Daily Update

The structured editor gains reusable field choices for uploads and scored responses, while item order can now be rearranged directly with a drag handle. Rich text also keeps its inline formatting reliable next to punctuation and CJK content.

• 708ae42Reliable rich text and drag sorting preserves word joiners when converting Markdown so inline emphasis stays intact beside punctuation and CJK text. Client-rendered item groups now include accessible drag handles that update their existing weight fields before save.
• 98e022eFile, range and rating page fields adds reusable file, range and rating snippets. Files upload under /media/files/; ranges provide labelled discrete choices; ratings provide keyboard-accessible star choices with a no-JavaScript fallback.

Plugin pages served from a local CMS can now show images from a local development server, without relaxing the production policy.

• c4dde2bLocal plugin image CSP builds the full-document plugin img-src policy from the current CMS URL. Only localhost and 127.0.0.1 CMS pages permit loopback HTTP images; production retains the stricter 'self' data: https: policy.

Media pickers now generate compact previews at the edge without exposing the private media bucket. The new path keeps the existing safety behaviour and reliably serves the original file whenever a thumbnail cannot be made.

• 2c3bec6Images-bound media thumbnails changes /media-preview/* to create cached 100×100 WebP cover thumbnails from private R2 objects through the Cloudflare Images binding. Missing bindings or objects, non-image and oversized files, and decode failures safely fall back to the original object while retaining media security headers.
• 46d92ebDependency lock refresh updates package-lock.json to keep the resolved package set current.

Content authors now have a richer Markdown workflow in the page editor. The new field keeps rich text, Markdown and stored HTML in sync, while the supporting client bundle and dependencies have been documented and streamlined.

• 9f1548eMarkdown rich-text editor adds the richtext/md page field with synchronized rich-text, Markdown and HTML modes. The default page and block body fields now use it, with bundled client assets, translated controls and safe restoration of previously double-escaped HTML.
• 9cd2f10Clearer Markdown editing switches the dark Markdown textarea to white text for better contrast and readability.
• 319f203Documented client bundling documents the esbuild pipeline for rich-text browser code and updates the Worker tooling dependencies.
• 4a59337Lean internal API surface removes unused admin, role and publishing exports without changing runtime behaviour.

Plugin operators can now copy their registration secret and tenant KV connection values straight from the CMS, with clear temporary success feedback. The release also makes shared page-field snippets translation-aware and consolidates credit subscriptions into the initial CMS schema.

• b271f8eTenant KV setup helpers adds copyable Tenant KV key/value details beside each plugin's shared secret, making Worker configuration faster and less error-prone.
• 63a300fCopy success feedback gives plugin-form copy buttons a localized Copied! state, Clipboard API support and a textarea fallback.
• 3c8ef68Localized page-field snippets lets text, email, number, textarea, picture, select and switch fields resolve translated labels, placeholders and option labels through i18n keys while retaining plain-text fallbacks.
• e297eaaConsolidated credit-subscription schema folds credit_subscriptions into 0001_initial_schema.sql, leaving a single baseline migration for new CMS installs.

Expanded the CMS into a more international, subscription-ready platform: admins can work in their chosen language and timezone, plugins can bill recurring credits, and configuration- or plugin-owned page types can be safely extended without changing their base definitions. This release also tightens the Worker’s rendering and request boundaries and improves the installation path.

• 6932e40Recurring plugin credits and type extensions adds credit_subscriptions, scheduled advance/arrears billing, ledger integration, and Plugin API subscription/usage endpoints. Admins can also append blocks and taxonomies to configuration- or plugin-defined page types while their owned definitions remain protected.
• f77e725Localized admin and timezone settings localizes the admin UI with database-backed locale overrides, makes the system timezone configurable, and carries the selected locale consistently through admin, auth, profile and settings flows.
• 25f30ccLocalized plugin management brings plugin assets, credits, limits and page-type management into the same translated admin experience.
• 0ab2945Profile language selector adds a compact language control to the admin profile menu, retaining the locale across return paths and logout.
• dfdc453Sharper editor and dashboard workflows improves responsive dashboard/plugin actions and editor layouts, with clearer translated controls and page-reference behaviour.
• 431709eReliable privacy controls keeps privacy toggles correctly positioned in scrollable admin tables and moves recurring-credit migration coverage into the current schema path.
• 927432aSafer rendering and origin configuration hardens rendered and proxied plugin content, while making canonical-origin enforcement opt-in for deployments that require it.
• 9e78ac2Auth and SSRF hardening strengthens authentication and server-side request checks with expanded security regression coverage.
• d00661aInteractive Cloudflare setup adds an installation script to guide Cloudflare configuration; a6ba4e8, bc4498a and 6b8c4dc refresh dependencies, client rendering and migration-contract coverage.
• f8407feBulk dashboard editing and richer translation tools adds selectable page rows and bulk actions, page-type filtering, a searchable parent-tag picker, and translation management that compares bundled locale values with database overrides.
• bacbe74Reliable bulk search types resolves page types directly from D1 for dashboard bulk advanced searches, including types no longer present in the active blueprint; 6e4876b localizes the related confirmation dialogs.
• 31f2aa4Cleaner trash and tag actions moves page-type context into linked trash-list badges and replaces the tag table's text edit link with an accessible icon action.

Added a runtime language and translation administration surface, made plugin pricing and limits easier for every admin to inspect, and strengthened request consistency and duplicate-submit handling across the Worker.

• 6479917Language and translation administration adds /admin/settings/languages and /admin/settings/translations for managing locales, fallback order, content/UI enablement, and database-backed translation overrides. It also tightens admin and Plugin API authorization checks.
• 5aefef7Credit summary adds a read-only /admin/settings/credits overview of enabled plugin charges, effective prices and usage limits.
• 78c568fLimits at a glance expands that summary with effective quota limits and scopes, and lets all signed-in admins view it while showing configuration links only to plugin managers.
• 4c33c6bDurable duplicate-submit protection moves single-use _cms_once form-token claims from D1 to sharded Durable Objects, serializing matching submissions without D1 contention and retaining safe retry release behavior.
• 5a976daConsistent D1 request sessions starts each Worker request, queue job and scheduled task on a primary D1 session so later reads can observe earlier writes while safely using current replicas.
• 2eeaaf4Simpler fresh installs folds the migration history into complete initial private and published schemas, making a new 0xCMS database setup a single baseline step.
• 0824f92Plugin registration guidance refreshes runtime plugin registration configuration and documentation, including the distinct inbound and outbound secret boundaries.

Added a scoped bulk-publish operation to the Plugin API, protected admin POST forms from accidental replay, and made the configured CMS brand a direct link back to the admin dashboard.

• a30d577Plugin batch publish API adds POST /__cms/pages/publish for up to 100 draft page IDs. It enforces plugin authentication and page-type scope, rejects invalid or duplicate IDs, returns per-item publish errors including partial target failures, and emits publish hooks through the existing pipeline.
• 25288c2Single-use admin submit tokens signs per-form _cms_once tokens and atomically claims them in D1, preventing duplicate POSTs from double-clicks, resubmits and retries while releasing a claim when downstream work fails. It also preserves return_to on publish and unpublish actions.
• 229df8eLinked admin branding makes the configured site title and icon in desktop and mobile admin navigation link directly to /admin.

Made large Plugin API lookups safe within D1 bind limits, unified page/block type administration and plugin page creation, and moved CSV tools into a dedicated import-export plugin. Also added a permission-controlled media content list with page-reference links, kept Pages navigation stable for custom admin homes, and expanded plugin capabilities and credits.

• d1c302bScalable Plugin API lookups binds page IDs and slugs as JSON arrays through json_each(?), so large ids/slugs lookups and include_tags=1 lists stay below D1’s 100-parameter limit.
• c5f2adcUnified type administration and creation consolidates page-type and block-type CRUD into shared type-admin routes and views, while single and batch Plugin API page creation now use one validated flow for parent/ID resolution, limits, credits, writes and hooks.
• 07a281cImport/export plugin foundation moves built-in CSV tools into a dedicated plugin and expands the Plugin API with content metadata, tag ensuring and bulk lookup support for import/export workflows.
• 5c8b636Dictionary build cleanup removes the obsolete Chinese-character dictionary generation script, leaving the existing generated search data in place without an unused network-dependent build step.
• c4d7b8dMedia content list adds the permission-controlled /admin/settings/content page, listing R2 media objects with metadata, cursor pagination, and links to the draft pages that reference each file.
• 7aa8badStable Pages navigation keeps the Pages sidebar entry available when a custom admin home is configured, so users can always return to the content list from the admin navigation.
• e6993f6Plugin taxonomy discovery adds contentTypes.taxonomies to the plugin page-types screen, showing defined page types, taxonomies and delegated access in separate sections with links and test coverage.
• 36a1e62Plugin-defined page types exposes contentTypes.blueprint alongside delegated read/write scopes, so the admin clearly separates page types defined by a plugin from its requested access.
• 3f662bdGeneralized submission ingest treats any live-only page as a submission mirror, adds a dedicated submission hook, and protects mirror history from publish and unpublish operations without relying on hard-coded page types.
• e6e8e1cReliable plugin navigation keeps plugin sidebar items active across deep routes and page-edit return flows, and scrolls the active item into view when the mobile menu opens.
• 98d10e4Concurrent refresh grace accepts recently rotated refresh tokens for a short grace window, preventing parallel admin requests from being incorrectly revoked while preserving expiry checks.
• a80c19cOptional live page status adds include_live_status=1 to /pages and /pages/:id, returning isPublished without extra requests.
• a5bad97Shared credit pool and transfers adds a site-wide credit pool that can cover shortfalls, accept user donations and admin adjustments, support permissioned grants and user-to-user transfers, and report pool balances through the credit API.

Expanded plugin operations with transactional bulk page updates and per-second limits, and added owner-defined publish-time lect projections so live content can be minimized consistently across all publishing targets.

• 6bff14aPublish-time lect projections adds plugin-defined contentTypes.publishLect rules during snapshot builds, enforces blueprint ownership, and applies the matching draft projection to live-versus-draft comparisons so projected page types do not show false permanent drift.
• b7f6cb9Per-second plugin limits adds the per_second operational limit scope, with optional page_type, updated normalization and admin messaging, and no CMS usage counting for that plugin-enforced limit.
• 9c70291Bulk Plugin API page updates introduces PATCH /pages/batch for transactional plugin page-lect updates with version history and per-item errors, preallocates page and version IDs to reduce D1 subrequests, and extends batch tests and duplicate slug-family handling.

Added plugin-declared auto-republish behavior for live plugin page types, made admin page fields more reliable after client-side re-renders and plugin-view sanitization, and simplified legacy trash restore handling.

• 9347cf0Auto-publish PR merge merges the plugin page type auto-republish work from auto-publish-gpt into the main CMS history.
• 6640b8fAuto-republish plugin page types adds plugin-declared autoPublishTypes so eligible live plugin-owned pages republish automatically on save, avoids duplicate update hooks in that path, updates flash messaging, and covers republish plus draft-only behavior in route tests.
• 8f1995dShared page-ref asset moves the page reference combobox logic into /assets/page-ref.js, loads it from both layouts, removes the inline snippet script, and keeps editor actions visible with a sticky action row.
• 6a0009cShared picture field asset extracts picture preview and upload behavior into views/assets/picture-field.js so picture fields keep working after client-side rendering and sanitized plugin HTML.
• 1da7d48Legacy restore snapshot cleanup removes the old special-case restore path for trashed pages without preserved version history and updates the restore query helper comments to match current behavior.

Strengthened secret-authenticated plugin requests by carrying a normalized tenant identifier through admin proxying, edit views, hooks, publish targets, and background jobs.

• 4012cd2Tenant-aware plugin auth headers propagates x-cms-tenant, centralizes auth header setup with pluginTenantId, and uses constant-time plugin write-back secret checks while adding coverage for CANONICAL_ORIGIN tenant behavior.

Polished plugin-facing details by using plugin labels for single-item navigation entries and returning clearer forbidden page type errors from the Plugin API.

• ca7b693Single-item plugin nav labels uses each plugin's label when only one navigation item is registered, keeping admin sidebars easier to scan.
• db5ba6fForbidden page type API errors gives Plugin API callers more specific feedback when a page type is outside their allowed scope.

Improved Plugin API performance and response shaping with batched plugin hooks, optional page field projection, and indexed pointer filter queries.

• 7b4955eBatched plugin hooks and field projection reduces repeated hook work and lets Plugin API page responses include only requested fields.
• 27b7f82cms-api.ts follow-up tightens the Plugin API implementation after the field projection changes.
• 69cc5ffPointer filter indexes adds D1 indexes and query updates so pointer-based filters are faster under advanced search and Plugin API usage.

Expanded advanced search into a safer bulk operations surface with async admin jobs, batching, lifecycle logging, and queue configuration. The same day also added page create validation, RSVP submission ingestion, Plugin API naming cleanup, a mobile dropdown fix, and default-timezone version timestamps.

• dff9ffbPage create ID validation validates incoming IDs and parent references before creating pages through the Plugin API.
• 17c87f8Guest import confirm action revert removes the queued guest import confirmation path after review.
• 2a9fc6dQueued guest import confirm action originally routed guest import confirmation through the admin job queue.
• 1d18f7eBulk unpublish optimization improves bulk unpublish handling across D1, R2, and Worker publish adapters while adding lifecycle logging.
• 865de78Admin jobs queue for bulk operations enables the Worker queue configuration used by long-running bulk actions.
• 337b579All-scope bulk action fix makes all-results bulk actions ignore visible row selections so the requested scope is applied correctly.
• 4850329Batched advanced search bulk actions chunks bulk work into smaller admin job batches for more predictable processing.
• a47960bAsync bulk search operations moves advanced search bulk actions onto admin jobs instead of doing all work during the request.
• c046559Advanced search bulk actions adds bulk controls, search utilities, admin rendering support, styles, Liquid view updates, and route tests.
• 3622924RSVP submissions into draft pages ingests incoming RSVP submissions into draft page records with supporting indexes, admin routing, and tests.
• 5e6ee33Plugin API naming cleanup renames remaining F1 references across routes and tests so the plugin-facing API language is consistent.
• 6d7c93aPlugin config dropdown overflow fix keeps the configuration menu inside the mobile viewport.
• 3bc97d4Default-timezone version timestamps formats page version history using the configured timezone.

Expanded plugin-facing admin capabilities with advanced page search, wildcard page-type scopes, custom update actions, user credit visibility, paginated credit history, and a cleaner plugin action menu.

• 4fd73f0Advanced plugin page search gives plugins richer page lookup tools.
• b0c1c8dUsers view refresh updates users.liquid after the account and credit UI changes.
• 32fd45bCustom version actions allows page updates to record a more specific version action.
• d42f41fWildcard page-type scopes lets plugin permissions cover matching page-type families.
• 27ef9c9Sidebar credit balance shows the current user's credit balance in the admin sidebar.
• acab94fPaginated credit history keeps profile credit logs manageable as usage grows.
• 552c578Plugin management view update refreshes plugins-manage.liquid after the action layout changes.
• f1a0014Plugin action layout refactor reorganizes plugin management controls for clearer spacing and grouping.
• 8f378f3Grouped plugin action dropdown consolidates repeated plugin actions into a dropdown pattern.

Added the first credit and quota controls around plugins: configurable quota limits, credit billing, safer atomic credit updates, and a branded app icon on the login screen.

• 846d0a6Atomic credit updates uses RETURNING so credit changes can be applied and read back reliably.
• 6db3e38Credit billing system introduces the billing foundation for credit-backed plugin usage.
• 5ce3871Configurable plugin quotas adds quota limits that can be tuned per deployment.
• bf29f50Branded login icon uses the app icon on the login page for a more consistent entry point.

Added more operator control over the admin experience: the home screen can now be configured, destructive purge paths are gated more deliberately, and approved plugin assets are exposed inside plugin-rendered edit views.

• 4f23d17Approved assets in edit views exposes approved plugin assets while rendering plugin-owned edit experiences.
• b623e41Configurable admin home and purge gating lets admins choose the home destination while tightening access around purge actions.

A broad platform day for plugin-owned admin surfaces: create and read-only page views landed, plugin taxonomies became first-class in admin, tags moved toward weighted taxonomy slugs, system branding/sidebar settings arrived, and page version maintenance became safer.

• dd2745aPlugin create views and tag filtering lets plugins own create forms while improving tag-based filters.
• b50543fTaxonomy slug migration and batch reorder moves tags to taxonomy_slug and adds batch reordering.
• 0295564Tag weights and config taxonomy options adds ordering and configuration options for taxonomy-backed tags.
• 8f77447Branding and sidebar system settings exposes admin configuration for the site brand and sidebar behavior.
• 3f31690Admin sidebar menu settings adds management for sidebar menu configuration.
• 812dd33Plugin-defined taxonomies supports plugin-provided taxonomy definitions in admin.
• 9789741Page version deletion and cleanup adds maintenance tools for historical page versions.
• 2115037Draft ID preservation keeps draft IDs stable when publishing content to D1.
• 01bce75Editor sync and feature coverage adds tests around editor sync behavior and feature flows.
• 81407d6Plugin-rendered read-only views lets plugins render read-only page views.
• ad4dcdaType admin and editor helpers refactors shared helpers for type administration and editor flows.
• e2b5c51Plugin page-type access approvals adds an approval path for plugin access to page types.
• 8468f50Plugin asset revision queries fixes revision query handling for plugin assets.
• fcad6b2Immutable plugin view assets serves plugin view files with immutable caching.
• 723b6a7Admin session keepalive keeps sessions alive while working in admin pages.

Tightened plugin-admin access, expanded the approved asset pipeline, added revision-aware cache busting for admin and plugin assets, and improved the mobile admin header.

• 20f2594Auto-hiding mobile admin header improves mobile navigation behavior.
• d51fe1dPlugin worker revision cache-busting uses plugin worker revisions to bust asset caches.
• 4b7e1caRevisioned admin assets adds revision handling for admin assets and plugin caching.
• 4ccdaa6Plugin camera and WASM opt-in lets plugins opt into camera and WASM security allowances.
• 1e86047Asset approval integrity adds integrity hashes to the plugin asset approval UI.
• 495584dApproved asset serving serves plugin assets after approval.
• c5691eeManifest-gated plugin admin checks plugin admin access against manifest permissions.

Improved the editorial dashboard for live content: live-only pages can be pulled back into drafts, listings query live pages directly, and search now understands Chinese variant text.

• c0b498ePull-to-draft adds a draft recovery flow for live-only pages.
• 19e1788Live-page pagination queries live pages directly with paged results.
• ca6f9caChinese variant search expands page search across character variants.
• 0c47a03Generated character maps replaces opencc-js.
• 8cd04b5Dashboard filters adds status filters and Chinese search.

Rounded out plugin-driven admin workflows with queueable jobs, richer form-field rendering, fixed pagefield snippet resolution, and filtered bulk restore for trash.

• ff6905cClient render update refreshes the client-rendered admin layer.
• 2de6739leading-relaxed utility adds the text utility to admin styles.
• 6c6007dPagefield snippet paths fixes view-base resolution.
• 2330c63Form field templates adds templates and required-field support.
• 12ed982Queueable plugin jobs lets plugin actions schedule admin jobs.
• 1d116d1Filtered bulk restore restores trash items scoped by filters.

A broad admin polish day: collection-aware bulk actions, page duplication, table filtering, privacy masking, color labels, and several missing utility classes for the CMS shell.

• 803c050Pointer-based collection selection improves bulk-operation targeting.
• 8a4ad16Bulk page duplication adds the duplication API endpoint.
• a3a95c7Color picker and delete confirms refines label interactions and prompts.
• 39e5c03Null page_id coercion fixes CMS API handling.
• 9e2ed54Nested event session test adds regression coverage.
• 466d709Duplicate icon asset adds the icon used by duplication actions.
• a6dffddColor tag picker introduces the color-label picker feature.
• c659093Name masking handles middle-dot names and Latin tokens more cleanly.
• 7f32612Privacy table masking refines table-level masking.
• 112a58ePII field masking adds masking for sensitive table fields.
• f0cda7fAuth provider loading shows feedback while selecting a provider.
• bb0fba5iOS form zoom fix prevents mobile zoom on admin forms.
• f553189Table filters adds the table-filter asset and integration.
• 5e37123Width and truncation utilities fills missing layout classes.
• 0a62e00Spacing and layout utilities expands admin utility coverage.
• 2b72cdeTailwind utility coverage adds missing classes used by views.

Added the admin profile surface and rounded out account-linking controls, Microsoft OAuth, user deletion safeguards, and identity-provider visibility.

• 0e5d83cScoped client template cache isolates cached templates by view base path.
• 62b7a8bIdentity providers in user list shows linked providers in admin users.
• de926c1Apple provider disabled removes Apple from enabled providers.
• 51114afUser deletion safeguards adds protected admin user deletion.
• 831da67Microsoft OAuth config enables Microsoft OAuth settings.
• c4c239eAdmin form actions polishes form footer actions.
• 94c0abdOAuth disconnect adds profile support for disconnecting providers.
• e30596fExplicit account linking requires link=1 for OAuth linking.
• bb19ae0Admin profile page adds the profile view.

Focused on authentication breadth and plugin-admin hardening, including multi-provider identity linking, unified icon actions, sanitized plugin HTML, and iframe isolation experiments.

• 0db7f95Microsoft and Apple OAuth adds support for additional providers.
• 426e4c4Multi-provider identity linking links multiple OAuth identities to one account.
• 075cc02Unified action buttons standardizes admin action buttons with icon variants.
• 3da2ca1Security and client views hardens plugin client-rendered views.
• c3a2d14Plugin HTML sanitization prevents XSS in plugin-admin HTML.
• 0b10a9fIframe isolation revert reverts the sandboxed iframe isolation change.
• 221ca0fSandboxed iframe isolation initially isolates plugin admin views.

Shifted core views toward client rendering, externalized the SVG sprite, strengthened plugin permissions, and improved cache behavior, mobile navigation, table layout, and page-store utilities.

• 6cd16f7Admin API and plugin access hardens permission checks.
• 0fefa60Dependency cleanup removes emmet and liquidjs.
• 13de3faSecurity helpers and media routes refactors shared code.
• aee9befPage-store utilities extracts helpers and adds withLiveStatus.
• 639488cEmpty pointer values preserves empty pointers instead of deleting them.
• 5529676Dashboard table positioning adds relative positioning.
• f7843cdPlugin-defined permissions exposes plugin permissions in roles/admin.
• 0c63fb3Mobile sidebar nav updates the sidebar to a full-page menu.
• b450994View revision cache-busting adds revision-aware view caching.
• 088468dLoading and cache headers fixes placeholders and cache headers.
• eca65ecReactive reorder rows keeps reorderable rows reactive to DOM changes.
• bf81d6aDefault layout update refreshes default.liquid.
• 580574cClient-rendered views switches admin views and adds proxies.
• 8428fdf0xCMS site title renames the site title.
• 62b430bExternal SVG sprite serves icons through a sprite.
• 7029cabTable container styles standardizes table containers and widths.

Massive progress on administrative efficiency: introduced batch operations for page weights and deletions, overhauled the trash system with pagination and granular purging, and added a comprehensive light theme for the admin UI.

Earlier in the cycle: a native-editor escape hatch, opt-in same-origin framing for plugins, a richer pages API, and plugin edit-view support.

• 73c2f62?native=1 editor bypass — documented the query flag and added tests confirming the built-in editor is served and the flag survives form actions and redirects.
• 8afddb2Native-editor escape hatch — ?native=1 / ?editor=cms forces the built-in CMS editor even when a plugin would render the edit view; preferNativeEditor + withNativeFlag thread it through action URLs.
• e02ec18datetime.liquid — new page-field snippet.
• 4ae4f64/api/pages/:type enhanced with search and id lookup.
• 6393900Opt-in same-origin framing for plugins.
• 4d7c8f2Plugin edit view support added.
• 93505b6Preserve editor return_to across pages.

Turned the plugin system into a managed platform with DB-backed registration, per-plugin secrets, plugin-contributed page types, navigation, read APIs, write-back support, and richer timezone/schema foundations.

• 95b6eafExtend schema: timezones, trash versions, plugins.
• 91b4f86Add page timezone support.
• e9502c9Set defaultLanguage to 'mis' and add locales.
• 034ca0cAdd basic switch pagefield snippet.
• 779b8a4Remove dump test; conditionally render table header.
• 85128a3Add test that dumps admin HTML.
• b5ecfe0Support plugin readTypes and show plugin names.
• db35601Preserve original parent for trashed pages.
• 078a0d9Decode percent-encoded plugin titles.
• 21dd862Update plugins.ts.
• 2c13f49Add per-plugin secret and rotation support.
• 3dcccd2Add plugin write-back API and trash support.
• 6caef21Support plugin nav in admin layout.
• ca73d5fSupport plugin-contributed page types in admin.
• c4816caAdd PLUGIN_SECRET to .dev.vars.example.
• 6405277Add DB-backed plugin registry and admin UI.

Added role and user administration, made admin UI permission-aware, reduced route rendering boilerplate, and refined editor language scope, taxonomy fallback, and structured editor controls.

• 3241a8eReplace inline weight form with read-only view.
• 438cd24Create basic.liquid.
• a69351dRedirect to edit with language; scope editor form.
• 3189919Update CMS config and regenerate admin CSS.
• 15330d3Update routes.test.ts.
• 6a2474bRemove revert button and update taxonomy fallback.
• 6417922Merge pull request #5 from LionRockJS/refactor/reduce-boilerplate.
• 71290feAdd renderPage helper to cut route render boilerplate.
• 1c1ff3fAdd adminLayout helper to cut template boilerplate.
• c93a50eMake admin UI permission-aware.
• 9153280Add separate tag:write permission.
• 54925e8Add input bg class in editor and regenerate admin CSS.
• 0f23bc7Compact weight inputs in structured editor.
• 20261ccAdd roles/users admin and permission system.

Moved more content configuration into the database with page types, block types, renamed taxonomies, unique draft slugs, cache fixes, and regenerated admin utility styles.

• 8a2a407Add DB-backed block types and admin UI.
• c602735Rename tag_types and tag_lists to taxonomies.
• 2d53bfdEnsure unique draft slugs; cache and lect fixes.
• d01f7b0Add database-defined page types and admin UI.
• ad31713Regenerate admin.css Tailwind utilities.

Brought the publish-adapter branch into the mainline and added example plugin publish targets with tests.

• 001de3cMerge branch publish-adapters.
• c1d96b7Add example publish plugins and tests.

Added the publish-target architecture, including D1, R2, and plugin fan-out paths.

• ab15ce8Merge pull request #4 from LionRockJS/publish-adapters.
• 1d350adAdd pluggable publish targets: d1, r2, plugin.

Improved editor metadata display, safer lect parsing, and simplified presence storage behavior.

• dccc8afDisplay modifier name and safely parse lect.
• 12c93daRemove presence table; add avatar fallback.

A security-heavy day: stricter CSP and JWT claims, fail-closed CSRF, hardened cookies, upload protections, rate limiting, registration controls, audit logging, and plugin proxy safeguards.

• e7641d9Add presence handling to PageSync DO and routes.
• 0e47957Merge pull request #3 from LionRockJS/security-hardening.
• 78e2891Enforce sensitive cache headers and plugin secret.
• d941293Resolve P3: capability-based RBAC and plugin shared-origin mitigation.
• 9f3b9c0Merge pull request #2 from LionRockJS/security-hardening.
• 1fc713bSession hygiene, registration allowlist, audit logging.
• 80b3cd9Plugin proxy header allowlist, CSV filename encoding, presence validation.
• 7f5397dFail-closed CSRF checks, __Host- auth cookies, POST-only logout.
• 8b20692Strict CSP with local Tailwind build and per-request nonces; JWT issuer/audience.
• 7601059Add IP-keyed rate limiting to auth and upload endpoints.
• 10336e1Harden media upload and serving against stored XSS.

Added the collaborative editing foundation with PageSync, CRDT operations, WebSocket attachment, presence tracking, multi-user tests, plugin integration, and modular admin route organization.

• 3b27d05Sanitize WebSocket fields and omit avatar relay.
• 99c3d7eAdd PageSync multi-user tests; relax editor.
• 2d4cdfcCRDT: per-user ops, reset and save handling.
• 151951cImprove CRDT sync, WebSocket attachment, and presence interval.
• e4c9b20Update editor.liquid.
• 83e1fe0Add PageSync DO and editor CRDT sync.
• 6642664Add presence tracking: DB, API, UI.
• bf3850cAdd plugin system and integrate plugins.
• bfb92b5Refactor admin into modular routes and utilities.

Split published content into its own D1 database so public readers can be isolated from draft/admin data.

• 0dd60f3Split published content into separate D1 DB.

Expanded operational content management with localized CSV import/export, draft exports, lect-derived fields, dashboard pagination, import shortcuts, and batched lookups.

• 31f03deAdd bulk CSV import and batched lookups.
• 27c134cAdd CSV import links to admin dashboard.
• 6e4d3b0Add pagination to admin dashboard.
• b8a1f02Include lect-derived fields in CSV exports.
• dde2e0dAdd CSV export for draft pages.
• e10bb9aSupport localized CSV import/export.

Added CSV import modes, preview/confirmation flow, import/export foundations, parent-page APIs, dynamic editor comboboxes, and advanced-search blueprint options.

• 85a7752Add CSV import modes and UI options.
• 561c2edAdd CSV import preview and confirmation flow.
• 43ae6c3Update dashboard.liquid.
• 34c308bAdd parent-pages API and dynamic editor combobox.
• da29d3cAdd CSV import/export and parent combobox.
• 7e5d1faAdd blueprint path options for advanced search.

Built the advanced-search surface with multi-type criteria, locked page-type routes, dashboard search, and redirect behavior from admin searches.

• 603d6b5Redirect admin searches to advanced-search.
• 2fb2cbbAdd dashboard search and lock advanced-search type.
• 6feaccaUse path param for advanced-search page type.
• 55cbb73Advanced search: multi-type and dynamic criteria.
• 1ae0fb7Add advanced search feature and UI tweaks.

Added private R2 media uploads, Cloudflare image previews, error response cleanup, draft metadata, initial schema consolidation, item weights, and structured-editor improvements.

• 4093cbbServe thumbnails via /media-preview with resize.
• d8e97c8Add Cloudflare image preview and upload guidance.
• aed7522Add X-CMS-Error header to error responses.
• b9a137cReturn JSON for forbidden admin/api requests.
• 7f1fa8bReturn JSON for admin upload auth errors.
• 64f27b4Add private R2 media uploads and tests.
• b3906f2Add draft metadata to created/merged lects.
• 0e8101bConsolidate migrations into initial schema.
• 02444c6Add page creator and editors metadata.
• f1c58e1Add implicit item weights and sort items.
• 90231e6Structured editor: block attrs, tags, live-diff.

A large admin build-out: responsive templates, Liquid/JSON view experiments, editor and tag parity, lect migration, version-table unification, CSP/referer fixes, and package updates.

• 9257a97Respect secure cookies; UI/accessibility tweaks.
• c09dbb3Add package-lock and update package.json.
• d1e1f00Delete package-lock.json.
• 642c768Update package-lock.json.
• 6e7d5cfUpdate dashboard.liquid.
• fbcb905Update dashboard.liquid.
• 64fd421Make admin UI responsive and mobile-friendly.
• 9ca0b0bSwitch from Liquid to JSON template views.
• 71091a5Add JSON template rendering and Emmet integration.
• 932cbf7Load Liquid templates via VIEWS fetcher.
• 413ee79Use LiquidJS templates for admin views.
• 767988bUpdate index.ts.
• 40b0b40Refactor tag admin routes to use page components.
• a7d6277Add admin templates and editor improvements.
• 9eee329Update auth.ts.
• 248e1ccUnify page version tables into page_versions.
• 67ada5bMigrate original structured content to lect.
• 93a9dd5Update editor.ts.
• b0d1e10Show default-language value as placeholder.
• ddc57afAdd favicon route; fix editor URL and CSP.
• 74d1da1Update editor.ts.
• fb45883Add page-type datalist and referer checks.
• f775ce1Add admin CMS parity: originals, tags, media.

Consolidated content database bindings, supported comma-separated roles, and expanded origin checks.

• f6d4794Support allowed origins in security checks.
• 0f66f41Consolidate D1 databases into single DB binding.
• fc9db3dUnify content DB into single CONTENT_DB.
• 5937543Support comma-separated user roles and utilities.

Added multi-provider OAuth support and security headers.

• dc62ba2Support multi-provider OAuth and security headers.

Established the early auth/data split with AUTH_DB, trash workflow, Eventuai OAuth integration, dependency upgrades, config updates, and the repository root commit.

• 25adf0aUpdate wrangler.toml.
• 4fd286cUpdate login.ts.
• ca123a2Add Eventuai OAuth provider and role sync.
• 565df36Upgrade esbuild, TypeScript, Wrangler, and Hono.
• 5993d38Add cms-trash DB and update AUTH_DB id.
• 372e5a5Add AUTH_DB and move auth data off LIVE.
• 93b3909Add trash soft-delete workflow.
• c415a99Merge pull request #1 from LionRockJS/copilot/create-database-migration-for-content.
• 409f105Initial commit.

Started the project with the initial implementation plan and the first Cloudflare Worker CMS scaffold: OAuth 2.1, dual JWTs, and live/draft database workflow.

• 505b671Add Cloudflare Worker CMS with OAuth 2.1, dual JWT, and LIVE/DRAFT database workflow.
• f53cdcbInitial plan.