@bobbykim/manguito-cms-api 0.3.3 → 0.4.1

package/dist/index.mjs

@@ -1,11 +1,32 @@
 import {
   buildRelationsMap,
+  createFieldKeyMap,
   deleteParagraphField,
+  isColumnBacked,
   persistJunctionField,
   persistParagraphField,
   resolveRelationBareIds,
   resolveRelationField
-} from "./chunk-TK4DNRFF.mjs";
+} from "./chunk-4F2CRXPG.mjs";
+
+// src/paths.ts
+function normalizePrefix(prefix) {
+  if (prefix === void 0) return "/api";
+  const withSlash = prefix.startsWith("/") ? prefix : `/${prefix}`;
+  const trimmed = withSlash.replace(/\/+$/, "");
+  return trimmed === "" ? "/api" : trimmed;
+}
+function createPublicPaths(prefix) {
+  return {
+    collection: (basePath) => `${prefix}/${basePath}`,
+    item: (basePath) => `${prefix}/${basePath}/:slug`,
+    taxonomyCollection: (typeName) => `${prefix}/taxonomy/${typeName}`,
+    taxonomyItem: (typeName) => `${prefix}/taxonomy/${typeName}/:id`,
+    mediaCollection: () => `${prefix}/media`,
+    mediaItem: () => `${prefix}/media/:id`,
+    openapi: () => `${prefix}/openapi.json`
+  };
+}
 
 // src/app.ts
 import { Hono } from "hono";
@@ -585,6 +606,54 @@ function createProgrammaticResolver(resolvers, options) {
   return { resolveItem, resolveList, hasSchema };
 }
 
+// src/projector.ts
+function isPlainRow(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v) && !(v instanceof Date);
+}
+var MEDIA_FIELD_TYPES = /* @__PURE__ */ new Set(["image", "video", "file"]);
+function nestedTargets(fields) {
+  const out = [];
+  for (const f of fields) {
+    if (MEDIA_FIELD_TYPES.has(f.field_type)) continue;
+    if (f.field_type !== "paragraph" && f.field_type !== "reference") continue;
+    const ref = f.ui_component.ref;
+    if (!ref) continue;
+    out.push({ label: f.name, target: ref });
+  }
+  return out;
+}
+function buildProjectors(registry, fieldKeyMaps) {
+  const projectors = {};
+  const sources = [
+    registry.content_types,
+    registry.taxonomy_types,
+    registry.paragraph_types
+  ];
+  for (const source of sources) {
+    for (const [typeName, type] of Object.entries(source)) {
+      const map = fieldKeyMaps[typeName];
+      if (!map) continue;
+      projectors[typeName] = { map, nested: nestedTargets(type.fields) };
+    }
+  }
+  return projectors;
+}
+function projectRow(row, typeName, projectors) {
+  const p = projectors[typeName];
+  if (!p) return row;
+  const out = p.map.toLabels(row);
+  for (const { label, target } of p.nested) {
+    const v = out[label];
+    if (v === null || v === void 0) continue;
+    if (Array.isArray(v)) {
+      out[label] = v.map((item) => isPlainRow(item) ? projectRow(item, target, projectors) : item);
+    } else if (isPlainRow(v)) {
+      out[label] = projectRow(v, target, projectors);
+    }
+  }
+  return out;
+}
+
 // src/routes/query-params.ts
 var SORTABLE_FIELDS = /* @__PURE__ */ new Set(["title", "created_at", "updated_at"]);
 var RELATION_FIELD_TYPES = /* @__PURE__ */ new Set([
@@ -605,28 +674,31 @@ function parseInclude(includeParam) {
   if (!includeParam) return [];
   return includeParam.split(",").map((s) => s.trim()).filter(Boolean);
 }
-function parseFilters(url, validFields) {
+function parseFilters(url, validFields, columnFor) {
   const { searchParams } = new URL(url);
   const filters = {};
+  const toKey = (label) => columnFor?.(label) ?? label;
   for (const [key, value] of searchParams.entries()) {
     const simpleMatch = /^filter\[([^\]]+)\]$/.exec(key);
     const opMatch = /^filter\[([^\]]+)\]\[([^\]]+)\]$/.exec(key);
     if (simpleMatch) {
       const field = simpleMatch[1];
       if (!validFields.has(field)) return { ok: false, invalidField: field };
-      const existing = filters[field];
+      const storageKey = toKey(field);
+      const existing = filters[storageKey];
       if (existing !== void 0) {
-        filters[field] = Array.isArray(existing) ? [...existing, value] : [existing, value];
+        filters[storageKey] = Array.isArray(existing) ? [...existing, value] : [existing, value];
       } else {
-        filters[field] = value;
+        filters[storageKey] = value;
       }
     } else if (opMatch) {
       const field = opMatch[1];
       const operator = opMatch[2];
       if (!validFields.has(field)) return { ok: false, invalidField: field };
       if (!["gt", "gte", "lt", "lte"].includes(operator)) continue;
-      const existing = filters[field] ?? {};
-      filters[field] = { ...existing, [operator]: value };
+      const storageKey = toKey(field);
+      const existing = filters[storageKey] ?? {};
+      filters[storageKey] = { ...existing, [operator]: value };
     }
   }
   return { ok: true, filters };
@@ -636,7 +708,7 @@ function parseFilters(url, validFields) {
 function isPublished(item) {
   return item["published"] === true;
 }
-function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolver) {
+function registerPublicContentRoutes(app, registry, repos, projectors, paths, listRateLimit, resolver) {
   function registerListRoute(path, handler) {
     if (listRateLimit) {
       app.get(path, listRateLimit, handler);
@@ -644,7 +716,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
       app.get(path, handler);
     }
   }
-  registerListRoute("/api/content", (c) => {
+  registerListRoute(paths.collection("content"), (c) => {
     const data = Object.values(registry.content_types).map((ct) => ({
       name: ct.name,
       label: ct.label,
@@ -652,7 +724,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
     }));
     return c.json({ ok: true, data });
   });
-  registerListRoute("/api/taxonomy", (c) => {
+  registerListRoute(paths.collection("taxonomy"), (c) => {
     const data = Object.values(registry.taxonomy_types).map((tt) => ({
       name: tt.name,
       label: tt.label
@@ -671,7 +743,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
       ...contentType.system_fields.map((f) => f.name)
     ]);
     if (contentType.only_one) {
-      app.get(`/api/${basePath}`, async (c) => {
+      app.get(paths.collection(basePath), async (c) => {
         const result = await repo.findMany({ published_only: true, page: 1, per_page: 1 });
         if (result.data.length === 0) {
           return c.json(
@@ -679,12 +751,14 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             404
           );
         }
-        let data = result.data[0];
+        let data = projectRow(result.data[0], typeName, projectors);
         if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
         return c.json({ ok: true, data });
       });
     } else {
-      registerListRoute(`/api/${basePath}`, async (c) => {
+      registerListRoute(paths.collection(basePath), async (c) => {
+        const projector = projectors[typeName];
+        const fieldKeys = projector.map;
         const pagination = parsePagination(c.req.query("page"), c.req.query("per_page"));
         if (!pagination.ok) {
           return c.json(
@@ -724,7 +798,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             400
           );
         }
-        const filtersResult = parseFilters(c.req.url, filterableFieldNames);
+        const filtersResult = parseFilters(c.req.url, filterableFieldNames, fieldKeys.columnFor);
         if (!filtersResult.ok) {
           return c.json(
             {
@@ -752,22 +826,23 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             );
           }
         }
+        const sortColumn = fieldKeys.columnFor(sortBy) ?? sortBy;
         const result = await repo.findMany({
           published_only: true,
           page: pagination.page,
           per_page: pagination.per_page,
-          sort_by: sortBy,
+          sort_by: sortColumn,
           sort_order: sortOrder,
           filters: filtersResult.filters,
           include
         });
-        if (resolver?.hasSchema(typeName)) {
-          const resolved = await resolver.resolveList(typeName, result.data);
-          return c.json({ ...result, data: resolved });
-        }
-        return c.json(result);
+        const labeled = result.data.map(
+          (row) => projectRow(row, typeName, projectors)
+        );
+        const data = resolver?.hasSchema(typeName) ? await resolver.resolveList(typeName, labeled) : labeled;
+        return c.json({ ...result, data });
       });
-      app.get(`/api/${basePath}/:slug`, async (c) => {
+      app.get(paths.item(basePath), async (c) => {
         const slug = c.req.param("slug");
         const include = parseInclude(c.req.query("include"));
         for (const field of include) {
@@ -794,7 +869,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
             404
           );
         }
-        let data = item;
+        let data = projectRow(item, typeName, projectors);
         if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
         return c.json({ ok: true, data });
       });
@@ -803,7 +878,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
   for (const [typeName] of Object.entries(registry.taxonomy_types)) {
     const repo = repos[typeName];
     if (!repo) continue;
-    registerListRoute(`/api/taxonomy/${typeName}`, async (c) => {
+    registerListRoute(paths.taxonomyCollection(typeName), async (c) => {
       const pagination = parsePagination(c.req.query("page"), c.req.query("per_page"));
       if (!pagination.ok) {
         return c.json(
@@ -822,13 +897,13 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
         page: pagination.page,
         per_page: pagination.per_page
       });
-      if (resolver?.hasSchema(typeName)) {
-        const resolved = await resolver.resolveList(typeName, result.data);
-        return c.json({ ...result, data: resolved });
-      }
-      return c.json(result);
+      const labeled = result.data.map(
+        (row) => projectRow(row, typeName, projectors)
+      );
+      const data = resolver?.hasSchema(typeName) ? await resolver.resolveList(typeName, labeled) : labeled;
+      return c.json({ ...result, data });
     });
-    app.get(`/api/taxonomy/${typeName}/:id`, async (c) => {
+    app.get(paths.taxonomyItem(typeName), async (c) => {
       const id = c.req.param("id");
       const item = await repo.findOne(id);
       if (!item || !isPublished(item)) {
@@ -840,7 +915,7 @@ function registerPublicContentRoutes(app, registry, repos, listRateLimit, resolv
           404
         );
       }
-      let data = item;
+      let data = projectRow(item, typeName, projectors);
       if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
       return c.json({ ok: true, data });
     });
@@ -856,7 +931,7 @@ function parsePagination2(pageStr, perPageStr) {
   if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false };
   return { ok: true, page, per_page };
 }
-function registerPublicMediaRoutes(app, mediaRepo, listRateLimit) {
+function registerPublicMediaRoutes(app, mediaRepo, paths, listRateLimit) {
   const mediaListHandler = async (c) => {
     const pagination = parsePagination2(c.req.query("page"), c.req.query("per_page"));
     if (!pagination.ok) {
@@ -895,11 +970,11 @@ function registerPublicMediaRoutes(app, mediaRepo, listRateLimit) {
     return c.json(result);
   };
   if (listRateLimit) {
-    app.get("/api/media", listRateLimit, mediaListHandler);
+    app.get(paths.mediaCollection(), listRateLimit, mediaListHandler);
   } else {
-    app.get("/api/media", mediaListHandler);
+    app.get(paths.mediaCollection(), mediaListHandler);
   }
-  app.get("/api/media/:id", async (c) => {
+  app.get(paths.mediaItem(), async (c) => {
     const id = c.req.param("id");
     const item = await mediaRepo.findOne(id);
     if (!item) {
@@ -923,9 +998,11 @@ function topLevelMediaDelta(mediaFields, before, after) {
   const added = [];
   const removed = [];
   for (const f of mediaFields) {
-    if (after !== null && !(f.name in after)) continue;
-    const oldId = before ? extractMediaId(before[f.name]) : null;
-    const newId = after ? extractMediaId(after[f.name]) : null;
+    const key = f.db_column?.column_name;
+    if (key === void 0 || key === "") continue;
+    if (after !== null && !(key in after)) continue;
+    const oldId = before ? extractMediaId(before[key]) : null;
+    const newId = after ? extractMediaId(after[key]) : null;
     if (newId === oldId) continue;
     if (oldId) removed.push(oldId);
     if (newId) added.push(newId);
@@ -985,7 +1062,7 @@ function isEmpty(value) {
 function checkRequiredFields(fields, data) {
   return fields.filter((f) => f.required && isEmpty(data[f.name])).map((f) => ({ field: f.name, message: `${f.label} is required` }));
 }
-function parseListQuery(url, schemaFieldNames, relationFieldNames) {
+function parseListQuery(url, schemaFieldNames, relationFieldNames, columnFor) {
   const searchParams = new URL(url).searchParams;
   const pagination = parsePagination(
     searchParams.get("page") ?? void 0,
@@ -1020,7 +1097,7 @@ function parseListQuery(url, schemaFieldNames, relationFieldNames) {
       status: 400
     };
   }
-  const filtersResult = parseFilters(url, schemaFieldNames);
+  const filtersResult = parseFilters(url, schemaFieldNames, columnFor);
   if (!filtersResult.ok) {
     return {
       ok: false,
@@ -1052,7 +1129,7 @@ function parseListQuery(url, schemaFieldNames, relationFieldNames) {
     search
   };
 }
-function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePermission, db) {
+function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo, requirePermission, db) {
   for (const [typeName, contentType] of Object.entries(registry.content_types)) {
     const basePath = `content/${typeName}`;
     const repo = repos[typeName];
@@ -1064,6 +1141,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
     const relationFieldNames = new Set(
       contentType.fields.filter((f) => RELATION_FIELD_TYPES.has(f.field_type)).map((f) => f.name)
     );
+    const projector = projectors[typeName];
+    const fieldKeys = projector.map;
     const requiredFields = contentType.fields.filter((f) => f.required);
     const mediaFields = contentType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
@@ -1077,17 +1156,18 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       `/admin/api/${basePath}`,
       requirePermission("content:read"),
       async (c) => {
-        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames);
+        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor);
         if (!parsed.ok) {
           return c.json({ ok: false, error: parsed.response }, parsed.status);
         }
         const publishedParam = c.req.query("published");
         const extraFilters = {};
         if (publishedParam === "false") extraFilters["published"] = false;
+        const sortColumn = fieldKeys.columnFor(parsed.sortBy) ?? parsed.sortBy;
         const findOpts = {
           page: parsed.pagination.page,
           per_page: parsed.pagination.per_page,
-          sort_by: parsed.sortBy,
+          sort_by: sortColumn,
           sort_order: parsed.sortOrder,
           filters: { ...parsed.filters, ...extraFilters },
           include: parsed.include
@@ -1097,7 +1177,10 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           findOpts.search = { term: parsed.search, columns: searchableColumns };
         }
         const result = await repo.findMany(findOpts);
-        return c.json(result);
+        const data = result.data.map(
+          (row) => projectRow(row, typeName, projectors)
+        );
+        return c.json({ ...result, data });
       }
     );
     app.get(
@@ -1132,7 +1215,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
             }
           }
         }
-        return c.json({ ok: true, data: item });
+        const data = projectRow(item, typeName, projectors);
+        return c.json({ ok: true, data });
       }
     );
     app.post(
@@ -1199,6 +1283,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       }
     );
     const writeNewItem = async (c, body) => {
+      const storageBody = fieldKeys.toStorage(body);
       const fieldErrors = checkRequiredFields(requiredFields, body);
       if (fieldErrors.length > 0) {
         return c.json(
@@ -1222,9 +1307,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       const junctionFields = contentType.fields.filter(
         (f) => f.db_column !== null && f.db_column.junction !== void 0
       );
-      const columnFields = contentType.fields.filter(
-        (f) => f.db_column !== null && f.db_column.junction === void 0
-      );
+      const columnBackedFields = contentType.fields.filter(isColumnBacked);
       const columnData = {
         published: body["published"] ?? false
       };
@@ -1233,9 +1316,10 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       } else {
         columnData["slug"] = body["slug"];
       }
-      for (const f of columnFields) {
-        const val = body[f.name];
-        columnData[f.db_column.column_name] = val !== void 0 ? val : null;
+      for (const f of columnBackedFields) {
+        const key = f.db_column.column_name;
+        if (!(key in storageBody)) continue;
+        columnData[key] = storageBody[key];
       }
       if (db) {
         const basePathId = await lookupBasePathId(db, contentType.default_base_path);
@@ -1255,7 +1339,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       }
       const item = await repo.create(columnData);
       const itemId = item["id"];
-      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, storageBody)];
       if (db) {
         for (const f of paragraphFields) {
           const comp = f.ui_component;
@@ -1272,7 +1356,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
         }
       }
       await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-      return c.json({ ok: true, data: item }, 201);
+      const data = projectRow(item, typeName, projectors);
+      return c.json({ ok: true, data }, 201);
     };
     app.patch(
       `/admin/api/${basePath}/:id`,
@@ -1332,11 +1417,12 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       }
     );
     const writeExistingItem = async (c, id, existing, body) => {
+      const storageBody = fieldKeys.toStorage(body);
       if (body["published"] === true) {
         const publishDeny = await requirePermission("content:edit")(c, async () => {
         });
         if (publishDeny) return publishDeny;
-        const merged = { ...existing, ...body };
+        const merged = { ...fieldKeys.toLabels(existing), ...body };
         const fieldErrors = checkRequiredFields(requiredFields, merged);
         if (fieldErrors.length > 0) {
           return c.json(
@@ -1356,17 +1442,14 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       const patchJunctionFields = contentType.fields.filter(
         (f) => f.db_column !== null && f.db_column.junction !== void 0
       );
-      const patchColumnFields = contentType.fields.filter(
-        (f) => f.db_column !== null && f.db_column.junction === void 0
-      );
+      const patchColumnBackedFields = contentType.fields.filter(isColumnBacked);
       const patchData = {};
       if (!contentType.only_one && "slug" in body) patchData["slug"] = body["slug"];
       if ("published" in body) patchData["published"] = body["published"];
-      for (const f of patchColumnFields) {
-        if (f.name in body) {
-          const val = body[f.name];
-          patchData[f.db_column.column_name] = val !== void 0 ? val : null;
-        }
+      for (const f of patchColumnBackedFields) {
+        const key = f.db_column.column_name;
+        if (!(key in storageBody)) continue;
+        patchData[key] = storageBody[key];
       }
       const updated = await repo.update(id, patchData);
       if (!updated) {
@@ -1376,7 +1459,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
         );
       }
       const mediaDeltas = [
-        topLevelMediaDelta(mediaFields, existing, body)
+        topLevelMediaDelta(mediaFields, existing, storageBody)
       ];
       if (db) {
         for (const f of patchParagraphFields) {
@@ -1394,7 +1477,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
         }
       }
       await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-      return c.json({ ok: true, data: updated });
+      const data = projectRow(updated, typeName, projectors);
+      return c.json({ ok: true, data });
     };
     if (contentType.only_one) {
       app.put(
@@ -1454,6 +1538,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
     const relationFieldNames = new Set(
       taxonomyType.fields.filter((f) => RELATION_FIELD_TYPES.has(f.field_type)).map((f) => f.name)
     );
+    const projector = projectors[typeName];
+    const fieldKeys = projector.map;
     const requiredFields = taxonomyType.fields.filter((f) => f.required);
     const mediaFields = taxonomyType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
@@ -1467,17 +1553,18 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       `/admin/api/taxonomy/${typeName}`,
       requirePermission("content:read"),
       async (c) => {
-        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames);
+        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor);
         if (!parsed.ok) {
           return c.json({ ok: false, error: parsed.response }, parsed.status);
         }
         const publishedParam = c.req.query("published");
         const extraFilters = {};
         if (publishedParam === "false") extraFilters["published"] = false;
+        const sortColumn = fieldKeys.columnFor(parsed.sortBy) ?? parsed.sortBy;
         const findOpts = {
           page: parsed.pagination.page,
           per_page: parsed.pagination.per_page,
-          sort_by: parsed.sortBy,
+          sort_by: sortColumn,
           sort_order: parsed.sortOrder,
           filters: { ...parsed.filters, ...extraFilters },
           include: parsed.include
@@ -1487,7 +1574,10 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           findOpts.search = { term: parsed.search, columns: searchableColumns };
         }
         const result = await repo.findMany(findOpts);
-        return c.json(result);
+        const data = result.data.map(
+          (row) => projectRow(row, typeName, projectors)
+        );
+        return c.json({ ...result, data });
       }
     );
     app.get(
@@ -1502,7 +1592,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
             404
           );
         }
-        return c.json({ ok: true, data: item });
+        const data = projectRow(item, typeName, projectors);
+        return c.json({ ok: true, data });
       }
     );
     app.post(
@@ -1510,6 +1601,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       requirePermission("content:create"),
       async (c) => {
         const body = await c.req.json();
+        const storageBody = fieldKeys.toStorage(body);
         const fieldErrors = checkRequiredFields(requiredFields, body);
         if (fieldErrors.length > 0) {
           return c.json(
@@ -1529,20 +1621,19 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           });
           if (publishDeny) return publishDeny;
         }
-        const taxColumnFields = taxonomyType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
         const taxParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null);
+        const taxColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxColumnData = {
           published: body["published"] ?? false
         };
-        for (const f of taxColumnFields) {
-          const val = body[f.name];
-          taxColumnData[f.db_column.column_name] = val !== void 0 ? val : null;
+        for (const f of taxColumnBackedFields) {
+          const key = f.db_column.column_name;
+          if (!(key in storageBody)) continue;
+          taxColumnData[key] = storageBody[key];
         }
         const item = await repo.create(taxColumnData);
         const taxItemId = item["id"];
-        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, storageBody)];
         if (db) {
           for (const f of taxParagraphFields) {
             const comp = f.ui_component;
@@ -1554,7 +1645,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: item }, 201);
+        const data = projectRow(item, typeName, projectors);
+        return c.json({ ok: true, data }, 201);
       }
     );
     app.patch(
@@ -1563,6 +1655,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
       async (c) => {
         const id = c.req.param("id");
         const body = await c.req.json();
+        const storageBody = fieldKeys.toStorage(body);
         const existing = await repo.findOne(id);
         if (!existing) {
           return c.json(
@@ -1574,7 +1667,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           const publishDeny = await requirePermission("content:edit")(c, async () => {
           });
           if (publishDeny) return publishDeny;
-          const merged = { ...existing, ...body };
+          const merged = { ...fieldKeys.toLabels(existing), ...body };
           const fieldErrors = checkRequiredFields(requiredFields, merged);
           if (fieldErrors.length > 0) {
             return c.json(
@@ -1590,17 +1683,14 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
             );
           }
         }
-        const taxPatchColumnFields = taxonomyType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
         const taxPatchParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null);
+        const taxPatchColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxPatchData = {};
         if ("published" in body) taxPatchData["published"] = body["published"];
-        for (const f of taxPatchColumnFields) {
-          if (f.name in body) {
-            const val = body[f.name];
-            taxPatchData[f.db_column.column_name] = val !== void 0 ? val : null;
-          }
+        for (const f of taxPatchColumnBackedFields) {
+          const key = f.db_column.column_name;
+          if (!(key in storageBody)) continue;
+          taxPatchData[key] = storageBody[key];
         }
         const updated = await repo.update(id, taxPatchData);
         if (!updated) {
@@ -1610,7 +1700,7 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           );
         }
         const mediaDeltas = [
-          topLevelMediaDelta(mediaFields, existing, body)
+          topLevelMediaDelta(mediaFields, existing, storageBody)
         ];
         if (db) {
           for (const f of taxPatchParagraphFields) {
@@ -1623,7 +1713,8 @@ function registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePerm
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: updated });
+        const data = projectRow(updated, typeName, projectors);
+        return c.json({ ok: true, data });
       }
     );
     app.delete(
@@ -2615,7 +2706,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 import { sql as sql5 } from "drizzle-orm";
 var API_VERSION = (() => {
   try {
-    return "0.3.3";
+    return "0.4.1";
   } catch {
     return "0.0.0";
   }
@@ -2777,7 +2868,7 @@ function whereFragment(conds) {
   return conds.length > 0 ? sql7` WHERE ${sql7.join(conds, sql7` AND `)}` : sql7``;
 }
 function createDrizzleContentRepository(db, tableName, options = {}) {
-  const { relations = {}, publishedRelations = false } = options;
+  const { relations = {}, publishedRelations = false, sortableColumns } = options;
   function tableRaw() {
     return sql7.raw(quoteIdent2(tableName));
   }
@@ -2815,8 +2906,9 @@ function createDrizzleContentRepository(db, tableName, options = {}) {
         sort_order = "asc",
         search
       } = opts;
-      if (!SORTABLE_FIELDS2.has(sort_by)) {
-        throw codeError("INVALID_SORT_FIELD", `'${sort_by}' is not sortable. Allowed: title, created_at, updated_at`);
+      const allowed = sortableColumns ?? SORTABLE_FIELDS2;
+      if (!allowed.has(sort_by)) {
+        throw codeError("INVALID_SORT_FIELD", `'${sort_by}' is not sortable.`);
       }
       const offset = (page - 1) * per_page;
       const conds = buildConditions(published_only, filters, search);
@@ -3026,7 +3118,8 @@ function createCmsApp(options) {
   if (!options.storage) {
     throw new Error(MISSING_STORAGE_ERROR);
   }
-  const prefix = options.prefix ?? "/api";
+  const prefix = normalizePrefix(options.prefix);
+  const publicPaths = createPublicPaths(prefix);
   const { storage, registry, db, rateLimit, media, cors } = options;
   const cmsName = options.name ?? "Manguito CMS";
   const maxFileSize = media?.max_file_size;
@@ -3060,16 +3153,38 @@ function createCmsApp(options) {
     return result.rows[0]?.role ?? null;
   };
   const requireHierarchy = createHierarchyMiddleware(rolesRegistry, getUserRole);
+  const fieldKeyMaps = Object.fromEntries([
+    ...Object.entries(registry.content_types).map(([typeName, ct]) => [
+      typeName,
+      createFieldKeyMap(ct.fields)
+    ]),
+    ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [
+      typeName,
+      createFieldKeyMap(tt.fields)
+    ]),
+    ...Object.entries(registry.paragraph_types).map(([typeName, pt]) => [
+      typeName,
+      createFieldKeyMap(pt.fields)
+    ])
+  ]);
+  const projectors = buildProjectors(registry, fieldKeyMaps);
+  const sortableColumnsFor = (typeName) => new Set(
+    [...SORTABLE_FIELDS].map((label) => fieldKeyMaps[typeName].columnFor(label) ?? label)
+  );
   const contentRepos = Object.fromEntries(
     Object.entries(registry.content_types).map(([typeName, ct]) => [
       typeName,
-      createDrizzleContentRepository(db, ct.db.table_name)
+      createDrizzleContentRepository(db, ct.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ])
   );
   const taxonomyRepos = Object.fromEntries(
     Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [
       typeName,
-      createDrizzleContentRepository(db, tt.db.table_name)
+      createDrizzleContentRepository(db, tt.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ])
   );
   const repos = { ...contentRepos, ...taxonomyRepos };
@@ -3079,7 +3194,8 @@ function createCmsApp(options) {
       typeName,
       createDrizzleContentRepository(db, ct.db.table_name, {
         relations: buildRelationsMap(ct.fields, registry),
-        publishedRelations: true
+        publishedRelations: true,
+        sortableColumns: sortableColumnsFor(typeName)
       })
     ])
   );
@@ -3088,7 +3204,8 @@ function createCmsApp(options) {
       typeName,
       createDrizzleContentRepository(db, tt.db.table_name, {
         relations: buildRelationsMap(tt.fields, registry),
-        publishedRelations: true
+        publishedRelations: true,
+        sortableColumns: sortableColumnsFor(typeName)
       })
     ])
   );
@@ -3096,33 +3213,41 @@ function createCmsApp(options) {
   const graphqlRepos = Object.fromEntries([
     ...Object.entries(registry.content_types).map(([typeName, ct]) => [
       typeName,
-      createDrizzleContentRepository(db, ct.db.table_name)
+      createDrizzleContentRepository(db, ct.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ]),
     ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [
       typeName,
-      createDrizzleContentRepository(db, tt.db.table_name)
+      createDrizzleContentRepository(db, tt.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ])
   ]);
   registerAuthRoutes(app, db);
   app.use("/admin/api/*", authMiddleware);
   app.use("/admin/api/*", mustChangePasswordCheck);
-  app.get("/api/openapi.json", (c) => {
+  app.get(publicPaths.openapi(), (c) => {
     const paths = {};
     for (const ct of Object.values(registry.content_types)) {
       const base = ct.default_base_path;
       if (ct.only_one) {
-        paths[`/api/${base}`] = { get: { summary: `Get ${ct.label}`, tags: [ct.label] } };
+        paths[publicPaths.collection(base)] = { get: { summary: `Get ${ct.label}`, tags: [ct.label] } };
       } else {
-        paths[`/api/${base}`] = { get: { summary: `List published ${ct.label}`, tags: [ct.label] } };
-        paths[`/api/${base}/{slug}`] = { get: { summary: `Get ${ct.label} by slug`, tags: [ct.label] } };
+        paths[publicPaths.collection(base)] = { get: { summary: `List published ${ct.label}`, tags: [ct.label] } };
+        paths[publicPaths.item(base).replace(":slug", "{slug}")] = {
+          get: { summary: `Get ${ct.label} by slug`, tags: [ct.label] }
+        };
       }
     }
     for (const tt of Object.values(registry.taxonomy_types)) {
-      paths[`/api/taxonomy/${tt.name}`] = { get: { summary: `List published ${tt.label}`, tags: [tt.label] } };
-      paths[`/api/taxonomy/${tt.name}/{id}`] = { get: { summary: `Get ${tt.label} by id`, tags: [tt.label] } };
+      paths[publicPaths.taxonomyCollection(tt.name)] = { get: { summary: `List published ${tt.label}`, tags: [tt.label] } };
+      paths[publicPaths.taxonomyItem(tt.name).replace(":id", "{id}")] = {
+        get: { summary: `Get ${tt.label} by id`, tags: [tt.label] }
+      };
     }
-    paths["/api/media"] = { get: { summary: "List media items", tags: ["Media"] } };
-    paths["/api/media/{id}"] = { get: { summary: "Get media item by id", tags: ["Media"] } };
+    paths[publicPaths.mediaCollection()] = { get: { summary: "List media items", tags: ["Media"] } };
+    paths[publicPaths.mediaItem().replace(":id", "{id}")] = { get: { summary: "Get media item by id", tags: ["Media"] } };
     return c.json({
       openapi: "3.0.3",
       info: { title: "Manguito CMS Public API", version: "1.0.0" },
@@ -3137,14 +3262,14 @@ function createCmsApp(options) {
       paths: {}
     })
   );
-  registerPublicContentRoutes(app, registry, publicRepos, listRateLimit, programmaticResolver);
-  registerPublicMediaRoutes(app, mediaRepo, listRateLimit);
+  registerPublicContentRoutes(app, registry, publicRepos, projectors, publicPaths, listRateLimit, programmaticResolver);
+  registerPublicMediaRoutes(app, mediaRepo, publicPaths, listRateLimit);
   if (options.graphql?.enabled) {
     const gqlOptions = options.graphql;
     let gqlHandler = null;
     let initError = null;
-    const ready = import("./handler-CGHZG3J5.mjs").then(({ createGraphQLHandler }) => {
-      gqlHandler = createGraphQLHandler(registry, graphqlRepos, programmaticResolver, db, gqlOptions);
+    const ready = import("./handler-7LVYEU5C.mjs").then(({ createGraphQLHandler }) => {
+      gqlHandler = createGraphQLHandler(registry, graphqlRepos, fieldKeyMaps, programmaticResolver, db, gqlOptions);
     }).catch((err) => {
       initError = err;
       const message = err instanceof Error ? err.message : String(err);
@@ -3184,7 +3309,7 @@ function createCmsApp(options) {
   );
   registerSchemaRoute(app, registry, db);
   registerUserRoutes(app, db, requirePermission, requireHierarchy);
-  registerAdminContentRoutes(app, registry, repos, mediaRepo, requirePermission, db);
+  registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo, requirePermission, db);
   registerAdminMediaRoutes(app, mediaRepo, storage, requirePermission, maxFileSize);
   return { prefix, app };
 }
@@ -3225,7 +3350,7 @@ function resolveGraphQL(cfg) {
   };
 }
 function createAPIAdapter(options = {}) {
-  const prefix = options.prefix ?? "/api";
+  const prefix = normalizePrefix(options.prefix);
   const media = options.media?.max_file_size !== void 0 ? { max_file_size: options.media.max_file_size } : void 0;
   return {
     prefix,