@de-otio/trellis 0.4.0

package/dist/lib/id-generator.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * ID Generator Utilities
+ *
+ * Generates secure, collision-resistant IDs for AT Protocol rkeys.
+ * Uses crypto.randomUUID() for security and collision resistance.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdGenerator = void 0;
+/**
+ * ID Generator class for generating secure random IDs
+ */
+class IdGenerator {
+    /**
+     * Generate a secure, random ID suitable for AT Protocol rkeys
+     *
+     * AT Protocol rkeys should be:
+     * - URL-safe (no special characters)
+     * - Collision-resistant
+     * - Unpredictable (security)
+     * - Short enough for URLs
+     *
+     * Format: base64url-encoded random bytes (22 characters)
+     */
+    generateRkey() {
+        // Generate 16 random bytes (128 bits of entropy)
+        const bytes = new Uint8Array(16);
+        crypto.getRandomValues(bytes);
+        // Convert to base64url (URL-safe base64)
+        // Remove padding and replace + with -, / with _
+        const bytesArray = Array.from(bytes);
+        const base64 = btoa(String.fromCharCode(...bytesArray))
+            .replace(/\+/g, "-")
+            .replace(/\//g, "_")
+            .replace(/=/g, "");
+        return base64;
+    }
+    /**
+     * Generate a prefixed ID (e.g., "dog-abc123")
+     * Useful for namespacing different record types
+     */
+    generatePrefixedRkey(prefix) {
+        // Validate prefix (must be URL-safe)
+        if (!/^[a-z0-9-]+$/.test(prefix)) {
+            throw new Error("Prefix must be lowercase alphanumeric with hyphens only");
+        }
+        return `${prefix}-${this.generateRkey()}`;
+    }
+}
+exports.IdGenerator = IdGenerator;
+//# sourceMappingURL=id-generator.js.map

package/dist/lib/id-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-generator.js","sourceRoot":"","sources":["../../src/lib/id-generator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH;;GAEG;AACH,MAAa,WAAW;IACtB;;;;;;;;;;OAUG;IACH,YAAY;QACV,iDAAiD;QACjD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE9B,yCAAyC;QACzC,gDAAgD;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC,CAAC;aACpD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAErB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,MAAc;QACjC,qCAAqC;QACrC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;IAC5C,CAAC;CACF;AA1CD,kCA0CC"}

package/dist/lib/input-sanitizer.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Input Sanitization
+ *
+ * Provides input sanitization utilities to prevent XSS attacks.
+ * Uses regex-based sanitization for Cloudflare Workers compatibility.
+ */
+/**
+ * Input Sanitizer utility class
+ */
+export declare class InputSanitizer {
+    /**
+     * Sanitize plain text input - removes all HTML tags
+     * Use this for user-generated text that should be plain text only
+     *
+     * @param input - The input string to sanitize
+     * @returns Sanitized string with all HTML removed
+     */
+    static sanitizeText(input: string): string;
+    /**
+     * Sanitize HTML input - allows safe HTML tags only
+     * Use this for user-generated content that may contain formatting
+     *
+     * @param input - The input string to sanitize
+     * @returns Sanitized string with only safe HTML tags
+     */
+    static sanitizeHTML(input: string): string;
+    /**
+     * Recursively sanitize JSON data
+     * Sanitizes all string values in objects and arrays
+     *
+     * @param data - The data to sanitize (can be any type)
+     * @returns Sanitized data with all strings sanitized
+     */
+    static sanitizeJSON(data: any): any;
+    /**
+     * Sanitize a specific field from a request body
+     * Useful for sanitizing specific fields while preserving others
+     *
+     * @param body - The request body object
+     * @param field - The field name to sanitize
+     * @param allowHTML - Whether to allow safe HTML (default: false, plain text only)
+     * @returns The body with the specified field sanitized
+     */
+    static sanitizeField(body: Record<string, any>, field: string, allowHTML?: boolean): Record<string, any>;
+    /**
+     * Sanitize multiple fields from a request body
+     *
+     * @param body - The request body object
+     * @param fields - Array of field names to sanitize
+     * @param allowHTML - Whether to allow safe HTML (default: false)
+     * @returns The body with specified fields sanitized
+     */
+    static sanitizeFields(body: Record<string, any>, fields: string[], allowHTML?: boolean): Record<string, any>;
+}
+//# sourceMappingURL=input-sanitizer.d.ts.map

package/dist/lib/input-sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-sanitizer.d.ts","sourceRoot":"","sources":["../../src/lib/input-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,qBAAa,cAAc;IACzB;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAyC1C;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAsC1C;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG;IAiCnC;;;;;;;;OAQG;IACH,MAAM,CAAC,aAAa,CAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,OAAe,GACzB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAiBtB;;;;;;;OAOG;IACH,MAAM,CAAC,cAAc,CACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,GAAE,OAAe,GACzB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAgBvB"}

package/dist/lib/input-sanitizer.js

@@ -0,0 +1,167 @@
+"use strict";
+/**
+ * Input Sanitization
+ *
+ * Provides input sanitization utilities to prevent XSS attacks.
+ * Uses regex-based sanitization for Cloudflare Workers compatibility.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InputSanitizer = void 0;
+/**
+ * Input Sanitizer utility class
+ */
+class InputSanitizer {
+    /**
+     * Sanitize plain text input - removes all HTML tags
+     * Use this for user-generated text that should be plain text only
+     *
+     * @param input - The input string to sanitize
+     * @returns Sanitized string with all HTML removed
+     */
+    static sanitizeText(input) {
+        // Handle non-string types safely
+        if (typeof input !== "string") {
+            // Symbols cannot be converted to string directly in some contexts
+            if (typeof input === "symbol") {
+                return "";
+            }
+            // For other types, try to convert safely
+            try {
+                return String(input);
+            }
+            catch {
+                // If conversion fails, return empty string
+                return "";
+            }
+        }
+        // First, remove script tags and their content (most dangerous)
+        // This regex matches <script>...</script> including all content between tags
+        let sanitized = input.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "");
+        // Remove style tags and their content
+        sanitized = sanitized.replace(/<style\b[^<]*(?:(?!<\/style>)<[^<]*)*<\/style>/gi, "");
+        // Remove all other HTML tags using regex (safe for Cloudflare Workers)
+        // This regex matches any HTML tag including attributes
+        sanitized = sanitized.replace(/<[^>]*>/g, "");
+        // Remove all HTML entities (numeric and named) for security
+        // This prevents XSS attacks via encoded entities
+        sanitized = sanitized.replace(/&#\d+;/g, "");
+        sanitized = sanitized.replace(/&[a-zA-Z]+;/g, "");
+        return sanitized;
+    }
+    /**
+     * Sanitize HTML input - allows safe HTML tags only
+     * Use this for user-generated content that may contain formatting
+     *
+     * @param input - The input string to sanitize
+     * @returns Sanitized string with only safe HTML tags
+     */
+    static sanitizeHTML(input) {
+        // Handle non-string types safely
+        if (typeof input !== "string") {
+            // Symbols cannot be converted to string directly in some contexts
+            if (typeof input === "symbol") {
+                return "";
+            }
+            // For other types, try to convert safely
+            try {
+                return String(input);
+            }
+            catch {
+                // If conversion fails, return empty string
+                return "";
+            }
+        }
+        // For Cloudflare Workers, use a simpler approach
+        // Remove all tags except allowed ones, then remove all attributes
+        const allowedTags = ["p", "br", "strong", "em", "u", "b", "i"];
+        const allowedTagsPattern = allowedTags.join("|");
+        // First, remove all tags except allowed ones
+        let sanitized = input.replace(new RegExp(`<(?!\/?(?:${allowedTagsPattern})(?:\\s|>))[^>]+>`, "gi"), "");
+        // Remove all attributes from allowed tags (keep only tag names)
+        allowedTags.forEach((tag) => {
+            sanitized = sanitized.replace(new RegExp(`<${tag}\\s+[^>]*>`, "gi"), `<${tag}>`);
+        });
+        return sanitized;
+    }
+    /**
+     * Recursively sanitize JSON data
+     * Sanitizes all string values in objects and arrays
+     *
+     * @param data - The data to sanitize (can be any type)
+     * @returns Sanitized data with all strings sanitized
+     */
+    static sanitizeJSON(data) {
+        if (typeof data === "string") {
+            return this.sanitizeText(data);
+        }
+        // Handle Symbols - return empty string or skip
+        if (typeof data === "symbol") {
+            return "";
+        }
+        if (Array.isArray(data)) {
+            return data.map((item) => this.sanitizeJSON(item));
+        }
+        if (typeof data === "object" && data !== null) {
+            const sanitized = {};
+            for (const [key, value] of Object.entries(data)) {
+                // Skip Symbol keys (Object.entries doesn't include them, but be safe)
+                if (typeof key === "symbol") {
+                    continue;
+                }
+                // Sanitize both keys and values
+                const sanitizedKey = typeof key === "string" ? this.sanitizeText(key) : key;
+                sanitized[sanitizedKey] = this.sanitizeJSON(value);
+            }
+            return sanitized;
+        }
+        // Return primitive values as-is (except Symbols which are handled above)
+        return data;
+    }
+    /**
+     * Sanitize a specific field from a request body
+     * Useful for sanitizing specific fields while preserving others
+     *
+     * @param body - The request body object
+     * @param field - The field name to sanitize
+     * @param allowHTML - Whether to allow safe HTML (default: false, plain text only)
+     * @returns The body with the specified field sanitized
+     */
+    static sanitizeField(body, field, allowHTML = false) {
+        if (!body || typeof body !== "object") {
+            return body;
+        }
+        if (field in body && typeof body[field] === "string") {
+            return {
+                ...body,
+                [field]: allowHTML
+                    ? this.sanitizeHTML(body[field])
+                    : this.sanitizeText(body[field]),
+            };
+        }
+        return body;
+    }
+    /**
+     * Sanitize multiple fields from a request body
+     *
+     * @param body - The request body object
+     * @param fields - Array of field names to sanitize
+     * @param allowHTML - Whether to allow safe HTML (default: false)
+     * @returns The body with specified fields sanitized
+     */
+    static sanitizeFields(body, fields, allowHTML = false) {
+        if (!body || typeof body !== "object") {
+            return body;
+        }
+        const sanitized = { ...body };
+        for (const field of fields) {
+            if (field in sanitized && typeof sanitized[field] === "string") {
+                sanitized[field] = allowHTML
+                    ? this.sanitizeHTML(sanitized[field])
+                    : this.sanitizeText(sanitized[field]);
+            }
+        }
+        return sanitized;
+    }
+}
+exports.InputSanitizer = InputSanitizer;
+//# sourceMappingURL=input-sanitizer.js.map

package/dist/lib/input-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-sanitizer.js","sourceRoot":"","sources":["../../src/lib/input-sanitizer.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH;;GAEG;AACH,MAAa,cAAc;IACzB;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,KAAa;QAC/B,iCAAiC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,kEAAkE;YAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,yCAAyC;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;gBAC3C,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,6EAA6E;QAC7E,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAC3B,qDAAqD,EACrD,EAAE,CACH,CAAC;QAEF,sCAAsC;QACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kDAAkD,EAClD,EAAE,CACH,CAAC;QAEF,uEAAuE;QACvE,uDAAuD;QACvD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAE9C,4DAA4D;QAC5D,iDAAiD;QACjD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAElD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,KAAa;QAC/B,iCAAiC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,kEAAkE;YAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,yCAAyC;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;gBAC3C,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,kEAAkE;QAClE,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,kBAAkB,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjD,6CAA6C;QAC7C,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAC3B,IAAI,MAAM,CAAC,aAAa,kBAAkB,mBAAmB,EAAE,IAAI,CAAC,EACpE,EAAE,CACH,CAAC;QAEF,gEAAgE;QAChE,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,IAAI,MAAM,CAAC,IAAI,GAAG,YAAY,EAAE,IAAI,CAAC,EACrC,IAAI,GAAG,GAAG,CACX,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,IAAS;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,sEAAsE;gBACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,gCAAgC;gBAChC,MAAM,YAAY,GAChB,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBACzD,SAAS,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,yEAAyE;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,aAAa,CAClB,IAAyB,EACzB,KAAa,EACb,YAAqB,KAAK;QAE1B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO;gBACL,GAAG,IAAI;gBACP,CAAC,KAAK,CAAC,EAAE,SAAS;oBAChB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAChC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACnC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,cAAc,CACnB,IAAyB,EACzB,MAAgB,EAChB,YAAqB,KAAK;QAE1B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC/D,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS;oBAC1B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACrC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAhMD,wCAgMC"}

package/dist/lib/internal-docs-dashboard.json

@@ -0,0 +1,112 @@
+{
+    "sections": [
+        {
+            "title": "Getting Started",
+            "order": 1,
+            "items": [
+                {
+                    "id": "overview",
+                    "title": "Overview",
+                    "description": "Internal documentation system overview",
+                    "path": "OVERVIEW.md"
+                }
+            ]
+        },
+        {
+            "title": "Sales",
+            "order": 2,
+            "items": [
+                {
+                    "id": "sales-guide",
+                    "title": "Sales Guide",
+                    "description": "Comprehensive guide for sales teams",
+                    "path": "SALES_GUIDE.md"
+                }
+            ]
+        },
+        {
+            "title": "Business Analysts",
+            "order": 3,
+            "items": [
+                {
+                    "id": "business-analyst-guide",
+                    "title": "Business Analyst Guide",
+                    "description": "Comprehensive guide for business analysts and data scientists",
+                    "path": "BUSINESS_ANALYST_GUIDE.md"
+                }
+            ]
+        },
+        {
+            "title": "Support",
+            "order": 4,
+            "items": [
+                {
+                    "id": "support-guide",
+                    "title": "Support Guide",
+                    "description": "Comprehensive guide for support workers and customer service",
+                    "path": "SUPPORT_GUIDE.md"
+                }
+            ]
+        },
+        {
+            "title": "Operations",
+            "order": 5,
+            "items": [
+                {
+                    "id": "operations-guide",
+                    "title": "Operations Guide",
+                    "description": "Comprehensive guide for SRE, DevOps, and infrastructure teams",
+                    "path": "OPERATIONS_GUIDE.md"
+                }
+            ]
+        },
+        {
+            "title": "Market Analysis",
+            "order": 6,
+            "items": [
+                {
+                    "id": "market-analysis-docs",
+                    "title": "Market Analysis Documentation",
+                    "description": "Competitive intelligence and market research",
+                    "path": "MARKET_ANALYSIS_DOCS.md"
+                }
+            ]
+        },
+        {
+            "title": "Compliance",
+            "order": 7,
+            "items": [
+                {
+                    "id": "compliance-guide",
+                    "title": "Compliance Guide",
+                    "description": "Comprehensive GDPR, BDSG, and security audit documentation",
+                    "path": "COMPLIANCE_GUIDE.md"
+                }
+            ]
+        },
+        {
+            "title": "Developers",
+            "order": 8,
+            "items": [
+                {
+                    "id": "developer-guide",
+                    "title": "Developer Guide",
+                    "description": "Comprehensive technical guide for developers",
+                    "path": "DEVELOPER_GUIDE.md"
+                },
+                {
+                    "id": "implementation",
+                    "title": "Implementation Guide",
+                    "description": "Step-by-step implementation guide",
+                    "path": "IMPLEMENTATION.md"
+                },
+                {
+                    "id": "sync-strategy",
+                    "title": "Sync Strategy",
+                    "description": "Strategies for keeping documentation in sync",
+                    "path": "SYNC_STRATEGY.md"
+                }
+            ]
+        }
+    ]
+}

package/dist/lib/internal-docs-handler.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Internal Documentation Handler
+ *
+ * Handles serving internal documentation to INTERNAL and SUPER_ADMIN role users.
+ * CRITICAL SECURITY: Only users with INTERNAL or SUPER_ADMIN role can access this documentation.
+ */
+import { type LoggerEnv } from "./logger";
+import type { Env } from "../env";
+/**
+ * Internal Documentation Handler class
+ */
+export declare class InternalDocsHandler {
+    private sessionManager;
+    private securityHeaders;
+    private allowedFiles;
+    private logger;
+    constructor(env?: LoggerEnv);
+    /**
+     * Verify user has INTERNAL or SUPER_ADMIN role
+     * CRITICAL: This is a security check - only INTERNAL or SUPER_ADMIN users can access documentation
+     */
+    private verifyInternalAccess;
+    /**
+     * Get list of available documentation files
+     * GET /api/internal/docs
+     *
+     * Returns list of documentation files available in doc/requirements/internal-documentation/
+     */
+    handleGetDocsList(request: Request, env: Env): Promise<Response>;
+    /**
+     * Get navigation structure for internal documentation
+     * GET /api/internal/docs/navigation
+     *
+     * Returns the navigation structure used by the frontend component.
+     * This is the same structure as navigation.json but served from API.
+     */
+    handleGetNavigation(request: Request, env: Env): Promise<Response>;
+    /**
+     * Get dashboard-specific documentation structure
+     * GET /api/internal/docs/dashboard
+     *
+     * Returns dashboard-specific organization of documentation files,
+     * independent of the navigation menu structure.
+     */
+    handleGetDashboardDocs(request: Request, env: Env): Promise<Response>;
+    /**
+     * Get specific documentation file content
+     * GET /api/internal/docs/:filename
+     *
+     * SECURITY: This endpoint requires INTERNAL or SUPER_ADMIN role authentication
+     * The filename is validated and checked against the whitelist
+     *
+     * Security layers (defense in depth):
+     * 1. Authentication check (session + INTERNAL or SUPER_ADMIN role)
+     * 2. Filename validation (path traversal prevention)
+     * 3. Whitelist check (explicit file access control)
+     */
+    handleGetDoc(request: Request, env: Env, filename: string): Promise<Response>;
+}
+//# sourceMappingURL=internal-docs-handler.d.ts.map

package/dist/lib/internal-docs-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-docs-handler.d.ts","sourceRoot":"","sources":["../../src/lib/internal-docs-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAGlD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAGlC;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,CAAC,EAAE,SAAS;IAwB3B;;;OAGG;YACW,oBAAoB;IA+BlC;;;;;OAKG;IACG,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkLtE;;;;;;OAMG;IACG,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IA0DxE;;;;;;OAMG;IACG,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+D3E;;;;;;;;;;;OAWG;IACG,YAAY,CAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC;CA6UrB"}