dineway 0.1.8 → 0.1.11

package/dist/astro/routes/api/search/index.d.mts

@@ -0,0 +1,16 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/index.d.ts
+declare const prerender = false;
+/**
+ * Search content
+ *
+ * Query parameters:
+ * - q: Search query (required)
+ * - collections: Comma-separated list of collection slugs (optional, defaults to all)
+ * - status: Filter by status (optional, defaults to 'published')
+ * - limit: Maximum results (optional, defaults to 20)
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/index.mjs

@@ -0,0 +1,52 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DEGjx2Xw.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { k as searchQuery } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import { c as searchWithDb } from "../../../../search-DM6CVti3.mjs";
+import { hasPermission } from "@dineway-ai/auth";
+
+//#region src/astro/routes/api/search/index.ts
+/**
+* Search endpoint - Full-text search across collections
+*
+* GET /_dineway/api/search?q=query&collections=posts,pages&limit=20
+*/
+const prerender = false;
+/**
+* Search content
+*
+* Query parameters:
+* - q: Search query (required)
+* - collections: Comma-separated list of collection slugs (optional, defaults to all)
+* - status: Filter by status (optional, defaults to 'published')
+* - limit: Maximum results (optional, defaults to 20)
+*/
+const GET = async ({ url, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const query = parseQuery(url, searchQuery);
+	if (isParseError(query)) return query;
+	const collections = query.collections ? query.collections.split(",").map((c) => c.trim()) : void 0;
+	const status = query.status && query.status !== "published" && hasPermission(user, "content:read_drafts") ? query.status : "published";
+	try {
+		await dineway.ensureSearchHealthy?.();
+		return apiSuccess(await searchWithDb(dineway.db, query.q, {
+			collections,
+			status,
+			locale: query.locale,
+			limit: query.limit
+		}));
+	} catch (error) {
+		return handleError(error, "Search failed", "SEARCH_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/rebuild.d.mts

@@ -0,0 +1,13 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/rebuild.d.ts
+declare const prerender = false;
+/**
+ * Rebuild the search index for a collection
+ *
+ * Body:
+ * - collection: Collection slug to rebuild (required)
+ */
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/search/rebuild.mjs

@@ -0,0 +1,48 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import { t as FTSManager } from "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DEGjx2Xw.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { A as searchRebuildBody } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+
+//#region src/astro/routes/api/search/rebuild.ts
+const prerender = false;
+/**
+* Rebuild the search index for a collection
+*
+* Body:
+* - collection: Collection slug to rebuild (required)
+*/
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const denied = requirePerm(user, "search:manage");
+	if (denied) return denied;
+	const body = await parseBody(request, searchRebuildBody);
+	if (isParseError(body)) return body;
+	const ftsManager = new FTSManager(dineway.db);
+	try {
+		const config = await ftsManager.getSearchConfig(body.collection);
+		if (!config?.enabled) return apiError("SEARCH_NOT_ENABLED", `Search is not enabled for collection "${body.collection}"`, 400);
+		const searchableFields = await ftsManager.getSearchableFields(body.collection);
+		if (searchableFields.length === 0) return apiError("NO_SEARCHABLE_FIELDS", `No searchable fields defined for collection "${body.collection}"`, 400);
+		await ftsManager.rebuildIndex(body.collection, searchableFields, config.weights);
+		const stats = await ftsManager.getIndexStats(body.collection);
+		return apiSuccess({
+			collection: body.collection,
+			indexed: stats?.indexed ?? 0
+		});
+	} catch (error) {
+		return handleError(error, "Failed to rebuild index", "REBUILD_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/search/stats.d.mts

@@ -0,0 +1,10 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/stats.d.ts
+declare const prerender = false;
+/**
+ * Get search index statistics
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/stats.mjs

@@ -0,0 +1,28 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DEGjx2Xw.mjs";
+import { i as getSearchStats } from "../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+
+//#region src/astro/routes/api/search/stats.ts
+const prerender = false;
+/**
+* Get search index statistics
+*/
+const GET = async ({ locals }) => {
+	const { dineway, user } = locals;
+	const denied = requirePerm(user, "search:manage");
+	if (denied) return denied;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	try {
+		return apiSuccess(await getSearchStats(dineway.db));
+	} catch (error) {
+		return handleError(error, "Failed to get stats", "STATS_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/suggest.d.mts

@@ -0,0 +1,15 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/suggest.d.ts
+declare const prerender = false;
+/**
+ * Get search suggestions for autocomplete
+ *
+ * Query parameters:
+ * - q: Partial search query (required)
+ * - collections: Comma-separated list of collection slugs (optional)
+ * - limit: Maximum suggestions (optional, defaults to 5)
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/suggest.mjs

@@ -0,0 +1,43 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DEGjx2Xw.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { N as searchSuggestQuery } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import { a as getSuggestions } from "../../../../search-DM6CVti3.mjs";
+
+//#region src/astro/routes/api/search/suggest.ts
+const prerender = false;
+/**
+* Get search suggestions for autocomplete
+*
+* Query parameters:
+* - q: Partial search query (required)
+* - collections: Comma-separated list of collection slugs (optional)
+* - limit: Maximum suggestions (optional, defaults to 5)
+*/
+const GET = async ({ url, locals }) => {
+	const { dineway } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const query = parseQuery(url, searchSuggestQuery);
+	if (isParseError(query)) return query;
+	const collections = query.collections ? query.collections.split(",").map((c) => c.trim()) : void 0;
+	try {
+		await dineway.ensureSearchHealthy?.();
+		return apiSuccess({ items: await getSuggestions(dineway.db, query.q, {
+			collections,
+			locale: query.locale,
+			limit: query.limit
+		}) });
+	} catch (error) {
+		return handleError(error, "Failed to get suggestions", "SUGGESTION_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/sections/_slug_.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/sections/[slug].d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };

package/dist/astro/routes/api/sections/_slug_.mjs

@@ -0,0 +1,156 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../content-CyLkb-qH.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../media-_7Fxdu45.mjs";
+import "../../../../options-z8VVg1Ll.mjs";
+import "../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../briefing-BrXCuMEE.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../registry-C-_hxLqa.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import "../../../../settings-4XnpVMOS.mjs";
+import "../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../schema-BNpI53of.mjs";
+import "../../../../zod-generator-DBVP8D0P.mjs";
+import { a as handleSectionUpdate, n as handleSectionDelete, r as handleSectionGet } from "../../../../sections-DZFyAQXd.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-DEGjx2Xw.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { B as updateSectionBody } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../utils-D2in-zwy.mjs";
+import "../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator, c as SectionHitlPayloadBuilder } from "../../../../site-context-Bpu_Paur.mjs";
+import { f as logSectionActivity, t as activityChangedKeys, x as sectionApiRouteSource } from "../../../../activity-events-BsMaXdJa.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../hitl-route-helpers-DMmJRS7B.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/sections/[slug].ts
+const prerender = false;
+const updateSectionHitlBody = updateSectionBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const deleteSectionQuery = z.object({ hitlRequestId: z.string().min(1).optional() });
+const GET = async ({ params, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const { slug } = params;
+	const denied = requirePerm(user, "sections:read");
+	if (denied) return denied;
+	if (!slug) return apiError("VALIDATION_ERROR", "slug is required", 400);
+	try {
+		return unwrapResult(await handleSectionGet(db, slug));
+	} catch (error) {
+		return handleError(error, "Failed to fetch section", "SECTION_GET_ERROR");
+	}
+};
+const PUT = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const { slug } = params;
+	const denied = requirePerm(user, "sections:manage");
+	if (denied) return denied;
+	if (!slug) return apiError("VALIDATION_ERROR", "slug is required", 400);
+	try {
+		const body = await parseBody(request, updateSectionHitlBody);
+		if (isParseError(body)) return body;
+		const current = await new SectionHitlPayloadBuilder(db).loadSectionSnapshot(slug);
+		if (!current) return apiError("NOT_FOUND", `Section "${slug}" not found`, 404);
+		const { hitlRequestId, ...sectionInput } = body;
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			const action = await new SectionHitlPayloadBuilder(db).buildUpdateSectionRequest({
+				section: current,
+				...sectionInput
+			});
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const result = await handleSectionUpdate(db, slug, sectionInput);
+		if (result.success) await logSectionActivity(db, locals, {
+			action: "updated",
+			sectionId: result.data.id,
+			sectionSlug: result.data.slug,
+			...sectionApiRouteSource("updated"),
+			detail: {
+				changedKeys: activityChangedKeys(sectionInput),
+				source: current.source,
+				themeId: current.themeId,
+				previewMediaId: sectionInput.previewMediaId !== void 0 ? sectionInput.previewMediaId : current.previewMediaId,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to update section", "SECTION_UPDATE_ERROR");
+	}
+};
+const DELETE = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const { slug } = params;
+	const denied = requirePerm(user, "sections:manage");
+	if (denied) return denied;
+	if (!slug) return apiError("VALIDATION_ERROR", "slug is required", 400);
+	const query = parseQuery(new URL(request.url), deleteSectionQuery);
+	if (isParseError(query)) return query;
+	try {
+		const current = await new SectionHitlPayloadBuilder(db).loadSectionSnapshot(slug);
+		if (!current) return apiError("NOT_FOUND", `Section "${slug}" not found`, 404);
+		if (current.source === "theme") return unwrapResult(await handleSectionDelete(db, slug));
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			const action = await new SectionHitlPayloadBuilder(db).buildDeleteSectionRequest({ section: current });
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId: query.hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const result = await handleSectionDelete(db, slug);
+		if (result.success) await logSectionActivity(db, locals, {
+			action: "deleted",
+			sectionId: current.id,
+			sectionSlug: current.slug,
+			...sectionApiRouteSource("deleted"),
+			detail: {
+				source: current.source,
+				themeId: current.themeId,
+				previewMediaId: current.previewMediaId,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to delete section", "SECTION_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };

package/dist/astro/routes/api/sections/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/sections/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/sections/index.mjs

@@ -0,0 +1,99 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../content-CyLkb-qH.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../media-_7Fxdu45.mjs";
+import "../../../../options-z8VVg1Ll.mjs";
+import "../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../briefing-BrXCuMEE.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../registry-C-_hxLqa.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import "../../../../settings-4XnpVMOS.mjs";
+import "../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../schema-BNpI53of.mjs";
+import "../../../../zod-generator-DBVP8D0P.mjs";
+import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-DZFyAQXd.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DEGjx2Xw.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { I as createSectionBody, z as sectionsListQuery } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../utils-D2in-zwy.mjs";
+import "../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator, c as SectionHitlPayloadBuilder } from "../../../../site-context-Bpu_Paur.mjs";
+import { f as logSectionActivity, x as sectionApiRouteSource } from "../../../../activity-events-BsMaXdJa.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../hitl-route-helpers-DMmJRS7B.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/sections/index.ts
+const prerender = false;
+const createSectionHitlBody = createSectionBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const GET = async ({ url, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const denied = requirePerm(user, "sections:read");
+	if (denied) return denied;
+	try {
+		const query = parseQuery(url, sectionsListQuery);
+		if (isParseError(query)) return query;
+		return unwrapResult(await handleSectionList(db, query));
+	} catch (error) {
+		return handleError(error, "Failed to fetch sections", "SECTION_LIST_ERROR");
+	}
+};
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const denied = requirePerm(user, "sections:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, createSectionHitlBody);
+		if (isParseError(body)) return body;
+		const { hitlRequestId, ...sectionInput } = body;
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			const action = await new SectionHitlPayloadBuilder(db).buildCreateSectionRequest(sectionInput);
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const result = await handleSectionCreate(db, sectionInput);
+		if (result.success) await logSectionActivity(db, locals, {
+			action: "created",
+			sectionId: result.data.id,
+			sectionSlug: result.data.slug,
+			...sectionApiRouteSource("created"),
+			detail: {
+				title: result.data.title,
+				source: result.data.source,
+				themeId: result.data.themeId ?? null,
+				previewMediaId: sectionInput.previewMediaId ?? null,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result, 201);
+	} catch (error) {
+		return handleError(error, "Failed to create section", "SECTION_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/settings/email.d.mts

@@ -0,0 +1,17 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/settings/email.d.ts
+declare const prerender = false;
+/**
+ * GET /_dineway/api/settings/email
+ *
+ * Returns the email configuration state:
+ * - Current provider selection
+ * - Available providers (plugins with email:deliver)
+ * - Active middleware (email:beforeSend / email:afterSend plugins)
+ * - Whether email is available
+ */
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/settings/email.mjs

@@ -0,0 +1,102 @@
+import { t as OptionsRepository } from "../../../../options-z8VVg1Ll.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DEGjx2Xw.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+import { z } from "zod";
+import { escapeHtml } from "@dineway-ai/auth";
+
+//#region src/astro/routes/api/settings/email.ts
+/**
+* Email Settings API endpoint
+*
+* GET  /_dineway/api/settings/email      — current provider, available providers, middleware
+* POST /_dineway/api/settings/email/test — send a test email through the full pipeline
+*/
+const prerender = false;
+const EMAIL_DELIVER_HOOK = "email:deliver";
+const EMAIL_BEFORE_SEND_HOOK = "email:beforeSend";
+const EMAIL_AFTER_SEND_HOOK = "email:afterSend";
+/**
+* GET /_dineway/api/settings/email
+*
+* Returns the email configuration state:
+* - Current provider selection
+* - Available providers (plugins with email:deliver)
+* - Active middleware (email:beforeSend / email:afterSend plugins)
+* - Whether email is available
+*/
+const GET = async ({ locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "settings:manage");
+	if (denied) return denied;
+	try {
+		const pipeline = dineway.hooks;
+		const optionsRepo = new OptionsRepository(dineway.db);
+		const providers = pipeline.getExclusiveHookProviders(EMAIL_DELIVER_HOOK);
+		const selectedProviderId = await optionsRepo.get(`dineway:exclusive_hook:${EMAIL_DELIVER_HOOK}`);
+		const beforeSendPlugins = pipeline.getHookProviders(EMAIL_BEFORE_SEND_HOOK).map((p) => p.pluginId);
+		const afterSendPlugins = pipeline.getHookProviders(EMAIL_AFTER_SEND_HOOK).map((p) => p.pluginId);
+		return apiSuccess({
+			available: dineway.email?.isAvailable() ?? false,
+			providers: providers.map((p) => ({ pluginId: p.pluginId })),
+			selectedProviderId: selectedProviderId ?? null,
+			middleware: {
+				beforeSend: beforeSendPlugins,
+				afterSend: afterSendPlugins
+			}
+		});
+	} catch (error) {
+		return handleError(error, "Failed to get email settings", "EMAIL_SETTINGS_READ_ERROR");
+	}
+};
+/**
+* POST /_dineway/api/settings/email/test
+*
+* Send a test email through the full pipeline.
+* Validates the pipeline is configured and the provider works.
+*/
+const testEmailBody = z.object({ to: z.string().email() });
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "settings:manage");
+	if (denied) return denied;
+	if (!dineway.email?.isAvailable()) return apiError("EMAIL_NOT_CONFIGURED", "No email provider is configured. Install and activate an email provider plugin.", 503);
+	try {
+		const body = await parseBody(request, testEmailBody);
+		if (isParseError(body)) return body;
+		const siteName = await new OptionsRepository(dineway.db).get("dineway:site_title") ?? "Dineway";
+		const safeName = escapeHtml(siteName);
+		await dineway.email.send({
+			to: body.to,
+			subject: `Test email from ${siteName}`,
+			text: `This is a test email from ${siteName}.\n\nIf you received this, your email provider is working correctly.`,
+			html: `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+</head>
+<body style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.5; color: #333; max-width: 600px; margin: 0 auto; padding: 20px;">
+  <h1 style="font-size: 24px; margin-bottom: 20px;">Test Email</h1>
+  <p>This is a test email from <strong>${safeName}</strong>.</p>
+  <p>If you received this, your email provider is working correctly.</p>
+  <p style="color: #666; font-size: 14px; margin-top: 30px;">
+    Sent via the Dineway email pipeline.
+  </p>
+</body>
+</html>`
+		}, "admin");
+		return apiSuccess({
+			success: true,
+			message: `Test email sent to ${body.to}`
+		});
+	} catch (error) {
+		return handleError(error, "Failed to send test email", "EMAIL_TEST_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/settings.d.mts

@@ -0,0 +1,20 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/settings.d.ts
+declare const prerender = false;
+/**
+ * GET /_dineway/api/settings
+ *
+ * Returns all site settings as a JSON object.
+ * Unset values are undefined. Media references include resolved URLs.
+ */
+declare const GET: APIRoute;
+/**
+ * POST /_dineway/api/settings
+ *
+ * Updates site settings. Accepts a partial settings object.
+ * Merges with existing settings and returns the updated settings.
+ */
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };