@de-otio/trellis 0.4.0

package/dist/lib/routes/health.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * Health and Configuration Routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.healthRoutes = void 0;
+const csrf_1 = require("../csrf");
+const logger_1 = require("../logger");
+const middleware_1 = require("../middleware");
+const openai_budget_1 = require("../openai-budget");
+const request_context_1 = require("../request-context");
+const secret_resolver_1 = require("../secret-resolver");
+const security_headers_1 = require("../security-headers");
+const session_manager_1 = require("../session-manager");
+exports.healthRoutes = [
+    // Health check
+    {
+        path: "/health",
+        method: "GET",
+        handler: async (request, env, { requestContext }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            // Lightweight cost alert flag (no auth required, no dollar amounts)
+            let costAlert = false;
+            try {
+                const budgetStatus = await new openai_budget_1.OpenAiBudget({
+                    enabled: env.OPENAI_BUDGET_ENABLED !== "false",
+                    maxRequestsPerHour: parseInt(env.OPENAI_BUDGET_HOURLY_MAX || "500", 10),
+                    maxRequestsPerDay: parseInt(env.OPENAI_BUDGET_DAILY_MAX || "5000", 10),
+                }).getStatus();
+                costAlert = budgetStatus.exceeded;
+            }
+            catch {
+                // Fail-open: if cost check fails, don't flag
+            }
+            const response = securityHeaders.createSecureResponse(JSON.stringify({ ok: true, region: requestContext?.region, costAlert }), {
+                status: 200,
+                headers: { "content-type": "application/json" },
+            });
+            if (requestContext) {
+                return (0, request_context_1.addRegionHeadersAsync)(response, requestContext);
+            }
+            return response;
+        },
+        description: "Health check endpoint",
+    },
+    // Region configuration
+    {
+        path: "/api/config",
+        method: "GET",
+        handler: async (request, env, { requestContext }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            if (!requestContext) {
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Request context not available" }), { status: 500, headers: { "content-type": "application/json" } });
+            }
+            const response = securityHeaders.createSecureResponse(JSON.stringify({
+                region: requestContext.region,
+                features: requestContext.config.features,
+                endpoints: requestContext.config.endpoints,
+                timeouts: requestContext.config.timeouts,
+            }), {
+                status: 200,
+                headers: { "content-type": "application/json" },
+            });
+            return (0, request_context_1.addRegionHeadersAsync)(response, requestContext);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get region configuration and feature flags",
+    },
+    // CSRF token generation endpoint
+    {
+        path: "/api/csrf-token",
+        method: "GET",
+        handler: async (request, env, { url }) => {
+            const sessionManager = new session_manager_1.SessionManager();
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            // Get session to link token to user
+            const sessionSecret = secret_resolver_1.Secrets.getSessionSecret(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const authHeader = request.headers.get("Authorization");
+            logger.debug("[CSRF Token] Attempting to get session", {
+                secretLength: sessionSecret.length,
+                hasCookie: !!request.headers.get("Cookie"),
+                hasAuthHeader: !!authHeader,
+                cookieHeader: request.headers.get("Cookie")?.substring(0, 100) || "none",
+                authHeaderPreview: authHeader?.substring(0, 50) || "none",
+            });
+            const session = await sessionManager.getSession(request, sessionSecret, env);
+            if (!session) {
+                logger.warn("[CSRF Token] Unauthorized request - no valid session", {
+                    secretLength: sessionSecret.length,
+                    cookieHeader: request.headers.get("Cookie")?.substring(0, 100) || "none",
+                });
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+            }
+            try {
+                // Generate new CSRF token
+                const token = csrf_1.CSRFProtection.generateToken();
+                // Store token in session (Double Submit Cookie pattern)
+                const updatedSession = csrf_1.CSRFProtection.storeTokenInSession(token, session);
+                // Encrypt updated session to get new token (for Authorization header approach)
+                // This ensures the frontend can update its localStorage token with the CSRF token included
+                const sessionSecret = secret_resolver_1.Secrets.getSessionSecret(env);
+                const encryptedSessionToken = await sessionManager.encryptSession(JSON.stringify(updatedSession), sessionSecret, env.SESSION_SALT);
+                // Update session cookie with new token
+                // Cookie domain logic - simplified for health check
+                const cookieDomain = undefined; // Health check doesn't need cookie domain
+                const response = securityHeaders.createSecureResponse(JSON.stringify({
+                    token,
+                    // Include updated session token for Authorization header approach
+                    // Frontend should update localStorage with this token
+                    sessionToken: encryptedSessionToken,
+                }), {
+                    status: 200,
+                    headers: { "content-type": "application/json" },
+                });
+                // Set updated session cookie
+                const responseWithSession = await sessionManager.setSession(response, updatedSession, sessionSecret, cookieDomain, env);
+                return responseWithSession;
+            }
+            catch (error) {
+                logger_1.Logger.getInstance(env).error("Error generating CSRF token:", error);
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Failed to generate CSRF token" }), { status: 500, headers: { "content-type": "application/json" } });
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get CSRF token for authenticated requests",
+    },
+];
+//# sourceMappingURL=health.js.map

package/dist/lib/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/lib/routes/health.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,kCAAyC;AAEzC,sCAAmC;AACnC,8CAA+C;AAC/C,oDAAgD;AAChD,wDAA2D;AAC3D,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AAGvC,QAAA,YAAY,GAAY;IACnC,eAAe;IACf;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;YAClD,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,oEAAoE;YACpE,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,IAAI,4BAAY,CAAC;oBAC1C,OAAO,EAAG,GAAW,CAAC,qBAAqB,KAAK,OAAO;oBACvD,kBAAkB,EAAE,QAAQ,CAAE,GAAW,CAAC,wBAAwB,IAAI,KAAK,EAAE,EAAE,CAAC;oBAChF,iBAAiB,EAAE,QAAQ,CAAE,GAAW,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC;iBAChF,CAAC,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EACvE;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CACF,CAAC;YAEF,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAA,uCAAqB,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,WAAW,EAAE,uBAAuB;KACrC;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;YAClD,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,EAC1D,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ;gBACxC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS;gBAC1C,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ;aACzC,CAAC,EACF;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CACF,CAAC;YAEF,OAAO,IAAA,uCAAqB,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,4CAA4C;KAC1D;IAED,iCAAiC;IACjC;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,oCAAoC;YACpC,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBACrD,YAAY,EAAE,aAAa,CAAC,MAAM;gBAClC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,aAAa,EAAE,CAAC,CAAC,UAAU;gBAC3B,YAAY,EACV,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM;gBAC5D,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM;aAC1D,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YAE7E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAClE,YAAY,EAAE,aAAa,CAAC,MAAM;oBAClC,YAAY,EACV,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM;iBAC7D,CAAC,CAAC;gBACH,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,0BAA0B;gBAC1B,MAAM,KAAK,GAAG,qBAAc,CAAC,aAAa,EAAE,CAAC;gBAE7C,wDAAwD;gBACxD,MAAM,cAAc,GAAG,qBAAc,CAAC,mBAAmB,CACvD,KAAK,EACL,OAAO,CACR,CAAC;gBAEF,+EAA+E;gBAC/E,2FAA2F;gBAC3F,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,qBAAqB,GAAG,MAAM,cAAc,CAAC,cAAc,CAC/D,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAC9B,aAAa,EACb,GAAG,CAAC,YAAY,CACjB,CAAC;gBAEF,uCAAuC;gBACvC,oDAAoD;gBACpD,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,0CAA0C;gBAC1E,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK;oBACL,kEAAkE;oBAClE,sDAAsD;oBACtD,YAAY,EAAE,qBAAqB;iBACpC,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;gBAEF,6BAA6B;gBAC7B,MAAM,mBAAmB,GAAG,MAAM,cAAc,CAAC,UAAU,CACzD,QAAQ,EACR,cAAc,EACd,aAAa,EACb,YAAY,EACZ,GAAG,CACJ,CAAC;gBAEF,OAAO,mBAAmB,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;gBACrE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,EAC1D,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,2CAA2C;KACzD;CACF,CAAC"}

package/dist/lib/routes/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Route Registry
+ *
+ * Centralized route registry for the API.
+ * This provides a cleaner way to organize routes and enables features like:
+ * - Route versioning
+ * - Middleware composition
+ * - Route documentation
+ * - Route testing
+ *
+ * Routes are organized by domain/feature in separate files and combined here.
+ */
+import type { Route } from "./types";
+export declare const routes: Route[];
+export type { Route } from "./types";
+import type { RouteMatch } from "../route-matcher";
+/**
+ * Match a route from the registry
+ */
+export declare function matchRoute(pathname: string, method: string, routeList?: Route[]): RouteMatch<Route> | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsDH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AA6JrC,eAAO,MAAM,MAAM,EAAE,KAAK,EAkBzB,CAAC;AAGF,YAAY,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD;;GAEG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,KAAK,EAAE,GAClB,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAa1B"}

package/dist/lib/routes/index.js

@@ -0,0 +1,212 @@
+"use strict";
+/**
+ * Route Registry
+ *
+ * Centralized route registry for the API.
+ * This provides a cleaner way to organize routes and enables features like:
+ * - Route versioning
+ * - Middleware composition
+ * - Route documentation
+ * - Route testing
+ *
+ * Routes are organized by domain/feature in separate files and combined here.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.routes = void 0;
+exports.matchRoute = matchRoute;
+const middleware_1 = require("../middleware");
+const security_headers_1 = require("../security-headers");
+const actor_1 = require("./activitypub/actor");
+const audiences_1 = require("./activitypub/audiences");
+const collections_1 = require("./activitypub/collections");
+const friends_1 = require("./activitypub/friends");
+const group_1 = require("./activitypub/group");
+const inbox_1 = require("./activitypub/inbox");
+const messages_1 = require("./activitypub/messages");
+const outbox_1 = require("./activitypub/outbox");
+const post_1 = require("./activitypub/post");
+const entity_profile_1 = require("./activitypub/entity-profile");
+const webfinger_1 = require("./activitypub/webfinger");
+const admin_1 = require("./admin");
+const admin_costs_1 = require("./admin-costs");
+const auth_1 = require("./auth");
+const badges_1 = require("./badges");
+const comments_1 = require("./comments");
+const content_discovery_1 = require("./content-discovery");
+const dashboard_1 = require("./dashboard");
+const deletion_1 = require("./deletion");
+const employees_1 = require("./employees");
+const entities_1 = require("./entities");
+const export_1 = require("./export");
+const feature_flags_1 = require("./feature-flags");
+const feeds_1 = require("./feeds");
+const friends_2 = require("./friends");
+const relationships_1 = require("./relationships");
+const circles_1 = require("./circles");
+const discovery_1 = require("./discovery");
+const entity_relationships_1 = require("./entity-relationships");
+const connection_codes_1 = require("./connection-codes");
+const health_1 = require("./health");
+const internal_docs_1 = require("./internal-docs");
+const invitations_1 = require("./invitations");
+const link_reports_1 = require("./link-reports");
+const map_1 = require("./map");
+const media_1 = require("./media");
+const mfa_1 = require("./mfa");
+const media_metadata_visibility_1 = require("./media-metadata-visibility");
+const upload_sessions_1 = require("./upload-sessions");
+const orphaned_media_1 = require("./orphaned-media");
+const orphaned_media_health_1 = require("./orphaned-media-health");
+const out_1 = require("./out");
+const posts_1 = require("./posts");
+const privacy_1 = require("./privacy");
+const products_1 = require("./products");
+const notifications_1 = require("./notifications");
+const parental_controls_1 = require("./parental-controls");
+const sentiments_1 = require("./sentiments");
+const taxonomy_1 = require("./taxonomy");
+const taxonomy_analytics_1 = require("./taxonomy-analytics");
+const user_1 = require("./user");
+/**
+ * Core routes — domain-agnostic functionality.
+ * Extension routes are merged below.
+ */
+const coreRoutes = [
+    // Health and configuration (highest priority)
+    ...health_1.healthRoutes,
+    // Authentication
+    ...auth_1.authRoutes,
+    // MFA (multi-factor authentication)
+    ...mfa_1.mfaRoutes,
+    // User profile management
+    ...user_1.userRoutes,
+    // Internal documentation
+    ...internal_docs_1.internaldocsRoutes,
+    // Orphaned media health monitoring (must be before admin wildcard routes)
+    ...orphaned_media_health_1.orphanedMediaHealthRoutes,
+    // Admin routes (super-admin, feature toggles, role metadata)
+    ...admin_costs_1.adminCostRoutes,
+    ...admin_1.adminRoutes,
+    // Dashboard routes (internal dashboard, partner dashboard, user management)
+    ...dashboard_1.dashboardRoutes,
+    // Badges
+    ...badges_1.badgesRoutes,
+    // Employees
+    ...employees_1.employeesRoutes,
+    // Invitations
+    ...invitations_1.invitationsRoutes,
+    // Map
+    ...map_1.mapRoutes,
+    // Entities (replaces Dogs for white-label support)
+    ...entities_1.entitiesRoutes,
+    // Feeds
+    ...feeds_1.feedsRoutes,
+    // Posts
+    ...posts_1.postsRoutes,
+    // Comments
+    ...comments_1.commentsRoutes,
+    // Sentiments/Reactions
+    ...sentiments_1.sentimentsRoutes,
+    // Media uploads
+    ...media_1.mediaRoutes,
+    // Media metadata privacy controls
+    ...media_metadata_visibility_1.mediaMetadataVisibilityRoutes,
+    // Upload sessions (optimistic image uploads)
+    ...upload_sessions_1.uploadSessionRoutes,
+    // Orphaned media management
+    ...orphaned_media_1.orphanedMediaRoutes,
+    // Privacy preferences
+    ...privacy_1.privacyRoutes,
+    // Notifications (Safer Social Design)
+    ...notifications_1.notificationsRoutes,
+    // Parental Controls (Safer Social Design)
+    ...parental_controls_1.parentalControlRoutes,
+    // User export
+    ...export_1.exportRoutes,
+    // Account deletion
+    ...deletion_1.deletionRoutes,
+    // Friends (API endpoints)
+    ...friends_2.friendsRoutes,
+    // Relationships (circles model — replaces followers)
+    ...relationships_1.relationshipRoutes,
+    // Circles (content views)
+    ...circles_1.circleRoutes,
+    // Entity Relationships (entity-to-entity)
+    ...entity_relationships_1.entityRelationshipRoutes,
+    // Connection Codes
+    ...connection_codes_1.connectionCodeRoutes,
+    // Discovery
+    ...discovery_1.discoveryRoutes,
+    // Taxonomy
+    ...taxonomy_1.taxonomyRoutes,
+    // Content Discovery
+    ...content_discovery_1.contentDiscoveryRoutes,
+    // Taxonomy Analytics
+    ...taxonomy_analytics_1.taxonomyAnalyticsRoutes,
+    // Product Taxonomy Tags
+    ...products_1.productTaxonomyRoutes,
+    // Feature Flags
+    ...feature_flags_1.featureFlagsRoutes,
+    // Link Reports
+    ...link_reports_1.linkReportRoutes,
+    // Out Redirector (public endpoint, must be before 404 handler)
+    ...out_1.outRoutes,
+    // ActivityPub routes (public endpoints, must be before 404 handler)
+    // Note: These routes use /users/:username and /posts/:postId patterns (no /api prefix)
+    // WebFinger must be early for actor discovery
+    ...webfinger_1.webfingerRoutes,
+    ...actor_1.actorRoutes,
+    ...inbox_1.inboxRoutes,
+    ...outbox_1.outboxRoutes,
+    ...friends_1.friendsRoutes,
+    ...group_1.groupRoutes,
+    ...collections_1.collectionRoutes,
+    ...entity_profile_1.entityProfileRoutes,
+    ...post_1.postRoutes,
+    // Direct messages (authenticated endpoints with /api prefix)
+    ...messages_1.messageRoutes,
+    // Custom audiences (authenticated endpoints with /api prefix, public collection endpoint)
+    ...audiences_1.audienceRoutes,
+];
+// Merge extension routes (after core, before 404)
+const extensions_1 = require("../../extensions");
+const extension_route_wrapper_1 = require("../extension-route-wrapper");
+const extensionRoutes = [
+    // Raw routes (legacy — app-side wired handlers)
+    ...(0, extensions_1.getExtensions)().flatMap((ext) => ext.routes),
+    // Core-wrapped routes (clean pattern — extension provides handler, core wraps)
+    ...(0, extensions_1.getExtensions)().flatMap((ext) => (0, extension_route_wrapper_1.wrapExtensionRoutes)(ext)),
+];
+exports.routes = [
+    ...coreRoutes,
+    ...extensionRoutes,
+    // 404 handler - must be last
+    {
+        path: "*",
+        method: "*",
+        handler: async (request, env) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            return securityHeaders.createSecureResponse(JSON.stringify({ error: "Not found" }), { status: 404, headers: { "content-type": "application/json" } });
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "404 Not Found",
+    },
+];
+const route_matcher_1 = require("../route-matcher");
+/**
+ * Match a route from the registry
+ */
+function matchRoute(pathname, method, routeList) {
+    const routeListToSearch = routeList || exports.routes;
+    for (const route of routeListToSearch) {
+        if (!route)
+            continue; // Skip undefined routes
+        if ((0, route_matcher_1.matchesPath)(pathname, route.path) &&
+            (0, route_matcher_1.matchesMethod)(method, route.method)) {
+            const params = (0, route_matcher_1.extractParams)(pathname, route.path);
+            return { route, params };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=index.js.map

package/dist/lib/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/routes/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAiPH,gCAiBC;AAhQD,8CAA+C;AAC/C,0DAAsD;AACtD,+CAAkD;AAClD,uDAAyD;AACzD,2DAA6D;AAC7D,mDAAsD;AACtD,+CAAkD;AAClD,+CAAkD;AAClD,qDAAuD;AACvD,iDAAoD;AACpD,6CAAyE;AACzE,iEAAmE;AACnE,uDAA0D;AAC1D,mCAAsC;AACtC,+CAAgD;AAChD,iCAAoC;AACpC,qCAAwC;AACxC,yCAA4C;AAC5C,2DAA6D;AAC7D,2CAA8C;AAC9C,yCAA4C;AAC5C,2CAA8C;AAC9C,yCAA4C;AAC5C,qCAAwC;AACxC,mDAAqD;AACrD,mCAAsC;AACtC,uCAA8D;AAC9D,mDAAqD;AACrD,uCAAyC;AACzC,2CAA8C;AAC9C,iEAAkE;AAClE,yDAA0D;AAC1D,qCAAwC;AACxC,mDAAqD;AACrD,+CAAkD;AAClD,iDAAkD;AAClD,+BAAkC;AAClC,mCAAsC;AACtC,+BAAkC;AAClC,2EAA4E;AAC5E,uDAAwD;AACxD,qDAAuD;AACvD,mEAAoE;AACpE,+BAAkC;AAClC,mCAAsC;AACtC,uCAA0C;AAC1C,yCAAmD;AACnD,mDAAsD;AACtD,2DAA4D;AAC5D,6CAAgD;AAChD,yCAA4C;AAC5C,6DAA+D;AAE/D,iCAAoC;AAEpC;;;GAGG;AACH,MAAM,UAAU,GAAY;IAC1B,8CAA8C;IAC9C,GAAG,qBAAY;IAEf,iBAAiB;IACjB,GAAG,iBAAU;IAEb,oCAAoC;IACpC,GAAG,eAAS;IAEZ,0BAA0B;IAC1B,GAAG,iBAAU;IAEb,yBAAyB;IACzB,GAAG,kCAAkB;IAErB,0EAA0E;IAC1E,GAAG,iDAAyB;IAE5B,6DAA6D;IAC7D,GAAG,6BAAe;IAClB,GAAG,mBAAW;IAEd,4EAA4E;IAC5E,GAAG,2BAAe;IAElB,SAAS;IACT,GAAG,qBAAY;IAEf,YAAY;IACZ,GAAG,2BAAe;IAElB,cAAc;IACd,GAAG,+BAAiB;IAEpB,MAAM;IACN,GAAG,eAAS;IAEZ,mDAAmD;IACnD,GAAG,yBAAc;IAEjB,QAAQ;IACR,GAAG,mBAAW;IAEd,QAAQ;IACR,GAAG,mBAAW;IAEd,WAAW;IACX,GAAG,yBAAc;IAEjB,uBAAuB;IACvB,GAAG,6BAAgB;IAEnB,gBAAgB;IAChB,GAAG,mBAAW;IAEd,kCAAkC;IAClC,GAAG,yDAA6B;IAEhC,6CAA6C;IAC7C,GAAG,qCAAmB;IAEtB,4BAA4B;IAC5B,GAAG,oCAAmB;IAEtB,sBAAsB;IACtB,GAAG,uBAAa;IAEhB,sCAAsC;IACtC,GAAG,mCAAmB;IAEtB,0CAA0C;IAC1C,GAAG,yCAAqB;IAExB,cAAc;IACd,GAAG,qBAAY;IAEf,mBAAmB;IACnB,GAAG,yBAAc;IAEjB,0BAA0B;IAC1B,GAAG,uBAAgB;IAEnB,qDAAqD;IACrD,GAAG,kCAAkB;IAErB,0BAA0B;IAC1B,GAAG,sBAAY;IAEf,0CAA0C;IAC1C,GAAG,+CAAwB;IAE3B,mBAAmB;IACnB,GAAG,uCAAoB;IAEvB,YAAY;IACZ,GAAG,2BAAe;IAElB,WAAW;IACX,GAAG,yBAAc;IAEjB,oBAAoB;IACpB,GAAG,0CAAsB;IAEzB,qBAAqB;IACrB,GAAG,4CAAuB;IAE1B,wBAAwB;IACxB,GAAG,gCAAqB;IAExB,gBAAgB;IAChB,GAAG,kCAAkB;IAErB,eAAe;IACf,GAAG,+BAAgB;IAEnB,+DAA+D;IAC/D,GAAG,eAAS;IAEZ,oEAAoE;IACpE,uFAAuF;IACvF,8CAA8C;IAC9C,GAAG,2BAAe;IAClB,GAAG,mBAAW;IACd,GAAG,mBAAW;IACd,GAAG,qBAAY;IACf,GAAG,uBAAa;IAChB,GAAG,mBAAW;IACd,GAAG,8BAAgB;IACnB,GAAG,oCAAmB;IACtB,GAAG,iBAAqB;IAExB,6DAA6D;IAC7D,GAAG,wBAAa;IAEhB,0FAA0F;IAC1F,GAAG,0BAAc;CAClB,CAAC;AAEF,kDAAkD;AAClD,iDAAiD;AACjD,wEAAiE;AAEjE,MAAM,eAAe,GAAY;IAC/B,gDAAgD;IAChD,GAAG,IAAA,0BAAa,GAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAiB,CAAC;IAC1D,+EAA+E;IAC/E,GAAG,IAAA,0BAAa,GAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,6CAAmB,EAAC,GAAG,CAAC,CAAC;CAC9D,CAAC;AAEW,QAAA,MAAM,GAAY;IAC7B,GAAG,UAAU;IACb,GAAG,eAAe;IAElB,6BAA6B;IAC7B;QACE,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,eAAe;KAC7B;CACF,CAAC;AAOF,oDAA6E;AAE7E;;GAEG;AACH,SAAgB,UAAU,CACxB,QAAgB,EAChB,MAAc,EACd,SAAmB;IAEnB,MAAM,iBAAiB,GAAG,SAAS,IAAI,cAAM,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,wBAAwB;QAC9C,IACE,IAAA,2BAAW,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YACjC,IAAA,6BAAa,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACnC,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/routes/internal-docs.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Internal Docs Routes
+ */
+import type { Route } from "./types";
+export declare const internaldocsRoutes: Route[];
+//# sourceMappingURL=internal-docs.d.ts.map

package/dist/lib/routes/internal-docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-docs.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/internal-docs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,kBAAkB,EAAE,KAAK,EAgDrC,CAAC"}

package/dist/lib/routes/internal-docs.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Internal Docs Routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.internaldocsRoutes = void 0;
+const worker_1 = require("../../worker");
+const internal_docs_handler_1 = require("../internal-docs-handler");
+const middleware_1 = require("../middleware");
+const security_headers_1 = require("../security-headers");
+exports.internaldocsRoutes = [
+    {
+        path: "/api/internal/docs/*",
+        method: "*",
+        handler: async (request, env, { pathname }) => {
+            const docsHandler = new internal_docs_handler_1.InternalDocsHandler();
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            if (pathname === "/api/internal/docs/navigation" &&
+                request.method === "GET") {
+                const response = await docsHandler.handleGetNavigation(request, env);
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            if (pathname === "/api/internal/docs/dashboard" &&
+                request.method === "GET") {
+                const response = await docsHandler.handleGetDashboardDocs(request, env);
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            if (pathname === "/api/internal/docs" && request.method === "GET") {
+                const response = await docsHandler.handleGetDocsList(request, env);
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            const filenameMatch = pathname.match(/^\/api\/internal\/docs\/(.+)$/);
+            if (filenameMatch && request.method === "GET") {
+                const response = await docsHandler.handleGetDoc(request, env, filenameMatch[1]);
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Not found" }), { status: 404, headers: { "content-type": "application/json" } });
+            return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Internal documentation routes",
+    },
+];
+//# sourceMappingURL=internal-docs.js.map

package/dist/lib/routes/internal-docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-docs.js","sourceRoot":"","sources":["../../../src/lib/routes/internal-docs.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,yCAA8C;AAC9C,oEAA+D;AAC/D,8CAA+C;AAC/C,0DAAsD;AAGzC,QAAA,kBAAkB,GAAY;IACzC;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,IAAI,2CAAmB,EAAE,CAAC;YAC9C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,IACE,QAAQ,KAAK,+BAA+B;gBAC5C,OAAO,CAAC,MAAM,KAAK,KAAK,EACxB,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrE,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,IACE,QAAQ,KAAK,8BAA8B;gBAC3C,OAAO,CAAC,MAAM,KAAK,KAAK,EACxB,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACxE,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,QAAQ,KAAK,oBAAoB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAClE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACnE,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACtE,IAAI,aAAa,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAC7C,OAAO,EACP,GAAG,EACH,aAAa,CAAC,CAAC,CAAC,CACjB,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC"}

package/dist/lib/routes/invitations.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Invitations Routes
+ */
+import type { Route } from "./types";
+export declare const invitationsRoutes: Route[];
+//# sourceMappingURL=invitations.d.ts.map

package/dist/lib/routes/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/invitations.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,iBAAiB,EAAE,KAAK,EA2EpC,CAAC"}

package/dist/lib/routes/invitations.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * Invitations Routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.invitationsRoutes = void 0;
+const worker_1 = require("../../worker");
+const invitation_handler_1 = require("../invitation-handler");
+const middleware_1 = require("../middleware");
+exports.invitationsRoutes = [
+    {
+        path: "/api/invitations",
+        method: "POST",
+        handler: async (request, env) => {
+            const invitationHandler = new invitation_handler_1.InvitationHandler();
+            const response = await invitationHandler.handleCreateInvitation(request, env);
+            return (0, worker_1.addCorsHeaders)(response, request, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Create invitation",
+    },
+    {
+        path: "/api/invitations",
+        method: "GET",
+        handler: async (request, env) => {
+            const invitationHandler = new invitation_handler_1.InvitationHandler();
+            const response = await invitationHandler.handleListInvitations(request, env);
+            return (0, worker_1.addCorsHeaders)(response, request, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "List invitations",
+    },
+    {
+        path: "/api/invitations/inviter-info",
+        method: "GET",
+        handler: async (request, env) => {
+            const invitationHandler = new invitation_handler_1.InvitationHandler();
+            const response = await invitationHandler.handleGetInviterInfo(request, env);
+            return (0, worker_1.addCorsHeaders)(response, request, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get inviter info",
+    },
+    {
+        path: "/api/invitations/validate",
+        method: "POST",
+        handler: async (request, env) => {
+            const invitationHandler = new invitation_handler_1.InvitationHandler();
+            const response = await invitationHandler.handleValidateInvitation(request, env);
+            return (0, worker_1.addCorsHeaders)(response, request, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Validate invitation",
+    },
+    {
+        path: /^\/api\/invitations\/(.+)$/,
+        method: "DELETE",
+        handler: async (request, env) => {
+            const invitationHandler = new invitation_handler_1.InvitationHandler();
+            const response = await invitationHandler.handleDeleteInvitation(request, env);
+            return (0, worker_1.addCorsHeaders)(response, request, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Delete invitation",
+    },
+];
+//# sourceMappingURL=invitations.js.map

package/dist/lib/routes/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../src/lib/routes/invitations.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,yCAA8C;AAC9C,8DAA0D;AAC1D,8CAA+D;AAGlD,QAAA,iBAAiB,GAAY;IACxC;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,sBAAsB,CAC7D,OAAO,EACP,GAAG,CACJ,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,mBAAmB;KACjC;IAED;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,CAC5D,OAAO,EACP,GAAG,CACJ,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,kBAAkB;KAChC;IAED;QACE,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAC3D,OAAO,EACP,GAAG,CACJ,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,kBAAkB;KAChC;IAED;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,wBAAwB,CAC/D,OAAO,EACP,GAAG,CACJ,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,qBAAqB;KACnC;IAED;QACE,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,sBAAsB,CAC7D,OAAO,EACP,GAAG,CACJ,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,mBAAmB;KACjC;CACF,CAAC"}

package/dist/lib/routes/link-reports.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Link Report Routes
+ *
+ * Handles user reports of malicious or suspicious links.
+ */
+import { type DataRouterEnv } from "../data-router";
+import type { Route } from "./types";
+export interface Env extends DataRouterEnv {
+}
+export declare const linkReportRoutes: Route[];
+//# sourceMappingURL=link-reports.d.ts.map

package/dist/lib/routes/link-reports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-reports.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/link-reports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAUhE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,WAAW,GAAI,SAAQ,aAAa;CAEzC;AAED,eAAO,MAAM,gBAAgB,EAAE,KAAK,EA0VnC,CAAC"}