feat(i18n): wire page translation editor and locale rendering

test(i18n): add translated page CRUD locale validation coverage
test(admin): cover pages and navigation form components
2026-02-12 20:57:42 +01:00 · 2026-02-12 20:53:06 +01:00 · 2026-02-12 20:48:51 +01:00 · 2026-02-12 20:45:09 +01:00 · 2026-02-12 20:43:05 +01:00 · 2026-02-12 20:34:53 +01:00
32 changed files with 1384 additions and 201 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,56 @@
+## Unreleased (2026-02-12)
+
+* test(admin): cover support fallback route and mark todo complete ([4ac74101487e0bb220215328510fd4344c9110e3](https://git.fellies.net/Citali/cms.fellies.org/commits/4ac74101487e0bb220215328510fd4344c9110e3))
+* test(auth): add registration policy route-flow integration tests ([39178c2d8d9c203ceca63a36012b58173d21d4d4](https://git.fellies.net/Citali/cms.fellies.org/commits/39178c2d8d9c203ceca63a36012b58173d21d4d4))
+* test(ci): add quality gates, e2e data prep, and i18n integration coverage ([4d4b583cf4dcb0f3b99f74c666af15d3b1a0fc59](https://git.fellies.net/Citali/cms.fellies.org/commits/4d4b583cf4dcb0f3b99f74c666af15d3b1a0fc59))
+* test(crud): finalize MVP1 gate CRUD contract coverage ([36b09cd9d76049219569bb4828aa292aec78a935](https://git.fellies.net/Citali/cms.fellies.org/commits/36b09cd9d76049219569bb4828aa292aec78a935))
+* test(e2e): add mvp1 happy path scenarios ([7c4b667bc79a022518d03a52a98060a9c86c673c](https://git.fellies.net/Citali/cms.fellies.org/commits/7c4b667bc79a022518d03a52a98060a9c86c673c))
+* test(mvp0): complete remaining i18n, RBAC, and CRUD coverage ([3b130568e9bfff9e428c3650c37dd8b1abfbed57](https://git.fellies.net/Citali/cms.fellies.org/commits/3b130568e9bfff9e428c3650c37dd8b1abfbed57))
+* test(mvp1): add owner invariants and media form coverage ([37f62a8007d6b50e7b53e5785365965c00c74a5b](https://git.fellies.net/Citali/cms.fellies.org/commits/37f62a8007d6b50e7b53e5785365965c00c74a5b))
+* test(mvp1): expand domain schema and service unit coverage ([24676bd384c39d954b791ff2322a4469ab86a83a](https://git.fellies.net/Citali/cms.fellies.org/commits/24676bd384c39d954b791ff2322a4469ab86a83a))
+* feat(admin-auth): add first-start onboarding flow and dev db reset command ([7b665ae633e869560654cf1c115d12dc05af1c45](https://git.fellies.net/Citali/cms.fellies.org/commits/7b665ae633e869560654cf1c115d12dc05af1c45))
+* feat(admin-auth): support username login and add dashboard logout ([b96cd6d8005aea50c49a70540e0fd2afff94c682](https://git.fellies.net/Citali/cms.fellies.org/commits/b96cd6d8005aea50c49a70540e0fd2afff94c682))
+* feat(admin-i18n): add cookie-based locale runtime and switcher baseline ([b618c8cb5161eef46e80d622156a1e53a732ea35](https://git.fellies.net/Citali/cms.fellies.org/commits/b618c8cb5161eef46e80d622156a1e53a732ea35))
+* feat(admin): add IA shell and protected section skeleton routes ([bf1a92d129b89811b58d6920a4e09482816988a0](https://git.fellies.net/Citali/cms.fellies.org/commits/bf1a92d129b89811b58d6920a4e09482816988a0))
+* feat(admin): add posts CRUD sandbox and shared CRUD foundation ([07e5f53793da5aa0b17e62a3a9b99c23a56dbcf0](https://git.fellies.net/Citali/cms.fellies.org/commits/07e5f53793da5aa0b17e62a3a9b99c23a56dbcf0))
+* feat(admin): add registration policy settings and disabled register state ([d0f731743c789ef836e4573eadece2f4c67c973d](https://git.fellies.net/Citali/cms.fellies.org/commits/d0f731743c789ef836e4573eadece2f4c67c973d))
+* feat(auth): block protected account deletion in auth endpoints ([0e2248b5c7f72684e4db6d4ab8f306b10f50ac66](https://git.fellies.net/Citali/cms.fellies.org/commits/0e2248b5c7f72684e4db6d4ab8f306b10f50ac66))
+* feat(auth): bootstrap protected support and first owner users ([411861419f160e3573a71ea67d57af7e0e91de7d](https://git.fellies.net/Citali/cms.fellies.org/commits/411861419f160e3573a71ea67d57af7e0e91de7d))
+* feat(auth): enforce single-owner invariant in bootstrap flow ([29a6e38ff3b725e4232736c4b5b007a2989acb82](https://git.fellies.net/Citali/cms.fellies.org/commits/29a6e38ff3b725e4232736c4b5b007a2989acb82))
+* feat(ci): stamp build metadata and validate footer version hash ([af52b8581f7dbe320c92752fcc56b73e37f0c2ba](https://git.fellies.net/Citali/cms.fellies.org/commits/af52b8581f7dbe320c92752fcc56b73e37f0c2ba))
+* feat(commissions): add customer records and kanban workflow baseline ([994b33e081c3507cbf88820028b819a4fc4b07a0](https://git.fellies.net/Citali/cms.fellies.org/commits/994b33e081c3507cbf88820028b819a4fc4b07a0))
+* feat(content): add announcements and public news flows ([dbf817c25511b3038b7abe81e4577d3518fd3f19](https://git.fellies.net/Citali/cms.fellies.org/commits/dbf817c25511b3038b7abe81e4577d3518fd3f19))
+* feat(media): add admin media CRUD preview and storage cleanup ([7d9bc9dca9197e87cc590ad6b49837c5774fcd4f](https://git.fellies.net/Citali/cms.fellies.org/commits/7d9bc9dca9197e87cc590ad6b49837c5774fcd4f))
+* feat(media): add mvp1 upload pipeline baseline ([5becba602c3aaefbe24ec71414f62b29a155d158](https://git.fellies.net/Citali/cms.fellies.org/commits/5becba602c3aaefbe24ec71414f62b29a155d158))
+* feat(media): complete mvp1 media foundation workflows ([ad351ed73ab7c76a9e751348ebf943aec5f0d084](https://git.fellies.net/Citali/cms.fellies.org/commits/ad351ed73ab7c76a9e751348ebf943aec5f0d084))
+* feat(media): default to s3 with local upload fallback ([86a8af25d8c28c2ab19039b56b1c69263c7450c5](https://git.fellies.net/Citali/cms.fellies.org/commits/86a8af25d8c28c2ab19039b56b1c69263c7450c5))
+* feat(media): scaffold mvp1 media and portfolio foundation ([d727ab8b5b896e5471829a6a1880dc33da28d070](https://git.fellies.net/Citali/cms.fellies.org/commits/d727ab8b5b896e5471829a6a1880dc33da28d070))
+* feat(media): support local and s3 upload providers ([19738b77d8842f3263e7f049aa47063dcfbd4ae6](https://git.fellies.net/Citali/cms.fellies.org/commits/19738b77d8842f3263e7f049aa47063dcfbd4ae6))
+* feat(pages): add pages and navigation builder baseline ([281b1d7a1be72af4cff790ca7e97d51cafcd8139](https://git.fellies.net/Citali/cms.fellies.org/commits/281b1d7a1be72af4cff790ca7e97d51cafcd8139))
+* feat(release): publish gitea release notes and enable production rollback ([ccac669454b46a3918b34df1d3c5f0e5f00aa1d9](https://git.fellies.net/Citali/cms.fellies.org/commits/ccac669454b46a3918b34df1d3c5f0e5f00aa1d9))
+* feat(settings): manage public header banner in admin ([d1face36c540673486b494d276f5af1621b6e6cb](https://git.fellies.net/Citali/cms.fellies.org/commits/d1face36c540673486b494d276f5af1621b6e6cb))
+* feat(versioning): show runtime version and git hash in app footers ([3de4d5732e26e06e825986e58ec271d0f0ff4007](https://git.fellies.net/Citali/cms.fellies.org/commits/3de4d5732e26e06e825986e58ec271d0f0ff4007))
+* feat(web-i18n): add es/fr locales and expand switcher locale set ([de26cb7647cf537a783cc9c77ae447a0f8a09ef6](https://git.fellies.net/Citali/cms.fellies.org/commits/de26cb7647cf537a783cc9c77ae447a0f8a09ef6))
+* feat(web): complete MVP0 public layout, banner, and SEO baseline ([8390689c8dd81dca5662b842c827a4759a9025e1](https://git.fellies.net/Citali/cms.fellies.org/commits/8390689c8dd81dca5662b842c827a4759a9025e1))
+* feat(web): render cms pages and navigation from db ([f65a9ea03f39c21ee9b31e7f9100e3a1f522525f](https://git.fellies.net/Citali/cms.fellies.org/commits/f65a9ea03f39c21ee9b31e7f9100e3a1f522525f))
+* refactor(db): simplify to single prisma schema workflow ([df1280af4a1d24bd9374fc9a005cea9142745d46](https://git.fellies.net/Citali/cms.fellies.org/commits/df1280af4a1d24bd9374fc9a005cea9142745d46))
+* refactor(media): use asset-centric storage key layout ([3e4f0b6c75c59422675637bf658b6682c22f4a89](https://git.fellies.net/Citali/cms.fellies.org/commits/3e4f0b6c75c59422675637bf658b6682c22f4a89))
+* docs(adr): add glossary pages and ADR baseline structure ([cec87679ca5efcf70883b6c78245f8197a8a4432](https://git.fellies.net/Citali/cms.fellies.org/commits/cec87679ca5efcf70883b6c78245f8197a8a4432))
+* docs(crud): add implementation examples and complete docs task ([7b4b23fc4ffdd7e6be8af9da6b2026067acbd35e](https://git.fellies.net/Citali/cms.fellies.org/commits/7b4b23fc4ffdd7e6be8af9da6b2026067acbd35e))
+* docs(gitflow): add branch protection verification checklist ([f9f2b4eb15bd42690891bdc8e4d34c5e55c343dc](https://git.fellies.net/Citali/cms.fellies.org/commits/f9f2b4eb15bd42690891bdc8e4d34c5e55c343dc))
+* docs(i18n): add conventions guide and wire docs navigation ([5872593b014e527ef884ea89053f9cf191edf5dc](https://git.fellies.net/Citali/cms.fellies.org/commits/5872593b014e527ef884ea89053f9cf191edf5dc))
+* docs(ops): add environment and deployment runbook ([4d6e17a13b3ee4a00d93713a223871e96ee94550](https://git.fellies.net/Citali/cms.fellies.org/commits/4d6e17a13b3ee4a00d93713a223871e96ee94550))
+* docs(ops): add staging deployment checklist and evidence template ([637dfd2651a8ad7b0900c0a87c714da7750aaae2](https://git.fellies.net/Citali/cms.fellies.org/commits/637dfd2651a8ad7b0900c0a87c714da7750aaae2))
+* docs(product): add cms feature topics, package catalog, and inspiration notes ([5b47fafe89e7d1e4fb42646f8bac0e2423828c07](https://git.fellies.net/Citali/cms.fellies.org/commits/5b47fafe89e7d1e4fb42646f8bac0e2423828c07))
+* docs(versioning): define release policy and close MVP0 pipeline tasks ([516b7730128951a9f0527b89291b21e14e35aca2](https://git.fellies.net/Citali/cms.fellies.org/commits/516b7730128951a9f0527b89291b21e14e35aca2))
+* chore(ci): add gitea actions runner compose setup ([334a5e35264bf57f1f3586bd78364a5b1d704876](https://git.fellies.net/Citali/cms.fellies.org/commits/334a5e35264bf57f1f3586bd78364a5b1d704876))
+* chore(repo): remove theoretical workflow and fix prisma ci generation ([a57464d818c10caa2732c1aac113d9a251342de1](https://git.fellies.net/Citali/cms.fellies.org/commits/a57464d818c10caa2732c1aac113d9a251342de1))
+* chore(repo): update turbo dependency ([37fabad1f8ceb6224c892facb60b5aa2bca02cc5](https://git.fellies.net/Citali/cms.fellies.org/commits/37fabad1f8ceb6224c892facb60b5aa2bca02cc5))
+* fix(ci): gitea workflows ([c174f840bcfa297937fa40bc3ce4593ddc8ca599](https://git.fellies.net/Citali/cms.fellies.org/commits/c174f840bcfa297937fa40bc3ce4593ddc8ca599))
+* fix(db): organize imports for biome check ([14c3df623a84a3307d4e825bbf36cccfd882eb49](https://git.fellies.net/Citali/cms.fellies.org/commits/14c3df623a84a3307d4e825bbf36cccfd882eb49))
+* ci(delivery): add deploy and release workflow scaffolds ([969e88670f5cb3dd0156e4a53bd84d729be4fe82](https://git.fellies.net/Citali/cms.fellies.org/commits/969e88670f5cb3dd0156e4a53bd84d729be4fe82))
+* ci(gitflow): enforce branch and PR governance checks ([21cc55a1b93f9c7d5ec0db7643f6fe895312a325](https://git.fellies.net/Citali/cms.fellies.org/commits/21cc55a1b93f9c7d5ec0db7643f6fe895312a325))
+
 ## 0.1.0 (2026-02-10)

 ### Features
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -46,7 +46,7 @@ Rules:
 ## Changelog Process

 - Keep commit messages conventional.
- Generate/update `CHANGELOG.md` with:
+- Generate/update `CHANGELOG.md` with release-focused sections (includes `Unreleased`):

 ```bash
 bun run changelog:release
@@ -57,3 +57,10 @@ bun run changelog:release
 ```bash
 bun run changelog:preview
 ```
+
+- For exhaustive output across all allowed commit types (`feat`, `fix`, `docs`, `test`, `ci`, `chore`, `refactor`, etc.):
+
+```bash
+bun run changelog:full:preview
+bun run changelog:full:release
+```
--- a/README.md
+++ b/README.md
@@ -138,7 +138,7 @@ docker compose --env-file .env.gitea-runner -f docker-compose.gitea-runner.yml u

 - Changelog file: `CHANGELOG.md`
 - Commit schema: Conventional Commits (see `CONTRIBUTING.md`)
- Generate/update changelog from git commits:
+- Generate/update changelog from git commits (release-focused sections + `Unreleased`):

 ```bash
 bun run changelog:release
@@ -150,6 +150,13 @@ bun run changelog:release
 bun run changelog:preview
 ```

+- Generate exhaustive changelog output across all supported commit types:
+
+```bash
+bun run changelog:full:preview
+bun run changelog:full:release
+```
+
 ## Docs Tool

 - Docs tool: VitePress
--- a/TODO.md
+++ b/TODO.md
@@ -171,7 +171,7 @@ This file is the single source of truth for roadmap and delivery progress.
 - [ ] [P1] Media entity rendering with enrichment data
 - [ ] [P1] Portfolio views (gallery/album/category/tag) for artworks with filter and sort controls
 - [ ] [P1] Rendition-aware media delivery (thumbnail/card/full) per template slot
- [ ] [P1] Translation-ready content model for public entities (pages/news/navigation labels)
+- [~] [P1] Translation-ready content model for public entities (pages/news/navigation labels)
 - [ ] [P2] Artwork views and listing filters
 - [ ] [P1] Commission request submission flow
 - [x] [P1] Header banner render logic and fallbacks
@@ -187,14 +187,48 @@ This file is the single source of truth for roadmap and delivery progress.
 ### Testing

 - [x] [P1] Unit tests for content schemas and service logic
- [ ] [P1] Component tests for admin forms (pages/media/navigation)
- [ ] [P1] Integration tests for owner invariant and hidden support-user protection
+- [x] [P1] Component tests for admin forms (pages/media/navigation)
+- [x] [P1] Integration tests for owner invariant and hidden support-user protection
 - [x] [P1] Integration tests for registration allow/deny behavior
- [ ] [P1] Integration tests for translated content CRUD and locale-specific validation
+- [x] [P1] Integration tests for translated content CRUD and locale-specific validation
 - [~] [P1] E2E happy paths: create page, publish, see on public app
 - [~] [P1] E2E happy paths: media upload + artwork refinement display
 - [~] [P1] E2E happy paths: commissions kanban transitions

+### Code Documentation And Handover
+
+- [x] [P1] Create architecture map per package/app (`what exists`, `why`, `how to extend`) for `@cms/db`, `@cms/content`, `@cms/crud`, `@cms/ui`, `apps/admin`, `apps/web`
+- [x] [P1] Add module-level ownership docs for auth, media, pages/navigation, commissions, announcements/news flows
+- [x] [P1] Document critical invariants (single owner rule, protected support user, registration policy gates, media storage key contract)
+- [x] [P1] Add “request lifecycle” docs for key flows (auth sign-in/up, media upload, page publish, commission status change)
+- [x] [P1] Add coding handover playbook: local setup, migration workflow, test strategy, branch/release process, common failure recovery
+- [ ] [P2] Add code-level diagrams (Mermaid) for service boundaries and data relationships
+- [ ] [P2] Add route/action inventory for admin and public apps with linked source files
+
+## MVP 1.5: UX/UI And Theming
+
+### MVP1.5 Suggested Branch Order
+
+- [ ] [P1] `todo/mvp15-design-tokens-foundation`:
+  establish shared design tokens (color, spacing, radius, typography scale, motion) in `@cms/ui` and app-level theme contracts
+- [ ] [P1] `todo/mvp15-admin-layout-polish`:
+  refine admin shell, navigation hierarchy, spacing rhythm, table/form visual consistency, empty/loading/error states
+- [ ] [P1] `todo/mvp15-public-layout-and-templates`:
+  define public visual direction (hero/header/footer/content widths), page templates for home/content/news/portfolio
+- [ ] [P2] `todo/mvp15-component-library-pass`:
+  align shadcn-based primitives with CMS brand system (buttons, inputs, cards, badges, tabs, dialogs, toasts)
+- [ ] [P2] `todo/mvp15-responsive-and-a11y-pass`:
+  mobile/tablet breakpoints, keyboard flow, focus states, contrast checks, reduced-motion support
+- [ ] [P2] `todo/mvp15-visual-regression-baseline`:
+  add screenshot baselines for critical admin/public routes to guard layout regressions
+
+### Deliverables
+
+- [ ] [P1] Admin UI baseline feels production-ready for daily editorial use
+- [ ] [P1] Public UI baseline is template-ready for artist branding and portfolio storytelling
+- [ ] [P2] Shared UI primitives are consistent across admin and public apps
+- [ ] [P2] Core routes have visual-regression coverage for the new layout baseline
+
 ## MVP 2: Production Readiness

 ### Admin App
@@ -283,6 +317,12 @@ This file is the single source of truth for roadmap and delivery progress.
 - [2026-02-12] Expanded unit coverage for content/domain schemas and post service behavior (`packages/content/src/domain-schemas.test.ts`, `packages/db/src/posts.test.ts`).
 - [2026-02-12] Added auth flow integration tests for `/login`, `/register`, `/welcome` to validate registration allow/deny and owner bootstrap redirects.
 - [2026-02-12] Admin settings now manage public header banner (enabled/message/CTA), backed by `system_setting` and consumed by public layout rendering.
+- [2026-02-12] Added owner/support invariant integration tests for auth guards (`apps/admin/src/lib/auth/server.test.ts`), covering protected-user deletion blocking and one-owner repair/promotion rules.
+- [2026-02-12] Started admin form component tests with media upload behavior coverage (`apps/admin/src/components/media/media-upload-form.test.tsx`).
+- [2026-02-12] Added code handover documentation baseline: architecture map, critical invariants, request lifecycles, and onboarding playbook under `docs/product-engineering/`.
+- [2026-02-12] Completed admin form component coverage for pages/navigation/media using isolated form components and tests.
+- [2026-02-12] Added page translation CRUD baseline (`PageTranslation`) with locale validation (`de/en/es/fr`) and integration coverage for localized read + fallback behavior.
+- [2026-02-12] Page editor now supports locale translations in `/pages/:id`; public page rendering uses locale-aware page lookup with base-content fallback.

 ## How We Use This File

--- a/apps/admin/src/app/navigation/page.tsx
+++ b/apps/admin/src/app/navigation/page.tsx
@@ -11,6 +11,8 @@ import { revalidatePath } from "next/cache"
 import { redirect } from "next/navigation"

 import { AdminShell } from "@/components/admin-shell"
+import { CreateMenuForm } from "@/components/navigation/create-menu-form"
+import { CreateNavigationItemForm } from "@/components/navigation/create-navigation-item-form"
 import { requirePermissionForRoute } from "@/lib/route-guards"

 export const dynamic = "force-dynamic"
@@ -206,123 +208,12 @@ export default async function NavigationManagementPage({
      <section className="grid gap-4 lg:grid-cols-2">
        <article className="rounded-xl border border-neutral-200 p-6">
          <h2 className="text-xl font-medium">Create Menu</h2>
-          <form action={createMenuAction} className="mt-4 space-y-3">
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">Name</span>
-              <input
-                name="name"
-                required
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">Slug</span>
-              <input
-                name="slug"
-                required
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">Location</span>
-              <input
-                name="location"
-                defaultValue="primary"
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-            <label className="inline-flex items-center gap-2 text-sm text-neutral-700">
-              <input
-                name="isVisible"
-                type="checkbox"
-                value="true"
-                defaultChecked
-                className="size-4"
-              />
-              Visible
-            </label>
-            <Button type="submit">Create menu</Button>
-          </form>
+          <CreateMenuForm action={createMenuAction} />
        </article>

        <article className="rounded-xl border border-neutral-200 p-6">
          <h2 className="text-xl font-medium">Create Navigation Item</h2>
-          <form action={createItemAction} className="mt-4 space-y-3">
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">Menu</span>
-              <select
-                name="menuId"
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              >
-                {menus.map((menu) => (
-                  <option key={menu.id} value={menu.id}>
-                    {menu.name} ({menu.location})
-                  </option>
-                ))}
-              </select>
-            </label>
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">Label</span>
-              <input
-                name="label"
-                required
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-            <div className="grid gap-3 md:grid-cols-2">
-              <label className="space-y-1">
-                <span className="text-xs text-neutral-600">Custom href</span>
-                <input
-                  name="href"
-                  className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-                />
-              </label>
-              <label className="space-y-1">
-                <span className="text-xs text-neutral-600">Linked page</span>
-                <select
-                  name="pageId"
-                  className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-                >
-                  <option value="">(none)</option>
-                  {pages.map((page) => (
-                    <option key={page.id} value={page.id}>
-                      {page.title} (/{page.slug})
-                    </option>
-                  ))}
-                </select>
-              </label>
-            </div>
-            <div className="grid gap-3 md:grid-cols-2">
-              <label className="space-y-1">
-                <span className="text-xs text-neutral-600">Parent item id</span>
-                <input
-                  name="parentId"
-                  className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-                />
-              </label>
-              <label className="space-y-1">
-                <span className="text-xs text-neutral-600">Sort order</span>
-                <input
-                  name="sortOrder"
-                  defaultValue="0"
-                  type="number"
-                  min={0}
-                  className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-                />
-              </label>
-            </div>
-            <label className="inline-flex items-center gap-2 text-sm text-neutral-700">
-              <input
-                name="isVisible"
-                type="checkbox"
-                value="true"
-                defaultChecked
-                className="size-4"
-              />
-              Visible
-            </label>
-            <Button type="submit">Create item</Button>
-          </form>
+          <CreateNavigationItemForm action={createItemAction} menus={menus} pages={pages} />
        </article>
      </section>

--- a/apps/admin/src/app/pages/[id]/page.tsx
+++ b/apps/admin/src/app/pages/[id]/page.tsx
@@ -1,4 +1,10 @@
-import { deletePage, getPageById, updatePage } from "@cms/db"
+import {
+  deletePage,
+  getPageById,
+  listPageTranslations,
+  updatePage,
+  upsertPageTranslation,
+} from "@cms/db"
 import { Button } from "@cms/ui/button"
 import Link from "next/link"
 import { redirect } from "next/navigation"
@@ -9,6 +15,8 @@ import { requirePermissionForRoute } from "@/lib/route-guards"
 export const dynamic = "force-dynamic"

 type SearchParamsInput = Record<string, string | string[] | undefined>
+const SUPPORTED_LOCALES = ["de", "en", "es", "fr"] as const
+type SupportedLocale = (typeof SUPPORTED_LOCALES)[number]

 type PageProps = {
  params: Promise<{ id: string }>
@@ -48,6 +56,14 @@ function redirectWithState(pageId: string, params: { notice?: string; error?: st
  redirect(value ? `/pages/${pageId}?${value}` : `/pages/${pageId}`)
 }

+function normalizeLocale(input: string | null): SupportedLocale {
+  if (input && SUPPORTED_LOCALES.includes(input as SupportedLocale)) {
+    return input as SupportedLocale
+  }
+
+  return "en"
+}
+
 export default async function PageEditorPage({ params, searchParams }: PageProps) {
  const role = await requirePermissionForRoute({
    nextPath: "/pages",
@@ -57,7 +73,11 @@ export default async function PageEditorPage({ params, searchParams }: PageProps
  const resolvedParams = await params
  const pageId = resolvedParams.id

-  const [resolvedSearchParams, pageRecord] = await Promise.all([searchParams, getPageById(pageId)])
+  const [resolvedSearchParams, pageRecord, translations] = await Promise.all([
+    searchParams,
+    getPageById(pageId),
+    listPageTranslations(pageId),
+  ])

  if (!pageRecord) {
    redirect("/pages?error=Page+not+found")
@@ -66,6 +86,8 @@ export default async function PageEditorPage({ params, searchParams }: PageProps
  const page = pageRecord
  const notice = readFirstValue(resolvedSearchParams.notice)
  const error = readFirstValue(resolvedSearchParams.error)
+  const selectedLocale = normalizeLocale(readFirstValue(resolvedSearchParams.locale))
+  const selectedTranslation = translations.find((entry) => entry.locale === selectedLocale)

  async function updatePageAction(formData: FormData) {
    "use server"
@@ -118,6 +140,34 @@ export default async function PageEditorPage({ params, searchParams }: PageProps
    redirect("/pages?notice=Page+deleted")
  }

+  async function upsertPageTranslationAction(formData: FormData) {
+    "use server"
+
+    await requirePermissionForRoute({
+      nextPath: "/pages",
+      permission: "pages:write",
+      scope: "team",
+    })
+
+    const locale = normalizeLocale(readInputString(formData, "locale"))
+
+    try {
+      await upsertPageTranslation({
+        pageId,
+        locale,
+        title: readInputString(formData, "title"),
+        summary: readNullableString(formData, "summary"),
+        content: readInputString(formData, "content"),
+        seoTitle: readNullableString(formData, "seoTitle"),
+        seoDescription: readNullableString(formData, "seoDescription"),
+      })
+    } catch {
+      redirect(`/pages/${pageId}?error=Failed+to+save+translation.&locale=${locale}`)
+    }
+
+    redirect(`/pages/${pageId}?notice=Translation+saved.&locale=${locale}`)
+  }
+
  return (
    <AdminShell
      role={role}
@@ -226,6 +276,132 @@ export default async function PageEditorPage({ params, searchParams }: PageProps
        </form>
      </section>

+      <section className="rounded-xl border border-neutral-200 p-6">
+        <div className="space-y-1">
+          <h3 className="text-xl font-medium">Translations</h3>
+          <p className="text-sm text-neutral-600">
+            Add locale-specific page content. Missing locales fall back to base page fields.
+          </p>
+        </div>
+
+        <div className="mt-4 flex flex-wrap gap-2">
+          {SUPPORTED_LOCALES.map((locale) => {
+            const isActive = locale === selectedLocale
+            const hasTranslation = translations.some((entry) => entry.locale === locale)
+
+            return (
+              <Link
+                key={locale}
+                href={`/pages/${pageId}?locale=${locale}`}
+                className={`inline-flex items-center gap-2 rounded border px-3 py-1.5 text-xs ${
+                  isActive
+                    ? "border-neutral-800 bg-neutral-900 text-white"
+                    : "border-neutral-300 text-neutral-700"
+                }`}
+              >
+                <span>{locale.toUpperCase()}</span>
+                <span className={isActive ? "text-neutral-200" : "text-neutral-500"}>
+                  {hasTranslation ? "saved" : "missing"}
+                </span>
+              </Link>
+            )
+          })}
+        </div>
+
+        {translations.length > 0 ? (
+          <div className="mt-4 rounded border border-neutral-200">
+            <table className="min-w-full text-left text-sm">
+              <thead className="text-xs uppercase tracking-wide text-neutral-500">
+                <tr>
+                  <th className="px-3 py-2">Locale</th>
+                  <th className="px-3 py-2">Title</th>
+                  <th className="px-3 py-2">Updated</th>
+                </tr>
+              </thead>
+              <tbody>
+                {translations.map((translation) => (
+                  <tr key={translation.id} className="border-t border-neutral-200">
+                    <td className="px-3 py-2">{translation.locale.toUpperCase()}</td>
+                    <td className="px-3 py-2">{translation.title}</td>
+                    <td className="px-3 py-2 text-neutral-600">
+                      {translation.updatedAt.toLocaleDateString("en-US")}
+                    </td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        ) : null}
+
+        <form action={upsertPageTranslationAction} className="mt-6 space-y-3">
+          <label className="space-y-1">
+            <span className="text-xs text-neutral-600">Locale</span>
+            <select
+              name="locale"
+              defaultValue={selectedLocale}
+              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+            >
+              {SUPPORTED_LOCALES.map((locale) => (
+                <option key={locale} value={locale}>
+                  {locale.toUpperCase()}
+                </option>
+              ))}
+            </select>
+          </label>
+
+          <label className="space-y-1">
+            <span className="text-xs text-neutral-600">Title</span>
+            <input
+              name="title"
+              defaultValue={selectedTranslation?.title ?? page.title}
+              required
+              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+            />
+          </label>
+
+          <label className="space-y-1">
+            <span className="text-xs text-neutral-600">Summary</span>
+            <input
+              name="summary"
+              defaultValue={selectedTranslation?.summary ?? page.summary ?? ""}
+              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+            />
+          </label>
+
+          <label className="space-y-1">
+            <span className="text-xs text-neutral-600">Content</span>
+            <textarea
+              name="content"
+              rows={8}
+              defaultValue={selectedTranslation?.content ?? page.content}
+              required
+              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+            />
+          </label>
+
+          <div className="grid gap-3 md:grid-cols-2">
+            <label className="space-y-1">
+              <span className="text-xs text-neutral-600">SEO title</span>
+              <input
+                name="seoTitle"
+                defaultValue={selectedTranslation?.seoTitle ?? page.seoTitle ?? ""}
+                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+              />
+            </label>
+            <label className="space-y-1">
+              <span className="text-xs text-neutral-600">SEO description</span>
+              <input
+                name="seoDescription"
+                defaultValue={selectedTranslation?.seoDescription ?? page.seoDescription ?? ""}
+                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+              />
+            </label>
+          </div>
+
+          <Button type="submit">Save translation</Button>
+        </form>
+      </section>
+
      <section className="rounded-xl border border-red-300 bg-red-50 p-6">
        <h3 className="text-lg font-medium text-red-800">Danger Zone</h3>
        <p className="mt-1 text-sm text-red-700">
--- a/apps/admin/src/app/pages/page.tsx
+++ b/apps/admin/src/app/pages/page.tsx
@@ -1,10 +1,10 @@
 import { createPage, listPages } from "@cms/db"
-import { Button } from "@cms/ui/button"
 import { revalidatePath } from "next/cache"
 import Link from "next/link"
 import { redirect } from "next/navigation"

 import { AdminShell } from "@/components/admin-shell"
+import { CreatePageForm } from "@/components/pages/create-page-form"
 import { requirePermissionForRoute } from "@/lib/route-guards"

 export const dynamic = "force-dynamic"
@@ -110,75 +110,7 @@ export default async function PagesManagementPage({

      <section className="rounded-xl border border-neutral-200 p-6">
        <h2 className="text-xl font-medium">Create Page</h2>
-        <form action={createPageAction} className="mt-4 space-y-3">
-          <div className="grid gap-3 md:grid-cols-3">
-            <label className="space-y-1 md:col-span-2">
-              <span className="text-xs text-neutral-600">Title</span>
-              <input
-                name="title"
-                required
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">Status</span>
-              <select
-                name="status"
-                defaultValue="draft"
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              >
-                <option value="draft">draft</option>
-                <option value="published">published</option>
-              </select>
-            </label>
-          </div>
-
-          <label className="space-y-1">
-            <span className="text-xs text-neutral-600">Slug</span>
-            <input
-              name="slug"
-              required
-              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-            />
-          </label>
-
-          <label className="space-y-1">
-            <span className="text-xs text-neutral-600">Summary</span>
-            <input
-              name="summary"
-              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-            />
-          </label>
-
-          <label className="space-y-1">
-            <span className="text-xs text-neutral-600">Content</span>
-            <textarea
-              name="content"
-              rows={6}
-              required
-              className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-            />
-          </label>
-
-          <div className="grid gap-3 md:grid-cols-2">
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">SEO title</span>
-              <input
-                name="seoTitle"
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-            <label className="space-y-1">
-              <span className="text-xs text-neutral-600">SEO description</span>
-              <input
-                name="seoDescription"
-                className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
-              />
-            </label>
-          </div>
-
-          <Button type="submit">Create page</Button>
-        </form>
+        <CreatePageForm action={createPageAction} />
      </section>

      <section className="rounded-xl border border-neutral-200 p-6">
--- a/apps/admin/src/components/media/media-upload-form.test.tsx
+++ b/apps/admin/src/components/media/media-upload-form.test.tsx
@@ -0,0 +1,84 @@
+/* @vitest-environment jsdom */
+
+import { fireEvent, render, screen, waitFor } from "@testing-library/react"
+import { afterEach, describe, expect, it, vi } from "vitest"
+
+import { MediaUploadForm } from "./media-upload-form"
+
+describe("MediaUploadForm", () => {
+  afterEach(() => {
+    vi.restoreAllMocks()
+  })
+
+  it("updates accepted MIME list based on selected media type", () => {
+    render(<MediaUploadForm />)
+
+    const fileInput = screen.getByLabelText("File") as HTMLInputElement
+    const typeSelect = screen.getByLabelText("Type") as HTMLSelectElement
+
+    expect(fileInput.accept).toContain("image/jpeg")
+
+    fireEvent.change(typeSelect, { target: { value: "video" } })
+
+    expect(fileInput.accept).toContain("video/mp4")
+    expect(fileInput.accept).not.toContain("image/jpeg")
+  })
+
+  it("shows API error message when upload fails", async () => {
+    const fetchMock = vi.spyOn(globalThis, "fetch").mockResolvedValue({
+      ok: false,
+      json: async () => ({ message: "Invalid file type" }),
+    } as Response)
+
+    render(<MediaUploadForm />)
+
+    const form = screen.getByRole("button", { name: "Upload media" }).closest("form")
+
+    if (!form) {
+      throw new Error("Upload form not found")
+    }
+
+    const fileInput = screen.getByLabelText("File") as HTMLInputElement
+    fireEvent.change(fileInput, {
+      target: {
+        files: [new File(["x"], "demo.png", { type: "image/png" })],
+      },
+    })
+
+    fireEvent.submit(form)
+
+    await waitFor(() => {
+      expect(screen.queryByText("Invalid file type")).not.toBeNull()
+    })
+
+    expect(fetchMock).toHaveBeenCalledWith(
+      "/api/media/upload",
+      expect.objectContaining({ method: "POST" }),
+    )
+  })
+
+  it("shows network error message when request throws", async () => {
+    vi.spyOn(globalThis, "fetch").mockRejectedValue(new Error("network down"))
+
+    render(<MediaUploadForm />)
+
+    const form = screen.getByRole("button", { name: "Upload media" }).closest("form")
+
+    if (!form) {
+      throw new Error("Upload form not found")
+    }
+
+    const fileInput = screen.getByLabelText("File") as HTMLInputElement
+    fireEvent.change(fileInput, {
+      target: {
+        files: [new File(["x"], "demo.png", { type: "image/png" })],
+      },
+    })
+
+    fireEvent.submit(form)
+
+    await waitFor(() => {
+      expect(screen.queryByText("Upload request failed. Please retry.")).not.toBeNull()
+    })
+  })
+})
--- a/apps/admin/src/components/navigation/create-menu-form.test.tsx
+++ b/apps/admin/src/components/navigation/create-menu-form.test.tsx
@@ -0,0 +1,20 @@
+/* @vitest-environment jsdom */
+
+import { render, screen } from "@testing-library/react"
+import { describe, expect, it, vi } from "vitest"
+
+import { CreateMenuForm } from "./create-menu-form"
+
+describe("CreateMenuForm", () => {
+  it("renders defaults for location and visibility", () => {
+    render(<CreateMenuForm action={vi.fn()} />)
+
+    const location = screen.getByLabelText("Location") as HTMLInputElement
+    expect(location.value).toBe("primary")
+
+    const visible = screen.getByLabelText("Visible") as HTMLInputElement
+    expect(visible.checked).toBe(true)
+
+    expect(screen.getByRole("button", { name: "Create menu" })).not.toBeNull()
+  })
+})
--- a/apps/admin/src/components/navigation/create-menu-form.tsx
+++ b/apps/admin/src/components/navigation/create-menu-form.tsx
@@ -0,0 +1,41 @@
+import { Button } from "@cms/ui/button"
+
+type CreateMenuFormProps = {
+  action: (formData: FormData) => void | Promise<void>
+}
+
+export function CreateMenuForm({ action }: CreateMenuFormProps) {
+  return (
+    <form action={action} className="mt-4 space-y-3">
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Name</span>
+        <input
+          name="name"
+          required
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Slug</span>
+        <input
+          name="slug"
+          required
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Location</span>
+        <input
+          name="location"
+          defaultValue="primary"
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+      <label className="inline-flex items-center gap-2 text-sm text-neutral-700">
+        <input name="isVisible" type="checkbox" value="true" defaultChecked className="size-4" />
+        Visible
+      </label>
+      <Button type="submit">Create menu</Button>
+    </form>
+  )
+}
--- a/apps/admin/src/components/navigation/create-navigation-item-form.test.tsx
+++ b/apps/admin/src/components/navigation/create-navigation-item-form.test.tsx
@@ -0,0 +1,32 @@
+/* @vitest-environment jsdom */
+
+import { render, screen } from "@testing-library/react"
+import { describe, expect, it, vi } from "vitest"
+
+import { CreateNavigationItemForm } from "./create-navigation-item-form"
+
+describe("CreateNavigationItemForm", () => {
+  it("renders menu/page options and defaults", () => {
+    render(
+      <CreateNavigationItemForm
+        action={vi.fn()}
+        menus={[{ id: "menu-1", name: "Primary", location: "header" }]}
+        pages={[{ id: "page-1", title: "Home", slug: "home" }]}
+      />,
+    )
+
+    const menu = screen.getByLabelText("Menu") as HTMLSelectElement
+    expect(menu.options.length).toBe(1)
+    expect(menu.value).toBe("menu-1")
+
+    const page = screen.getByLabelText("Linked page") as HTMLSelectElement
+    expect(page.options.length).toBe(2)
+    expect(page.options[0]?.value).toBe("")
+
+    const sortOrder = screen.getByLabelText("Sort order") as HTMLInputElement
+    expect(sortOrder.value).toBe("0")
+
+    const visible = screen.getByLabelText("Visible") as HTMLInputElement
+    expect(visible.checked).toBe(true)
+  })
+})
--- a/apps/admin/src/components/navigation/create-navigation-item-form.tsx
+++ b/apps/admin/src/components/navigation/create-navigation-item-form.tsx
@@ -0,0 +1,94 @@
+import { Button } from "@cms/ui/button"
+
+type MenuOption = {
+  id: string
+  name: string
+  location: string
+}
+
+type PageOption = {
+  id: string
+  title: string
+  slug: string
+}
+
+type CreateNavigationItemFormProps = {
+  action: (formData: FormData) => void | Promise<void>
+  menus: MenuOption[]
+  pages: PageOption[]
+}
+
+export function CreateNavigationItemForm({ action, menus, pages }: CreateNavigationItemFormProps) {
+  return (
+    <form action={action} className="mt-4 space-y-3">
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Menu</span>
+        <select
+          name="menuId"
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        >
+          {menus.map((menu) => (
+            <option key={menu.id} value={menu.id}>
+              {menu.name} ({menu.location})
+            </option>
+          ))}
+        </select>
+      </label>
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Label</span>
+        <input
+          name="label"
+          required
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+      <div className="grid gap-3 md:grid-cols-2">
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">Custom href</span>
+          <input
+            name="href"
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          />
+        </label>
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">Linked page</span>
+          <select
+            name="pageId"
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          >
+            <option value="">(none)</option>
+            {pages.map((page) => (
+              <option key={page.id} value={page.id}>
+                {page.title} (/{page.slug})
+              </option>
+            ))}
+          </select>
+        </label>
+      </div>
+      <div className="grid gap-3 md:grid-cols-2">
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">Parent item id</span>
+          <input
+            name="parentId"
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          />
+        </label>
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">Sort order</span>
+          <input
+            name="sortOrder"
+            defaultValue="0"
+            type="number"
+            min={0}
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          />
+        </label>
+      </div>
+      <label className="inline-flex items-center gap-2 text-sm text-neutral-700">
+        <input name="isVisible" type="checkbox" value="true" defaultChecked className="size-4" />
+        Visible
+      </label>
+      <Button type="submit">Create item</Button>
+    </form>
+  )
+}
--- a/apps/admin/src/components/pages/create-page-form.test.tsx
+++ b/apps/admin/src/components/pages/create-page-form.test.tsx
@@ -0,0 +1,21 @@
+/* @vitest-environment jsdom */
+
+import { render, screen } from "@testing-library/react"
+import { describe, expect, it, vi } from "vitest"
+
+import { CreatePageForm } from "./create-page-form"
+
+describe("CreatePageForm", () => {
+  it("renders required fields and draft default status", () => {
+    render(<CreatePageForm action={vi.fn()} />)
+
+    expect((screen.getByLabelText("Title") as HTMLInputElement).name).toBe("title")
+    expect((screen.getByLabelText("Slug") as HTMLInputElement).name).toBe("slug")
+    expect((screen.getByLabelText("Content") as HTMLTextAreaElement).name).toBe("content")
+
+    const status = screen.getByLabelText("Status") as HTMLSelectElement
+    expect(status.value).toBe("draft")
+
+    expect(screen.getByRole("button", { name: "Create page" })).not.toBeNull()
+  })
+})
--- a/apps/admin/src/components/pages/create-page-form.tsx
+++ b/apps/admin/src/components/pages/create-page-form.tsx
@@ -0,0 +1,79 @@
+import { Button } from "@cms/ui/button"
+
+type CreatePageFormProps = {
+  action: (formData: FormData) => void | Promise<void>
+}
+
+export function CreatePageForm({ action }: CreatePageFormProps) {
+  return (
+    <form action={action} className="mt-4 space-y-3">
+      <div className="grid gap-3 md:grid-cols-3">
+        <label className="space-y-1 md:col-span-2">
+          <span className="text-xs text-neutral-600">Title</span>
+          <input
+            name="title"
+            required
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          />
+        </label>
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">Status</span>
+          <select
+            name="status"
+            defaultValue="draft"
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          >
+            <option value="draft">draft</option>
+            <option value="published">published</option>
+          </select>
+        </label>
+      </div>
+
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Slug</span>
+        <input
+          name="slug"
+          required
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Summary</span>
+        <input
+          name="summary"
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+
+      <label className="space-y-1">
+        <span className="text-xs text-neutral-600">Content</span>
+        <textarea
+          name="content"
+          rows={6}
+          required
+          className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+        />
+      </label>
+
+      <div className="grid gap-3 md:grid-cols-2">
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">SEO title</span>
+          <input
+            name="seoTitle"
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          />
+        </label>
+        <label className="space-y-1">
+          <span className="text-xs text-neutral-600">SEO description</span>
+          <input
+            name="seoDescription"
+            className="w-full rounded border border-neutral-300 px-3 py-2 text-sm"
+          />
+        </label>
+      </div>
+
+      <Button type="submit">Create page</Button>
+    </form>
+  )
+}
--- a/apps/admin/src/lib/auth/server.test.ts
+++ b/apps/admin/src/lib/auth/server.test.ts
@@ -0,0 +1,238 @@
+import { beforeEach, describe, expect, it, vi } from "vitest"
+
+const { mockDb, mockIsAdminSelfRegistrationEnabled, mockAuth, mockAuthRouteHandlers } = vi.hoisted(
+  () => {
+    const mockDb = {
+      user: {
+        count: vi.fn(),
+        findUnique: vi.fn(),
+        findMany: vi.fn(),
+        findFirst: vi.fn(),
+        update: vi.fn(),
+        updateMany: vi.fn(),
+      },
+      $transaction: vi.fn(),
+    }
+
+    return {
+      mockDb,
+      mockIsAdminSelfRegistrationEnabled: vi.fn(),
+      mockAuth: {
+        api: {
+          getSession: vi.fn(),
+        },
+        $context: Promise.resolve({
+          internalAdapter: {
+            findUserByEmail: vi.fn(),
+            linkAccount: vi.fn(),
+            createUser: vi.fn(),
+          },
+          password: {
+            hash: vi.fn(async (value: string) => `hashed:${value}`),
+          },
+        }),
+      },
+      mockAuthRouteHandlers: {
+        GET: vi.fn(),
+        POST: vi.fn(),
+        PATCH: vi.fn(),
+        PUT: vi.fn(),
+        DELETE: vi.fn(),
+      },
+    }
+  },
+)
+
+vi.mock("@cms/db", () => ({
+  db: mockDb,
+  isAdminSelfRegistrationEnabled: mockIsAdminSelfRegistrationEnabled,
+}))
+
+vi.mock("better-auth", () => ({
+  betterAuth: vi.fn(() => mockAuth),
+}))
+
+vi.mock("better-auth/adapters/prisma", () => ({
+  prismaAdapter: vi.fn(() => ({})),
+}))
+
+vi.mock("better-auth/next-js", () => ({
+  toNextJsHandler: vi.fn(() => mockAuthRouteHandlers),
+}))
+
+import {
+  canDeleteUserAccount,
+  enforceOwnerInvariant,
+  promoteFirstRegisteredUserToOwner,
+} from "./server"
+
+describe("auth owner/support invariants", () => {
+  beforeEach(() => {
+    mockIsAdminSelfRegistrationEnabled.mockReset()
+    mockDb.user.count.mockReset()
+    mockDb.user.findUnique.mockReset()
+    mockDb.user.findMany.mockReset()
+    mockDb.user.findFirst.mockReset()
+    mockDb.user.update.mockReset()
+    mockDb.user.updateMany.mockReset()
+    mockDb.$transaction.mockReset()
+  })
+
+  it("blocks deletion of protected users", async () => {
+    mockDb.user.findUnique.mockResolvedValue({
+      role: "support",
+      isProtected: true,
+    })
+
+    const allowed = await canDeleteUserAccount("user-protected")
+
+    expect(allowed).toBe(false)
+  })
+
+  it("allows deletion of non-owner non-protected users", async () => {
+    mockDb.user.findUnique.mockResolvedValue({
+      role: "editor",
+      isProtected: false,
+    })
+
+    const allowed = await canDeleteUserAccount("user-editor")
+
+    expect(allowed).toBe(true)
+  })
+
+  it("keeps sole owner non-deletable", async () => {
+    mockDb.user.findUnique.mockResolvedValue({
+      role: "owner",
+      isProtected: false,
+    })
+    mockDb.user.count.mockResolvedValue(1)
+
+    const allowed = await canDeleteUserAccount("owner-1")
+
+    expect(allowed).toBe(false)
+  })
+
+  it("promotes earliest non-support user when no owner exists", async () => {
+    const tx = {
+      user: {
+        findMany: vi.fn().mockResolvedValue([]),
+        findFirst: vi.fn().mockResolvedValue({ id: "candidate-1" }),
+        update: vi.fn().mockResolvedValue({ id: "candidate-1" }),
+        updateMany: vi.fn(),
+      },
+    }
+
+    mockDb.$transaction.mockImplementation(async (callback: (trx: typeof tx) => unknown) =>
+      callback(tx),
+    )
+
+    const result = await enforceOwnerInvariant()
+
+    expect(result).toEqual({
+      ownerId: "candidate-1",
+      ownerCount: 1,
+      repaired: true,
+    })
+    expect(tx.user.update).toHaveBeenCalledTimes(1)
+  })
+
+  it("demotes extra owners and repairs canonical owner protection", async () => {
+    const tx = {
+      user: {
+        findMany: vi.fn().mockResolvedValue([
+          { id: "owner-a", isProtected: false, isBanned: true },
+          { id: "owner-b", isProtected: true, isBanned: false },
+        ]),
+        findFirst: vi.fn(),
+        update: vi.fn().mockResolvedValue({ id: "owner-a" }),
+        updateMany: vi.fn().mockResolvedValue({ count: 1 }),
+      },
+    }
+
+    mockDb.$transaction.mockImplementation(async (callback: (trx: typeof tx) => unknown) =>
+      callback(tx),
+    )
+
+    const result = await enforceOwnerInvariant()
+
+    expect(result).toEqual({
+      ownerId: "owner-a",
+      ownerCount: 1,
+      repaired: true,
+    })
+    expect(tx.user.updateMany).toHaveBeenCalledWith({
+      where: { id: { in: ["owner-b"] } },
+      data: { role: "admin", isProtected: false },
+    })
+    expect(tx.user.update).toHaveBeenCalledWith({
+      where: { id: "owner-a" },
+      data: { isProtected: true, isBanned: false },
+    })
+  })
+
+  it("does not promote first registration when an owner already exists", async () => {
+    mockDb.$transaction.mockImplementationOnce(
+      async (
+        callback: (tx: {
+          user: { findFirst: () => Promise<{ id: string }>; update: () => void }
+        }) => unknown,
+      ) =>
+        callback({
+          user: {
+            findFirst: vi.fn().mockResolvedValue({ id: "owner-existing" }),
+            update: vi.fn(),
+          },
+        }),
+    )
+
+    const promoted = await promoteFirstRegisteredUserToOwner("candidate")
+
+    expect(promoted).toBe(false)
+  })
+
+  it("promotes first registration and re-enforces owner invariant", async () => {
+    mockDb.$transaction
+      .mockImplementationOnce(
+        async (
+          callback: (tx: {
+            user: { findFirst: () => Promise<null>; update: () => Promise<{ id: string }> }
+          }) => unknown,
+        ) =>
+          callback({
+            user: {
+              findFirst: vi.fn().mockResolvedValue(null),
+              update: vi.fn().mockResolvedValue({ id: "candidate" }),
+            },
+          }),
+      )
+      .mockImplementationOnce(
+        async (
+          callback: (tx: {
+            user: {
+              findMany: () => Promise<
+                Array<{ id: string; isProtected: boolean; isBanned: boolean }>
+              >
+              findFirst: () => void
+              update: () => void
+              updateMany: () => void
+            }
+          }) => unknown,
+        ) =>
+          callback({
+            user: {
+              findMany: vi
+                .fn()
+                .mockResolvedValue([{ id: "candidate", isProtected: true, isBanned: false }]),
+              findFirst: vi.fn(),
+              update: vi.fn(),
+              updateMany: vi.fn(),
+            },
+          }),
+      )
+
+    const promoted = await promoteFirstRegisteredUserToOwner("candidate")
+
+    expect(promoted).toBe(true)
+    expect(mockDb.$transaction).toHaveBeenCalledTimes(2)
+  })
+})
--- a/apps/web/src/app/[locale]/[slug]/page.tsx
+++ b/apps/web/src/app/[locale]/[slug]/page.tsx
@@ -1,4 +1,4 @@
-import { getPublishedPageBySlug } from "@cms/db"
+import { getPublishedPageBySlugForLocale } from "@cms/db"
 import { notFound } from "next/navigation"

 import { PublicPageView } from "@/components/public-page-view"
@@ -6,12 +6,12 @@ import { PublicPageView } from "@/components/public-page-view"
 export const dynamic = "force-dynamic"

 type PageProps = {
-  params: Promise<{ slug: string }>
+  params: Promise<{ locale: string; slug: string }>
 }

 export default async function CmsPageRoute({ params }: PageProps) {
-  const { slug } = await params
-  const page = await getPublishedPageBySlug(slug)
+  const { locale, slug } = await params
+  const page = await getPublishedPageBySlugForLocale(slug, locale)

  if (!page) {
    notFound()
--- a/apps/web/src/app/[locale]/page.tsx
+++ b/apps/web/src/app/[locale]/page.tsx
@@ -1,4 +1,4 @@
-import { getPublishedPageBySlug, listPosts } from "@cms/db"
+import { getPublishedPageBySlugForLocale, listPosts } from "@cms/db"
 import { Button } from "@cms/ui/button"
 import { getTranslations } from "next-intl/server"
 import { PublicAnnouncements } from "@/components/public-announcements"
@@ -6,9 +6,15 @@ import { PublicPageView } from "@/components/public-page-view"

 export const dynamic = "force-dynamic"

-export default async function HomePage() {
+type HomePageProps = {
+  params: Promise<{ locale: string }>
+}
+
+export default async function HomePage({ params }: HomePageProps) {
+  const { locale } = await params
+
  const [homePage, posts, t] = await Promise.all([
-    getPublishedPageBySlug("home"),
+    getPublishedPageBySlugForLocale("home", locale),
    listPosts(),
    getTranslations("Home"),
  ])
--- a/conventional-changelog.config.cjs
+++ b/conventional-changelog.config.cjs
@@ -0,0 +1,30 @@
+module.exports = {
+  preset: "conventionalcommits",
+  writerOpts: {
+    transform: (commit) => {
+      const typeMap = {
+        feat: "Features",
+        fix: "Bug Fixes",
+        perf: "Performance",
+        refactor: "Refactors",
+        docs: "Documentation",
+        test: "Tests",
+        build: "Build System",
+        ci: "CI",
+        chore: "Chores",
+        revert: "Reverts",
+      }
+
+      const mappedType = typeMap[commit.type]
+
+      if (!mappedType) {
+        return undefined
+      }
+
+      return {
+        ...commit,
+        type: mappedType,
+      }
+    },
+  },
+}
--- a/docs/.vitepress/config.mts
+++ b/docs/.vitepress/config.mts
@@ -25,6 +25,10 @@ export default defineConfig({
          { text: "i18n Baseline", link: "/product-engineering/i18n-baseline" },
          { text: "i18n Conventions", link: "/product-engineering/i18n-conventions" },
          { text: "RBAC And Permissions", link: "/product-engineering/rbac-permission-model" },
+          { text: "Code Architecture Map", link: "/product-engineering/code-architecture-map" },
+          { text: "Critical Invariants", link: "/product-engineering/critical-invariants" },
+          { text: "Request Lifecycle Flows", link: "/product-engineering/request-lifecycle-flows" },
+          { text: "Code Handover Playbook", link: "/product-engineering/code-handover-playbook" },
          { text: "Domain Glossary", link: "/product-engineering/domain-glossary" },
          { text: "Environment Runbook", link: "/product-engineering/environment-runbook" },
          { text: "Delivery Pipeline", link: "/product-engineering/delivery-pipeline" },
--- a/docs/product-engineering/code-architecture-map.md
+++ b/docs/product-engineering/code-architecture-map.md
@@ -0,0 +1,53 @@
+# Code Architecture Map
+
+This page is the fast handover map for engineers taking over the codebase.
+
+## Repository Structure
+
+- `apps/admin`:
+  Next.js admin panel. Owns auth UI, CMS management screens, and protected workflows.
+- `apps/web`:
+  Next.js public site. Renders CMS-managed content and public-facing routes.
+- `packages/db`:
+  Prisma schema, generated client usage, and data access services.
+- `packages/content`:
+  Domain-level Zod schemas and shared contracts.
+- `packages/crud`:
+  Shared CRUD service pattern (validation, not-found behavior, audit hook contracts).
+- `packages/ui`:
+  Shared UI primitives used by admin/public apps.
+- `packages/i18n`:
+  Shared locale helpers.
+
+## Runtime Boundaries
+
+- Admin app:
+  writes content and settings, enforces RBAC, runs Better Auth route handlers.
+- Public app:
+  reads published content and settings; no public auth coupling.
+- DB package:
+  only data access and business-persistence rules.
+- Content package:
+  only validation and domain typing; no DB or framework runtime coupling.
+
+## Core Feature Modules
+
+- Auth and user guards:
+  `apps/admin/src/lib/auth/server.ts`, `apps/admin/src/app/api/auth/[...all]/route.ts`
+- Access and route permissions:
+  `apps/admin/src/lib/access.ts`, `apps/admin/src/lib/route-guards.ts`
+- Media domain + storage:
+  `packages/db/src/media-foundation.ts`, `apps/admin/src/lib/media/storage.ts`
+- Pages and navigation:
+  `packages/db/src/pages-navigation.ts`, `apps/admin/src/app/pages/*`, `apps/admin/src/app/navigation/*`
+- Commissions and customers:
+  `packages/db/src/commissions.ts`, `apps/admin/src/app/commissions/page.tsx`
+- Announcements and news:
+  `packages/db/src/announcements.ts`, `apps/admin/src/app/announcements/page.tsx`, `apps/admin/src/app/news/page.tsx`
+
+## Extension Rules
+
+- Add/adjust schema first in `packages/content`.
+- Implement persistence in `packages/db`.
+- Wire usage in app route/actions after schema/service are in place.
+- Add tests at service and app-boundary levels before marking TODO items done.
--- a/docs/product-engineering/code-handover-playbook.md
+++ b/docs/product-engineering/code-handover-playbook.md
@@ -0,0 +1,62 @@
+# Code Handover Playbook
+
+This is the minimum runbook for a new engineer to continue delivery safely.
+
+## Local Setup
+
+1. Install Bun matching repo policy.
+2. Copy `.env.example` to `.env` and fill required values.
+3. Generate Prisma client:
+   `bun run db:generate`
+4. Apply migrations:
+   `bun run db:migrate:deploy` (or local named migration flow)
+5. Seed data:
+   `bun run db:seed`
+6. Start apps:
+   `bun run dev`
+
+## Daily Development Loop
+
+1. Create branch by task type:
+   `todo/*`, `refactor/*`, `code/*`.
+2. Implement smallest vertical slice for one TODO item.
+3. Run quality gates:
+   `bun run check`
+   `bun run typecheck`
+   `bun run test`
+4. Update `TODO.md` status and discovery log.
+5. Commit with Conventional Commit message and GPG signing.
+
+## Database Workflow
+
+- Schema source is:
+  `packages/db/prisma/schema.prisma`
+- Use named dev migrations for schema changes.
+- Avoid manual SQL unless migration tooling is blocked.
+- Always regenerate client after schema change.
+
+## Testing Strategy
+
+- Unit/service tests:
+  `packages/*` and logic helpers.
+- App-boundary integration tests:
+  auth flow and route-level behavior.
+- E2E tests:
+  full admin/public happy paths through Playwright.
+
+## Common Failure Recovery
+
+- `DATABASE_URL not set`:
+  ensure root `.env` is loaded for Bun/Prisma scripts.
+- Prisma client import errors:
+  run `bun run db:generate`.
+- Migration drift:
+  run deploy/reset flow in dev and reseed.
+- Playwright host deps missing:
+  install browser dependencies on host before running e2e.
+
+## Ownership Expectations
+
+- Keep invariants explicit and tested before changing auth/media pipelines.
+- Treat `TODO.md` as delivery source of truth.
+- If changing branch/release workflow, update docs in same branch.
--- a/docs/product-engineering/critical-invariants.md
+++ b/docs/product-engineering/critical-invariants.md
@@ -0,0 +1,57 @@
+# Critical Invariants
+
+These rules must stay true across refactors and feature work.
+
+## Auth and User Invariants
+
+- Exactly one owner user must exist.
+- The canonical owner must remain protected and not banned.
+- Support user is system-owned and protected.
+- Protected users cannot be deleted through auth endpoints.
+- First owner bootstrap closes open owner-registration window.
+
+Primary implementation:
+- `apps/admin/src/lib/auth/server.ts`
+- `apps/admin/src/app/api/auth/[...all]/route.ts`
+
+Primary tests:
+- `apps/admin/src/lib/auth/server.test.ts`
+- `apps/admin/src/app/register/page.test.tsx`
+- `apps/admin/src/app/welcome/page.test.tsx`
+- `apps/admin/src/app/login/page.test.tsx`
+
+## Registration Policy Invariants
+
+- If no owner exists:
+  `welcome` flow is open for first owner bootstrap.
+- If owner exists:
+  self-registration depends on persisted policy in `system_setting`.
+- Register route must never silently create users when policy is disabled.
+
+Primary implementation:
+- `packages/db/src/settings.ts`
+- `apps/admin/src/app/settings/page.tsx`
+- `apps/admin/src/app/register/page.tsx`
+
+## Media Storage Contract
+
+- Storage provider is selected by `CMS_MEDIA_STORAGE_PROVIDER`.
+- S3 is primary; local is explicit fallback.
+- Each media asset stores a stable `storageKey`.
+- Deleting a media asset must also attempt storage object deletion.
+
+Primary implementation:
+- `apps/admin/src/lib/media/storage.ts`
+- `apps/admin/src/lib/media/storage-key.ts`
+- `apps/admin/src/app/media/[id]/page.tsx`
+
+## Public Rendering Contract
+
+- Public pages must render only published CMS pages.
+- Public navigation must be built from managed menu items.
+- Header banner and announcements must be optional and fail-safe.
+
+Primary implementation:
+- `apps/web/src/app/[locale]/layout.tsx`
+- `apps/web/src/app/[locale]/page.tsx`
+- `apps/web/src/app/[locale]/[slug]/page.tsx`
--- a/docs/product-engineering/index.md
+++ b/docs/product-engineering/index.md
@@ -11,6 +11,10 @@ This section covers platform and implementation documentation for engineers and
 - [i18n Conventions](/product-engineering/i18n-conventions)
 - [CRUD Examples](/product-engineering/crud-examples)
 - [Package Catalog And Decision Notes](/product-engineering/package-catalog)
+- [Code Architecture Map](/product-engineering/code-architecture-map)
+- [Critical Invariants](/product-engineering/critical-invariants)
+- [Request Lifecycle Flows](/product-engineering/request-lifecycle-flows)
+- [Code Handover Playbook](/product-engineering/code-handover-playbook)
 - [User Personas And Use-Case Topics](/product-engineering/user-personas-and-use-cases)
 - [CMS Feature Topics (Domain-Centric)](/product-engineering/cms-feature-topics)
 - [Domain Glossary](/product-engineering/domain-glossary)
--- a/docs/product-engineering/request-lifecycle-flows.md
+++ b/docs/product-engineering/request-lifecycle-flows.md
@@ -0,0 +1,61 @@
+# Request Lifecycle Flows
+
+## 1. Auth Sign-In (Admin)
+
+1. Browser posts to `/api/auth/sign-in/email`.
+2. Route resolves `identifier` (email or username) to canonical email.
+3. Better Auth credential sign-in executes.
+4. Session cookie is set and user is redirected.
+
+Key files:
+- `apps/admin/src/app/login/login-form.tsx`
+- `apps/admin/src/app/api/auth/[...all]/route.ts`
+- `apps/admin/src/lib/auth/server.ts`
+
+## 2. Initial Owner Registration
+
+1. If no owner exists, `/welcome` renders owner sign-up mode.
+2. Sign-up request goes through auth route handler.
+3. New user is promoted to owner in transactional guard.
+4. Owner invariant is re-validated to enforce single owner.
+
+Key files:
+- `apps/admin/src/app/welcome/page.tsx`
+- `apps/admin/src/app/api/auth/[...all]/route.ts`
+- `apps/admin/src/lib/auth/server.ts`
+
+## 3. Media Upload
+
+1. Admin form posts multipart data to `/api/media/upload`.
+2. Metadata is validated and file is stored through selected provider.
+3. Media asset record is persisted with storage metadata.
+4. UI redirects back to media list with flash status query.
+
+Key files:
+- `apps/admin/src/components/media/media-upload-form.tsx`
+- `apps/admin/src/app/api/media/upload/route.ts`
+- `apps/admin/src/lib/media/storage.ts`
+- `packages/db/src/media-foundation.ts`
+
+## 4. Page Publish
+
+1. Admin submit on `/pages` calls server action.
+2. Page schema validates payload and persists.
+3. `published` status sets publication fields.
+4. Public app resolves slug and renders page if published.
+
+Key files:
+- `apps/admin/src/app/pages/page.tsx`
+- `packages/db/src/pages-navigation.ts`
+- `apps/web/src/app/[locale]/[slug]/page.tsx`
+
+## 5. Commission Status Transition
+
+1. Admin updates status from commission card form.
+2. Server action validates transition payload.
+3. DB update persists new status.
+4. Kanban view re-renders with updated column placement.
+
+Key files:
+- `apps/admin/src/app/commissions/page.tsx`
+- `packages/db/src/commissions.ts`
--- a/docs/workflow.md
+++ b/docs/workflow.md
@@ -23,12 +23,18 @@ Follow `BRANCHING.md`:
 ## Changelog

 - Conventional commits required (see `CONTRIBUTING.md`)
- Generate changelog with:
+- Generate changelog with release-focused sections and `Unreleased`:

 ```bash
 bun run changelog:release
 ```

+- For exhaustive output across all allowed commit types:
+
+```bash
+bun run changelog:full:preview
+```
+
 ## Governance

 - Branch and PR governance checks run in `.gitea/workflows/ci.yml`.
--- a/package.json
+++ b/package.json
@@ -23,8 +23,10 @@
    "test:e2e:headed": "bun run test:e2e:prepare && playwright test --headed",
    "test:e2e:ui": "bun run test:e2e:prepare && playwright test --ui",
    "commitlint": "commitlint --last",
-    "changelog:preview": "conventional-changelog -p conventionalcommits -r 0",
-    "changelog:release": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s",
+    "changelog:preview": "conventional-changelog -p conventionalcommits -r 0 -u",
+    "changelog:release": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s -u",
+    "changelog:full:preview": "conventional-changelog -n ./conventional-changelog.config.cjs -r 0 -u",
+    "changelog:full:release": "conventional-changelog -n ./conventional-changelog.config.cjs -i CHANGELOG.md -s -u",
    "lint": "turbo lint",
    "typecheck": "turbo typecheck",
    "format": "biome format --write .",
--- a/packages/content/src/pages-navigation.ts
+++ b/packages/content/src/pages-navigation.ts
@@ -1,6 +1,7 @@
 import { z } from "zod"

 export const pageStatusSchema = z.enum(["draft", "published"])
+export const pageLocaleSchema = z.enum(["de", "en", "es", "fr"])

 export const createPageInputSchema = z.object({
  title: z.string().min(1).max(180),
@@ -23,6 +24,16 @@ export const updatePageInputSchema = z.object({
  seoDescription: z.string().max(320).nullable().optional(),
 })

+export const upsertPageTranslationInputSchema = z.object({
+  pageId: z.string().uuid(),
+  locale: pageLocaleSchema,
+  title: z.string().min(1).max(180),
+  summary: z.string().max(500).nullable().optional(),
+  content: z.string().min(1),
+  seoTitle: z.string().max(180).nullable().optional(),
+  seoDescription: z.string().max(320).nullable().optional(),
+})
+
 export const createNavigationMenuInputSchema = z.object({
  name: z.string().min(1).max(180),
  slug: z.string().min(1).max(180),
@@ -52,6 +63,7 @@ export const updateNavigationItemInputSchema = z.object({

 export type CreatePageInput = z.infer<typeof createPageInputSchema>
 export type UpdatePageInput = z.infer<typeof updatePageInputSchema>
+export type UpsertPageTranslationInput = z.infer<typeof upsertPageTranslationInputSchema>
 export type CreateNavigationMenuInput = z.infer<typeof createNavigationMenuInputSchema>
 export type CreateNavigationItemInput = z.infer<typeof createNavigationItemInputSchema>
 export type UpdateNavigationItemInput = z.infer<typeof updateNavigationItemInputSchema>
--- a/packages/db/prisma/migrations/20260212220000_page_translations/migration.sql
+++ b/packages/db/prisma/migrations/20260212220000_page_translations/migration.sql
@@ -0,0 +1,24 @@
+-- CreateTable
+CREATE TABLE "PageTranslation" (
+    "id" TEXT NOT NULL,
+    "pageId" TEXT NOT NULL,
+    "locale" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "summary" TEXT,
+    "content" TEXT NOT NULL,
+    "seoTitle" TEXT,
+    "seoDescription" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "PageTranslation_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "PageTranslation_locale_idx" ON "PageTranslation"("locale");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "PageTranslation_pageId_locale_key" ON "PageTranslation"("pageId", "locale");
+
+-- AddForeignKey
+ALTER TABLE "PageTranslation" ADD CONSTRAINT "PageTranslation_pageId_fkey" FOREIGN KEY ("pageId") REFERENCES "Page"("id") ON DELETE CASCADE ON UPDATE CASCADE;
--- a/packages/db/prisma/schema.prisma
+++ b/packages/db/prisma/schema.prisma
@@ -267,10 +267,28 @@ model Page {
  createdAt      DateTime @default(now())
  updatedAt      DateTime @updatedAt
  navItems       NavigationItem[]
+  translations   PageTranslation[]

  @@index([status])
 }

+model PageTranslation {
+  id             String   @id @default(uuid())
+  pageId         String
+  locale         String
+  title          String
+  summary        String?
+  content        String
+  seoTitle       String?
+  seoDescription String?
+  createdAt      DateTime @default(now())
+  updatedAt      DateTime @updatedAt
+  page           Page     @relation(fields: [pageId], references: [id], onDelete: Cascade)
+
+  @@unique([pageId, locale])
+  @@index([locale])
+}
+
 model NavigationMenu {
  id        String           @id @default(uuid())
  name      String
--- a/packages/db/src/index.ts
+++ b/packages/db/src/index.ts
@@ -41,12 +41,15 @@ export {
  deletePage,
  getPageById,
  getPublishedPageBySlug,
+  getPublishedPageBySlugForLocale,
  listNavigationMenus,
  listPages,
+  listPageTranslations,
  listPublicNavigation,
  listPublishedPageSlugs,
  updateNavigationItem,
  updatePage,
+  upsertPageTranslation,
 } from "./pages-navigation"
 export {
  createPost,
--- a/packages/db/src/pages-navigation.test.ts
+++ b/packages/db/src/pages-navigation.test.ts
@@ -7,6 +7,11 @@ const { mockDb } = vi.hoisted(() => ({
      update: vi.fn(),
      delete: vi.fn(),
      findUnique: vi.fn(),
+      findFirst: vi.fn(),
+      findMany: vi.fn(),
+    },
+    pageTranslation: {
+      upsert: vi.fn(),
      findMany: vi.fn(),
    },
    navigationMenu: {
@@ -30,8 +35,10 @@ import {
  createNavigationItem,
  createNavigationMenu,
  createPage,
+  getPublishedPageBySlugForLocale,
  listPublicNavigation,
  updatePage,
+  upsertPageTranslation,
 } from "./pages-navigation"

 describe("pages-navigation service", () => {
@@ -120,4 +127,63 @@ describe("pages-navigation service", () => {
      },
    ])
  })
+
+  it("validates locale when upserting page translation", async () => {
+    await expect(() =>
+      upsertPageTranslation({
+        pageId: "550e8400-e29b-41d4-a716-446655440000",
+        locale: "it",
+        title: "Titolo",
+        content: "Contenuto",
+      }),
+    ).rejects.toThrow()
+  })
+
+  it("upserts page translation and reads localized page with fallback", async () => {
+    mockDb.pageTranslation.upsert.mockResolvedValue({ id: "pt-1" })
+    mockDb.page.findFirst
+      .mockResolvedValueOnce({
+        id: "page-1",
+        title: "About",
+        summary: "Base summary",
+        content: "Base content",
+        seoTitle: "Base SEO",
+        seoDescription: "Base description",
+        translations: [
+          {
+            locale: "de",
+            title: "Uber Uns",
+            summary: "Zusammenfassung",
+            content: "Inhalt",
+            seoTitle: "SEO DE",
+            seoDescription: "Beschreibung",
+          },
+        ],
+      })
+      .mockResolvedValueOnce({
+        id: "page-1",
+        title: "About",
+        summary: "Base summary",
+        content: "Base content",
+        seoTitle: "Base SEO",
+        seoDescription: "Base description",
+        translations: [],
+      })
+
+    await upsertPageTranslation({
+      pageId: "550e8400-e29b-41d4-a716-446655440000",
+      locale: "de",
+      title: "Uber Uns",
+      content: "Inhalt",
+    })
+
+    const translated = await getPublishedPageBySlugForLocale("about", "de")
+    const fallback = await getPublishedPageBySlugForLocale("about", "fr")
+
+    expect(mockDb.pageTranslation.upsert).toHaveBeenCalledTimes(1)
+    expect(translated?.title).toBe("Uber Uns")
+    expect(translated?.content).toBe("Inhalt")
+    expect(fallback?.title).toBe("About")
+    expect(fallback?.content).toBe("Base content")
+  })
 })
--- a/packages/db/src/pages-navigation.ts
+++ b/packages/db/src/pages-navigation.ts
@@ -4,6 +4,7 @@ import {
  createPageInputSchema,
  updateNavigationItemInputSchema,
  updatePageInputSchema,
+  upsertPageTranslationInputSchema,
 } from "@cms/content"

 import { db } from "./client"
@@ -54,6 +55,38 @@ export async function getPublishedPageBySlug(slug: string) {
  })
 }

+export async function getPublishedPageBySlugForLocale(slug: string, locale: string) {
+  const page = await db.page.findFirst({
+    where: {
+      slug,
+      status: "published",
+    },
+    include: {
+      translations: {
+        where: {
+          locale,
+        },
+        take: 1,
+      },
+    },
+  })
+
+  if (!page) {
+    return null
+  }
+
+  const translation = page.translations[0]
+
+  return {
+    ...page,
+    title: translation?.title ?? page.title,
+    summary: translation?.summary ?? page.summary,
+    content: translation?.content ?? page.content,
+    seoTitle: translation?.seoTitle ?? page.seoTitle,
+    seoDescription: translation?.seoDescription ?? page.seoDescription,
+  }
+}
+
 export async function createPage(input: unknown) {
  const payload = createPageInputSchema.parse(input)

@@ -85,6 +118,33 @@ export async function deletePage(id: string) {
  })
 }

+export async function upsertPageTranslation(input: unknown) {
+  const payload = upsertPageTranslationInputSchema.parse(input)
+  const { pageId, locale, ...data } = payload
+
+  return db.pageTranslation.upsert({
+    where: {
+      pageId_locale: {
+        pageId,
+        locale,
+      },
+    },
+    create: {
+      pageId,
+      locale,
+      ...data,
+    },
+    update: data,
+  })
+}
+
+export async function listPageTranslations(pageId: string) {
+  return db.pageTranslation.findMany({
+    where: { pageId },
+    orderBy: [{ locale: "asc" }],
+  })
+}
+
 export async function listNavigationMenus() {
  return db.navigationMenu.findMany({
    orderBy: [{ location: "asc" }, { name: "asc" }],
Author	SHA1	Message	Date
Citali	618319dbc2	feat(i18n): wire page translation editor and locale rendering	2026-02-12 20:57:42 +01:00
Citali	506e2feb10	test(i18n): add translated page CRUD locale validation coverage	2026-02-12 20:53:06 +01:00
Citali	749fb80083	test(admin): cover pages and navigation form components	2026-02-12 20:48:51 +01:00
Citali	ec4f85e1d0	docs(handover): add architecture map and takeover playbook	2026-02-12 20:45:09 +01:00
Citali	6b282ce56b	chore(changelog): include unreleased and full commit output Some checks failed CMS CI / Governance Checks (push) Successful in 1m7s Details CMS CI / Lint Typecheck Unit E2E (push) Failing after 5m40s Details	2026-02-12 20:43:05 +01:00
Citali	37f62a8007	test(mvp1): add owner invariants and media form coverage Some checks failed CMS CI / Governance Checks (push) Successful in 1m5s Details CMS CI / Lint Typecheck Unit E2E (push) Failing after 5m3s Details	2026-02-12 20:34:53 +01:00