carmanagement/apps/api/src/modules/menu/menu.service.ts

import { AppError } from '../../http/errors'
import { prisma } from '../../lib/prisma'
import { getAccessLevel, hasFullAccess, type AccessLevel } from '../subscriptions/subscription.policy'

type EmployeeRole = 'OWNER' | 'MANAGER' | 'AGENT'
type Plan = 'STARTER' | 'GROWTH' | 'PRO'
type MenuItemType = 'INTERNAL_PAGE' | 'EXTERNAL_LINK' | 'PARENT_MENU' | 'SECTION_LABEL' | 'DIVIDER'

type AdminActor = {
  id: string
  role: string
}

type MenuItemInput = {
  systemKey?: string | null
  label: string
  itemType: MenuItemType
  routeOrUrl?: string | null
  icon?: string | null
  parentId?: string | null
  displayOrder?: number
  openInNewTab?: boolean
  isRequired?: boolean
  isActive?: boolean
  roles?: EmployeeRole[]
  subscriptionPlans?: Array<{
    plan: Plan
    displayOrder?: number
    isActive?: boolean
  }>
  companyAssignments?: Array<{
    companyId: string
    displayOrder?: number
    isActive?: boolean
  }>
}

type MenuPreviewInput = {
  companyId: string
  role: EmployeeRole
}

type MenuAuditQuery = {
  page: number
  pageSize: number
}

type EvaluatedMenuItem = {
  id: string
  systemKey: string | null
  label: string
  itemType: MenuItemType
  routeOrUrl: string | null
  icon: string | null
  parentId: string | null
  openInNewTab: boolean
  isRequired: boolean
  isActive: boolean
  displayOrder: number
  source: 'company' | 'subscription' | 'none'
  visible: boolean
  reasons: string[]
}

const EMPLOYEE_ROLES: EmployeeRole[] = ['OWNER', 'MANAGER', 'AGENT']
const MENU_AUDIT_RESOURCES = ['MenuItem', 'MenuSubscriptionAssignment', 'MenuCompanyAssignment', 'MenuRoleVisibility']
const MENU_ITEM_TYPES_WITHOUT_ROUTE = new Set([
  'PARENT_MENU',
  'SECTION_LABEL',
  'DIVIDER',
])
const ROLE_RANK: Record<EmployeeRole, number> = { OWNER: 3, MANAGER: 2, AGENT: 1 }
const BASELINE_EMPLOYEE_MENU_ITEMS = [
  { systemKey: 'dashboard', label: 'Dashboard', routeOrUrl: '/', icon: 'LayoutDashboard', displayOrder: 10, minRole: 'AGENT' },
  { systemKey: 'reservations', label: 'Reservations', routeOrUrl: '/reservations', icon: 'Calendar', displayOrder: 20, minRole: 'AGENT' },
  { systemKey: 'fleet', label: 'Fleet', routeOrUrl: '/fleet', icon: 'Car', displayOrder: 30, minRole: 'AGENT' },
  { systemKey: 'customers', label: 'Customers', routeOrUrl: '/customers', icon: 'Users', displayOrder: 40, minRole: 'AGENT' },
  { systemKey: 'reports', label: 'Reports', routeOrUrl: '/reports', icon: 'BarChart2', displayOrder: 50, minRole: 'MANAGER' },
  { systemKey: 'billing', label: 'Billing', routeOrUrl: '/billing', icon: 'CreditCard', displayOrder: 60, minRole: 'MANAGER' },
  { systemKey: 'settings', label: 'Settings', routeOrUrl: '/settings', icon: 'Settings', displayOrder: 70, minRole: 'OWNER' },
] as const
const MENU_RECOVERY_ROUTES = new Set(['/subscription', '/subscription/success', '/subscription/cancel'])

function normalizeNullableString(value?: string | null) {
  if (typeof value !== 'string') return null
  const trimmed = value.trim()
  return trimmed.length > 0 ? trimmed : null
}

function sortByDisplayOrder<T extends { displayOrder: number; label?: string | null }>(items: T[]) {
  return [...items].sort((a, b) => {
    if (a.displayOrder !== b.displayOrder) return a.displayOrder - b.displayOrder
    return (a.label ?? '').localeCompare(b.label ?? '')
  })
}

function hasMinRole(role: EmployeeRole, minRole: EmployeeRole): boolean {
  return ROLE_RANK[role] >= ROLE_RANK[minRole]
}

function toPlanValue(plan: Plan) {
  return plan
}

function toItemTypeValue(itemType: MenuItemType) {
  return itemType
}

function describeEntitlement(
  plan: Plan | null,
  hasSubscriptionAssignment: boolean,
  hasCompanyAssignment: boolean,
  defaultsToAllSubscriptions: boolean,
) {
  if (hasCompanyAssignment) return 'Visible because it is assigned directly to this company.'
  if (defaultsToAllSubscriptions) return 'Visible because this menu item defaults to all subscription plans.'
  if (hasSubscriptionAssignment && plan) return `Visible because ${plan} includes this menu item.`
  if (plan) return `Hidden because ${plan} does not include this menu item.`
  return 'Hidden because the company does not have an active subscription assignment for this item.'
}

async function createAuditLog(admin: AdminActor, action: string, resource: string, resourceId: string | null, before?: unknown, after?: unknown) {
  await prisma.auditLog.create({
    data: {
      adminUserId: admin.id,
      action,
      resource,
      resourceId,
      before: before === undefined ? undefined : JSON.parse(JSON.stringify(before)),
      after: after === undefined ? undefined : JSON.parse(JSON.stringify(after)),
    },
  })
}

async function assertMenuItemPayload(input: MenuItemInput, menuItemId?: string) {
  const label = input.label.trim()
  if (!label) throw new AppError('Menu label is required.', 400, 'validation_error')

  const itemType = toItemTypeValue(input.itemType)
  const routeOrUrl = normalizeNullableString(input.routeOrUrl)
  const parentId = normalizeNullableString(input.parentId)

  if (MENU_ITEM_TYPES_WITHOUT_ROUTE.has(itemType)) {
    if (routeOrUrl) {
      throw new AppError('This menu item type cannot define a route or URL.', 400, 'validation_error')
    }
  } else if (!routeOrUrl) {
    throw new AppError('Route or URL is required for this menu item type.', 400, 'validation_error')
  }

  if (routeOrUrl && itemType === 'EXTERNAL_LINK') {
    if (!routeOrUrl.startsWith('https://')) {
      throw new AppError('External links must use HTTPS.', 400, 'validation_error')
    }
  }

  if (routeOrUrl && itemType === 'INTERNAL_PAGE' && !routeOrUrl.startsWith('/')) {
    throw new AppError('Internal page routes must start with "/".', 400, 'validation_error')
  }

  if (parentId) {
    if (menuItemId && parentId === menuItemId) {
      throw new AppError('A menu item cannot be its own parent.', 400, 'validation_error')
    }

    const parent = await prisma.menuItem.findUnique({ where: { id: parentId } })
    if (!parent) throw new AppError('Parent menu item was not found.', 400, 'validation_error')
    if (parent.itemType !== 'PARENT_MENU') {
      throw new AppError('Only parent menu items can contain children.', 400, 'validation_error')
    }
  }

  if (routeOrUrl && !MENU_ITEM_TYPES_WITHOUT_ROUTE.has(itemType)) {
    const duplicate = await prisma.menuItem.findFirst({
      where: {
        routeOrUrl,
        parentId,
        ...(menuItemId ? { id: { not: menuItemId } } : {}),
      },
      select: { id: true },
    })

    if (duplicate) {
      throw new AppError('Duplicate route under the same parent is not allowed.', 409, 'duplicate_menu_route')
    }
  }

  const roles = Array.from(new Set(input.roles ?? []))
  if (roles.some((role) => !EMPLOYEE_ROLES.includes(role))) {
    throw new AppError('One or more role visibility values are invalid.', 400, 'validation_error')
  }

  const companyIds = Array.from(new Set((input.companyAssignments ?? []).map((assignment) => assignment.companyId)))
  if (companyIds.length > 0) {
    const companies = await prisma.company.findMany({
      where: { id: { in: companyIds }, status: { not: 'CANCELLED' } },
      select: { id: true },
    })

    if (companies.length !== companyIds.length) {
      throw new AppError('Menu items can only be assigned to active companies.', 400, 'validation_error')
    }
  }
}

async function syncMenuAssignments(
  tx: Omit<typeof prisma, '$connect' | '$disconnect' | '$on' | '$transaction' | '$use' | '$extends'>,
  menuItemId: string,
  input: MenuItemInput,
) {
  await tx.menuItemRoleVisibility.deleteMany({ where: { menuItemId } })
  if ((input.roles ?? []).length > 0) {
    await tx.menuItemRoleVisibility.createMany({
      data: Array.from(new Set(input.roles)).map((role) => ({ menuItemId, role })),
    })
  }

  await tx.subscriptionMenuItem.deleteMany({ where: { menuItemId } })
  if ((input.subscriptionPlans ?? []).length > 0) {
    await tx.subscriptionMenuItem.createMany({
      data: input.subscriptionPlans!.map((assignment) => ({
        menuItemId,
        plan: toPlanValue(assignment.plan),
        displayOrder: assignment.displayOrder ?? input.displayOrder ?? 0,
        isActive: assignment.isActive ?? true,
      })),
    })
  }

  await tx.companyMenuItem.deleteMany({ where: { menuItemId } })
  if ((input.companyAssignments ?? []).length > 0) {
    await tx.companyMenuItem.createMany({
      data: input.companyAssignments!.map((assignment) => ({
        menuItemId,
        companyId: assignment.companyId,
        displayOrder: assignment.displayOrder ?? input.displayOrder ?? 0,
        isActive: assignment.isActive ?? true,
      })),
    })
  }
}

async function loadMenuItemDetail(id: string) {
  return prisma.menuItem.findUniqueOrThrow({
    where: { id },
    include: {
      parent: { select: { id: true, label: true } },
      children: { select: { id: true, label: true } },
      roleVisibilities: { orderBy: { role: 'asc' } },
      subscriptionAssignments: { orderBy: [{ plan: 'asc' }, { displayOrder: 'asc' }] },
      companyAssignments: {
        include: { company: { select: { id: true, name: true } } },
        orderBy: [{ displayOrder: 'asc' }, { companyId: 'asc' }],
      },
    },
  })
}

export async function listMenuItems() {
  return prisma.menuItem.findMany({
    include: {
      parent: { select: { id: true, label: true } },
      roleVisibilities: { orderBy: { role: 'asc' } },
      subscriptionAssignments: { orderBy: [{ plan: 'asc' }, { displayOrder: 'asc' }] },
      companyAssignments: {
        include: { company: { select: { id: true, name: true } } },
        orderBy: [{ displayOrder: 'asc' }, { companyId: 'asc' }],
      },
    },
    orderBy: [{ displayOrder: 'asc' }, { createdAt: 'asc' }],
  })
}

export async function getMenuItem(id: string) {
  return loadMenuItemDetail(id)
}

export async function createMenuItem(input: MenuItemInput, admin: AdminActor) {
  await assertMenuItemPayload(input)

  const created = await prisma.$transaction(async (tx: any) => {
    const menuItem = await tx.menuItem.create({
      data: {
        systemKey: normalizeNullableString(input.systemKey) ?? undefined,
        label: input.label.trim(),
        itemType: toItemTypeValue(input.itemType),
        routeOrUrl: normalizeNullableString(input.routeOrUrl) ?? undefined,
        icon: normalizeNullableString(input.icon) ?? undefined,
        parentId: normalizeNullableString(input.parentId) ?? undefined,
        displayOrder: input.displayOrder ?? 0,
        openInNewTab: input.openInNewTab ?? false,
        isRequired: input.isRequired ?? false,
        isActive: input.isActive ?? true,
        createdBy: admin.id,
        updatedBy: admin.id,
      },
    })

    await syncMenuAssignments(tx as any, menuItem.id, input)
    return menuItem
  })

  const detail = await loadMenuItemDetail(created.id)
  await createAuditLog(admin, 'CREATE_MENU_ITEM', 'MenuItem', created.id, undefined, detail)
  return detail
}

export async function updateMenuItem(id: string, input: MenuItemInput, admin: AdminActor) {
  const before = await loadMenuItemDetail(id)
  await assertMenuItemPayload(input, id)

  const updated = await prisma.$transaction(async (tx: any) => {
    const menuItem = await tx.menuItem.update({
      where: { id },
      data: {
        systemKey: normalizeNullableString(input.systemKey) ?? undefined,
        label: input.label.trim(),
        itemType: toItemTypeValue(input.itemType),
        routeOrUrl: normalizeNullableString(input.routeOrUrl) ?? undefined,
        icon: normalizeNullableString(input.icon) ?? undefined,
        parentId: normalizeNullableString(input.parentId) ?? undefined,
        displayOrder: input.displayOrder ?? 0,
        openInNewTab: input.openInNewTab ?? false,
        isRequired: input.isRequired ?? false,
        isActive: input.isActive ?? true,
        updatedBy: admin.id,
      },
    })

    await syncMenuAssignments(tx as any, id, input)
    return menuItem
  })

  const detail = await loadMenuItemDetail(updated.id)
  await createAuditLog(admin, 'UPDATE_MENU_ITEM', 'MenuItem', id, before, detail)
  return detail
}

export async function setMenuItemStatus(id: string, isActive: boolean, admin: AdminActor) {
  const before = await prisma.menuItem.findUniqueOrThrow({ where: { id } })
  if (!isActive && before.isRequired && admin.role !== 'SUPER_ADMIN') {
    throw new AppError('Required system items can only be disabled by a Super Admin.', 403, 'forbidden')
  }

  const updated = await prisma.menuItem.update({
    where: { id },
    data: { isActive, updatedBy: admin.id },
  })

  await createAuditLog(
    admin,
    isActive ? 'ENABLE_MENU_ITEM' : 'DISABLE_MENU_ITEM',
    'MenuItem',
    id,
    { isActive: before.isActive },
    { isActive: updated.isActive },
  )

  return updated
}

export async function deleteMenuItem(id: string, admin: AdminActor) {
  const before = await loadMenuItemDetail(id)
  if (before.isRequired && admin.role !== 'SUPER_ADMIN') {
    throw new AppError('Required system items can only be deleted by a Super Admin.', 403, 'forbidden')
  }

  await prisma.menuItem.delete({ where: { id } })
  await createAuditLog(admin, 'DELETE_MENU_ITEM', 'MenuItem', id, before, undefined)
}

export async function assignMenuItemToPlans(
  id: string,
  assignments: Array<{ plan: Plan; displayOrder?: number; isActive?: boolean }>,
  admin: AdminActor,
) {
  await prisma.menuItem.findUniqueOrThrow({ where: { id } })

  const payload = assignments.map((assignment) => ({
    menuItemId: id,
    plan: toPlanValue(assignment.plan),
    displayOrder: assignment.displayOrder ?? 0,
    isActive: assignment.isActive ?? true,
  }))

  await prisma.subscriptionMenuItem.deleteMany({
    where: { menuItemId: id, plan: { in: payload.map((assignment) => assignment.plan) } },
  })

  if (payload.length > 0) {
    await prisma.subscriptionMenuItem.createMany({ data: payload })
  }

  await createAuditLog(admin, 'ASSIGN_MENU_ITEM_TO_SUBSCRIPTIONS', 'MenuSubscriptionAssignment', id, undefined, payload)
  return loadMenuItemDetail(id)
}

export async function removeMenuItemFromPlan(id: string, plan: Plan, admin: AdminActor) {
  await prisma.subscriptionMenuItem.deleteMany({
    where: {
      menuItemId: id,
      plan: toPlanValue(plan),
    },
  })

  await createAuditLog(admin, 'REMOVE_MENU_ITEM_FROM_SUBSCRIPTION', 'MenuSubscriptionAssignment', id, { plan }, undefined)
  return loadMenuItemDetail(id)
}

export async function assignMenuItemToCompanies(
  id: string,
  assignments: Array<{ companyId: string; displayOrder?: number; isActive?: boolean }>,
  admin: AdminActor,
) {
  await prisma.menuItem.findUniqueOrThrow({ where: { id } })
  const companyIds = assignments.map((assignment) => assignment.companyId)
  const companies = await prisma.company.findMany({
    where: { id: { in: companyIds }, status: { not: 'CANCELLED' } },
    select: { id: true },
  })

  if (companies.length !== new Set(companyIds).size) {
    throw new AppError('Menu items can only be assigned to active companies.', 400, 'validation_error')
  }

  await prisma.companyMenuItem.deleteMany({
    where: {
      menuItemId: id,
      companyId: { in: companyIds },
    },
  })

  if (assignments.length > 0) {
    await prisma.companyMenuItem.createMany({
      data: assignments.map((assignment) => ({
        menuItemId: id,
        companyId: assignment.companyId,
        displayOrder: assignment.displayOrder ?? 0,
        isActive: assignment.isActive ?? true,
      })),
    })
  }

  await createAuditLog(admin, 'ASSIGN_MENU_ITEM_TO_COMPANIES', 'MenuCompanyAssignment', id, undefined, assignments)
  return loadMenuItemDetail(id)
}

export async function removeMenuItemFromCompany(id: string, companyId: string, admin: AdminActor) {
  await prisma.companyMenuItem.deleteMany({
    where: { menuItemId: id, companyId },
  })

  await createAuditLog(admin, 'REMOVE_MENU_ITEM_FROM_COMPANY', 'MenuCompanyAssignment', id, { companyId }, undefined)
  return loadMenuItemDetail(id)
}

async function getMenuEvaluationContext(companyId: string, role: EmployeeRole, employeeIsActive = true) {
  const company = await prisma.company.findUniqueOrThrow({
    where: { id: companyId },
    select: {
      id: true,
      name: true,
      status: true,
      subscription: {
        select: {
          plan: true,
          status: true,
        },
      },
    },
  })

  const menuItems = await prisma.menuItem.findMany({
    include: {
      roleVisibilities: true,
      subscriptionAssignments: true,
      companyAssignments: {
        where: { companyId },
      },
    },
    orderBy: [{ displayOrder: 'asc' }, { createdAt: 'asc' }],
  })

  const currentPlan = company.subscription?.plan ?? null
  const subscriptionStatus = company.subscription?.status ?? 'EXPIRED'
  const subscriptionAccessLevel = getAccessLevel(subscriptionStatus)
  const subscriptionHasFullAccess = hasFullAccess(subscriptionStatus)
  const currentPlanName = subscriptionHasFullAccess ? currentPlan as Plan | null : null

  const evaluated: EvaluatedMenuItem[] = (menuItems as any[]).map((item: any) => {
    const defaultsToAllSubscriptions = item.subscriptionAssignments.length === 0
    const subscriptionAssignment = item.subscriptionAssignments.find(
      (assignment: any) => assignment.isActive && (!currentPlanName || assignment.plan === currentPlanName),
    )
    const companyAssignment = item.companyAssignments.find((assignment: any) => assignment.isActive)
    const roleAllowed = item.roleVisibilities.length === 0 || item.roleVisibilities.some((visibility: any) => visibility.role === role)
    const subscriptionEntitled = Boolean(subscriptionHasFullAccess && (subscriptionAssignment || (defaultsToAllSubscriptions && currentPlanName)))
    const entitled = Boolean(subscriptionHasFullAccess && (subscriptionEntitled || companyAssignment))
    const visible = Boolean(item.isActive && entitled && roleAllowed && employeeIsActive)
    const displayOrder = companyAssignment?.displayOrder ?? subscriptionAssignment?.displayOrder ?? item.displayOrder

    const reasons: string[] = []
    if (!item.isActive) reasons.push('Hidden because the menu item is inactive.')
    if (!employeeIsActive) reasons.push('Hidden because the user account is inactive.')
    if (!subscriptionHasFullAccess) reasons.push(`Hidden because subscription status ${subscriptionStatus} does not allow dashboard feature access.`)
    if (!entitled) reasons.push(describeEntitlement(currentPlanName, false, false, false))
    if (entitled) {
      reasons.push(
        describeEntitlement(
          currentPlanName,
          Boolean(subscriptionAssignment),
          Boolean(companyAssignment),
          Boolean(defaultsToAllSubscriptions && !companyAssignment),
        ),
      )
    }
    if (!roleAllowed) reasons.push(`Hidden because the ${role} role is not allowed to see this item.`)

    return {
      id: item.id,
      systemKey: item.systemKey,
      label: item.label ?? '',
      itemType: item.itemType as MenuItemType,
      routeOrUrl: item.routeOrUrl,
      icon: item.icon,
      parentId: item.parentId,
      openInNewTab: item.openInNewTab,
      isRequired: item.isRequired,
      isActive: item.isActive,
      displayOrder,
      source: companyAssignment ? 'company' : subscriptionEntitled ? 'subscription' : 'none',
      visible,
      reasons,
    }
  })

  return {
    company,
    role,
    currentPlan: currentPlanName,
    subscriptionStatus,
    subscriptionAccessLevel: subscriptionAccessLevel as AccessLevel,
    items: sortByDisplayOrder(evaluated),
  }
}

function buildMenuTree(items: Array<{
  id: string
  systemKey: string | null
  label: string
  itemType: MenuItemType
  routeOrUrl: string | null
  icon: string | null
  parentId: string | null
  openInNewTab: boolean
  displayOrder: number
}>) {
  const byId = new Map<string, any>()
  const roots: any[] = []

  for (const item of items) {
    byId.set(item.id, {
      id: item.id,
      systemKey: item.systemKey,
      label: item.label ?? '',
      itemType: item.itemType as MenuItemType,
      routeOrUrl: item.routeOrUrl,
      icon: item.icon,
      parentId: item.parentId,
      openInNewTab: item.openInNewTab,
      displayOrder: item.displayOrder,
      children: [],
    })
  }

  for (const item of items) {
    const node = byId.get(item.id)
    if (item.parentId && byId.has(item.parentId)) {
      byId.get(item.parentId).children.push(node)
    } else {
      roots.push(node)
    }
  }

  const sortTree = (nodes: any[]) => {
    nodes.sort((a, b) => {
      if (a.displayOrder !== b.displayOrder) return a.displayOrder - b.displayOrder
      return a.label.localeCompare(b.label)
    })
    nodes.forEach((node) => sortTree(node.children))
  }

  sortTree(roots)
  return roots
}

function hasFeatureMenuRoute(items: Array<{ itemType: MenuItemType; routeOrUrl: string | null }>) {
  return items.some((item) => (
    item.itemType === 'INTERNAL_PAGE' &&
    item.routeOrUrl &&
    item.routeOrUrl !== '/' &&
    !MENU_RECOVERY_ROUTES.has(item.routeOrUrl)
  ))
}

function buildBaselineEmployeeMenu(role: EmployeeRole) {
  return BASELINE_EMPLOYEE_MENU_ITEMS
    .filter((item) => hasMinRole(role, item.minRole))
    .map((item) => ({
      id: `baseline_${item.systemKey}`,
      systemKey: item.systemKey,
      label: item.label,
      itemType: 'INTERNAL_PAGE' as MenuItemType,
      routeOrUrl: item.routeOrUrl,
      icon: item.icon,
      parentId: null,
      openInNewTab: false,
      displayOrder: item.displayOrder,
      children: [],
    }))
}

export async function previewCompanyMenu(input: MenuPreviewInput) {
  const context = await getMenuEvaluationContext(input.companyId, input.role)
  return {
    company: context.company,
    role: context.role,
    subscriptionPlan: context.currentPlan,
    subscriptionStatus: context.subscriptionStatus,
    subscriptionAccessLevel: context.subscriptionAccessLevel,
    items: context.items,
    finalMenu: buildMenuTree(
      context.items
        .filter((item) => item.visible)
        .map((item) => ({
          id: item.id,
          systemKey: item.systemKey,
          label: item.label,
          itemType: item.itemType,
          routeOrUrl: item.routeOrUrl,
          icon: item.icon,
          parentId: item.parentId,
          openInNewTab: item.openInNewTab,
          displayOrder: item.displayOrder,
        })),
    ),
  }
}

export async function getEmployeeMenu(employeeId: string) {
  const employee = await prisma.employee.findUniqueOrThrow({
    where: { id: employeeId },
    select: {
      id: true,
      role: true,
      isActive: true,
      companyId: true,
    },
  })

  const context = await getMenuEvaluationContext(employee.companyId, employee.role, employee.isActive)
  const visibleItems = context.items.filter((item) => item.visible)
  const menuItems = buildMenuTree(
    visibleItems.map((item) => ({
      id: item.id,
      systemKey: item.systemKey,
      label: item.label,
      itemType: item.itemType,
      routeOrUrl: item.routeOrUrl,
      icon: item.icon,
      parentId: item.parentId,
      openInNewTab: item.openInNewTab,
      displayOrder: item.displayOrder,
    })),
  )
  const resolvedItems =
    context.subscriptionAccessLevel === 'full' && employee.isActive && !hasFeatureMenuRoute(menuItems)
      ? buildBaselineEmployeeMenu(employee.role)
      : menuItems

  return {
    companyId: employee.companyId,
    role: employee.role,
    subscriptionPlan: context.currentPlan,
    subscriptionStatus: context.subscriptionStatus,
    subscriptionAccessLevel: context.subscriptionAccessLevel,
    items: resolvedItems,
  }
}

export async function listMenuAuditLogs(query: MenuAuditQuery) {
  const where = {
    resource: {
      in: MENU_AUDIT_RESOURCES,
    },
  } as const

  const [data, total] = await Promise.all([
    prisma.auditLog.findMany({
      where,
      include: { adminUser: { select: { firstName: true, lastName: true, email: true } } },
      skip: (query.page - 1) * query.pageSize,
      take: query.pageSize,
      orderBy: { createdAt: 'desc' },
    }),
    prisma.auditLog.count({ where }),
  ])

  return {
    data,
    total,
    page: query.page,
    pageSize: query.pageSize,
    totalPages: Math.ceil(total / query.pageSize),
  }
}