API reference

A working summary of the cloud HTTP surface. Internals (gateway HTTP routes used by the Flutter client) are not stable across versions — read the source in src/gateway/routes/ if you need them.

All cloud workers respond JSON unless noted. CORS is open. Admin endpoints require X-Deploy-Secret (or PLUGIN_DEPLOY_SECRET).

accounts-worker — accounts.youkore.com

User identity, OAuth, gateways, invites, support.

Public

Method	Path	Purpose
POST	/register	Create an account
POST	/login	Email + password (returns token, may require 2FA)
GET	/verify	Email verification redirect
POST	/forgot-password	Trigger password-reset email
POST	/reset-password	Complete password reset

Authenticated (Bearer token)

Method	Path	Purpose
GET	/me	Current user info
DELETE	/account	Delete the account
POST	/gateways	Register a gateway (this Youkore install)
GET	/gateways	List the user's gateways
POST	/gateways/deactivate	Mark a gateway as expired (uninstall)
POST	/verify-client	Token + gateway + build_hash check
POST	/devices/register	Register a Flutter client device
POST	/invites/create	Generate an invite
GET	/invites/list	List your invites

releases-worker — releases.youkore.com

Signed Youkore client builds.

Public

Method	Path	Purpose
GET	/latest?platform=&channel=	Update check; returns metadata + signature
GET	/download/:version/:platform	Download installer
GET	/signature/:version/:platform	Download .sig
GET	/notes/:version	Release notes

Admin (X-Deploy-Secret)

Method	Path	Purpose
POST	/upload	Single-shot signed upload
POST	/upload/request	Begin multipart upload (carries signature)
PUT	/upload/part	Upload one part
POST	/upload/complete	Finalize and verify signature
POST	/publish	Mark a release published; updates latest_releases pointer
POST	/revoke	Unpublish

plugins-worker — plugins.youkore.com

Plugin store catalog and signed bundles.

Public

Method	Path	Purpose
GET	/catalog?category=&search=	List published plugins
GET	/plugins/:plugin_id	Plugin metadata + version list
GET	/download/:plugin_id/:version	Download .yk bundle
GET	/signature/:plugin_id/:version	Download .yk.sig

Admin (PLUGIN_DEPLOY_SECRET)

Method	Path	Purpose
POST	/upsert-plugin	Create or update plugin metadata
POST	/upload	Upload signed bundle (verifies signature server-side)
POST	/publish	Mark version published; updates plugins.latest_version
POST	/promote	Channel transition (e.g. beta → stable)
POST	/revoke	Unpublish

admin-worker — admin.youkore.com

Operator dashboard. Login is role-gated (admin role + 2FA required). The dashboard speaks to all three D1 databases via the same worker (separate bindings).