modern-cms 1.0.0

package/template/apps/api/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@pgcms/api",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc -p tsconfig.json",
+    "start": "node dist/index.js",
+    "db:migrate": "prisma migrate dev",
+    "db:generate": "prisma generate",
+    "db:seed": "tsx prisma/seed.ts",
+    "db:seed:demo-charities": "tsx prisma/seed-our-charities.ts",
+    "db:seed:templates": "tsx prisma/seed-templates.ts"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.665.0",
+    "@aws-sdk/s3-request-presigner": "^3.665.0",
+    "@azure/storage-blob": "^12.33.0",
+    "@pgcms/shared": "*",
+    "@prisma/client": "^5.20.0",
+    "bcryptjs": "^2.4.3",
+    "cloudinary": "^2.10.0",
+    "cookie-parser": "^1.4.6",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5",
+    "express": "^4.21.0",
+    "jsonwebtoken": "^9.0.2",
+    "multer": "^2.0.0",
+    "nanoid": "^5.0.7",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/bcryptjs": "^2.4.6",
+    "@types/cookie-parser": "^1.4.7",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.7",
+    "@types/multer": "^1.4.12",
+    "@types/node": "^24.13.2",
+    "prisma": "^5.20.0",
+    "tsx": "^4.22.4",
+    "typescript": "^5.9.3"
+  }
+}

package/template/apps/api/prisma/backfill-search-text.ts

@@ -0,0 +1,31 @@
+// One-off: populates the new `searchText` column (added alongside the standard-CMS
+// platform pass) for every Page/CollectionItem row that predates it. Going forward,
+// pages.routes.ts/collections.routes.ts keep it in sync on every save — this only
+// needs to run once, against existing data.
+import { PrismaClient } from "@prisma/client";
+import { extractSearchText, type PageNode } from "@pgcms/shared";
+
+const prisma = new PrismaClient();
+
+async function main() {
+  const pages = await prisma.page.findMany({ where: { searchText: "" } });
+  for (const page of pages) {
+    const searchText = extractSearchText(page.content as unknown as PageNode);
+    await prisma.page.update({ where: { id: page.id }, data: { searchText } });
+  }
+  console.log(`Backfilled searchText for ${pages.length} page(s).`);
+
+  const items = await prisma.collectionItem.findMany({ where: { searchText: "" } });
+  for (const item of items) {
+    const searchText = extractSearchText(item.content as unknown as PageNode);
+    await prisma.collectionItem.update({ where: { id: item.id }, data: { searchText } });
+  }
+  console.log(`Backfilled searchText for ${items.length} collection item(s).`);
+}
+
+main()
+  .catch((err) => {
+    console.error(err);
+    process.exitCode = 1;
+  })
+  .finally(() => prisma.$disconnect());

package/template/apps/api/prisma/migrations/20260701034530_init/migration.sql

@@ -0,0 +1,86 @@
+-- CreateEnum
+CREATE TYPE "UserRole" AS ENUM ('ADMIN', 'EDITOR');
+
+-- CreateEnum
+CREATE TYPE "PageStatus" AS ENUM ('DRAFT', 'PUBLISHED');
+
+-- CreateTable
+CREATE TABLE "User" (
+    "id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "passwordHash" TEXT NOT NULL,
+    "role" "UserRole" NOT NULL DEFAULT 'EDITOR',
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "User_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Page" (
+    "id" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "status" "PageStatus" NOT NULL DEFAULT 'DRAFT',
+    "content" JSONB NOT NULL,
+    "seoTitle" TEXT,
+    "seoDescription" TEXT,
+    "ogImage" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Page_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "MediaAsset" (
+    "id" TEXT NOT NULL,
+    "key" TEXT NOT NULL,
+    "url" TEXT NOT NULL,
+    "mimeType" TEXT NOT NULL,
+    "width" INTEGER,
+    "height" INTEGER,
+    "size" INTEGER NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "MediaAsset_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "SiteTheme" (
+    "id" TEXT NOT NULL,
+    "primaryColor" TEXT NOT NULL DEFAULT '#2563eb',
+    "secondaryColor" TEXT NOT NULL DEFAULT '#0f172a',
+    "backgroundColor" TEXT NOT NULL DEFAULT '#ffffff',
+    "textColor" TEXT NOT NULL DEFAULT '#111827',
+    "headingFont" TEXT NOT NULL DEFAULT 'Poppins',
+    "bodyFont" TEXT NOT NULL DEFAULT 'Inter',
+    "logoUrl" TEXT,
+    "faviconUrl" TEXT,
+    "siteName" TEXT NOT NULL DEFAULT 'My Site',
+    "customCss" TEXT,
+
+    CONSTRAINT "SiteTheme_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "NavItem" (
+    "id" TEXT NOT NULL,
+    "label" TEXT NOT NULL,
+    "href" TEXT NOT NULL,
+    "order" INTEGER NOT NULL DEFAULT 0,
+    "parentId" TEXT,
+
+    CONSTRAINT "NavItem_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Page_slug_key" ON "Page"("slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "MediaAsset_key_key" ON "MediaAsset"("key");
+
+-- AddForeignKey
+ALTER TABLE "NavItem" ADD CONSTRAINT "NavItem_parentId_fkey" FOREIGN KEY ("parentId") REFERENCES "NavItem"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/template/apps/api/prisma/migrations/20260701081942_add_publish_at_and_revisions/migration.sql

@@ -0,0 +1,19 @@
+-- AlterTable
+ALTER TABLE "Page" ADD COLUMN     "publishAt" TIMESTAMP(3);
+
+-- CreateTable
+CREATE TABLE "PageRevision" (
+    "id" TEXT NOT NULL,
+    "pageId" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "content" JSONB NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "PageRevision_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "PageRevision_pageId_createdAt_idx" ON "PageRevision"("pageId", "createdAt");
+
+-- AddForeignKey
+ALTER TABLE "PageRevision" ADD CONSTRAINT "PageRevision_pageId_fkey" FOREIGN KEY ("pageId") REFERENCES "Page"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/template/apps/api/prisma/migrations/20260701085011_add_form_submissions/migration.sql

@@ -0,0 +1,13 @@
+-- CreateTable
+CREATE TABLE "FormSubmission" (
+    "id" TEXT NOT NULL,
+    "formName" TEXT NOT NULL,
+    "pageSlug" TEXT NOT NULL,
+    "data" JSONB NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "FormSubmission_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "FormSubmission_formName_createdAt_idx" ON "FormSubmission"("formName", "createdAt");

package/template/apps/api/prisma/migrations/20260702084049_add_global_sections_and_saved_blocks/migration.sql

@@ -0,0 +1,24 @@
+-- CreateTable
+CREATE TABLE "GlobalSection" (
+    "id" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "enabled" BOOLEAN NOT NULL DEFAULT false,
+    "content" JSONB NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "GlobalSection_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "SavedBlock" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "content" JSONB NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "SavedBlock_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "GlobalSection_kind_key" ON "GlobalSection"("kind");

package/template/apps/api/prisma/migrations/20260702085609_add_page_locale_and_translations/migration.sql

@@ -0,0 +1,6 @@
+-- AlterTable
+ALTER TABLE "Page" ADD COLUMN     "locale" TEXT NOT NULL DEFAULT 'en',
+ADD COLUMN     "translationOfId" TEXT;
+
+-- AddForeignKey
+ALTER TABLE "Page" ADD CONSTRAINT "Page_translationOfId_fkey" FOREIGN KEY ("translationOfId") REFERENCES "Page"("id") ON DELETE SET NULL ON UPDATE CASCADE;

package/template/apps/api/prisma/migrations/20260702091914_add_collections/migration.sql

@@ -0,0 +1,38 @@
+-- CreateTable
+CREATE TABLE "Collection" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Collection_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "CollectionItem" (
+    "id" TEXT NOT NULL,
+    "collectionId" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "excerpt" TEXT,
+    "coverImage" TEXT,
+    "content" JSONB NOT NULL,
+    "status" "PageStatus" NOT NULL DEFAULT 'DRAFT',
+    "publishedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "CollectionItem_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Collection_slug_key" ON "Collection"("slug");
+
+-- CreateIndex
+CREATE INDEX "CollectionItem_collectionId_status_publishedAt_idx" ON "CollectionItem"("collectionId", "status", "publishedAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "CollectionItem_collectionId_slug_key" ON "CollectionItem"("collectionId", "slug");
+
+-- AddForeignKey
+ALTER TABLE "CollectionItem" ADD CONSTRAINT "CollectionItem_collectionId_fkey" FOREIGN KEY ("collectionId") REFERENCES "Collection"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/template/apps/api/prisma/migrations/20260702120000_platform_hardening/migration.sql

@@ -0,0 +1,15 @@
+-- AlterTable
+ALTER TABLE "Page" ADD COLUMN "noIndex" BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE "Page" ADD COLUMN "previewToken" TEXT;
+
+-- Backfill preview tokens for existing pages
+UPDATE "Page" SET "previewToken" = 'prev_' || "id" WHERE "previewToken" IS NULL;
+
+ALTER TABLE "Page" ALTER COLUMN "previewToken" SET NOT NULL;
+CREATE UNIQUE INDEX "Page_previewToken_key" ON "Page"("previewToken");
+
+-- AlterTable
+ALTER TABLE "CollectionItem" ADD COLUMN "seoTitle" TEXT;
+ALTER TABLE "CollectionItem" ADD COLUMN "seoDescription" TEXT;
+ALTER TABLE "CollectionItem" ADD COLUMN "ogImage" TEXT;
+ALTER TABLE "CollectionItem" ADD COLUMN "noIndex" BOOLEAN NOT NULL DEFAULT false;

package/template/apps/api/prisma/migrations/20260705031230_add_collections_redirects_media_meta/migration.sql

@@ -0,0 +1,17 @@
+-- AlterTable
+ALTER TABLE "MediaAsset" ADD COLUMN     "alt" TEXT,
+ADD COLUMN     "filename" TEXT NOT NULL DEFAULT '';
+
+-- CreateTable
+CREATE TABLE "Redirect" (
+    "id" TEXT NOT NULL,
+    "fromPath" TEXT NOT NULL,
+    "toPath" TEXT NOT NULL,
+    "permanent" BOOLEAN NOT NULL DEFAULT true,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Redirect_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Redirect_fromPath_key" ON "Redirect"("fromPath");

package/template/apps/api/prisma/migrations/20260705033241_add_audit_log/migration.sql

@@ -0,0 +1,18 @@
+-- CreateTable
+CREATE TABLE "AuditLog" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT,
+    "userEmail" TEXT,
+    "action" TEXT NOT NULL,
+    "entityPath" TEXT NOT NULL,
+    "status" INTEGER NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AuditLog_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "AuditLog_createdAt_idx" ON "AuditLog"("createdAt");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_userEmail_createdAt_idx" ON "AuditLog"("userEmail", "createdAt");

package/template/apps/api/prisma/migrations/20260706031301_standard_cms_platform_pass/migration.sql

@@ -0,0 +1,48 @@
+-- AlterEnum
+ALTER TYPE "UserRole" ADD VALUE 'AUTHOR';
+
+-- AlterTable
+ALTER TABLE "CollectionItem" ADD COLUMN     "createdById" TEXT,
+ADD COLUMN     "locale" TEXT NOT NULL DEFAULT 'en',
+ADD COLUMN     "searchText" TEXT NOT NULL DEFAULT '',
+ADD COLUMN     "translationOfId" TEXT;
+
+-- AlterTable
+ALTER TABLE "Page" ADD COLUMN     "createdById" TEXT,
+ADD COLUMN     "searchText" TEXT NOT NULL DEFAULT '';
+
+-- AlterTable
+ALTER TABLE "SavedBlock" ADD COLUMN     "createdById" TEXT;
+
+-- AlterTable
+ALTER TABLE "SiteTheme" ADD COLUMN     "analyticsCustomScript" TEXT,
+ADD COLUMN     "analyticsId" TEXT,
+ADD COLUMN     "analyticsProvider" TEXT NOT NULL DEFAULT 'none',
+ADD COLUMN     "backgroundColorDark" TEXT,
+ADD COLUMN     "darkModeEnabled" BOOLEAN NOT NULL DEFAULT false,
+ADD COLUMN     "primaryColorDark" TEXT,
+ADD COLUMN     "textColorDark" TEXT;
+
+-- CreateTable
+CREATE TABLE "PageTemplate" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "category" TEXT NOT NULL DEFAULT 'General',
+    "thumbnail" TEXT,
+    "content" JSONB NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "PageTemplate_pkey" PRIMARY KEY ("id")
+);
+
+-- AddForeignKey
+ALTER TABLE "Page" ADD CONSTRAINT "Page_createdById_fkey" FOREIGN KEY ("createdById") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "CollectionItem" ADD CONSTRAINT "CollectionItem_createdById_fkey" FOREIGN KEY ("createdById") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "CollectionItem" ADD CONSTRAINT "CollectionItem_translationOfId_fkey" FOREIGN KEY ("translationOfId") REFERENCES "CollectionItem"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "SavedBlock" ADD CONSTRAINT "SavedBlock_createdById_fkey" FOREIGN KEY ("createdById") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;

package/template/apps/api/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (i.e. Git)
+provider = "postgresql"

package/template/apps/api/prisma/reset-admin.ts

@@ -0,0 +1,19 @@
+import "dotenv/config";
+import { PrismaClient } from "@prisma/client";
+
+const prisma = new PrismaClient();
+
+async function main() {
+  const email = "admin@example.com";
+  await prisma.user.deleteMany({ where: { email } });
+  console.log("Deleted existing admin user");
+}
+
+main()
+  .catch((err) => {
+    console.error(err);
+    process.exit(1);
+  })
+  .finally(async () => {
+    await prisma.$disconnect();
+  });

package/template/apps/api/prisma/schema.prisma

@@ -0,0 +1,251 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+enum UserRole {
+  ADMIN
+  EDITOR
+  AUTHOR
+}
+
+enum PageStatus {
+  DRAFT
+  PUBLISHED
+}
+
+model User {
+  id           String   @id @default(cuid())
+  email        String   @unique
+  passwordHash String
+  role         UserRole @default(EDITOR)
+  createdAt    DateTime @default(now())
+  pages           Page[]           @relation("PageAuthor")
+  collectionItems CollectionItem[] @relation("CollectionItemAuthor")
+  savedBlocks     SavedBlock[]     @relation("SavedBlockAuthor")
+}
+
+model Page {
+  id              String        @id @default(cuid())
+  slug            String        @unique
+  title           String
+  status          PageStatus    @default(DRAFT)
+  content         Json
+  seoTitle        String?
+  seoDescription  String?
+  ogImage         String?
+  // BCP-47 language tag for this page's content ("en", "es", "ar"...). Slugs stay
+  // globally unique — localized pages get their own slug (e.g. "es/servicios") and are
+  // linked to their source page via translationOfId so a language switcher can list
+  // the whole translation group.
+  locale          String        @default("en")
+  translationOfId String?
+  translationOf   Page?         @relation("PageTranslations", fields: [translationOfId], references: [id], onDelete: SetNull)
+  translations    Page[]        @relation("PageTranslations")
+  // When set alongside status=PUBLISHED, the page only actually becomes publicly
+  // visible once this moment passes — checked lazily at request time rather than via
+  // a background job, since "is it visible" is just "status=PUBLISHED AND (no
+  // publishAt OR publishAt <= now)".
+  publishAt       DateTime?
+  noIndex         Boolean       @default(false)
+  previewToken    String        @unique @default(cuid())
+  // Denormalized plain-text extraction of `content` (see extractSearchText in
+  // packages/shared), kept in sync on every save so Postgres full-text search doesn't
+  // need to parse the JSON tree at query time.
+  searchText      String        @default("")
+  createdById     String?
+  createdBy       User?         @relation("PageAuthor", fields: [createdById], references: [id], onDelete: SetNull)
+  createdAt       DateTime      @default(now())
+  updatedAt       DateTime      @updatedAt
+  revisions       PageRevision[]
+}
+
+// A lightweight snapshot taken on every Save, so an editor can look back at and
+// restore an earlier version of a page. Capped and pruned in application code rather
+// than modeled here, to keep the schema simple.
+model PageRevision {
+  id        String   @id @default(cuid())
+  pageId    String
+  page      Page     @relation(fields: [pageId], references: [id], onDelete: Cascade)
+  title     String
+  content   Json
+  createdAt DateTime @default(now())
+
+  @@index([pageId, createdAt])
+}
+
+model MediaAsset {
+  id        String   @id @default(cuid())
+  key       String   @unique
+  url       String
+  mimeType  String
+  width     Int?
+  height    Int?
+  size      Int
+  // Original filename kept for search; alt text for accessibility wherever the asset
+  // is used without an explicit per-usage alt.
+  filename  String   @default("")
+  alt       String?
+  createdAt DateTime @default(now())
+}
+
+// Old URL → new URL mappings, consulted when a public path doesn't match any page or
+// collection entry — keeps inbound links alive across restructures.
+model Redirect {
+  id        String   @id @default(cuid())
+  fromPath  String   @unique
+  toPath    String
+  permanent Boolean  @default(true)
+  createdAt DateTime @default(now())
+}
+
+model SiteTheme {
+  id              String  @id @default(cuid())
+  primaryColor    String  @default("#2563eb")
+  secondaryColor  String  @default("#0f172a")
+  backgroundColor String  @default("#ffffff")
+  textColor       String  @default("#111827")
+  headingFont     String  @default("Poppins")
+  bodyFont        String  @default("Inter")
+  logoUrl         String?
+  faviconUrl      String?
+  siteName        String  @default("My Site")
+  customCss       String?
+  // Dark-mode token overrides — used only when darkModeEnabled; left blank fields fall
+  // back to sensible computed defaults (see ThemeStyleTag) rather than the light colors.
+  darkModeEnabled     Boolean @default(false)
+  primaryColorDark    String?
+  backgroundColorDark String?
+  textColorDark       String?
+  // "none" | "ga4" | "plausible" | "custom" — kept as a plain string (not a Prisma enum)
+  // since it's validated at the Zod boundary and an enum migration is heavier for a
+  // field this low-stakes.
+  analyticsProvider     String  @default("none")
+  analyticsId           String?
+  analyticsCustomScript String?
+}
+
+model NavItem {
+  id       String    @id @default(cuid())
+  label    String
+  href     String
+  order    Int       @default(0)
+  parentId String?
+  parent   NavItem?  @relation("NavItemChildren", fields: [parentId], references: [id], onDelete: Cascade)
+  children NavItem[] @relation("NavItemChildren")
+}
+
+// A dynamic content type — Blog, News, Events — whose items share a URL prefix
+// (`/{collection.slug}/{item.slug}`) and are listed by the "Collection List" block.
+model Collection {
+  id        String           @id @default(cuid())
+  name      String
+  slug      String           @unique
+  items     CollectionItem[]
+  createdAt DateTime         @default(now())
+}
+
+// One entry in a collection (a post, an event...). `content` is a PageNode tree edited
+// with the same visual builder as pages, so items get the full component library.
+model CollectionItem {
+  id           String     @id @default(cuid())
+  collectionId String
+  collection   Collection @relation(fields: [collectionId], references: [id], onDelete: Cascade)
+  slug         String
+  title        String
+  excerpt      String?
+  coverImage   String?
+  content      Json
+  status         PageStatus @default(DRAFT)
+  publishedAt    DateTime?
+  seoTitle       String?
+  seoDescription String?
+  ogImage        String?
+  noIndex        Boolean    @default(false)
+  searchText     String     @default("")
+  createdById    String?
+  createdBy      User?      @relation("CollectionItemAuthor", fields: [createdById], references: [id], onDelete: SetNull)
+  // Mirrors Page's locale/translation pattern exactly, but scoped to items within the
+  // same collection rather than site-wide, since a "translation of" only makes sense
+  // among items sharing a collection.
+  locale          String           @default("en")
+  translationOfId String?
+  translationOf   CollectionItem?  @relation("CollectionItemTranslations", fields: [translationOfId], references: [id], onDelete: SetNull)
+  translations    CollectionItem[] @relation("CollectionItemTranslations")
+  createdAt      DateTime   @default(now())
+  updatedAt      DateTime   @updatedAt
+
+  @@unique([collectionId, slug])
+  @@index([collectionId, status, publishedAt])
+}
+
+// Site-level sections rendered on every page: the global header above each page's own
+// content and the global footer below it. `kind` is "header" or "footer"; `content` is
+// a PageNode root tree (so a global header can be several stacked sections — utility
+// bar + header, say). Disabled rows are kept so switching off doesn't lose the layout.
+model GlobalSection {
+  id        String   @id @default(cuid())
+  kind      String   @unique
+  enabled   Boolean  @default(false)
+  content   Json
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+}
+
+// A section (or whole subtree) an editor saved for reuse. Inserting a block deep-clones
+// its content with fresh node ids, so instances are independent copies (not synced).
+model SavedBlock {
+  id          String   @id @default(cuid())
+  name        String
+  content     Json
+  createdById String?
+  createdBy   User?    @relation("SavedBlockAuthor", fields: [createdById], references: [id], onDelete: SetNull)
+  createdAt   DateTime @default(now())
+}
+
+// A starter PageNode tree an editor can pick when creating a new page instead of
+// starting blank. `content` is a full root PageNode, same shape as Page.content, so
+// applying a template is just cloning it with fresh node ids (cloneWithNewIds).
+model PageTemplate {
+  id        String   @id @default(cuid())
+  name      String
+  category  String   @default("General")
+  thumbnail String?
+  content   Json
+  createdAt DateTime @default(now())
+}
+
+// Who changed what, when — one row per successful mutating API call, captured by
+// middleware rather than per-route calls so nothing is forgotten as routes are added.
+// `action` is "METHOD /path" and `entityPath` the concrete URL hit.
+model AuditLog {
+  id         String   @id @default(cuid())
+  userId     String?
+  userEmail  String?
+  action     String
+  entityPath String
+  status     Int
+  createdAt  DateTime @default(now())
+
+  @@index([createdAt])
+  @@index([userEmail, createdAt])
+}
+
+// One row per submission of any "Contact Form" block on the site. `formName` lets
+// multiple distinct forms (e.g. "Contact", "Newsletter") share one table while still
+// being filterable in the admin submissions view. `data` holds whatever fields that
+// particular form instance defined — kept schemaless since form fields are authored
+// per-component, not modeled globally.
+model FormSubmission {
+  id        String   @id @default(cuid())
+  formName  String
+  pageSlug  String
+  data      Json
+  createdAt DateTime @default(now())
+
+  @@index([formName, createdAt])
+}