dineway 0.1.15 → 0.1.17

package/dist/astro/routes/api/media/file/_...key_.mjs

@@ -1,4 +1,4 @@
-import { r as handleError, t as apiError } from "../../../../../error-BMUPwxgx.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-Dyf9fGZE.mjs";
 
 //#region src/astro/routes/api/media/file/[...key].ts
 const prerender = false;

package/dist/astro/routes/api/media/providers/_providerId_/_itemId_.mjs

@@ -1,5 +1,5 @@
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-BMUPwxgx.mjs";
-import { n as requirePerm } from "../../../../../../authorize-BAdbMCwC.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-Dyf9fGZE.mjs";
+import { n as requirePerm } from "../../../../../../authorize-wQDmXQJ1.mjs";
 
 //#region src/astro/routes/api/media/providers/[providerId]/[itemId].ts
 const prerender = false;

package/dist/astro/routes/api/media/providers/_providerId_/index.mjs

@@ -1,5 +1,5 @@
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-BMUPwxgx.mjs";
-import { n as requirePerm } from "../../../../../../authorize-BAdbMCwC.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-Dyf9fGZE.mjs";
+import { n as requirePerm } from "../../../../../../authorize-wQDmXQJ1.mjs";
 
 //#region src/astro/routes/api/media/providers/[providerId]/index.ts
 const prerender = false;

package/dist/astro/routes/api/media/providers/index.mjs

@@ -1,5 +1,5 @@
-import { n as apiSuccess, t as apiError } from "../../../../../error-BMUPwxgx.mjs";
-import { n as requirePerm } from "../../../../../authorize-BAdbMCwC.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-Dyf9fGZE.mjs";
+import { n as requirePerm } from "../../../../../authorize-wQDmXQJ1.mjs";
 
 //#region src/astro/routes/api/media/providers/index.ts
 const prerender = false;

package/dist/astro/routes/api/media/upload-url.mjs

@@ -1,10 +1,12 @@
-import "../../../../context-types-C-LwdAxx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-C9106ehs.mjs";
-import { Ft as DEFAULT_MAX_UPLOAD_SIZE, Kt as mediaUploadUrlBody } from "../../../../redirects-lrlmYXVE.mjs";
-import "../../../../import-CNcKWTbp.mjs";
+import { n as normalizeMime, t as matchesMimeAllowlist } from "../../../../mime-DJOFDGux.mjs";
+import "../../../../context-types-DuiyY6xF.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-Dyf9fGZE.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BBfZRZYb.mjs";
+import { Rt as DEFAULT_MAX_UPLOAD_SIZE, Yt as mediaUploadUrlBody } from "../../../../redirects-xVDvj_yQ.mjs";
+import "../../../../import-DE2ziezs.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../authorize-BAdbMCwC.mjs";
+import { n as requirePerm } from "../../../../authorize-wQDmXQJ1.mjs";
+import { n as resolveFieldAllowlist, t as GLOBAL_UPLOAD_ALLOWLIST } from "../../../../media-allowlist-eS3AZ2L_.mjs";
 import { ulid } from "ulidx";
 import * as path from "node:path";
 import { MediaRepository } from "dineway";
@@ -33,12 +35,8 @@ const POST = async ({ request, locals }) => {
 		if (!Number.isFinite(maxUploadSize) || maxUploadSize <= 0) return apiError("CONFIGURATION_ERROR", "Invalid maxUploadSize configuration. Expected a positive finite number.", 500);
 		const body = await parseBody(request, mediaUploadUrlBody(maxUploadSize));
 		if (isParseError(body)) return body;
-		if (![
-			"image/",
-			"video/",
-			"audio/",
-			"application/pdf"
-		].some((type) => body.contentType.startsWith(type))) return apiError("INVALID_TYPE", "File type not allowed", 400);
+		const allowlist = (body.fieldId ? await resolveFieldAllowlist(dineway.db, body.fieldId) : null) ?? [...GLOBAL_UPLOAD_ALLOWLIST];
+		if (!matchesMimeAllowlist(body.contentType, allowlist)) return apiError("INVALID_TYPE", "File type not allowed", 400);
 		const repo = new MediaRepository(dineway.db);
 		if (body.contentHash) {
 			const existing = await repo.findByContentHash(body.contentHash);
@@ -52,7 +50,7 @@ const POST = async ({ request, locals }) => {
 		const storageKey = `${ulid()}${path.extname(body.filename) || ""}`;
 		const mediaItem = await repo.createPending({
 			filename: body.filename,
-			mimeType: body.contentType,
+			mimeType: normalizeMime(body.contentType),
 			size: body.size,
 			storageKey,
 			contentHash: body.contentHash,

package/dist/astro/routes/api/media.mjs

@@ -1,15 +1,17 @@
-import "../../../base64-Cz-aU0X1.mjs";
-import "../../../types-Bs6lTBBW.mjs";
-import { t as MediaRepository } from "../../../media-_7Fxdu45.mjs";
-import { t as generatePlaceholder } from "../../../placeholder-C2P5fKa4.mjs";
-import "../../../context-types-C-LwdAxx.mjs";
-import { t as computeContentHash } from "../../../hash-CDX7M0ze.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../error-BMUPwxgx.mjs";
-import { i as parseQuery, t as isParseError } from "../../../parse-C9106ehs.mjs";
-import { Ft as DEFAULT_MAX_UPLOAD_SIZE, It as formatFileSize, Vt as mediaListQuery } from "../../../redirects-lrlmYXVE.mjs";
-import "../../../import-CNcKWTbp.mjs";
+import "../../../base64-C1Q9yr0B.mjs";
+import "../../../types-D1DjBFA9.mjs";
+import { t as MediaRepository } from "../../../media-Cg4zc9fq.mjs";
+import { t as generatePlaceholder } from "../../../placeholder-BJPmhjHP.mjs";
+import { n as normalizeMime, t as matchesMimeAllowlist } from "../../../mime-DJOFDGux.mjs";
+import "../../../context-types-DuiyY6xF.mjs";
+import { t as computeContentHash } from "../../../hash-V8oZo1W2.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../error-Dyf9fGZE.mjs";
+import { i as parseQuery, t as isParseError } from "../../../parse-BBfZRZYb.mjs";
+import { Rt as DEFAULT_MAX_UPLOAD_SIZE, Wt as mediaListQuery, zt as formatFileSize } from "../../../redirects-xVDvj_yQ.mjs";
+import "../../../import-DE2ziezs.mjs";
 import "../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../authorize-BAdbMCwC.mjs";
+import { n as requirePerm } from "../../../authorize-wQDmXQJ1.mjs";
+import { n as resolveFieldAllowlist, t as GLOBAL_UPLOAD_ALLOWLIST } from "../../../media-allowlist-eS3AZ2L_.mjs";
 import { ulid } from "ulidx";
 import * as path from "node:path";
 
@@ -72,12 +74,10 @@ const POST = async ({ request, locals }) => {
 		const fileEntry = formData.get("file");
 		const file = fileEntry instanceof File ? fileEntry : null;
 		if (!file) return apiError("NO_FILE", "No file provided", 400);
-		if (![
-			"image/",
-			"video/",
-			"audio/",
-			"application/pdf"
-		].some((type) => file.type.startsWith(type))) return apiError("INVALID_TYPE", "File type not allowed", 400);
+		const fieldIdEntry = formData.get("fieldId");
+		const fieldId = typeof fieldIdEntry === "string" && fieldIdEntry.length > 0 ? fieldIdEntry : null;
+		const allowlist = (fieldId ? await resolveFieldAllowlist(dineway.db, fieldId) : null) ?? [...GLOBAL_UPLOAD_ALLOWLIST];
+		if (!matchesMimeAllowlist(file.type, allowlist)) return apiError("INVALID_TYPE", "File type not allowed", 400);
 		if (file.size > maxUploadSize) return apiError("PAYLOAD_TOO_LARGE", `File exceeds maximum size of ${formatFileSize(maxUploadSize)}`, 413);
 		const buffer = new Uint8Array(await file.arrayBuffer());
 		const contentHash = await computeContentHash(buffer);
@@ -111,7 +111,7 @@ const POST = async ({ request, locals }) => {
 		}
 		const result = await dineway.handleMediaCreate({
 			filename: file.name,
-			mimeType: file.type,
+			mimeType: normalizeMime(file.type),
 			size: file.size,
 			width,
 			height,

package/dist/astro/routes/api/menus/_name_/items.mjs

@@ -1,46 +1,52 @@
-import "../../../../../dialect-helpers-DhTzaUxP.mjs";
-import "../../../../../content-CyLkb-qH.mjs";
-import "../../../../../base64-Cz-aU0X1.mjs";
-import "../../../../../types-Bs6lTBBW.mjs";
-import "../../../../../media-_7Fxdu45.mjs";
-import "../../../../../options-z8VVg1Ll.mjs";
-import "../../../../../site-activity-B8FjLIVh.mjs";
-import "../../../../../review-requests-C2DIHwlJ.mjs";
-import "../../../../../entity-aliases-C0v-yNET.mjs";
-import "../../../../../briefing-MVYe_Uyf.mjs";
-import "../../../../../context-types-C-LwdAxx.mjs";
-import "../../../../../fts-manager-B1pTNEG_.mjs";
-import "../../../../../registry-C-_hxLqa.mjs";
-import "../../../../../loader-PZnPxFLc.mjs";
-import "../../../../../settings-DGtLLSaz.mjs";
-import "../../../../../request-cache-DHMRr2Lf.mjs";
-import "../../../../../query-CsbOywSY.mjs";
-import "../../../../../zod-generator-DBVP8D0P.mjs";
-import "../../../../../schema-BECjUhP8.mjs";
-import { a as handleMenuItemDelete, i as handleMenuItemCreate, s as handleMenuItemUpdate } from "../../../../../menus-DS3_5nWY.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../../error-BMUPwxgx.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-C9106ehs.mjs";
-import { $ as menuItemDeleteQuery, Q as createMenuItemBody, st as updateMenuItemBody, tt as menuItemUpdateQuery } from "../../../../../redirects-lrlmYXVE.mjs";
-import "../../../../../import-CNcKWTbp.mjs";
+import "../../../../../dialect-helpers-TkdbkFad.mjs";
+import "../../../../../content-DvpMad_N.mjs";
+import "../../../../../base64-C1Q9yr0B.mjs";
+import "../../../../../types-D1DjBFA9.mjs";
+import "../../../../../media-Cg4zc9fq.mjs";
+import "../../../../../options-BF11H_FD.mjs";
+import "../../../../../site-activity-lsCX_cqp.mjs";
+import "../../../../../review-requests-BYuoyse0.mjs";
+import "../../../../../entity-aliases-PJV8IxDq.mjs";
+import "../../../../../request-cache-DmVyQUBh.mjs";
+import "../../../../../briefing-4k6R0KAr.mjs";
+import "../../../../../context-types-DuiyY6xF.mjs";
+import "../../../../../fts-manager-D7KVeBmg.mjs";
+import "../../../../../registry-DumDzFDn.mjs";
+import "../../../../../loader-CQFxFOt1.mjs";
+import "../../../../../settings-qPzY2KIF.mjs";
+import "../../../../../query-BtuwuZRd.mjs";
+import "../../../../../zod-generator-BKhtHT3e.mjs";
+import "../../../../../schema-D1z41cq_.mjs";
+import { a as handleMenuItemDelete, i as handleMenuItemCreate, s as handleMenuItemUpdate } from "../../../../../menus-CwI7DQJ5.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-Dyf9fGZE.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BBfZRZYb.mjs";
+import { et as createMenuItemBody, kn as localeFilterQuery, rt as menuItemUpdateQuery, tt as menuItemDeleteQuery, ut as updateMenuItemBody } from "../../../../../redirects-xVDvj_yQ.mjs";
+import "../../../../../import-DE2ziezs.mjs";
 import "../../../../../api/schemas/index.mjs";
-import "../../../../../utils-C0ONdBul.mjs";
-import "../../../../../search-DqTHQqtV.mjs";
-import { n as requirePerm } from "../../../../../authorize-BAdbMCwC.mjs";
-import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-WBxoD99D.mjs";
-import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-B4wp7CrU.mjs";
-import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-CSit54Ru.mjs";
+import "../../../../../utils-BJF19gfk.mjs";
+import "../../../../../search-CPcQGTHW.mjs";
+import { n as requirePerm } from "../../../../../authorize-wQDmXQJ1.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-DHRIU6x9.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-DbqJBNaY.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-DcUCm57p.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/menus/[name]/items.ts
 const prerender = false;
 const createMenuItemHitlBody = createMenuItemBody.extend({ hitlRequestId: z.string().min(1).optional() });
 const updateMenuItemHitlBody = updateMenuItemBody.extend({ hitlRequestId: z.string().min(1).optional() });
-const deleteMenuItemHitlQuery = menuItemDeleteQuery.extend({ hitlRequestId: z.string().min(1).optional() });
+const deleteMenuItemHitlQuery = menuItemDeleteQuery.extend({
+	locale: z.string().min(1).optional(),
+	hitlRequestId: z.string().min(1).optional()
+});
+const updateMenuItemHitlQuery = menuItemUpdateQuery.extend({ locale: z.string().min(1).optional() });
 const POST = async ({ params, request, locals }) => {
 	const { dineway, user } = locals;
 	const name = params.name;
 	const denied = requirePerm(user, "menus:manage");
 	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
 	try {
 		const body = await parseBody(request, createMenuItemHitlBody);
 		if (isParseError(body)) return body;
@@ -48,6 +54,7 @@ const POST = async ({ params, request, locals }) => {
 		const actor = resolveHitlRouteActor(locals);
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildCreateMenuItemRequest({
 			menuName: name,
+			locale: localeQ.locale,
 			...menuInput
 		});
 		const decision = await new RiskPolicyEvaluator({
@@ -59,7 +66,7 @@ const POST = async ({ params, request, locals }) => {
 			action
 		});
 		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
-		const result = await handleMenuItemCreate(dineway.db, name, menuInput);
+		const result = await handleMenuItemCreate(dineway.db, name, menuInput, { locale: localeQ.locale });
 		if (!result.success) return unwrapResult(result, 201);
 		await logMenuActivity(dineway.db, locals, {
 			action: "item_created",
@@ -82,7 +89,7 @@ const PUT = async ({ params, request, locals }) => {
 	const name = params.name;
 	const denied = requirePerm(user, "menus:manage");
 	if (denied) return denied;
-	const query = parseQuery(new URL(request.url), menuItemUpdateQuery);
+	const query = parseQuery(new URL(request.url), updateMenuItemHitlQuery);
 	if (isParseError(query)) return query;
 	const itemId = query.id;
 	try {
@@ -93,6 +100,7 @@ const PUT = async ({ params, request, locals }) => {
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildUpdateMenuItemRequest({
 			menuName: name,
 			itemId,
+			locale: query.locale,
 			...menuInput
 		});
 		const decision = await new RiskPolicyEvaluator({
@@ -104,7 +112,7 @@ const PUT = async ({ params, request, locals }) => {
 			action
 		});
 		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
-		const result = await handleMenuItemUpdate(dineway.db, name, itemId, menuInput);
+		const result = await handleMenuItemUpdate(dineway.db, name, itemId, menuInput, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
 		await logMenuActivity(dineway.db, locals, {
 			action: "item_updated",
@@ -134,7 +142,8 @@ const DELETE = async ({ params, request, locals }) => {
 		const actor = resolveHitlRouteActor(locals);
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildDeleteMenuItemRequest({
 			menuName: name,
-			itemId
+			itemId,
+			locale: query.locale
 		});
 		const decision = await new RiskPolicyEvaluator({
 			db: dineway.db,
@@ -145,7 +154,7 @@ const DELETE = async ({ params, request, locals }) => {
 			action
 		});
 		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
-		const result = await handleMenuItemDelete(dineway.db, name, itemId);
+		const result = await handleMenuItemDelete(dineway.db, name, itemId, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
 		await logMenuActivity(dineway.db, locals, {
 			action: "item_deleted",

package/dist/astro/routes/api/menus/_name_/reorder.mjs

@@ -1,34 +1,34 @@
-import "../../../../../dialect-helpers-DhTzaUxP.mjs";
-import "../../../../../content-CyLkb-qH.mjs";
-import "../../../../../base64-Cz-aU0X1.mjs";
-import "../../../../../types-Bs6lTBBW.mjs";
-import "../../../../../media-_7Fxdu45.mjs";
-import "../../../../../options-z8VVg1Ll.mjs";
-import "../../../../../site-activity-B8FjLIVh.mjs";
-import "../../../../../review-requests-C2DIHwlJ.mjs";
-import "../../../../../entity-aliases-C0v-yNET.mjs";
-import "../../../../../briefing-MVYe_Uyf.mjs";
-import "../../../../../context-types-C-LwdAxx.mjs";
-import "../../../../../fts-manager-B1pTNEG_.mjs";
-import "../../../../../registry-C-_hxLqa.mjs";
-import "../../../../../loader-PZnPxFLc.mjs";
-import "../../../../../settings-DGtLLSaz.mjs";
-import "../../../../../request-cache-DHMRr2Lf.mjs";
-import "../../../../../query-CsbOywSY.mjs";
-import "../../../../../zod-generator-DBVP8D0P.mjs";
-import "../../../../../schema-BECjUhP8.mjs";
-import { o as handleMenuItemReorder } from "../../../../../menus-DS3_5nWY.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../../error-BMUPwxgx.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-C9106ehs.mjs";
-import { at as reorderMenuItemsBody } from "../../../../../redirects-lrlmYXVE.mjs";
-import "../../../../../import-CNcKWTbp.mjs";
+import "../../../../../dialect-helpers-TkdbkFad.mjs";
+import "../../../../../content-DvpMad_N.mjs";
+import "../../../../../base64-C1Q9yr0B.mjs";
+import "../../../../../types-D1DjBFA9.mjs";
+import "../../../../../media-Cg4zc9fq.mjs";
+import "../../../../../options-BF11H_FD.mjs";
+import "../../../../../site-activity-lsCX_cqp.mjs";
+import "../../../../../review-requests-BYuoyse0.mjs";
+import "../../../../../entity-aliases-PJV8IxDq.mjs";
+import "../../../../../request-cache-DmVyQUBh.mjs";
+import "../../../../../briefing-4k6R0KAr.mjs";
+import "../../../../../context-types-DuiyY6xF.mjs";
+import "../../../../../fts-manager-D7KVeBmg.mjs";
+import "../../../../../registry-DumDzFDn.mjs";
+import "../../../../../loader-CQFxFOt1.mjs";
+import "../../../../../settings-qPzY2KIF.mjs";
+import "../../../../../query-BtuwuZRd.mjs";
+import "../../../../../zod-generator-BKhtHT3e.mjs";
+import "../../../../../schema-D1z41cq_.mjs";
+import { o as handleMenuItemReorder } from "../../../../../menus-CwI7DQJ5.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-Dyf9fGZE.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BBfZRZYb.mjs";
+import { ct as reorderMenuItemsBody, kn as localeFilterQuery } from "../../../../../redirects-xVDvj_yQ.mjs";
+import "../../../../../import-DE2ziezs.mjs";
 import "../../../../../api/schemas/index.mjs";
-import "../../../../../utils-C0ONdBul.mjs";
-import "../../../../../search-DqTHQqtV.mjs";
-import { n as requirePerm } from "../../../../../authorize-BAdbMCwC.mjs";
-import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-WBxoD99D.mjs";
-import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-B4wp7CrU.mjs";
-import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-CSit54Ru.mjs";
+import "../../../../../utils-BJF19gfk.mjs";
+import "../../../../../search-CPcQGTHW.mjs";
+import { n as requirePerm } from "../../../../../authorize-wQDmXQJ1.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-DHRIU6x9.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-DbqJBNaY.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-DcUCm57p.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/menus/[name]/reorder.ts
@@ -39,12 +39,15 @@ const POST = async ({ params, request, locals }) => {
 	const name = params.name;
 	const denied = requirePerm(user, "menus:manage");
 	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
 	try {
 		const body = await parseBody(request, reorderMenuItemsHitlBody);
 		if (isParseError(body)) return body;
 		const actor = resolveHitlRouteActor(locals);
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildReorderMenuItemsRequest({
 			menuName: name,
+			locale: localeQ.locale,
 			items: body.items
 		});
 		const decision = await new RiskPolicyEvaluator({
@@ -56,7 +59,7 @@ const POST = async ({ params, request, locals }) => {
 			action
 		});
 		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
-		const result = await handleMenuItemReorder(dineway.db, name, body.items);
+		const result = await handleMenuItemReorder(dineway.db, name, body.items, { locale: localeQ.locale });
 		if (!result.success) return unwrapResult(result);
 		await logMenuActivity(dineway.db, locals, {
 			action: "reordered",

package/dist/astro/routes/api/menus/_name_/translations.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name]/translations.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/menus/_name_/translations.mjs

@@ -0,0 +1,111 @@
+import "../../../../../dialect-helpers-TkdbkFad.mjs";
+import "../../../../../content-DvpMad_N.mjs";
+import "../../../../../base64-C1Q9yr0B.mjs";
+import "../../../../../types-D1DjBFA9.mjs";
+import "../../../../../media-Cg4zc9fq.mjs";
+import "../../../../../options-BF11H_FD.mjs";
+import "../../../../../site-activity-lsCX_cqp.mjs";
+import "../../../../../review-requests-BYuoyse0.mjs";
+import "../../../../../entity-aliases-PJV8IxDq.mjs";
+import "../../../../../request-cache-DmVyQUBh.mjs";
+import "../../../../../briefing-4k6R0KAr.mjs";
+import "../../../../../context-types-DuiyY6xF.mjs";
+import "../../../../../fts-manager-D7KVeBmg.mjs";
+import "../../../../../registry-DumDzFDn.mjs";
+import "../../../../../loader-CQFxFOt1.mjs";
+import "../../../../../settings-qPzY2KIF.mjs";
+import "../../../../../query-BtuwuZRd.mjs";
+import "../../../../../zod-generator-BKhtHT3e.mjs";
+import "../../../../../schema-D1z41cq_.mjs";
+import { l as handleMenuTranslations, r as handleMenuGet, t as handleMenuCreate } from "../../../../../menus-CwI7DQJ5.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-Dyf9fGZE.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BBfZRZYb.mjs";
+import { kn as localeFilterQuery } from "../../../../../redirects-xVDvj_yQ.mjs";
+import "../../../../../import-DE2ziezs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import "../../../../../utils-BJF19gfk.mjs";
+import "../../../../../search-CPcQGTHW.mjs";
+import { n as requirePerm } from "../../../../../authorize-wQDmXQJ1.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-DHRIU6x9.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-DbqJBNaY.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-DcUCm57p.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/menus/[name]/translations.ts
+const prerender = false;
+const createTranslationBody = z.object({
+	locale: z.string().min(1),
+	label: z.string().min(1).optional(),
+	hitlRequestId: z.string().min(1).optional()
+}).meta({ id: "CreateMenuTranslationBody" });
+const GET = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const name = params.name;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "menus:read");
+	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
+	try {
+		const anchor = await handleMenuGet(dineway.db, name, { locale: localeQ.locale });
+		if (!anchor.success) return unwrapResult(anchor);
+		return unwrapResult(await handleMenuTranslations(dineway.db, anchor.data.id));
+	} catch (error) {
+		return handleError(error, "Failed to fetch menu translations", "MENU_TRANSLATIONS_ERROR");
+	}
+};
+const POST = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const name = params.name;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
+	try {
+		const body = await parseBody(request, createTranslationBody);
+		if (isParseError(body)) return body;
+		const source = await handleMenuGet(dineway.db, name, { locale: localeQ.locale });
+		if (!source.success) return unwrapResult(source);
+		const { hitlRequestId, ...translationInput } = body;
+		const menuInput = {
+			name,
+			label: translationInput.label ?? source.data.label,
+			locale: translationInput.locale,
+			translationOf: source.data.id
+		};
+		const actor = resolveHitlRouteActor(locals);
+		const action = await new MenuHitlPayloadBuilder(dineway.db).buildCreateMenuRequest(menuInput);
+		const decision = await new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		}).evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		const result = await handleMenuCreate(dineway.db, menuInput);
+		if (!result.success) return unwrapResult(result, 201);
+		await logMenuActivity(dineway.db, locals, {
+			action: "created",
+			menuName: result.data.name,
+			...menuApiRouteSource("created"),
+			summary: `Created ${result.data.locale} translation for menu ${result.data.name}`,
+			detail: {
+				label: result.data.label,
+				locale: result.data.locale,
+				translationOf: source.data.id,
+				hitlRequestId: decision.required ? decision.hitlRequest.id : null
+			}
+		});
+		return unwrapResult(result, 201);
+	} catch (error) {
+		return handleError(error, "Failed to create menu translation", "MENU_TRANSLATION_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };