@acms-subir/core 0.0.1

package/src/pages/admin/c/[collection]/index.astro

@@ -0,0 +1,163 @@
+---
+import Admin from '../../../../layouts/Admin.astro';
+import Modal from '../../../../components/Modal.astro';
+import { getRepo } from '../../../../lib/repo';
+import { slugify, type Status } from '../../../../lib/schema';
+import { CONTENT } from '../../../../lib/content';
+
+// One list page for every collection; [collection] is the config key from
+// acms({ content.collections }). Unknown keys 404 — content in removed
+// collections stays in the DB and comes back when the key is re-added.
+const key = Astro.params.collection!;
+const col = CONTENT.collections[key];
+if (!col) return new Response(null, { status: 404, statusText: 'Not found' });
+
+const { singular, plural, base } = col;
+const lower = singular.toLowerCase();
+// lower goes inside an inline confirm('…') — a quote in the name must not break it
+const lowerJs = lower.replace(/['\\]/g, '\\$&');
+const repo = await getRepo(Astro.locals);
+
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+  const op = String(form.get('op'));
+  if (op === 'create') {
+    const title = String(form.get('title') || 'Untitled');
+    let slug = slugify(title);
+    let n = 1;
+    while (await repo.getPostBySlug(slug, key)) slug = `${slugify(title)}-${++n}`;
+    const post = await repo.createPost({ title, slug, collection: key });
+    return Astro.redirect(`/admin/c/${key}/${post.id}`);
+  }
+  if (op === 'delete') {
+    await repo.deletePost(String(form.get('id')));
+    return Astro.redirect(`/admin/c/${key}`);
+  }
+}
+
+const all = await repo.listPosts(key);
+const q = (Astro.url.searchParams.get('q') ?? '').toLowerCase();
+const statusFilter = Astro.url.searchParams.get('status') ?? 'all';
+const tagFilter = Astro.url.searchParams.get('tag') ?? '';
+
+const posts = all.filter((p) => {
+  if (statusFilter !== 'all' && p.status !== statusFilter) return false;
+  if (tagFilter && !p.tags.includes(tagFilter)) return false;
+  if (q && !p.title.toLowerCase().includes(q) && !p.slug.toLowerCase().includes(q)) return false;
+  return true;
+});
+
+const allTags = [...new Set(all.flatMap((p) => p.tags))].sort();
+const statusCounts = { all: all.length } as Record<string, number>;
+for (const p of all) statusCounts[p.status] = (statusCounts[p.status] ?? 0) + 1;
+const STATUSES: ('all' | Status)[] = ['all', 'draft', 'scheduled', 'published', 'archived'];
+
+const showNew = Astro.url.searchParams.has('new');
+const fmt = (ts: number) => new Date(ts).toLocaleDateString('en-US', { month: 'short', day: 'numeric', year: 'numeric' });
+const filterHref = (patch: Record<string, string>) => {
+  const p = new URLSearchParams(Astro.url.search);
+  for (const [k, v] of Object.entries(patch)) v ? p.set(k, v) : p.delete(k);
+  const s = p.toString();
+  return `/admin/c/${key}${s ? `?${s}` : ''}`;
+};
+---
+
+<Admin title={plural} section={`c:${key}`}>
+  <div class="page-head">
+    <h1>{plural}</h1>
+    <button class="btn primary" type="button" data-modal="new-post">New {lower}</button>
+  </div>
+
+  <Modal id="new-post" title={`New ${lower}`} open={showNew}>
+    <form method="post">
+      <input type="hidden" name="op" value="create" />
+      <label class="field">
+        <span>Title</span>
+        <input type="text" name="title" placeholder={`${singular} title`} required autofocus />
+      </label>
+      <div class="modal-foot">
+        <button class="btn ghost" type="button" data-close>Cancel</button>
+        <button class="btn primary" type="submit">Create {lower}</button>
+      </div>
+      <p class="hint" style="margin:12px 0 0">Creates a draft at {base}/&lt;slug-from-title&gt; and opens the editor — the slug is editable there.</p>
+    </form>
+  </Modal>
+
+  <div class="filter-bar">
+    <div class="filter-tabs">
+      {STATUSES.map((s) => (
+        <a class={`filter-tab ${statusFilter === s ? 'is-active' : ''}`} href={filterHref({ status: s === 'all' ? '' : s })}>
+          {s === 'all' ? 'All' : s[0].toUpperCase() + s.slice(1)}
+          <span class="filter-count">{statusCounts[s] ?? 0}</span>
+        </a>
+      ))}
+    </div>
+    <form method="get" style="display:flex;gap:8px;align-items:center">
+      {statusFilter !== 'all' && <input type="hidden" name="status" value={statusFilter} />}
+      {allTags.length > 0 && (
+        <select name="tag" onchange="this.form.submit()" style="width:auto">
+          <option value="">All tags</option>
+          {allTags.map((t) => <option value={t} selected={t === tagFilter}>{t}</option>)}
+        </select>
+      )}
+      <input type="search" name="q" placeholder={`Search ${plural.toLowerCase()}…`} value={q} style="min-width:180px" />
+    </form>
+  </div>
+
+  <div class="card">
+    <table class="list">
+      <thead><tr><th>Title</th><th>Status</th><th>Tags</th><th>Updated</th><th></th></tr></thead>
+      <tbody>
+        {posts.map((p) => (
+          <tr>
+            <td>
+              <a class="t-title" href={`/admin/c/${key}/${p.id}`}>{p.featured && <span title="Featured" style="color:#e8a13a">★ </span>}{p.title}</a>
+              <div class="t-sub">{base}/{p.slug}{p.excerpt ? ` — ${p.excerpt.slice(0, 60)}${p.excerpt.length > 60 ? '…' : ''}` : ''}</div>
+            </td>
+            <td>
+              <span class={`pill ${p.status}`}>{p.status}</span>
+              {p.status === 'scheduled' && p.scheduledAt && (
+                <div class="t-sub" style="margin-top:2px">
+                  {new Date(p.scheduledAt).toLocaleString('en-US', { month: 'short', day: 'numeric', hour: 'numeric', minute: '2-digit' })}
+                </div>
+              )}
+            </td>
+            <td class="t-sub">{p.tags.join(', ')}</td>
+            <td class="t-sub">{fmt(p.updatedAt)}</td>
+            <td style="text-align:right">
+              <form class="inline-form" method="post" onsubmit={`return confirm('Delete this ${lowerJs} permanently? Consider archiving instead (from the editor).')`}>
+                <input type="hidden" name="op" value="delete" />
+                <input type="hidden" name="id" value={p.id} />
+                <button class="btn sm ghost danger" type="submit">Delete</button>
+              </form>
+            </td>
+          </tr>
+        ))}
+        {posts.length === 0 && (
+          <tr>
+            <td colspan="5">
+              {all.length === 0 ? (
+                <div class="empty-state">
+                  <b>No {plural.toLowerCase()} yet</b>
+                  <p>Write your first {lower} — it stays a draft until you publish it.</p>
+                  <button class="btn primary" type="button" data-modal="new-post">New {lower}</button>
+                </div>
+              ) : (
+                <p class="hint" style="margin:0;padding:12px 0">No {plural.toLowerCase()} match the current filters.</p>
+              )}
+            </td>
+          </tr>
+        )}
+      </tbody>
+    </table>
+  </div>
+</Admin>
+
+<style>
+  .filter-bar { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 12px; flex-wrap: wrap; }
+  .filter-tabs { display: flex; gap: 2px; background: var(--panel); border: 1px solid var(--line); border-radius: 8px; padding: 3px; }
+  .filter-tab { color: var(--muted); font-size: 12.5px; font-weight: 600; padding: 4px 11px; border-radius: 6px; }
+  .filter-tab:hover { color: var(--text); }
+  .filter-tab.is-active { background: var(--accent-soft); color: var(--text); }
+  .filter-count { color: var(--faint); font-size: 11px; margin-left: 5px; }
+</style>

package/src/pages/admin/design.astro

@@ -0,0 +1,42 @@
+---
+import Admin from '../../layouts/Admin.astro';
+import { getRepo } from '../../lib/repo';
+import { env } from '../../lib/env';
+import DesignManager from '../../components/DesignManager';
+import { listThemes, FONT_PAIRINGS } from '../../lib/theme';
+import { postUrl } from '../../lib/content';
+// ImagePicker (logo upload) styles live in editor.css
+import '../../styles/editor.css';
+
+const repo = await getRepo(Astro.locals);
+const settings = await repo.getSettings();
+// most recent published post powers the preview's "Post" tab
+const [latestPost] = await repo.listPublishedPosts();
+const postPreviewPath = latestPost ? postUrl(latestPost.slug) : null;
+// serialize to plain data for the island — no component references
+const themes = listThemes().map((t) => ({
+  slug: t.slug,
+  name: t.name,
+  description: t.description,
+  tokens: t.tokens,
+  post: t.post,
+  hasHome: Boolean(t.HomeTemplate),
+}));
+const unsplashEnabled = Boolean(env('UNSPLASH_ACCESS_KEY'));
+---
+
+<Admin title="Design" section="design" wide>
+  <div class="page-head">
+    <h1>Design</h1>
+    <a class="btn sm" href="/" target="_blank" rel="noopener">View site ↗</a>
+  </div>
+
+  <DesignManager
+    client:only="react"
+    settings={{ ...settings, draftsApiKey: '' }}
+    themes={themes}
+    pairings={[...FONT_PAIRINGS]}
+    unsplashEnabled={unsplashEnabled}
+    postPreviewPath={postPreviewPath}
+  />
+</Admin>

package/src/pages/admin/index.astro

@@ -0,0 +1,145 @@
+---
+import Admin from '../../layouts/Admin.astro';
+import { getRepo } from '../../lib/repo';
+import { userConfig } from 'virtual:acms-config';
+import { CONTENT } from '../../lib/content';
+
+const coreVersion = userConfig.coreVersion;
+const repo = await getRepo(Astro.locals);
+const [stats, pages, posts, links] = await Promise.all([
+  repo.getStats(),
+  repo.listPages(),
+  repo.listPosts(),
+  repo.listLinks(),
+]);
+
+const recent = [
+  ...pages.map((p) => ({ kind: 'Page', title: p.title, href: `/admin/pages/${p.id}`, at: p.updatedAt, status: p.status })),
+  ...posts.map((p) => ({
+    kind: (CONTENT.collections[p.collection] ?? CONTENT.posts).singular,
+    title: p.title,
+    href: `/admin/c/${p.collection}/${p.id}`,
+    at: p.updatedAt,
+    status: p.status,
+  })),
+]
+  .sort((a, b) => b.at - a.at)
+  .slice(0, 8);
+
+// per-collection counts for the stat row; content whose collection key was
+// removed from config would otherwise be invisible, so it gets a notice
+const countByCollection = new Map<string, number>();
+for (const p of posts) countByCollection.set(p.collection, (countByCollection.get(p.collection) ?? 0) + 1);
+const orphaned = [...countByCollection.entries()].filter(([key]) => !CONTENT.collections[key]);
+
+const topLinks = [...links].sort((a, b) => b.clicks - a.clicks).slice(0, 5);
+
+function ago(ts: number) {
+  const s = Math.floor((Date.now() - ts) / 1000);
+  if (s < 60) return 'just now';
+  if (s < 3600) return `${Math.floor(s / 60)}m ago`;
+  if (s < 86400) return `${Math.floor(s / 3600)}h ago`;
+  return `${Math.floor(s / 86400)}d ago`;
+}
+---
+
+<Admin title="Dashboard" section="dashboard">
+  <div class="page-head">
+    <h1>Dashboard</h1>
+    <div style="display:flex;gap:8px">
+      {Object.entries(CONTENT.collections).map(([key, c]) => (
+        <a class="btn" href={`/admin/c/${key}?new=1`}>New {c.singular.toLowerCase()}</a>
+      ))}
+      <a class="btn primary" href="/admin/pages?new=1">New page</a>
+    </div>
+  </div>
+
+  <div id="acms-update" hidden data-current={coreVersion} class="card card-pad" style="display:none;align-items:center;gap:10px;margin-bottom:14px;border-left:3px solid var(--accent)">
+    <div>
+      <b>ACMS <span id="acms-update-latest"></span> is available</b>
+      <span class="hint" style="margin-left:6px">you're on {coreVersion} — run <code>npx acms update</code>, then <code>npm run deploy</code>.</span>
+    </div>
+    <a class="btn sm ghost" style="margin-left:auto" href="https://github.com/zurielbm/acms-subir/releases" target="_blank" rel="noopener">What's new</a>
+  </div>
+  <script>
+    // Ghost-style update nudge: npm registry check, cached a day, silent on
+    // any failure (offline, unpublished package, CORS).
+    (async () => {
+      const el = document.getElementById('acms-update');
+      if (!el) return;
+      const current = el.dataset.current ?? '';
+      const KEY = 'acms-update-check';
+      let latest = '';
+      try {
+        const cached = JSON.parse(localStorage.getItem(KEY) ?? 'null');
+        if (cached && Date.now() - cached.at < 86_400_000) {
+          latest = cached.latest;
+        } else {
+          const res = await fetch('https://registry.npmjs.org/@acms-subir%2Fcore/latest');
+          if (!res.ok) return;
+          latest = (await res.json()).version ?? '';
+          localStorage.setItem(KEY, JSON.stringify({ at: Date.now(), latest }));
+        }
+      } catch { return; }
+      const lt = (a: string, b: string) => {
+        const pa = a.split('.').map(Number), pb = b.split('.').map(Number);
+        for (let i = 0; i < 3; i++) { if ((pa[i] ?? 0) < (pb[i] ?? 0)) return true; if ((pa[i] ?? 0) > (pb[i] ?? 0)) return false; }
+        return false;
+      };
+      if (latest && lt(current, latest)) {
+        const slot = document.getElementById('acms-update-latest');
+        if (slot) slot.textContent = latest;
+        el.hidden = false;
+        el.style.display = 'flex';
+      }
+    })();
+  </script>
+
+  {orphaned.length > 0 && (
+    <div class="card card-pad" style="margin-bottom:14px;border-left:3px solid var(--warn, #c77700)">
+      <b>Content in removed collections</b>
+      <p class="hint" style="margin:4px 0 0">
+        {orphaned.map(([key, n]) => `${n} ${n === 1 ? 'entry' : 'entries'} belong${n === 1 ? 's' : ''} to "${key}"`).join(' · ')}
+        — nothing was deleted; re-add the key under content.collections in astro.config to restore them.
+      </p>
+    </div>
+  )}
+
+  <div class="stats">
+    <div class="stat"><div class="label">Published pages</div><div class="value">{stats.publishedPages}</div></div>
+    {Object.entries(CONTENT.collections).map(([key, c]) => (
+      <div class="stat"><div class="label">{c.plural}</div><div class="value">{countByCollection.get(key) ?? 0}</div></div>
+    ))}
+    <div class="stat"><div class="label">Drafts</div><div class="value">{stats.drafts}</div></div>
+    <div class="stat"><div class="label">Link clicks</div><div class="value">{stats.linkClicks}</div></div>
+  </div>
+
+  <div class="dash-grid">
+    <div class="card card-pad">
+      <p class="card-title">Recently edited</p>
+      <ul class="recent">
+        {recent.map((r) => (
+          <li>
+            <span class={`pill ${r.status}`}>{r.status}</span>
+            <a href={r.href}>{r.title}</a>
+            <span class="t-sub">{r.kind}</span>
+            <span class="when">{ago(r.at)}</span>
+          </li>
+        ))}
+        {recent.length === 0 && <li class="hint">Nothing yet — create a page or {CONTENT.posts.singular.toLowerCase()}.</li>}
+      </ul>
+    </div>
+    <div class="card card-pad">
+      <p class="card-title">Top links</p>
+      <ul class="recent">
+        {topLinks.map((l) => (
+          <li>
+            <span>{l.label}</span>
+            <span class="when">{l.clicks} clicks</span>
+          </li>
+        ))}
+        {topLinks.length === 0 && <li class="hint">No links yet.</li>}
+      </ul>
+    </div>
+  </div>
+</Admin>

package/src/pages/admin/links.astro

@@ -0,0 +1,21 @@
+---
+import Admin from '../../layouts/Admin.astro';
+import { getRepo } from '../../lib/repo';
+import { env } from '../../lib/env';
+import LinksManager from '../../components/LinksManager';
+// ImagePicker (profile photo) styles live in editor.css
+import '../../styles/editor.css';
+
+const repo = await getRepo(Astro.locals);
+const [links, settings] = await Promise.all([repo.listLinks(), repo.getSettings()]);
+const unsplashEnabled = Boolean(env('UNSPLASH_ACCESS_KEY'));
+---
+
+<Admin title="Links" section="links">
+  <div class="page-head">
+    <h1>Links</h1>
+    <a class="btn sm" href="/links" target="_blank" rel="noopener">View links page ↗</a>
+  </div>
+
+  <LinksManager client:only="react" links={links} settings={{ ...settings, draftsApiKey: '' }} unsplashEnabled={unsplashEnabled} />
+</Admin>

package/src/pages/admin/login.astro

@@ -0,0 +1,83 @@
+---
+import { checkPassword, createSessionToken, verifyPassword, verifySessionToken, SESSION_COOKIE } from '../../lib/auth';
+import { getRepo } from '../../lib/repo';
+import { BRAND } from '../../lib/brand';
+import '../../styles/admin.css';
+
+if (verifySessionToken(Astro.cookies.get(SESSION_COOKIE)?.value)) {
+  return Astro.redirect('/admin');
+}
+
+let error = '';
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+  const email = String(form.get('email') ?? '').trim();
+  const password = String(form.get('password') ?? '');
+
+  // Email empty → the env master password (bootstrap owner). Email present →
+  // a user account created in /admin/users.
+  let sessionUserId: string | null = null;
+  if (!email && checkPassword(password)) {
+    sessionUserId = null; // default token = env owner
+  } else if (email) {
+    const repo = await getRepo(Astro.locals);
+    const auth = await repo.getUserAuth(email);
+    if (auth && (await verifyPassword(password, auth.passHash))) sessionUserId = auth.user.id;
+    else {
+      error = 'Wrong email or password.';
+    }
+  } else {
+    error = 'Wrong password.';
+  }
+
+  if (!error) {
+    Astro.cookies.set(SESSION_COOKIE, sessionUserId ? createSessionToken(sessionUserId) : createSessionToken(), {
+      httpOnly: true,
+      sameSite: 'lax',
+      path: '/',
+      maxAge: 7 * 24 * 60 * 60,
+      secure: Astro.url.protocol === 'https:',
+    });
+    return Astro.redirect('/admin');
+  }
+}
+---
+
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex" />
+    <title>Sign in · {BRAND.name} admin</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  </head>
+  <body>
+    <div class="login-wrap">
+      <div class="card card-pad login-card">
+        <div class="brand">
+          <svg width="26" height="26" viewBox="0 0 24 24" role="img" aria-label={BRAND.name}>
+            <rect x="1" y="3" width="22" height="4.4" rx="1.9" fill="#2a2d36" />
+            <rect x="1" y="10" width="12.5" height="4.4" rx="1.9" fill="#ee5d20" />
+            <rect x="1" y="17" width="17.5" height="4.4" rx="1.9" fill="#2a2d36" opacity="0.42" />
+          </svg>
+          <div class="brand-name">{BRAND.name}</div>
+        </div>
+        {error && <div class="flash error">{error}</div>}
+        <form method="post">
+          <label class="field">
+            <span>Email</span>
+            <input type="email" name="email" autocomplete="username" placeholder="Leave empty for owner password" />
+          </label>
+          <label class="field">
+            <span>Password</span>
+            <input type="password" name="password" autofocus autocomplete="current-password" />
+          </label>
+          <button class="btn primary" style="width:100%;justify-content:center" type="submit">Sign in</button>
+        </form>
+        <p class="hint" style="margin-top:14px">No account? The owner password from <code>ADMIN_PASSWORD</code> in <code>.env</code> always works with email left empty.</p>
+      </div>
+    </div>
+  </body>
+</html>

package/src/pages/admin/logout.ts

@@ -0,0 +1,7 @@
+import type { APIRoute } from 'astro';
+import { SESSION_COOKIE } from '../../lib/auth';
+
+export const GET: APIRoute = ({ cookies, redirect }) => {
+  cookies.delete(SESSION_COOKIE, { path: '/' });
+  return redirect('/admin/login');
+};

package/src/pages/admin/media.astro

@@ -0,0 +1,13 @@
+---
+import Admin from '../../layouts/Admin.astro';
+import MediaLibrary from '../../components/media/MediaLibrary';
+import { getRepo } from '../../lib/repo';
+import '../../styles/editor.css';
+
+const repo = await getRepo(Astro.locals);
+const media = await repo.listMedia();
+---
+
+<Admin title="Media" section="media">
+  <MediaLibrary media={media} client:load />
+</Admin>

package/src/pages/admin/navigation.astro

@@ -0,0 +1,17 @@
+---
+import Admin from '../../layouts/Admin.astro';
+import { getRepo } from '../../lib/repo';
+import NavManager from '../../components/NavManager';
+
+const repo = await getRepo(Astro.locals);
+const items = await repo.listNavItems();
+---
+
+<Admin title="Navigation" section="navigation">
+  <div class="page-head">
+    <h1>Navigation</h1>
+    <a class="btn sm" href="/" target="_blank" rel="noopener">View site ↗</a>
+  </div>
+
+  <NavManager client:only="react" items={items} />
+</Admin>

package/src/pages/admin/pages/[id].astro

@@ -0,0 +1,49 @@
+---
+import { getRepo } from '../../../lib/repo';
+import { blocksToHtml } from '../../../lib/blocksToHtml';
+import { createPreviewToken } from '../../../lib/preview';
+import { resolveDesign } from '../../../lib/theme';
+import { env } from '../../../lib/env';
+import { BRAND } from '../../../lib/brand';
+import PostEditor from '../../../components/editor/PostEditor';
+import '../../../styles/admin.css';
+import '../../../styles/editor.css';
+
+const repo = await getRepo(Astro.locals);
+const id = Astro.params.id!;
+const page = await repo.getPage(id);
+if (!page) return new Response(null, { status: 404 });
+
+// Canonical content is the TipTap doc (as HTML). Legacy widget-block pages
+// are converted on first open and become rich content on next save.
+const initialHTML = page.bodyHtml || blocksToHtml(page.blocks);
+const previewPath = `/preview/page/${page.id}`;
+const sharePath = `${previewPath}?token=${createPreviewToken('page', page.id)}`;
+const unsplashEnabled = Boolean(env('UNSPLASH_ACCESS_KEY'));
+const settings = await repo.getSettings();
+const templates = Object.keys(resolveDesign(settings).theme.pageTemplates);
+---
+
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex" />
+    <title>{page.title || 'Untitled'} · {BRAND.name} editor</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  </head>
+  <body>
+    <PostEditor
+      client:only="react"
+      kind="page"
+      page={page}
+      initialHTML={initialHTML}
+      unsplashEnabled={unsplashEnabled}
+      previewPath={previewPath}
+      sharePath={sharePath}
+      templates={templates}
+    />
+  </body>
+</html>

package/src/pages/admin/pages/index.astro

@@ -0,0 +1,100 @@
+---
+import Admin from '../../../layouts/Admin.astro';
+import Modal from '../../../components/Modal.astro';
+import { getRepo } from '../../../lib/repo';
+import { slugify } from '../../../lib/schema';
+import { I18N, localeHomeUrl } from '../../../lib/i18n';
+
+const repo = await getRepo(Astro.locals);
+
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+  const op = String(form.get('op'));
+  if (op === 'create') {
+    const title = String(form.get('title') || 'Untitled');
+    let slug = slugify(String(form.get('slug') || title));
+    // avoid slug collisions
+    let n = 1;
+    while (await repo.getPageBySlug(slug)) slug = `${slugify(title)}-${++n}`;
+    const page = await repo.createPage({ title, slug });
+    return Astro.redirect(`/admin/pages/${page.id}`);
+  }
+  if (op === 'delete') {
+    await repo.deletePage(String(form.get('id')));
+    return Astro.redirect('/admin/pages');
+  }
+}
+
+const pages = await repo.listPages();
+const showNew = Astro.url.searchParams.has('new');
+const fmt = (ts: number) => new Date(ts).toLocaleDateString('en-US', { month: 'short', day: 'numeric', year: 'numeric' });
+---
+
+<Admin title="Pages" section="pages">
+  <div class="page-head">
+    <h1>Pages</h1>
+    <button class="btn primary" type="button" data-modal="new-page">New page</button>
+  </div>
+
+  <Modal id="new-page" title="New page" open={showNew}>
+    <form method="post">
+      <input type="hidden" name="op" value="create" />
+      <label class="field">
+        <span>Title</span>
+        <input type="text" name="title" placeholder="Page title" required autofocus data-slug-for="new-page-slug" />
+      </label>
+      <label class="field">
+        <span>Slug</span>
+        <div class="slug-wrap">
+          <span class="slug-prefix">/</span>
+          <input type="text" id="new-page-slug" name="slug" placeholder="auto from title" data-slug-dest />
+        </div>
+      </label>
+      <div class="modal-foot">
+        <button class="btn ghost" type="button" data-close>Cancel</button>
+        <button class="btn primary" type="submit">Create page</button>
+      </div>
+      <p class="hint" style="margin:12px 0 0">Creates a draft and opens the editor.</p>
+    </form>
+  </Modal>
+
+  <div class="card">
+    <table class="list">
+      <thead><tr><th>Title</th><th>Status</th><th>Updated</th><th></th></tr></thead>
+      <tbody>
+        {pages.map((p) => (
+          <tr>
+            <td>
+              <a class="t-title" href={`/admin/pages/${p.id}`}>{p.title}</a>
+              <div class="t-sub">{p.isHome ? localeHomeUrl(p.locale) : `/${p.slug}`}</div>
+            </td>
+            <td>
+              <span class={`pill ${p.status}`}>{p.status}</span>
+              {p.isHome && <span class="pill home">home</span>}
+              {I18N.enabled && <span class="pill lang">{(p.locale || I18N.defaultLocale).toUpperCase()}</span>}
+            </td>
+            <td class="t-sub">{fmt(p.updatedAt)}</td>
+            <td style="text-align:right">
+              <form class="inline-form" method="post" onsubmit="return confirm('Delete this page?')">
+                <input type="hidden" name="op" value="delete" />
+                <input type="hidden" name="id" value={p.id} />
+                <button class="btn sm ghost danger" type="submit">Delete</button>
+              </form>
+            </td>
+          </tr>
+        ))}
+        {pages.length === 0 && (
+          <tr>
+            <td colspan="4">
+              <div class="empty-state">
+                <b>No pages yet</b>
+                <p>Your site's static pages — about, contact, landing pages — live here.</p>
+                <button class="btn primary" type="button" data-modal="new-page">New page</button>
+              </div>
+            </td>
+          </tr>
+        )}
+      </tbody>
+    </table>
+  </div>
+</Admin>

package/src/pages/admin/posts/[id].astro

@@ -0,0 +1,6 @@
+---
+// Legacy editor path for the built-in collection — 308 to the new home.
+// /admin/c/[collection]/[id] re-canonicalizes if the post moved collections.
+export const prerender = false;
+return Astro.redirect(`/admin/c/posts/${Astro.params.id}${Astro.url.search}`, 308);
+---