@bobbykim/manguito-cms-cli 0.4.3 → 0.4.5

package/dist/{chunk-OAUBUE7N.js → chunk-UNBMPHIT.js}

@@ -49,7 +49,7 @@ var init_esm_shims = __esm({
   }
 });
 
-// ../api/dist/chunk-TK4DNRFF.mjs
+// ../api/dist/chunk-4F2CRXPG.mjs
 init_esm_shims();
 import crypto from "crypto";
 
@@ -1212,7 +1212,7 @@ Subquery.prototype.getSQL = function() {
   return new SQL([this]);
 };
 
-// ../api/dist/chunk-TK4DNRFF.mjs
+// ../api/dist/chunk-4F2CRXPG.mjs
 function quoteIdent(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
@@ -1382,22 +1382,34 @@ function groupBy(items, key) {
   }
   return result;
 }
+function needsFkResolution(row, fkColumn, fieldName) {
+  if (fkColumn !== fieldName && !(fkColumn in row)) return false;
+  const current = row[fieldName];
+  return !(typeof current === "object" && current !== null);
+}
 async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOnly = false) {
   if (rows.length === 0) return;
+  const batch = [...new Set(rows)];
   if (rel.type === "paragraph") {
-    const parentIds = rows.map((r) => r["id"]);
+    const parentIds = batch.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const result = await db.execute(
       sql`SELECT * FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
-    for (const row of rows) {
+    for (const row of batch) {
       row[fieldName] = byParent[row["id"]] ?? [];
     }
   } else if (rel.type === "reference") {
-    const fkValues = rows.map((r) => r[rel.fk_column]).filter(Boolean);
+    const dropFk = rel.fk_column !== fieldName;
+    const pending = batch.filter((r) => needsFkResolution(r, rel.fk_column, fieldName));
+    if (pending.length === 0) return;
+    const fkValues = pending.map((r) => r[rel.fk_column]).filter(Boolean);
     if (fkValues.length === 0) {
-      for (const row of rows) row[fieldName] = null;
+      for (const row of pending) {
+        row[fieldName] = null;
+        if (dropFk) delete row[rel.fk_column];
+      }
       return;
     }
     const unique = [...new Set(fkValues)];
@@ -1412,12 +1424,13 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
         cache.set(`${rel.table}:${item["id"]}`, item);
       }
     }
-    for (const row of rows) {
+    for (const row of pending) {
       const fkVal = row[rel.fk_column];
       row[fieldName] = fkVal ? cache.get(`${rel.table}:${fkVal}`) ?? null : null;
+      if (dropFk) delete row[rel.fk_column];
     }
   } else if (rel.type === "junction") {
-    const parentIds = rows.map((r) => r["id"]);
+    const parentIds = batch.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const orderBy = rel.order_column ? sql` ORDER BY "order" ASC` : sql``;
     const junctionResult = await db.execute(
@@ -1437,14 +1450,20 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
       }
     }
     const byLeft = groupBy(jRows, rel.left_column);
-    for (const row of rows) {
+    for (const row of batch) {
       const jEntries = byLeft[row["id"]] ?? [];
       row[fieldName] = jEntries.map((jr) => cache.get(`${rel.table}:${jr[rel.right_column]}`)).filter(Boolean);
     }
   } else if (rel.type === "media") {
-    const fkValues = rows.map((r) => r[rel.fk_column]).filter(Boolean);
+    const dropFk = rel.fk_column !== fieldName;
+    const pending = batch.filter((r) => needsFkResolution(r, rel.fk_column, fieldName));
+    if (pending.length === 0) return;
+    const fkValues = pending.map((r) => r[rel.fk_column]).filter(Boolean);
     if (fkValues.length === 0) {
-      for (const row of rows) row[fieldName] = null;
+      for (const row of pending) {
+        row[fieldName] = null;
+        if (dropFk) delete row[rel.fk_column];
+      }
       return;
     }
     const unique = [...new Set(fkValues)];
@@ -1456,9 +1475,10 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
         cache.set(`media:${item["id"]}`, item);
       }
     }
-    for (const row of rows) {
+    for (const row of pending) {
       const fkVal = row[rel.fk_column];
       row[fieldName] = fkVal ? cache.get(`media:${fkVal}`) ?? null : null;
+      if (dropFk) delete row[rel.fk_column];
     }
   }
 }
@@ -1486,6 +1506,46 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     }
   }
 }
+function isColumnBacked(field) {
+  const col = field.db_column;
+  if (col === null) return false;
+  if (col.column_name === "") return false;
+  if (col.junction) return false;
+  return true;
+}
+function createFieldKeyMap(fields) {
+  const labelToColumn = /* @__PURE__ */ new Map();
+  const columnToLabel = /* @__PURE__ */ new Map();
+  for (const f of fields) {
+    if (!isColumnBacked(f)) continue;
+    labelToColumn.set(f.name, f.db_column.column_name);
+    columnToLabel.set(f.db_column.column_name, f.name);
+  }
+  for (const f of fields) {
+    const columnOwner = columnToLabel.get(f.name);
+    if (columnOwner !== void 0 && columnOwner !== f.name) {
+      throw new Error(
+        `Fatal: field key map failed to build \u2014 field label "${f.name}" collides with the storage column of field "${columnOwner}". A field label may not reuse another field's column name. Rename the field, then run \`manguito validate\` to check your schema.`
+      );
+    }
+  }
+  const diverges = [...labelToColumn].some(([label, column]) => label !== column);
+  function remap(input, lookup) {
+    const out = {};
+    for (const key of Object.keys(input)) {
+      out[lookup.get(key) ?? key] = input[key];
+    }
+    return out;
+  }
+  return {
+    toStorage: (input) => remap(input, labelToColumn),
+    toLabels: (row) => remap(row, columnToLabel),
+    columnFor: (label) => labelToColumn.get(label),
+    labelFor: (column) => columnToLabel.get(column),
+    labels: [...labelToColumn.keys()],
+    diverges
+  };
+}
 
 export {
   __require,
@@ -1523,5 +1583,7 @@ export {
   persistJunctionField,
   buildRelationsMap,
   resolveRelationField,
-  resolveRelationBareIds
+  resolveRelationBareIds,
+  isColumnBacked,
+  createFieldKeyMap
 };

package/dist/{handler-CGHZG3J5-TCG6K3FE.js → handler-7LVYEU5C-ZAJVEGKT.js}

@@ -9,8 +9,9 @@ import {
   __toESM,
   buildRelationsMap,
   init_esm_shims,
+  isColumnBacked,
   resolveRelationField
-} from "./chunk-OAUBUE7N.js";
+} from "./chunk-UNBMPHIT.js";
 
 // ../../node_modules/.pnpm/@whatwg-node+fetch@0.10.13/node_modules/@whatwg-node/fetch/dist/shouldSkipPonyfill.js
 var require_shouldSkipPonyfill = __commonJS({
@@ -10785,10 +10786,10 @@ var require_parser = __commonJS({
   }
 });
 
-// ../api/dist/handler-CGHZG3J5.mjs
+// ../api/dist/handler-7LVYEU5C.mjs
 init_esm_shims();
 
-// ../api/dist/chunk-GM55HGWA.mjs
+// ../api/dist/chunk-S4NT6FUM.mjs
 init_esm_shims();
 
 // ../../node_modules/.pnpm/graphql-yoga@5.21.2_graphql@16.14.2/node_modules/graphql-yoga/esm/index.js
@@ -30121,7 +30122,7 @@ function createYoga(options) {
   });
 }
 
-// ../api/dist/chunk-GM55HGWA.mjs
+// ../api/dist/chunk-S4NT6FUM.mjs
 var import_dataloader = __toESM(require_dataloader(), 1);
 
 // ../../node_modules/.pnpm/@escape.tech+graphql-armor@3.2.0_@envelop+core@5.5.1_@escape.tech+graphql-armor-types@0.7.0/node_modules/@escape.tech/graphql-armor/dist/graphql-armor.esm.js
@@ -30879,7 +30880,7 @@ var EnvelopArmor = class {
   }
 };
 
-// ../api/dist/chunk-GM55HGWA.mjs
+// ../api/dist/chunk-S4NT6FUM.mjs
 var DateTimeScalar = new GraphQLScalarType({
   name: "DateTime",
   description: "ISO-8601 date-time string",
@@ -30974,14 +30975,14 @@ var SortOrderEnum = new GraphQLEnumType({
   values: { ASC: { value: "asc" }, DESC: { value: "desc" } }
 });
 var SORTABLE = [
-  { gql: "title", column: "title" },
-  { gql: "createdAt", column: "created_at" },
-  { gql: "updatedAt", column: "updated_at" }
+  { gql: "title", value: "title" },
+  { gql: "createdAt", value: "created_at" },
+  { gql: "updatedAt", value: "updated_at" }
 ];
 function buildSortFieldEnum(typeName) {
   return new GraphQLEnumType({
     name: `${typeName}SortField`,
-    values: Object.fromEntries(SORTABLE.map((s) => [s.gql, { value: s.column }]))
+    values: Object.fromEntries(SORTABLE.map((s) => [s.gql, { value: s.value }]))
   });
 }
 function comparableFilterInput(name, scalar) {
@@ -31041,12 +31042,13 @@ function buildFilterInputType(type) {
   if (Object.keys(fields).length === 0) return null;
   return new GraphQLInputObjectType({ name: `${graphqlTypeName(type.name)}Filter`, fields });
 }
-function translateFilters(input, nameMap) {
+function translateFilters(input, nameMap, columnFor) {
   const out = {};
   if (!input) return out;
   for (const [gqlField, raw] of Object.entries(input)) {
     if (raw === null || typeof raw !== "object") continue;
-    const column = nameMap.toSchema(gqlField);
+    const label = nameMap.toSchema(gqlField);
+    const column = columnFor?.(label) ?? label;
     const spec = raw;
     if (spec["eq"] !== void 0) {
       out[column] = spec["eq"];
@@ -31068,29 +31070,34 @@ function codeError(code, message) {
 function isPublished(item) {
   return !!item && item["published"] === true;
 }
-function scalarFieldResolver(schemaName) {
-  return (parent) => parent[schemaName];
+function resolveFieldValue(field, row) {
+  const key = isColumnBacked(field) ? field.db_column.column_name : field.name;
+  return row[key] ?? null;
+}
+function scalarFieldResolver(field) {
+  return (parent) => resolveFieldValue(field, parent);
 }
 function relationFieldResolver(typeName, schemaFieldName) {
   return (parent, _args, ctx) => ctx.loaders.load(typeName, schemaFieldName, parent);
 }
-function programmaticFieldResolver(typeName, schemaFieldName, mediaFieldNames = []) {
+function programmaticFieldResolver(typeName, schemaFieldName, mediaFieldNames = [], fieldKeys) {
   return async (parent, _args, ctx) => {
     let p = ctx.programmaticMemo.get(parent);
     if (!p) {
-      p = resolveProgrammaticRow(typeName, parent, ctx, mediaFieldNames);
+      p = resolveProgrammaticRow(typeName, parent, ctx, mediaFieldNames, fieldKeys);
       ctx.programmaticMemo.set(parent, p);
     }
     return (await p)[schemaFieldName];
   };
 }
-async function resolveProgrammaticRow(typeName, parent, ctx, mediaFieldNames) {
-  if (mediaFieldNames.length === 0) return ctx.resolver.resolveItem(typeName, parent);
+async function resolveProgrammaticRow(typeName, parent, ctx, mediaFieldNames, fieldKeys) {
+  const toLabels = (row) => fieldKeys ? fieldKeys.toLabels(row) : row;
+  if (mediaFieldNames.length === 0) return ctx.resolver.resolveItem(typeName, toLabels(parent));
   const enriched = { ...parent };
   await Promise.all(mediaFieldNames.map((name) => ctx.loaders.load(typeName, name, enriched)));
-  return ctx.resolver.resolveItem(typeName, enriched);
+  return ctx.resolver.resolveItem(typeName, toLabels(enriched));
 }
-function collectionResolver(typeName, nameMap) {
+function collectionResolver(typeName, nameMap, fieldKeys) {
   return async (_root, args, ctx) => {
     const page = args.page ?? 1;
     const perPage = args.perPage ?? 10;
@@ -31101,13 +31108,15 @@ function collectionResolver(typeName, nameMap) {
       throw codeError("INVALID_PAGINATION", "perPage must be between 1 and 100");
     }
     const repo = ctx.repos[typeName];
+    const sortBy = args.sortBy ?? "created_at";
+    const sortColumn = fieldKeys?.columnFor(sortBy) ?? sortBy;
     const result = await repo.findMany({
       published_only: true,
       page,
       per_page: perPage,
-      sort_by: args.sortBy ?? "created_at",
+      sort_by: sortColumn,
       sort_order: args.sortOrder ?? "asc",
-      filters: translateFilters(args.filter, nameMap)
+      filters: translateFilters(args.filter, nameMap, fieldKeys?.columnFor)
     });
     return { data: result.data, meta: result.meta };
   };
@@ -31158,7 +31167,7 @@ var MEDIA = new GraphQLObjectType({
     duration: { type: GraphQLInt, resolve: (m) => m.duration }
   }
 });
-function buildGraphQLSchema(registry) {
+function buildGraphQLSchema(registry, fieldKeyMaps = {}) {
   const objectTypes = /* @__PURE__ */ new Map();
   const enumTypes = /* @__PURE__ */ new Map();
   for (const [name, enumType] of Object.entries(registry.enum_types)) {
@@ -31234,11 +31243,16 @@ function buildGraphQLSchema(registry) {
           const outType = outputTypeForField(field);
           let resolve;
           if (field.field_type === "programmatic") {
-            resolve = programmaticFieldResolver(machineName, field.name, mediaFieldNames);
+            resolve = programmaticFieldResolver(
+              machineName,
+              field.name,
+              mediaFieldNames,
+              fieldKeyMaps[machineName]
+            );
           } else if (field.field_type === "reference" || field.field_type === "paragraph" || field.field_type === "image" || field.field_type === "video" || field.field_type === "file") {
             resolve = relationFieldResolver(machineName, field.name);
           } else {
-            resolve = scalarFieldResolver(field.name);
+            resolve = scalarFieldResolver(field);
           }
           fields[gqlName] = { type: outType, resolve };
         }
@@ -31294,7 +31308,7 @@ function buildGraphQLSchema(registry) {
         sortOrder: { type: SortOrderEnum },
         ...filterType ? { filter: { type: filterType } } : {}
       },
-      resolve: collectionResolver(name, nameMap)
+      resolve: collectionResolver(name, nameMap, fieldKeyMaps[name])
     };
     queryFields[singleQueryName(name)] = {
       type: objType,
@@ -31314,7 +31328,7 @@ function buildGraphQLSchema(registry) {
     queryFields[collectionQueryName(name)] = {
       type: new GraphQLNonNull(listType),
       args: { page: { type: GraphQLInt }, perPage: { type: GraphQLInt } },
-      resolve: collectionResolver(name, buildFieldNameMap(tt.fields.map((f) => f.name)))
+      resolve: collectionResolver(name, buildFieldNameMap(tt.fields.map((f) => f.name)), fieldKeyMaps[name])
     };
     queryFields[singleQueryName(name)] = {
       type: objType,
@@ -31393,8 +31407,8 @@ function isClientSafeGraphQLError(error) {
   }
   return false;
 }
-function createGraphQLHandler(registry, repos, resolver, db, options) {
-  const schema = buildGraphQLSchema(registry);
+function createGraphQLHandler(registry, repos, fieldKeyMaps, resolver, db, options) {
+  const schema = buildGraphQLSchema(registry, fieldKeyMaps);
   const { plugins } = buildArmorPlugin({
     maxDepth: options.maxDepth,
     maxComplexity: options.maxComplexity

package/dist/index.js

@@ -21,6 +21,7 @@ import {
   __require,
   __toESM,
   buildRelationsMap,
+  createFieldKeyMap,
   deleteParagraphField,
   entityKind,
   fillPlaceholders,
@@ -28,6 +29,7 @@ import {
   getTableUniqueName,
   init_esm_shims,
   is,
+  isColumnBacked,
   isDriverValueEncoder,
   isSQLWrapper,
   persistJunctionField,
@@ -36,7 +38,7 @@ import {
   resolveRelationField,
   sql,
   tracer
-} from "./chunk-OAUBUE7N.js";
+} from "./chunk-UNBMPHIT.js";
 
 // ../../node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS({
@@ -46557,6 +46559,23 @@ var sign2 = Jwt.sign;
 import { randomBytes } from "crypto";
 import crypto3 from "crypto";
 import crypto22 from "crypto";
+function normalizePrefix(prefix) {
+  if (prefix === void 0) return "/api";
+  const withSlash = prefix.startsWith("/") ? prefix : `/${prefix}`;
+  const trimmed = withSlash.replace(/\/+$/, "");
+  return trimmed === "" ? "/api" : trimmed;
+}
+function createPublicPaths(prefix) {
+  return {
+    collection: (basePath) => `${prefix}/${basePath}`,
+    item: (basePath) => `${prefix}/${basePath}/:slug`,
+    taxonomyCollection: (typeName) => `${prefix}/taxonomy/${typeName}`,
+    taxonomyItem: (typeName) => `${prefix}/taxonomy/${typeName}/:id`,
+    mediaCollection: () => `${prefix}/media`,
+    mediaItem: () => `${prefix}/media/:id`,
+    openapi: () => `${prefix}/openapi.json`
+  };
+}
 function createCorsMiddleware(corsConfig) {
   const allowList = Array.isArray(corsConfig.origin) ? corsConfig.origin : [corsConfig.origin];
   const wildcard = allowList.includes("*");
@@ -47103,6 +47122,52 @@ function createProgrammaticResolver(resolvers, options) {
   }
   return { resolveItem, resolveList, hasSchema };
 }
+function isPlainRow(v2) {
+  return typeof v2 === "object" && v2 !== null && !Array.isArray(v2) && !(v2 instanceof Date);
+}
+var MEDIA_FIELD_TYPES = /* @__PURE__ */ new Set(["image", "video", "file"]);
+function nestedTargets(fields) {
+  const out = [];
+  for (const f of fields) {
+    if (MEDIA_FIELD_TYPES.has(f.field_type)) continue;
+    if (f.field_type !== "paragraph" && f.field_type !== "reference") continue;
+    const ref = f.ui_component.ref;
+    if (!ref) continue;
+    out.push({ label: f.name, target: ref });
+  }
+  return out;
+}
+function buildProjectors(registry2, fieldKeyMaps) {
+  const projectors = {};
+  const sources = [
+    registry2.content_types,
+    registry2.taxonomy_types,
+    registry2.paragraph_types
+  ];
+  for (const source of sources) {
+    for (const [typeName, type] of Object.entries(source)) {
+      const map2 = fieldKeyMaps[typeName];
+      if (!map2) continue;
+      projectors[typeName] = { map: map2, nested: nestedTargets(type.fields) };
+    }
+  }
+  return projectors;
+}
+function projectRow(row, typeName, projectors) {
+  const p2 = projectors[typeName];
+  if (!p2) return row;
+  const out = p2.map.toLabels(row);
+  for (const { label, target } of p2.nested) {
+    const v2 = out[label];
+    if (v2 === null || v2 === void 0) continue;
+    if (Array.isArray(v2)) {
+      out[label] = v2.map((item) => isPlainRow(item) ? projectRow(item, target, projectors) : item);
+    } else if (isPlainRow(v2)) {
+      out[label] = projectRow(v2, target, projectors);
+    }
+  }
+  return out;
+}
 var SORTABLE_FIELDS = /* @__PURE__ */ new Set(["title", "created_at", "updated_at"]);
 var RELATION_FIELD_TYPES = /* @__PURE__ */ new Set([
   "paragraph",
@@ -47122,28 +47187,31 @@ function parseInclude(includeParam) {
   if (!includeParam) return [];
   return includeParam.split(",").map((s) => s.trim()).filter(Boolean);
 }
-function parseFilters(url2, validFields) {
+function parseFilters(url2, validFields, columnFor) {
   const { searchParams } = new URL(url2);
   const filters = {};
+  const toKey = (label) => columnFor?.(label) ?? label;
   for (const [key, value] of searchParams.entries()) {
     const simpleMatch = /^filter\[([^\]]+)\]$/.exec(key);
     const opMatch = /^filter\[([^\]]+)\]\[([^\]]+)\]$/.exec(key);
     if (simpleMatch) {
       const field = simpleMatch[1];
       if (!validFields.has(field)) return { ok: false, invalidField: field };
-      const existing = filters[field];
+      const storageKey = toKey(field);
+      const existing = filters[storageKey];
       if (existing !== void 0) {
-        filters[field] = Array.isArray(existing) ? [...existing, value] : [existing, value];
+        filters[storageKey] = Array.isArray(existing) ? [...existing, value] : [existing, value];
       } else {
-        filters[field] = value;
+        filters[storageKey] = value;
       }
     } else if (opMatch) {
       const field = opMatch[1];
       const operator = opMatch[2];
       if (!validFields.has(field)) return { ok: false, invalidField: field };
       if (!["gt", "gte", "lt", "lte"].includes(operator)) continue;
-      const existing = filters[field] ?? {};
-      filters[field] = { ...existing, [operator]: value };
+      const storageKey = toKey(field);
+      const existing = filters[storageKey] ?? {};
+      filters[storageKey] = { ...existing, [operator]: value };
     }
   }
   return { ok: true, filters };
@@ -47151,7 +47219,7 @@ function parseFilters(url2, validFields) {
 function isPublished(item) {
   return item["published"] === true;
 }
-function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resolver) {
+function registerPublicContentRoutes(app, registry2, repos, projectors, paths, listRateLimit, resolver) {
   function registerListRoute(path3, handler) {
     if (listRateLimit) {
       app.get(path3, listRateLimit, handler);
@@ -47159,7 +47227,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
       app.get(path3, handler);
     }
   }
-  registerListRoute("/api/content", (c) => {
+  registerListRoute(paths.collection("content"), (c) => {
     const data = Object.values(registry2.content_types).map((ct2) => ({
       name: ct2.name,
       label: ct2.label,
@@ -47167,7 +47235,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
     }));
     return c.json({ ok: true, data });
   });
-  registerListRoute("/api/taxonomy", (c) => {
+  registerListRoute(paths.collection("taxonomy"), (c) => {
     const data = Object.values(registry2.taxonomy_types).map((tt2) => ({
       name: tt2.name,
       label: tt2.label
@@ -47186,7 +47254,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
       ...contentType.system_fields.map((f) => f.name)
     ]);
     if (contentType.only_one) {
-      app.get(`/api/${basePath}`, async (c) => {
+      app.get(paths.collection(basePath), async (c) => {
         const result = await repo.findMany({ published_only: true, page: 1, per_page: 1 });
         if (result.data.length === 0) {
           return c.json(
@@ -47194,12 +47262,14 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
             404
           );
         }
-        let data = result.data[0];
+        let data = projectRow(result.data[0], typeName, projectors);
         if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
         return c.json({ ok: true, data });
       });
     } else {
-      registerListRoute(`/api/${basePath}`, async (c) => {
+      registerListRoute(paths.collection(basePath), async (c) => {
+        const projector = projectors[typeName];
+        const fieldKeys = projector.map;
         const pagination = parsePagination(c.req.query("page"), c.req.query("per_page"));
         if (!pagination.ok) {
           return c.json(
@@ -47239,7 +47309,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
             400
           );
         }
-        const filtersResult = parseFilters(c.req.url, filterableFieldNames);
+        const filtersResult = parseFilters(c.req.url, filterableFieldNames, fieldKeys.columnFor);
         if (!filtersResult.ok) {
           return c.json(
             {
@@ -47267,22 +47337,23 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
             );
           }
         }
+        const sortColumn = fieldKeys.columnFor(sortBy) ?? sortBy;
         const result = await repo.findMany({
           published_only: true,
           page: pagination.page,
           per_page: pagination.per_page,
-          sort_by: sortBy,
+          sort_by: sortColumn,
           sort_order: sortOrder,
           filters: filtersResult.filters,
           include
         });
-        if (resolver?.hasSchema(typeName)) {
-          const resolved = await resolver.resolveList(typeName, result.data);
-          return c.json({ ...result, data: resolved });
-        }
-        return c.json(result);
+        const labeled = result.data.map(
+          (row) => projectRow(row, typeName, projectors)
+        );
+        const data = resolver?.hasSchema(typeName) ? await resolver.resolveList(typeName, labeled) : labeled;
+        return c.json({ ...result, data });
       });
-      app.get(`/api/${basePath}/:slug`, async (c) => {
+      app.get(paths.item(basePath), async (c) => {
         const slug = c.req.param("slug");
         const include = parseInclude(c.req.query("include"));
         for (const field of include) {
@@ -47309,7 +47380,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
             404
           );
         }
-        let data = item;
+        let data = projectRow(item, typeName, projectors);
         if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
         return c.json({ ok: true, data });
       });
@@ -47318,7 +47389,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
   for (const [typeName] of Object.entries(registry2.taxonomy_types)) {
     const repo = repos[typeName];
     if (!repo) continue;
-    registerListRoute(`/api/taxonomy/${typeName}`, async (c) => {
+    registerListRoute(paths.taxonomyCollection(typeName), async (c) => {
       const pagination = parsePagination(c.req.query("page"), c.req.query("per_page"));
       if (!pagination.ok) {
         return c.json(
@@ -47337,13 +47408,13 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
         page: pagination.page,
         per_page: pagination.per_page
       });
-      if (resolver?.hasSchema(typeName)) {
-        const resolved = await resolver.resolveList(typeName, result.data);
-        return c.json({ ...result, data: resolved });
-      }
-      return c.json(result);
+      const labeled = result.data.map(
+        (row) => projectRow(row, typeName, projectors)
+      );
+      const data = resolver?.hasSchema(typeName) ? await resolver.resolveList(typeName, labeled) : labeled;
+      return c.json({ ...result, data });
     });
-    app.get(`/api/taxonomy/${typeName}/:id`, async (c) => {
+    app.get(paths.taxonomyItem(typeName), async (c) => {
       const id = c.req.param("id");
       const item = await repo.findOne(id);
       if (!item || !isPublished(item)) {
@@ -47355,7 +47426,7 @@ function registerPublicContentRoutes(app, registry2, repos, listRateLimit, resol
           404
         );
       }
-      let data = item;
+      let data = projectRow(item, typeName, projectors);
       if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data);
       return c.json({ ok: true, data });
     });
@@ -47369,7 +47440,7 @@ function parsePagination2(pageStr, perPageStr) {
   if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false };
   return { ok: true, page, per_page };
 }
-function registerPublicMediaRoutes(app, mediaRepo, listRateLimit) {
+function registerPublicMediaRoutes(app, mediaRepo, paths, listRateLimit) {
   const mediaListHandler = async (c) => {
     const pagination = parsePagination2(c.req.query("page"), c.req.query("per_page"));
     if (!pagination.ok) {
@@ -47408,11 +47479,11 @@ function registerPublicMediaRoutes(app, mediaRepo, listRateLimit) {
     return c.json(result);
   };
   if (listRateLimit) {
-    app.get("/api/media", listRateLimit, mediaListHandler);
+    app.get(paths.mediaCollection(), listRateLimit, mediaListHandler);
   } else {
-    app.get("/api/media", mediaListHandler);
+    app.get(paths.mediaCollection(), mediaListHandler);
   }
-  app.get("/api/media/:id", async (c) => {
+  app.get(paths.mediaItem(), async (c) => {
     const id = c.req.param("id");
     const item = await mediaRepo.findOne(id);
     if (!item) {
@@ -47431,9 +47502,11 @@ function topLevelMediaDelta(mediaFields, before, after) {
   const added = [];
   const removed = [];
   for (const f of mediaFields) {
-    if (after !== null && !(f.name in after)) continue;
-    const oldId = before ? extractMediaId(before[f.name]) : null;
-    const newId = after ? extractMediaId(after[f.name]) : null;
+    const key = f.db_column?.column_name;
+    if (key === void 0 || key === "") continue;
+    if (after !== null && !(key in after)) continue;
+    const oldId = before ? extractMediaId(before[key]) : null;
+    const newId = after ? extractMediaId(after[key]) : null;
     if (newId === oldId) continue;
     if (oldId) removed.push(oldId);
     if (newId) added.push(newId);
@@ -47491,7 +47564,7 @@ function isEmpty(value) {
 function checkRequiredFields(fields, data) {
   return fields.filter((f) => f.required && isEmpty(data[f.name])).map((f) => ({ field: f.name, message: `${f.label} is required` }));
 }
-function parseListQuery(url2, schemaFieldNames, relationFieldNames) {
+function parseListQuery(url2, schemaFieldNames, relationFieldNames, columnFor) {
   const searchParams = new URL(url2).searchParams;
   const pagination = parsePagination(
     searchParams.get("page") ?? void 0,
@@ -47526,7 +47599,7 @@ function parseListQuery(url2, schemaFieldNames, relationFieldNames) {
       status: 400
     };
   }
-  const filtersResult = parseFilters(url2, schemaFieldNames);
+  const filtersResult = parseFilters(url2, schemaFieldNames, columnFor);
   if (!filtersResult.ok) {
     return {
       ok: false,
@@ -47558,7 +47631,7 @@ function parseListQuery(url2, schemaFieldNames, relationFieldNames) {
     search
   };
 }
-function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePermission, db) {
+function registerAdminContentRoutes(app, registry2, repos, projectors, mediaRepo, requirePermission, db) {
   for (const [typeName, contentType] of Object.entries(registry2.content_types)) {
     const basePath = `content/${typeName}`;
     const repo = repos[typeName];
@@ -47570,6 +47643,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
     const relationFieldNames = new Set(
       contentType.fields.filter((f) => RELATION_FIELD_TYPES.has(f.field_type)).map((f) => f.name)
     );
+    const projector = projectors[typeName];
+    const fieldKeys = projector.map;
     const requiredFields = contentType.fields.filter((f) => f.required);
     const mediaFields = contentType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
@@ -47583,17 +47658,18 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       `/admin/api/${basePath}`,
       requirePermission("content:read"),
       async (c) => {
-        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames);
+        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor);
         if (!parsed.ok) {
           return c.json({ ok: false, error: parsed.response }, parsed.status);
         }
         const publishedParam = c.req.query("published");
         const extraFilters = {};
         if (publishedParam === "false") extraFilters["published"] = false;
+        const sortColumn = fieldKeys.columnFor(parsed.sortBy) ?? parsed.sortBy;
         const findOpts = {
           page: parsed.pagination.page,
           per_page: parsed.pagination.per_page,
-          sort_by: parsed.sortBy,
+          sort_by: sortColumn,
           sort_order: parsed.sortOrder,
           filters: { ...parsed.filters, ...extraFilters },
           include: parsed.include
@@ -47603,7 +47679,10 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           findOpts.search = { term: parsed.search, columns: searchableColumns };
         }
         const result = await repo.findMany(findOpts);
-        return c.json(result);
+        const data = result.data.map(
+          (row) => projectRow(row, typeName, projectors)
+        );
+        return c.json({ ...result, data });
       }
     );
     app.get(
@@ -47638,7 +47717,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             }
           }
         }
-        return c.json({ ok: true, data: item });
+        const data = projectRow(item, typeName, projectors);
+        return c.json({ ok: true, data });
       }
     );
     app.post(
@@ -47705,6 +47785,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       }
     );
     const writeNewItem = async (c, body) => {
+      const storageBody = fieldKeys.toStorage(body);
       const fieldErrors = checkRequiredFields(requiredFields, body);
       if (fieldErrors.length > 0) {
         return c.json(
@@ -47728,9 +47809,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       const junctionFields = contentType.fields.filter(
         (f) => f.db_column !== null && f.db_column.junction !== void 0
       );
-      const columnFields = contentType.fields.filter(
-        (f) => f.db_column !== null && f.db_column.junction === void 0
-      );
+      const columnBackedFields = contentType.fields.filter(isColumnBacked);
       const columnData = {
         published: body["published"] ?? false
       };
@@ -47739,9 +47818,10 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       } else {
         columnData["slug"] = body["slug"];
       }
-      for (const f of columnFields) {
-        const val = body[f.name];
-        columnData[f.db_column.column_name] = val !== void 0 ? val : null;
+      for (const f of columnBackedFields) {
+        const key = f.db_column.column_name;
+        if (!(key in storageBody)) continue;
+        columnData[key] = storageBody[key];
       }
       if (db) {
         const basePathId = await lookupBasePathId(db, contentType.default_base_path);
@@ -47761,7 +47841,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       }
       const item = await repo.create(columnData);
       const itemId = item["id"];
-      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, storageBody)];
       if (db) {
         for (const f of paragraphFields) {
           const comp = f.ui_component;
@@ -47778,7 +47858,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
         }
       }
       await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-      return c.json({ ok: true, data: item }, 201);
+      const data = projectRow(item, typeName, projectors);
+      return c.json({ ok: true, data }, 201);
     };
     app.patch(
       `/admin/api/${basePath}/:id`,
@@ -47838,11 +47919,12 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       }
     );
     const writeExistingItem = async (c, id, existing, body) => {
+      const storageBody = fieldKeys.toStorage(body);
       if (body["published"] === true) {
         const publishDeny = await requirePermission("content:edit")(c, async () => {
         });
         if (publishDeny) return publishDeny;
-        const merged = { ...existing, ...body };
+        const merged = { ...fieldKeys.toLabels(existing), ...body };
         const fieldErrors = checkRequiredFields(requiredFields, merged);
         if (fieldErrors.length > 0) {
           return c.json(
@@ -47862,17 +47944,14 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       const patchJunctionFields = contentType.fields.filter(
         (f) => f.db_column !== null && f.db_column.junction !== void 0
       );
-      const patchColumnFields = contentType.fields.filter(
-        (f) => f.db_column !== null && f.db_column.junction === void 0
-      );
+      const patchColumnBackedFields = contentType.fields.filter(isColumnBacked);
       const patchData = {};
       if (!contentType.only_one && "slug" in body) patchData["slug"] = body["slug"];
       if ("published" in body) patchData["published"] = body["published"];
-      for (const f of patchColumnFields) {
-        if (f.name in body) {
-          const val = body[f.name];
-          patchData[f.db_column.column_name] = val !== void 0 ? val : null;
-        }
+      for (const f of patchColumnBackedFields) {
+        const key = f.db_column.column_name;
+        if (!(key in storageBody)) continue;
+        patchData[key] = storageBody[key];
       }
       const updated = await repo.update(id, patchData);
       if (!updated) {
@@ -47882,7 +47961,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
         );
       }
       const mediaDeltas = [
-        topLevelMediaDelta(mediaFields, existing, body)
+        topLevelMediaDelta(mediaFields, existing, storageBody)
       ];
       if (db) {
         for (const f of patchParagraphFields) {
@@ -47900,7 +47979,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
         }
       }
       await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-      return c.json({ ok: true, data: updated });
+      const data = projectRow(updated, typeName, projectors);
+      return c.json({ ok: true, data });
     };
     if (contentType.only_one) {
       app.put(
@@ -47960,6 +48040,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
     const relationFieldNames = new Set(
       taxonomyType.fields.filter((f) => RELATION_FIELD_TYPES.has(f.field_type)).map((f) => f.name)
     );
+    const projector = projectors[typeName];
+    const fieldKeys = projector.map;
     const requiredFields = taxonomyType.fields.filter((f) => f.required);
     const mediaFields = taxonomyType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
@@ -47973,17 +48055,18 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       `/admin/api/taxonomy/${typeName}`,
       requirePermission("content:read"),
       async (c) => {
-        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames);
+        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor);
         if (!parsed.ok) {
           return c.json({ ok: false, error: parsed.response }, parsed.status);
         }
         const publishedParam = c.req.query("published");
         const extraFilters = {};
         if (publishedParam === "false") extraFilters["published"] = false;
+        const sortColumn = fieldKeys.columnFor(parsed.sortBy) ?? parsed.sortBy;
         const findOpts = {
           page: parsed.pagination.page,
           per_page: parsed.pagination.per_page,
-          sort_by: parsed.sortBy,
+          sort_by: sortColumn,
           sort_order: parsed.sortOrder,
           filters: { ...parsed.filters, ...extraFilters },
           include: parsed.include
@@ -47993,7 +48076,10 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           findOpts.search = { term: parsed.search, columns: searchableColumns };
         }
         const result = await repo.findMany(findOpts);
-        return c.json(result);
+        const data = result.data.map(
+          (row) => projectRow(row, typeName, projectors)
+        );
+        return c.json({ ...result, data });
       }
     );
     app.get(
@@ -48008,7 +48094,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             404
           );
         }
-        return c.json({ ok: true, data: item });
+        const data = projectRow(item, typeName, projectors);
+        return c.json({ ok: true, data });
       }
     );
     app.post(
@@ -48016,6 +48103,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       requirePermission("content:create"),
       async (c) => {
         const body = await c.req.json();
+        const storageBody = fieldKeys.toStorage(body);
         const fieldErrors = checkRequiredFields(requiredFields, body);
         if (fieldErrors.length > 0) {
           return c.json(
@@ -48035,20 +48123,19 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           });
           if (publishDeny) return publishDeny;
         }
-        const taxColumnFields = taxonomyType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
         const taxParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null);
+        const taxColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxColumnData = {
           published: body["published"] ?? false
         };
-        for (const f of taxColumnFields) {
-          const val = body[f.name];
-          taxColumnData[f.db_column.column_name] = val !== void 0 ? val : null;
+        for (const f of taxColumnBackedFields) {
+          const key = f.db_column.column_name;
+          if (!(key in storageBody)) continue;
+          taxColumnData[key] = storageBody[key];
         }
         const item = await repo.create(taxColumnData);
         const taxItemId = item["id"];
-        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, storageBody)];
         if (db) {
           for (const f of taxParagraphFields) {
             const comp = f.ui_component;
@@ -48060,7 +48147,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: item }, 201);
+        const data = projectRow(item, typeName, projectors);
+        return c.json({ ok: true, data }, 201);
       }
     );
     app.patch(
@@ -48069,6 +48157,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
       async (c) => {
         const id = c.req.param("id");
         const body = await c.req.json();
+        const storageBody = fieldKeys.toStorage(body);
         const existing = await repo.findOne(id);
         if (!existing) {
           return c.json(
@@ -48080,7 +48169,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           const publishDeny = await requirePermission("content:edit")(c, async () => {
           });
           if (publishDeny) return publishDeny;
-          const merged = { ...existing, ...body };
+          const merged = { ...fieldKeys.toLabels(existing), ...body };
           const fieldErrors = checkRequiredFields(requiredFields, merged);
           if (fieldErrors.length > 0) {
             return c.json(
@@ -48096,17 +48185,14 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             );
           }
         }
-        const taxPatchColumnFields = taxonomyType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
         const taxPatchParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null);
+        const taxPatchColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxPatchData = {};
         if ("published" in body) taxPatchData["published"] = body["published"];
-        for (const f of taxPatchColumnFields) {
-          if (f.name in body) {
-            const val = body[f.name];
-            taxPatchData[f.db_column.column_name] = val !== void 0 ? val : null;
-          }
+        for (const f of taxPatchColumnBackedFields) {
+          const key = f.db_column.column_name;
+          if (!(key in storageBody)) continue;
+          taxPatchData[key] = storageBody[key];
         }
         const updated = await repo.update(id, taxPatchData);
         if (!updated) {
@@ -48116,7 +48202,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           );
         }
         const mediaDeltas = [
-          topLevelMediaDelta(mediaFields, existing, body)
+          topLevelMediaDelta(mediaFields, existing, storageBody)
         ];
         if (db) {
           for (const f of taxPatchParagraphFields) {
@@ -48129,7 +48215,8 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: updated });
+        const data = projectRow(updated, typeName, projectors);
+        return c.json({ ok: true, data });
       }
     );
     app.delete(
@@ -49102,7 +49189,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 }
 var API_VERSION = (() => {
   try {
-    return "0.3.3";
+    return "0.4.1";
   } catch {
     return "0.0.0";
   }
@@ -49257,7 +49344,7 @@ function whereFragment(conds) {
   return conds.length > 0 ? sql` WHERE ${sql.join(conds, sql` AND `)}` : sql``;
 }
 function createDrizzleContentRepository(db, tableName, options = {}) {
-  const { relations = {}, publishedRelations = false } = options;
+  const { relations = {}, publishedRelations = false, sortableColumns } = options;
   function tableRaw() {
     return sql.raw(quoteIdent2(tableName));
   }
@@ -49295,8 +49382,9 @@ function createDrizzleContentRepository(db, tableName, options = {}) {
         sort_order = "asc",
         search
       } = opts;
-      if (!SORTABLE_FIELDS2.has(sort_by)) {
-        throw codeError("INVALID_SORT_FIELD", `'${sort_by}' is not sortable. Allowed: title, created_at, updated_at`);
+      const allowed = sortableColumns ?? SORTABLE_FIELDS2;
+      if (!allowed.has(sort_by)) {
+        throw codeError("INVALID_SORT_FIELD", `'${sort_by}' is not sortable.`);
       }
       const offset = (page - 1) * per_page;
       const conds = buildConditions(published_only, filters, search);
@@ -49500,7 +49588,8 @@ function createCmsApp(options) {
   if (!options.storage) {
     throw new Error(MISSING_STORAGE_ERROR);
   }
-  const prefix = options.prefix ?? "/api";
+  const prefix = normalizePrefix(options.prefix);
+  const publicPaths = createPublicPaths(prefix);
   const { storage, registry: registry2, db, rateLimit, media, cors } = options;
   const cmsName = options.name ?? "Manguito CMS";
   const maxFileSize = media?.max_file_size;
@@ -49534,16 +49623,38 @@ function createCmsApp(options) {
     return result.rows[0]?.role ?? null;
   };
   const requireHierarchy = createHierarchyMiddleware(rolesRegistry, getUserRole);
+  const fieldKeyMaps = Object.fromEntries([
+    ...Object.entries(registry2.content_types).map(([typeName, ct2]) => [
+      typeName,
+      createFieldKeyMap(ct2.fields)
+    ]),
+    ...Object.entries(registry2.taxonomy_types).map(([typeName, tt2]) => [
+      typeName,
+      createFieldKeyMap(tt2.fields)
+    ]),
+    ...Object.entries(registry2.paragraph_types).map(([typeName, pt]) => [
+      typeName,
+      createFieldKeyMap(pt.fields)
+    ])
+  ]);
+  const projectors = buildProjectors(registry2, fieldKeyMaps);
+  const sortableColumnsFor = (typeName) => new Set(
+    [...SORTABLE_FIELDS].map((label) => fieldKeyMaps[typeName].columnFor(label) ?? label)
+  );
   const contentRepos = Object.fromEntries(
     Object.entries(registry2.content_types).map(([typeName, ct2]) => [
       typeName,
-      createDrizzleContentRepository(db, ct2.db.table_name)
+      createDrizzleContentRepository(db, ct2.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ])
   );
   const taxonomyRepos = Object.fromEntries(
     Object.entries(registry2.taxonomy_types).map(([typeName, tt2]) => [
       typeName,
-      createDrizzleContentRepository(db, tt2.db.table_name)
+      createDrizzleContentRepository(db, tt2.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ])
   );
   const repos = { ...contentRepos, ...taxonomyRepos };
@@ -49553,7 +49664,8 @@ function createCmsApp(options) {
       typeName,
       createDrizzleContentRepository(db, ct2.db.table_name, {
         relations: buildRelationsMap(ct2.fields, registry2),
-        publishedRelations: true
+        publishedRelations: true,
+        sortableColumns: sortableColumnsFor(typeName)
       })
     ])
   );
@@ -49562,7 +49674,8 @@ function createCmsApp(options) {
       typeName,
       createDrizzleContentRepository(db, tt2.db.table_name, {
         relations: buildRelationsMap(tt2.fields, registry2),
-        publishedRelations: true
+        publishedRelations: true,
+        sortableColumns: sortableColumnsFor(typeName)
       })
     ])
   );
@@ -49570,33 +49683,41 @@ function createCmsApp(options) {
   const graphqlRepos = Object.fromEntries([
     ...Object.entries(registry2.content_types).map(([typeName, ct2]) => [
       typeName,
-      createDrizzleContentRepository(db, ct2.db.table_name)
+      createDrizzleContentRepository(db, ct2.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ]),
     ...Object.entries(registry2.taxonomy_types).map(([typeName, tt2]) => [
       typeName,
-      createDrizzleContentRepository(db, tt2.db.table_name)
+      createDrizzleContentRepository(db, tt2.db.table_name, {
+        sortableColumns: sortableColumnsFor(typeName)
+      })
     ])
   ]);
   registerAuthRoutes(app, db);
   app.use("/admin/api/*", authMiddleware);
   app.use("/admin/api/*", mustChangePasswordCheck);
-  app.get("/api/openapi.json", (c) => {
+  app.get(publicPaths.openapi(), (c) => {
     const paths = {};
     for (const ct2 of Object.values(registry2.content_types)) {
       const base = ct2.default_base_path;
       if (ct2.only_one) {
-        paths[`/api/${base}`] = { get: { summary: `Get ${ct2.label}`, tags: [ct2.label] } };
+        paths[publicPaths.collection(base)] = { get: { summary: `Get ${ct2.label}`, tags: [ct2.label] } };
       } else {
-        paths[`/api/${base}`] = { get: { summary: `List published ${ct2.label}`, tags: [ct2.label] } };
-        paths[`/api/${base}/{slug}`] = { get: { summary: `Get ${ct2.label} by slug`, tags: [ct2.label] } };
+        paths[publicPaths.collection(base)] = { get: { summary: `List published ${ct2.label}`, tags: [ct2.label] } };
+        paths[publicPaths.item(base).replace(":slug", "{slug}")] = {
+          get: { summary: `Get ${ct2.label} by slug`, tags: [ct2.label] }
+        };
       }
     }
     for (const tt2 of Object.values(registry2.taxonomy_types)) {
-      paths[`/api/taxonomy/${tt2.name}`] = { get: { summary: `List published ${tt2.label}`, tags: [tt2.label] } };
-      paths[`/api/taxonomy/${tt2.name}/{id}`] = { get: { summary: `Get ${tt2.label} by id`, tags: [tt2.label] } };
+      paths[publicPaths.taxonomyCollection(tt2.name)] = { get: { summary: `List published ${tt2.label}`, tags: [tt2.label] } };
+      paths[publicPaths.taxonomyItem(tt2.name).replace(":id", "{id}")] = {
+        get: { summary: `Get ${tt2.label} by id`, tags: [tt2.label] }
+      };
     }
-    paths["/api/media"] = { get: { summary: "List media items", tags: ["Media"] } };
-    paths["/api/media/{id}"] = { get: { summary: "Get media item by id", tags: ["Media"] } };
+    paths[publicPaths.mediaCollection()] = { get: { summary: "List media items", tags: ["Media"] } };
+    paths[publicPaths.mediaItem().replace(":id", "{id}")] = { get: { summary: "Get media item by id", tags: ["Media"] } };
     return c.json({
       openapi: "3.0.3",
       info: { title: "Manguito CMS Public API", version: "1.0.0" },
@@ -49611,14 +49732,14 @@ function createCmsApp(options) {
       paths: {}
     })
   );
-  registerPublicContentRoutes(app, registry2, publicRepos, listRateLimit, programmaticResolver);
-  registerPublicMediaRoutes(app, mediaRepo, listRateLimit);
+  registerPublicContentRoutes(app, registry2, publicRepos, projectors, publicPaths, listRateLimit, programmaticResolver);
+  registerPublicMediaRoutes(app, mediaRepo, publicPaths, listRateLimit);
   if (options.graphql?.enabled) {
     const gqlOptions = options.graphql;
     let gqlHandler = null;
     let initError = null;
-    const ready = import("./handler-CGHZG3J5-TCG6K3FE.js").then(({ createGraphQLHandler }) => {
-      gqlHandler = createGraphQLHandler(registry2, graphqlRepos, programmaticResolver, db, gqlOptions);
+    const ready = import("./handler-7LVYEU5C-ZAJVEGKT.js").then(({ createGraphQLHandler }) => {
+      gqlHandler = createGraphQLHandler(registry2, graphqlRepos, fieldKeyMaps, programmaticResolver, db, gqlOptions);
     }).catch((err) => {
       initError = err;
       const message = err instanceof Error ? err.message : String(err);
@@ -49658,7 +49779,7 @@ function createCmsApp(options) {
   );
   registerSchemaRoute(app, registry2, db);
   registerUserRoutes(app, db, requirePermission, requireHierarchy);
-  registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePermission, db);
+  registerAdminContentRoutes(app, registry2, repos, projectors, mediaRepo, requirePermission, db);
   registerAdminMediaRoutes(app, mediaRepo, storage, requirePermission, maxFileSize);
   return { prefix, app };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobbykim/manguito-cms-cli",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "license": "MIT",
   "author": "Bobby Kim <bobby.sihun.kim@gmail.com>",
   "homepage": "https://github.com/bobbykim89/manguito-cms",
@@ -32,7 +32,7 @@
     "@bobbykim/manguito-cms-admin": "0.4.0",
     "@bobbykim/manguito-cms-core": "0.3.0",
     "@bobbykim/manguito-cms-db": "0.1.3",
-    "@bobbykim/manguito-cms-api": "0.3.3"
+    "@bobbykim/manguito-cms-api": "0.4.1"
   },
   "devDependencies": {
     "@types/node": "^25.9.5",