@ima-jin/config 0.7.0 → 0.8.13

package/dist/index.d.cts

@@ -0,0 +1,485 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+/**
+ * CSP host-source list corresponding to ORIGIN_PATTERN (prod).
+ * Used by security-headers.ts to build frame-ancestors directives.
+ * If the allowed-origin set changes, update ORIGIN_PATTERN and this constant together.
+ */
+declare const ALLOWED_FRAME_ORIGINS = "https://*.imajin.ai https://imajin.ai";
+declare function isAllowedOrigin(origin: string | null): boolean;
+declare function corsHeaders(request: NextRequest): Record<string, string>;
+declare function corsOptions(request: NextRequest): NextResponse;
+declare function withCors(response: NextResponse, request: NextRequest): NextResponse;
+declare function validateOrigin(request: NextRequest): boolean;
+
+interface StandaloneDashboardMiddlewareOptions {
+    /** Service name used to build the hub tab URL (`/auth/<service>`). */
+    service: string;
+    /**
+     * Whether to also answer CORS preflight and stamp CORS headers on every
+     * other request — matches the app's pre-existing `/api/:path*` CORS
+     * middleware (#1525). Defaults to `true`; pass `false` for an app (e.g.
+     * dykil) that never had one.
+     */
+    cors?: boolean;
+}
+/**
+ * Shared standalone-dashboard-to-hub redirect body (#2332, carved out of
+ * #2275), used by every userspace service app's `middleware.ts` so the
+ * redirect + CORS pass-through logic isn't duplicated six times over.
+ *
+ * Each app still declares its own literal `export const config = { matcher:
+ * [...] }` — Next.js statically extracts `matcher` from the middleware
+ * file's AST at build time (see
+ * `next/dist/build/analysis/extract-const-value.js`: it only understands
+ * literal object/array/string/etc. expressions, not a function call or a
+ * destructured import) — so the matcher itself can't be factored out here
+ * without Next silently falling back to its default, unrestricted matcher.
+ * Only the function *body* is shared.
+ *
+ * The redirect is unconditional: a 308 to `/auth/<service>`, preserving the
+ * query string. The embedded rendering path `<ServiceEmbed>` loads
+ * (`?embed=hub&did=...`, see `apps/kernel/app/auth/lib/service-registry.ts`'s
+ * `buildEmbedSrc`) never reaches this function at all — it's excluded
+ * declaratively by each app's `matcher.missing` clause.
+ */
+declare function standaloneDashboardMiddleware(request: NextRequest, { service, cors }: StandaloneDashboardMiddlewareOptions): NextResponse;
+
+type HeaderEntry = {
+    key: string;
+    value: string;
+};
+/**
+ * Tier 1 — hard deny framing.
+ * Use on credential and auth-sensitive pages that must never be embedded.
+ */
+declare function tier1Headers(): HeaderEntry[];
+/**
+ * Tier 2 — allow framing by Imajin origins only.
+ * Use on routes embedded by the auth hub (service dashboards, document viewer, surveys).
+ * Does not include X-Frame-Options — it cannot express an allow-list, and SAMEORIGIN
+ * would break cross-subdomain framing. CSP frame-ancestors does the work here.
+ */
+declare function tier2Headers(): HeaderEntry[];
+/**
+ * Tier 3 — baseline hardening.
+ * Safe to apply on every route in every app.
+ */
+declare function tier3Headers(): HeaderEntry[];
+
+/**
+ * Human-facing product display name.
+ *
+ * This is the ONLY place the "(α)" (alpha) stage marker lives — flip it here
+ * (e.g. to "(β)" or drop it for GA) and every consumer (BuildInfo, nav bars,
+ * page titles/metadata, auth screens, email templates, etc.) picks it up.
+ *
+ * Do NOT use this for DIDs, URLs, package names, event names, localStorage
+ * keys, env vars, or any other code identifier — those stay as literal
+ * 'imajin' strings. This constant is display-text only.
+ */
+declare const APP_DISPLAY_NAME = "imajin (\u03B1)";
+
+/**
+ * Canonical service manifest — infra/build-time topology for all Imajin
+ * services (dev/prod ports, Postgres schema, deployment tier, Caddy/pm2
+ * routing, docs sync, `/registry/api/specs`). These consumers run without a
+ * live identity/DB context (build scripts, edge config, port-based
+ * routing), so this stays a static, synchronously-importable array.
+ *
+ * NOT the nav authority (#2425): which apps an authenticated identity sees
+ * in the kernel hub (auth submenu, launcher, home tiles) is now derived
+ * from `registry.apps` (#1990) via `apps/kernel/src/lib/kernel/app-nav.ts`,
+ * not from this file — a disabled/pruned app disappears from nav by
+ * flipping registry state, independent of whether it still has a row here
+ * for port/Caddy purposes. Consumers: registry specs, Caddy config, pm2
+ * ecosystem, docs sync.
+ */
+type ServiceTier = "core" | "imajin";
+type ServiceVisibility = "public" | "authenticated" | "creator" | "internal";
+type ServiceCategory = "kernel" | "core" | "creator" | "developer" | "infrastructure" | "meta";
+interface ServiceDefinition {
+    /** Subdomain / app directory name */
+    name: string;
+    /** Human-readable label */
+    label: string;
+    /** Description */
+    description: string;
+    /** Emoji icon */
+    icon: string;
+    /** Dev port (3xxx) */
+    devPort: number;
+    /** Prod port (7xxx) */
+    prodPort: number;
+    /** Postgres schema name (null if no DB) */
+    schema: string | null;
+    /** Deployment tier */
+    tier: ServiceTier;
+    /** Visibility in launcher / nav */
+    visibility: ServiceVisibility;
+    /** Grouping category */
+    category: ServiceCategory;
+    /** External URL override (bypasses subdomain convention) */
+    externalUrl?: string;
+    /** Path on www service (env-aware — resolves against www's URL at runtime) */
+    wwwPath?: string;
+}
+declare const SERVICES: readonly ServiceDefinition[];
+/** Get a service definition by name */
+declare function getService(name: string): ServiceDefinition | undefined;
+/** Get the port for a service in a given environment */
+declare function getPort(name: string, env?: "dev" | "prod"): number | undefined;
+/** Get internal URL for a service (server-side calls) */
+declare function getServiceUrl(name: string, env?: "dev" | "prod"): string | undefined;
+/** Get the public URL for a service.
+ *  Localhost-aware: if domain contains "localhost" or prefix is "http://localhost:",
+ *  returns http://localhost:{devPort} using the canonical port map.
+ */
+declare function getPublicUrl(name: string, options?: {
+    prefix?: string;
+    domain?: string;
+}): string;
+/**
+ * Build the public URL for a service using raw env vars.
+ * Convenience wrapper around getPublicUrl that handles NEXT_PUBLIC_SERVICE_PREFIX
+ * and NEXT_PUBLIC_DOMAIN directly (no need to strip protocol).
+ *
+ * @example
+ *   buildPublicUrl('www')           → uses env vars, localhost-aware
+ *   buildPublicUrl('auth', prefix, domain) → explicit values
+ */
+declare function buildPublicUrl(name: string, servicePrefix?: string, domain?: string): string;
+/**
+ * Build an ABSOLUTE public URL for a service — for use OUTSIDE the browser
+ * origin: email links, Stripe/webhook return/success URLs, externally shared
+ * links, and cross-node links. Unlike buildPublicUrl(), this never returns a
+ * relative path.
+ *
+ * Resolution order:
+ *   1. explicit NEXT_PUBLIC_{NAME}_URL env var (only if already absolute)
+ *   2. localhost dev → http://localhost:{devPort} from the canonical port map
+ *   3. otherwise an absolute https URL derived from NEXT_PUBLIC_SERVICE_PREFIX
+ *      + NEXT_PUBLIC_DOMAIN via getPublicUrl()
+ *
+ * @example
+ *   buildPublicUrlAbsolute('chat')   → https://jin.imajin.ai/chat (single-domain)
+ *   buildPublicUrlAbsolute('kernel') → https://jin.imajin.ai (node root)
+ */
+declare function buildPublicUrlAbsolute(name: string): string;
+/** All service names */
+declare const SERVICE_NAMES: string[];
+/** Services filtered by tier */
+declare function servicesByTier(tier: ServiceTier): ServiceDefinition[];
+/** Services filtered by visibility */
+declare function servicesByVisibility(visibility: ServiceVisibility): ServiceDefinition[];
+/**
+ * Build a map of service name → internal URL from env vars with fallback to port convention.
+ * Env var pattern: `{NAME}_SERVICE_URL` (e.g. `AUTH_SERVICE_URL`)
+ */
+declare function buildServiceUrlMap(env: Record<string, string | undefined>, mode?: "dev" | "prod"): Record<string, string>;
+
+/**
+ * Session cookie configuration — single source of truth.
+ *
+ * Every service that reads or writes the session cookie should import from here
+ * instead of hardcoding 'imajin_session'.
+ */
+/** The session cookie name. Use a different name per environment to prevent collisions. */
+declare function getSessionCookieName(env?: "dev" | "prod"): string;
+/** Default cookie name — resolves at import time based on environment */
+declare const SESSION_COOKIE_NAME: string;
+/** Cookie options for cross-subdomain sessions.
+ *  When called with no argument, auto-detects from IMAJIN_ENV (same logic as getSessionCookieName).
+ *  Accepts optional "dev" | "prod" override for explicit control.
+ *
+ *  Localhost-aware: when SERVICE_PREFIX contains "localhost", uses
+ *  settings compatible with HTTP on localhost (no domain, not secure, lax sameSite).
+ *
+ *  See {@link isHostScoped} for the `SESSION_COOKIE_SCOPE=host` opt-in that
+ *  narrows the deployed cookie to host-only instead of `.imajin.ai`.
+ */
+declare function getSessionCookieOptions(env?: "dev" | "prod"): {
+    name: string;
+    options: {
+        maxAge: number;
+        domain?: string | undefined;
+        httpOnly: boolean;
+        secure: boolean;
+        sameSite: "lax" | "none";
+        path: string;
+    };
+};
+
+/**
+ * basePath-aware utilities for userspace apps running behind Next.js basePath.
+ *
+ * Next.js `basePath` auto-prefixes <Link> and router.push() but NOT:
+ *   - fetch() calls
+ *   - <a href=""> tags
+ *   - globalThis.location assignments
+ *
+ * These utilities read NEXT_PUBLIC_BASE_PATH (set automatically by Next.js
+ * when basePath is configured) and prepend it where needed.
+ *
+ * Usage:
+ *   import { apiFetch, apiUrl } from '@ima-jin/config';
+ *
+ *   // Instead of: fetch('/api/listings')
+ *   apiFetch('/api/listings')
+ *
+ *   // For <a> tags or globalThis.location:
+ *   <a href={apiUrl('/dashboard')}>Dashboard</a>
+ *   globalThis.location.href = apiUrl('/dashboard');
+ */
+/**
+ * Prepend basePath to any root-relative path.
+ *
+ *   apiUrl('/api/listings')  → '/market/api/listings'  (with basePath: '/market')
+ *   apiUrl('/dashboard')     → '/market/dashboard'
+ *   apiUrl('/api/listings')  → '/api/listings'          (standalone, no basePath)
+ */
+declare function apiUrl(path: string): string;
+/**
+ * basePath-aware fetch wrapper. Drop-in replacement for fetch() with
+ * root-relative paths.
+ *
+ *   apiFetch('/api/listings')           → fetch('/market/api/listings')
+ *   apiFetch('/api/listings', { ... })  → fetch('/market/api/listings', { ... })
+ *
+ * Absolute URLs (http://, https://) are passed through unchanged.
+ *
+ * For server-side service-to-service calls, forward the X-Correlation-Id header
+ * so the full request chain shares one ID. apiFetch is browser-side too, so it
+ * can't read headers here automatically — pass it explicitly via init.headers
+ * when calling from a withLogger handler:
+ *
+ *   apiFetch('/api/something', {
+ *     headers: { 'x-correlation-id': correlationId },
+ *   });
+ *
+ * see: automatic correlationId forwarding on outbound apiFetch/fetch calls from
+ * withLogger handlers is not yet wired up.
+ */
+declare function apiFetch(path: string, init?: RequestInit): Promise<Response>;
+
+/**
+ * Simple sliding-window in-memory rate limiter.
+ * Safe for single-process Next.js. Per-worker in multi-worker setups (acceptable).
+ */
+declare function rateLimit(key: string, limit: number, windowMs: number): {
+    limited: boolean;
+    retryAfter: number;
+};
+declare function getClientIP(request: Request): string;
+
+/**
+ * Minimal public node metadata returned by GET /registry/api/node/self.
+ * Mirrors the subset of `relay.relay_config` the registry service exposes
+ * publicly — never the private config (profile artifact JWS, etc).
+ */
+interface NodeSelfInfo {
+    /** This node's own DID (did:imajin:...). */
+    did: string;
+    /** DID of the human/entity operating this node, if configured. */
+    nodeOperatorDid: string | null;
+    /** Node fee, in basis points, applied to .fair settlements on this node. */
+    nodeFeeBps: number | null;
+    /** Buyer credit, in basis points, applied to .fair settlements on this node. */
+    buyerCreditBps: number | null;
+}
+/**
+ * Fetch this node's public identity + .fair fee config from the registry
+ * service (`GET /registry/api/node/self`, #2000).
+ *
+ * Replaces raw `relay.relay_config` SQL reads that were duplicated across
+ * coffee, learn, events, and market (audit item 8 of #1983). Returns null on
+ * any failure — network error, non-2xx response (e.g. 503 when the node
+ * identity hasn't been bootstrapped yet) — so callers can fall back to
+ * defaults exactly as they did when the raw SQL row was missing. A non-2xx
+ * response is logged with the URL actually hit (no secrets) so a
+ * misconfigured REGISTRY_SERVICE_URL prefix is visible instead of failing
+ * silently (#2046).
+ */
+declare function getNodeSelf(): Promise<NodeSelfInfo | null>;
+
+/**
+ * Single resolver for the registry service's base URL (#2061 — kernel was
+ * the last `REGISTRY_URL` holdout after #2048 established the
+ * `*_SERVICE_URL` convention).
+ *
+ * The returned value always includes the `/registry` path prefix, like
+ * every other `*_SERVICE_URL` (#2046) — callers append only the endpoint
+ * path (e.g. `/api/node/self`, `/relay/operations`).
+ *
+ * Precedence:
+ *   1. `REGISTRY_SERVICE_URL` — the current convention.
+ *   2. `REGISTRY_URL` — deprecated kernel-only legacy name. Used if set,
+ *      but logs a one-time deprecation warning per process.
+ *   3. `http://localhost:${PORT || 3000}/registry` — the mode-aware
+ *      fallback (PORT is 3000 in dev, 7000 in prod) that
+ *      `relay-well-known.ts` already used before this consolidation.
+ */
+declare function registryServiceUrl(): string;
+/**
+ * True when the registry URL is explicitly configured via either the
+ * current (`REGISTRY_SERVICE_URL`) or deprecated (`REGISTRY_URL`) env var.
+ *
+ * `registryServiceUrl()` always returns a value (it falls back to a
+ * localhost guess), so callers that previously guarded on
+ * `!process.env.REGISTRY_URL` to skip/no-op when the registry isn't
+ * configured should check this instead.
+ */
+declare function hasRegistryServiceUrl(): boolean;
+
+/**
+ * Public forest-group (scope) config exposed by
+ * `GET /api/forest/{groupDid}/config/public` on the profile service. Only
+ * the field relevant to `.fair` fee-split calculation is modeled here — the
+ * rest of the config (enabledServices, landingService, etc.) is a
+ * community-settings concern, not a shared SDK concern.
+ */
+interface ForestScopeConfig {
+    /** Group's configured revenue-share fee, in basis points (0-500). Null if unset. */
+    scopeFeeBps: number | null;
+}
+/**
+ * Fetch a forest group's public scope-fee config from the profile service
+ * (`GET /api/forest/{groupDid}/config/public`, documented in
+ * `apps/kernel/api-spec/profile.yaml`).
+ *
+ * Replaces raw `profile.forest_config` SQL reads that were duplicated
+ * across coffee, learn, and market (audit item 9 of #1983, #2001). Returns
+ * null on any failure — network error, non-2xx response — so callers can
+ * fall back to the same `scopeFeeBps: null` default they used when the raw
+ * SQL row was missing.
+ */
+declare function getForestScopeConfig(groupDid: string): Promise<ForestScopeConfig | null>;
+
+/**
+ * Handle validation and normalization.
+ *
+ * Handles are node-scoped today, globally unique via DFOS chain in the future.
+ * Pattern: lowercase alphanumeric + dots, hyphens, underscores. 3-30 chars.
+ * No leading/trailing dots or hyphens. No consecutive dots or hyphens.
+ */
+/** Regex: the full allowed character set, length enforced */
+declare const HANDLE_PATTERN: RegExp;
+/** HTML input pattern attribute (no anchors, no flags) */
+declare const HANDLE_INPUT_PATTERN: string;
+/** Characters allowed in handles — use in onChange filters */
+declare const HANDLE_ALLOWED_CHARS: RegExp;
+/** Reserved handles that cannot be claimed */
+declare const RESERVED_HANDLES: Set<string>;
+/** Validate handle format (does NOT check reserved or uniqueness) */
+declare function isValidHandle(handle: string): boolean;
+/** Check if handle is reserved */
+declare function isReservedHandle(handle: string): boolean;
+/** Normalize input: lowercase, strip disallowed chars */
+declare function normalizeHandleInput(value: string): string;
+/** Validation error message */
+declare const HANDLE_ERROR = "Handle must be 3-30 characters: lowercase letters, numbers, dots, hyphens, underscores";
+
+/**
+ * Centralized public route paths.
+ * Every service imports from here — change the prefix once, changes everywhere.
+ *
+ * Note: These are the *public-facing* URL paths (after any proxy/basePath
+ * stripping).  Internal Next.js file paths may differ (e.g. kernel profiles
+ * are in `app/profile/p/[handle]` but the public URL is `/p/[handle]`).
+ */
+declare const eventPath: (eventId: string) => string;
+declare const eventEditPath: (eventId: string) => string;
+declare const eventRegisterPath: (eventId: string, ticketId: string) => string;
+declare const eventMyTicketsPath: (eventId: string) => string;
+declare const eventCheckoutSuccessPath: (eventId: string) => string;
+declare const eventAdminPath: (eventId: string) => string;
+declare const eventsDashboardPath: () => string;
+declare const eventsCreatePath: () => string;
+declare const eventsCheckoutSuccessPath: () => string;
+declare const eventsAdminListPath: () => string;
+declare const eventUrl: (baseUrl: string, eventId: string) => string;
+declare const eventEditUrl: (baseUrl: string, eventId: string) => string;
+declare const eventRegisterUrl: (baseUrl: string, eventId: string, ticketId: string) => string;
+declare const eventMyTicketsUrl: (baseUrl: string, eventId: string) => string;
+declare const profilePath: (handle: string) => string;
+declare const profileEditPath: () => string;
+declare const profileLoginPath: () => string;
+declare const profileRegisterPath: () => string;
+declare const profileUrl: (baseUrl: string, handle: string) => string;
+declare const authLoginPath: () => string;
+declare const authRegisterPath: () => string;
+declare const authOnboardPath: () => string;
+declare const authSettingsPath: () => string;
+declare const authSecurityPath: () => string;
+declare const authGroupSettingsPath: (groupDid: string) => string;
+declare const authGroupsPath: () => string;
+declare const authNewGroupPath: () => string;
+declare const authAgentsPath: () => string;
+declare const authAppsPath: () => string;
+declare const authAttestationsPath: () => string;
+declare const authAuthorizePath: () => string;
+declare const authDeveloperAppsPath: () => string;
+declare const authDeveloperAppPath: (appId: string) => string;
+declare const authMembersPath: () => string;
+declare const authNotificationsPath: () => string;
+declare const authStubsPath: (did: string) => string;
+declare const authNewStubPath: () => string;
+declare const chatConversationsPath: () => string;
+declare const chatConversationPath: (type: string, slug: string) => string;
+declare const chatPath: () => string;
+declare const connectionsPath: () => string;
+declare const connectionsInvitePath: (did: string, code: string) => string;
+declare const connectionsPodPath: (id: string) => string;
+declare const payPath: () => string;
+declare const payHistoryPath: () => string;
+declare const payPayoutsPath: () => string;
+declare const payTopupPath: () => string;
+declare const payTopupSuccessPath: () => string;
+declare const mediaPath: () => string;
+declare const learnCoursePath: (slug: string) => string;
+declare const learnCourseLessonPath: (slug: string, lessonId: string) => string;
+declare const learnCoursePresentPath: (slug: string) => string;
+declare const learnDashboardPath: () => string;
+declare const learnCourseDashboardPath: (slug: string) => string;
+declare const learnCourseStudentsPath: (slug: string) => string;
+declare const learnHandlePath: (handle: string) => string;
+declare const coffeeHandlePath: (handle: string) => string;
+declare const coffeeDashboardPath: () => string;
+declare const coffeeEditPath: () => string;
+declare const coffeeSuccessPath: () => string;
+declare const dykilHandlePath: (handle: string) => string;
+declare const dykilSurveyPath: (handle: string, surveyId: string) => string;
+declare const dykilCreatePath: () => string;
+declare const dykilDashboardPath: () => string;
+declare const dykilResultsPath: (id: string) => string;
+declare const dykilEmbedPath: (surveyId: string) => string;
+declare const linksHandlePath: (handle: string) => string;
+declare const linksDashboardPath: () => string;
+declare const linksEditPath: () => string;
+declare const marketListingPath: (id: string) => string;
+declare const marketListingEditPath: (id: string) => string;
+declare const marketNewListingPath: () => string;
+declare const marketSellerPath: (handle: string) => string;
+declare const marketCheckoutSuccessPath: () => string;
+declare const marketDashboardPath: () => string;
+declare const marketSettingsPath: () => string;
+declare const articlesPath: () => string;
+declare const articleAuthorPath: (handle: string) => string;
+declare const articlePath: (handle: string, slug: string) => string;
+declare const registryPath: () => string;
+declare const registryDocsPath: () => string;
+declare const buildPath: () => string;
+declare const bumpPath: () => string;
+declare const bugsPath: () => string;
+declare const bugsAdminPath: () => string;
+declare const healthPath: () => string;
+declare const privacyPath: () => string;
+declare const whitepaperPath: () => string;
+declare const subscribePath: () => string;
+declare const developerGuidePath: () => string;
+declare const docsPath: () => string;
+declare const projectPath: () => string;
+declare const notifyPath: () => string;
+declare const notifySettingsPath: () => string;
+
+export { ALLOWED_FRAME_ORIGINS, APP_DISPLAY_NAME, type ForestScopeConfig, HANDLE_ALLOWED_CHARS, HANDLE_ERROR, HANDLE_INPUT_PATTERN, HANDLE_PATTERN, type NodeSelfInfo, RESERVED_HANDLES, SERVICES, SERVICE_NAMES, SESSION_COOKIE_NAME, type ServiceCategory, type ServiceDefinition, type ServiceTier, type ServiceVisibility, type StandaloneDashboardMiddlewareOptions, apiFetch, apiUrl, articleAuthorPath, articlePath, articlesPath, authAgentsPath, authAppsPath, authAttestationsPath, authAuthorizePath, authDeveloperAppPath, authDeveloperAppsPath, authGroupSettingsPath, authGroupsPath, authLoginPath, authMembersPath, authNewGroupPath, authNewStubPath, authNotificationsPath, authOnboardPath, authRegisterPath, authSecurityPath, authSettingsPath, authStubsPath, bugsAdminPath, bugsPath, buildPath, buildPublicUrl, buildPublicUrlAbsolute, buildServiceUrlMap, bumpPath, chatConversationPath, chatConversationsPath, chatPath, coffeeDashboardPath, coffeeEditPath, coffeeHandlePath, coffeeSuccessPath, connectionsInvitePath, connectionsPath, connectionsPodPath, corsHeaders, corsOptions, developerGuidePath, docsPath, dykilCreatePath, dykilDashboardPath, dykilEmbedPath, dykilHandlePath, dykilResultsPath, dykilSurveyPath, eventAdminPath, eventCheckoutSuccessPath, eventEditPath, eventEditUrl, eventMyTicketsPath, eventMyTicketsUrl, eventPath, eventRegisterPath, eventRegisterUrl, eventUrl, eventsAdminListPath, eventsCheckoutSuccessPath, eventsCreatePath, eventsDashboardPath, getClientIP, getForestScopeConfig, getNodeSelf, getPort, getPublicUrl, getService, getServiceUrl, getSessionCookieName, getSessionCookieOptions, hasRegistryServiceUrl, healthPath, isAllowedOrigin, isReservedHandle, isValidHandle, learnCourseDashboardPath, learnCourseLessonPath, learnCoursePath, learnCoursePresentPath, learnCourseStudentsPath, learnDashboardPath, learnHandlePath, linksDashboardPath, linksEditPath, linksHandlePath, marketCheckoutSuccessPath, marketDashboardPath, marketListingEditPath, marketListingPath, marketNewListingPath, marketSellerPath, marketSettingsPath, mediaPath, normalizeHandleInput, notifyPath, notifySettingsPath, payHistoryPath, payPath, payPayoutsPath, payTopupPath, payTopupSuccessPath, privacyPath, profileEditPath, profileLoginPath, profilePath, profileRegisterPath, profileUrl, projectPath, rateLimit, registryDocsPath, registryPath, registryServiceUrl, servicesByTier, servicesByVisibility, standaloneDashboardMiddleware, subscribePath, tier1Headers, tier2Headers, tier3Headers, validateOrigin, whitepaperPath, withCors };