dineway 0.1.9 → 0.1.12

package/dist/version-BPz1imu2.mjs

@@ -1,6 +0,0 @@
-//#region src/version.ts
-const VERSION = "0.1.9";
-const COMMIT = "e3b950c9";
-
-//#endregion
-export { VERSION as n, COMMIT as t };

package/src/astro/routes/PluginRegistry.tsx

@@ -1,21 +0,0 @@
-/**
- * Admin Wrapper
- *
- * Imports plugin admin modules from the virtual module and passes them
- * to AdminApp via props. This ensures plugin components are bundled
- * together with the admin app and available via React context.
- */
-
-import { AdminApp } from "@dineway-ai/admin";
-import type { Messages } from "@lingui/core";
-// @ts-ignore - virtual module generated by integration
-import { pluginAdmins } from "virtual:dineway/admin-registry";
-
-interface AdminWrapperProps {
-	locale: string;
-	messages: Messages;
-}
-
-export default function AdminWrapper({ locale, messages }: AdminWrapperProps) {
-	return <AdminApp pluginAdmins={pluginAdmins} locale={locale} messages={messages} />;
-}

package/src/astro/routes/api/admin/allowed-domains/[domain].ts

@@ -1,112 +0,0 @@
-/**
- * PATCH/DELETE /_dineway/api/admin/allowed-domains/[domain]
- *
- * Admin endpoints for managing a specific allowed domain.
- * PATCH - Update domain settings (enabled, defaultRole)
- * DELETE - Remove an allowed domain
- */
-
-import type { APIRoute } from "astro";
-
-export const prerender = false;
-
-import { Role, roleFromLevel } from "@dineway-ai/auth";
-import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";
-
-import { apiError, apiSuccess, handleError } from "#api/error.js";
-import { isParseError, parseBody } from "#api/parse.js";
-import { allowedDomainUpdateBody } from "#api/schemas.js";
-
-/**
- * PATCH - Update domain settings
- */
-export const PATCH: APIRoute = async ({ params, request, locals }) => {
-	const { dineway, user } = locals;
-	const { domain } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Database not configured", 500);
-	}
-
-	if (!domain) {
-		return apiError("VALIDATION_ERROR", "Domain is required", 400);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const adapter = createKyselyAdapter(dineway.db);
-
-	try {
-		const body = await parseBody(request, allowedDomainUpdateBody);
-		if (isParseError(body)) return body;
-
-		// Check if domain exists
-		const existing = await adapter.getAllowedDomain(domain);
-		if (!existing) {
-			return apiError("NOT_FOUND", "Domain not found", 404);
-		}
-
-		// Role is already validated as RoleLevel by Zod schema
-		const defaultRole = body.defaultRole;
-
-		// Update domain
-		const enabled = body.enabled ?? existing.enabled;
-		await adapter.updateAllowedDomain(domain, enabled, defaultRole);
-
-		// Fetch updated domain
-		const updated = await adapter.getAllowedDomain(domain);
-
-		return apiSuccess({
-			success: true,
-			domain: updated
-				? {
-						domain: updated.domain,
-						defaultRole: updated.defaultRole,
-						roleName: roleFromLevel(updated.defaultRole),
-						enabled: updated.enabled,
-						createdAt: updated.createdAt.toISOString(),
-					}
-				: null,
-		});
-	} catch (error) {
-		return handleError(error, "Failed to update allowed domain", "DOMAIN_UPDATE_ERROR");
-	}
-};
-
-/**
- * DELETE - Remove an allowed domain
- */
-export const DELETE: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-	const { domain } = params;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Database not configured", 500);
-	}
-
-	if (!domain) {
-		return apiError("VALIDATION_ERROR", "Domain is required", 400);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const adapter = createKyselyAdapter(dineway.db);
-
-	try {
-		// Check if domain exists (optional - delete is idempotent)
-		const existing = await adapter.getAllowedDomain(domain);
-		if (!existing) {
-			return apiError("NOT_FOUND", "Domain not found", 404);
-		}
-
-		await adapter.deleteAllowedDomain(domain);
-
-		return apiSuccess({ success: true });
-	} catch (error) {
-		return handleError(error, "Failed to delete allowed domain", "DOMAIN_DELETE_ERROR");
-	}
-};

package/src/astro/routes/api/admin/allowed-domains/index.ts

@@ -1,108 +0,0 @@
-/**
- * GET/POST /_dineway/api/admin/allowed-domains
- *
- * Admin endpoints for managing allowed signup domains.
- * GET - List all allowed domains
- * POST - Add a new allowed domain
- */
-
-import type { APIRoute } from "astro";
-
-export const prerender = false;
-
-import { Role, roleFromLevel } from "@dineway-ai/auth";
-import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";
-
-import { apiError, apiSuccess, handleError } from "#api/error.js";
-import { isParseError, parseBody } from "#api/parse.js";
-import { allowedDomainCreateBody } from "#api/schemas.js";
-
-const DOMAIN_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9-]*(\.[a-zA-Z0-9-]+)+$/;
-
-/**
- * GET - List all allowed domains
- */
-export const GET: APIRoute = async ({ locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Database not configured", 500);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const adapter = createKyselyAdapter(dineway.db);
-
-	try {
-		const domains = await adapter.getAllowedDomains();
-
-		return apiSuccess({
-			domains: domains.map((d) => ({
-				domain: d.domain,
-				defaultRole: d.defaultRole,
-				roleName: roleFromLevel(d.defaultRole),
-				enabled: d.enabled,
-				createdAt: d.createdAt.toISOString(),
-			})),
-		});
-	} catch (error) {
-		return handleError(error, "Failed to list allowed domains", "DOMAIN_LIST_ERROR");
-	}
-};
-
-/**
- * POST - Add a new allowed domain
- */
-export const POST: APIRoute = async ({ request, locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Database not configured", 500);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const adapter = createKyselyAdapter(dineway.db);
-
-	try {
-		const body = await parseBody(request, allowedDomainCreateBody);
-		if (isParseError(body)) return body;
-
-		// Role is already validated as RoleLevel by Zod schema
-		const defaultRole = body.defaultRole;
-
-		// Validate domain format (no protocol, just domain)
-		const cleanDomain = body.domain.toLowerCase().trim();
-		if (!DOMAIN_REGEX.test(cleanDomain)) {
-			return apiError("VALIDATION_ERROR", "Invalid domain format", 400);
-		}
-
-		// Check if domain already exists
-		const existing = await adapter.getAllowedDomain(cleanDomain);
-		if (existing) {
-			return apiError("CONFLICT", "Domain already exists", 409);
-		}
-
-		const domain = await adapter.createAllowedDomain(cleanDomain, defaultRole);
-
-		return apiSuccess(
-			{
-				success: true,
-				domain: {
-					domain: domain.domain,
-					defaultRole: domain.defaultRole,
-					roleName: roleFromLevel(domain.defaultRole),
-					enabled: domain.enabled,
-					createdAt: domain.createdAt.toISOString(),
-				},
-			},
-			201,
-		);
-	} catch (error) {
-		return handleError(error, "Failed to create allowed domain", "DOMAIN_CREATE_ERROR");
-	}
-};

package/src/astro/routes/api/admin/api-tokens/[id].ts

@@ -1,44 +0,0 @@
-/**
- * Single API token endpoint
- *
- * DELETE /_dineway/api/admin/api-tokens/:id — Revoke a token
- */
-
-import { Role } from "@dineway-ai/auth";
-import type { APIRoute } from "astro";
-
-import { rejectApiTokenAuthControlWrite } from "#api/auth-control-guard.js";
-import { apiError, handleError, unwrapResult } from "#api/error.js";
-import { handleApiTokenRevoke } from "#api/handlers/api-tokens.js";
-
-export const prerender = false;
-
-/**
- * Revoke (delete) an API token.
- */
-export const DELETE: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const credentialGuard = rejectApiTokenAuthControlWrite(locals, "api_tokens");
-	if (credentialGuard) return credentialGuard;
-
-	const tokenId = params.id;
-	if (!tokenId) {
-		return apiError("VALIDATION_ERROR", "Token ID is required", 400);
-	}
-
-	try {
-		const result = await handleApiTokenRevoke(dineway.db, tokenId, user.id);
-		return unwrapResult(result);
-	} catch (error) {
-		return handleError(error, "Failed to revoke API token", "TOKEN_REVOKE_ERROR");
-	}
-};

package/src/astro/routes/api/admin/api-tokens/index.ts

@@ -1,90 +0,0 @@
-/**
- * API token management endpoints
- *
- * GET  /_dineway/api/admin/api-tokens — List tokens for current user
- * POST /_dineway/api/admin/api-tokens — Create a new token
- */
-
-import { Role } from "@dineway-ai/auth";
-import type { APIRoute } from "astro";
-import { z } from "zod";
-
-import { rejectApiTokenAuthControlWrite } from "#api/auth-control-guard.js";
-import { apiError, handleError, unwrapResult } from "#api/error.js";
-import { handleApiTokenCreate, handleApiTokenList } from "#api/handlers/api-tokens.js";
-import { isParseError, parseBody } from "#api/parse.js";
-import { ALL_VALID_SCOPES } from "#auth/api-tokens.js";
-import {
-	experimentalSiteContextWorkflowsEnabled,
-	getExperimentalSiteContextWorkflowsDisabledMessage,
-	requestedExperimentalSiteContextWorkflowScopes,
-} from "#site-context/experimental-workflows.js";
-
-export const prerender = false;
-
-const createTokenSchema = z.object({
-	name: z.string().min(1).max(100),
-	scopes: z.array(z.enum(ALL_VALID_SCOPES)).min(1),
-	expiresAt: z.string().datetime().optional(),
-});
-
-/**
- * List API tokens for the current user.
- * Admins can list all tokens (future: add ?userId= filter).
- */
-export const GET: APIRoute = async ({ locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const result = await handleApiTokenList(dineway.db, user.id);
-	return unwrapResult(result);
-};
-
-/**
- * Create a new API token.
- * Returns the raw token once — it cannot be retrieved again.
- */
-export const POST: APIRoute = async ({ request, locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	if (!user || user.role < Role.ADMIN) {
-		return apiError("FORBIDDEN", "Admin privileges required", 403);
-	}
-
-	const credentialGuard = rejectApiTokenAuthControlWrite(locals, "api_tokens");
-	if (credentialGuard) return credentialGuard;
-
-	try {
-		const body = await parseBody(request, createTokenSchema);
-		if (isParseError(body)) return body;
-		const requestedWorkflowScopes = requestedExperimentalSiteContextWorkflowScopes(body.scopes);
-		if (requestedWorkflowScopes.length > 0 && !experimentalSiteContextWorkflowsEnabled()) {
-			return apiError(
-				"NOT_IMPLEMENTED",
-				getExperimentalSiteContextWorkflowsDisabledMessage(),
-				501,
-				{
-					status: "workflow_token_scopes_disabled",
-					reason: "workflow_token_scopes_disabled",
-					scopes: requestedWorkflowScopes,
-				},
-			);
-		}
-
-		const result = await handleApiTokenCreate(dineway.db, user.id, body);
-		return unwrapResult(result, 201);
-	} catch (error) {
-		return handleError(error, "Failed to create API token", "TOKEN_CREATE_ERROR");
-	}
-};

package/src/astro/routes/api/admin/briefing.ts

@@ -1,76 +0,0 @@
-/**
- * Admin site briefing endpoint
- *
- * GET /_dineway/api/admin/briefing - Build a role-scoped Site Context Engine briefing
- */
-
-import { hasPermission } from "@dineway-ai/auth";
-import type { APIRoute } from "astro";
-
-import { apiError, handleError, requireDb, unwrapResult } from "#api/error.js";
-import { handleSiteBriefingGet } from "#api/handlers/briefing.js";
-import { isParseError, parseQuery } from "#api/parse.js";
-import { siteBriefingQuery } from "#api/schemas.js";
-import type { SiteBriefingPermissions } from "#site-context/index.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ url, locals }) => {
-	const { dineway, user } = locals;
-
-	const dbErr = requireDb(dineway?.db);
-	if (dbErr) return dbErr;
-
-	if (!user) {
-		return apiError("UNAUTHORIZED", "Authentication required", 401);
-	}
-
-	const permissions = briefingPermissionsForUser(user);
-	if (!canReadAnyBriefingSection(permissions)) {
-		return apiError("FORBIDDEN", "Insufficient permissions", 403);
-	}
-
-	try {
-		const query = parseQuery(url, siteBriefingQuery);
-		if (isParseError(query)) return query;
-
-		const result = await handleSiteBriefingGet(
-			{
-				db: dineway.db,
-				storage: dineway.storage ?? null,
-				configuredPlugins: dineway.configuredPlugins ?? [],
-				marketplaceUrl: dineway.config.marketplace,
-				permissions,
-			},
-			{
-				scope: query.scope,
-				since: query.since,
-				contextTypes: query.contextTypes,
-				includeStale: query.includeStale,
-				tokenBudget: query.tokenBudget,
-				activityLimit: query.activityLimit,
-			},
-		);
-		return unwrapResult(result);
-	} catch (error) {
-		return handleError(error, "Failed to build site briefing", "SITE_BRIEFING_ERROR");
-	}
-};
-
-function briefingPermissionsForUser(user: { role: number }): SiteBriefingPermissions {
-	return {
-		canReadContent: hasPermission(user, "content:read"),
-		canReadSchema: hasPermission(user, "schema:read"),
-		canReadSettings: hasPermission(user, "settings:read"),
-		canReadPlugins: hasPermission(user, "plugins:read"),
-	};
-}
-
-function canReadAnyBriefingSection(permissions: SiteBriefingPermissions): boolean {
-	return (
-		permissions.canReadContent ||
-		permissions.canReadSchema ||
-		permissions.canReadSettings ||
-		permissions.canReadPlugins
-	);
-}

package/src/astro/routes/api/admin/bylines/[id]/index.ts

@@ -1,90 +0,0 @@
-import { Role } from "@dineway-ai/auth";
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, apiSuccess, handleError } from "#api/error.js";
-import { isParseError, parseBody } from "#api/parse.js";
-import { bylineUpdateBody } from "#api/schemas.js";
-import { invalidateBylineCache } from "#bylines/index.js";
-import { BylineRepository } from "#db/repositories/byline.js";
-
-export const prerender = false;
-
-function requireEditor(user: { role: number } | undefined): Response | null {
-	if (!user || user.role < Role.EDITOR) {
-		return apiError("FORBIDDEN", "Editor privileges required", 403);
-	}
-	return null;
-}
-
-export const GET: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-	// Read access uses content:read so all authenticated roles can view byline data
-	const denied = requirePerm(user, "content:read");
-	if (denied) return denied;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	try {
-		const repo = new BylineRepository(dineway.db);
-		const byline = await repo.findById(params.id!);
-		if (!byline) return apiError("NOT_FOUND", "Byline not found", 404);
-		return apiSuccess(byline);
-	} catch (error) {
-		return handleError(error, "Failed to get byline", "BYLINE_GET_ERROR");
-	}
-};
-
-export const PUT: APIRoute = async ({ params, request, locals }) => {
-	const { dineway, user } = locals;
-	const denied = requireEditor(user);
-	if (denied) return denied;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	const body = await parseBody(request, bylineUpdateBody);
-	if (isParseError(body)) return body;
-
-	try {
-		const repo = new BylineRepository(dineway.db);
-		const byline = await repo.update(params.id!, {
-			slug: body.slug,
-			displayName: body.displayName,
-			bio: body.bio ?? null,
-			avatarMediaId: body.avatarMediaId ?? null,
-			websiteUrl: body.websiteUrl ?? null,
-			userId: body.userId ?? null,
-			isGuest: body.isGuest,
-		});
-
-		if (!byline) return apiError("NOT_FOUND", "Byline not found", 404);
-		invalidateBylineCache();
-		return apiSuccess(byline);
-	} catch (error) {
-		return handleError(error, "Failed to update byline", "BYLINE_UPDATE_ERROR");
-	}
-};
-
-export const DELETE: APIRoute = async ({ params, locals }) => {
-	const { dineway, user } = locals;
-	const denied = requireEditor(user);
-	if (denied) return denied;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	try {
-		const repo = new BylineRepository(dineway.db);
-		const deleted = await repo.delete(params.id!);
-		if (!deleted) return apiError("NOT_FOUND", "Byline not found", 404);
-		invalidateBylineCache();
-		return apiSuccess({ deleted: true });
-	} catch (error) {
-		return handleError(error, "Failed to delete byline", "BYLINE_DELETE_ERROR");
-	}
-};

package/src/astro/routes/api/admin/bylines/index.ts

@@ -1,74 +0,0 @@
-import { Role } from "@dineway-ai/auth";
-import type { APIRoute } from "astro";
-
-import { requirePerm } from "#api/authorize.js";
-import { apiError, apiSuccess, handleError } from "#api/error.js";
-import { isParseError, parseBody, parseQuery } from "#api/parse.js";
-import { bylineCreateBody, bylinesListQuery } from "#api/schemas.js";
-import { invalidateBylineCache } from "#bylines/index.js";
-import { BylineRepository } from "#db/repositories/byline.js";
-
-export const prerender = false;
-
-export const GET: APIRoute = async ({ url, locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	// Read access uses content:read so all authenticated roles can view byline data
-	const denied = requirePerm(user, "content:read");
-	if (denied) return denied;
-
-	const query = parseQuery(url, bylinesListQuery);
-	if (isParseError(query)) return query;
-
-	try {
-		const repo = new BylineRepository(dineway.db);
-		const result = await repo.findMany({
-			search: query.search,
-			isGuest: query.isGuest,
-			userId: query.userId,
-			cursor: query.cursor,
-			limit: query.limit,
-		});
-
-		return apiSuccess(result);
-	} catch (error) {
-		return handleError(error, "Failed to list bylines", "BYLINE_LIST_ERROR");
-	}
-};
-
-export const POST: APIRoute = async ({ request, locals }) => {
-	const { dineway, user } = locals;
-
-	if (!dineway?.db) {
-		return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
-	}
-
-	if (!user || user.role < Role.EDITOR) {
-		return apiError("FORBIDDEN", "Editor privileges required", 403);
-	}
-
-	const body = await parseBody(request, bylineCreateBody);
-	if (isParseError(body)) return body;
-
-	try {
-		const repo = new BylineRepository(dineway.db);
-		const byline = await repo.create({
-			slug: body.slug,
-			displayName: body.displayName,
-			bio: body.bio ?? null,
-			avatarMediaId: body.avatarMediaId ?? null,
-			websiteUrl: body.websiteUrl ?? null,
-			userId: body.userId ?? null,
-			isGuest: body.isGuest,
-		});
-
-		invalidateBylineCache();
-		return apiSuccess(byline, 201);
-	} catch (error) {
-		return handleError(error, "Failed to create byline", "BYLINE_CREATE_ERROR");
-	}
-};