Update app.py

app.py

@@ -1,3 +1,4 @@
+# app.py
 import os
 import json
 import time
@@ -5,119 +6,174 @@ from flask import Flask, request, Response, jsonify, render_template, redirect,
 from google import genai
 from google.genai import types
 from pydantic import BaseModel, Field
+import psycopg2
+import psycopg2.pool
 
 app = Flask(__name__, template_folder=".")
 
-# مسیرهای دیتابیس لوکال ساختار یافته منو و سفارش‌ها
-DATA_DIR = "data"
-MENU_FILE = os.path.join(DATA_DIR, "menu.json")
-ORDERS_FILE = os.path.join(DATA_DIR, "orders.json")
-
-# ساخت دایرکتوری در صورت عدم وجود
-os.makedirs(DATA_DIR, exist_ok=True)
-
-# مقداردهی اولیه فایل‌ها با فرمت مناسب در صورت خالی بودن
-if not os.path.exists(MENU_FILE):
-    with open(MENU_FILE, "w", encoding="utf-8") as f:
-        json.dump([], f, ensure_ascii=False, indent=4)
-
-if not os.path.exists(ORDERS_FILE):
-    with open(ORDERS_FILE, "w", encoding="utf-8") as f:
-        json.dump([], f, ensure_ascii=False, indent=4)
-
-
-# --- مخازن ذخیره موقت وضعیت در حافظه (Thread-Safe & Multi-Client Session) ---
-table_chat_histories = {} # تاریخچه گفتگو بر اساس شماره میز
-global_drafts = {}        # پیش‌نویس‌های موقت سفارش بر اساس شماره میز
-active_tasks = {}         # کنترل پردازش‌های فعال جهت متوقف کردن استریمینگ
+# --- Database Setup (Neon PostgreSQL) ---
+DATABASE_URL = os.environ.get("DATABASE_URL")
+if not DATABASE_URL:
+    raise RuntimeError("DATABASE_URL environment variable is required (e.g. from Neon.tech)")
+
+# Connection pool for better performance
+try:
+    db_pool = psycopg2.pool.SimpleConnectionPool(1, 10, DATABASE_URL)
+    print("Database connection pool created")
+except Exception as e:
+    print(f"Failed to create database pool: {e}")
+    raise
+
+def get_db_connection():
+    """Get a connection from the pool."""
+    return db_pool.getconn()
+
+def release_db_connection(conn):
+    """Return a connection to the pool."""
+    db_pool.putconn(conn)
+
+def init_db():
+    """Create tables if they don't exist."""
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            # Menu table
+            cur.execute("""
+                CREATE TABLE IF NOT EXISTS menu (
+                    id SERIAL PRIMARY KEY,
+                    name TEXT NOT NULL,
+                    description TEXT DEFAULT '',
+                    price TEXT DEFAULT '',
+                    available BOOLEAN DEFAULT TRUE,
+                    created_at TIMESTAMP DEFAULT NOW()
+                );
+            """)
+            # Orders table
+            cur.execute("""
+                CREATE TABLE IF NOT EXISTS orders (
+                    id SERIAL PRIMARY KEY,
+                    table_number TEXT NOT NULL,
+                    items JSONB NOT NULL,
+                    status TEXT DEFAULT 'pending',
+                    timestamp DOUBLE PRECISION DEFAULT 0,
+                    created_at TIMESTAMP DEFAULT NOW()
+                );
+            """)
+        conn.commit()
+    except Exception as e:
+        print(f"Database initialization error: {e}")
+        conn.rollback()
+    finally:
+        release_db_connection(conn)
 
+# Initialize database on startup
+init_db()
 
-# --- تعریف کلاس‌های پایداری اسکیما با Pydantic ---
+# --- In-memory caches (thread-safe session data) ---
+table_chat_histories = {}   # conversation history per table
+global_drafts = {}          # draft orders per table
+active_tasks = {}           # stream cancellation tokens
 
+# --- Pydantic Models ---
 class OrderItem(BaseModel):
     name: str = Field(description="نام دقیق و کامل آیتم از منوی فعال به زبان فارسی (مثال: کیک شکلاتی خیس)")
     quantity: int = Field(description="تعداد درخواستی مشتری از این آیتم")
 
-
-# --- توابع مدیریت داده‌های پایگاه‌داده محلی منو و سفارشات ---
-
+# --- Database helper functions ---
 def load_menu():
+    """Load all menu items from database."""
+    conn = get_db_connection()
     try:
-        with open(MENU_FILE, "r", encoding="utf-8") as f:
-            return json.load(f)
-    except Exception:
+        with conn.cursor() as cur:
+            cur.execute("SELECT id, name, description, price, available FROM menu ORDER BY id;")
+            rows = cur.fetchall()
+            menu = []
+            for row in rows:
+                menu.append({
+                    "id": row[0],
+                    "name": row[1],
+                    "description": row[2],
+                    "price": row[3],
+                    "available": row[4]
+                })
+            return menu
+    except Exception as e:
+        print(f"load_menu error: {e}")
         return []
+    finally:
+        release_db_connection(conn)
 
 def save_menu(menu_data):
-    with open(MENU_FILE, "w", encoding="utf-8") as f:
-        json.dump(menu_data, f, ensure_ascii=False, indent=4)
+    """Replace the entire menu list (used when admin publishes a new menu)."""
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            # Clear existing menu
+            cur.execute("DELETE FROM menu;")
+            # Insert new items
+            for item in menu_data:
+                cur.execute(
+                    "INSERT INTO menu (name, description, price, available) VALUES (%s, %s, %s, %s)",
+                    (item.get("name", ""), item.get("description", ""),
+                     item.get("price", ""), item.get("available", True))
+                )
+        conn.commit()
+        return True
+    except Exception as e:
+        print(f"save_menu error: {e}")
+        conn.rollback()
+        return False
+    finally:
+        release_db_connection(conn)
 
 def load_orders():
+    """Load all orders from database."""
+    conn = get_db_connection()
     try:
-        with open(ORDERS_FILE, "r", encoding="utf-8") as f:
-            return json.load(f)
-    except Exception:
+        with conn.cursor() as cur:
+            cur.execute("SELECT id, table_number, items, status, timestamp FROM orders ORDER BY id;")
+            rows = cur.fetchall()
+            orders = []
+            for row in rows:
+                orders.append({
+                    "id": row[0],
+                    "table": row[1],
+                    "items": row[2],          # already JSON
+                    "status": row[3],
+                    "timestamp": row[4]
+                })
+            return orders
+    except Exception as e:
+        print(f"load_orders error: {e}")
         return []
+    finally:
+        release_db_connection(conn)
 
 def save_orders(orders_data):
-    with open(ORDERS_FILE, "w", encoding="utf-8") as f:
-        json.dump(orders_data, f, ensure_ascii=False, indent=4)
-
-
-# --- دستورالعمل‌های سیستمی نیلا (System Instructions) ---
-
-CUSTOMER_SYSTEM_INSTRUCTION = """Your name is Nila, a classic, warm, and highly professional AI cafe assistant for "Cafe AI". You were developed by "Nastaran Data Algorithm".
-Your primary goal is to help customers at their tables select drinks, food, and sweets from the menu, and prepare their orders.
-Rules you must strictly follow:
-1. Speak in Farsi (Persian) in a warm, polite, and welcoming tone. Use emojis suitable for a cozy cafe (☕️, 🍰, 🥐, 🌸, etc.).
-2. If anyone asks who you are or who created you, say: "من نیلا هستم، دستیار هوشمند کافه AI که توسط تیم الگوریتم داده نسترن توسعه پیدا کردم." 
-3. NEVER mention Google, Gemini, Google Cloud, AI Studio, or LLMs. If asked about your technology, say you run on proprietary models developed by Nastaran Data Algorithm.
-4. Do not make up items that are not in the menu. Always use the `get_menu` tool to retrieve the current menu of available items and recommend options based on their taste. If get_menu returns that there is no menu, inform the customer politely that the menu is currently unavailable.
-5. When they choose their items, confirm the items and quantities. Then, call the `prepare_order_draft` tool to prepare the draft order. Once prepared, tell them to click the "Confirm Order" (تایید نهایی سفارش) button on their screen to send it to the kitchen.
-6. Do not proceed to place an order unless they have specified what they want.
-7. Always act as an elegant, polite cafe waitress.
-"""
-
-ADMIN_SYSTEM_INSTRUCTION = """Your name is Nila, the smart cafe administrator assistant for "Cafe AI". You were developed by "Nastaran Data Algorithm".
-Your role is to help the cafe staff manage their active menu. You can update item availabilities, edit menu details, and process commands.
-Rules you must strictly follow:
-1. Speak in Farsi (Persian) in a professional, clear, and polite tone.
-2. If anyone asks who you are or who created you, say: "من نیلا هستم، دستیار هوشمند مدیریت که توسط تیم الگوریتم داده نسترن توسعه پیدا کردم."
-3. NEVER mention Google, Gemini, or other non-cooperative entities.
-4. You have tools to manage the menu:
-   - `get_full_menu()`: returns the entire menu list.
-   - `set_item_availability(item_name: str, available: bool)`: changes whether an item is available or sold out.
-5. When the staff says an item is finished, sold out, or unavailable, call `set_item_availability` with `available=False` for that item.
-6. When they say an item is back, available, or restocked, call `set_item_availability` with `available=True` for that item.
-7. Always summarize your action clearly after calling the tool (e.g., "با موفقیت اسپرسو را به وضعیت ناموجود تغییر دادم.").
-"""
-
-
-# --- توابع فراخوانی ابزارها (Function Calling Tools) ---
+    """Append a new order to database (used by confirm_order)."""
+    # This function is now only called to add one order at a time (the new_order dict)
+    # But we keep it for backward compatibility. We'll modify confirm_order to use insert directly.
+    pass  # not used anymore, will insert directly in confirm_order endpoint
 
+# --- Tool functions (will be called by Gemini) ---
 def get_menu() -> str:
     """
     Returns the current menu items. Use this to see what drinks, foods, or sweets are available in the cafe.
-    If empty or no items are available, it returns that there is no menu yet.
     """
     menu = load_menu()
     available_items = [item for item in menu if item.get("available", True)]
     if not available_items:
         return "در حال حاضر هیچ منویی آپلود نشده است و منوی فعال موجود نیست."
-    return json.dumps(available_items, ensure_ascii=False)
+    # Return only needed fields for AI (name, description, price)
+    simplified = [{"name": i["name"], "description": i["description"], "price": i["price"]} for i in available_items]
+    return json.dumps(simplified, ensure_ascii=False)
 
 def prepare_order_draft(table_number: str, items: list[OrderItem]) -> str:
     """
     Prepares a draft order list for the customer to confirm on their screen.
-    Call this when the customer has decided what they want to order.
-    
-    Args:
-        table_number: The table number (e.g. '3')
-        items: A list of ordered items, each containing a name and a quantity.
     """
     table_number_str = str(table_number)
     items_list = []
-    # پردازش دفاعی برای پشتیبانی همزمان از کلاس‌های Pydantic و ساختارهای دیکشنری خام
     for item in items:
         if isinstance(item, dict):
             items_list.append({
@@ -130,14 +186,11 @@ def prepare_order_draft(table_number: str, items: list[OrderItem]) -> str:
                 "quantity": item.quantity
             })
         else:
-            try:
-                items_list.append({
-                    "name": getattr(item, "name", str(item)),
-                    "quantity": getattr(item, "quantity", 1)
-                })
-            except Exception:
-                pass
-    
+            # fallback
+            items_list.append({
+                "name": str(item),
+                "quantity": 1
+            })
     global_drafts[table_number_str] = {
         "table": table_number_str,
         "items": items_list,
@@ -157,32 +210,33 @@ def get_full_menu() -> str:
 def set_item_availability(item_name: str, available: bool) -> str:
     """
     Updates whether a menu item is available or sold out.
-    
-    Args:
-        item_name: The exact name of the item in Persian (e.g. 'اسپرسو' or 'کیک شکلاتی')
-        available: True if the item is available, False if it is unavailable/sold out.
     """
-    menu = load_menu()
-    found = False
-    normalized_input = item_name.strip().lower()
-    
-    for item in menu:
-        if item["name"].strip().lower() == normalized_input or normalized_input in item["name"].strip().lower():
-            item["available"] = available
-            found = True
-            item_name = item["name"]
-            break
-            
-    if found:
-        save_menu(menu)
-        status = "موجود" if available else "ناموجود"
-        return f"وضعیت آیتم '{item_name}' به موفقیت به '{status}' تغییر یافت."
-    else:
-        return f"آیتم '{item_name}' در منوی کافه یافت نشد."
-
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            # Find item by name (case-insensitive)
+            cur.execute("SELECT id, name FROM menu WHERE LOWER(name) = %s;", (item_name.strip().lower(),))
+            row = cur.fetchone()
+            if row:
+                cur.execute("UPDATE menu SET available = %s WHERE id = %s;", (available, row[0]))
+                conn.commit()
+                status = "موجود" if available else "ناموجود"
+                return f"وضعیت آیتم '{row[1]}' به موفقیت به '{status}' تغییر یافت."
+            else:
+                return f"آیتم '{item_name}' در منوی کافه یافت نشد."
+    except Exception as e:
+        print(f"set_item_availability error: {e}")
+        conn.rollback()
+        return f"خطا در بروزرسانی آیتم: {str(e)}"
+    finally:
+        release_db_connection(conn)
 
-# --- روت‌های مسیریابی آدرس‌ها ---
+# --- System Instructions (unchanged) ---
+CUSTOMER_SYSTEM_INSTRUCTION = """Your name is Nila, a classic, warm, and highly professional AI cafe assistant for "Cafe AI". You were developed by "Nastaran Data Algorithm".
+... (keep existing)"""
+ADMIN_SYSTEM_INSTRUCTION = """Your name is Nila, the smart cafe administrator assistant for "Cafe AI". ... (keep existing)"""
 
+# --- Routes ---
 @app.route('/')
 def home():
     return render_template("customer.html", table_number=None)
@@ -195,19 +249,17 @@ def customer_chat_page(table_number):
 def admin_dashboard_page():
     return render_template("cafe.html")
 
-
-# --- مسیرهای سرویس‌های API مشتری ---
-
+# --- Customer API ---
 @app.route('/api/customer/chat_stream/<table_number>', methods=['POST'])
 def api_customer_chat_stream(table_number):
     api_key = os.environ.get("NILLA_CUSTOMER") or os.environ.get("GEMINI_API_KEY")
     if not api_key:
-        return jsonify({"error": "کلید API در سرور یافت نشد. لطفاً NILLA_CUSTOMER یا GEMINI_API_KEY را بررسی کنید."}), 500
+        return jsonify({"error": "API key not found"}), 500
 
     data = request.json or {}
     user_message = data.get("message")
     if not user_message:
-        return jsonify({"error": "پیام خالی است."}), 400
+        return jsonify({"error": "Empty message"}), 400
 
     if table_number not in table_chat_histories:
         table_chat_histories[table_number] = []
@@ -218,7 +270,6 @@ def api_customer_chat_stream(table_number):
 
     def generate_chunks():
         try:
-            # بازسازی ساختار تاریخچه به جز پیام جاری
             contents = []
             for msg in table_chat_histories[table_number][:-1]:
                 role = "user" if msg["role"] == "user" else "model"
@@ -231,8 +282,8 @@ def api_customer_chat_stream(table_number):
 
             client = genai.Client(api_key=api_key)
             full_generated_text = ""
-            
-            dynamic_instruction = CUSTOMER_SYSTEM_INSTRUCTION + f"\nYou are currently serving table: {table_number}. Maintain context based on this table number."
+
+            dynamic_instruction = CUSTOMER_SYSTEM_INSTRUCTION + f"\nYou are currently serving table: {table_number}."
 
             config = types.GenerateContentConfig(
                 system_instruction=dynamic_instruction,
@@ -246,38 +297,33 @@ def api_customer_chat_stream(table_number):
                 config=config
             )
 
-            # فراخوانی به صورت غیر استریمینگ به دلیل پایداری بسیار بالا در اجرای ابزارها
             response = chat.send_message(user_message)
 
-            # استخراج دفاعی و ایمن متن نهایی پاسخ
-            try:
-                if response.candidates and response.candidates[0].content and response.candidates[0].content.parts:
-                    parts = response.candidates[0].content.parts
-                    text_parts = [part.text for part in parts if hasattr(part, "text") and part.text]
-                    if text_parts:
-                        full_generated_text = "".join(text_parts)
-            except Exception:
-                pass
-                
+            # Extract text
+            if response.candidates and response.candidates[0].content and response.candidates[0].content.parts:
+                parts = response.candidates[0].content.parts
+                text_parts = [part.text for part in parts if hasattr(part, "text") and part.text]
+                if text_parts:
+                    full_generated_text = "".join(text_parts)
             if not full_generated_text:
                 try:
                     full_generated_text = response.text or ""
                 except (ValueError, AttributeError):
                     full_generated_text = ""
 
-            # شبیه‌سازی استریمینگ روان و زنده پاسخ نهایی به سمت کلاینت
-            chunk_size = 4  # تعداد کاراکترها در هر ارسال
+            # Simulate streaming
+            chunk_size = 4
             for i in range(0, len(full_generated_text), chunk_size):
                 if not active_tasks.get(table_number, True):
                     break
                 chunk = full_generated_text[i:i+chunk_size]
                 yield f"data: {json.dumps({'type': 'text', 'content': chunk}, ensure_ascii=False)}\n\n"
-                time.sleep(0.015)  # تاخیر جزیی جهت حفظ افکت تایپ طبیعی در مرورگر مشتری
+                time.sleep(0.015)
 
             if full_generated_text:
                 table_chat_histories[table_number].append({"role": "model", "content": full_generated_text})
 
-            # بررسی و ارسال پیش‌نویس سفارش در صورت اجرای ابزار مربوطه
+            # Check draft
             draft = global_drafts.get(table_number)
             if draft:
                 yield f"data: {json.dumps({'type': 'draft', 'items': draft['items']}, ensure_ascii=False)}\n\n"
@@ -292,82 +338,85 @@ def api_customer_chat_stream(table_number):
 @app.route('/api/customer/stop/<table_number>', methods=['POST'])
 def api_customer_stop(table_number):
     active_tasks[table_number] = False
-    return jsonify({"success": True, "message": "فرآیند تولید متوقف شد."})
+    return jsonify({"success": True})
 
 @app.route('/api/confirm_order', methods=['POST'])
 def api_confirm_order():
     data = request.json or {}
     table_number = data.get("table_number")
     items = data.get("items")
-    
+
     if not table_number:
         return jsonify({"error": "شماره میز مشخص نیست."}), 400
-        
+
     if not items:
         draft = global_drafts.get(table_number)
         if not draft:
             return jsonify({"error": "اطلاعات پیش‌نویس یافت نشد."}), 404
         items = draft.get("items")
-        
-    orders = load_orders()
-    new_order = {
-        "id": len(orders) + 1,
-        "table": table_number,
-        "items": items,
-        "status": "pending",
-        "timestamp": time.time()
-    }
-    orders.append(new_order)
-    save_orders(orders)
-    
-    # آزاد کردن سشن و سوابق حافظه موقت
-    table_chat_histories.pop(table_number, None)
-    global_drafts.pop(table_number, None)
-    active_tasks.pop(table_number, None)
-    
-    return jsonify({"success": True, "message": "سفارش ثبت شد و سشن میز کاملاً آزاد گردید."})
 
+    # Insert order into database
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                "INSERT INTO orders (table_number, items, status, timestamp) VALUES (%s, %s, 'pending', %s) RETURNING id;",
+                (table_number, json.dumps(items), time.time())
+            )
+            new_id = cur.fetchone()[0]
+        conn.commit()
+
+        # Clear session
+        table_chat_histories.pop(table_number, None)
+        global_drafts.pop(table_number, None)
+        active_tasks.pop(table_number, None)
 
-# --- سرویس‌های API مدیریت کافه ---
+        return jsonify({"success": True, "message": "سفارش ثبت شد و سشن میز کاملاً آزاد گردید."})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({"error": f"خطا در ثبت سفارش: {str(e)}"}), 500
+    finally:
+        release_db_connection(conn)
 
+# --- Admin API ---
 @app.route('/api/admin/orders', methods=['GET'])
 def api_admin_orders():
     orders = load_orders()
-    active_orders = [o for o in orders if o.get("status", "pending") == "pending"]
+    active_orders = [o for o in orders if o.get("status") == "pending"]
     return jsonify(active_orders)
 
 @app.route('/api/admin/complete_order', methods=['POST'])
 def api_admin_complete_order():
     data = request.json or {}
     order_id = data.get("order_id")
-    
     if not order_id:
         return jsonify({"error": "شناسه سفارش نامعتبر"}), 400
-        
-    orders = load_orders()
-    updated = False
-    for o in orders:
-        if o.get("id") == order_id:
-            o["status"] = "completed"
-            updated = True
-            break
-            
-    if updated:
-        save_orders(orders)
-        return jsonify({"success": True, "message": "سفارش با موفقیت برداشته شد."})
-    return jsonify({"error": "سفارش پیدا نشد."}), 404
+
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute("UPDATE orders SET status = 'completed' WHERE id = %s;", (order_id,))
+            conn.commit()
+            if cur.rowcount == 0:
+                return jsonify({"error": "سفارش پیدا نشد."}), 404
+            return jsonify({"success": True, "message": "سفارش با موفقیت برداشته شد."})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({"error": str(e)}), 500
+    finally:
+        release_db_connection(conn)
 
 @app.route('/api/admin/chat', methods=['POST'])
 def api_admin_chat():
     api_key = os.environ.get("NILLA_CAFE") or os.environ.get("GEMINI_API_KEY")
     if not api_key:
-        return jsonify({"error": "کلید API یافت نشد."}), 500
-        
+        return jsonify({"error": "API key not found"}), 500
+
     data = request.json or {}
     messages = data.get("messages", [])
     if not messages:
-        return jsonify({"error": "تاریخچه پیام‌ها خالی است."}), 400
-    
+        return jsonify({"error": "Empty history"}), 400
+
     try:
         client = genai.Client(api_key=api_key)
         contents = []
@@ -379,64 +428,138 @@ def api_admin_chat():
                     parts=[types.Part.from_text(text=msg["content"])]
                 )
             )
-            
+
         config = types.GenerateContentConfig(
             system_instruction=ADMIN_SYSTEM_INSTRUCTION,
             tools=[get_full_menu, set_item_availability],
             thinking_config=types.ThinkingConfig(thinking_budget=0)
         )
-        
+
         last_user_message = messages[-1]["content"]
-        
+
         chat = client.chats.create(
             model="gemini-3.1-flash-lite",
             history=contents,
             config=config
         )
-        
+
         response = chat.send_message(last_user_message)
-        
+
         admin_response_text = ""
-        try:
-            if response.candidates and response.candidates[0].content and response.candidates[0].content.parts:
-                parts = response.candidates[0].content.parts
-                text_parts = [part.text for part in parts if hasattr(part, "text") and part.text]
-                if text_parts:
-                    admin_response_text = "".join(text_parts)
-        except Exception:
-            pass
-            
+        if response.candidates and response.candidates[0].content and response.candidates[0].content.parts:
+            parts = response.candidates[0].content.parts
+            text_parts = [part.text for part in parts if hasattr(part, "text") and part.text]
+            if text_parts:
+                admin_response_text = "".join(text_parts)
         if not admin_response_text:
             try:
                 admin_response_text = response.text or ""
             except (ValueError, AttributeError):
                 admin_response_text = "تغییرات مورد نظر شما با موفقیت روی منو اعمال شد."
-        
-        return jsonify({
-            "success": True,
-            "response": admin_response_text
-        })
-        
+
+        return jsonify({"success": True, "response": admin_response_text})
     except Exception as e:
-        return jsonify({"error": f"خطا در بخش سرور: {str(e)}"}), 500
+        return jsonify({"error": str(e)}), 500
 
+# --- Admin Menu CRUD ---
+@app.route('/api/admin/menu', methods=['GET'])
+def api_admin_get_menu():
+    """Get full menu for admin panel."""
+    menu = load_menu()
+    return jsonify(menu)
+
+@app.route('/api/admin/menu/item', methods=['POST'])
+def api_admin_add_menu_item():
+    """Add a new menu item manually."""
+    data = request.json or {}
+    name = data.get("name", "").strip()
+    if not name:
+        return jsonify({"error": "نام آیتم الزامی است."}), 400
+    description = data.get("description", "")
+    price = data.get("price", "")
+    available = data.get("available", True)
+
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute(
+                "INSERT INTO menu (name, description, price, available) VALUES (%s, %s, %s, %s) RETURNING id;",
+                (name, description, price, available)
+            )
+            new_id = cur.fetchone()[0]
+        conn.commit()
+        return jsonify({"success": True, "id": new_id, "message": "آیتم با موفقیت افزوده شد."})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({"error": str(e)}), 500
+    finally:
+        release_db_connection(conn)
+
+@app.route('/api/admin/menu/item/<int:item_id>', methods=['PUT'])
+def api_admin_update_menu_item(item_id):
+    """Update a menu item's fields."""
+    data = request.json or {}
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            # Build dynamic SET clause
+            allowed_fields = ["name", "description", "price", "available"]
+            updates = []
+            values = []
+            for field in allowed_fields:
+                if field in data:
+                    updates.append(f"{field} = %s")
+                    values.append(data[field])
+            if not updates:
+                return jsonify({"error": "هیچ فیلدی برای بروزرسانی ارسال نشده."}), 400
+            values.append(item_id)
+            query = f"UPDATE menu SET {', '.join(updates)} WHERE id = %s;"
+            cur.execute(query, values)
+            conn.commit()
+            if cur.rowcount == 0:
+                return jsonify({"error": "آیتم پیدا نشد."}), 404
+            return jsonify({"success": True, "message": "آیتم بروزرسانی شد."})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({"error": str(e)}), 500
+    finally:
+        release_db_connection(conn)
+
+@app.route('/api/admin/menu/item/<int:item_id>', methods=['DELETE'])
+def api_admin_delete_menu_item(item_id):
+    """Delete a menu item."""
+    conn = get_db_connection()
+    try:
+        with conn.cursor() as cur:
+            cur.execute("DELETE FROM menu WHERE id = %s;", (item_id,))
+            conn.commit()
+            if cur.rowcount == 0:
+                return jsonify({"error": "آیتم پیدا نشد."}), 404
+            return jsonify({"success": True, "message": "آیتم حذف شد."})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({"error": str(e)}), 500
+    finally:
+        release_db_connection(conn)
+
+# --- Legacy extraction & save (still used for bulk upload) ---
 @app.route('/api/admin/extract_menu', methods=['POST'])
 def api_extract_menu():
     api_key = os.environ.get("NILLA_CAFE") or os.environ.get("GEMINI_API_KEY")
     if not api_key:
-        return jsonify({"error": "کلید API یافت نشد."}), 500
-        
+        return jsonify({"error": "API key not found"}), 500
+
     if "file" not in request.files:
-        return jsonify({"error": "فایل ارسال نشده"}), 400
-        
+        return jsonify({"error": "File missing"}), 400
+
     file = request.files["file"]
     if file.filename == "":
-        return jsonify({"error": "نام فایل خالی است."}), 400
-        
+        return jsonify({"error": "Empty filename"}), 400
+
     try:
         file_bytes = file.read()
         mime_type = file.mimetype or "image/jpeg"
-        
+
         prompt = """
         Analyze this menu image or file. Extract all menu items, descriptions, and prices.
         Return ONLY a raw JSON array of objects without markdown formatting.
@@ -446,10 +569,10 @@ def api_extract_menu():
           {"name": "کیک ساده", "description": "شیرینی خانگی لذیذ", "price": "۴۰,۰۰۰"}
         ]
         """
-        
+
         client = genai.Client(api_key=api_key)
         file_part = types.Part.from_bytes(data=file_bytes, mime_type=mime_type)
-        
+
         response = client.models.generate_content(
             model="gemini-3.1-flash-lite",
             contents=[file_part, prompt],
@@ -457,27 +580,27 @@ def api_extract_menu():
                 response_mime_type="application/json"
             )
         )
-        
+
         extracted_menu = json.loads(response.text)
         for item in extracted_menu:
             item["available"] = True
-            
+
         return jsonify({"success": True, "extracted_menu": extracted_menu})
-        
     except Exception as e:
-        return jsonify({"error": f"خطا در استخراج ساختار: {str(e)}"}), 500
+        return jsonify({"error": f"خطا در استخراج: {str(e)}"}), 500
 
 @app.route('/api/admin/save_menu', methods=['POST'])
 def api_admin_save_menu():
+    """Replace entire menu (used after extraction/manual editing)."""
     data = request.json or {}
     menu_list = data.get("menu")
-    
     if not isinstance(menu_list, list):
         return jsonify({"error": "فرمت داده ارسال شده نادرست است."}), 400
-        
-    save_menu(menu_list)
-    return jsonify({"success": True, "message": "منوی فعال با موفقیت ثبت شد."})
 
+    if save_menu(menu_list):
+        return jsonify({"success": True, "message": "منوی فعال با موفقیت ثبت شد."})
+    else:
+        return jsonify({"error": "خطا در ذخیره‌سازی منو."}), 500
 
 if __name__ == "__main__":
     app.run(host="0.0.0.0", port=7860, debug=True)