dineway 0.1.9 → 0.1.11

package/dist/astro/routes/api/menus/_name_/items.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name]/items.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, POST, PUT, prerender };

package/{src/astro/routes/api/menus/[name]/items.ts → dist/astro/routes/api/menus/_name_/items.mjs}

@@ -1,87 +1,65 @@
-/**
- * Menu items CRUD endpoints
- *
- * POST   /_dineway/api/menus/:name/items - Add item
- * PUT    /_dineway/api/menus/:name/items/:id - Update item
- * DELETE /_dineway/api/menus/:name/items/:id - Delete item
- */
-
-import type { APIRoute } from "astro";
+import "../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../content-CyLkb-qH.mjs";
+import "../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../media-_7Fxdu45.mjs";
+import "../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../../briefing-BrXCuMEE.mjs";
+import "../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../settings-4XnpVMOS.mjs";
+import "../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../schema-BNpI53of.mjs";
+import "../../../../../zod-generator-DBVP8D0P.mjs";
+import { a as handleMenuItemDelete, i as handleMenuItemCreate, s as handleMenuItemUpdate } from "../../../../../menus-BacxVCCo.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-DEGjx2Xw.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BeQXIt1U.mjs";
+import { $ as menuItemDeleteQuery, Q as createMenuItemBody, st as updateMenuItemBody, tt as menuItemUpdateQuery } from "../../../../../redirects-CqaxraTO.mjs";
+import "../../../../../import-DD3f2jkc.mjs";
+import "../../../../../api/schemas/index.mjs";
+import "../../../../../utils-D2in-zwy.mjs";
+import "../../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-Bpu_Paur.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-BsMaXdJa.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-DMmJRS7B.mjs";
 import { z } from "zod";
 
-import { requirePerm } from "#api/authorize.js";
-import { handleError, unwrapResult } from "#api/error.js";
-import {
-	handleMenuItemCreate,
-	handleMenuItemDelete,
-	handleMenuItemUpdate,
-} from "#api/handlers/menus.js";
-import {
-	ensureWorkflowHitlRouteRequest,
-	hitlRequiredRouteError,
-	resolveHitlRouteActor,
-} from "#api/hitl-route-helpers.js";
-import { isParseError, parseBody, parseQuery } from "#api/parse.js";
-import {
-	createMenuItemBody,
-	menuItemDeleteQuery,
-	menuItemUpdateQuery,
-	updateMenuItemBody,
-} from "#api/schemas.js";
-import {
-	logMenuActivity,
-	menuApiRouteSource,
-	MenuHitlPayloadBuilder,
-	RiskPolicyEvaluator,
-} from "#site-context/index.js";
-
-export const prerender = false;
-
-const createMenuItemHitlBody = createMenuItemBody.extend({
-	hitlRequestId: z.string().min(1).optional(),
-});
-
-const updateMenuItemHitlBody = updateMenuItemBody.extend({
-	hitlRequestId: z.string().min(1).optional(),
-});
-
-const deleteMenuItemHitlQuery = menuItemDeleteQuery.extend({
-	hitlRequestId: z.string().min(1).optional(),
-});
-
-export const POST: APIRoute = async ({ params, request, locals }) => {
+//#region src/astro/routes/api/menus/[name]/items.ts
+const prerender = false;
+const createMenuItemHitlBody = createMenuItemBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const updateMenuItemHitlBody = updateMenuItemBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const deleteMenuItemHitlQuery = menuItemDeleteQuery.extend({ hitlRequestId: z.string().min(1).optional() });
+const POST = async ({ params, request, locals }) => {
 	const { dineway, user } = locals;
-	const name = params.name!;
-
+	const name = params.name;
 	const denied = requirePerm(user, "menus:manage");
 	if (denied) return denied;
-
 	try {
 		const body = await parseBody(request, createMenuItemHitlBody);
 		if (isParseError(body)) return body;
-
 		const { hitlRequestId, ...menuInput } = body;
 		const actor = resolveHitlRouteActor(locals);
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildCreateMenuItemRequest({
 			menuName: name,
-			...menuInput,
+			...menuInput
 		});
 		const decision = await new RiskPolicyEvaluator({
 			db: dineway.db,
-			handlers: dineway,
+			handlers: dineway
 		}).evaluateWorkflowHitl({
 			actor: actor.identity,
 			hitlRequestId,
-			action,
+			action
 		});
-		if (!decision.allowed) {
-			const ensured = await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action);
-			return hitlRequiredRouteError(decision, ensured);
-		}
-
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
 		const result = await handleMenuItemCreate(dineway.db, name, menuInput);
 		if (!result.success) return unwrapResult(result, 201);
-
 		await logMenuActivity(dineway.db, locals, {
 			action: "item_created",
 			menuName: name,
@@ -90,54 +68,43 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 			summary: `Created menu item ${result.data.id} in ${name}`,
 			detail: {
 				label: result.data.label,
-				hitlRequestId: decision.required ? decision.hitlRequest.id : null,
-			},
+				hitlRequestId: decision.required ? decision.hitlRequest.id : null
+			}
 		});
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu item", "MENU_ITEM_CREATE_ERROR");
 	}
 };
-
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+const PUT = async ({ params, request, locals }) => {
 	const { dineway, user } = locals;
-	const name = params.name!;
-
+	const name = params.name;
 	const denied = requirePerm(user, "menus:manage");
 	if (denied) return denied;
-
-	const url = new URL(request.url);
-	const query = parseQuery(url, menuItemUpdateQuery);
+	const query = parseQuery(new URL(request.url), menuItemUpdateQuery);
 	if (isParseError(query)) return query;
 	const itemId = query.id;
-
 	try {
 		const body = await parseBody(request, updateMenuItemHitlBody);
 		if (isParseError(body)) return body;
-
 		const { hitlRequestId, ...menuInput } = body;
 		const actor = resolveHitlRouteActor(locals);
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildUpdateMenuItemRequest({
 			menuName: name,
 			itemId,
-			...menuInput,
+			...menuInput
 		});
 		const decision = await new RiskPolicyEvaluator({
 			db: dineway.db,
-			handlers: dineway,
+			handlers: dineway
 		}).evaluateWorkflowHitl({
 			actor: actor.identity,
 			hitlRequestId,
-			action,
+			action
 		});
-		if (!decision.allowed) {
-			const ensured = await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action);
-			return hitlRequiredRouteError(decision, ensured);
-		}
-
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
 		const result = await handleMenuItemUpdate(dineway.db, name, itemId, menuInput);
 		if (!result.success) return unwrapResult(result);
-
 		await logMenuActivity(dineway.db, locals, {
 			action: "item_updated",
 			menuName: name,
@@ -146,61 +113,52 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 			summary: `Updated menu item ${itemId} in ${name}`,
 			detail: {
 				label: result.data.label,
-				hitlRequestId: decision.required ? decision.hitlRequest.id : null,
-			},
+				hitlRequestId: decision.required ? decision.hitlRequest.id : null
+			}
 		});
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update menu item", "MENU_ITEM_UPDATE_ERROR");
 	}
 };
-
-export const DELETE: APIRoute = async ({ params, request, locals }) => {
+const DELETE = async ({ params, request, locals }) => {
 	const { dineway, user } = locals;
-	const name = params.name!;
-
+	const name = params.name;
 	const denied = requirePerm(user, "menus:manage");
 	if (denied) return denied;
-
-	const url = new URL(request.url);
-	const query = parseQuery(url, deleteMenuItemHitlQuery);
+	const query = parseQuery(new URL(request.url), deleteMenuItemHitlQuery);
 	if (isParseError(query)) return query;
 	const itemId = query.id;
-
 	try {
 		const actor = resolveHitlRouteActor(locals);
 		const action = await new MenuHitlPayloadBuilder(dineway.db).buildDeleteMenuItemRequest({
 			menuName: name,
-			itemId,
+			itemId
 		});
 		const decision = await new RiskPolicyEvaluator({
 			db: dineway.db,
-			handlers: dineway,
+			handlers: dineway
 		}).evaluateWorkflowHitl({
 			actor: actor.identity,
 			hitlRequestId: query.hitlRequestId,
-			action,
+			action
 		});
-		if (!decision.allowed) {
-			const ensured = await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action);
-			return hitlRequiredRouteError(decision, ensured);
-		}
-
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
 		const result = await handleMenuItemDelete(dineway.db, name, itemId);
 		if (!result.success) return unwrapResult(result);
-
 		await logMenuActivity(dineway.db, locals, {
 			action: "item_deleted",
 			menuName: name,
 			itemId,
 			...menuApiRouteSource("item_deleted"),
 			summary: `Deleted menu item ${itemId} from ${name}`,
-			detail: {
-				hitlRequestId: decision.required ? decision.hitlRequest.id : null,
-			},
+			detail: { hitlRequestId: decision.required ? decision.hitlRequest.id : null }
 		});
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete menu item", "MENU_ITEM_DELETE_ERROR");
 	}
 };
+
+//#endregion
+export { DELETE, POST, PUT, prerender };

package/dist/astro/routes/api/menus/_name_/reorder.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name]/reorder.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/menus/_name_/reorder.mjs

@@ -0,0 +1,77 @@
+import "../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../content-CyLkb-qH.mjs";
+import "../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../media-_7Fxdu45.mjs";
+import "../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../../briefing-BrXCuMEE.mjs";
+import "../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../settings-4XnpVMOS.mjs";
+import "../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../schema-BNpI53of.mjs";
+import "../../../../../zod-generator-DBVP8D0P.mjs";
+import { o as handleMenuItemReorder } from "../../../../../menus-BacxVCCo.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-DEGjx2Xw.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BeQXIt1U.mjs";
+import { at as reorderMenuItemsBody } from "../../../../../redirects-CqaxraTO.mjs";
+import "../../../../../import-DD3f2jkc.mjs";
+import "../../../../../api/schemas/index.mjs";
+import "../../../../../utils-D2in-zwy.mjs";
+import "../../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../../site-context-Bpu_Paur.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../../activity-events-BsMaXdJa.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../hitl-route-helpers-DMmJRS7B.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/menus/[name]/reorder.ts
+const prerender = false;
+const reorderMenuItemsHitlBody = reorderMenuItemsBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const POST = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, reorderMenuItemsHitlBody);
+		if (isParseError(body)) return body;
+		const actor = resolveHitlRouteActor(locals);
+		const action = await new MenuHitlPayloadBuilder(dineway.db).buildReorderMenuItemsRequest({
+			menuName: name,
+			items: body.items
+		});
+		const decision = await new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		}).evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId: body.hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		const result = await handleMenuItemReorder(dineway.db, name, body.items);
+		if (!result.success) return unwrapResult(result);
+		await logMenuActivity(dineway.db, locals, {
+			action: "reordered",
+			menuName: name,
+			...menuApiRouteSource("reordered"),
+			summary: `Reordered menu ${name}`,
+			detail: {
+				itemCount: body.items.length,
+				hitlRequestId: decision.required ? decision.hitlRequest.id : null
+			}
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to reorder menu items", "MENU_REORDER_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/menus/_name_.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name].d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };

package/dist/astro/routes/api/menus/_name_.mjs

@@ -0,0 +1,123 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../content-CyLkb-qH.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../media-_7Fxdu45.mjs";
+import "../../../../options-z8VVg1Ll.mjs";
+import "../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../briefing-BrXCuMEE.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../registry-C-_hxLqa.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import "../../../../settings-4XnpVMOS.mjs";
+import "../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../schema-BNpI53of.mjs";
+import "../../../../zod-generator-DBVP8D0P.mjs";
+import { l as handleMenuUpdate, n as handleMenuDelete, r as handleMenuGet } from "../../../../menus-BacxVCCo.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-DEGjx2Xw.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { ot as updateMenuBody } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../utils-D2in-zwy.mjs";
+import "../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../site-context-Bpu_Paur.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../activity-events-BsMaXdJa.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../hitl-route-helpers-DMmJRS7B.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/menus/[name].ts
+const prerender = false;
+const updateMenuHitlBody = updateMenuBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const deleteMenuQuery = z.object({ hitlRequestId: z.string().min(1).optional() });
+const GET = async ({ params, locals }) => {
+	const { dineway, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:read");
+	if (denied) return denied;
+	try {
+		return unwrapResult(await handleMenuGet(dineway.db, name));
+	} catch (error) {
+		return handleError(error, "Failed to fetch menu", "MENU_GET_ERROR");
+	}
+};
+const PUT = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, updateMenuHitlBody);
+		if (isParseError(body)) return body;
+		const { hitlRequestId, ...menuInput } = body;
+		const actor = resolveHitlRouteActor(locals);
+		const action = await new MenuHitlPayloadBuilder(dineway.db).buildUpdateMenuRequest({
+			name,
+			...menuInput
+		});
+		const decision = await new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		}).evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		const result = await handleMenuUpdate(dineway.db, name, menuInput);
+		if (!result.success) return unwrapResult(result);
+		await logMenuActivity(dineway.db, locals, {
+			action: "updated",
+			menuName: result.data.name,
+			...menuApiRouteSource("updated"),
+			summary: `Updated menu ${result.data.name}`,
+			detail: {
+				label: result.data.label,
+				hitlRequestId: decision.required ? decision.hitlRequest.id : null
+			}
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to update menu", "MENU_UPDATE_ERROR");
+	}
+};
+const DELETE = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const query = parseQuery(new URL(request.url), deleteMenuQuery);
+	if (isParseError(query)) return query;
+	try {
+		const actor = resolveHitlRouteActor(locals);
+		const action = await new MenuHitlPayloadBuilder(dineway.db).buildDeleteMenuRequest({ name });
+		const decision = await new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		}).evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId: query.hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		const result = await handleMenuDelete(dineway.db, name);
+		if (!result.success) return unwrapResult(result);
+		await logMenuActivity(dineway.db, locals, {
+			action: "deleted",
+			menuName: name,
+			...menuApiRouteSource("deleted"),
+			summary: `Deleted menu ${name}`,
+			detail: { hitlRequestId: decision.required ? decision.hitlRequest.id : null }
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to delete menu", "MENU_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };

package/dist/astro/routes/api/menus/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/menus/index.mjs

@@ -0,0 +1,84 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../content-CyLkb-qH.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../media-_7Fxdu45.mjs";
+import "../../../../options-z8VVg1Ll.mjs";
+import "../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../briefing-BrXCuMEE.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../registry-C-_hxLqa.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import "../../../../settings-4XnpVMOS.mjs";
+import "../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../schema-BNpI53of.mjs";
+import "../../../../zod-generator-DBVP8D0P.mjs";
+import { c as handleMenuList, t as handleMenuCreate } from "../../../../menus-BacxVCCo.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-DEGjx2Xw.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BeQXIt1U.mjs";
+import { Z as createMenuBody } from "../../../../redirects-CqaxraTO.mjs";
+import "../../../../import-DD3f2jkc.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../utils-D2in-zwy.mjs";
+import "../../../../search-DM6CVti3.mjs";
+import { n as requirePerm } from "../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator, u as MenuHitlPayloadBuilder } from "../../../../site-context-Bpu_Paur.mjs";
+import { c as logMenuActivity, g as menuApiRouteSource } from "../../../../activity-events-BsMaXdJa.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../hitl-route-helpers-DMmJRS7B.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/menus/index.ts
+const prerender = false;
+const createMenuHitlBody = createMenuBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const GET = async ({ locals }) => {
+	const { dineway, user } = locals;
+	const denied = requirePerm(user, "menus:read");
+	if (denied) return denied;
+	try {
+		return unwrapResult(await handleMenuList(dineway.db));
+	} catch (error) {
+		return handleError(error, "Failed to fetch menus", "MENU_LIST_ERROR");
+	}
+};
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, createMenuHitlBody);
+		if (isParseError(body)) return body;
+		const { hitlRequestId, ...menuInput } = body;
+		const actor = resolveHitlRouteActor(locals);
+		const action = await new MenuHitlPayloadBuilder(dineway.db).buildCreateMenuRequest(menuInput);
+		const decision = await new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		}).evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		const result = await handleMenuCreate(dineway.db, menuInput);
+		if (!result.success) return unwrapResult(result, 201);
+		await logMenuActivity(dineway.db, locals, {
+			action: "created",
+			menuName: result.data.name,
+			...menuApiRouteSource("created"),
+			summary: `Created menu ${result.data.name}`,
+			detail: {
+				label: result.data.label,
+				hitlRequestId: decision.required ? decision.hitlRequest.id : null
+			}
+		});
+		return unwrapResult(result, 201);
+	} catch (error) {
+		return handleError(error, "Failed to create menu", "MENU_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/oauth/authorize.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/oauth/authorize.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };