qarpeo 0.0.0-alpha.10

package/dist/runtime/server/routes/auth/webauthn/register/verify.post.mjs

@@ -0,0 +1,88 @@
+import { defineEventHandler, readBody, createError, getRequestURL } from "nuxt/server";
+import { verifyRegistrationResponse } from "@simplewebauthn/server";
+import { getD1Binding } from "../../../../../db.mjs";
+import { getKVBinding } from "../../../../../kv.mjs";
+import { requireAuthSession } from "../../../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await requireAuthSession(event);
+  const user = session?.user;
+  if (!user || !user.id) {
+    throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+  }
+  const body = await readBody(event);
+  if (!body) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: "Registration response body required"
+    });
+  }
+  let expectedChallenge = null;
+  try {
+    const kv = getKVBinding("KV", event);
+    expectedChallenge = await kv.get(`webauthn:challenge:${user.id}`);
+    if (expectedChallenge) {
+      await kv.delete(`webauthn:challenge:${user.id}`);
+    }
+  } catch {
+  }
+  if (!expectedChallenge) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: "Registration challenge expired or missing"
+    });
+  }
+  const reqUrl = getRequestURL(event);
+  const expectedOrigin = reqUrl.origin;
+  const expectedRPID = reqUrl.hostname;
+  let verification;
+  try {
+    verification = await verifyRegistrationResponse({
+      response: body,
+      expectedChallenge,
+      expectedOrigin,
+      expectedRPID,
+      requireUserVerification: false
+    });
+  } catch (err) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: `Passkey registration verification failed: ${err.message}`
+    });
+  }
+  if (!verification.verified || !verification.registrationInfo) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: "Passkey verification could not be completed"
+    });
+  }
+  const { credential } = verification.registrationInfo;
+  const credentialId = credential.id;
+  const publicKeyBytes = new Uint8Array(credential.publicKey);
+  const counter = credential.counter || 0;
+  try {
+    const bindingName = globalThis.process?.env?.QARPEO_DEFAULT_DB_BINDING || "DB";
+    const d1 = getD1Binding(bindingName, event);
+    const id = crypto.randomUUID();
+    const now = Date.now();
+    await d1.prepare(`
+        INSERT INTO _qarpeo_authenticators (id, user_id, credential_id, public_key, counter, transports, created_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(credential_id) DO UPDATE SET counter = excluded.counter
+      `).bind(
+      id,
+      user.id,
+      credentialId,
+      publicKeyBytes,
+      counter,
+      JSON.stringify(body?.response?.transports || ["internal"]),
+      now
+    ).run();
+  } catch (err) {
+    console.warn("[qarpeo] Failed to save WebAuthn credential in D1:", err.message);
+  }
+  return { verified: true, credentialId };
+});

package/dist/runtime/server/routes/cms/[collection]/[id]/preview-token.post.d.ts

@@ -0,0 +1,8 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    token: string;
+    expires: number;
+    previewUrl: string;
+    shareUrl: string;
+    apiUrl: string;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/[id]/preview-token.post.mjs

@@ -0,0 +1,27 @@
+import { defineEventHandler, getRouterParam } from "nuxt/server";
+import { getD1Binding } from "../../../../../db.mjs";
+import { generatePreviewToken, getCMSConfig } from "../../../../utils/cms.mjs";
+import { requireAuth } from "../../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  const id = getRouterParam(event, "id");
+  const db = getD1Binding("DB", event);
+  const entryRow = await db.prepare(
+    "SELECT id, slug, path FROM _qarpeo_cms_entries WHERE collection_id = ? AND (id = ? OR slug = ?) LIMIT 1"
+  ).bind(collection, id, id).first();
+  const targetIdentifier = entryRow?.slug || id;
+  const { token, expires } = await generatePreviewToken(event, collection, targetIdentifier);
+  const targetPath = entryRow?.path || (collection === "docs" ? `/docs/${entryRow?.slug || id}` : `/${collection}/${entryRow?.slug || id}`);
+  const previewUrl = `${targetPath}?preview=true&preview_token=${encodeURIComponent(token)}&expires=${expires}`;
+  const shareUrl = `${config.apiPath}/preview/enable?collection=${encodeURIComponent(collection)}&slug=${encodeURIComponent(targetIdentifier)}&token=${encodeURIComponent(token)}&expires=${expires}&redirect=${encodeURIComponent(targetPath)}`;
+  const apiUrl = `${config.apiPath}/${collection}/${targetIdentifier}?preview=true&preview_token=${encodeURIComponent(token)}&expires=${expires}`;
+  return {
+    token,
+    expires,
+    previewUrl,
+    shareUrl,
+    apiUrl
+  };
+});

package/dist/runtime/server/routes/cms/[collection]/[id]/publish.post.d.ts

@@ -0,0 +1,6 @@
+import type { CMSEntryStatus } from "../../../../../../types";
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+    status: CMSEntryStatus;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/[id]/publish.post.mjs

@@ -0,0 +1,19 @@
+import { defineEventHandler, getRouterParam, readBody, createError } from "nuxt/server";
+import { publishCMSEntry, getCMSConfig } from "../../../../utils/cms.mjs";
+import { requireAuth } from "../../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  if (config.collections[collection]?.mode === "file-lock") {
+    throw createError({
+      statusCode: 403,
+      message: `Collection "${collection}" is file-locked. Manage content via Git files.`
+    });
+  }
+  const id = getRouterParam(event, "id");
+  const body = await readBody(event);
+  const targetStatus = body?.status || "published";
+  await publishCMSEntry(event, id, targetStatus, body?.publishedAt);
+  return { ok: true, status: targetStatus };
+});

package/dist/runtime/server/routes/cms/[collection]/[id]/review.post.d.ts

@@ -0,0 +1,6 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+    status: string;
+    entry: import("../../../../..").CMSEntry;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/[id]/review.post.mjs

@@ -0,0 +1,33 @@
+import { defineEventHandler, getRouterParam, readBody, createError } from "nuxt/server";
+import { submitCMSEntryForReview, rejectCMSEntryReview, getCMSConfig } from "../../../../utils/cms.mjs";
+import { requireAuth } from "../../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  if (config.collections[collection]?.mode === "file-lock") {
+    throw createError({
+      statusCode: 403,
+      message: `Collection "${collection}" is file-locked. Manage content via Git files.`
+    });
+  }
+  const id = getRouterParam(event, "id");
+  const body = await readBody(
+    event
+  );
+  if (!body?.action) {
+    throw createError({ statusCode: 400, message: "action ('submit' | 'reject') is required" });
+  }
+  if (body.action === "submit") {
+    const entry = await submitCMSEntryForReview(event, id, body.note);
+    return { ok: true, status: "pending_review", entry };
+  } else if (body.action === "reject") {
+    const entry = await rejectCMSEntryReview(event, id, body.reason || body.note);
+    return { ok: true, status: "draft", entry };
+  } else {
+    throw createError({
+      statusCode: 400,
+      message: "Invalid action. Supported: 'submit', 'reject'."
+    });
+  }
+});

package/dist/runtime/server/routes/cms/[collection]/[id].delete.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/[id].delete.mjs

@@ -0,0 +1,17 @@
+import { defineEventHandler, getRouterParam, createError } from "nuxt/server";
+import { deleteCMSEntry, getCMSConfig } from "../../../utils/cms.mjs";
+import { requireAuth } from "../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  if (config.collections[collection]?.mode === "file-lock") {
+    throw createError({
+      statusCode: 403,
+      message: `Collection "${collection}" is file-locked. Manage content via Git files.`
+    });
+  }
+  const id = getRouterParam(event, "id");
+  await deleteCMSEntry(event, id);
+  return { ok: true };
+});

package/dist/runtime/server/routes/cms/[collection]/[id].put.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    entry: import("../../../..").CMSEntry;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/[id].put.mjs

@@ -0,0 +1,18 @@
+import { defineEventHandler, getRouterParam, readBody, createError } from "nuxt/server";
+import { updateCMSEntry, getCMSConfig } from "../../../utils/cms.mjs";
+import { requireAuth } from "../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  if (config.collections[collection]?.mode === "file-lock") {
+    throw createError({
+      statusCode: 403,
+      message: `Collection "${collection}" is file-locked. Manage content via Git files.`
+    });
+  }
+  const id = getRouterParam(event, "id");
+  const body = await readBody(event);
+  const entry = await updateCMSEntry(event, id, body || {});
+  return { entry };
+});

package/dist/runtime/server/routes/cms/[collection]/[slug].get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    entry: import("../../../..").CMSEntry;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/[slug].get.mjs

@@ -0,0 +1,19 @@
+import { defineEventHandler, getRouterParam, getQuery, createError } from "nuxt/server";
+import { getCMSEntry } from "../../../utils/cms.mjs";
+export default defineEventHandler(async (event) => {
+  const collection = getRouterParam(event, "collection");
+  const slug = getRouterParam(event, "slug");
+  const q = getQuery(event);
+  const entry = await getCMSEntry(event, collection, slug, {
+    preview: q.preview === "true",
+    previewToken: q.preview_token,
+    previewExpires: q.expires
+  });
+  if (!entry) {
+    throw createError({
+      statusCode: 404,
+      message: `Entry '${slug}' not found in collection '${collection}'`
+    });
+  }
+  return { entry };
+});

package/dist/runtime/server/routes/cms/[collection]/atom.xml.get.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<Response>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/atom.xml.get.mjs

@@ -0,0 +1,69 @@
+import { defineEventHandler, getRouterParam } from "nuxt/server";
+import { getCloudflareEnv } from "../../../../bindings.mjs";
+import { buildAtomXml, formatISO8601, rowToFeedEntry } from "../../../utils/feed.mjs";
+export default defineEventHandler(async (event) => {
+  const collection = getRouterParam(event, "collection") || "";
+  const runtimeConfig = globalThis.__NUXT_RUNTIME_CONFIG__ || {};
+  const site = runtimeConfig.public?.qarpeo?.site || {};
+  if (site.feed === false) {
+    return new Response(
+      `<?xml version="1.0" encoding="UTF-8"?><feed xmlns="http://www.w3.org/2005/Atom"><title>Feed Disabled</title></feed>`,
+      {
+        headers: {
+          "Content-Type": "application/atom+xml; charset=UTF-8"
+        }
+      }
+    );
+  }
+  const feedConfig = typeof site.feed === "object" ? site.feed : {};
+  const baseUrl = (site.url || "").replace(/\/$/, "");
+  const maxItems = feedConfig.maxItems || 50;
+  const cacheMaxAge = feedConfig.cacheMaxAge || 3600;
+  const siteName = site.name || "Site Feed";
+  const collectionTitle = `${siteName} \u2014 ${collection}`;
+  const atomFeedUrl = `${baseUrl}/${collection}/atom.xml`;
+  let xmlBody = "";
+  try {
+    const env = getCloudflareEnv(event);
+    const d1Binding = env.DB || env.DATABASE || env.d1;
+    if (d1Binding && typeof d1Binding.prepare === "function") {
+      const query = "SELECT id, slug, path, collection, title, description, tags, published_at, created_at, updated_at, author_id FROM _qarpeo_cms_entries WHERE status = 'published' AND visibility = 'public' AND collection = ? ORDER BY published_at DESC, created_at DESC LIMIT ?";
+      const stmt = d1Binding.prepare(query);
+      const res = await stmt.bind(collection, maxItems).all();
+      const rows = res?.results || [];
+      const entries = rows.map((row) => rowToFeedEntry(row, baseUrl));
+      const latestUpdated = entries[0]?.updated || formatISO8601(null);
+      xmlBody = buildAtomXml(entries, {
+        title: collectionTitle,
+        id: atomFeedUrl,
+        link: `${baseUrl}/${collection}`,
+        updated: latestUpdated,
+        description: `${collection} entries from ${siteName}`,
+        language: site.defaultLocale || "en"
+      });
+    } else {
+      xmlBody = buildAtomXml([], {
+        title: collectionTitle,
+        id: atomFeedUrl,
+        link: `${baseUrl}/${collection}`,
+        updated: formatISO8601(null),
+        description: `${collection} entries from ${siteName}`
+      });
+    }
+  } catch {
+    xmlBody = buildAtomXml([], {
+      title: collectionTitle,
+      id: atomFeedUrl,
+      link: `${baseUrl}/${collection}`,
+      updated: formatISO8601(null),
+      description: `${collection} entries from ${siteName}`
+    });
+  }
+  return new Response(xmlBody, {
+    headers: {
+      "Content-Type": "application/atom+xml; charset=UTF-8",
+      "Cache-Control": `public, max-age=${cacheMaxAge}, s-maxage=86400`,
+      "X-Content-Type-Options": "nosniff"
+    }
+  });
+});

package/dist/runtime/server/routes/cms/[collection]/by-path.get.d.ts

@@ -0,0 +1,8 @@
+/**
+ * GET /api/cms/:collection/by-path?path=/docs/getting-started Fetches a single published "page"
+ * entry by its computed URL path.
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    entry: import("../../../..").CMSEntry;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/by-path.get.mjs

@@ -0,0 +1,23 @@
+import { defineEventHandler, getQuery, getRouterParam, createError } from "nuxt/server";
+import { getCMSEntryByPath } from "../../../utils/cms.mjs";
+export default defineEventHandler(async (event) => {
+  const collection = getRouterParam(event, "collection");
+  const query = getQuery(event);
+  const path = query.path;
+  const locale = query.locale ? String(query.locale) : void 0;
+  const preview = query.preview === "true";
+  const previewToken = query.preview_token || void 0;
+  const previewExpires = query.expires || void 0;
+  if (!path || typeof path !== "string") {
+    throw createError({ statusCode: 400, message: "path query parameter is required" });
+  }
+  const entry = await getCMSEntryByPath(event, collection, path, locale, {
+    preview,
+    previewToken,
+    previewExpires
+  });
+  if (!entry) {
+    throw createError({ statusCode: 404, message: `No entry found at path ${path}` });
+  }
+  return { entry };
+});

package/dist/runtime/server/routes/cms/[collection]/feed.xml.get.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<Response>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/feed.xml.get.mjs

@@ -0,0 +1,65 @@
+import { defineEventHandler, getRouterParam } from "nuxt/server";
+import { getCloudflareEnv } from "../../../../bindings.mjs";
+import { buildRSSXml, rowToFeedEntry } from "../../../utils/feed.mjs";
+export default defineEventHandler(async (event) => {
+  const collection = getRouterParam(event, "collection") || "";
+  const runtimeConfig = globalThis.__NUXT_RUNTIME_CONFIG__ || {};
+  const site = runtimeConfig.public?.qarpeo?.site || {};
+  if (site.feed === false) {
+    return new Response(
+      `<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Feed Disabled</title></channel></rss>`,
+      {
+        headers: {
+          "Content-Type": "application/rss+xml; charset=UTF-8"
+        }
+      }
+    );
+  }
+  const feedConfig = typeof site.feed === "object" ? site.feed : {};
+  const baseUrl = (site.url || "").replace(/\/$/, "");
+  const maxItems = feedConfig.maxItems || 50;
+  const ttl = feedConfig.ttl || 60;
+  const cacheMaxAge = feedConfig.cacheMaxAge || 3600;
+  const siteName = site.name || "Site Feed";
+  const collectionTitle = `${siteName} \u2014 ${collection}`;
+  let xmlBody = "";
+  try {
+    const env = getCloudflareEnv(event);
+    const d1Binding = env.DB || env.DATABASE || env.d1;
+    if (d1Binding && typeof d1Binding.prepare === "function") {
+      const query = "SELECT id, slug, path, collection, title, description, tags, published_at, created_at, updated_at, author_id FROM _qarpeo_cms_entries WHERE status = 'published' AND visibility = 'public' AND collection = ? ORDER BY published_at DESC, created_at DESC LIMIT ?";
+      const stmt = d1Binding.prepare(query);
+      const res = await stmt.bind(collection, maxItems).all();
+      const rows = res?.results || [];
+      const entries = rows.map((row) => rowToFeedEntry(row, baseUrl));
+      xmlBody = buildRSSXml(entries, {
+        title: collectionTitle,
+        link: `${baseUrl}/${collection}`,
+        description: `${collection} entries from ${siteName}`,
+        ttl,
+        language: site.defaultLocale || "en"
+      });
+    } else {
+      xmlBody = buildRSSXml([], {
+        title: collectionTitle,
+        link: `${baseUrl}/${collection}`,
+        description: `${collection} entries from ${siteName}`,
+        ttl
+      });
+    }
+  } catch {
+    xmlBody = buildRSSXml([], {
+      title: collectionTitle,
+      link: `${baseUrl}/${collection}`,
+      description: `${collection} entries from ${siteName}`,
+      ttl
+    });
+  }
+  return new Response(xmlBody, {
+    headers: {
+      "Content-Type": "application/rss+xml; charset=UTF-8",
+      "Cache-Control": `public, max-age=${cacheMaxAge}, s-maxage=86400`,
+      "X-Content-Type-Options": "nosniff"
+    }
+  });
+});

package/dist/runtime/server/routes/cms/[collection]/index.get.d.ts

@@ -0,0 +1,7 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    entries: import("../../../..").CMSEntry[];
+    total: number;
+    page: number;
+    limit: number;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/index.get.mjs

@@ -0,0 +1,15 @@
+import { defineEventHandler, getRouterParam, getQuery } from "nuxt/server";
+import { queryCMSEntries } from "../../../utils/cms.mjs";
+export default defineEventHandler(async (event) => {
+  const collection = getRouterParam(event, "collection");
+  const q = getQuery(event);
+  const opts = {
+    page: q.page ? Number(q.page) : 1,
+    limit: q.limit ? Number(q.limit) : 10,
+    sort: q.sort || "published_at:desc",
+    status: q.status || "published",
+    tag: q.tag
+  };
+  const result = await queryCMSEntries(event, collection, opts);
+  return result;
+});

package/dist/runtime/server/routes/cms/[collection]/index.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    entry: import("../../../..").CMSEntry;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/index.post.mjs

@@ -0,0 +1,23 @@
+import { defineEventHandler, getRouterParam, readBody, createError } from "nuxt/server";
+import { createCMSEntry, getCMSConfig } from "../../../utils/cms.mjs";
+import { requireAuth } from "../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  const { user } = await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  if (config.collections[collection]?.mode === "file-lock") {
+    throw createError({
+      statusCode: 403,
+      message: `Collection "${collection}" is file-locked. Manage content via Git files.`
+    });
+  }
+  const body = await readBody(event);
+  if (!body?.slug || !body?.title || body?.contentMd === void 0) {
+    throw createError({ statusCode: 400, message: "slug, title, and contentMd are required" });
+  }
+  const entry = await createCMSEntry(event, collection, {
+    ...body,
+    authorId: user.id
+  });
+  return { entry };
+});

package/dist/runtime/server/routes/cms/[collection]/references.get.d.ts

@@ -0,0 +1,19 @@
+/**
+ * GET /api/cms/:collection/references?field=:fieldName
+ *
+ * Returns lightweight candidate entries `{ id, title, slug, status }` from the target collection
+ * declared by the given reference field's `referenceTo` config. Used to populate a reference picker
+ * dropdown in the CMS Admin.
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    entries: {
+        id: string;
+        title: string;
+        slug: string;
+        status: import("../../../../../types").CMSEntryStatus;
+    }[];
+    total: number;
+    page: number;
+    limit: number;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/references.get.mjs

@@ -0,0 +1,47 @@
+import { defineEventHandler, getRouterParam, getQuery, createError } from "nuxt/server";
+import { getCMSConfig, getCollectionFields, queryCMSEntries } from "../../../utils/cms.mjs";
+import { requireAuth } from "../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const collection = getRouterParam(event, "collection");
+  const q = getQuery(event);
+  const fieldName = q.field;
+  if (!fieldName) {
+    throw createError({ statusCode: 400, message: "Query parameter 'field' is required" });
+  }
+  const fields = await getCollectionFields(event, collection);
+  const fieldDef = fields[fieldName];
+  if (!fieldDef) {
+    throw createError({
+      statusCode: 404,
+      message: `Field '${fieldName}' not found in collection '${collection}'`
+    });
+  }
+  if (fieldDef.type !== "reference" || !fieldDef.reference?.to) {
+    throw createError({
+      statusCode: 400,
+      message: `Field '${fieldName}' is not a reference field`
+    });
+  }
+  const targetCollectionId = fieldDef.reference.to;
+  const page = Math.max(1, Number(q.page) || 1);
+  const limit = Math.min(100, Math.max(1, Number(q.limit) || 50));
+  const { entries, total } = await queryCMSEntries(event, targetCollectionId, {
+    status: "all",
+    page,
+    limit,
+    where: fieldDef.reference.filter
+  });
+  return {
+    entries: entries.map((e) => ({
+      id: e.id,
+      title: e.title,
+      slug: e.slug,
+      status: e.status
+    })),
+    total,
+    page,
+    limit
+  };
+});

package/dist/runtime/server/routes/cms/[collection]/surroundings.get.d.ts

@@ -0,0 +1,10 @@
+/**
+ * GET /api/cms/:collection/surroundings?path=/docs/getting-started&fields=description Returns
+ * [prev, next] navigation entries around the given path. fields: comma-separated list of fields to
+ * include in partial objects (e.g. "description,title")
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    prev: import("../../../..").CMSEntry | null;
+    next: import("../../../..").CMSEntry | null;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/[collection]/surroundings.get.mjs

@@ -0,0 +1,12 @@
+import { defineEventHandler, getQuery, getRouterParam, createError } from "nuxt/server";
+import { getCMSEntrySurroundings } from "../../../utils/cms.mjs";
+export default defineEventHandler(async (event) => {
+  const collection = getRouterParam(event, "collection");
+  const { path, fields } = getQuery(event);
+  if (!path || typeof path !== "string") {
+    throw createError({ statusCode: 400, message: "path query parameter is required" });
+  }
+  const fieldList = fields ? String(fields).split(",").map((f) => f.trim()).filter(Boolean) : [];
+  const [prev, next] = await getCMSEntrySurroundings(event, collection, path, fieldList);
+  return { prev, next };
+});

package/dist/runtime/server/routes/cms/collections/[id].delete.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/collections/[id].delete.mjs

@@ -0,0 +1,10 @@
+import { defineEventHandler, getRouterParam } from "nuxt/server";
+import { deleteCMSCollection, getCMSConfig } from "../../../utils/cms.mjs";
+import { requireAuth } from "../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const id = getRouterParam(event, "id");
+  await deleteCMSCollection(event, id);
+  return { ok: true };
+});

package/dist/runtime/server/routes/cms/collections/[id].put.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/collections/[id].put.mjs

@@ -0,0 +1,11 @@
+import { defineEventHandler, readBody, getRouterParam } from "nuxt/server";
+import { updateCMSCollection, getCMSConfig } from "../../../utils/cms.mjs";
+import { requireAuth } from "../../../utils/context.mjs";
+export default defineEventHandler(async (event) => {
+  const config = getCMSConfig(event);
+  await requireAuth(event, { role: config.roles });
+  const id = getRouterParam(event, "id");
+  const body = await readBody(event);
+  await updateCMSCollection(event, id, body || {});
+  return { ok: true };
+});

package/dist/runtime/server/routes/cms/collections/index.get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    collections: import("../../../..").CMSCollection[];
+}>>;
+export default _default;

package/dist/runtime/server/routes/cms/collections/index.get.mjs

@@ -0,0 +1,6 @@
+import { defineEventHandler } from "nuxt/server";
+import { listCMSCollections } from "../../../utils/cms.mjs";
+export default defineEventHandler(async (event) => {
+  const collections = await listCMSCollections(event);
+  return { collections };
+});