Add comprehensive API documentation for all routes

[Copilot]

Creates detailed API reference documentation covering all 13 API endpoints with authentication methods, headers, parameters, request/response examples, and error codes.

Changes

Documentation (docs/API.md)

• Complete endpoint reference for waypoints, reviews, users, XP, stats, uploads, reports, and moderator functions
• Both authentication methods: NextAuth session cookies and Bearer token API keys
• Request/response JSON examples for all endpoints
• Query parameters, path parameters, and headers tables
• Error codes (400, 401, 403, 404, 500) with descriptions
• XP system rewards (30/15/10 XP) and requirements (750/250 XP)
• Moderator advanced search syntax with token filters (verified:true, region:NYC, etc.)
• Pagination and rate limiting guidelines

README Update

• Added documentation section linking to API.md and existing docs

Example Usage

# Create waypoint with API token
POST /api/waypoints
Authorization: Bearer YOUR_API_TOKEN
Content-Type: application/json

{
  "name": "Central Park Fountain",
  "latitude": 40.785091,
  "longitude": -73.968285,
  "description": "Public drinking fountain",
  "verified": true
}

# Advanced moderator search
GET /api/moderator?type=bubblers&q=verified:true region:NYC

# XP leaderboard
GET /api/xp?action=leaderboard&limit=20

All endpoints include authentication requirements, allowed fields for different user roles (regular/moderator/API token), and XP constraints where applicable.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• checkpoint.prisma.io
  • Triggering command: /usr/local/bin/node /usr/local/bin/node /home/REDACTED/work/maps/maps/node_modules/prisma/build/child {"product":"prisma","version":"6.18.0","cli_install_type":"local","information":"","local_timestamp":"2025-11-22T01:16:58Z","project_hash":"13c2e2a5","cli_path":"/home/REDACTED/work/maps/maps/node_modules/.bin/prisma","cli_path_hash":"7608c006","endpoint":" (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

please create documentation fkr all of my app routes, headers rrwuired, etc. should be extremely detailed

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.