npm - @intranefr/superbackend - Versions diffs - 1.4.4 → 1.5.1 - Mend

@intranefr/superbackend 1.4.4 → 1.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (195) hide show

package/.env.example +5 -0
package/README.md +11 -0
package/index.js +39 -1
package/package.json +11 -3
package/public/sdk/ui-components.iife.js +191 -0
package/sdk/ui-components/browser/src/index.js +228 -0
package/src/admin/endpointRegistry.js +120 -0
package/src/controllers/admin.controller.js +111 -5
package/src/controllers/adminBlockDefinitions.controller.js +127 -0
package/src/controllers/adminBlockDefinitionsAi.controller.js +54 -0
package/src/controllers/adminCache.controller.js +342 -0
package/src/controllers/adminContextBlockDefinitions.controller.js +141 -0
package/src/controllers/adminCrons.controller.js +388 -0
package/src/controllers/adminDbBrowser.controller.js +124 -0
package/src/controllers/adminEjsVirtual.controller.js +13 -3
package/src/controllers/adminHeadless.controller.js +91 -2
package/src/controllers/adminHealthChecks.controller.js +570 -0
package/src/controllers/adminI18n.controller.js +51 -29
package/src/controllers/adminLlm.controller.js +126 -2
package/src/controllers/adminPages.controller.js +720 -0
package/src/controllers/adminPagesContextBlocksAi.controller.js +54 -0
package/src/controllers/adminProxy.controller.js +113 -0
package/src/controllers/adminRateLimits.controller.js +138 -0
package/src/controllers/adminRbac.controller.js +803 -0
package/src/controllers/adminScripts.controller.js +320 -0
package/src/controllers/adminSeoConfig.controller.js +71 -48
package/src/controllers/adminTerminals.controller.js +39 -0
package/src/controllers/adminUiComponents.controller.js +315 -0
package/src/controllers/adminUiComponentsAi.controller.js +34 -0
package/src/controllers/blogAdmin.controller.js +279 -0
package/src/controllers/blogAiAdmin.controller.js +224 -0
package/src/controllers/blogAutomationAdmin.controller.js +141 -0
package/src/controllers/blogInternal.controller.js +26 -0
package/src/controllers/blogPublic.controller.js +89 -0
package/src/controllers/fileManager.controller.js +190 -0
package/src/controllers/fileManagerStoragePolicy.controller.js +23 -0
package/src/controllers/healthChecksPublic.controller.js +196 -0
package/src/controllers/metrics.controller.js +64 -4
package/src/controllers/orgAdmin.controller.js +366 -0
package/src/controllers/uiComponentsPublic.controller.js +118 -0
package/src/middleware/auth.js +7 -0
package/src/middleware/internalCronAuth.js +29 -0
package/src/middleware/rbac.js +62 -0
package/src/middleware.js +879 -56
package/src/models/BlockDefinition.js +27 -0
package/src/models/BlogAutomationLock.js +14 -0
package/src/models/BlogAutomationRun.js +39 -0
package/src/models/BlogPost.js +42 -0
package/src/models/CacheEntry.js +26 -0
package/src/models/ConsoleEntry.js +32 -0
package/src/models/ConsoleLog.js +23 -0
package/src/models/ContextBlockDefinition.js +33 -0
package/src/models/CronExecution.js +47 -0
package/src/models/CronJob.js +70 -0
package/src/models/ExternalDbConnection.js +49 -0
package/src/models/FileEntry.js +22 -0
package/src/models/HeadlessModelDefinition.js +10 -0
package/src/models/HealthAutoHealAttempt.js +57 -0
package/src/models/HealthCheck.js +132 -0
package/src/models/HealthCheckRun.js +51 -0
package/src/models/HealthIncident.js +49 -0
package/src/models/Page.js +95 -0
package/src/models/PageCollection.js +42 -0
package/src/models/ProxyEntry.js +66 -0
package/src/models/RateLimitCounter.js +19 -0
package/src/models/RateLimitMetricBucket.js +20 -0
package/src/models/RbacGrant.js +25 -0
package/src/models/RbacGroup.js +16 -0
package/src/models/RbacGroupMember.js +13 -0
package/src/models/RbacGroupRole.js +13 -0
package/src/models/RbacRole.js +25 -0
package/src/models/RbacUserRole.js +13 -0
package/src/models/ScriptDefinition.js +42 -0
package/src/models/ScriptRun.js +22 -0
package/src/models/UiComponent.js +29 -0
package/src/models/UiComponentProject.js +26 -0
package/src/models/UiComponentProjectComponent.js +18 -0
package/src/routes/admin.routes.js +1 -0
package/src/routes/adminBlog.routes.js +21 -0
package/src/routes/adminBlogAi.routes.js +16 -0
package/src/routes/adminBlogAutomation.routes.js +27 -0
package/src/routes/adminCache.routes.js +20 -0
package/src/routes/adminConsoleManager.routes.js +302 -0
package/src/routes/adminCrons.routes.js +25 -0
package/src/routes/adminDbBrowser.routes.js +65 -0
package/src/routes/adminEjsVirtual.routes.js +2 -1
package/src/routes/adminHeadless.routes.js +8 -1
package/src/routes/adminHealthChecks.routes.js +28 -0
package/src/routes/adminI18n.routes.js +4 -3
package/src/routes/adminLlm.routes.js +4 -2
package/src/routes/adminPages.routes.js +55 -0
package/src/routes/adminProxy.routes.js +15 -0
package/src/routes/adminRateLimits.routes.js +17 -0
package/src/routes/adminRbac.routes.js +38 -0
package/src/routes/adminScripts.routes.js +21 -0
package/src/routes/adminSeoConfig.routes.js +5 -4
package/src/routes/adminTerminals.routes.js +13 -0
package/src/routes/adminUiComponents.routes.js +30 -0
package/src/routes/blogInternal.routes.js +14 -0
package/src/routes/blogPublic.routes.js +9 -0
package/src/routes/fileManager.routes.js +62 -0
package/src/routes/fileManagerStoragePolicy.routes.js +9 -0
package/src/routes/healthChecksPublic.routes.js +9 -0
package/src/routes/log.routes.js +43 -60
package/src/routes/metrics.routes.js +4 -2
package/src/routes/orgAdmin.routes.js +6 -0
package/src/routes/pages.routes.js +123 -0
package/src/routes/proxy.routes.js +46 -0
package/src/routes/rbac.routes.js +47 -0
package/src/routes/uiComponentsPublic.routes.js +9 -0
package/src/routes/webhook.routes.js +2 -1
package/src/routes/workflows.routes.js +4 -0
package/src/services/blockDefinitionsAi.service.js +247 -0
package/src/services/blog.service.js +99 -0
package/src/services/blogAutomation.service.js +978 -0
package/src/services/blogCronsBootstrap.service.js +184 -0
package/src/services/blogPublishing.service.js +58 -0
package/src/services/cacheLayer.service.js +696 -0
package/src/services/consoleManager.service.js +700 -0
package/src/services/consoleOverride.service.js +6 -1
package/src/services/cronScheduler.service.js +350 -0
package/src/services/dbBrowser.service.js +536 -0
package/src/services/ejsVirtual.service.js +102 -32
package/src/services/fileManager.service.js +475 -0
package/src/services/fileManagerStoragePolicy.service.js +285 -0
package/src/services/headlessExternalModels.service.js +292 -0
package/src/services/headlessModels.service.js +26 -6
package/src/services/healthChecks.service.js +650 -0
package/src/services/healthChecksBootstrap.service.js +109 -0
package/src/services/healthChecksScheduler.service.js +106 -0
package/src/services/llmDefaults.service.js +190 -0
package/src/services/migrationAssets/s3.js +2 -2
package/src/services/pages.service.js +602 -0
package/src/services/pagesContext.service.js +331 -0
package/src/services/pagesContextBlocksAi.service.js +349 -0
package/src/services/proxy.service.js +535 -0
package/src/services/rateLimiter.service.js +623 -0
package/src/services/rbac.service.js +212 -0
package/src/services/scriptsRunner.service.js +259 -0
package/src/services/terminals.service.js +152 -0
package/src/services/terminalsWs.service.js +100 -0
package/src/services/uiComponentsAi.service.js +299 -0
package/src/services/uiComponentsCrypto.service.js +39 -0
package/src/services/workflow.service.js +23 -8
package/src/utils/orgRoles.js +14 -0
package/src/utils/rbac/engine.js +60 -0
package/src/utils/rbac/rightsRegistry.js +29 -0
package/views/admin-blog-automation.ejs +877 -0
package/views/admin-blog-edit.ejs +542 -0
package/views/admin-blog.ejs +399 -0
package/views/admin-cache.ejs +681 -0
package/views/admin-console-manager.ejs +680 -0
package/views/admin-crons.ejs +645 -0
package/views/admin-db-browser.ejs +445 -0
package/views/admin-ejs-virtual.ejs +16 -10
package/views/admin-file-manager.ejs +942 -0
package/views/admin-headless.ejs +294 -24
package/views/admin-health-checks.ejs +725 -0
package/views/admin-i18n.ejs +59 -5
package/views/admin-llm.ejs +99 -1
package/views/admin-organizations.ejs +528 -10
package/views/admin-pages.ejs +2424 -0
package/views/admin-proxy.ejs +491 -0
package/views/admin-rate-limiter.ejs +625 -0
package/views/admin-rbac.ejs +1331 -0
package/views/admin-scripts.ejs +497 -0
package/views/admin-seo-config.ejs +61 -7
package/views/admin-terminals.ejs +328 -0
package/views/admin-ui-components.ejs +741 -0
package/views/admin-users.ejs +261 -4
package/views/admin-workflows.ejs +7 -7
package/views/file-manager.ejs +866 -0
package/views/pages/blocks/contact.ejs +27 -0
package/views/pages/blocks/cta.ejs +18 -0
package/views/pages/blocks/faq.ejs +20 -0
package/views/pages/blocks/features.ejs +19 -0
package/views/pages/blocks/hero.ejs +13 -0
package/views/pages/blocks/html.ejs +5 -0
package/views/pages/blocks/image.ejs +14 -0
package/views/pages/blocks/testimonials.ejs +26 -0
package/views/pages/blocks/text.ejs +10 -0
package/views/pages/layouts/default.ejs +51 -0
package/views/pages/layouts/minimal.ejs +42 -0
package/views/pages/layouts/sidebar.ejs +54 -0
package/views/pages/partials/footer.ejs +13 -0
package/views/pages/partials/header.ejs +12 -0
package/views/pages/partials/sidebar.ejs +8 -0
package/views/pages/runtime/page.ejs +10 -0
package/views/pages/templates/article.ejs +20 -0
package/views/pages/templates/default.ejs +12 -0
package/views/pages/templates/landing.ejs +14 -0
package/views/pages/templates/listing.ejs +15 -0
package/views/partials/admin-image-upload-modal.ejs +221 -0
package/views/partials/dashboard/nav-items.ejs +14 -0
package/views/partials/llm-provider-model-picker.ejs +183 -0

package/views/admin-blog-edit.ejs ADDED Viewed

@@ -0,0 +1,542 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Blog Post - Admin</title>
+  <script src="https://cdn.tailwindcss.com"></script>
+  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@tabler/icons-webfont@latest/tabler-icons.min.css">
+  <style>
+    .toast { animation: slideIn 0.3s ease-out; }
+    @keyframes slideIn { from { transform: translateX(100%); opacity: 0; } to { transform: translateX(0); opacity: 1; } }
+    .fade-out { animation: fadeOut 0.3s ease-out forwards; }
+    @keyframes fadeOut { from { opacity: 1; } to { opacity: 0; } }
+  </style>
+</head>
+<body class="bg-gray-100">
+  <div class="min-h-screen">
+    <div class="bg-white shadow">
+      <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-4">
+        <div class="flex items-center justify-between">
+          <div>
+            <h1 id="page-title" class="text-2xl font-bold text-gray-900">Blog Post</h1>
+            <p id="page-subtitle" class="text-sm text-gray-600 mt-1">-</p>
+          </div>
+          <div class="flex items-center gap-2 flex-wrap">
+            <a href="<%= adminPath %>/blog?tab=posts" class="bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200">
+              <i class="ti ti-arrow-left mr-1"></i>Back
+            </a>
+            <button id="btn-save" class="bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600">
+              <i class="ti ti-device-floppy mr-2"></i>Save
+            </button>
+            <button id="btn-publish" class="bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600 hidden">
+              <i class="ti ti-world mr-2"></i>Publish
+            </button>
+            <button id="btn-unpublish" class="bg-orange-500 text-white px-4 py-2 rounded hover:bg-orange-600 hidden">
+              <i class="ti ti-eye-off mr-2"></i>Unpublish
+            </button>
+            <button id="btn-archive" class="bg-red-500 text-white px-4 py-2 rounded hover:bg-red-600 hidden">
+              <i class="ti ti-archive mr-2"></i>Archive
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+    <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
+      <div class="grid grid-cols-1 lg:grid-cols-3 gap-6">
+        <div class="lg:col-span-2 space-y-6">
+          <div class="bg-white rounded-lg shadow p-6">
+            <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
+              <div class="md:col-span-2">
+                <label class="block text-sm font-medium text-gray-700 mb-1">Title</label>
+                <input id="field-title" type="text" class="w-full border rounded px-3 py-2" placeholder="Post title" />
+              </div>
+              <div class="md:col-span-2">
+                <label class="block text-sm font-medium text-gray-700 mb-1">Slug</label>
+                <input id="field-slug" type="text" class="w-full border rounded px-3 py-2" placeholder="post-slug" />
+              </div>
+              <div class="md:col-span-2">
+                <label class="block text-sm font-medium text-gray-700 mb-1">Excerpt</label>
+                <textarea id="field-excerpt" class="w-full border rounded px-3 py-2" rows="3" placeholder="Short excerpt..."></textarea>
+              </div>
+            </div>
+          </div>
+          <div class="bg-white rounded-lg shadow p-6">
+            <div class="flex items-center justify-between mb-2">
+              <label class="block text-sm font-medium text-gray-700">Markdown</label>
+              <div class="flex gap-2">
+                <button id="btn-ai-format" class="bg-gray-100 text-gray-800 px-3 py-1.5 rounded hover:bg-gray-200 text-sm">
+                  Format
+                </button>
+                <button id="btn-ai-refine" class="bg-gray-100 text-gray-800 px-3 py-1.5 rounded hover:bg-gray-200 text-sm">
+                  Refine
+                </button>
+              </div>
+            </div>
+            <textarea id="field-markdown" class="w-full border rounded px-3 py-2 font-mono text-sm" rows="18" placeholder="# Hello world"></textarea>
+          </div>
+          <div class="bg-white rounded-lg shadow p-6">
+            <label class="block text-sm font-medium text-gray-700 mb-1">HTML (optional)</label>
+            <textarea id="field-html" class="w-full border rounded px-3 py-2 font-mono text-sm" rows="10" placeholder="<p>Rendered html...</p>"></textarea>
+          </div>
+        </div>
+        <div class="space-y-6">
+          <div class="bg-white rounded-lg shadow p-6">
+            <div class="grid grid-cols-1 gap-4">
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Status</label>
+                <div id="status-badge" class="text-sm text-gray-600">-</div>
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Scheduled At</label>
+                <input id="field-scheduledAt" type="datetime-local" class="w-full border rounded px-3 py-2" />
+                <button id="btn-schedule" class="mt-2 bg-blue-500 text-white px-3 py-2 rounded hover:bg-blue-600 w-full">
+                  Schedule
+                </button>
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Category</label>
+                <input id="field-category" type="text" class="w-full border rounded px-3 py-2" placeholder="category" />
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Tags (comma-separated)</label>
+                <input id="field-tags" type="text" class="w-full border rounded px-3 py-2" placeholder="tag1, tag2" />
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Author</label>
+                <input id="field-authorName" type="text" class="w-full border rounded px-3 py-2" placeholder="Author Name" />
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Cover Image URL</label>
+                <div class="flex gap-2">
+                  <input id="field-coverImageUrl" type="text" class="flex-1 border rounded px-3 py-2" placeholder="/public/assets/..." />
+                  <button id="btn-upload-cover" class="bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200">
+                    Upload
+                  </button>
+                </div>
+                <div id="cover-preview" class="mt-3 hidden">
+                  <img id="cover-preview-img" class="w-full rounded border" alt="Cover preview" />
+                </div>
+              </div>
+            </div>
+          </div>
+          <div class="bg-white rounded-lg shadow p-6">
+            <div class="flex items-center justify-between mb-2">
+              <h3 class="text-sm font-semibold text-gray-900">SEO</h3>
+              <button id="btn-ai-generate-all" class="bg-gray-100 text-gray-800 px-3 py-1.5 rounded hover:bg-gray-200 text-sm">
+                Generate all
+              </button>
+            </div>
+            <div class="grid grid-cols-1 gap-3">
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">SEO Title</label>
+                <div class="flex gap-2">
+                  <input id="field-seoTitle" type="text" class="flex-1 border rounded px-3 py-2" />
+                  <button data-ai-field="seoTitle" class="btn-ai-field bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200">AI</button>
+                </div>
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">SEO Description</label>
+                <div class="flex gap-2">
+                  <textarea id="field-seoDescription" class="flex-1 border rounded px-3 py-2" rows="3"></textarea>
+                  <button data-ai-field="seoDescription" class="btn-ai-field bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200">AI</button>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+  <div id="toast-container" class="fixed top-4 right-4 z-50 space-y-2"></div>
+  <%- include('partials/admin-image-upload-modal', { baseUrl: baseUrl }) %>
+  <script>
+    const MODE = '<%= mode %>';
+    const POST_ID = '<%= postId %>';
+    const API_BASE = '<%= baseUrl %>/api/admin/blog-posts';
+    function showToast(message, type = 'success') {
+      const container = document.getElementById('toast-container');
+      const toast = document.createElement('div');
+      toast.className = `toast p-4 rounded shadow-lg ${
+        type === 'success' ? 'bg-green-500 text-white' :
+        type === 'error' ? 'bg-red-500 text-white' :
+        'bg-blue-500 text-white'
+      }`;
+      toast.innerHTML = `
+        <div class="flex items-center">
+          <i class="ti ti-${type === 'success' ? 'check' : type === 'error' ? 'alert-triangle' : 'info'} mr-2"></i>
+          <span>${message}</span>
+        </div>
+      `;
+      container.appendChild(toast);
+      setTimeout(() => {
+        toast.classList.add('fade-out');
+        setTimeout(() => toast.remove(), 300);
+      }, 3000);
+    }
+    function setStatusBadge(status) {
+      const el = document.getElementById('status-badge');
+      const map = {
+        draft: 'bg-gray-100 text-gray-800',
+        scheduled: 'bg-blue-100 text-blue-800',
+        published: 'bg-green-100 text-green-800',
+        archived: 'bg-red-100 text-red-800',
+      };
+      const cls = map[status] || 'bg-gray-100 text-gray-800';
+      el.innerHTML = `<span class="px-2 py-1 text-xs font-medium rounded-full ${cls}">${status || '-'}</span>`;
+    }
+    function getValue(id) {
+      const el = document.getElementById(id);
+      return el ? el.value : '';
+    }
+    function setValue(id, value) {
+      const el = document.getElementById(id);
+      if (el) el.value = value == null ? '' : String(value);
+    }
+    function toDateTimeLocalValue(dateStr) {
+      if (!dateStr) return '';
+      const d = new Date(dateStr);
+      if (Number.isNaN(d.getTime())) return '';
+      const pad = (n) => String(n).padStart(2, '0');
+      return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(d.getHours())}:${pad(d.getMinutes())}`;
+    }
+    function updateCoverPreview(url) {
+      const wrap = document.getElementById('cover-preview');
+      const img = document.getElementById('cover-preview-img');
+      if (!wrap || !img) return;
+      const u = String(url || '').trim();
+      if (!u) {
+        wrap.classList.add('hidden');
+        img.src = '';
+        return;
+      }
+      wrap.classList.remove('hidden');
+      img.src = u;
+    }
+    function payloadFromForm() {
+      return {
+        title: getValue('field-title'),
+        slug: getValue('field-slug'),
+        excerpt: getValue('field-excerpt'),
+        markdown: getValue('field-markdown'),
+        html: getValue('field-html'),
+        coverImageUrl: getValue('field-coverImageUrl'),
+        category: getValue('field-category'),
+        tags: getValue('field-tags'),
+        authorName: getValue('field-authorName'),
+        seoTitle: getValue('field-seoTitle'),
+        seoDescription: getValue('field-seoDescription'),
+      };
+    }
+    async function loadPost() {
+      if (!POST_ID) return;
+      const res = await fetch(`${API_BASE}/${POST_ID}`);
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'Failed to load post');
+      const item = data?.item || {};
+      setValue('field-title', item.title);
+      setValue('field-slug', item.slug);
+      setValue('field-excerpt', item.excerpt);
+      setValue('field-markdown', item.markdown);
+      setValue('field-html', item.html);
+      setValue('field-coverImageUrl', item.coverImageUrl);
+      setValue('field-category', item.category);
+      setValue('field-tags', Array.isArray(item.tags) ? item.tags.join(', ') : item.tags);
+      setValue('field-authorName', item.authorName);
+      setValue('field-seoTitle', item.seoTitle);
+      setValue('field-seoDescription', item.seoDescription);
+      setValue('field-scheduledAt', toDateTimeLocalValue(item.scheduledAt));
+      setStatusBadge(item.status);
+      updateCoverPreview(item.coverImageUrl);
+      const subtitle = document.getElementById('page-subtitle');
+      if (subtitle) subtitle.textContent = item.slug ? item.slug : `ID: ${item._id}`;
+      updateActionButtons(item.status);
+    }
+    function updateActionButtons(status) {
+      const publishBtn = document.getElementById('btn-publish');
+      const unpublishBtn = document.getElementById('btn-unpublish');
+      const archiveBtn = document.getElementById('btn-archive');
+      const show = (btn, yes) => {
+        if (!btn) return;
+        if (yes) btn.classList.remove('hidden');
+        else btn.classList.add('hidden');
+      };
+      const hasId = Boolean(POST_ID);
+      show(publishBtn, hasId && (status === 'draft' || status === 'scheduled'));
+      show(unpublishBtn, hasId && status === 'published');
+      show(archiveBtn, hasId && status !== 'archived');
+    }
+    async function savePost() {
+      const payload = payloadFromForm();
+      if (!payload.title || !String(payload.title).trim()) {
+        showToast('Title is required', 'error');
+        return;
+      }
+      if (!payload.markdown || !String(payload.markdown).trim()) {
+        showToast('Markdown is required', 'error');
+        return;
+      }
+      const isNew = MODE === 'new' || !POST_ID;
+      const url = isNew ? API_BASE : `${API_BASE}/${POST_ID}`;
+      const method = isNew ? 'POST' : 'PUT';
+      const res = await fetch(url, {
+        method,
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(payload),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'Failed to save');
+      const item = data?.item;
+      showToast('Saved');
+      if (isNew && item?._id) {
+        window.location.href = `<%= adminPath %>/blog/edit/${item._id}`;
+      } else {
+        setStatusBadge(item?.status);
+        updateActionButtons(item?.status);
+      }
+    }
+    async function publishPost() {
+      if (!POST_ID) return;
+      const res = await fetch(`${API_BASE}/${POST_ID}/publish`, { method: 'PUT' });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'Failed to publish');
+      showToast('Published');
+      setStatusBadge(data?.item?.status);
+      updateActionButtons(data?.item?.status);
+    }
+    async function unpublishPost() {
+      if (!POST_ID) return;
+      const res = await fetch(`${API_BASE}/${POST_ID}/unpublish`, { method: 'PUT' });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'Failed to unpublish');
+      showToast('Unpublished');
+      setStatusBadge(data?.item?.status);
+      updateActionButtons(data?.item?.status);
+    }
+    async function archivePost() {
+      if (!POST_ID) return;
+      if (!confirm('Archive this post?')) return;
+      const res = await fetch(`${API_BASE}/${POST_ID}/archive`, { method: 'PUT' });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'Failed to archive');
+      showToast('Archived');
+      setStatusBadge(data?.item?.status);
+      updateActionButtons(data?.item?.status);
+    }
+    async function schedulePost() {
+      if (!POST_ID) {
+        showToast('Save the post first', 'error');
+        return;
+      }
+      const raw = getValue('field-scheduledAt');
+      if (!raw) {
+        showToast('Scheduled At is required', 'error');
+        return;
+      }
+      const scheduledAt = new Date(raw);
+      if (Number.isNaN(scheduledAt.getTime())) {
+        showToast('Scheduled At must be a valid date', 'error');
+        return;
+      }
+      const res = await fetch(`${API_BASE}/${POST_ID}/schedule`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ scheduledAt: scheduledAt.toISOString() }),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'Failed to schedule');
+      showToast('Scheduled');
+      setStatusBadge(data?.item?.status);
+      updateActionButtons(data?.item?.status);
+    }
+    async function aiGenerateField(field) {
+      if (!field) return;
+      const payload = {
+        field,
+        title: getValue('field-title'),
+        excerpt: getValue('field-excerpt'),
+        category: getValue('field-category'),
+        tags: getValue('field-tags'),
+        authorName: getValue('field-authorName'),
+        markdown: getValue('field-markdown'),
+      };
+      const res = await fetch('<%= baseUrl %>/api/admin/blog-ai/generate-field', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(payload),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'AI generate failed');
+      if (field === 'seoTitle') setValue('field-seoTitle', data?.value || '');
+      if (field === 'seoDescription') setValue('field-seoDescription', data?.value || '');
+      showToast('AI generated');
+    }
+    async function aiGenerateAll() {
+      const payload = {
+        title: getValue('field-title'),
+        excerpt: getValue('field-excerpt'),
+        category: getValue('field-category'),
+        tags: getValue('field-tags'),
+        authorName: getValue('field-authorName'),
+        markdown: getValue('field-markdown'),
+      };
+      const res = await fetch('<%= baseUrl %>/api/admin/blog-ai/generate-all', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(payload),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'AI generate-all failed');
+      if (data?.seoTitle !== undefined) setValue('field-seoTitle', data.seoTitle);
+      if (data?.seoDescription !== undefined) setValue('field-seoDescription', data.seoDescription);
+      if (data?.excerpt !== undefined) setValue('field-excerpt', data.excerpt);
+      if (data?.category !== undefined) setValue('field-category', data.category);
+      if (data?.tags !== undefined) setValue('field-tags', Array.isArray(data.tags) ? data.tags.join(', ') : data.tags);
+      if (data?.authorName !== undefined) setValue('field-authorName', data.authorName);
+      showToast('AI generated all');
+    }
+    async function aiFormatMarkdown() {
+      const res = await fetch('<%= baseUrl %>/api/admin/blog-ai/format-markdown', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ markdown: getValue('field-markdown') }),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'AI format failed');
+      setValue('field-markdown', data?.markdown || '');
+      showToast('Formatted');
+    }
+    async function aiRefineMarkdown() {
+      const selectionStart = document.getElementById('field-markdown')?.selectionStart ?? null;
+      const selectionEnd = document.getElementById('field-markdown')?.selectionEnd ?? null;
+      const markdown = getValue('field-markdown');
+      const res = await fetch('<%= baseUrl %>/api/admin/blog-ai/refine-markdown', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ markdown, selectionStart, selectionEnd }),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) throw new Error(data?.error || 'AI refine failed');
+      setValue('field-markdown', data?.markdown || '');
+      showToast('Refined');
+    }
+    document.getElementById('btn-save').addEventListener('click', () => {
+      savePost().catch((e) => showToast(e?.message ? String(e.message) : 'Save failed', 'error'));
+    });
+    document.getElementById('btn-publish').addEventListener('click', () => {
+      publishPost().catch((e) => showToast(e?.message ? String(e.message) : 'Publish failed', 'error'));
+    });
+    document.getElementById('btn-unpublish').addEventListener('click', () => {
+      unpublishPost().catch((e) => showToast(e?.message ? String(e.message) : 'Unpublish failed', 'error'));
+    });
+    document.getElementById('btn-archive').addEventListener('click', () => {
+      archivePost().catch((e) => showToast(e?.message ? String(e.message) : 'Archive failed', 'error'));
+    });
+    document.getElementById('btn-schedule').addEventListener('click', () => {
+      schedulePost().catch((e) => showToast(e?.message ? String(e.message) : 'Schedule failed', 'error'));
+    });
+    document.getElementById('field-coverImageUrl').addEventListener('input', (e) => {
+      updateCoverPreview(e.target.value);
+    });
+    document.getElementById('btn-upload-cover').addEventListener('click', () => {
+      if (typeof window.openImageUploadModal === 'function') {
+        window.openImageUploadModal({
+          namespace: 'blog-images',
+          visibility: 'public',
+          onSelect: (url) => {
+            setValue('field-coverImageUrl', url);
+            updateCoverPreview(url);
+          },
+        });
+      }
+    });
+    document.querySelectorAll('.btn-ai-field').forEach((btn) => {
+      btn.addEventListener('click', () => {
+        const field = btn.getAttribute('data-ai-field');
+        aiGenerateField(field).catch((e) => showToast(e?.message ? String(e.message) : 'AI failed', 'error'));
+      });
+    });
+    document.getElementById('btn-ai-generate-all').addEventListener('click', () => {
+      aiGenerateAll().catch((e) => showToast(e?.message ? String(e.message) : 'AI failed', 'error'));
+    });
+    document.getElementById('btn-ai-format').addEventListener('click', () => {
+      aiFormatMarkdown().catch((e) => showToast(e?.message ? String(e.message) : 'AI failed', 'error'));
+    });
+    document.getElementById('btn-ai-refine').addEventListener('click', () => {
+      aiRefineMarkdown().catch((e) => showToast(e?.message ? String(e.message) : 'AI failed', 'error'));
+    });
+    (function init() {
+      const title = document.getElementById('page-title');
+      const subtitle = document.getElementById('page-subtitle');
+      if (MODE === 'new') {
+        if (title) title.textContent = 'New Blog Post';
+        if (subtitle) subtitle.textContent = 'Draft';
+        setStatusBadge('draft');
+      } else {
+        if (title) title.textContent = 'Edit Blog Post';
+      }
+      loadPost().catch((e) => showToast(e?.message ? String(e.message) : 'Failed to load', 'error'));
+    })();
+  </script>
+</body>
+</html>