946c755f17
Public (slug-gated, auto-allowlisted): - GET /api/public/feedback/[slug] — instance config - POST /api/public/feedback/[slug]/submit — form submission (honeypot, rate-limit, required-validation, 423 if closed) - GET /api/public/feedback/[slug]/posts — chat polling (?since=, hides body of moderated posts) - POST /api/public/feedback/[slug]/posts — new chat post (honeypot, rate-limit, 423 if closed) Admin (requireAuth, owner-scoped): - GET/POST /api/admin/feedback — list/create - GET/PATCH/DELETE /api/admin/feedback/[id] — detail/update/delete (PATCH closes/reopens, sets closed_at) - POST /api/admin/feedback/[id]/posts/[post_id]/hide — toggle hidden flag - GET /api/admin/feedback/[id]/export?format=csv|json — single-file dump Auth: - POST /api/auth/sign-in — Supabase email+password, sets access+refresh cookies - POST /api/auth/sign-out — clears cookies bun run check: 0 errors, 0 warnings.