weifuwu 0.19.7 → 0.19.9

package/dist/index.js

@@ -1,6 +1,9 @@
 // env.ts
 import { readFileSync, existsSync } from "node:fs";
 import { resolve } from "node:path";
+function isDev() {
+  return process.env.NODE_ENV === "development";
+}
 function loadEnv(path2) {
   const filePath = resolve(process.cwd(), path2 ?? ".env");
   if (!existsSync(filePath)) return;
@@ -92,7 +95,7 @@ async function sendResponse(res, response) {
   res.end();
 }
 async function createTestServer(handler) {
-  const server = serve(handler, { port: 0 });
+  const server = serve(handler, { port: 0, shutdown: false });
   await server.ready;
   return { server, url: `http://localhost:${server.port}` };
 }
@@ -452,9 +455,9 @@ var Router = class _Router {
     for (let i = 0; i < segments.length; i++) {
       pathMws.push(...node.pathMws);
       if (node.wildcard) {
-        const h = node.handlers.get("*") || node.handlers.get(method);
-        if (h) {
-          wildcardHandler = h;
+        const h2 = node.handlers.get("*") || node.handlers.get(method);
+        if (h2) {
+          wildcardHandler = h2;
           wildcardMws = node.middlewares.get(method) || node.middlewares.get("*") || [];
           wildcardIdx = i;
         }
@@ -1260,11 +1263,11 @@ function helmet(options) {
   }
   return async (req, ctx, next) => {
     const res = await next(req, ctx);
-    const h = new Headers(res.headers);
+    const h2 = new Headers(res.headers);
     for (const [k, v] of headers) {
-      if (!h.has(k)) h.set(k, v);
+      if (!h2.has(k)) h2.set(k, v);
     }
-    return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h });
+    return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h2 });
   };
 }
 
@@ -1279,9 +1282,9 @@ function requestId(options) {
     ctx.requestId = id3;
     const res = await next(req, ctx);
     if (res.headers.has(header)) return res;
-    const h = new Headers(res.headers);
-    h.set(header, id3);
-    return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h });
+    const h2 = new Headers(res.headers);
+    h2.set(header, id3);
+    return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h2 });
   };
 }
 
@@ -2845,7 +2848,7 @@ function createHub(opts) {
       }
     });
   }
-  function join9(key, ws) {
+  function join10(key, ws) {
     if (!channels.has(key)) {
       channels.set(key, /* @__PURE__ */ new Set());
       redisSub?.subscribe(`${prefix}${key}`);
@@ -2886,7 +2889,7 @@ function createHub(opts) {
       await redisSub.quit();
     }
   }
-  return { join: join9, leave, broadcast, close };
+  return { join: join10, leave, broadcast, close };
 }
 
 // queue/index.ts
@@ -2905,10 +2908,10 @@ function cronNext(expr, from = /* @__PURE__ */ new Date()) {
   for (let i = 0; i < 525600; i++) {
     const m = candidate.getMonth() + 1;
     const d = candidate.getDate();
-    const h = candidate.getHours();
+    const h2 = candidate.getHours();
     const min = candidate.getMinutes();
     const dw = candidate.getDay();
-    if (fields[4].has(dw) && fields[3].has(m) && fields[2].has(d) && fields[1].has(h) && fields[0].has(min)) {
+    if (fields[4].has(dw) && fields[3].has(m) && fields[2].has(d) && fields[1].has(h2) && fields[0].has(min)) {
       return candidate.getTime();
     }
     candidate.setTime(candidate.getTime() + 6e4);
@@ -3033,7 +3036,7 @@ function queue(opts) {
     running = true;
     poll();
   };
-  mw.stop = function stop() {
+  mw.stop = function stop2() {
     running = false;
     epoch++;
     if (pollTimer) {
@@ -5139,7 +5142,7 @@ async function compileTsxDev(path2) {
   return mod;
 }
 function compile(path2) {
-  return process.env.NODE_ENV !== "production" ? compileTsxDev(path2) : compileTsx(path2);
+  return isDev() ? compileTsxDev(path2) : compileTsx(path2);
 }
 var vendorBundle = null;
 async function compileVendorBundle() {
@@ -5177,7 +5180,7 @@ async function compileVendorBundle() {
 }
 async function compileHotComponent(path2) {
   const absPath = resolve3(path2);
-  const h = id(absPath);
+  const h2 = id(absPath);
   const stdin = `import C from ${JSON.stringify(absPath)};
 (window.__WFW_REFRESH||function(){})(C)`;
   const result = await esbuild.build({
@@ -5192,10 +5195,10 @@ async function compileHotComponent(path2) {
   });
   let code = new TextDecoder().decode(result.outputFiles[0].contents);
   if (code.includes("__require") && (code.includes('"react"') || code.includes("'react'"))) {
-    code = `import __r from '/__wfw/v/bundle';
+    code = `import * as __r from 'react';
 ` + code.replace(/__require\(["']react["']\)/g, "__r");
   }
-  return { hash: h, code };
+  return { hash: h2, code };
 }
 
 // stream.ts
@@ -5212,10 +5215,10 @@ function getPublicEnv() {
   return _publicEnv;
 }
 function buildHeadPayload(opts) {
-  const { ctx, compiledTailwindCss, isDev: isDev2 } = opts;
+  const { ctx, compiledTailwindCss, isDev: isDev3 } = opts;
   const rb = opts.rootBase || "";
   let result = "";
-  if (isDev2) {
+  if (isDev3) {
     const vUrl = `${rb}/__wfw/v/bundle`;
     result += `<script type="importmap">{
   "imports": {
@@ -5233,8 +5236,8 @@ function buildHeadPayload(opts) {
 `;
   }
   if (compiledTailwindCss) {
-    const cssUrl = ctx.tailwindCssUrl || "/__wfw/style.css";
-    result += `<link rel="stylesheet" href="${cssUrl}" />
+    const cssUrl = ctx.tailwindCssUrl;
+    if (cssUrl) result += `<link rel="stylesheet" href="${cssUrl}" />
 `;
   }
   const localeData = ctx.parsed?.__localeData ?? globalThis.__LOCALE_DATA__;
@@ -5337,10 +5340,13 @@ function streamResponse(reactStream, opts) {
   });
 }
 
+// ssr-entries.ts
+var ssrEntries = /* @__PURE__ */ new Map();
+
 // ssr.ts
+var isDev2 = isDev();
 var als = new AsyncLocalStorage();
 __registerAls(() => als.getStore());
-var isDev = process.env.NODE_ENV !== "production";
 var bundleCache = /* @__PURE__ */ new Map();
 var _bundleDirty = false;
 function markClientBundleDirty() {
@@ -5375,7 +5381,7 @@ async function buildClientBundle(entryPath, layoutPaths) {
     const _sc = `(function(){var k='__WEIFUWU_CTX_STORE';var s=typeof globalThis!='undefined'&&globalThis[k];if(!s)return function(){};return function(v){s._ctx={...s._ctx,...v};s._snapshot={params:s._ctx.params,query:s._ctx.query,user:s._ctx.user,parsed:s._ctx.parsed,prefs:s._ctx.prefs,env:s._ctx.env};s._listeners.forEach(function(fn){fn()})}})()`;
     const code = [
       layoutImports,
-      `${isDev ? "import{createRoot}from'react-dom/client';" : "import{hydrateRoot}from'react-dom/client';"}`,
+      `${isDev2 ? "import{createRoot}from'react-dom/client';" : "import{hydrateRoot}from'react-dom/client';"}`,
       `import{createElement}from'react';`,
       `import{TsxContext}from'weifuwu/react';`,
       `import P from${JSON.stringify(absEntry)};`,
@@ -5383,15 +5389,15 @@ async function buildClientBundle(entryPath, layoutPaths) {
       `const c=document.getElementById('__weifuwu_root');`,
       `if(window.__WEIFUWU_PROPS)setCtx({loaderData:window.__WEIFUWU_PROPS});`,
       // Dev: stable proxy chain — _P → _W (stable) → actual component
-      isDev ? `const _W=function(props){return(_W._fn||P)(props)};_W._fn=P;const _P=function(props){return createElement(_W,props)};` : "",
+      isDev2 ? `const _W=function(props){return(_W._fn||P)(props)};_W._fn=P;const _P=function(props){return createElement(_W,props)};` : "",
       // Dev: HMR handler — updates proxy + re-renders root
-      isDev ? `window.__WFW_ENTRY=${JSON.stringify(id2(absEntry))};window.__WFW_REFRESH=function(n){_W._fn=n;window.__WFW_ROOT.render(createElement(App))};` : "",
+      isDev2 ? `window.__WFW_ENTRY=${JSON.stringify(id2(absEntry))};window.__WFW_REFRESH=function(n){_W._fn=n;window.__WFW_ROOT.render(createElement(App))};` : "",
       `function App(){`,
       `const ctx=window.__WEIFUWU_CTX||{};`,
       `return createElement(TsxContext.Provider,{value:ctx},`,
-      isDev ? `createElement(_P,null))` : `createElement(P,null))`,
+      isDev2 ? `createElement(_P,null))` : `createElement(P,null))`,
       `}`,
-      isDev ? `window.__WFW_ROOT=createRoot(c);window.__WFW_ROOT.render(createElement(App));` : `hydrateRoot(c,createElement(App));`
+      isDev2 ? `window.__WFW_ROOT=createRoot(c);window.__WFW_ROOT.render(createElement(App));` : `hydrateRoot(c,createElement(App));`
     ].filter(Boolean).join("");
     const { default: esbuild2 } = await import("esbuild");
     const result = await esbuild2.build({
@@ -5402,9 +5408,9 @@ async function buildClientBundle(entryPath, layoutPaths) {
       jsxImportSource: "react",
       banner: { js: "self.process={env:{}};" },
       loader: { ".node": "empty" },
-      external: isDev ? ["react", "react-dom", "react-dom/client", "react/jsx-runtime", "weifuwu", "weifuwu/react"] : void 0,
+      external: isDev2 ? ["react", "react-dom", "react-dom/client", "react/jsx-runtime", "weifuwu", "weifuwu/react"] : void 0,
       write: false,
-      minify: !isDev
+      minify: !isDev2
     });
     return result.outputFiles[0].contents;
   } catch (err) {
@@ -5413,7 +5419,9 @@ async function buildClientBundle(entryPath, layoutPaths) {
   }
 }
 function ssr(path2) {
-  const entryId = id2(resolve4(path2));
+  const absPath = resolve4(path2);
+  const entryId = id2(absPath);
+  ssrEntries.set(entryId, { path: absPath });
   const bundleKey = `/__ssr/${entryId}.js`;
   const r = new Router();
   r.get("/__ssr/:path", (req, ctx) => {
@@ -5487,7 +5495,7 @@ function ssr(path2) {
         ctx,
         base,
         rootBase: ctx.rootLayoutBase || "",
-        isDev,
+        isDev: isDev2,
         bundle,
         loaderData,
         compiledTailwindCss: ctx.compiledTailwindCss
@@ -5562,7 +5570,7 @@ ${src}`;
 // live.ts
 import chokidar from "chokidar";
 import { existsSync as existsSync4 } from "node:fs";
-import { join as join4, resolve as resolve6 } from "node:path";
+import { dirname as dirname3, join as join4, resolve as resolve6 } from "node:path";
 var clients = /* @__PURE__ */ new Set();
 var hotBundleCache = /* @__PURE__ */ new Map();
 var hotKeys = [];
@@ -5625,6 +5633,24 @@ function liveReload(dir) {
     ignored: /(^|[/\\])\.|node_modules|[/\\]\.weifuwu[/\\]/,
     ignoreInitial: true
   });
+  function findEntries(changedPath) {
+    const matched = [];
+    for (const [, entry] of ssrEntries) {
+      if (!entry.path.startsWith(resolved)) continue;
+      if (entry.path === changedPath) {
+        matched.push(entry.path);
+      } else {
+        const ed = dirname3(entry.path);
+        if (changedPath.startsWith(ed)) matched.push(entry.path);
+      }
+    }
+    if (matched.length === 0) {
+      for (const [, entry] of ssrEntries) {
+        if (entry.path.startsWith(resolved)) matched.push(entry.path);
+      }
+    }
+    return matched;
+  }
   watcher.on("change", async (filePath) => {
     if (/\.tsx?$/i.test(filePath)) {
       if (filePath.endsWith("layout.tsx")) {
@@ -5632,25 +5658,28 @@ function liveReload(dir) {
       }
       clearCompileCache();
       markClientBundleDirty();
+      const targets = existsSync4(entryPath) ? [entryPath] : findEntries(resolve6(filePath));
+      if (targets.length === 0) return broadcastReload();
       try {
-        const target = existsSync4(entryPath) ? entryPath : filePath;
-        await compileTsxDev(target);
-        const { hash, code } = await compileHotComponent(target);
-        setHot(hash, code);
         let css;
         const cssPath = join4(resolved, "app.css");
         if (existsSync4(cssPath)) {
           css = await compileTailwindCss(cssPath, resolved);
         }
-        const entry = id(entryPath);
-        const msg = { type: "component", hash, entry };
-        if (css) msg.css = css;
-        const str = JSON.stringify(msg);
-        for (const ws of clients) {
-          try {
-            ws.send(str);
-          } catch {
-            clients.delete(ws);
+        for (const target of targets) {
+          await compileTsxDev(target);
+          const { hash, code } = await compileHotComponent(target);
+          setHot(hash, code);
+          const entry = id(target);
+          const msg = { type: "component", hash, entry };
+          if (css) msg.css = css;
+          const str = JSON.stringify(msg);
+          for (const ws of clients) {
+            try {
+              ws.send(str);
+            } catch {
+              clients.delete(ws);
+            }
           }
         }
       } catch (e) {
@@ -5676,7 +5705,6 @@ function liveReload(dir) {
 function rootLayout(dir) {
   const r = new Router();
   const resolved = resolve7(dir);
-  const isDev2 = process.env.NODE_ENV !== "production";
   const layoutPath = join5(resolved, "layout.tsx");
   r.use(async (req, ctx, next) => {
     const mod = await compile(layoutPath);
@@ -5687,7 +5715,7 @@ function rootLayout(dir) {
   if (existsSync5(join5(resolved, "app.css"))) {
     r.use(tailwind(resolved));
   }
-  if (isDev2) {
+  if (isDev()) {
     const lr = liveReload(resolved);
     r.use(lr);
     r.close = lr.close;
@@ -5993,7 +6021,7 @@ function createReadTool(ctx) {
 import { tool as tool5 } from "ai";
 import { z as z7 } from "zod";
 import { writeFileSync as writeFileSync2, mkdirSync as mkdirSync3 } from "node:fs";
-import { resolve as resolve9, dirname as dirname3 } from "node:path";
+import { resolve as resolve9, dirname as dirname4 } from "node:path";
 function createWriteTool(ctx) {
   return tool5({
     description: "Create or overwrite a file. Parent directories are created automatically.",
@@ -6006,7 +6034,7 @@ function createWriteTool(ctx) {
       if (!isPathAllowed(resolved, ctx.workspace, ctx.permissions)) {
         return { error: "Path not allowed" };
       }
-      mkdirSync3(dirname3(resolved), { recursive: true });
+      mkdirSync3(dirname4(resolved), { recursive: true });
       writeFileSync2(resolved, content, "utf-8");
       return { path: path2, size: content.length };
     }
@@ -7064,9 +7092,9 @@ function seoMiddleware(options) {
     const url = new URL(req.url);
     const robotTag = getRobotsHeader(headers, url.pathname);
     if (robotTag) {
-      const h = new Headers(res.headers);
-      h.set("X-Robots-Tag", robotTag);
-      return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h });
+      const h2 = new Headers(res.headers);
+      h2.set("X-Robots-Tag", robotTag);
+      return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h2 });
     }
     return res;
   };
@@ -8387,7 +8415,7 @@ function notFound(path2) {
     return streamResponse(stream, {
       ctx,
       base,
-      isDev: process.env.NODE_ENV !== "production",
+      isDev: isDev(),
       compiledTailwindCss: ctx.compiledTailwindCss,
       status: 404
     });
@@ -8434,13 +8462,1244 @@ function errorBoundary(errorPath) {
       return streamResponse(stream, {
         ctx,
         base,
-        isDev: process.env.NODE_ENV !== "production",
+        isDev: isDev(),
         compiledTailwindCss: ctx.compiledTailwindCss,
         status: 500
       });
     }
   };
 }
+
+// cms/content.ts
+async function createContentType(sql2, slug, label, fields, config) {
+  const rows = await sql2`
+    INSERT INTO "_cms_content_types" ("slug", "label", "fields", "config")
+    VALUES (${slug}, ${label}, ${sql2.json(fields)}, ${sql2.json(config ?? {})})
+    RETURNING *
+  `;
+  return mapContentType(rows[0]);
+}
+async function getContentType(sql2, slug) {
+  const rows = await sql2`SELECT * FROM "_cms_content_types" WHERE "slug" = ${slug}`;
+  return rows[0] ? mapContentType(rows[0]) : null;
+}
+async function listContentTypes(sql2) {
+  const rows = await sql2`SELECT * FROM "_cms_content_types" ORDER BY "created_at" ASC`;
+  return rows.map(mapContentType);
+}
+async function updateContentType(sql2, slug, data) {
+  const sets = [];
+  const vals = [];
+  let idx = 1;
+  if (data.label !== void 0) {
+    sets.push(`"label" = $${idx++}`);
+    vals.push(data.label);
+  }
+  if (data.description !== void 0) {
+    sets.push(`"description" = $${idx++}`);
+    vals.push(data.description);
+  }
+  if (data.fields !== void 0) {
+    sets.push(`"fields" = $${idx++}`);
+    vals.push(JSON.stringify(data.fields));
+  }
+  if (data.config !== void 0) {
+    sets.push(`"config" = $${idx++}`);
+    vals.push(JSON.stringify(data.config));
+  }
+  if (sets.length === 0) {
+    const existing = await getContentType(sql2, slug);
+    return existing;
+  }
+  sets.push(`"updated_at" = NOW()`);
+  const query = `UPDATE "_cms_content_types" SET ${sets.join(", ")} WHERE "slug" = $${idx} RETURNING *`;
+  const rows = await sql2.unsafe(query, [...vals, slug]);
+  return mapContentType(rows[0]);
+}
+async function deleteContentType(sql2, slug) {
+  await sql2`DELETE FROM "_cms_content_types" WHERE "slug" = ${slug}`;
+}
+async function createEntry(sql2, data) {
+  const rows = await sql2`
+    INSERT INTO "_cms_entries" ("content_type", "slug", "title", "data", "status", "created_by", "updated_by")
+    VALUES (${data.contentType}, ${data.slug}, ${data.title}, ${sql2.json(data.entryData)}, ${data.status ?? "draft"}, ${data.createdBy ?? null}, ${data.createdBy ?? null})
+    RETURNING *
+  `;
+  return mapEntry(rows[0]);
+}
+async function getEntry(sql2, id3) {
+  const rows = await sql2`SELECT * FROM "_cms_entries" WHERE "id" = ${id3}`;
+  return rows[0] ? mapEntry(rows[0]) : null;
+}
+async function getEntryBySlug(sql2, contentType, slug, status) {
+  const rows = status ? await sql2`SELECT * FROM "_cms_entries" WHERE "content_type" = ${contentType} AND "slug" = ${slug} AND "status" = ${status}` : await sql2`SELECT * FROM "_cms_entries" WHERE "content_type" = ${contentType} AND "slug" = ${slug}`;
+  return rows[0] ? mapEntry(rows[0]) : null;
+}
+async function listEntries(sql2, contentType, status) {
+  const rows = status ? await sql2`SELECT * FROM "_cms_entries" WHERE "content_type" = ${contentType} AND "status" = ${status} ORDER BY "updated_at" DESC` : await sql2`SELECT * FROM "_cms_entries" WHERE "content_type" = ${contentType} ORDER BY "updated_at" DESC`;
+  return rows.map(mapEntry);
+}
+async function updateEntry(sql2, id3, data) {
+  const sets = [];
+  const vals = [];
+  let idx = 1;
+  if (data.slug !== void 0) {
+    sets.push(`"slug" = $${idx++}`);
+    vals.push(data.slug);
+  }
+  if (data.title !== void 0) {
+    sets.push(`"title" = $${idx++}`);
+    vals.push(data.title);
+  }
+  if (data.entryData !== void 0) {
+    sets.push(`"data" = $${idx++}::jsonb`);
+    vals.push(JSON.stringify(data.entryData));
+  }
+  if (data.updatedBy !== void 0) {
+    sets.push(`"updated_by" = $${idx++}`);
+    vals.push(data.updatedBy);
+  }
+  if (sets.length === 0) {
+    const existing = await getEntry(sql2, id3);
+    return existing;
+  }
+  sets.push(`"updated_at" = NOW()`);
+  const query = `UPDATE "_cms_entries" SET ${sets.join(", ")} WHERE "id" = $${idx} RETURNING *`;
+  const rows = await sql2.unsafe(query, [...vals, id3]);
+  return mapEntry(rows[0]);
+}
+async function publishEntry(sql2, id3, userId) {
+  const rows = await sql2`
+    UPDATE "_cms_entries"
+    SET "status" = 'published', "published_at" = NOW(), "updated_by" = ${userId ?? null}, "updated_at" = NOW()
+    WHERE "id" = ${id3}
+    RETURNING *
+  `;
+  return mapEntry(rows[0]);
+}
+async function archiveEntry(sql2, id3) {
+  const rows = await sql2`
+    UPDATE "_cms_entries"
+    SET "status" = 'archived', "updated_at" = NOW()
+    WHERE "id" = ${id3}
+    RETURNING *
+  `;
+  return mapEntry(rows[0]);
+}
+async function deleteEntry(sql2, id3) {
+  await sql2`DELETE FROM "_cms_entries" WHERE "id" = ${id3}`;
+}
+async function searchEntries(sql2, contentType, query, status) {
+  const q = `%${query}%`;
+  const rows = status ? await sql2`
+        SELECT * FROM "_cms_entries"
+        WHERE "content_type" = ${contentType}
+          AND "status" = ${status}
+          AND ("title" ILIKE ${q} OR "data"::text ILIKE ${q})
+        ORDER BY "updated_at" DESC
+        LIMIT 50
+      ` : await sql2`
+        SELECT * FROM "_cms_entries"
+        WHERE "content_type" = ${contentType}
+          AND ("title" ILIKE ${q} OR "data"::text ILIKE ${q})
+        ORDER BY "updated_at" DESC
+        LIMIT 50
+      `;
+  return rows.map(mapEntry);
+}
+async function createVersion(sql2, entryId, entryData, userId) {
+  const maxVer = await sql2`SELECT COALESCE(MAX("version"), 0) + 1 AS next FROM "_cms_versions" WHERE "entry_id" = ${entryId}`;
+  const nextVer = maxVer[0].next;
+  const rows = await sql2`
+    INSERT INTO "_cms_versions" ("entry_id", "version", "data", "created_by")
+    VALUES (${entryId}, ${nextVer}, ${sql2.json(entryData)}, ${userId ?? null})
+    RETURNING *
+  `;
+  return mapVersion(rows[0]);
+}
+async function listVersions(sql2, entryId) {
+  const rows = await sql2`
+    SELECT * FROM "_cms_versions" WHERE "entry_id" = ${entryId} ORDER BY "version" DESC
+  `;
+  return rows.map(mapVersion);
+}
+async function getVersion(sql2, entryId, version) {
+  const rows = await sql2`
+    SELECT * FROM "_cms_versions" WHERE "entry_id" = ${entryId} AND "version" = ${version}
+  `;
+  return rows[0] ? mapVersion(rows[0]) : null;
+}
+function mapContentType(row) {
+  return {
+    id: row.id,
+    slug: row.slug,
+    label: row.label,
+    description: row.description ?? "",
+    fields: typeof row.fields === "string" ? JSON.parse(row.fields) : row.fields,
+    config: typeof row.config === "string" ? JSON.parse(row.config) : row.config ?? {},
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function mapEntry(row) {
+  return {
+    id: row.id,
+    contentType: row.content_type,
+    slug: row.slug,
+    title: row.title,
+    status: row.status,
+    data: typeof row.data === "string" ? JSON.parse(row.data) : row.data ?? {},
+    locale: row.locale ?? null,
+    createdBy: row.created_by ?? null,
+    updatedBy: row.updated_by ?? null,
+    publishedAt: row.published_at ?? null,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function mapVersion(row) {
+  return {
+    id: row.id,
+    entryId: row.entry_id,
+    version: row.version,
+    data: typeof row.data === "string" ? JSON.parse(row.data) : row.data ?? {},
+    createdBy: row.created_by ?? null,
+    createdAt: row.created_at
+  };
+}
+
+// cms/admin.ts
+function esc(s) {
+  if (s === null || s === void 0) return "";
+  return String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function h(s) {
+  return esc(s);
+}
+function redirect(to, status = 303) {
+  return new Response(null, { status, headers: { location: to } });
+}
+var ADMIN_CSS = `
+*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}
+:root{--bg:#f5f6fa;--card:#fff;--text:#1a1a2e;--text-muted:#6b7280;--primary:#4f46e5;--primary-hover:#4338ca;--danger:#ef4444;--danger-hover:#dc2626;--success:#10b981;--border:#e5e7eb;--radius:8px;--shadow:0 1px 3px rgba(0,0,0,.08)}
+body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--bg);color:var(--text);line-height:1.6;min-height:100vh;display:flex}
+a{color:var(--primary);text-decoration:none}
+a:hover{text-decoration:underline}
+h1{font-size:1.5rem;font-weight:700;margin-bottom:1rem}
+h2{font-size:1.2rem;font-weight:600;margin-bottom:.75rem}
+.sidebar{width:240px;background:var(--card);border-right:1px solid var(--border);padding:1.5rem;position:sticky;top:0;height:100vh;overflow-y:auto;flex-shrink:0}
+.sidebar h2{font-size:1rem;color:var(--text-muted);text-transform:uppercase;letter-spacing:.05em;margin-bottom:1rem}
+.sidebar nav{display:flex;flex-direction:column;gap:.25rem}
+.sidebar a{display:block;padding:.5rem .75rem;border-radius:6px;color:var(--text);font-size:.9rem;transition:background .15s}
+.sidebar a:hover{background:#f0f0ff;text-decoration:none}
+.sidebar a.active{background:#eef2ff;color:var(--primary);font-weight:600}
+.sidebar .section{margin-top:1.5rem}
+.main{flex:1;padding:2rem;max-width:1200px}
+.card{background:var(--card);border-radius:var(--radius);box-shadow:var(--shadow);padding:1.5rem;margin-bottom:1.5rem}
+.stat-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:1rem;margin-bottom:2rem}
+.stat-card{background:var(--card);border-radius:var(--radius);box-shadow:var(--shadow);padding:1.25rem;text-align:center}
+.stat-card .num{font-size:2rem;font-weight:700;color:var(--primary)}
+.stat-card .label{font-size:.85rem;color:var(--text-muted);margin-top:.25rem}
+table{width:100%;border-collapse:collapse;font-size:.9rem}
+th,td{padding:.75rem;text-align:left;border-bottom:1px solid var(--border)}
+th{font-weight:600;color:var(--text-muted);font-size:.8rem;text-transform:uppercase;letter-spacing:.05em}
+tr:hover td{background:#f9fafb}
+.badge{display:inline-block;padding:.15rem .5rem;border-radius:999px;font-size:.75rem;font-weight:500}
+.badge-draft{background:#fef3c7;color:#92400e}
+.badge-published{background:#d1fae5;color:#065f46}
+.badge-archived{background:#f3f4f6;color:#374151}
+.btn{display:inline-block;padding:.5rem 1rem;border-radius:6px;font-size:.875rem;font-weight:500;border:none;cursor:pointer;transition:all .15s;text-decoration:none;line-height:1.4}
+.btn-primary{background:var(--primary);color:#fff}
+.btn-primary:hover{background:var(--primary-hover);text-decoration:none}
+.btn-danger{background:var(--danger);color:#fff}
+.btn-danger:hover{background:var(--danger-hover);text-decoration:none}
+.btn-success{background:var(--success);color:#fff}
+.btn-success:hover{opacity:.9;text-decoration:none}
+.btn-outline{background:transparent;border:1px solid var(--border);color:var(--text)}
+.btn-outline:hover{background:var(--bg);text-decoration:none}
+.btn-sm{padding:.3rem .6rem;font-size:.8rem}
+.btn-group{display:flex;gap:.5rem;flex-wrap:wrap}
+.mb-1{margin-bottom:.5rem}
+.mb-2{margin-bottom:1rem}
+.mt-2{margin-top:1rem}
+.flex{display:flex}
+.justify-between{justify-content:space-between}
+.items-center{align-items:center}
+.gap-2{gap:.5rem}
+.form-group{margin-bottom:1rem}
+.form-group label{display:block;font-size:.875rem;font-weight:500;margin-bottom:.25rem;color:var(--text)}
+.form-group .help{font-size:.8rem;color:var(--text-muted);margin-top:.25rem}
+input[type=text],input[type=number],input[type=url],input[type=datetime-local],select,textarea{width:100%;padding:.5rem .75rem;border:1px solid var(--border);border-radius:6px;font-size:.9rem;font-family:inherit;transition:border-color .15s}
+input:focus,select:focus,textarea:focus{outline:none;border-color:var(--primary);box-shadow:0 0 0 3px rgba(79,70,229,.1)}
+textarea.code{font-family:'SF Mono','Fira Code',monospace;font-size:.85rem}
+input[type=checkbox]{margin-right:.5rem}
+.alert{padding:.75rem 1rem;border-radius:6px;margin-bottom:1rem;font-size:.9rem}
+.alert-success{background:#d1fae5;color:#065f46;border:1px solid #a7f3d0}
+.alert-error{background:#fee2e2;color:#991b1b;border:1px solid #fecaca}
+.empty{text-align:center;padding:3rem 1rem;color:var(--text-muted)}
+.empty p{font-size:1rem;margin-bottom:1rem}
+.pagination{display:flex;gap:.5rem;justify-content:center;margin-top:1rem}
+.media-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(160px,1fr));gap:1rem}
+.media-item{background:var(--card);border-radius:var(--radius);box-shadow:var(--shadow);overflow:hidden;transition:box-shadow .15s}
+.media-item:hover{box-shadow:0 4px 12px rgba(0,0,0,.12)}
+.media-item img{width:100%;height:140px;object-fit:cover;display:block}
+.media-item .meta{padding:.5rem;font-size:.8rem}
+.media-item .meta .name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-weight:500}
+.media-item .meta .info{color:var(--text-muted);font-size:.75rem}
+.field-row{display:flex;gap:.75rem;align-items:center;margin-bottom:.5rem;padding:.5rem;background:var(--bg);border-radius:6px}
+.field-row input[type=text]{flex:1}
+.field-row select{width:160px;flex:none}
+`;
+function flashMessage(ctx) {
+  const msg = ctx.query?.message;
+  const err = ctx.query?.error;
+  if (msg) return `<div class="alert alert-success">${h(msg)}</div>`;
+  if (err) return `<div class="alert alert-error">${h(err)}</div>`;
+  return "";
+}
+function adminLayout(title, content, ctx, activeNav) {
+  const base = (ctx.mountPath || "").replace(/\/+$/, "");
+  function navItem(href, label, icon, match) {
+    const active = activeNav && match && activeNav.startsWith(match);
+    return `<a href="${base}${href}" class="${active ? "active" : ""}">${icon} ${label}</a>`;
+  }
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${h(title)} \u2014 CMS</title>
+<style>${ADMIN_CSS}</style>
+</head>
+<body>
+<div class="sidebar">
+  <h2>\u{1F4E6} CMS</h2>
+  <nav>
+    ${navItem("/admin", "Dashboard", "", "")}
+  </nav>
+  <nav class="section">
+    ${navItem("/admin/content-types", "Content Types", "", "/admin/content-types")}
+    ${navItem("/admin/media", "Media Library", "", "/admin/media")}
+  </nav>
+</div>
+<div class="main">
+  ${flashMessage(ctx)}
+  ${content}
+</div>
+</body>
+</html>`;
+}
+async function renderDashboard2(sql2, ctx) {
+  const types = await listContentTypes(sql2);
+  const totalTypes = types.length;
+  let totalEntries = 0;
+  let publishedEntries = 0;
+  for (const t of types) {
+    const all = await listEntries(sql2, t.slug);
+    totalEntries += all.length;
+    publishedEntries += all.filter((e) => e.status === "published").length;
+  }
+  const recentEntries = [];
+  for (const t of types) {
+    const entries = await listEntries(sql2, t.slug);
+    recentEntries.push(...entries.slice(0, 5));
+  }
+  recentEntries.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+  const recent = recentEntries.slice(0, 10);
+  const stats = `
+    <div class="stat-grid">
+      <div class="stat-card"><div class="num">${totalTypes}</div><div class="label">Content Types</div></div>
+      <div class="stat-card"><div class="num">${totalEntries}</div><div class="label">Total Entries</div></div>
+      <div class="stat-card"><div class="num">${publishedEntries}</div><div class="label">Published</div></div>
+    </div>
+  `;
+  let content = `<h1>Dashboard</h1>${stats}`;
+  if (types.length === 0) {
+    content += `
+      <div class="card empty">
+        <p>No content types yet.</p>
+        <a href="${baseHref(ctx)}/admin/content-types/new" class="btn btn-primary">Create your first Content Type</a>
+      </div>
+    `;
+    return adminLayout("Dashboard", content, ctx, "");
+  }
+  content += `<div class="card"><h2>Recent Entries</h2>`;
+  if (recent.length === 0) {
+    content += `<div class="empty"><p>No entries yet.</p></div>`;
+  } else {
+    content += `<table><thead><tr><th>Title</th><th>Type</th><th>Status</th><th>Updated</th></tr></thead><tbody>`;
+    for (const e of recent) {
+      const ct = types.find((t) => t.slug === e.contentType);
+      content += `<tr><td><a href="${baseHref(ctx)}/admin/content/${e.contentType}/${e.id}/edit">${h(e.title)}</a></td><td>${h(ct?.label || e.contentType)}</td><td>${statusBadge(e.status)}</td><td>${formatDate(e.updatedAt)}</td></tr>`;
+    }
+    content += `</tbody></table>`;
+  }
+  content += `</div>`;
+  content += `<div class="card"><h2>Quick Actions</h2>
+    <div class="btn-group">
+      <a href="${baseHref(ctx)}/admin/content-types/new" class="btn btn-primary">New Content Type</a>
+      ${types.map((t) => `<a href="${baseHref(ctx)}/admin/content/${t.slug}/new" class="btn btn-outline">New ${h(t.label)}</a>`).join("")}
+    </div>
+  </div>`;
+  return adminLayout("Dashboard", content, ctx, "");
+}
+function baseHref(ctx) {
+  return (ctx.mountPath || "").replace(/\/+$/, "");
+}
+function statusBadge(status) {
+  const cls = status === "published" ? "badge-published" : status === "draft" ? "badge-draft" : "badge-archived";
+  return `<span class="badge ${cls}">${status}</span>`;
+}
+function formatDate(d) {
+  if (!d) return "";
+  const date = new Date(d);
+  return date.toLocaleDateString("en-US", { month: "short", day: "numeric", year: "numeric", hour: "2-digit", minute: "2-digit" });
+}
+async function renderContentTypeList(sql2, ctx) {
+  const types = await listContentTypes(sql2);
+  let content = `<div class="flex justify-between items-center mb-2">
+    <h1>Content Types</h1>
+    <a href="${baseHref(ctx)}/admin/content-types/new" class="btn btn-primary">+ New Type</a>
+  </div>`;
+  if (types.length === 0) {
+    content += `<div class="card empty"><p>No content types defined.</p></div>`;
+  } else {
+    content += `<div class="card"><table><thead><tr><th>Label</th><th>Slug</th><th>Fields</th><th>Entries</th><th>Created</th><th></th></tr></thead><tbody>`;
+    for (const t of types) {
+      const entries = await listEntries(sql2, t.slug);
+      content += `<tr>
+        <td><a href="${baseHref(ctx)}/admin/content/${t.slug}"><strong>${h(t.label)}</strong></a></td>
+        <td><code>${h(t.slug)}</code></td>
+        <td>${t.fields.length}</td>
+        <td>${entries.length}</td>
+        <td>${formatDate(t.createdAt)}</td>
+        <td>
+          <div class="btn-group">
+            <a href="${baseHref(ctx)}/admin/content-types/${t.slug}/edit" class="btn btn-outline btn-sm">Edit</a>
+            <a href="${baseHref(ctx)}/admin/content/${t.slug}" class="btn btn-outline btn-sm">Entries</a>
+            <form method="POST" action="${baseHref(ctx)}/admin/content-types/${t.slug}/delete" onsubmit="return confirm('Delete this content type and all its entries?')">
+              <button type="submit" class="btn btn-danger btn-sm">Delete</button>
+            </form>
+          </div>
+        </td>
+      </tr>`;
+    }
+    content += `</tbody></table></div>`;
+  }
+  return adminLayout("Content Types", content, ctx, "/admin/content-types");
+}
+function renderContentTypeForm(ctx, existing) {
+  const base = baseHref(ctx);
+  const isEdit = !!existing;
+  const action = isEdit ? `${base}/admin/content-types/${existing.slug}` : `${base}/admin/content-types`;
+  const title = isEdit ? `Edit ${existing.label}` : "New Content Type";
+  const ct = existing || { slug: "", label: "", description: "", fields: [], config: {} };
+  const fieldsJson = JSON.stringify(ct.fields, null, 2);
+  const configJson = JSON.stringify(ct.config || {}, null, 2);
+  let content = `<h1>${title}</h1>
+  <div class="card">
+    <form method="POST" action="${action}">
+      <div class="form-group">
+        <label for="slug">Slug</label>
+        <input type="text" id="slug" name="slug" value="${h(ct.slug)}" required${isEdit ? ' readonly style="background:#f3f4f6"' : ""} placeholder="e.g., post, page, product">
+        <div class="help">Unique identifier used in URLs and API</div>
+      </div>
+      <div class="form-group">
+        <label for="label">Label</label>
+        <input type="text" id="label" name="label" value="${h(ct.label)}" required placeholder="e.g., Post, Page, Product">
+      </div>
+      <div class="form-group">
+        <label for="description">Description</label>
+        <textarea id="description" name="description" rows="2">${h(ct.description)}</textarea>
+      </div>
+      <div class="form-group">
+        <label for="fields">Fields (JSON)</label>
+        <textarea id="fields" name="fields" rows="12" class="code" required>${h(fieldsJson)}</textarea>
+        <div class="help">Array of field definitions. <a href="#" onclick="return false" style="cursor:help">See docs</a></div>
+      </div>
+      <div class="form-group">
+        <label for="config">Config (JSON)</label>
+        <textarea id="config" name="config" rows="4" class="code">${h(configJson)}</textarea>
+      </div>
+      <div class="btn-group">
+        <button type="submit" class="btn btn-primary">${isEdit ? "Update" : "Create"}</button>
+        <a href="${base}/admin/content-types" class="btn btn-outline">Cancel</a>
+      </div>
+    </form>
+  </div>`;
+  return adminLayout(title, content, ctx, "/admin/content-types");
+}
+async function renderEntryList(sql2, typeSlug, ctx) {
+  const ct = await getContentType(sql2, typeSlug);
+  if (!ct) {
+    return adminLayout("Not Found", `<div class="card"><p>Content type "${h(typeSlug)}" not found.</p></div>`, ctx, "/admin/content-types");
+  }
+  const entries = await listEntries(sql2, typeSlug);
+  const searchQ = ctx.query?.q;
+  let content = `<div class="flex justify-between items-center mb-2">
+    <h1>${h(ct.label)} <span style="font-weight:400;font-size:.9rem;color:var(--text-muted)">(${h(ct.slug)})</span></h1>
+    <a href="${baseHref(ctx)}/admin/content/${typeSlug}/new" class="btn btn-primary">+ New ${h(ct.label)}</a>
+  </div>`;
+  if (entries.length === 0) {
+    content += `<div class="card empty">
+      <p>No entries yet.</p>
+      <a href="${baseHref(ctx)}/admin/content/${typeSlug}/new" class="btn btn-primary">Create first entry</a>
+    </div>`;
+  } else {
+    const titleField = ct.config?.titleField || "title";
+    content += `<div class="card"><table><thead><tr><th>${h(titleField === "title" ? "Title" : titleField)}</th><th>Slug</th><th>Status</th><th>Updated</th><th></th></tr></thead><tbody>`;
+    for (const e of entries) {
+      const displayTitle = e.title || e.data[titleField] || `(ID: ${e.id})`;
+      content += `<tr>
+        <td><a href="${baseHref(ctx)}/admin/content/${typeSlug}/${e.id}/edit"><strong>${h(displayTitle)}</strong></a></td>
+        <td><code>${h(e.slug)}</code></td>
+        <td>${statusBadge(e.status)}</td>
+        <td>${formatDate(e.updatedAt)}</td>
+        <td>
+          <div class="btn-group">
+            <a href="${baseHref(ctx)}/admin/content/${typeSlug}/${e.id}/edit" class="btn btn-outline btn-sm">Edit</a>
+            ${e.status === "draft" ? `<form method="POST" action="${baseHref(ctx)}/admin/content/${typeSlug}/${e.id}/publish"><button type="submit" class="btn btn-success btn-sm">Publish</button></form>` : ""}
+            ${e.status === "published" ? `<form method="POST" action="${baseHref(ctx)}/admin/content/${typeSlug}/${e.id}/archive"><button type="submit" class="btn btn-outline btn-sm">Archive</button></form>` : ""}
+            ${e.status !== "published" ? `<form method="POST" action="${baseHref(ctx)}/admin/content/${typeSlug}/${e.id}/delete" onsubmit="return confirm('Delete this entry?')"><button type="submit" class="btn btn-danger btn-sm">Delete</button></form>` : ""}
+          </div>
+        </td>
+      </tr>`;
+    }
+    content += `</tbody></table></div>`;
+  }
+  return adminLayout(ct.label, content, ctx, "/admin/content-types");
+}
+async function renderEntryForm(sql2, typeSlug, ctx, existing) {
+  const ct = await getContentType(sql2, typeSlug);
+  if (!ct) {
+    return adminLayout("Not Found", `<div class="card"><p>Content type "${h(typeSlug)}" not found.</p></div>`, ctx, "/admin/content-types");
+  }
+  const base = baseHref(ctx);
+  const isEdit = !!existing;
+  const action = isEdit ? `${base}/admin/content/${typeSlug}/${existing.id}` : `${base}/admin/content/${typeSlug}`;
+  const title = isEdit ? `Edit ${existing.title || existing.slug || `Entry #${existing.id}`}` : `New ${ct.label}`;
+  const entry = existing || { slug: "", title: "", data: {}, status: "draft", id: 0, locale: null, createdBy: null, updatedBy: null, publishedAt: null, createdAt: "", updatedAt: "", contentType: typeSlug };
+  const data = entry.data || {};
+  let content = `<div class="flex justify-between items-center mb-2">
+    <h1>${h(title)}</h1>
+    ${isEdit ? `<div class="btn-group">
+      <span class="badge ${entry.status === "published" ? "badge-published" : entry.status === "draft" ? "badge-draft" : "badge-archived"}" style="font-size:.9rem;padding:.3rem .75rem">${entry.status}</span>
+    </div>` : ""}
+  </div>`;
+  if (isEdit) {
+    content += `<div class="btn-group mb-2">
+      ${entry.status === "draft" ? `<form method="POST" action="${base}/admin/content/${typeSlug}/${entry.id}/publish"><button type="submit" class="btn btn-success btn-sm">Publish</button></form>` : ""}
+      ${entry.status === "published" ? `<form method="POST" action="${base}/admin/content/${typeSlug}/${entry.id}/archive"><button type="submit" class="btn btn-outline btn-sm">Archive</button></form>` : ""}
+      ${entry.status !== "published" ? `<form method="POST" action="${base}/admin/content/${typeSlug}/${entry.id}/delete" onsubmit="return confirm('Delete this entry?')"><button type="submit" class="btn btn-danger btn-sm">Delete</button></form>` : ""}
+      ${isEdit ? `<a href="${base}/admin/content/${typeSlug}/${entry.id}/versions" class="btn btn-outline btn-sm">Versions</a>` : ""}
+    </div>`;
+  }
+  content += `<div class="card">
+    <form method="POST" action="${action}">
+      <div class="form-group">
+        <label for="title">${h(ct.config?.titleField || "Title")}</label>
+        <input type="text" id="title" name="title" value="${h(entry.title)}" required placeholder="Enter title">
+      </div>
+      <div class="form-group">
+        <label for="slug">Slug</label>
+        <input type="text" id="slug" name="slug" value="${h(entry.slug)}" placeholder="Auto-generated from title if empty">
+      </div>`;
+  for (const field of ct.fields) {
+    content += renderFormField(field, data[field.name], "data");
+  }
+  content += `
+      <div class="btn-group mt-2">
+        <button type="submit" class="btn btn-primary">${isEdit ? "Update" : "Create"}</button>
+        <a href="${base}/admin/content/${typeSlug}" class="btn btn-outline">Cancel</a>
+      </div>
+    </form>
+  </div>`;
+  return adminLayout(title, content, ctx, "/admin/content-types");
+}
+function renderFormField(field, value, prefix) {
+  const name = `${prefix}[${field.name}]`;
+  const val = value !== void 0 && value !== null ? String(value) : "";
+  let input = "";
+  switch (field.type) {
+    case "string":
+    case "slug":
+      input = `<input type="text" id="field-${field.name}" name="${name}" value="${h(val)}" ${field.required ? "required" : ""} placeholder="${h(field.placeholder || "")}">`;
+      break;
+    case "richtext":
+      input = `<textarea id="field-${field.name}" name="${name}" rows="10" ${field.required ? "required" : ""}>${h(val)}</textarea>`;
+      break;
+    case "integer":
+      input = `<input type="number" id="field-${field.name}" name="${name}" value="${h(val)}" step="1" ${field.required ? "required" : ""}>`;
+      break;
+    case "float":
+      input = `<input type="number" id="field-${field.name}" name="${name}" value="${h(val)}" step="0.01" ${field.required ? "required" : ""}>`;
+      break;
+    case "boolean":
+      input = `<input type="hidden" name="${name}" value="false"><input type="checkbox" id="field-${field.name}" name="${name}" value="true" ${val === "true" ? "checked" : ""}>`;
+      break;
+    case "datetime":
+      input = `<input type="datetime-local" id="field-${field.name}" name="${name}" value="${h(val)}" ${field.required ? "required" : ""}>`;
+      break;
+    case "json":
+      input = `<textarea id="field-${field.name}" name="${name}" rows="8" class="code">${h(val)}</textarea>`;
+      break;
+    case "enum": {
+      const opts = (field.options || []).map(
+        (o) => `<option value="${h(o)}" ${o === val ? "selected" : ""}>${h(o)}</option>`
+      ).join("");
+      input = `<select id="field-${field.name}" name="${name}" ${field.required ? "required" : ""}><option value="">\u2014 Select \u2014</option>${opts}</select>`;
+      break;
+    }
+    case "image":
+      input = `<input type="text" id="field-${field.name}" name="${name}" value="${h(val)}" placeholder="Media URL or path" ${field.required ? "required" : ""}>`;
+      break;
+    case "gallery":
+      input = `<input type="text" id="field-${field.name}" name="${name}" value="${h(val)}" placeholder="Comma-separated media URLs">`;
+      break;
+    case "relation":
+      input = `<input type="text" id="field-${field.name}" name="${name}" value="${h(val)}" ${field.required ? "required" : ""} placeholder="Related ${h(field.relation?.contentType || "entry")} ID or slug">`;
+      break;
+    default:
+      input = `<input type="text" id="field-${field.name}" name="${name}" value="${h(val)}">`;
+  }
+  return `
+      <div class="form-group">
+        <label for="field-${field.name}">${h(field.name)}${field.required ? ' <span style="color:var(--danger)">*</span>' : ""}</label>
+        ${input}
+        ${field.helpText ? `<div class="help">${h(field.helpText)}</div>` : ""}
+      </div>`;
+}
+async function renderVersions(sql2, typeSlug, entryId, ctx) {
+  const ct = await getContentType(sql2, typeSlug);
+  const entry = await getEntry(sql2, entryId);
+  if (!ct || !entry) {
+    return adminLayout("Not Found", `<div class="card"><p>Entry not found.</p></div>`, ctx, "/admin/content-types");
+  }
+  const versions = await listVersions(sql2, entryId);
+  const base = baseHref(ctx);
+  let content = `<div class="flex justify-between items-center mb-2">
+    <h1>Versions: ${h(entry.title)}</h1>
+    <a href="${base}/admin/content/${typeSlug}/${entryId}/edit" class="btn btn-outline">\u2190 Back to Editor</a>
+  </div>`;
+  if (versions.length === 0) {
+    content += `<div class="card empty"><p>No versions saved.</p></div>`;
+  } else {
+    content += `<div class="card"><table><thead><tr><th>Version</th><th>Created</th><th></th></tr></thead><tbody>`;
+    for (const v of versions) {
+      content += `<tr>
+        <td><strong>#${v.version}</strong></td>
+        <td>${formatDate(v.createdAt)}</td>
+        <td>
+          <div class="btn-group">
+            <form method="POST" action="${base}/admin/content/${typeSlug}/${entryId}/restore/${v.version}" onsubmit="return confirm('Restore version #${v.version}? Current data will be replaced.')">
+              <button type="submit" class="btn btn-outline btn-sm">Restore</button>
+            </form>
+          </div>
+        </td>
+      </tr>`;
+    }
+    content += `</tbody></table></div>`;
+  }
+  return adminLayout(`Versions: ${entry.title}`, content, ctx, "/admin/content-types");
+}
+function registerAdminRoutes(router, sql2) {
+  const h2 = (handler) => (req, ctx) => handler(sql2, req, ctx);
+  router.get("/admin", h2(async (_sql, req, ctx) => {
+    const html = await renderDashboard2(sql2, ctx);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.get("/admin/content-types", h2(async (_sql, req, ctx) => {
+    const html = await renderContentTypeList(sql2, ctx);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.get("/admin/content-types/new", h2(async (_sql, req, ctx) => {
+    const html = renderContentTypeForm(ctx);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.post("/admin/content-types", h2(async (_sql, req, ctx) => {
+    try {
+      const fd = await req.formData();
+      const slug = fd.get("slug")?.trim();
+      const label = fd.get("label")?.trim();
+      const description = fd.get("description") || "";
+      const fieldsRaw = fd.get("fields") || "[]";
+      const configRaw = fd.get("config") || "{}";
+      let fields;
+      let config;
+      try {
+        fields = JSON.parse(fieldsRaw);
+      } catch {
+        fields = [];
+      }
+      try {
+        config = JSON.parse(configRaw);
+      } catch {
+        config = {};
+      }
+      if (!slug || !label) throw new Error("Slug and label are required");
+      await createContentType(sql2, slug, label, fields, config);
+      return redirect(`${baseHref(ctx)}/admin/content-types?message=${encodeURIComponent(`Content type "${label}" created`)}`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content-types/new?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.get("/admin/content-types/:slug/edit", h2(async (_sql, req, ctx) => {
+    const ct = await getContentType(sql2, ctx.params.slug);
+    if (!ct) {
+      return redirect(`${baseHref(ctx)}/admin/content-types?error=${encodeURIComponent("Content type not found")}`, 303);
+    }
+    const html = renderContentTypeForm(ctx, ct);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.post("/admin/content-types/:slug", h2(async (_sql, req, ctx) => {
+    try {
+      const fd = await req.formData();
+      const label = fd.get("label")?.trim();
+      const description = fd.get("description") || "";
+      const fieldsRaw = fd.get("fields") || "[]";
+      const configRaw = fd.get("config") || "{}";
+      let fields;
+      let config;
+      try {
+        fields = JSON.parse(fieldsRaw);
+      } catch {
+        fields = [];
+      }
+      try {
+        config = JSON.parse(configRaw);
+      } catch {
+        config = {};
+      }
+      await updateContentType(sql2, ctx.params.slug, { label, description, fields, config });
+      return redirect(`${baseHref(ctx)}/admin/content-types?message=${encodeURIComponent(`Content type updated`)}`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content-types/${ctx.params.slug}/edit?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.post("/admin/content-types/:slug/delete", h2(async (_sql, req, ctx) => {
+    try {
+      await deleteContentType(sql2, ctx.params.slug);
+      return redirect(`${baseHref(ctx)}/admin/content-types?message=Content type deleted`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content-types?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.get("/admin/content/:type", h2(async (_sql, req, ctx) => {
+    const html = await renderEntryList(sql2, ctx.params.type, ctx);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.get("/admin/content/:type/new", h2(async (_sql, req, ctx) => {
+    const html = await renderEntryForm(sql2, ctx.params.type, ctx);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.post("/admin/content/:type", h2(async (_sql, req, ctx) => {
+    try {
+      const ct = await getContentType(sql2, ctx.params.type);
+      if (!ct) throw new Error("Content type not found");
+      const fd = await req.formData();
+      const title = fd.get("title")?.trim() || "Untitled";
+      let slug = fd.get("slug")?.trim() || "";
+      if (!slug) slug = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || `entry-${Date.now()}`;
+      const entryData = parseFormDataToObject(fd, ct.fields);
+      const entry = await createEntry(sql2, { contentType: ct.slug, slug, title, entryData });
+      await createVersion(sql2, entry.id, entryData);
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${entry.id}/edit?message=Created`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/new?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.get("/admin/content/:type/:id/edit", h2(async (_sql, req, ctx) => {
+    const entryId = parseInt(ctx.params.id, 10);
+    if (isNaN(entryId)) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}?error=Invalid ID`, 303);
+    }
+    const entry = await getEntry(sql2, entryId);
+    if (!entry) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}?error=Entry not found`, 303);
+    }
+    const html = await renderEntryForm(sql2, ctx.params.type, ctx, entry);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.post("/admin/content/:type/:id", h2(async (_sql, req, ctx) => {
+    try {
+      const entryId = parseInt(ctx.params.id, 10);
+      const ct = await getContentType(sql2, ctx.params.type);
+      if (!ct) throw new Error("Content type not found");
+      const entry = await getEntry(sql2, entryId);
+      if (!entry) throw new Error("Entry not found");
+      const fd = await req.formData();
+      const title = fd.get("title")?.trim() || entry.title;
+      let slug = fd.get("slug")?.trim() || "";
+      if (!slug) slug = entry.slug;
+      const entryData = parseFormDataToObject(fd, ct.fields);
+      const oldData = entry.data;
+      await createVersion(sql2, entryId, oldData);
+      await updateEntry(sql2, entryId, { slug, title, entryData });
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${entryId}/edit?message=Updated`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${ctx.params.id}/edit?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.post("/admin/content/:type/:id/publish", h2(async (_sql, req, ctx) => {
+    try {
+      const entryId = parseInt(ctx.params.id, 10);
+      await publishEntry(sql2, entryId);
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${entryId}/edit?message=Published`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${ctx.params.id}/edit?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.post("/admin/content/:type/:id/archive", h2(async (_sql, req, ctx) => {
+    try {
+      const entryId = parseInt(ctx.params.id, 10);
+      await archiveEntry(sql2, entryId);
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${entryId}/edit?message=Archived`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${ctx.params.id}/edit?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.post("/admin/content/:type/:id/delete", h2(async (_sql, req, ctx) => {
+    try {
+      const entryId = parseInt(ctx.params.id, 10);
+      await deleteEntry(sql2, entryId);
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}?message=Entry deleted`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+  router.get("/admin/content/:type/:id/versions", h2(async (_sql, req, ctx) => {
+    const entryId = parseInt(ctx.params.id, 10);
+    const html = await renderVersions(sql2, ctx.params.type, entryId, ctx);
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  }));
+  router.post("/admin/content/:type/:id/restore/:version", h2(async (_sql, req, ctx) => {
+    try {
+      const entryId = parseInt(ctx.params.id, 10);
+      const version = parseInt(ctx.params.version, 10);
+      const ct = await getContentType(sql2, ctx.params.type);
+      if (!ct) throw new Error("Content type not found");
+      const entry = await getEntry(sql2, entryId);
+      if (!entry) throw new Error("Entry not found");
+      const ver = await getVersion(sql2, entryId, version);
+      if (!ver) throw new Error("Version not found");
+      await createVersion(sql2, entryId, entry.data);
+      await updateEntry(sql2, entryId, { entryData: ver.data });
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${entryId}/edit?message=Version ${version} restored`, 303);
+    } catch (err) {
+      return redirect(`${baseHref(ctx)}/admin/content/${ctx.params.type}/${ctx.params.id}/edit?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  }));
+}
+function parseFormDataToObject(fd, fields) {
+  const data = {};
+  for (const field of fields) {
+    const val = fd.get(`data[${field.name}]`);
+    if (val === null) continue;
+    const strVal = val;
+    switch (field.type) {
+      case "integer":
+        data[field.name] = strVal ? parseInt(strVal, 10) : null;
+        break;
+      case "float":
+        data[field.name] = strVal ? parseFloat(strVal) : null;
+        break;
+      case "boolean":
+        data[field.name] = strVal === "true";
+        break;
+      case "json":
+        try {
+          data[field.name] = JSON.parse(strVal);
+        } catch {
+          data[field.name] = strVal;
+        }
+        break;
+      default:
+        data[field.name] = strVal;
+    }
+  }
+  return data;
+}
+
+// cms/api.ts
+function registerApiRoutes(router, sql2) {
+  router.get("/api/:type", async (req, ctx) => {
+    try {
+      const ct = await getContentType(sql2, ctx.params.type);
+      if (!ct) {
+        return Response.json({ error: "Content type not found" }, { status: 404 });
+      }
+      const q = ctx.query?.q;
+      let entries;
+      if (q) {
+        entries = await searchEntries(sql2, ct.slug, q, "published");
+      } else {
+        entries = await listEntries(sql2, ct.slug, "published");
+      }
+      const fields = ct.fields;
+      return Response.json({
+        data: entries.map((e) => serializeEntry(e, fields)),
+        meta: {
+          total: entries.length,
+          type: ct.slug
+        }
+      });
+    } catch (err) {
+      return Response.json({ error: err.message }, { status: 500 });
+    }
+  });
+  router.get("/api/:type/:slug", async (req, ctx) => {
+    try {
+      const ct = await getContentType(sql2, ctx.params.type);
+      if (!ct) {
+        return Response.json({ error: "Content type not found" }, { status: 404 });
+      }
+      const entry = await getEntryBySlug(sql2, ct.slug, ctx.params.slug, "published");
+      if (!entry) {
+        return Response.json({ error: "Entry not found" }, { status: 404 });
+      }
+      return Response.json({
+        data: serializeEntry(entry, ct.fields)
+      });
+    } catch (err) {
+      return Response.json({ error: err.message }, { status: 500 });
+    }
+  });
+}
+function serializeEntry(entry, fields) {
+  return {
+    id: entry.id,
+    slug: entry.slug,
+    title: entry.title,
+    ...entry.data,
+    meta: {
+      type: entry.contentType,
+      status: entry.status,
+      publishedAt: entry.publishedAt,
+      createdAt: entry.createdAt,
+      updatedAt: entry.updatedAt
+    }
+  };
+}
+
+// cms/media.ts
+import { writeFile as writeFile2, mkdir as mkdir3 } from "node:fs/promises";
+import { join as join9, extname as extname3 } from "node:path";
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { existsSync as existsSync8 } from "node:fs";
+function redirect2(to, status = 303) {
+  return new Response(null, { status, headers: { location: to } });
+}
+async function createMediaTable(sql2) {
+  await sql2.unsafe(`
+    CREATE TABLE IF NOT EXISTS "_cms_media" (
+      "id" SERIAL PRIMARY KEY,
+      "filename" TEXT NOT NULL,
+      "original_name" TEXT NOT NULL,
+      "mimetype" TEXT NOT NULL DEFAULT 'application/octet-stream',
+      "size" INTEGER NOT NULL DEFAULT 0,
+      "width" INTEGER DEFAULT NULL,
+      "height" INTEGER DEFAULT NULL,
+      "alt" TEXT DEFAULT '',
+      "created_by" INTEGER DEFAULT NULL,
+      "created_at" TIMESTAMPTZ NOT NULL DEFAULT NOW()
+    )
+  `);
+}
+async function saveMedia(sql2, file, mediaDir, userId) {
+  const ext = extname3(file.name) || "";
+  const filename = `${randomUUID3()}${ext}`;
+  const dir = mediaDir;
+  if (!existsSync8(dir)) {
+    await mkdir3(dir, { recursive: true });
+  }
+  const filepath = join9(dir, filename);
+  await writeFile2(filepath, file.data);
+  const rows = await sql2`
+    INSERT INTO "_cms_media" ("filename", "original_name", "mimetype", "size", "created_by")
+    VALUES (${filename}, ${file.name}, ${file.mimetype}, ${file.data.length}, ${userId ?? null})
+    RETURNING *
+  `;
+  return mapMedia(rows[0]);
+}
+async function listMedia(sql2) {
+  const rows = await sql2`SELECT * FROM "_cms_media" ORDER BY "created_at" DESC`;
+  return rows.map(mapMedia);
+}
+async function getMedia(sql2, id3) {
+  const rows = await sql2`SELECT * FROM "_cms_media" WHERE "id" = ${id3}`;
+  return rows[0] ? mapMedia(rows[0]) : null;
+}
+async function deleteMedia(sql2, id3, mediaDir) {
+  const media = await getMedia(sql2, id3);
+  if (media) {
+    try {
+      const { unlink } = await import("node:fs/promises");
+      await unlink(join9(mediaDir, media.filename));
+    } catch {
+    }
+  }
+  await sql2`DELETE FROM "_cms_media" WHERE "id" = ${id3}`;
+}
+function mapMedia(row) {
+  return {
+    id: row.id,
+    filename: row.filename,
+    originalName: row.original_name,
+    mimetype: row.mimetype,
+    size: row.size,
+    width: row.width ?? null,
+    height: row.height ?? null,
+    alt: row.alt ?? "",
+    createdBy: row.created_by ?? null,
+    createdAt: row.created_at
+  };
+}
+function registerMediaRoutes(router, sql2, mediaDir) {
+  router.get("/admin/media", async (req, ctx) => {
+    const media = await listMedia(sql2);
+    const base = (ctx.mountPath || "").replace(/\/+$/, "");
+    const msg = ctx.query?.message;
+    const err = ctx.query?.error;
+    let content = `<div class="flex justify-between items-center mb-2">
+      <h1>Media Library</h1>
+    </div>
+    ${msg ? `<div class="alert alert-success">${esc2(msg)}</div>` : ""}
+    ${err ? `<div class="alert alert-error">${esc2(err)}</div>` : ""}`;
+    if (media.length === 0) {
+      content += `<div class="card empty"><p>No media uploaded yet.</p></div>`;
+    } else {
+      content += `<div class="media-grid">`;
+      for (const m of media) {
+        const isImage = m.mimetype.startsWith("image/");
+        const fileUrl = `${base}/admin/media/${m.id}/file`;
+        content += `<div class="media-item">
+          ${isImage ? `<img src="${esc2(fileUrl)}" alt="${esc2(m.alt || m.originalName)}" loading="lazy">` : `<div style="height:140px;display:flex;align-items:center;justify-content:center;background:#f3f4f6;font-size:2rem;color:var(--text-muted)">\u{1F4C4}</div>`}
+          <div class="meta">
+            <div class="name">${esc2(m.originalName)}</div>
+            <div class="info">${formatSize(m.size)}</div>
+            <form method="POST" action="${base}/admin/media/${m.id}/delete" onsubmit="return confirm('Delete this file?')" style="margin-top:.25rem">
+              <button type="submit" class="btn btn-danger btn-sm">Delete</button>
+            </form>
+          </div>
+        </div>`;
+      }
+      content += `</div>`;
+    }
+    content += `<div class="card" style="margin-top:1rem">
+      <h2>Upload File</h2>
+      <form method="POST" action="${base}/admin/media/upload" enctype="multipart/form-data">
+        <div class="form-group">
+          <input type="file" name="file" required>
+        </div>
+        <button type="submit" class="btn btn-primary">Upload</button>
+      </form>
+    </div>`;
+    const html = adminPageContent("Media Library", content, ctx, "/admin/media");
+    return new Response(html, { headers: { "content-type": "text/html; charset=utf-8" } });
+  });
+  router.post("/admin/media/upload", async (req, ctx) => {
+    try {
+      const fd = await req.formData();
+      const file = fd.get("file");
+      if (!file) throw new Error("No file provided");
+      const buf = Buffer.from(await file.arrayBuffer());
+      await saveMedia(sql2, { name: file.name, data: buf, mimetype: file.type }, mediaDir);
+      const base = (ctx.mountPath || "").replace(/\/+$/, "");
+      return redirect2(`${base}/admin/media?message=File uploaded`, 303);
+    } catch (err) {
+      const base = (ctx.mountPath || "").replace(/\/+$/, "");
+      return redirect2(`${base}/admin/media?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  });
+  router.post("/admin/media/:id/delete", async (req, ctx) => {
+    try {
+      const id3 = parseInt(ctx.params.id, 10);
+      await deleteMedia(sql2, id3, mediaDir);
+      const base = (ctx.mountPath || "").replace(/\/+$/, "");
+      return redirect2(`${base}/admin/media?message=File deleted`, 303);
+    } catch (err) {
+      const base = (ctx.mountPath || "").replace(/\/+$/, "");
+      return redirect2(`${base}/admin/media?error=${encodeURIComponent(err.message)}`, 303);
+    }
+  });
+  router.get("/admin/media/:id/file", async (req, ctx) => {
+    try {
+      const id3 = parseInt(ctx.params.id, 10);
+      const media = await getMedia(sql2, id3);
+      if (!media) {
+        return new Response("Not found", { status: 404 });
+      }
+      const { readFile: readFile3 } = await import("node:fs/promises");
+      const filepath = join9(mediaDir, media.filename);
+      const data = await readFile3(filepath);
+      return new Response(data, {
+        headers: {
+          "content-type": media.mimetype,
+          "content-length": String(media.size),
+          "cache-control": "public, max-age=31536000"
+        }
+      });
+    } catch (err) {
+      return new Response("Not found", { status: 404 });
+    }
+  });
+}
+function formatSize(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+function esc2(s) {
+  if (s === null || s === void 0) return "";
+  return String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function adminPageContent(title, content, ctx, activeNav) {
+  const base = (ctx.mountPath || "").replace(/\/+$/, "");
+  const ADMIN_CSS2 = `
+*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}
+:root{--bg:#f5f6fa;--card:#fff;--text:#1a1a2e;--text-muted:#6b7280;--primary:#4f46e5;--primary-hover:#4338ca;--danger:#ef4444;--danger-hover:#dc2626;--success:#10b981;--border:#e5e7eb;--radius:8px;--shadow:0 1px 3px rgba(0,0,0,.08)}
+body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--bg);color:var(--text);line-height:1.6;min-height:100vh;display:flex}
+a{color:var(--primary);text-decoration:none}
+a:hover{text-decoration:underline}
+h1{font-size:1.5rem;font-weight:700;margin-bottom:1rem}
+h2{font-size:1.2rem;font-weight:600;margin-bottom:.75rem}
+.sidebar{width:240px;background:var(--card);border-right:1px solid var(--border);padding:1.5rem;position:sticky;top:0;height:100vh;overflow-y:auto;flex-shrink:0}
+.sidebar h2{font-size:1rem;color:var(--text-muted);text-transform:uppercase;letter-spacing:.05em;margin-bottom:1rem}
+.sidebar nav{display:flex;flex-direction:column;gap:.25rem}
+.sidebar a{display:block;padding:.5rem .75rem;border-radius:6px;color:var(--text);font-size:.9rem;transition:background .15s}
+.sidebar a:hover{background:#f0f0ff;text-decoration:none}
+.sidebar a.active{background:#eef2ff;color:var(--primary);font-weight:600}
+.sidebar .section{margin-top:1.5rem}
+.main{flex:1;padding:2rem;max-width:1200px}
+.card{background:var(--card);border-radius:var(--radius);box-shadow:var(--shadow);padding:1.5rem;margin-bottom:1.5rem}
+.btn{display:inline-block;padding:.5rem 1rem;border-radius:6px;font-size:.875rem;font-weight:500;border:none;cursor:pointer;transition:all .15s;text-decoration:none;line-height:1.4}
+.btn-primary{background:var(--primary);color:#fff}
+.btn-primary:hover{background:var(--primary-hover);text-decoration:none}
+.btn-danger{background:var(--danger);color:#fff}
+.btn-danger:hover{background:var(--danger-hover);text-decoration:none}
+.form-group{margin-bottom:1rem}
+.form-group label{display:block;font-size:.875rem;font-weight:500;margin-bottom:.25rem}
+input[type=file]{padding:.5rem 0}
+.alert{padding:.75rem 1rem;border-radius:6px;margin-bottom:1rem;font-size:.9rem}
+.alert-success{background:#d1fae5;color:#065f46;border:1px solid #a7f3d0}
+.alert-error{background:#fee2e2;color:#991b1b;border:1px solid #fecaca}
+.empty{text-align:center;padding:3rem 1rem;color:var(--text-muted)}
+.media-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(160px,1fr));gap:1rem}
+.media-item{background:var(--card);border-radius:var(--radius);box-shadow:var(--shadow);overflow:hidden}
+.media-item img{width:100%;height:140px;object-fit:cover;display:block}
+.media-item .meta{padding:.5rem;font-size:.8rem}
+.media-item .meta .name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-weight:500}
+.media-item .meta .info{color:var(--text-muted);font-size:.75rem}
+`;
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${esc2(title)} \u2014 CMS</title>
+<style>${ADMIN_CSS2}</style>
+</head>
+<body>
+<div class="sidebar">
+  <h2>\u{1F4E6} CMS</h2>
+  <nav>
+    <a href="${base}/admin" class="${!activeNav || activeNav === "" ? "active" : ""}"> Dashboard</a>
+  </nav>
+  <nav class="section">
+    <a href="${base}/admin/content-types" class="${activeNav?.startsWith("/admin/content-types") ? "active" : ""}"> Content Types</a>
+    <a href="${base}/admin/media" class="active"> Media Library</a>
+  </nav>
+</div>
+<div class="main">${content}</div>
+</body>
+</html>`;
+}
+
+// cms/client.ts
+function cms(options) {
+  const pg = options.pg;
+  const sql2 = pg.sql;
+  const base = new PgModule(pg);
+  const mediaDir = options.mediaDir ?? "./cms-media";
+  async function migrate() {
+    await sql2.unsafe(`CREATE EXTENSION IF NOT EXISTS "pgcrypto"`);
+    await sql2.unsafe(`
+      CREATE TABLE IF NOT EXISTS "_cms_content_types" (
+        "id" SERIAL PRIMARY KEY,
+        "slug" TEXT NOT NULL UNIQUE,
+        "label" TEXT NOT NULL,
+        "description" TEXT DEFAULT '',
+        "fields" JSONB NOT NULL DEFAULT '[]'::jsonb,
+        "config" JSONB DEFAULT '{}'::jsonb,
+        "created_at" TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        "updated_at" TIMESTAMPTZ NOT NULL DEFAULT NOW()
+      )
+    `);
+    await sql2.unsafe(`
+      CREATE TABLE IF NOT EXISTS "_cms_entries" (
+        "id" SERIAL PRIMARY KEY,
+        "content_type" TEXT NOT NULL REFERENCES "_cms_content_types"("slug") ON DELETE CASCADE,
+        "slug" TEXT NOT NULL DEFAULT '',
+        "title" TEXT NOT NULL DEFAULT '',
+        "status" TEXT NOT NULL DEFAULT 'draft',
+        "data" JSONB NOT NULL DEFAULT '{}'::jsonb,
+        "locale" TEXT DEFAULT NULL,
+        "created_by" INTEGER DEFAULT NULL,
+        "updated_by" INTEGER DEFAULT NULL,
+        "published_at" TIMESTAMPTZ DEFAULT NULL,
+        "created_at" TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        "updated_at" TIMESTAMPTZ NOT NULL DEFAULT NOW()
+      )
+    `);
+    await sql2.unsafe(`CREATE UNIQUE INDEX IF NOT EXISTS "_cms_entries_unique_idx" ON "_cms_entries" ("content_type", "slug")`);
+    await sql2.unsafe(`CREATE INDEX IF NOT EXISTS "_cms_entries_content_type_idx" ON "_cms_entries" ("content_type")`);
+    await sql2.unsafe(`CREATE INDEX IF NOT EXISTS "_cms_entries_status_idx" ON "_cms_entries" ("status")`);
+    await sql2.unsafe(`CREATE INDEX IF NOT EXISTS "_cms_entries_data_gin_idx" ON "_cms_entries" USING GIN ("data" jsonb_path_ops)`);
+    await sql2.unsafe(`
+      CREATE TABLE IF NOT EXISTS "_cms_versions" (
+        "id" SERIAL PRIMARY KEY,
+        "entry_id" INTEGER NOT NULL REFERENCES "_cms_entries"("id") ON DELETE CASCADE,
+        "version" INTEGER NOT NULL,
+        "data" JSONB NOT NULL DEFAULT '{}'::jsonb,
+        "created_by" INTEGER DEFAULT NULL,
+        "created_at" TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        UNIQUE("entry_id", "version")
+      )
+    `);
+    await sql2.unsafe(`
+      CREATE INDEX IF NOT EXISTS "_cms_versions_entry_idx" ON "_cms_versions" ("entry_id")
+    `);
+    await createMediaTable(sql2);
+    await sql2.unsafe(`
+      CREATE TABLE IF NOT EXISTS "_cms_webhooks" (
+        "id" SERIAL PRIMARY KEY,
+        "name" TEXT NOT NULL,
+        "url" TEXT NOT NULL,
+        "events" TEXT[] NOT NULL DEFAULT '{}',
+        "secret" TEXT DEFAULT '',
+        "active" BOOLEAN NOT NULL DEFAULT true,
+        "created_at" TIMESTAMPTZ NOT NULL DEFAULT NOW()
+      )
+    `);
+    await sql2.unsafe(`
+      CREATE TABLE IF NOT EXISTS "_cms_redirects" (
+        "id" SERIAL PRIMARY KEY,
+        "from_path" TEXT NOT NULL UNIQUE,
+        "to_path" TEXT NOT NULL,
+        "type" INTEGER NOT NULL DEFAULT 301,
+        "created_at" TIMESTAMPTZ NOT NULL DEFAULT NOW()
+      )
+    `);
+  }
+  const r = new Router();
+  registerAdminRoutes(r, sql2);
+  registerApiRoutes(r, sql2);
+  registerMediaRoutes(r, sql2, mediaDir);
+  const mod = r;
+  mod.migrate = migrate;
+  mod.close = () => base.close();
+  return mod;
+}
 export {
   Router,
   TsxContext,
@@ -8449,6 +9708,7 @@ export {
   analytics,
   auth,
   clearCompileCache,
+  cms,
   compress,
   cors,
   createHub,
@@ -8472,6 +9732,7 @@ export {
   health,
   helmet,
   iii,
+  isDev,
   layout,
   loadEnv,
   logdb,
@@ -8498,6 +9759,7 @@ export {
   setCookie,
   smoothStream,
   ssr,
+  ssrEntries,
   streamObject,
   streamText,
   tenant,