@bobbykim/manguito-cms-api 0.3.3 → 0.4.0

package/dist/index.mjs

@@ -1,11 +1,32 @@
 import {
   buildRelationsMap,
+  createFieldKeyMap,
   deleteParagraphField,
+  isColumnBacked,
   persistJunctionField,
   persistParagraphField,
   resolveRelationBareIds,
   resolveRelationField
-} from "./chunk-TK4DNRFF.mjs";
+} from "./chunk-4F2CRXPG.mjs";
+
+// src/paths.ts
+function normalizePrefix(prefix) {
+  if (prefix === void 0) return "/api";
+  const withSlash = prefix.startsWith("/") ? prefix : `/${prefix}`;
+  const trimmed = withSlash.replace(/\/+$/, "");
+  return trimmed === "" ? "/api" : trimmed;
+}
+function createPublicPaths(prefix) {
+  return {
+    collection: (basePath) => `${prefix}/${basePath}`,
+    item: (basePath) => `${prefix}/${basePath}/:slug`,
+    taxonomyCollection: (typeName) => `${prefix}/taxonomy/${typeName}`,
+    taxonomyItem: (typeName) => `${prefix}/taxonomy/${typeName}/:id`,
+    mediaCollection: () => `${prefix}/media`,
+    mediaItem: () => `${prefix}/media/:id`,
+    openapi: () => `${prefix}/openapi.json`
+  };
+}
 
 // src/app.ts
 import { Hono } from "hono";
@@ -605,28 +626,31 @@ function parseInclude(includeParam) {
   if (!includeParam) return [];
   return includeParam.split(",").map((s) => s.trim()).filter(Boolean);
 }
-function parseFilters(url, validFields) {
+function parseFilters(url, validFields, columnFor) {
   const { searchParams } = new URL(url);
   const filters = {};
+  const toKey = (label) => columnFor?.(label) ?? label;
   for (const [key, value] of searchParams.entries()) {
     const simpleMatch = /^filter\[([^\]]+)\]$/.exec(key);
     const opMatch = /^filter\[([^\]]+)\]\[([^\]]+)\]$/.exec(key);
     if (simpleMatch) {
       const field = simpleMatch[1];
       if (!validFields.has(field)) return { ok: false, invalidField: field };
-      const existing = filters[field];
+      const storageKey = toKey(field);
+      const existing = filters[storageKey];
       if (existing !== void 0) {
-        filters[field] = Array.isArray(existing) ? [...existing, value] : [existing, value];
+        filters[storageKey] = Array.isArray(existing) ? [...existing, value] : [existing, value];
       } else {
-        filters[field] = value;
+        filters[storageKey] = value;
       }
     } else if (opMatch) {
       const field = opMatch[1];
       const operator = opMatch[2];
       if (!validFields.has(field)) return { ok: false, invalidField: field };
       if (!["gt", "gte", "lt", "lte"].includes(operator)) continue;
-      const existing = filters[field] ?? {};
-      filters[field] = { ...existing, [operator]: value };
+      const storageKey = toKey(field);
+      const existing = filters[storageKey] ?? {};
+      filters[storageKey] = { ...existing, [operator]: value };
     }
   }
   return { ok: true, filters };
@@ -636,7 +660,7 @@ function parseFilters(url, validFields) {
 function isPublished(item) {
   return item["published"] === true;
 }
-function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolver) {
+function registerPublicContentRoutes(app, registry, repos, fieldKeyMaps, paths, listRateLimit, resolver) {
   function registerListRoute(path, handler) {
     if (listRateLimit) {
       app.get(path, listRateLimit, handler);
@@ -644,7 +668,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
       app.get(path, handler);
     }
   }
-  registerListRoute("/api/content", (c) => {
+  registerListRoute(paths.collection("content"), (c) => {
     const data = Object.values(registry.content_types).map((ct) => ({
       name: ct.name,
       label: ct.label,
@@ -652,7 +676,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
     }));
     return c.json({ ok: true, data });
   });
-  registerListRoute("/api/taxonomy", (c) => {
+  registerListRoute(paths.collection("taxonomy"), (c) => {
     const data = Object.values(registry.taxonomy_types).map((tt) => ({
       name: tt.name,
       label: tt.label
@@ -671,7 +695,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
       ...contentType.system_fields.map((f) => f.name)
     ]);
     if (contentType.only_one) {
-      app.get(`/api/${basePath}`, async (c) => {
+      app.get(paths.collection(basePath), async (c) => {
         const result = await repo.findMany({ published_only: true, page: 1, per_page: 1 });
         if (result.data.length === 0) {
           return c.json(
@@ -679,12 +703,13 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             404
           );
         }
-        let data = result.data[0];
+        let data = fieldKeyMaps[typeName].toLabels(result.data[0]);
         if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
         return c.json({ ok: true, data });
       });
     } else {
-      registerListRoute(`/api/${basePath}`, async (c) => {
+      registerListRoute(paths.collection(basePath), async (c) => {
+        const fieldKeys = fieldKeyMaps[typeName];
         const pagination = parsePagination(c.req.query("page"), c.req.query("per_page"));
         if (!pagination.ok) {
           return c.json(
@@ -724,7 +749,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             400
           );
         }
-        const filtersResult = parseFilters(c.req.url, filterableFieldNames);
+        const filtersResult = parseFilters(c.req.url, filterableFieldNames, fieldKeys.columnFor);
         if (!filtersResult.ok) {
           return c.json(
             {
@@ -761,13 +786,13 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
           filters: filtersResult.filters,
           include
         });
-        if (resolver?.hasSchema(typeName)) {
-          const resolved = await resolver.resolveList(typeName, result.data);
-          return c.json({ ...result, data: resolved });
-        }
-        return c.json(result);
+        const labeled = result.data.map(
+          (row) => fieldKeys.toLabels(row)
+        );
+        const data = resolver?.hasSchema(typeName) ? await resolver.resolveList(typeName, labeled) : labeled;
+        return c.json({ ...result, data });
       });
-      app.get(`/api/${basePath}/:slug`, async (c) => {
+      app.get(paths.item(basePath), async (c) => {
         const slug = c.req.param("slug");
         const include = parseInclude(c.req.query("include"));
         for (const field of include) {
@@ -794,7 +819,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             404
           );
         }
-        let data = item;
+        let data = fieldKeyMaps[typeName].toLabels(item);
         if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
         return c.json({ ok: true, data });
       });
@@ -803,7 +828,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
   for (const [typeName] of Object.entries(registry.taxonomy_types)) {
     const repo = repos[typeName];
     if (!repo) continue;
-    registerListRoute(`/api/taxonomy/${typeName}`, async (c) => {
+    registerListRoute(paths.taxonomyCollection(typeName), async (c) => {
       const pagination = parsePagination(c.req.query("page"), c.req.query("per_page"));
       if (!pagination.ok) {
         return c.json(
@@ -822,13 +847,14 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
         page: pagination.page,
         per_page: pagination.per_page
       });
-      if (resolver?.hasSchema(typeName)) {
-        const resolved = await resolver.resolveList(typeName, result.data);
-        return c.json({ ...result, data: resolved });
-      }
-      return c.json(result);
+      const fieldKeys = fieldKeyMaps[typeName];
+      const labeled = result.data.map(
+        (row) => fieldKeys.toLabels(row)
+      );
+      const data = resolver?.hasSchema(typeName) ? await resolver.resolveList(typeName, labeled) : labeled;
+      return c.json({ ...result, data });
     });
-    app.get(`/api/taxonomy/${typeName}/:id`, async (c) => {
+    app.get(paths.taxonomyItem(typeName), async (c) => {
       const id = c.req.param("id");
       const item = await repo.findOne(id);
       if (!item || !isPublished(item)) {
@@ -840,7 +866,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
           404
         );
       }
-      let data = item;
+      let data = fieldKeyMaps[typeName].toLabels(item);
       if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
       return c.json({ ok: true, data });
     });
@@ -856,7 +882,7 @@ function parsePagination2(pageStr, perPageStr) {
   if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false };
   return { ok: true, page, per_page };
 }
-function registerPublicMediaRoutes(app, mediaRepo, listRateLimit) {
+function registerPublicMediaRoutes(app, mediaRepo, paths, listRateLimit) {
   const mediaListHandler = async (c) => {
     const pagination = parsePagination2(c.req.query("page"), c.req.query("per_page"));
     if (!pagination.ok) {
@@ -895,11 +921,11 @@ function registerPublicMediaRoutes(app, mediaRepo, listRateLimit) {
     return c.json(result);
   };
   if (listRateLimit) {
-    app.get("/api/media", listRateLimit, mediaListHandler);
+    app.get(paths.mediaCollection(), listRateLimit, mediaListHandler);
   } else {
-    app.get("/api/media", mediaListHandler);
+    app.get(paths.mediaCollection(), mediaListHandler);
   }
-  app.get("/api/media/:id", async (c) => {
+  app.get(paths.mediaItem(), async (c) => {
     const id = c.req.param("id");
     const item = await mediaRepo.findOne(id);
     if (!item) {
@@ -923,9 +949,11 @@ function topLevelMediaDelta(mediaFields, before, after) {
   const added = [];
   const removed = [];
   for (const f of mediaFields) {
-    if (after !== null && !(f.name in after)) continue;
-    const oldId = before ? extractMediaId(before[f.name]) : null;
-    const newId = after ? extractMediaId(after[f.name]) : null;
+    const key = f.db_column?.column_name;
+    if (key === void 0 || key === "") continue;
+    if (after !== null && !(key in after)) continue;
+    const oldId = before ? extractMediaId(before[key]) : null;
+    const newId = after ? extractMediaId(after[key]) : null;
     if (newId === oldId) continue;
     if (oldId) removed.push(oldId);
     if (newId) added.push(newId);
@@ -985,7 +1013,7 @@ function isEmpty(value) {
 function checkRequiredFields(fields, data) {
   return fields.filter((f) => f.required && isEmpty(data[f.name])).map((f) => ({ field: f.name, message: `${f.label} is required` }));
 }
-function parseListQuery(url, schemaFieldNames, relationFieldNames) {
+function parseListQuery(url, schemaFieldNames, relationFieldNames, columnFor) {
   const searchParams = new URL(url).searchParams;
   const pagination = parsePagination(
     searchParams.get("page") ?? void 0,
@@ -1020,7 +1048,7 @@ function parseListQuery(url, schemaFieldNames, relationFieldNames) {
       status: 400
     };
   }
-  const filtersResult = parseFilters(url, schemaFieldNames);
+  const filtersResult = parseFilters(url, schemaFieldNames, columnFor);
   if (!filtersResult.ok) {
     return {
       ok: false,
@@ -1052,7 +1080,7 @@ function parseListQuery(url, schemaFieldNames, relationFieldNames) {
     search
   };
 }
-function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePermission, db) {
+function registerAdminContentRoutes(app, registry, repos, fieldKeyMaps, mediaRepo, requirePermission, db) {
   for (const [typeName, contentType] of Object.entries(registry.content_types)) {
     const basePath = `content/${typeName}`;
     const repo = repos[typeName];
@@ -1064,6 +1092,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
     const relationFieldNames = new Set(
       contentType.fields.filter((f) => RELATION_FIELD_TYPES.has(f.field_type)).map((f) => f.name)
     );
+    const fieldKeys = fieldKeyMaps[typeName];
     const requiredFields = contentType.fields.filter((f) => f.required);
     const mediaFields = contentType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
@@ -1077,7 +1106,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       `/admin/api/${basePath}`,
       requirePermission("content:read"),
       async (c) => {
-        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames);
+        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor);
         if (!parsed.ok) {
           return c.json({ ok: false, error: parsed.response }, parsed.status);
         }
@@ -1097,7 +1126,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           findOpts.search = { term: parsed.search, columns: searchableColumns };
         }
         const result = await repo.findMany(findOpts);
-        return c.json(result);
+        const data = result.data.map((row) => fieldKeys.toLabels(row));
+        return c.json({ ...result, data });
       }
     );
     app.get(
@@ -1132,7 +1162,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
             }
           }
         }
-        return c.json({ ok: true, data: item });
+        const data = fieldKeys.toLabels(item);
+        return c.json({ ok: true, data });
       }
     );
     app.post(
@@ -1199,6 +1230,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       }
     );
     const writeNewItem = async (c, body) => {
+      const storageBody = fieldKeys.toStorage(body);
       const fieldErrors = checkRequiredFields(requiredFields, body);
       if (fieldErrors.length > 0) {
         return c.json(
@@ -1222,9 +1254,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       const junctionFields = contentType.fields.filter(
         (f) => f.db_column !== null && f.db_column.junction !== void 0
       );
-      const columnFields = contentType.fields.filter(
-        (f) => f.db_column !== null && f.db_column.junction === void 0
-      );
+      const columnBackedFields = contentType.fields.filter(isColumnBacked);
       const columnData = {
         published: body["published"] ?? false
       };
@@ -1233,9 +1263,10 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       } else {
         columnData["slug"] = body["slug"];
       }
-      for (const f of columnFields) {
-        const val = body[f.name];
-        columnData[f.db_column.column_name] = val !== void 0 ? val : null;
+      for (const f of columnBackedFields) {
+        const key = f.db_column.column_name;
+        if (!(key in storageBody)) continue;
+        columnData[key] = storageBody[key];
       }
       if (db) {
         const basePathId = await lookupBasePathId(db, contentType.default_base_path);
@@ -1255,7 +1286,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       }
       const item = await repo.create(columnData);
       const itemId = item["id"];
-      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, storageBody)];
       if (db) {
         for (const f of paragraphFields) {
           const comp = f.ui_component;
@@ -1272,7 +1303,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
         }
       }
       await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-      return c.json({ ok: true, data: item }, 201);
+      const data = fieldKeys.toLabels(item);
+      return c.json({ ok: true, data }, 201);
     };
     app.patch(
       `/admin/api/${basePath}/:id`,
@@ -1332,11 +1364,12 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       }
     );
     const writeExistingItem = async (c, id, existing, body) => {
+      const storageBody = fieldKeys.toStorage(body);
       if (body["published"] === true) {
         const publishDeny = await requirePermission("content:edit")(c, async () => {
         });
         if (publishDeny) return publishDeny;
-        const merged = { ...existing, ...body };
+        const merged = { ...fieldKeys.toLabels(existing), ...body };
         const fieldErrors = checkRequiredFields(requiredFields, merged);
         if (fieldErrors.length > 0) {
           return c.json(
@@ -1356,17 +1389,14 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       const patchJunctionFields = contentType.fields.filter(
         (f) => f.db_column !== null && f.db_column.junction !== void 0
       );
-      const patchColumnFields = contentType.fields.filter(
-        (f) => f.db_column !== null && f.db_column.junction === void 0
-      );
+      const patchColumnBackedFields = contentType.fields.filter(isColumnBacked);
       const patchData = {};
       if (!contentType.only_one && "slug" in body) patchData["slug"] = body["slug"];
       if ("published" in body) patchData["published"] = body["published"];
-      for (const f of patchColumnFields) {
-        if (f.name in body) {
-          const val = body[f.name];
-          patchData[f.db_column.column_name] = val !== void 0 ? val : null;
-        }
+      for (const f of patchColumnBackedFields) {
+        const key = f.db_column.column_name;
+        if (!(key in storageBody)) continue;
+        patchData[key] = storageBody[key];
       }
       const updated = await repo.update(id, patchData);
       if (!updated) {
@@ -1376,7 +1406,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
         );
       }
       const mediaDeltas = [
-        topLevelMediaDelta(mediaFields, existing, body)
+        topLevelMediaDelta(mediaFields, existing, storageBody)
       ];
       if (db) {
         for (const f of patchParagraphFields) {
@@ -1394,7 +1424,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
         }
       }
       await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-      return c.json({ ok: true, data: updated });
+      const data = fieldKeys.toLabels(updated);
+      return c.json({ ok: true, data });
     };
     if (contentType.only_one) {
       app.put(
@@ -1454,6 +1485,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
     const relationFieldNames = new Set(
       taxonomyType.fields.filter((f) => RELATION_FIELD_TYPES.has(f.field_type)).map((f) => f.name)
     );
+    const fieldKeys = fieldKeyMaps[typeName];
     const requiredFields = taxonomyType.fields.filter((f) => f.required);
     const mediaFields = taxonomyType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
@@ -1467,7 +1499,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       `/admin/api/taxonomy/${typeName}`,
       requirePermission("content:read"),
       async (c) => {
-        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames);
+        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor);
         if (!parsed.ok) {
           return c.json({ ok: false, error: parsed.response }, parsed.status);
         }
@@ -1487,7 +1519,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           findOpts.search = { term: parsed.search, columns: searchableColumns };
         }
         const result = await repo.findMany(findOpts);
-        return c.json(result);
+        const data = result.data.map((row) => fieldKeys.toLabels(row));
+        return c.json({ ...result, data });
       }
     );
     app.get(
@@ -1502,7 +1535,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
             404
           );
         }
-        return c.json({ ok: true, data: item });
+        const data = fieldKeys.toLabels(item);
+        return c.json({ ok: true, data });
       }
     );
     app.post(
@@ -1510,6 +1544,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       requirePermission("content:create"),
       async (c) => {
         const body = await c.req.json();
+        const storageBody = fieldKeys.toStorage(body);
         const fieldErrors = checkRequiredFields(requiredFields, body);
         if (fieldErrors.length > 0) {
           return c.json(
@@ -1529,20 +1564,19 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           });
           if (publishDeny) return publishDeny;
         }
-        const taxColumnFields = taxonomyType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
         const taxParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null);
+        const taxColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxColumnData = {
           published: body["published"] ?? false
         };
-        for (const f of taxColumnFields) {
-          const val = body[f.name];
-          taxColumnData[f.db_column.column_name] = val !== void 0 ? val : null;
+        for (const f of taxColumnBackedFields) {
+          const key = f.db_column.column_name;
+          if (!(key in storageBody)) continue;
+          taxColumnData[key] = storageBody[key];
         }
         const item = await repo.create(taxColumnData);
         const taxItemId = item["id"];
-        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, storageBody)];
         if (db) {
           for (const f of taxParagraphFields) {
             const comp = f.ui_component;
@@ -1554,7 +1588,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: item }, 201);
+        const data = fieldKeys.toLabels(item);
+        return c.json({ ok: true, data }, 201);
       }
     );
     app.patch(
@@ -1563,6 +1598,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       async (c) => {
         const id = c.req.param("id");
         const body = await c.req.json();
+        const storageBody = fieldKeys.toStorage(body);
         const existing = await repo.findOne(id);
         if (!existing) {
           return c.json(
@@ -1574,7 +1610,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           const publishDeny = await requirePermission("content:edit")(c, async () => {
           });
           if (publishDeny) return publishDeny;
-          const merged = { ...existing, ...body };
+          const merged = { ...fieldKeys.toLabels(existing), ...body };
           const fieldErrors = checkRequiredFields(requiredFields, merged);
           if (fieldErrors.length > 0) {
             return c.json(
@@ -1590,17 +1626,14 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
             );
           }
         }
-        const taxPatchColumnFields = taxonomyType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
         const taxPatchParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null);
+        const taxPatchColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxPatchData = {};
         if ("published" in body) taxPatchData["published"] = body["published"];
-        for (const f of taxPatchColumnFields) {
-          if (f.name in body) {
-            const val = body[f.name];
-            taxPatchData[f.db_column.column_name] = val !== void 0 ? val : null;
-          }
+        for (const f of taxPatchColumnBackedFields) {
+          const key = f.db_column.column_name;
+          if (!(key in storageBody)) continue;
+          taxPatchData[key] = storageBody[key];
         }
         const updated = await repo.update(id, taxPatchData);
         if (!updated) {
@@ -1610,7 +1643,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           );
         }
         const mediaDeltas = [
-          topLevelMediaDelta(mediaFields, existing, body)
+          topLevelMediaDelta(mediaFields, existing, storageBody)
         ];
         if (db) {
           for (const f of taxPatchParagraphFields) {
@@ -1623,7 +1656,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: updated });
+        const data = fieldKeys.toLabels(updated);
+        return c.json({ ok: true, data });
       }
     );
     app.delete(
@@ -2615,7 +2649,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 import { sql as sql5 } from "drizzle-orm";
 var API_VERSION = (() => {
   try {
-    return "0.3.3";
+    return "0.4.0";
   } catch {
     return "0.0.0";
   }
@@ -3026,7 +3060,8 @@ function createCmsApp(options) {
   if (!options.storage) {
     throw new Error(MISSING_STORAGE_ERROR);
   }
-  const prefix = options.prefix ?? "/api";
+  const prefix = normalizePrefix(options.prefix);
+  const publicPaths = createPublicPaths(prefix);
   const { storage, registry, db, rateLimit, media, cors } = options;
   const cmsName = options.name ?? "Manguito CMS";
   const maxFileSize = media?.max_file_size;
@@ -3106,23 +3141,27 @@ function createCmsApp(options) {
   registerAuthRoutes(app, db);
   app.use("/admin/api/*", authMiddleware);
   app.use("/admin/api/*", mustChangePasswordCheck);
-  app.get("/api/openapi.json", (c) => {
+  app.get(publicPaths.openapi(), (c) => {
     const paths = {};
     for (const ct of Object.values(registry.content_types)) {
       const base = ct.default_base_path;
       if (ct.only_one) {
-        paths[`/api/${base}`] = { get: { summary: `Get ${ct.label}`, tags: [ct.label] } };
+        paths[publicPaths.collection(base)] = { get: { summary: `Get ${ct.label}`, tags: [ct.label] } };
       } else {
-        paths[`/api/${base}`] = { get: { summary: `List published ${ct.label}`, tags: [ct.label] } };
-        paths[`/api/${base}/{slug}`] = { get: { summary: `Get ${ct.label} by slug`, tags: [ct.label] } };
+        paths[publicPaths.collection(base)] = { get: { summary: `List published ${ct.label}`, tags: [ct.label] } };
+        paths[publicPaths.item(base).replace(":slug", "{slug}")] = {
+          get: { summary: `Get ${ct.label} by slug`, tags: [ct.label] }
+        };
       }
     }
     for (const tt of Object.values(registry.taxonomy_types)) {
-      paths[`/api/taxonomy/${tt.name}`] = { get: { summary: `List published ${tt.label}`, tags: [tt.label] } };
-      paths[`/api/taxonomy/${tt.name}/{id}`] = { get: { summary: `Get ${tt.label} by id`, tags: [tt.label] } };
+      paths[publicPaths.taxonomyCollection(tt.name)] = { get: { summary: `List published ${tt.label}`, tags: [tt.label] } };
+      paths[publicPaths.taxonomyItem(tt.name).replace(":id", "{id}")] = {
+        get: { summary: `Get ${tt.label} by id`, tags: [tt.label] }
+      };
     }
-    paths["/api/media"] = { get: { summary: "List media items", tags: ["Media"] } };
-    paths["/api/media/{id}"] = { get: { summary: "Get media item by id", tags: ["Media"] } };
+    paths[publicPaths.mediaCollection()] = { get: { summary: "List media items", tags: ["Media"] } };
+    paths[publicPaths.mediaItem().replace(":id", "{id}")] = { get: { summary: "Get media item by id", tags: ["Media"] } };
     return c.json({
       openapi: "3.0.3",
       info: { title: "Manguito CMS Public API", version: "1.0.0" },
@@ -3137,14 +3176,24 @@ function createCmsApp(options) {
       paths: {}
     })
   );
-  registerPublicContentRoutes(app, registry, publicRepos, listRateLimit, programmaticResolver);
-  registerPublicMediaRoutes(app, mediaRepo, listRateLimit);
+  const fieldKeyMaps = Object.fromEntries([
+    ...Object.entries(registry.content_types).map(([typeName, ct]) => [
+      typeName,
+      createFieldKeyMap(ct.fields)
+    ]),
+    ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [
+      typeName,
+      createFieldKeyMap(tt.fields)
+    ])
+  ]);
+  registerPublicContentRoutes(app, registry, publicRepos, fieldKeyMaps, publicPaths, listRateLimit, programmaticResolver);
+  registerPublicMediaRoutes(app, mediaRepo, publicPaths, listRateLimit);
   if (options.graphql?.enabled) {
     const gqlOptions = options.graphql;
     let gqlHandler = null;
     let initError = null;
-    const ready = import("./handler-CGHZG3J5.mjs").then(({ createGraphQLHandler }) => {
-      gqlHandler = createGraphQLHandler(registry, graphqlRepos, programmaticResolver, db, gqlOptions);
+    const ready = import("./handler-TPEULQ5W.mjs").then(({ createGraphQLHandler }) => {
+      gqlHandler = createGraphQLHandler(registry, graphqlRepos, fieldKeyMaps, programmaticResolver, db, gqlOptions);
     }).catch((err) => {
       initError = err;
       const message = err instanceof Error ? err.message : String(err);
@@ -3184,7 +3233,7 @@ function createCmsApp(options) {
   );
   registerSchemaRoute(app, registry, db);
   registerUserRoutes(app, db, requirePermission, requireHierarchy);
-  registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePermission, db);
+  registerAdminContentRoutes(app, registry, repos, fieldKeyMaps, mediaRepo, requirePermission, db);
   registerAdminMediaRoutes(app, mediaRepo, storage, requirePermission, maxFileSize);
   return { prefix, app };
 }
@@ -3225,7 +3274,7 @@ function resolveGraphQL(cfg) {
   };
 }
 function createAPIAdapter(options = {}) {
-  const prefix = options.prefix ?? "/api";
+  const prefix = normalizePrefix(options.prefix);
   const media = options.media?.max_file_size !== void 0 ? { max_file_size: options.media.max_file_size } : void 0;
   return {
     prefix,