (error) {
+            logger.error("Failed to create upload session", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+        }
+    },
+    middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+    description: "Create a new upload session for optimistic image uploads",
+};
+/**
+ * POST /api/upload-sessions/:id/media
+ * Add media to an upload session
+ */
+const addMediaToSession = {
+    method: "POST",
+    path: "/api/upload-sessions/:id/media",
+    handler: async (request, env, context) => {
+        const logger = logger_1.Logger.getInstance(env);
+        const securityHeaders = new security_headers_1.SecurityHeaders(env);
+        const sessionManager = new session_manager_1.SessionManager();
+        const uploadSessionHandler = new upload_session_handler_1.UploadSessionHandler(env);
+        try {
+            // Authenticate user
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session?.userId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Get session ID from params
+            const sessionId = context.params?.id;
+            if (!sessionId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Session ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Parse request body
+            let body;
+            try {
+                body = await request.json();
+            }
+            catch {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Invalid JSON body" }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            const { mediaId } = body;
+            if (!mediaId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "mediaId is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Detect region
+            const { RegionDetector } = await Promise.resolve().then(() => __importStar(require("../region-detection")));
+            const regionDetector = new RegionDetector(env);
+            const region = await regionDetector.detectRegion(request, undefined, undefined);
+            // Add media to session
+            const result = await uploadSessionHandler.addMediaToSession(sessionId, session.userId, mediaId, region, env);
+            if (!result.success) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: result.error }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            const response = securityHeaders.createSecureResponse(JSON.stringify(result), { status: 200, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(response, request, env);
+        }
+        catch (error) {
+            logger.error("Failed to add media to upload session", {
+                sessionId: context.params?.id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+        }
+    },
+    middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+    description: "Add media to an upload session",
+};
+/**
+ * POST /api/upload-sessions/:id/complete
+ * Complete an upload session
+ */
+const completeUploadSession = {
+    method: "POST",
+    path: "/api/upload-sessions/:id/complete",
+    handler: async (request, env, context) => {
+        const logger = logger_1.Logger.getInstance(env);
+        const securityHeaders = new security_headers_1.SecurityHeaders(env);
+        const sessionManager = new session_manager_1.SessionManager();
+        const uploadSessionHandler = new upload_session_handler_1.UploadSessionHandler(env);
+        try {
+            // Authenticate user
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session?.userId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Get session ID from params
+            const sessionId = context.params?.id;
+            if (!sessionId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Session ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Detect region
+            const { RegionDetector } = await Promise.resolve().then(() => __importStar(require("../region-detection")));
+            const regionDetector = new RegionDetector(env);
+            const region = await regionDetector.detectRegion(request, undefined, undefined);
+            // Complete session
+            const result = await uploadSessionHandler.completeSession(sessionId, session.userId, region, env);
+            if (!result.success) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: result.error }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            const response = securityHeaders.createSecureResponse(JSON.stringify(result), { status: 200, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(response, request, env);
+        }
+        catch (error) {
+            logger.error("Failed to complete upload session", {
+                sessionId: context.params?.id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+        }
+    },
+    middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+    description: "Complete an upload session and mark all media as attached",
+};
+/**
+ * POST /api/upload-sessions/:id/abandon
+ * Abandon an upload session
+ */
+const abandonUploadSession = {
+    method: "POST",
+    path: "/api/upload-sessions/:id/abandon",
+    handler: async (request, env, context) => {
+        const logger = logger_1.Logger.getInstance(env);
+        const securityHeaders = new security_headers_1.SecurityHeaders(env);
+        const sessionManager = new session_manager_1.SessionManager();
+        const uploadSessionHandler = new upload_session_handler_1.UploadSessionHandler(env);
+        try {
+            // Authenticate user
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session?.userId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Get session ID from params
+            const sessionId = context.params?.id;
+            if (!sessionId) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Session ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            // Detect region
+            const { RegionDetector } = await Promise.resolve().then(() => __importStar(require("../region-detection")));
+            const regionDetector = new RegionDetector(env);
+            const region = await regionDetector.detectRegion(request, undefined, undefined);
+            // Abandon session
+            const result = await uploadSessionHandler.abandonSession(sessionId, session.userId, region, env);
+            if (!result.success) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: result.error }), { status: 400, headers: { "content-type": "application/json" } });
+                return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+            }
+            const response = securityHeaders.createSecureResponse(JSON.stringify(result), { status: 200, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(response, request, env);
+        }
+        catch (error) {
+            logger.error("Failed to abandon upload session", {
+                sessionId: context.params?.id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+            return cors_handler_1.CorsHandler.addCorsHeaders(errorResponse, request, env);
+        }
+    },
+    middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+    description: "Abandon an upload session and mark all media as orphaned",
+};
+exports.uploadSessionRoutes = [
+    createUploadSession,
+    addMediaToSession,
+    completeUploadSession,
+    abandonUploadSession,
+];
+//# sourceMappingURL=upload-sessions.js.map

package/dist/lib/routes/upload-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-sessions.js","sourceRoot":"","sources":["../../../src/lib/routes/upload-sessions.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,kDAA8C;AAC9C,sCAAmC;AACnC,8CAA+D;AAC/D,8CAA4C;AAC5C,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AACpD,sEAAiE;AAGjE;;;GAGG;AACH,MAAM,mBAAmB,GAAU;IACjC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,wBAAW,EAAE,CAAC;QACtC,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,+CAA+C;YAC/C,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAC1D,GAAU,EACV,OAAO,EACP,sBAAsB,EACtB,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,CAAC,MAAM,CACf,CAAC;YAEF,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO,eAAe,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YAC/D,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,CACV,CAAC;YAEF,wBAAwB;YACxB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,aAAa,CACrD,OAAO,CAAC,MAAM,EACd,MAAM,EACN,GAAG,CACJ,CAAC;YAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;IAChD,WAAW,EAAE,0DAA0D;CACxE,CAAC;AAEF;;;GAGG;AACH,MAAM,iBAAiB,GAAU;IAC/B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,gCAAgC;IACtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;QAC5C,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,6BAA6B;YAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,qBAAqB;YACrB,IAAI,IAAS,CAAC;YACd,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAC9C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAChD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,CACV,CAAC;YAEF,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,iBAAiB,CACzD,SAAS,EACT,OAAO,CAAC,MAAM,EACd,OAAO,EACP,MAAM,EACN,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EACvC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACpD,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;gBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;IAChD,WAAW,EAAE,gCAAgC;CAC9C,CAAC;AAEF;;;GAGG;AACH,MAAM,qBAAqB,GAAU;IACnC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,mCAAmC;IACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;QAC5C,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,6BAA6B;YAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,CACV,CAAC;YAEF,mBAAmB;YACnB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,eAAe,CACvD,SAAS,EACT,OAAO,CAAC,MAAM,EACd,MAAM,EACN,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EACvC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;gBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;IAChD,WAAW,EAAE,2DAA2D;CACzE,CAAC;AAEF;;;GAGG;AACH,MAAM,oBAAoB,GAAU;IAClC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,kCAAkC;IACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;QAC5C,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,GAAG,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,6BAA6B;YAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,CACV,CAAC;YAEF,kBAAkB;YAClB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,cAAc,CACtD,SAAS,EACT,OAAO,CAAC,MAAM,EACd,MAAM,EACN,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EACvC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAC/C,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;gBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,0BAAW,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;IAChD,WAAW,EAAE,0DAA0D;CACxE,CAAC;AAEW,QAAA,mBAAmB,GAAY;IAC1C,mBAAmB;IACnB,iBAAiB;IACjB,qBAAqB;IACrB,oBAAoB;CACrB,CAAC"}

package/dist/lib/routes/user.d.ts

@@ -0,0 +1,8 @@
+/**
+ * User Routes
+ *
+ * Routes for user profile management
+ */
+import type { Route } from "./types";
+export declare const userRoutes: Route[];
+//# sourceMappingURL=user.d.ts.map

package/dist/lib/routes/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/user.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,UAAU,EAAE,KAAK,EAyY7B,CAAC"}

package/dist/lib/routes/user.js

@@ -0,0 +1,287 @@
+"use strict";
+/**
+ * User Routes
+ *
+ * Routes for user profile management
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userRoutes = void 0;
+const worker_1 = require("../../worker");
+const database_connection_manager_1 = require("../database-connection-manager");
+const db_query_helper_1 = require("../db-query-helper");
+const ip_scrubber_1 = require("../ip-scrubber");
+const logger_1 = require("../logger");
+const middleware_1 = require("../middleware");
+const region_detection_1 = require("../region-detection");
+const secret_resolver_1 = require("../secret-resolver");
+const security_headers_1 = require("../security-headers");
+const session_manager_1 = require("../session-manager");
+const validation_1 = require("../validation");
+exports.userRoutes = [
+    {
+        path: "/api/user/profile",
+        method: "PATCH",
+        handler: async (request, env) => {
+            const sessionManager = new session_manager_1.SessionManager();
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+            try {
+                // Parse request body
+                const body = (await request.json());
+                const { stealth_mode } = body;
+                // Validate input - stealth_mode must be boolean if provided
+                if (stealth_mode !== undefined && typeof stealth_mode !== "boolean") {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                        error: "Invalid input: stealth_mode must be a boolean",
+                    }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Update user profile
+                const updatedUser = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.user.update({
+                        where: { id: session.userId },
+                        data: {
+                            ...(stealth_mode !== undefined && {
+                                stealthMode: stealth_mode,
+                            }),
+                        },
+                        select: {
+                            id: true,
+                            email: true,
+                            role: true,
+                            stealthMode: true,
+                            actorUri: true,
+                            handle: true,
+                            createdAt: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "updateUserProfile",
+                        userId: session.userId,
+                    },
+                });
+                // Format response to match Flutter expectations
+                const response = securityHeaders.createSecureResponse(JSON.stringify({
+                    id: updatedUser.id,
+                    email: updatedUser.email,
+                    role: updatedUser.role,
+                    stealth_mode: updatedUser.stealthMode,
+                    actor_uri: updatedUser.actorUri,
+                    handle: updatedUser.handle,
+                    created_at: updatedUser.createdAt.toISOString(),
+                }), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[User] Error updating profile:", error);
+                // Handle not found error
+                if (error.code === "P2025" ||
+                    error.message?.includes("Record to update not found")) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "User not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Handle other errors
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Failed to update profile" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Update user profile settings",
+    },
+    {
+        path: "/api/user/region-preference",
+        method: "POST",
+        handler: async (request, env) => {
+            const sessionManager = new session_manager_1.SessionManager();
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+            try {
+                // Parse request body
+                const body = await request.json();
+                const { region } = body;
+                // Validate region
+                if (!region || typeof region !== "string") {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                        error: "Invalid input: region is required and must be a string",
+                    }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                if (!(0, region_detection_1.isValidRegion)(region)) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                        error: "Invalid region. Valid regions: US, EU, CN",
+                    }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region for database connection (use detected region, not user preference)
+                const detectedRegion = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Update user region preference
+                // Note: We update in the detected region's database, but the user's dataRegion stays the same
+                const updatedUser = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, detectedRegion, env, async (db) => {
+                    return db.user.update({
+                        where: { id: session.userId },
+                        data: {
+                            region, // Update user preference
+                            // Note: dataRegion is NOT changed - it tracks where data is stored
+                        },
+                        select: {
+                            id: true,
+                            email: true,
+                            region: true,
+                            dataRegion: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "updateUserRegionPreference",
+                        userId: session.userId,
+                    },
+                });
+                // PHASE 3: Invalidate region cache when user changes region preference
+                // This ensures cached region data is updated immediately
+                if (env.FOLLOWERS_KV) {
+                    try {
+                        // Invalidate region cache
+                        await env.FOLLOWERS_KV.delete(`region:${session.userId}`);
+                        // Invalidate validation cache (forces re-validation on next request)
+                        await env.FOLLOWERS_KV.delete(`region:validation:${session.userId}`);
+                        logger.debug("[UserRoutes] Invalidated region cache on preference change", {
+                            userId: session.userId,
+                            newRegion: region,
+                        });
+                    }
+                    catch (error) {
+                        logger.warn("[UserRoutes] Failed to invalidate region cache", {
+                            userId: session.userId,
+                            error: error.message,
+                        });
+                        // Non-critical - cache will be updated on next request
+                    }
+                }
+                // Note: Session userRegion will be updated on next request
+                // For immediate update, we could update session here, but it's not critical
+                // Format response
+                const response = securityHeaders.createSecureResponse(JSON.stringify({
+                    success: true,
+                    region: updatedUser.region,
+                    data_region: updatedUser.dataRegion,
+                }), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[UserRoutes] Error updating region preference:", error);
+                const validator = new validation_1.Validator();
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: validator.sanitizeError(error) }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Update user region preference",
+    },
+    {
+        path: "/api/user/cross-region-consent",
+        method: "POST",
+        handler: async (request, env) => {
+            const sessionManager = new session_manager_1.SessionManager();
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+            try {
+                // Parse request body
+                const body = (await request.json());
+                // Validate regions
+                if (!(0, region_detection_1.isValidRegion)(body.dataRegion) ||
+                    !(0, region_detection_1.isValidRegion)(body.accessRegion)) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Invalid region" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region for database connection (use accessRegion to store consent)
+                const region = body.accessRegion;
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Get user's actual dataRegion
+                const user = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.user.findUnique({
+                        where: { id: session.userId },
+                        select: { dataRegion: true },
+                    });
+                }, db_query_helper_1.QueryTimeoutPresets.USER_FACING);
+                if (!user) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "User not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Verify dataRegion matches
+                if (user.dataRegion !== body.dataRegion) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Data region mismatch" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Upsert consent record
+                const ipAddress = (0, ip_scrubber_1.getIPAddress)(request);
+                const userAgent = request.headers.get("User-Agent") || undefined;
+                const consent = (await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.crossRegionConsent.upsert({
+                        where: {
+                            userId_dataRegion_accessRegion: {
+                                userId: session.userId,
+                                dataRegion: body.dataRegion,
+                                accessRegion: body.accessRegion,
+                            },
+                        },
+                        create: {
+                            userId: session.userId,
+                            dataRegion: body.dataRegion,
+                            accessRegion: body.accessRegion,
+                            consented: body.consented,
+                            consentedAt: body.consented ? new Date() : null,
+                            withdrawnAt: body.consented ? null : new Date(),
+                            ipAddress,
+                            userAgent,
+                        },
+                        update: {
+                            consented: body.consented,
+                            consentedAt: body.consented ? new Date() : null,
+                            withdrawnAt: body.consented ? null : new Date(),
+                            ipAddress,
+                            userAgent,
+                        },
+                    });
+                }, db_query_helper_1.QueryTimeoutPresets.USER_FACING));
+                const successResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                    success: true,
+                    consented: consent.consented,
+                    dataRegion: consent.dataRegion,
+                    accessRegion: consent.accessRegion,
+                }), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(successResponse, request, env);
+            }
+            catch (error) {
+                logger.error("[UserRoutes] Error recording cross-region consent:", error);
+                const validator = new validation_1.Validator();
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: validator.sanitizeError(error) }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Record user consent for cross-region data access",
+    },
+];
+//# sourceMappingURL=user.js.map

package/dist/lib/routes/user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../src/lib/routes/user.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,yCAA8C;AAC9C,gFAAiF;AACjF,wDAG4B;AAC5B,gDAA8C;AAC9C,sCAAmC;AACnC,8CAA+D;AAC/D,0DAAsE;AACtE,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AACpD,8CAA0C;AAG7B,QAAA,UAAU,GAAY;IACjC;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC;gBACH,qBAAqB;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA+B,CAAC;gBAClE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;gBAE9B,4DAA4D;gBAC5D,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpE,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,+CAA+C;qBACvD,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,sBAAsB;gBACtB,MAAM,WAAW,GAAG,MAAM,IAAA,0CAAwB,EAChD,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;wBACpB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;wBAC7B,IAAI,EAAE;4BACJ,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI;gCAChC,WAAW,EAAE,YAAY;6BAC1B,CAAC;yBACH;wBACD,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI;4BACR,KAAK,EAAE,IAAI;4BACX,IAAI,EAAE,IAAI;4BACV,WAAW,EAAE,IAAI;4BACjB,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,SAAS,EAAE,IAAI;yBAChB;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,mBAAmB;wBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB;iBACF,CACF,CAAC;gBAEF,gDAAgD;gBAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,YAAY,EAAE,WAAW,CAAC,WAAW;oBACrC,SAAS,EAAE,WAAW,CAAC,QAAQ;oBAC/B,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,UAAU,EAAE,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE;iBAChD,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;gBAEtD,yBAAyB;gBACzB,IACE,KAAK,CAAC,IAAI,KAAK,OAAO;oBACtB,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EACrD,CAAC;oBACD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,sBAAsB;gBACtB,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,EACrD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC;gBACH,qBAAqB;gBACrB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,EAAE,MAAM,EAAE,GAAG,IAA2B,CAAC;gBAE/C,kBAAkB;gBAClB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC1C,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,wDAAwD;qBAChE,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,CAAC,IAAA,gCAAa,EAAC,MAAM,CAAC,EAAE,CAAC;oBAC3B,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,2CAA2C;qBACnD,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,gFAAgF;gBAChF,MAAM,cAAc,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACtD,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,gCAAgC;gBAChC,8FAA8F;gBAC9F,MAAM,WAAW,GAAG,MAAM,IAAA,0CAAwB,EAChD,SAAS,EACT,cAAc,EACd,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;wBACpB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;wBAC7B,IAAI,EAAE;4BACJ,MAAM,EAAE,yBAAyB;4BACjC,mEAAmE;yBACpE;wBACD,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI;4BACR,KAAK,EAAE,IAAI;4BACX,MAAM,EAAE,IAAI;4BACZ,UAAU,EAAE,IAAI;yBACjB;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,4BAA4B;wBACvC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB;iBACF,CACF,CAAC;gBAEF,uEAAuE;gBACvE,yDAAyD;gBACzD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC1D,qEAAqE;wBACrE,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAC3B,qBAAqB,OAAO,CAAC,MAAM,EAAE,CACtC,CAAC;wBACF,MAAM,CAAC,KAAK,CACV,4DAA4D,EAC5D;4BACE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,MAAM;yBAClB,CACF,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAU,EAAE,CAAC;wBACpB,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;4BAC5D,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,KAAK,EAAE,KAAK,CAAC,OAAO;yBACrB,CAAC,CAAC;wBACH,uDAAuD;oBACzD,CAAC;gBACH,CAAC;gBAED,2DAA2D;gBAC3D,4EAA4E;gBAE5E,kBAAkB;gBAClB,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC;oBACb,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,WAAW,EAAE,WAAW,CAAC,UAAU;iBACpC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;gBACtE,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;gBAClC,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC;gBACH,qBAAqB;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAIjC,CAAC;gBAEF,mBAAmB;gBACnB,IACE,CAAC,IAAA,gCAAa,EAAC,IAAI,CAAC,UAAU,CAAC;oBAC/B,CAAC,IAAA,gCAAa,EAAC,IAAI,CAAC,YAAY,CAAC,EACjC,CAAC;oBACD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,yEAAyE;gBACzE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAmB,CAAC;gBACxC,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,+BAA+B;gBAC/B,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBACxB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;wBAC7B,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;qBAC7B,CAAC,CAAC;gBACL,CAAC,EACD,qCAAmB,CAAC,WAAW,CAChC,CAAC;gBAEF,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,4BAA4B;gBAC5B,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;oBACxC,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,EACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,wBAAwB;gBACxB,MAAM,SAAS,GAAG,IAAA,0BAAY,EAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;gBAEjE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAA,0CAAwB,EAC7C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;wBAClC,KAAK,EAAE;4BACL,8BAA8B,EAAE;gCAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,UAAU,EAAE,IAAI,CAAC,UAAU;gCAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;6BAChC;yBACF;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;4BAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;4BAC/C,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;4BAC/C,SAAS;4BACT,SAAS;yBACV;wBACD,MAAM,EAAE;4BACN,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;4BAC/C,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;4BAC/C,SAAS;4BACT,SAAS;yBACV;qBACF,CAAC,CAAC;gBACL,CAAC,EACD,qCAAmB,CAAC,WAAW,CAChC,CAIA,CAAC;gBAEF,MAAM,eAAe,GAAG,eAAe,CAAC,oBAAoB,CAC1D,IAAI,CAAC,SAAS,CAAC;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;iBACnC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,oDAAoD,EACpD,KAAK,CACN,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;gBAClC,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,kDAAkD;KAChE;CACF,CAAC"}

package/dist/lib/routes-all.d.ts

@@ -0,0 +1,9 @@
+/**
+ * All Routes
+ *
+ * Comprehensive route registry that delegates to existing handlers.
+ * This provides route abstraction benefits while keeping handler logic intact.
+ */
+import type { Route } from "./routes";
+export declare function getAllRoutes(): Route[];
+//# sourceMappingURL=routes-all.d.ts.map

package/dist/lib/routes-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-all.d.ts","sourceRoot":"","sources":["../../src/lib/routes-all.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAmItC,wBAAgB,YAAY,IAAI,KAAK,EAAE,CAwEtC"}