import { Hono } from "hono" import { db } from "../db" import { requireRole } from "../rbac" // approval state machine: draft→submitted→approved/rejected→paid const app = new Hono() app.post("/requests", requireRole("employee"), async (c) => { const body = await c.req.json() return c.json(await db.requests.create(body)) }) app.post("/requests/:id/approve", requireRole("manager"), /* … */)