dineway 0.1.9 → 0.1.12

package/dist/astro/routes/api/search/enable.mjs

@@ -0,0 +1,55 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import { t as FTSManager } from "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-C9106ehs.mjs";
+import { O as searchEnableBody } from "../../../../redirects-lrlmYXVE.mjs";
+import "../../../../import-CNcKWTbp.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/search/enable.ts
+const prerender = false;
+/**
+* Enable or disable search for a collection
+*
+* Body:
+* - collection: Collection slug (required)
+* - enabled: boolean (required)
+* - weights: Optional field weights for ranking
+*/
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const denied = requirePerm(user, "search:manage");
+	if (denied) return denied;
+	const body = await parseBody(request, searchEnableBody);
+	if (isParseError(body)) return body;
+	const ftsManager = new FTSManager(dineway.db);
+	try {
+		if (body.enabled) {
+			await ftsManager.enableSearch(body.collection, { weights: body.weights });
+			const stats = await ftsManager.getIndexStats(body.collection);
+			return apiSuccess({
+				collection: body.collection,
+				enabled: true,
+				indexed: stats?.indexed ?? 0
+			});
+		} else {
+			await ftsManager.disableSearch(body.collection);
+			return apiSuccess({
+				collection: body.collection,
+				enabled: false
+			});
+		}
+	} catch (error) {
+		return handleError(error, "Failed to update search config", "SEARCH_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/search/index.d.mts

@@ -0,0 +1,16 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/index.d.ts
+declare const prerender = false;
+/**
+ * Search content
+ *
+ * Query parameters:
+ * - q: Search query (required)
+ * - collections: Comma-separated list of collection slugs (optional, defaults to all)
+ * - status: Filter by status (optional, defaults to 'published')
+ * - limit: Maximum results (optional, defaults to 20)
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/index.mjs

@@ -0,0 +1,52 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../parse-C9106ehs.mjs";
+import { k as searchQuery } from "../../../../redirects-lrlmYXVE.mjs";
+import "../../../../import-CNcKWTbp.mjs";
+import "../../../../api/schemas/index.mjs";
+import { c as searchWithDb } from "../../../../search-DqTHQqtV.mjs";
+import { hasPermission } from "@dineway-ai/auth";
+
+//#region src/astro/routes/api/search/index.ts
+/**
+* Search endpoint - Full-text search across collections
+*
+* GET /_dineway/api/search?q=query&collections=posts,pages&limit=20
+*/
+const prerender = false;
+/**
+* Search content
+*
+* Query parameters:
+* - q: Search query (required)
+* - collections: Comma-separated list of collection slugs (optional, defaults to all)
+* - status: Filter by status (optional, defaults to 'published')
+* - limit: Maximum results (optional, defaults to 20)
+*/
+const GET = async ({ url, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const query = parseQuery(url, searchQuery);
+	if (isParseError(query)) return query;
+	const collections = query.collections ? query.collections.split(",").map((c) => c.trim()) : void 0;
+	const status = query.status && query.status !== "published" && hasPermission(user, "content:read_drafts") ? query.status : "published";
+	try {
+		await dineway.ensureSearchHealthy?.();
+		return apiSuccess(await searchWithDb(dineway.db, query.q, {
+			collections,
+			status,
+			locale: query.locale,
+			limit: query.limit
+		}));
+	} catch (error) {
+		return handleError(error, "Search failed", "SEARCH_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/rebuild.d.mts

@@ -0,0 +1,13 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/rebuild.d.ts
+declare const prerender = false;
+/**
+ * Rebuild the search index for a collection
+ *
+ * Body:
+ * - collection: Collection slug to rebuild (required)
+ */
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/search/rebuild.mjs

@@ -0,0 +1,48 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import { t as FTSManager } from "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-C9106ehs.mjs";
+import { A as searchRebuildBody } from "../../../../redirects-lrlmYXVE.mjs";
+import "../../../../import-CNcKWTbp.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/search/rebuild.ts
+const prerender = false;
+/**
+* Rebuild the search index for a collection
+*
+* Body:
+* - collection: Collection slug to rebuild (required)
+*/
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const denied = requirePerm(user, "search:manage");
+	if (denied) return denied;
+	const body = await parseBody(request, searchRebuildBody);
+	if (isParseError(body)) return body;
+	const ftsManager = new FTSManager(dineway.db);
+	try {
+		const config = await ftsManager.getSearchConfig(body.collection);
+		if (!config?.enabled) return apiError("SEARCH_NOT_ENABLED", `Search is not enabled for collection "${body.collection}"`, 400);
+		const searchableFields = await ftsManager.getSearchableFields(body.collection);
+		if (searchableFields.length === 0) return apiError("NO_SEARCHABLE_FIELDS", `No searchable fields defined for collection "${body.collection}"`, 400);
+		await ftsManager.rebuildIndex(body.collection, searchableFields, config.weights);
+		const stats = await ftsManager.getIndexStats(body.collection);
+		return apiSuccess({
+			collection: body.collection,
+			indexed: stats?.indexed ?? 0
+		});
+	} catch (error) {
+		return handleError(error, "Failed to rebuild index", "REBUILD_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/search/stats.d.mts

@@ -0,0 +1,10 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/stats.d.ts
+declare const prerender = false;
+/**
+ * Get search index statistics
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/stats.mjs

@@ -0,0 +1,28 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
+import { i as getSearchStats } from "../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/search/stats.ts
+const prerender = false;
+/**
+* Get search index statistics
+*/
+const GET = async ({ locals }) => {
+	const { dineway, user } = locals;
+	const denied = requirePerm(user, "search:manage");
+	if (denied) return denied;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	try {
+		return apiSuccess(await getSearchStats(dineway.db));
+	} catch (error) {
+		return handleError(error, "Failed to get stats", "STATS_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/suggest.d.mts

@@ -0,0 +1,15 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/search/suggest.d.ts
+declare const prerender = false;
+/**
+ * Get search suggestions for autocomplete
+ *
+ * Query parameters:
+ * - q: Partial search query (required)
+ * - collections: Comma-separated list of collection slugs (optional)
+ * - limit: Maximum suggestions (optional, defaults to 5)
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/search/suggest.mjs

@@ -0,0 +1,43 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../parse-C9106ehs.mjs";
+import { N as searchSuggestQuery } from "../../../../redirects-lrlmYXVE.mjs";
+import "../../../../import-CNcKWTbp.mjs";
+import "../../../../api/schemas/index.mjs";
+import { a as getSuggestions } from "../../../../search-DqTHQqtV.mjs";
+
+//#region src/astro/routes/api/search/suggest.ts
+const prerender = false;
+/**
+* Get search suggestions for autocomplete
+*
+* Query parameters:
+* - q: Partial search query (required)
+* - collections: Comma-separated list of collection slugs (optional)
+* - limit: Maximum suggestions (optional, defaults to 5)
+*/
+const GET = async ({ url, locals }) => {
+	const { dineway } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not configured", 500);
+	const query = parseQuery(url, searchSuggestQuery);
+	if (isParseError(query)) return query;
+	const collections = query.collections ? query.collections.split(",").map((c) => c.trim()) : void 0;
+	try {
+		await dineway.ensureSearchHealthy?.();
+		return apiSuccess({ items: await getSuggestions(dineway.db, query.q, {
+			collections,
+			locale: query.locale,
+			limit: query.limit
+		}) });
+	} catch (error) {
+		return handleError(error, "Failed to get suggestions", "SUGGESTION_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/sections/_slug_.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/sections/[slug].d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };

package/dist/astro/routes/api/sections/_slug_.mjs

@@ -0,0 +1,157 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../content-CyLkb-qH.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../media-_7Fxdu45.mjs";
+import "../../../../options-z8VVg1Ll.mjs";
+import "../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../registry-C-_hxLqa.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import "../../../../settings-DGtLLSaz.mjs";
+import "../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../query-CsbOywSY.mjs";
+import "../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../schema-BECjUhP8.mjs";
+import { a as handleSectionUpdate, n as handleSectionDelete, r as handleSectionGet } from "../../../../sections-B61OxnfB.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-BMUPwxgx.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-C9106ehs.mjs";
+import { B as updateSectionBody } from "../../../../redirects-lrlmYXVE.mjs";
+import "../../../../import-CNcKWTbp.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../utils-C0ONdBul.mjs";
+import "../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../authorize-BAdbMCwC.mjs";
+import { _ as RiskPolicyEvaluator, c as SectionHitlPayloadBuilder } from "../../../../site-context-WBxoD99D.mjs";
+import { f as logSectionActivity, t as activityChangedKeys, x as sectionApiRouteSource } from "../../../../activity-events-B4wp7CrU.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../hitl-route-helpers-CSit54Ru.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/sections/[slug].ts
+const prerender = false;
+const updateSectionHitlBody = updateSectionBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const deleteSectionQuery = z.object({ hitlRequestId: z.string().min(1).optional() });
+const GET = async ({ params, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const { slug } = params;
+	const denied = requirePerm(user, "sections:read");
+	if (denied) return denied;
+	if (!slug) return apiError("VALIDATION_ERROR", "slug is required", 400);
+	try {
+		return unwrapResult(await handleSectionGet(db, slug));
+	} catch (error) {
+		return handleError(error, "Failed to fetch section", "SECTION_GET_ERROR");
+	}
+};
+const PUT = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const { slug } = params;
+	const denied = requirePerm(user, "sections:manage");
+	if (denied) return denied;
+	if (!slug) return apiError("VALIDATION_ERROR", "slug is required", 400);
+	try {
+		const body = await parseBody(request, updateSectionHitlBody);
+		if (isParseError(body)) return body;
+		const current = await new SectionHitlPayloadBuilder(db).loadSectionSnapshot(slug);
+		if (!current) return apiError("NOT_FOUND", `Section "${slug}" not found`, 404);
+		const { hitlRequestId, ...sectionInput } = body;
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			const action = await new SectionHitlPayloadBuilder(db).buildUpdateSectionRequest({
+				section: current,
+				...sectionInput
+			});
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const result = await handleSectionUpdate(db, slug, sectionInput);
+		if (result.success) await logSectionActivity(db, locals, {
+			action: "updated",
+			sectionId: result.data.id,
+			sectionSlug: result.data.slug,
+			...sectionApiRouteSource("updated"),
+			detail: {
+				changedKeys: activityChangedKeys(sectionInput),
+				source: current.source,
+				themeId: current.themeId,
+				previewMediaId: sectionInput.previewMediaId !== void 0 ? sectionInput.previewMediaId : current.previewMediaId,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to update section", "SECTION_UPDATE_ERROR");
+	}
+};
+const DELETE = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const { slug } = params;
+	const denied = requirePerm(user, "sections:manage");
+	if (denied) return denied;
+	if (!slug) return apiError("VALIDATION_ERROR", "slug is required", 400);
+	const query = parseQuery(new URL(request.url), deleteSectionQuery);
+	if (isParseError(query)) return query;
+	try {
+		const current = await new SectionHitlPayloadBuilder(db).loadSectionSnapshot(slug);
+		if (!current) return apiError("NOT_FOUND", `Section "${slug}" not found`, 404);
+		if (current.source === "theme") return unwrapResult(await handleSectionDelete(db, slug));
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			const action = await new SectionHitlPayloadBuilder(db).buildDeleteSectionRequest({ section: current });
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId: query.hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const result = await handleSectionDelete(db, slug);
+		if (result.success) await logSectionActivity(db, locals, {
+			action: "deleted",
+			sectionId: current.id,
+			sectionSlug: current.slug,
+			...sectionApiRouteSource("deleted"),
+			detail: {
+				source: current.source,
+				themeId: current.themeId,
+				previewMediaId: current.previewMediaId,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to delete section", "SECTION_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };

package/dist/astro/routes/api/sections/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/sections/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/sections/index.mjs

@@ -0,0 +1,100 @@
+import "../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../content-CyLkb-qH.mjs";
+import "../../../../base64-Cz-aU0X1.mjs";
+import "../../../../types-Bs6lTBBW.mjs";
+import "../../../../media-_7Fxdu45.mjs";
+import "../../../../options-z8VVg1Ll.mjs";
+import "../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../context-types-C-LwdAxx.mjs";
+import "../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../registry-C-_hxLqa.mjs";
+import "../../../../loader-PZnPxFLc.mjs";
+import "../../../../settings-DGtLLSaz.mjs";
+import "../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../query-CsbOywSY.mjs";
+import "../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../schema-BECjUhP8.mjs";
+import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-B61OxnfB.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-BMUPwxgx.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-C9106ehs.mjs";
+import { I as createSectionBody, z as sectionsListQuery } from "../../../../redirects-lrlmYXVE.mjs";
+import "../../../../import-CNcKWTbp.mjs";
+import "../../../../api/schemas/index.mjs";
+import "../../../../utils-C0ONdBul.mjs";
+import "../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../authorize-BAdbMCwC.mjs";
+import { _ as RiskPolicyEvaluator, c as SectionHitlPayloadBuilder } from "../../../../site-context-WBxoD99D.mjs";
+import { f as logSectionActivity, x as sectionApiRouteSource } from "../../../../activity-events-B4wp7CrU.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../hitl-route-helpers-CSit54Ru.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/sections/index.ts
+const prerender = false;
+const createSectionHitlBody = createSectionBody.extend({ hitlRequestId: z.string().min(1).optional() });
+const GET = async ({ url, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const denied = requirePerm(user, "sections:read");
+	if (denied) return denied;
+	try {
+		const query = parseQuery(url, sectionsListQuery);
+		if (isParseError(query)) return query;
+		return unwrapResult(await handleSectionList(db, query));
+	} catch (error) {
+		return handleError(error, "Failed to fetch sections", "SECTION_LIST_ERROR");
+	}
+};
+const POST = async ({ request, locals }) => {
+	const { dineway, user } = locals;
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	const db = dineway.db;
+	const denied = requirePerm(user, "sections:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, createSectionHitlBody);
+		if (isParseError(body)) return body;
+		const { hitlRequestId, ...sectionInput } = body;
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			const action = await new SectionHitlPayloadBuilder(db).buildCreateSectionRequest(sectionInput);
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const result = await handleSectionCreate(db, sectionInput);
+		if (result.success) await logSectionActivity(db, locals, {
+			action: "created",
+			sectionId: result.data.id,
+			sectionSlug: result.data.slug,
+			...sectionApiRouteSource("created"),
+			detail: {
+				title: result.data.title,
+				source: result.data.source,
+				themeId: result.data.themeId ?? null,
+				previewMediaId: sectionInput.previewMediaId ?? null,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result, 201);
+	} catch (error) {
+		return handleError(error, "Failed to create section", "SECTION_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/settings/email.d.mts

@@ -0,0 +1,17 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/settings/email.d.ts
+declare const prerender = false;
+/**
+ * GET /_dineway/api/settings/email
+ *
+ * Returns the email configuration state:
+ * - Current provider selection
+ * - Available providers (plugins with email:deliver)
+ * - Active middleware (email:beforeSend / email:afterSend plugins)
+ * - Whether email is available
+ */
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };