feat(orion): add rest api for waitlist

go/cmd/orion/main.go

@@ -19,6 +19,7 @@ import (
 	"github.com/flowy-live/llink/internal/network"
 	"github.com/flowy-live/llink/internal/particle"
 	"github.com/flowy-live/llink/internal/utils"
+	"github.com/flowy-live/llink/internal/waitlist"
 	"github.com/redis/go-redis/v9"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials/insecure"
@@ -75,9 +76,10 @@ func main() {
 		GoogleServiceAccountEmail: utils.MustGetEnv("GOOGLE_SERVICE_ACCOUNT_EMAIL"),
 		BucketName:                gcsBucket,
 	})
+	waitlistSvc := waitlist.NewService(db.Pool())
 
 	// Initialize handler
-	h := handler.NewHandler(authSvc, humanSvc, networkSvc, particleSvc, depotSvc)
+	h := handler.NewHandler(authSvc, humanSvc, networkSvc, particleSvc, depotSvc, waitlistSvc)
 
 	// Helper to wrap handlers with auth middleware
 	withAuth := func(hf http.HandlerFunc) http.Handler {
@@ -97,6 +99,7 @@ func main() {
 	})
 	mux.HandleFunc("POST /auth/request-code", h.RequestSignInCode)
 	mux.HandleFunc("POST /auth/sign-in", h.SignIn)
+	mux.HandleFunc("POST /waitlist", h.AddToWaitlist)
 
 	// ==========================================================================
 	// Protected routes (auth required)
@@ -126,6 +129,11 @@ func main() {
 	mux.Handle("POST /depot/upload", withAuth(h.PrepareUpload))
 	mux.Handle("POST /depot/objects/{id}/confirm", withAuth(h.ConfirmUpload))
 
+	// Waitlist (admin-only)
+	mux.Handle("GET /waitlist", withAuth(h.GetWaitlist))
+	mux.Handle("GET /waitlist/{email}", withAuth(h.GetWaitlistEntry))
+	mux.Handle("POST /waitlist/invite", withAuth(h.InviteWaitlistEntrant))
+
 	// Apply middleware
   // nil allows all origins (required for electron app)
 	muxWithCors := middleware.CORS(nil)(mux)