From ea90efc902997dc7e1edb0be1db7a938b299525d Mon Sep 17 00:00:00 2001
From: Jetomit_Bio <timotejkucharcik116@gmail.com>
Date: Sat, 17 Jan 2026 20:23:16 +0100
Subject: [PATCH] Initial commit

---
 .env.example                             |    9 +
 .gitignore                               |   45 +-
 installer/database.sql                   |   31 +
 installer/install.sh                     |   68 ++
 installer/nginx.conf.template            |   13 +
 next-env.d.ts                            |    6 +
 package-lock.json                        | 1146 +++++++++++++++++++++-
 package.json                             |   11 +
 src/app/api/auth/login/route.ts          |   56 ++
 src/app/api/auth/logout/route.tsx        |   16 +
 src/app/api/auth/me/route.ts             |   37 +
 src/app/api/manager/posts/[id]/route.ts  |  180 ++++
 src/app/api/manager/posts/route.ts       |  117 +++
 src/app/api/manager/users/[id]/route.ts  |  193 ++++
 src/app/api/manager/users/route.ts       |  103 ++
 src/app/api/test-db/route.ts             |   10 +
 src/app/api/upload/route.tsx             |   42 +
 src/app/globals.css                      |  160 ++-
 src/app/layout.tsx                       |   27 +-
 src/app/manager/create/page.tsx          |  142 +++
 src/app/manager/edit/[id]/page.tsx       |  171 ++++
 src/app/manager/login/page.tsx           |   72 ++
 src/app/manager/page.tsx                 |  262 +++++
 src/app/manager/posts/route.ts           |   12 +
 src/app/manager/users/add/page.tsx       |  102 ++
 src/app/manager/users/edit/[id]/page.tsx |  160 +++
 src/app/news/[id]/page.tsx               |  110 +++
 src/app/news/page.tsx                    |   75 ++
 src/app/page.tsx                         |  178 ++--
 src/components/CookieBanner.tsx          |   48 +
 src/components/Editor.tsx                |  147 +++
 src/components/Navbar.tsx                |  116 +++
 src/components/extensions/Video.ts       |   48 +
 src/lib/db.ts                            |   24 +
 src/middleware.ts                        |   34 +
 35 files changed, 3835 insertions(+), 136 deletions(-)
 create mode 100644 .env.example
 create mode 100644 installer/database.sql
 create mode 100644 installer/install.sh
 create mode 100644 installer/nginx.conf.template
 create mode 100644 next-env.d.ts
 create mode 100644 src/app/api/auth/login/route.ts
 create mode 100644 src/app/api/auth/logout/route.tsx
 create mode 100644 src/app/api/auth/me/route.ts
 create mode 100644 src/app/api/manager/posts/[id]/route.ts
 create mode 100644 src/app/api/manager/posts/route.ts
 create mode 100644 src/app/api/manager/users/[id]/route.ts
 create mode 100644 src/app/api/manager/users/route.ts
 create mode 100644 src/app/api/test-db/route.ts
 create mode 100644 src/app/api/upload/route.tsx
 create mode 100644 src/app/manager/create/page.tsx
 create mode 100644 src/app/manager/edit/[id]/page.tsx
 create mode 100644 src/app/manager/login/page.tsx
 create mode 100644 src/app/manager/page.tsx
 create mode 100644 src/app/manager/posts/route.ts
 create mode 100644 src/app/manager/users/add/page.tsx
 create mode 100644 src/app/manager/users/edit/[id]/page.tsx
 create mode 100644 src/app/news/[id]/page.tsx
 create mode 100644 src/app/news/page.tsx
 create mode 100644 src/components/CookieBanner.tsx
 create mode 100644 src/components/Editor.tsx
 create mode 100644 src/components/Navbar.tsx
 create mode 100644 src/components/extensions/Video.ts
 create mode 100644 src/lib/db.ts
 create mode 100644 src/middleware.ts

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..e2147ec
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,9 @@
+DB_HOST=
+DB_PORT=3306
+DB_USER=
+DB_PASSWORD=
+DB_NAME=
+
+JWT_SECRET=
+
+APP_URL=https://example.com
diff --git a/.gitignore b/.gitignore
index 5ef6a52..9313a62 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,41 +1,20 @@
-# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
-
 # dependencies
-/node_modules
-/.pnp
-.pnp.*
-.yarn/*
-!.yarn/patches
-!.yarn/plugins
-!.yarn/releases
-!.yarn/versions
+node_modules/
 
-# testing
-/coverage
+# environment variables
+.env
+.env.local
+.env.production
 
-# next.js
-/.next/
-/out/
+# next build
+.next/
+out/
 
-# production
-/build
-
-# misc
-.DS_Store
-*.pem
-
-# debug
+# logs
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
-.pnpm-debug.log*
 
-# env files (can opt-in for committing if needed)
-.env*
-
-# vercel
-.vercel
-
-# typescript
-*.tsbuildinfo
-next-env.d.ts
+# OS files
+.DS_Store
+Thumbs.db
diff --git a/installer/database.sql b/installer/database.sql
new file mode 100644
index 0000000..1a96ee1
--- /dev/null
+++ b/installer/database.sql
@@ -0,0 +1,31 @@
+CREATE DATABASE IF NOT EXISTS {{DB_NAME}}
+  CHARACTER SET utf8mb4
+  COLLATE utf8mb4_unicode_ci;
+
+USE {{DB_NAME}};
+
+CREATE TABLE IF NOT EXISTS users (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  username VARCHAR(100) NOT NULL UNIQUE,
+  email VARCHAR(255) NOT NULL UNIQUE,
+  password VARCHAR(255) NOT NULL,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS posts (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  title VARCHAR(255) NOT NULL,
+  description TEXT,
+  content LONGTEXT NOT NULL,
+  author_id INT NOT NULL,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (author_id) REFERENCES users(id)
+    ON DELETE CASCADE
+);
+
+INSERT INTO users (username, email, password)
+VALUES (
+  'admin',
+  'admin@example.com',
+  '$2a$12$HVH3CnQFDVzWZcgwuz1orejDZ3YUAm6xLHOqhfh5yssNcp2BNr4ky'
+);
diff --git a/installer/install.sh b/installer/install.sh
new file mode 100644
index 0000000..c2137a7
--- /dev/null
+++ b/installer/install.sh
@@ -0,0 +1,68 @@
+#!/bin/bash
+set -e
+
+echo "=== Surafino Installer ==="
+
+read -p "Domain (example.com): " DOMAIN
+read -p "DB Host: " DB_HOST
+read -p "DB Port (3306): " DB_PORT
+read -p "DB User: " DB_USER
+read -sp "DB Password: " DB_PASSWORD
+echo
+read -p "DB Name: " DB_NAME
+
+JWT_SECRET=$(openssl rand -hex 32)
+
+echo "Installing system packages..."
+apt update
+apt install -y nginx certbot python3-certbot-nginx mariadb-client nodejs npm
+
+echo "Installing node dependencies..."
+npm install
+npm run build
+
+echo "Creating .env..."
+cat > .env <<EOF
+DB_HOST=$DB_HOST
+DB_PORT=$DB_PORT
+DB_USER=$DB_USER
+DB_PASSWORD=$DB_PASSWORD
+DB_NAME=$DB_NAME
+JWT_SECRET=$JWT_SECRET
+APP_URL=https://$DOMAIN
+EOF
+
+echo "Setting up database..."
+sed \
+  -e "s/{{DB_NAME}}/$DB_NAME/g" \
+  installer/database.sql > /tmp/db.sql
+
+mysql \
+  -h $DB_HOST \
+  -P $DB_PORT \
+  -u $DB_USER \
+  -p$DB_PASSWORD < /tmp/db.sql
+
+echo "Configuring nginx..."
+sed \
+  -e "s/{{DOMAIN}}/$DOMAIN/g" \
+  installer/nginx.conf.template > /etc/nginx/sites-available/surafino
+
+ln -sf /etc/nginx/sites-available/surafino /etc/nginx/sites-enabled/surafino
+nginx -t
+systemctl reload nginx
+
+echo "Installing PM2..."
+npm install -g pm2
+pm2 start npm --name surafino -- start
+pm2 save
+pm2 startup systemd -u root --hp /root
+
+echo "Requesting SSL certificate..."
+certbot --nginx -d $DOMAIN --non-interactive --agree-tos -m admin@$DOMAIN
+
+echo "=== INSTALLATION COMPLETE ==="
+echo "Admin login:"
+echo "  username: admin"
+echo "  password: admin"
+echo "Please change password immediately!"
diff --git a/installer/nginx.conf.template b/installer/nginx.conf.template
new file mode 100644
index 0000000..d888f91
--- /dev/null
+++ b/installer/nginx.conf.template
@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name {{DOMAIN}};
+
+    location / {
+        proxy_pass http://127.0.0.1:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
diff --git a/next-env.d.ts b/next-env.d.ts
new file mode 100644
index 0000000..c4b7818
--- /dev/null
+++ b/next-env.d.ts
@@ -0,0 +1,6 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/dev/types/routes.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
diff --git a/package-lock.json b/package-lock.json
index c3827b0..fcd3292 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,12 +8,23 @@
       "name": "my-blog",
       "version": "0.1.0",
       "dependencies": {
+        "@tailwindcss/typography": "^0.5.19",
+        "@tiptap/extension-image": "^3.15.3",
+        "@tiptap/extension-link": "^3.15.3",
+        "@tiptap/react": "^3.15.3",
+        "@tiptap/starter-kit": "^3.15.3",
+        "bcrypt": "^6.0.0",
+        "bcryptjs": "^3.0.3",
+        "jsonwebtoken": "^9.0.3",
+        "mariadb": "^3.4.5",
         "next": "16.1.3",
         "react": "19.2.3",
         "react-dom": "19.2.3"
       },
       "devDependencies": {
         "@tailwindcss/postcss": "^4",
+        "@types/bcrypt": "^6.0.0",
+        "@types/jsonwebtoken": "^9.0.10",
         "@types/node": "^20",
         "@types/react": "^19",
         "@types/react-dom": "^19",
@@ -454,6 +465,23 @@
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       }
     },
+    "node_modules/@floating-ui/core": {
+      "version": "1.7.3",
+      "resolved": "https://registry.npmjs.org/@floating-ui/core/-/core-1.7.3.tgz",
+      "integrity": "sha512-sGnvb5dmrJaKEZ+LDIpguvdX3bDlEllmv4/ClQ9awcmCZrlx5jQyyMWFM5kBI+EyNOCDDiKk8il0zeuX3Zlg/w==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@floating-ui/utils": "^0.2.10"
+      }
+    },
+    "node_modules/@floating-ui/utils": {
+      "version": "0.2.10",
+      "resolved": "https://registry.npmjs.org/@floating-ui/utils/-/utils-0.2.10.tgz",
+      "integrity": "sha512-aGTxbpbg8/b5JfU1HXSrbH3wXZuLPJcNEcZQFMxLs3oSzgtVu6nFPkbbGGUvBcUjKV2YyB9Wxxabo+HEH9tcRQ==",
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/@humanfs/core": {
       "version": "0.19.1",
       "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
@@ -1227,6 +1255,12 @@
         "node": ">=12.4.0"
       }
     },
+    "node_modules/@remirror/core-constants": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@remirror/core-constants/-/core-constants-3.0.0.tgz",
+      "integrity": "sha512-42aWfPrimMfDKDi4YegyS7x+/0tlzaqwPQCULLanv3DMIlu96KTJR0fM5isWX2UViOqlGnX6YFgqWepcX+XMNg==",
+      "license": "MIT"
+    },
     "node_modules/@rtsao/scc": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@rtsao/scc/-/scc-1.1.0.tgz",
@@ -1514,6 +1548,469 @@
         "tailwindcss": "4.1.18"
       }
     },
+    "node_modules/@tailwindcss/typography": {
+      "version": "0.5.19",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.19.tgz",
+      "integrity": "sha512-w31dd8HOx3k9vPtcQh5QHP9GwKcgbMp87j58qi6xgiBnFFtKEAgCWnDw4qUT8aHwkCp8bKvb/KGKWWHedP0AAg==",
+      "license": "MIT",
+      "dependencies": {
+        "postcss-selector-parser": "6.0.10"
+      },
+      "peerDependencies": {
+        "tailwindcss": ">=3.0.0 || insiders || >=4.0.0-alpha.20 || >=4.0.0-beta.1"
+      }
+    },
+    "node_modules/@tiptap/core": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/core/-/core-3.15.3.tgz",
+      "integrity": "sha512-bmXydIHfm2rEtGju39FiQNfzkFx9CDvJe+xem1dgEZ2P6Dj7nQX9LnA1ZscW7TuzbBRkL5p3dwuBIi3f62A66A==",
+      "license": "MIT",
+      "peer": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-blockquote": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-blockquote/-/extension-blockquote-3.15.3.tgz",
+      "integrity": "sha512-13x5UsQXtttFpoS/n1q173OeurNxppsdWgP3JfsshzyxIghhC141uL3H6SGYQLPU31AizgDs2OEzt6cSUevaZg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-bold": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-bold/-/extension-bold-3.15.3.tgz",
+      "integrity": "sha512-I8JYbkkUTNUXbHd/wCse2bR0QhQtJD7+0/lgrKOmGfv5ioLxcki079Nzuqqay3PjgYoJLIJQvm3RAGxT+4X91w==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-bubble-menu": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-bubble-menu/-/extension-bubble-menu-3.15.3.tgz",
+      "integrity": "sha512-e88DG1bTy6hKxrt7iPVQhJnH5/EOrnKpIyp09dfRDgWrrW88fE0Qjys7a/eT8W+sXyXM3z10Ye7zpERWsrLZDg==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@floating-ui/dom": "^1.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-bullet-list": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-bullet-list/-/extension-bullet-list-3.15.3.tgz",
+      "integrity": "sha512-MGwEkNT7ltst6XaWf0ObNgpKQ4PvuuV3igkBrdYnQS+qaAx9IF4isygVPqUc9DvjYC306jpyKsNqNrENIXcosA==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/extension-list": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-code": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-code/-/extension-code-3.15.3.tgz",
+      "integrity": "sha512-x6LFt3Og6MFINYpsMzrJnz7vaT9Yk1t4oXkbJsJRSavdIWBEBcoRudKZ4sSe/AnsYlRJs8FY2uR76mt9e+7xAQ==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-code-block": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-code-block/-/extension-code-block-3.15.3.tgz",
+      "integrity": "sha512-q1UB9icNfdJppTqMIUWfoRKkx5SSdWIpwZoL2NeOI5Ah3E20/dQKVttIgLhsE521chyvxCYCRaHD5tMNGKfhyw==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-document": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-document/-/extension-document-3.15.3.tgz",
+      "integrity": "sha512-AC72nI2gnogBuETCKbZekn+h6t5FGGcZG2abPGKbz/x9rwpb6qV2hcbAQ30t6M7H6cTOh2/Ut8bEV2MtMB15sw==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-dropcursor": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-dropcursor/-/extension-dropcursor-3.15.3.tgz",
+      "integrity": "sha512-jGI5XZpdo8GSYQFj7HY15/oEwC2m2TqZz0/Fln5qIhY32XlZhWrsMuMI6WbUJrTH16es7xO6jmRlDsc6g+vJWg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/extensions": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-floating-menu": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-floating-menu/-/extension-floating-menu-3.15.3.tgz",
+      "integrity": "sha512-+3DVBleKKffadEJEdLYxmYAJOjHjLSqtiSFUE3RABT4V2ka1ODy2NIpyKX0o1SvQ5N1jViYT9Q+yUbNa6zCcDw==",
+      "license": "MIT",
+      "optional": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@floating-ui/dom": "^1.0.0",
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-gapcursor": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-gapcursor/-/extension-gapcursor-3.15.3.tgz",
+      "integrity": "sha512-Kaw0sNzP0bQI/xEAMSfIpja6xhsu9WqqAK/puzOIS1RKWO47Wps/tzqdSJ9gfslPIb5uY5mKCfy8UR8Xgiia8w==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/extensions": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-hard-break": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-hard-break/-/extension-hard-break-3.15.3.tgz",
+      "integrity": "sha512-8HjxmeRbBiXW+7JKemAJtZtHlmXQ9iji398CPQ0yYde68WbIvUhHXjmbJE5pxFvvQTJ/zJv1aISeEOZN2bKBaw==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-heading": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-heading/-/extension-heading-3.15.3.tgz",
+      "integrity": "sha512-G1GG6iN1YXPS+75arDpo+bYRzhr3dNDw99c7D7na3aDawa9Qp7sZ/bVrzFUUcVEce0cD6h83yY7AooBxEc67hA==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-horizontal-rule": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-horizontal-rule/-/extension-horizontal-rule-3.15.3.tgz",
+      "integrity": "sha512-FYkN7L6JsfwwNEntmLklCVKvgL0B0N47OXMacRk6kYKQmVQ4Nvc7q/VJLpD9sk4wh4KT1aiCBfhKEBTu5pv1fg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-image": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-image/-/extension-image-3.15.3.tgz",
+      "integrity": "sha512-Tjq9BHlC/0bGR9/uySA0tv6I1Ua1Q5t5P/mdbWyZi4JdUpKHRfgenzfXF5DYnklJ01QJ7uOPSp9sAGgPzBixtQ==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-italic": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-italic/-/extension-italic-3.15.3.tgz",
+      "integrity": "sha512-6XeuPjcWy7OBxpkgOV7bD6PATO5jhIxc8SEK4m8xn8nelGTBIbHGqK37evRv+QkC7E0MUryLtzwnmmiaxcKL0Q==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-link": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-link/-/extension-link-3.15.3.tgz",
+      "integrity": "sha512-PdDXyBF9Wco9U1x6e+b7tKBWG+kqBDXDmaYXHkFm/gYuQCQafVJ5mdrDdKgkHDWVnJzMWZXBcZjT9r57qtlLWg==",
+      "license": "MIT",
+      "dependencies": {
+        "linkifyjs": "^4.3.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-list": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-list/-/extension-list-3.15.3.tgz",
+      "integrity": "sha512-n7y/MF9lAM5qlpuH5IR4/uq+kJPEJpe9NrEiH+NmkO/5KJ6cXzpJ6F4U17sMLf2SNCq+TWN9QK8QzoKxIn50VQ==",
+      "license": "MIT",
+      "peer": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-list-item": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-list-item/-/extension-list-item-3.15.3.tgz",
+      "integrity": "sha512-CCxL5ek1p0lO5e8aqhnPzIySldXRSigBFk2fP9OLgdl5qKFLs2MGc19jFlx5+/kjXnEsdQTFbGY1Sizzt0TVDw==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/extension-list": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-list-keymap": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-list-keymap/-/extension-list-keymap-3.15.3.tgz",
+      "integrity": "sha512-UxqnTEEAKrL+wFQeSyC9z0mgyUUVRS2WTcVFoLZCE6/Xus9F53S4bl7VKFadjmqI4GpDk5Oe2IOUc72o129jWg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/extension-list": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-ordered-list": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-ordered-list/-/extension-ordered-list-3.15.3.tgz",
+      "integrity": "sha512-/8uhw528Iy0c9wF6tHCiIn0ToM0Ml6Ll2c/3iPRnKr4IjXwx2Lr994stUFihb+oqGZwV1J8CPcZJ4Ufpdqi4Dw==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/extension-list": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-paragraph": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-paragraph/-/extension-paragraph-3.15.3.tgz",
+      "integrity": "sha512-lc0Qu/1AgzcEfS67NJMj5tSHHhH6NtA6uUpvppEKGsvJwgE2wKG1onE4isrVXmcGRdxSMiCtyTDemPNMu6/ozQ==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-strike": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-strike/-/extension-strike-3.15.3.tgz",
+      "integrity": "sha512-Y1P3eGNY7RxQs2BcR6NfLo9VfEOplXXHAqkOM88oowWWOE7dMNeFFZM9H8HNxoQgXJ7H0aWW9B7ZTWM9hWli2Q==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-text": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-text/-/extension-text-3.15.3.tgz",
+      "integrity": "sha512-MhkBz8ZvrqOKtKNp+ZWISKkLUlTrDR7tbKZc2OnNcUTttL9dz0HwT+cg91GGz19fuo7ttDcfsPV6eVmflvGToA==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extension-underline": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extension-underline/-/extension-underline-3.15.3.tgz",
+      "integrity": "sha512-r/IwcNN0W366jGu4Y0n2MiFq9jGa4aopOwtfWO4d+J0DyeS2m7Go3+KwoUqi0wQTiVU74yfi4DF6eRsMQ9/iHQ==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/extensions": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/extensions/-/extensions-3.15.3.tgz",
+      "integrity": "sha512-ycx/BgxR4rc9tf3ZyTdI98Z19yKLFfqM3UN+v42ChuIwkzyr9zyp7kG8dB9xN2lNqrD+5y/HyJobz/VJ7T90gA==",
+      "license": "MIT",
+      "peer": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      }
+    },
+    "node_modules/@tiptap/pm": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/pm/-/pm-3.15.3.tgz",
+      "integrity": "sha512-Zm1BaU1TwFi3CQiisxjgnzzIus+q40bBKWLqXf6WEaus8Z6+vo1MT2pU52dBCMIRaW9XNDq3E5cmGtMc1AlveA==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "prosemirror-changeset": "^2.3.0",
+        "prosemirror-collab": "^1.3.1",
+        "prosemirror-commands": "^1.6.2",
+        "prosemirror-dropcursor": "^1.8.1",
+        "prosemirror-gapcursor": "^1.3.2",
+        "prosemirror-history": "^1.4.1",
+        "prosemirror-inputrules": "^1.4.0",
+        "prosemirror-keymap": "^1.2.2",
+        "prosemirror-markdown": "^1.13.1",
+        "prosemirror-menu": "^1.2.4",
+        "prosemirror-model": "^1.24.1",
+        "prosemirror-schema-basic": "^1.2.3",
+        "prosemirror-schema-list": "^1.5.0",
+        "prosemirror-state": "^1.4.3",
+        "prosemirror-tables": "^1.6.4",
+        "prosemirror-trailing-node": "^3.0.0",
+        "prosemirror-transform": "^1.10.2",
+        "prosemirror-view": "^1.38.1"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      }
+    },
+    "node_modules/@tiptap/react": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/react/-/react-3.15.3.tgz",
+      "integrity": "sha512-XvouB+Hrqw8yFmZLPEh+HWlMeRSjZfHSfWfWuw5d8LSwnxnPeu3Bg/rjHrRrdwb+7FumtzOnNWMorpb/PSOttQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/use-sync-external-store": "^0.0.6",
+        "fast-equals": "^5.3.3",
+        "use-sync-external-store": "^1.4.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      },
+      "optionalDependencies": {
+        "@tiptap/extension-bubble-menu": "^3.15.3",
+        "@tiptap/extension-floating-menu": "^3.15.3"
+      },
+      "peerDependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/pm": "^3.15.3",
+        "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0",
+        "@types/react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0",
+        "react": "^17.0.0 || ^18.0.0 || ^19.0.0",
+        "react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0"
+      }
+    },
+    "node_modules/@tiptap/starter-kit": {
+      "version": "3.15.3",
+      "resolved": "https://registry.npmjs.org/@tiptap/starter-kit/-/starter-kit-3.15.3.tgz",
+      "integrity": "sha512-ia+eQr9Mt1ln2UO+kK4kFTJOrZK4GhvZXFjpCCYuHtco3rhr2fZAIxEEY4cl/vo5VO5WWyPqxhkFeLcoWmNjSw==",
+      "license": "MIT",
+      "dependencies": {
+        "@tiptap/core": "^3.15.3",
+        "@tiptap/extension-blockquote": "^3.15.3",
+        "@tiptap/extension-bold": "^3.15.3",
+        "@tiptap/extension-bullet-list": "^3.15.3",
+        "@tiptap/extension-code": "^3.15.3",
+        "@tiptap/extension-code-block": "^3.15.3",
+        "@tiptap/extension-document": "^3.15.3",
+        "@tiptap/extension-dropcursor": "^3.15.3",
+        "@tiptap/extension-gapcursor": "^3.15.3",
+        "@tiptap/extension-hard-break": "^3.15.3",
+        "@tiptap/extension-heading": "^3.15.3",
+        "@tiptap/extension-horizontal-rule": "^3.15.3",
+        "@tiptap/extension-italic": "^3.15.3",
+        "@tiptap/extension-link": "^3.15.3",
+        "@tiptap/extension-list": "^3.15.3",
+        "@tiptap/extension-list-item": "^3.15.3",
+        "@tiptap/extension-list-keymap": "^3.15.3",
+        "@tiptap/extension-ordered-list": "^3.15.3",
+        "@tiptap/extension-paragraph": "^3.15.3",
+        "@tiptap/extension-strike": "^3.15.3",
+        "@tiptap/extension-text": "^3.15.3",
+        "@tiptap/extension-underline": "^3.15.3",
+        "@tiptap/extensions": "^3.15.3",
+        "@tiptap/pm": "^3.15.3"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/ueberdosis"
+      }
+    },
     "node_modules/@tybys/wasm-util": {
       "version": "0.10.1",
       "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz",
@@ -1525,6 +2022,16 @@
         "tslib": "^2.4.0"
       }
     },
+    "node_modules/@types/bcrypt": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/@types/bcrypt/-/bcrypt-6.0.0.tgz",
+      "integrity": "sha512-/oJGukuH3D2+D+3H4JWLaAsJ/ji86dhRidzZ/Od7H/i8g+aCmvkeCc6Ni/f9uxGLSQVCRZkX2/lqEFG2BvWtlQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/estree": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz",
@@ -1532,6 +2039,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@types/geojson": {
+      "version": "7946.0.16",
+      "resolved": "https://registry.npmjs.org/@types/geojson/-/geojson-7946.0.16.tgz",
+      "integrity": "sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg==",
+      "license": "MIT"
+    },
     "node_modules/@types/json-schema": {
       "version": "7.0.15",
       "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
@@ -1546,6 +2059,46 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@types/jsonwebtoken": {
+      "version": "9.0.10",
+      "resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.10.tgz",
+      "integrity": "sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/ms": "*",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/linkify-it": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-5.0.0.tgz",
+      "integrity": "sha512-sVDA58zAw4eWAffKOaQH5/5j3XeayukzDk+ewSsnv3p4yJEZHCCzMDiZM8e0OUrRvmpGZ85jf4yDHkHsgBNr9Q==",
+      "license": "MIT"
+    },
+    "node_modules/@types/markdown-it": {
+      "version": "14.1.2",
+      "resolved": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-14.1.2.tgz",
+      "integrity": "sha512-promo4eFwuiW+TfGxhi+0x3czqTYJkG8qB17ZUJiVF10Xm7NLVRSLUsfRTU/6h1e24VvRnXCx+hG7li58lkzog==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/linkify-it": "^5",
+        "@types/mdurl": "^2"
+      }
+    },
+    "node_modules/@types/mdurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@types/mdurl/-/mdurl-2.0.0.tgz",
+      "integrity": "sha512-RGdgjQUZba5p6QEFAVx2OGb8rQDL/cPRG7GiedRzMcJ1tYnUANBncjbSB1NRGwbvjcPeikRABz2nshyPk1bhWg==",
+      "license": "MIT"
+    },
+    "node_modules/@types/ms": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz",
+      "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/node": {
       "version": "20.19.30",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.30.tgz",
@@ -1560,7 +2113,6 @@
       "version": "19.2.8",
       "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.8.tgz",
       "integrity": "sha512-3MbSL37jEchWZz2p2mjntRZtPt837ij10ApxKfgmXCTuHWagYg7iA5bqPw6C8BMPfwidlvfPI/fxOc42HLhcyg==",
-      "dev": true,
       "license": "MIT",
       "peer": true,
       "dependencies": {
@@ -1571,12 +2123,18 @@
       "version": "19.2.3",
       "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.3.tgz",
       "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
-      "dev": true,
       "license": "MIT",
+      "peer": true,
       "peerDependencies": {
         "@types/react": "^19.2.0"
       }
     },
+    "node_modules/@types/use-sync-external-store": {
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/@types/use-sync-external-store/-/use-sync-external-store-0.0.6.tgz",
+      "integrity": "sha512-zFDAD+tlpf2r4asuHEj0XH6pY6i0g5NeAHPn+15wk3BV6JA69eERFXC1gyGThDkVa1zCyKr5jox1+2LbV/AMLg==",
+      "license": "MIT"
+    },
     "node_modules/@typescript-eslint/eslint-plugin": {
       "version": "8.53.0",
       "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.53.0.tgz",
@@ -2177,7 +2735,6 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
       "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "dev": true,
       "license": "Python-2.0"
     },
     "node_modules/aria-query": {
@@ -2419,6 +2976,29 @@
         "baseline-browser-mapping": "dist/cli.js"
       }
     },
+    "node_modules/bcrypt": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/bcrypt/-/bcrypt-6.0.0.tgz",
+      "integrity": "sha512-cU8v/EGSrnH+HnxV2z0J7/blxH8gq7Xh2JFT6Aroax7UohdmiJJlxApMxtKfuI7z68NvvVcmR78k2LbT6efhRg==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "dependencies": {
+        "node-addon-api": "^8.3.0",
+        "node-gyp-build": "^4.8.4"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/bcryptjs": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-3.0.3.tgz",
+      "integrity": "sha512-GlF5wPWnSa/X5LKM1o0wz0suXIINz1iHRLvTS+sLyi7XPbe5ycmYI3DlZqVGZZtDgl4DmasFg7gOB3JYbphV5g==",
+      "license": "BSD-3-Clause",
+      "bin": {
+        "bcrypt": "bin/bcrypt"
+      }
+    },
     "node_modules/brace-expansion": {
       "version": "1.1.12",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
@@ -2478,6 +3058,12 @@
         "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
       }
     },
+    "node_modules/buffer-equal-constant-time": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+      "license": "BSD-3-Clause"
+    },
     "node_modules/call-bind": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz",
@@ -2615,6 +3201,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/crelt": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/crelt/-/crelt-1.0.6.tgz",
+      "integrity": "sha512-VQ2MBenTq1fWZUH9DJNGti7kKv6EeAuYr3cLwxUWhIu1baTaXh4Ib5W2CqHVqib4/MqbYGJqiL3Zb8GJZr3l4g==",
+      "license": "MIT"
+    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -2630,11 +3222,22 @@
         "node": ">= 8"
       }
     },
+    "node_modules/cssesc": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz",
+      "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==",
+      "license": "MIT",
+      "bin": {
+        "cssesc": "bin/cssesc"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/csstype": {
       "version": "3.2.3",
       "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
       "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/damerau-levenshtein": {
@@ -2759,6 +3362,15 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/denque": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/denque/-/denque-2.1.0.tgz",
+      "integrity": "sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=0.10"
+      }
+    },
     "node_modules/detect-libc": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
@@ -2797,6 +3409,15 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/ecdsa-sig-formatter": {
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      }
+    },
     "node_modules/electron-to-chromium": {
       "version": "1.5.267",
       "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.267.tgz",
@@ -2825,6 +3446,18 @@
         "node": ">=10.13.0"
       }
     },
+    "node_modules/entities": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
+      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
     "node_modules/es-abstract": {
       "version": "1.24.1",
       "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.24.1.tgz",
@@ -3016,7 +3649,6 @@
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
       "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=10"
@@ -3217,6 +3849,7 @@
       "integrity": "sha512-whOE1HFo/qJDyX4SnXzP4N6zOWn79WhnCUY/iDR0mPfQZO8wcYE4JClzI2oZrhBnnMUCBCHZhO6VQyoBU95mZA==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@rtsao/scc": "^1.1.0",
         "array-includes": "^3.1.9",
@@ -3457,6 +4090,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-equals": {
+      "version": "5.4.0",
+      "resolved": "https://registry.npmjs.org/fast-equals/-/fast-equals-5.4.0.tgz",
+      "integrity": "sha512-jt2DW/aNFNwke7AUd+Z+e6pz39KO5rzdbbFCg2sGafS4mk13MI7Z8O5z9cADNn5lhGODIgLwug6TZO2ctf7kcw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
     "node_modules/fast-glob": {
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.1.tgz",
@@ -3896,6 +4538,18 @@
         "hermes-estree": "0.25.1"
       }
     },
+    "node_modules/iconv-lite": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
+      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/ignore": {
       "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
@@ -4472,6 +5126,40 @@
         "node": ">=6"
       }
     },
+    "node_modules/jsonwebtoken": {
+      "version": "9.0.3",
+      "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
+      "integrity": "sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==",
+      "license": "MIT",
+      "dependencies": {
+        "jws": "^4.0.1",
+        "lodash.includes": "^4.3.0",
+        "lodash.isboolean": "^3.0.3",
+        "lodash.isinteger": "^4.0.4",
+        "lodash.isnumber": "^3.0.3",
+        "lodash.isplainobject": "^4.0.6",
+        "lodash.isstring": "^4.0.1",
+        "lodash.once": "^4.0.0",
+        "ms": "^2.1.1",
+        "semver": "^7.5.4"
+      },
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      }
+    },
+    "node_modules/jsonwebtoken/node_modules/semver": {
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/jsx-ast-utils": {
       "version": "3.3.5",
       "resolved": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz",
@@ -4488,6 +5176,27 @@
         "node": ">=4.0"
       }
     },
+    "node_modules/jwa": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
+      "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==",
+      "license": "MIT",
+      "dependencies": {
+        "buffer-equal-constant-time": "^1.0.1",
+        "ecdsa-sig-formatter": "1.0.11",
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/jws": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz",
+      "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==",
+      "license": "MIT",
+      "dependencies": {
+        "jwa": "^2.0.1",
+        "safe-buffer": "^5.0.1"
+      }
+    },
     "node_modules/keyv": {
       "version": "4.5.4",
       "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
@@ -4793,6 +5502,21 @@
         "url": "https://opencollective.com/parcel"
       }
     },
+    "node_modules/linkify-it": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.0.tgz",
+      "integrity": "sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ==",
+      "license": "MIT",
+      "dependencies": {
+        "uc.micro": "^2.0.0"
+      }
+    },
+    "node_modules/linkifyjs": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/linkifyjs/-/linkifyjs-4.3.2.tgz",
+      "integrity": "sha512-NT1CJtq3hHIreOianA8aSXn6Cw0JzYOuDQbOrSPe7gqFnCpKP++MQe3ODgO3oh2GJFORkAAdqredOa60z63GbA==",
+      "license": "MIT"
+    },
     "node_modules/locate-path": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
@@ -4809,6 +5533,42 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/lodash.includes": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
+      "integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isboolean": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz",
+      "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isinteger": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
+      "integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isnumber": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz",
+      "integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isplainobject": {
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
+      "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isstring": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz",
+      "integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==",
+      "license": "MIT"
+    },
     "node_modules/lodash.merge": {
       "version": "4.6.2",
       "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz",
@@ -4816,6 +5576,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/lodash.once": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz",
+      "integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==",
+      "license": "MIT"
+    },
     "node_modules/loose-envify": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
@@ -4849,6 +5615,60 @@
         "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
+    "node_modules/mariadb": {
+      "version": "3.4.5",
+      "resolved": "https://registry.npmjs.org/mariadb/-/mariadb-3.4.5.tgz",
+      "integrity": "sha512-gThTYkhIS5rRqkVr+Y0cIdzr+GRqJ9sA2Q34e0yzmyhMCwyApf3OKAC1jnF23aSlIOqJuyaUFUcj7O1qZslmmQ==",
+      "license": "LGPL-2.1-or-later",
+      "dependencies": {
+        "@types/geojson": "^7946.0.16",
+        "@types/node": "^24.0.13",
+        "denque": "^2.1.0",
+        "iconv-lite": "^0.6.3",
+        "lru-cache": "^10.4.3"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/mariadb/node_modules/@types/node": {
+      "version": "24.10.9",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.10.9.tgz",
+      "integrity": "sha512-ne4A0IpG3+2ETuREInjPNhUGis1SFjv1d5asp8MzEAGtOZeTeHVDOYqOgqfhvseqg/iXty2hjBf1zAOb7RNiNw==",
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~7.16.0"
+      }
+    },
+    "node_modules/mariadb/node_modules/lru-cache": {
+      "version": "10.4.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
+      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
+      "license": "ISC"
+    },
+    "node_modules/mariadb/node_modules/undici-types": {
+      "version": "7.16.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
+      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
+      "license": "MIT"
+    },
+    "node_modules/markdown-it": {
+      "version": "14.1.0",
+      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.1.0.tgz",
+      "integrity": "sha512-a54IwgWPaeBCAAsv13YgmALOF1elABB08FxO9i+r4VFk5Vl4pKokRPeX8u5TCgSsPi6ec1otfLjdOpVcgbpshg==",
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1",
+        "entities": "^4.4.0",
+        "linkify-it": "^5.0.0",
+        "mdurl": "^2.0.0",
+        "punycode.js": "^2.3.1",
+        "uc.micro": "^2.1.0"
+      },
+      "bin": {
+        "markdown-it": "bin/markdown-it.mjs"
+      }
+    },
     "node_modules/math-intrinsics": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
@@ -4859,6 +5679,12 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/mdurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz",
+      "integrity": "sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==",
+      "license": "MIT"
+    },
     "node_modules/merge2": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
@@ -4910,7 +5736,6 @@
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/nanoid": {
@@ -5035,6 +5860,26 @@
         "node": "^10 || ^12 || >=14"
       }
     },
+    "node_modules/node-addon-api": {
+      "version": "8.5.0",
+      "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-8.5.0.tgz",
+      "integrity": "sha512-/bRZty2mXUIFY/xU5HLvveNHlswNJej+RnxBjOMkidWfwZzgTbPG1E3K5TOxRLOR+5hX7bSofy8yf1hZevMS8A==",
+      "license": "MIT",
+      "engines": {
+        "node": "^18 || ^20 || >= 21"
+      }
+    },
+    "node_modules/node-gyp-build": {
+      "version": "4.8.4",
+      "resolved": "https://registry.npmjs.org/node-gyp-build/-/node-gyp-build-4.8.4.tgz",
+      "integrity": "sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ==",
+      "license": "MIT",
+      "bin": {
+        "node-gyp-build": "bin.js",
+        "node-gyp-build-optional": "optional.js",
+        "node-gyp-build-test": "build-test.js"
+      }
+    },
     "node_modules/node-releases": {
       "version": "2.0.27",
       "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz",
@@ -5183,6 +6028,12 @@
         "node": ">= 0.8.0"
       }
     },
+    "node_modules/orderedmap": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/orderedmap/-/orderedmap-2.1.1.tgz",
+      "integrity": "sha512-TvAWxi0nDe1j/rtMcWcIj94+Ffe6n7zhow33h40SKxmsmozs6dz/e+EajymfoFcHd7sxNn8yHM8839uixMOV6g==",
+      "license": "MIT"
+    },
     "node_modules/own-keys": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/own-keys/-/own-keys-1.0.1.tgz",
@@ -5331,6 +6182,19 @@
         "node": "^10 || ^12 || >=14"
       }
     },
+    "node_modules/postcss-selector-parser": {
+      "version": "6.0.10",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.10.tgz",
+      "integrity": "sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/prelude-ls": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz",
@@ -5353,6 +6217,204 @@
         "react-is": "^16.13.1"
       }
     },
+    "node_modules/prosemirror-changeset": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/prosemirror-changeset/-/prosemirror-changeset-2.3.1.tgz",
+      "integrity": "sha512-j0kORIBm8ayJNl3zQvD1TTPHJX3g042et6y/KQhZhnPrruO8exkTgG8X+NRpj7kIyMMEx74Xb3DyMIBtO0IKkQ==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-transform": "^1.0.0"
+      }
+    },
+    "node_modules/prosemirror-collab": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/prosemirror-collab/-/prosemirror-collab-1.3.1.tgz",
+      "integrity": "sha512-4SnynYR9TTYaQVXd/ieUvsVV4PDMBzrq2xPUWutHivDuOshZXqQ5rGbZM84HEaXKbLdItse7weMGOUdDVcLKEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-state": "^1.0.0"
+      }
+    },
+    "node_modules/prosemirror-commands": {
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/prosemirror-commands/-/prosemirror-commands-1.7.1.tgz",
+      "integrity": "sha512-rT7qZnQtx5c0/y/KlYaGvtG411S97UaL6gdp6RIZ23DLHanMYLyfGBV5DtSnZdthQql7W+lEVbpSfwtO8T+L2w==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-model": "^1.0.0",
+        "prosemirror-state": "^1.0.0",
+        "prosemirror-transform": "^1.10.2"
+      }
+    },
+    "node_modules/prosemirror-dropcursor": {
+      "version": "1.8.2",
+      "resolved": "https://registry.npmjs.org/prosemirror-dropcursor/-/prosemirror-dropcursor-1.8.2.tgz",
+      "integrity": "sha512-CCk6Gyx9+Tt2sbYk5NK0nB1ukHi2ryaRgadV/LvyNuO3ena1payM2z6Cg0vO1ebK8cxbzo41ku2DE5Axj1Zuiw==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-state": "^1.0.0",
+        "prosemirror-transform": "^1.1.0",
+        "prosemirror-view": "^1.1.0"
+      }
+    },
+    "node_modules/prosemirror-gapcursor": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/prosemirror-gapcursor/-/prosemirror-gapcursor-1.4.0.tgz",
+      "integrity": "sha512-z00qvurSdCEWUIulij/isHaqu4uLS8r/Fi61IbjdIPJEonQgggbJsLnstW7Lgdk4zQ68/yr6B6bf7sJXowIgdQ==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-keymap": "^1.0.0",
+        "prosemirror-model": "^1.0.0",
+        "prosemirror-state": "^1.0.0",
+        "prosemirror-view": "^1.0.0"
+      }
+    },
+    "node_modules/prosemirror-history": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/prosemirror-history/-/prosemirror-history-1.5.0.tgz",
+      "integrity": "sha512-zlzTiH01eKA55UAf1MEjtssJeHnGxO0j4K4Dpx+gnmX9n+SHNlDqI2oO1Kv1iPN5B1dm5fsljCfqKF9nFL6HRg==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-state": "^1.2.2",
+        "prosemirror-transform": "^1.0.0",
+        "prosemirror-view": "^1.31.0",
+        "rope-sequence": "^1.3.0"
+      }
+    },
+    "node_modules/prosemirror-inputrules": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/prosemirror-inputrules/-/prosemirror-inputrules-1.5.1.tgz",
+      "integrity": "sha512-7wj4uMjKaXWAQ1CDgxNzNtR9AlsuwzHfdFH1ygEHA2KHF2DOEaXl1CJfNPAKCg9qNEh4rum975QLaCiQPyY6Fw==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-state": "^1.0.0",
+        "prosemirror-transform": "^1.0.0"
+      }
+    },
+    "node_modules/prosemirror-keymap": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/prosemirror-keymap/-/prosemirror-keymap-1.2.3.tgz",
+      "integrity": "sha512-4HucRlpiLd1IPQQXNqeo81BGtkY8Ai5smHhKW9jjPKRc2wQIxksg7Hl1tTI2IfT2B/LgX6bfYvXxEpJl7aKYKw==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-state": "^1.0.0",
+        "w3c-keyname": "^2.2.0"
+      }
+    },
+    "node_modules/prosemirror-markdown": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/prosemirror-markdown/-/prosemirror-markdown-1.13.2.tgz",
+      "integrity": "sha512-FPD9rHPdA9fqzNmIIDhhnYQ6WgNoSWX9StUZ8LEKapaXU9i6XgykaHKhp6XMyXlOWetmaFgGDS/nu/w9/vUc5g==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/markdown-it": "^14.0.0",
+        "markdown-it": "^14.0.0",
+        "prosemirror-model": "^1.25.0"
+      }
+    },
+    "node_modules/prosemirror-menu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/prosemirror-menu/-/prosemirror-menu-1.2.5.tgz",
+      "integrity": "sha512-qwXzynnpBIeg1D7BAtjOusR+81xCp53j7iWu/IargiRZqRjGIlQuu1f3jFi+ehrHhWMLoyOQTSRx/IWZJqOYtQ==",
+      "license": "MIT",
+      "dependencies": {
+        "crelt": "^1.0.0",
+        "prosemirror-commands": "^1.0.0",
+        "prosemirror-history": "^1.0.0",
+        "prosemirror-state": "^1.0.0"
+      }
+    },
+    "node_modules/prosemirror-model": {
+      "version": "1.25.4",
+      "resolved": "https://registry.npmjs.org/prosemirror-model/-/prosemirror-model-1.25.4.tgz",
+      "integrity": "sha512-PIM7E43PBxKce8OQeezAs9j4TP+5yDpZVbuurd1h5phUxEKIu+G2a+EUZzIC5nS1mJktDJWzbqS23n1tsAf5QA==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "orderedmap": "^2.0.0"
+      }
+    },
+    "node_modules/prosemirror-schema-basic": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/prosemirror-schema-basic/-/prosemirror-schema-basic-1.2.4.tgz",
+      "integrity": "sha512-ELxP4TlX3yr2v5rM7Sb70SqStq5NvI15c0j9j/gjsrO5vaw+fnnpovCLEGIcpeGfifkuqJwl4fon6b+KdrODYQ==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-model": "^1.25.0"
+      }
+    },
+    "node_modules/prosemirror-schema-list": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/prosemirror-schema-list/-/prosemirror-schema-list-1.5.1.tgz",
+      "integrity": "sha512-927lFx/uwyQaGwJxLWCZRkjXG0p48KpMj6ueoYiu4JX05GGuGcgzAy62dfiV8eFZftgyBUvLx76RsMe20fJl+Q==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-model": "^1.0.0",
+        "prosemirror-state": "^1.0.0",
+        "prosemirror-transform": "^1.7.3"
+      }
+    },
+    "node_modules/prosemirror-state": {
+      "version": "1.4.4",
+      "resolved": "https://registry.npmjs.org/prosemirror-state/-/prosemirror-state-1.4.4.tgz",
+      "integrity": "sha512-6jiYHH2CIGbCfnxdHbXZ12gySFY/fz/ulZE333G6bPqIZ4F+TXo9ifiR86nAHpWnfoNjOb3o5ESi7J8Uz1jXHw==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "prosemirror-model": "^1.0.0",
+        "prosemirror-transform": "^1.0.0",
+        "prosemirror-view": "^1.27.0"
+      }
+    },
+    "node_modules/prosemirror-tables": {
+      "version": "1.8.5",
+      "resolved": "https://registry.npmjs.org/prosemirror-tables/-/prosemirror-tables-1.8.5.tgz",
+      "integrity": "sha512-V/0cDCsHKHe/tfWkeCmthNUcEp1IVO3p6vwN8XtwE9PZQLAZJigbw3QoraAdfJPir4NKJtNvOB8oYGKRl+t0Dw==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-keymap": "^1.2.3",
+        "prosemirror-model": "^1.25.4",
+        "prosemirror-state": "^1.4.4",
+        "prosemirror-transform": "^1.10.5",
+        "prosemirror-view": "^1.41.4"
+      }
+    },
+    "node_modules/prosemirror-trailing-node": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/prosemirror-trailing-node/-/prosemirror-trailing-node-3.0.0.tgz",
+      "integrity": "sha512-xiun5/3q0w5eRnGYfNlW1uU9W6x5MoFKWwq/0TIRgt09lv7Hcser2QYV8t4muXbEr+Fwo0geYn79Xs4GKywrRQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@remirror/core-constants": "3.0.0",
+        "escape-string-regexp": "^4.0.0"
+      },
+      "peerDependencies": {
+        "prosemirror-model": "^1.22.1",
+        "prosemirror-state": "^1.4.2",
+        "prosemirror-view": "^1.33.8"
+      }
+    },
+    "node_modules/prosemirror-transform": {
+      "version": "1.10.5",
+      "resolved": "https://registry.npmjs.org/prosemirror-transform/-/prosemirror-transform-1.10.5.tgz",
+      "integrity": "sha512-RPDQCxIDhIBb1o36xxwsaeAvivO8VLJcgBtzmOwQ64bMtsVFh5SSuJ6dWSxO1UsHTiTXPCgQm3PDJt7p6IOLbw==",
+      "license": "MIT",
+      "dependencies": {
+        "prosemirror-model": "^1.21.0"
+      }
+    },
+    "node_modules/prosemirror-view": {
+      "version": "1.41.5",
+      "resolved": "https://registry.npmjs.org/prosemirror-view/-/prosemirror-view-1.41.5.tgz",
+      "integrity": "sha512-UDQbIPnDrjE8tqUBbPmCOZgtd75htE6W3r0JCmY9bL6W1iemDM37MZEKC49d+tdQ0v/CKx4gjxLoLsfkD2NiZA==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "prosemirror-model": "^1.20.0",
+        "prosemirror-state": "^1.0.0",
+        "prosemirror-transform": "^1.1.0"
+      }
+    },
     "node_modules/punycode": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -5363,6 +6425,15 @@
         "node": ">=6"
       }
     },
+    "node_modules/punycode.js": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz",
+      "integrity": "sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/queue-microtask": {
       "version": "1.2.3",
       "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
@@ -5510,6 +6581,12 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/rope-sequence": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/rope-sequence/-/rope-sequence-1.3.4.tgz",
+      "integrity": "sha512-UT5EDe2cu2E/6O4igUr5PSFs23nvvukicWHx6GnOPlHAiiYbzNuCRQCuiUdHJQcqKalLKlrYJnjY0ySGsXNQXQ==",
+      "license": "MIT"
+    },
     "node_modules/run-parallel": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
@@ -5554,6 +6631,26 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
     "node_modules/safe-push-apply": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/safe-push-apply/-/safe-push-apply-1.0.0.tgz",
@@ -5589,6 +6686,12 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
     "node_modules/scheduler": {
       "version": "0.27.0",
       "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.27.0.tgz",
@@ -6030,8 +7133,8 @@
       "version": "4.1.18",
       "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.1.18.tgz",
       "integrity": "sha512-4+Z+0yiYyEtUVCScyfHCxOYP06L5Ne+JiHhY2IjR2KWMIWhJOYZKLSGZaP5HkZ8+bY0cxfzwDE5uOmzFXyIwxw==",
-      "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/tapable": {
       "version": "2.3.0",
@@ -6284,6 +7387,12 @@
         "typescript": ">=4.8.4 <6.0.0"
       }
     },
+    "node_modules/uc.micro": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz",
+      "integrity": "sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==",
+      "license": "MIT"
+    },
     "node_modules/unbox-primitive": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz",
@@ -6386,6 +7495,27 @@
         "punycode": "^2.1.0"
       }
     },
+    "node_modules/use-sync-external-store": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.6.0.tgz",
+      "integrity": "sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==",
+      "license": "MIT",
+      "peerDependencies": {
+        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
+      }
+    },
+    "node_modules/util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "license": "MIT"
+    },
+    "node_modules/w3c-keyname": {
+      "version": "2.2.8",
+      "resolved": "https://registry.npmjs.org/w3c-keyname/-/w3c-keyname-2.2.8.tgz",
+      "integrity": "sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==",
+      "license": "MIT"
+    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
diff --git a/package.json b/package.json
index 10f43f7..100aaa4 100644
--- a/package.json
+++ b/package.json
@@ -9,12 +9,23 @@
     "lint": "eslint"
   },
   "dependencies": {
+    "@tailwindcss/typography": "^0.5.19",
+    "@tiptap/extension-image": "^3.15.3",
+    "@tiptap/extension-link": "^3.15.3",
+    "@tiptap/react": "^3.15.3",
+    "@tiptap/starter-kit": "^3.15.3",
+    "bcrypt": "^6.0.0",
+    "bcryptjs": "^3.0.3",
+    "jsonwebtoken": "^9.0.3",
+    "mariadb": "^3.4.5",
     "next": "16.1.3",
     "react": "19.2.3",
     "react-dom": "19.2.3"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4",
+    "@types/bcrypt": "^6.0.0",
+    "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
diff --git a/src/app/api/auth/login/route.ts b/src/app/api/auth/login/route.ts
new file mode 100644
index 0000000..21911e8
--- /dev/null
+++ b/src/app/api/auth/login/route.ts
@@ -0,0 +1,56 @@
+import { pool } from "@/lib/db";
+import bcrypt from "bcrypt";
+import jwt from "jsonwebtoken";
+import { NextResponse } from "next/server";
+
+export async function POST(req: Request) {
+  const { username, password } = await req.json();
+
+  if (!username || !password) {
+    return NextResponse.json(
+      { error: "Missing credentials" },
+      { status: 400 }
+    );
+  }
+
+  const conn = await pool.getConnection();
+  const users = await conn.query(
+    "SELECT id, username, password, role FROM users WHERE username = ?",
+    [username]
+  );
+  conn.release();
+
+  const user = users[0];
+  if (!user) {
+    return NextResponse.json(
+      { error: "Invalid username or password" },
+      { status: 401 }
+    );
+  }
+
+  const ok = await bcrypt.compare(password, user.password);
+  if (!ok) {
+    return NextResponse.json(
+      { error: "Invalid username or password" },
+      { status: 401 }
+    );
+  }
+
+  const token = jwt.sign(
+    { id: user.id, role: user.role },
+    process.env.JWT_SECRET!,
+    { expiresIn: "2h" }
+  );
+
+  const res = NextResponse.json({ success: true });
+
+  // 🔐 nastav HTTP-only cookie
+  res.cookies.set("token", token, {
+    httpOnly: true,
+    path: "/",
+    maxAge: 60 * 60 * 2,
+    sameSite: "lax",
+  });
+
+  return res;
+}
diff --git a/src/app/api/auth/logout/route.tsx b/src/app/api/auth/logout/route.tsx
new file mode 100644
index 0000000..a743e59
--- /dev/null
+++ b/src/app/api/auth/logout/route.tsx
@@ -0,0 +1,16 @@
+import { NextResponse } from "next/server";
+import { cookies } from "next/headers";
+
+export async function POST() {
+  const cookieStore = await cookies();
+
+  // zmaže JWT cookie
+  cookieStore.set({
+    name: "token",
+    value: "",
+    path: "/",
+    expires: new Date(0),
+  });
+
+  return NextResponse.json({ success: true });
+}
diff --git a/src/app/api/auth/me/route.ts b/src/app/api/auth/me/route.ts
new file mode 100644
index 0000000..d2659a8
--- /dev/null
+++ b/src/app/api/auth/me/route.ts
@@ -0,0 +1,37 @@
+import { NextResponse } from "next/server";
+import jwt from "jsonwebtoken";
+import { cookies } from "next/headers";
+
+type JwtPayload = {
+  id: number;
+  username: string;
+};
+
+export async function GET() {
+  try {
+    const cookieStore = await cookies();
+    const token = cookieStore.get("token")?.value;
+
+    if (!token) {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    const decoded = jwt.verify(
+      token,
+      process.env.JWT_SECRET!
+    ) as JwtPayload;
+
+    return NextResponse.json({
+      id: decoded.id,
+      username: decoded.username,
+    });
+  } catch {
+    return NextResponse.json(
+      { error: "Unauthorized" },
+      { status: 401 }
+    );
+  }
+}
diff --git a/src/app/api/manager/posts/[id]/route.ts b/src/app/api/manager/posts/[id]/route.ts
new file mode 100644
index 0000000..4a21485
--- /dev/null
+++ b/src/app/api/manager/posts/[id]/route.ts
@@ -0,0 +1,180 @@
+import { NextResponse } from "next/server";
+import { pool } from "@/lib/db";
+import jwt from "jsonwebtoken";
+import { cookies } from "next/headers";
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+type JwtPayload = {
+  id: number;
+  username: string;
+};
+
+/* =========================
+   AUTH HELPER
+   ========================= */
+async function requireAuth() {
+  const cookieStore = await cookies();
+  const token = cookieStore.get("token")?.value;
+
+  if (!token) {
+    throw new Error("UNAUTHORIZED");
+  }
+
+  return jwt.verify(
+    token,
+    process.env.JWT_SECRET!
+  ) as JwtPayload;
+}
+
+/* =========================
+   GET – LOAD POST
+   ========================= */
+export async function GET(
+  req: Request,
+  { params }: Params
+) {
+  let conn;
+
+  try {
+    await requireAuth();
+
+    const { id } = await params;
+    conn = await pool.getConnection();
+
+    const rows = await conn.query(
+      `
+      SELECT id, title, description, content
+      FROM posts
+      WHERE id = ?
+      `,
+      [id]
+    );
+
+    if (!rows[0]) {
+      return NextResponse.json(
+        { error: "Post not found" },
+        { status: 404 }
+      );
+    }
+
+    return NextResponse.json(rows[0]);
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to load post:", err);
+    return NextResponse.json(
+      { error: "Failed to load post" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
+
+/* =========================
+   PUT – UPDATE POST
+   ========================= */
+export async function PUT(
+  req: Request,
+  { params }: Params
+) {
+  let conn;
+
+  try {
+    await requireAuth();
+
+    const { id } = await params;
+    const { title, description, content } =
+      await req.json();
+
+    if (!title || !content) {
+      return NextResponse.json(
+        { error: "Missing fields" },
+        { status: 400 }
+      );
+    }
+
+    conn = await pool.getConnection();
+
+    await conn.query(
+      `
+      UPDATE posts
+      SET title = ?, description = ?, content = ?
+      WHERE id = ?
+      `,
+      [
+        title,
+        description ?? "",
+        content,
+        id,
+      ]
+    );
+
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to update post:", err);
+    return NextResponse.json(
+      { error: "Failed to update post" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
+
+/* =========================
+   DELETE – DELETE POST
+   ========================= */
+export async function DELETE(
+  req: Request,
+  { params }: Params
+) {
+  let conn;
+
+  try {
+    await requireAuth();
+
+    const { id } = await params;
+    conn = await pool.getConnection();
+
+    await conn.query(
+      `
+      DELETE FROM posts
+      WHERE id = ?
+      `,
+      [id]
+    );
+
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to delete post:", err);
+    return NextResponse.json(
+      { error: "Failed to delete post" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
diff --git a/src/app/api/manager/posts/route.ts b/src/app/api/manager/posts/route.ts
new file mode 100644
index 0000000..93a8fbd
--- /dev/null
+++ b/src/app/api/manager/posts/route.ts
@@ -0,0 +1,117 @@
+import { NextResponse } from "next/server";
+import { pool } from "@/lib/db";
+import jwt from "jsonwebtoken";
+import { cookies } from "next/headers";
+
+type JwtPayload = {
+  id: number;
+  username: string;
+};
+
+/* =========================
+   GET – LIST POSTS
+   ========================= */
+export async function GET() {
+  let conn;
+
+  try {
+    conn = await pool.getConnection();
+
+    const rows = await conn.query(
+      `
+      SELECT
+        posts.id,
+        posts.title,
+        posts.created_at,
+        users.username AS author
+      FROM posts
+      JOIN users ON users.id = posts.author_id
+      ORDER BY posts.created_at DESC
+      `
+    );
+
+    return NextResponse.json(rows);
+  } catch (error) {
+    console.error("Failed to load manager posts:", error);
+    return NextResponse.json(
+      { error: "Failed to load posts" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
+
+/* =========================
+   POST – CREATE POST
+   ========================= */
+export async function POST(req: Request) {
+  let conn;
+
+  try {
+    /* =========================
+       AUTH (Next.js 16 FIX)
+       ========================= */
+    const cookieStore = await cookies(); // 🔑 MUST BE AWAIT
+    const token = cookieStore.get("token")?.value;
+
+    if (!token) {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    const decoded = jwt.verify(
+      token,
+      process.env.JWT_SECRET!
+    ) as JwtPayload;
+
+    /* =========================
+       BODY
+       ========================= */
+    const { title, description, content } = await req.json();
+
+    if (!title || !title.trim()) {
+      return NextResponse.json(
+        { error: "Title is required" },
+        { status: 400 }
+      );
+    }
+
+    /* =========================
+       INSERT
+       ========================= */
+    conn = await pool.getConnection();
+
+    const result = await conn.query(
+      `
+      INSERT INTO posts (
+        title,
+        description,
+        content,
+        author_id,
+        created_at
+      ) VALUES (?, ?, ?, ?, NOW())
+      `,
+      [
+        title,
+        description ?? "",
+        content ?? "",
+        decoded.id,
+      ]
+    );
+
+    const insertId = Number(result.insertId);
+
+    return NextResponse.json({ id: insertId });
+  } catch (error) {
+    console.error("Failed to create post:", error);
+    return NextResponse.json(
+      { error: "Failed to create post" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
diff --git a/src/app/api/manager/users/[id]/route.ts b/src/app/api/manager/users/[id]/route.ts
new file mode 100644
index 0000000..4f70323
--- /dev/null
+++ b/src/app/api/manager/users/[id]/route.ts
@@ -0,0 +1,193 @@
+import { NextResponse } from "next/server";
+import { pool } from "@/lib/db";
+import jwt from "jsonwebtoken";
+import { cookies } from "next/headers";
+import bcrypt from "bcryptjs";
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+async function requireAuth() {
+  const cookieStore = await cookies();
+  const token = cookieStore.get("token")?.value;
+
+  if (!token) {
+    throw new Error("UNAUTHORIZED");
+  }
+
+  jwt.verify(token, process.env.JWT_SECRET!);
+}
+
+/* =========================
+   GET – LOAD USER
+   ========================= */
+export async function DELETE(
+  req: Request,
+  { params }: Params
+) {
+  let conn;
+
+  try {
+    const cookieStore = await cookies();
+    const token = cookieStore.get("token")?.value;
+
+    if (!token) {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    const decoded = jwt.verify(
+      token,
+      process.env.JWT_SECRET!
+    ) as { id: number };
+
+    const { id } = await params;
+    const userIdToDelete = Number(id);
+
+    /* =========================
+       SECURITY: CANNOT DELETE SELF
+       ========================= */
+    if (decoded.id === userIdToDelete) {
+      return NextResponse.json(
+        { error: "You cannot delete yourself" },
+        { status: 400 }
+      );
+    }
+
+    conn = await pool.getConnection();
+
+    await conn.query(
+      `
+      DELETE FROM users
+      WHERE id = ?
+      `,
+      [userIdToDelete]
+    );
+
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    console.error("Failed to delete user:", err);
+    return NextResponse.json(
+      { error: "Failed to delete user" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
+
+export async function GET(
+  req: Request,
+  { params }: Params
+) {
+  let conn;
+
+  try {
+    await requireAuth();
+    const { id } = await params;
+
+    conn = await pool.getConnection();
+
+    const rows = await conn.query(
+      `
+      SELECT id, username, email
+      FROM users
+      WHERE id = ?
+      `,
+      [id]
+    );
+
+    if (!rows[0]) {
+      return NextResponse.json(
+        { error: "User not found" },
+        { status: 404 }
+      );
+    }
+
+    return NextResponse.json(rows[0]);
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to load user:", err);
+    return NextResponse.json(
+      { error: "Failed to load user" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
+
+/* =========================
+   PUT – UPDATE USER
+   ========================= */
+export async function PUT(
+  req: Request,
+  { params }: Params
+) {
+  let conn;
+
+  try {
+    await requireAuth();
+    const { id } = await params;
+
+    const { username, email, password } =
+      await req.json();
+
+    if (!username || !email) {
+      return NextResponse.json(
+        { error: "Missing fields" },
+        { status: 400 }
+      );
+    }
+
+    conn = await pool.getConnection();
+
+    if (password) {
+      const hash = await bcrypt.hash(password, 10);
+
+      await conn.query(
+        `
+        UPDATE users
+        SET username = ?, email = ?, password = ?
+        WHERE id = ?
+        `,
+        [username, email, hash, id]
+      );
+    } else {
+      await conn.query(
+        `
+        UPDATE users
+        SET username = ?, email = ?
+        WHERE id = ?
+        `,
+        [username, email, id]
+      );
+    }
+
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to update user:", err);
+    return NextResponse.json(
+      { error: "Failed to update user" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
diff --git a/src/app/api/manager/users/route.ts b/src/app/api/manager/users/route.ts
new file mode 100644
index 0000000..43e942a
--- /dev/null
+++ b/src/app/api/manager/users/route.ts
@@ -0,0 +1,103 @@
+import { NextResponse } from "next/server";
+import { pool } from "@/lib/db";
+import jwt from "jsonwebtoken";
+import { cookies } from "next/headers";
+import bcrypt from "bcryptjs";
+
+async function requireAuth() {
+  const cookieStore = await cookies();
+  const token = cookieStore.get("token")?.value;
+
+  if (!token) {
+    throw new Error("UNAUTHORIZED");
+  }
+
+  jwt.verify(token, process.env.JWT_SECRET!);
+}
+
+/* =========================
+   GET – LIST USERS
+   ========================= */
+export async function GET() {
+  let conn;
+
+  try {
+    await requireAuth();
+    conn = await pool.getConnection();
+
+    const users = await conn.query(
+      `
+      SELECT id, username, email
+      FROM users
+      ORDER BY id ASC
+      `
+    );
+
+    return NextResponse.json(users);
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to load users:", err);
+    return NextResponse.json(
+      { error: "Failed to load users" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
+
+/* =========================
+   POST – CREATE USER
+   ========================= */
+export async function POST(req: Request) {
+  let conn;
+
+  try {
+    await requireAuth();
+
+    const { username, email, password } =
+      await req.json();
+
+    if (!username || !email || !password) {
+      return NextResponse.json(
+        { error: "Missing fields" },
+        { status: 400 }
+      );
+    }
+
+    const hash = await bcrypt.hash(password, 10);
+
+    conn = await pool.getConnection();
+
+    await conn.query(
+      `
+      INSERT INTO users (username, email, password)
+      VALUES (?, ?, ?)
+      `,
+      [username, email, hash]
+    );
+
+    return NextResponse.json({ success: true });
+  } catch (err) {
+    if ((err as Error).message === "UNAUTHORIZED") {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401 }
+      );
+    }
+
+    console.error("Failed to create user:", err);
+    return NextResponse.json(
+      { error: "Failed to create user" },
+      { status: 500 }
+    );
+  } finally {
+    if (conn) conn.release();
+  }
+}
diff --git a/src/app/api/test-db/route.ts b/src/app/api/test-db/route.ts
new file mode 100644
index 0000000..ff9c7bb
--- /dev/null
+++ b/src/app/api/test-db/route.ts
@@ -0,0 +1,10 @@
+import { pool } from "@/lib/db";
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  const conn = await pool.getConnection();
+  const rows = await conn.query("SELECT 1 AS ok");
+  conn.release();
+
+  return NextResponse.json(rows);
+}
diff --git a/src/app/api/upload/route.tsx b/src/app/api/upload/route.tsx
new file mode 100644
index 0000000..143af42
--- /dev/null
+++ b/src/app/api/upload/route.tsx
@@ -0,0 +1,42 @@
+import { NextResponse } from "next/server";
+import fs from "fs";
+import path from "path";
+
+export async function POST(req: Request) {
+  const formData = await req.formData();
+  const file = formData.get("file") as File;
+
+  if (!file) {
+    return NextResponse.json(
+      { error: "No file uploaded" },
+      { status: 400 }
+    );
+  }
+
+  const bytes = await file.arrayBuffer();
+  const buffer = Buffer.from(bytes);
+
+  const isVideo = file.type.startsWith("video/");
+  const folder = isVideo ? "videos" : "images";
+
+  const uploadDir = path.join(
+    process.cwd(),
+    "public/uploads",
+    folder
+  );
+
+  if (!fs.existsSync(uploadDir)) {
+    fs.mkdirSync(uploadDir, { recursive: true });
+  }
+
+  const safeName = file.name.replace(/\s+/g, "_");
+  const filename = `${Date.now()}-${safeName}`;
+  const filepath = path.join(uploadDir, filename);
+
+  fs.writeFileSync(filepath, buffer);
+
+  return NextResponse.json({
+    url: `/uploads/${folder}/${filename}`,
+    type: isVideo ? "video" : "image",
+  });
+}
diff --git a/src/app/globals.css b/src/app/globals.css
index a2dc41e..78afb61 100644
--- a/src/app/globals.css
+++ b/src/app/globals.css
@@ -1,26 +1,160 @@
 @import "tailwindcss";
 
+/* ===============================
+   COLOR VARIABLES
+   =============================== */
+
+/* LIGHT MODE (default) */
 :root {
   --background: #ffffff;
   --foreground: #171717;
 }
 
-@theme inline {
-  --color-background: var(--background);
-  --color-foreground: var(--foreground);
-  --font-sans: var(--font-geist-sans);
-  --font-mono: var(--font-geist-mono);
+/* DARK MODE */
+body.dark {
+  --background: #0a0a0a;
+  --foreground: #ededed;
 }
 
-@media (prefers-color-scheme: dark) {
-  :root {
-    --background: #0a0a0a;
-    --foreground: #ededed;
-  }
-}
+/* ===============================
+   BASE STYLES
+   =============================== */
 
 body {
-  background: var(--background);
+  background-color: var(--background);
   color: var(--foreground);
-  font-family: Arial, Helvetica, sans-serif;
+  font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI",
+    Roboto, Helvetica, Arial, sans-serif;
+  transition: background-color 0.2s ease, color 0.2s ease;
+}
+
+/* ===============================
+   TYPOGRAPHY (BLOG CONTENT)
+   =============================== */
+
+/* Ensure prose uses correct colors */
+.prose {
+  color: var(--foreground);
+}
+
+/* Headings */
+.prose h1,
+.prose h2,
+.prose h3,
+.prose h4,
+.prose h5,
+.prose h6 {
+  color: var(--foreground);
+}
+
+/* Paragraphs */
+.prose p {
+  color: var(--foreground);
+}
+
+/* Strong / Bold */
+.prose strong,
+.prose b {
+  color: var(--foreground);
+  font-weight: 700;
+}
+
+/* Italic */
+.prose em,
+.prose i {
+  font-style: italic;
+}
+
+/* Links */
+.prose a {
+  color: #2563eb; /* blue-600 */
+  text-decoration: underline;
+}
+
+body.dark .prose a {
+  color: #60a5fa; /* blue-400 */
+}
+
+/* Lists */
+.prose ul,
+.prose ol {
+  color: var(--foreground);
+}
+
+/* Images */
+.prose img {
+  max-width: 100%;
+  height: auto;
+  border-radius: 12px;
+  margin: 1.5rem 0;
+}
+
+/* Videos */
+.prose video,
+.prose iframe {
+  max-width: 100%;
+  border-radius: 12px;
+  margin: 1.5rem 0;
+}
+
+/* Blockquotes */
+.prose blockquote {
+  border-left: 4px solid #e5e7eb;
+  padding-left: 1rem;
+  color: var(--foreground);
+}
+
+body.dark .prose blockquote {
+  border-left-color: #374151;
+}
+.editor-btn {
+  padding: 0.3rem 0.7rem;
+  border: 1px solid #9ca3af;        /* tmavší border */
+  border-radius: 6px;
+  font-size: 0.875rem;
+
+  background: #ffffff;
+  color: #111827;                   /* tmavý text */
+
+  cursor: pointer;
+  transition: background-color 0.15s, border-color 0.15s;
+}
+
+.editor-btn:hover {
+  background: #f3f4f6;              /* jasný hover */
+  border-color: #6b7280;
+}
+
+/* ACTIVE STATE (keď je bold/italic zapnuté) */
+.editor-btn.is-active {
+  background: #2563eb;              /* blue */
+  color: #ffffff;
+  border-color: #2563eb;
+}
+
+/* DARK MODE */
+.dark .editor-btn {
+  background: #374151;
+  color: #f9fafb;
+  border-color: #4b5563;
+}
+
+.dark .editor-btn:hover {
+  background: #4b5563;
+}
+
+.dark .editor-btn.is-active {
+  background: #2563eb;
+  border-color: #2563eb;
+  color: white;
+}
+
+
+video {
+  margin: 1.5rem 0;
+  border-radius: 8px;
+}
+
+img {
+  border-radius: 8px;
 }
diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index f7fa87e..bc0b1f1 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -1,32 +1,15 @@
-import type { Metadata } from "next";
-import { Geist, Geist_Mono } from "next/font/google";
 import "./globals.css";
-
-const geistSans = Geist({
-  variable: "--font-geist-sans",
-  subsets: ["latin"],
-});
-
-const geistMono = Geist_Mono({
-  variable: "--font-geist-mono",
-  subsets: ["latin"],
-});
-
-export const metadata: Metadata = {
-  title: "Create Next App",
-  description: "Generated by create next app",
-};
+import Navbar from "@/components/Navbar";
 
 export default function RootLayout({
   children,
-}: Readonly<{
+}: {
   children: React.ReactNode;
-}>) {
+}) {
   return (
     <html lang="en">
-      <body
-        className={`${geistSans.variable} ${geistMono.variable} antialiased`}
-      >
+      <body>
+        <Navbar />
         {children}
       </body>
     </html>
diff --git a/src/app/manager/create/page.tsx b/src/app/manager/create/page.tsx
new file mode 100644
index 0000000..f5f1758
--- /dev/null
+++ b/src/app/manager/create/page.tsx
@@ -0,0 +1,142 @@
+"use client";
+
+import { useState } from "react";
+import { useRouter } from "next/navigation";
+import Editor from "@/components/Editor";
+
+type Post = {
+  title: string;
+  description: string;
+  content: string;
+};
+
+export default function CreatePostPage() {
+  const router = useRouter();
+
+  const [post, setPost] = useState<Post>({
+    title: "",
+    description: "",
+    content: "",
+  });
+
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState("");
+  const [saved, setSaved] = useState(false);
+
+  /* =========================
+     CREATE POST
+     ========================= */
+  async function create() {
+    setError("");
+    setSaved(false);
+
+    if (!post.title.trim()) {
+      setError("Title is required");
+      return;
+    }
+
+    setLoading(true);
+
+    const res = await fetch("/api/manager/posts", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify(post),
+    });
+
+    setLoading(false);
+
+    if (!res.ok) {
+      setError("Failed to create post");
+      return;
+    }
+
+    const data = await res.json();
+
+    // redirect to edit page
+    router.push(`/manager/edit/${data.id}`);
+  }
+
+  return (
+    <main className="max-w-5xl mx-auto px-6 py-16">
+      <h1 className="text-3xl font-bold mb-8">
+        Create new post
+      </h1>
+
+      {error && (
+        <p className="mb-4 text-red-600">
+          {error}
+        </p>
+      )}
+
+      {saved && (
+        <p className="mb-4 text-green-600">
+          Created successfully
+        </p>
+      )}
+
+      <div className="space-y-6">
+        {/* TITLE */}
+        <input
+          className="w-full p-3 border rounded"
+          placeholder="Title"
+          value={post.title}
+          onChange={e =>
+            setPost({
+              ...post,
+              title: e.target.value,
+            })
+          }
+        />
+
+        {/* DESCRIPTION */}
+        <textarea
+          className="w-full p-3 border rounded h-24"
+          placeholder="Description"
+          value={post.description}
+          onChange={e =>
+            setPost({
+              ...post,
+              description: e.target.value,
+            })
+          }
+        />
+
+        {/* CONTENT */}
+        <Editor
+          content={post.content}
+          onChange={html =>
+            setPost({
+              ...post,
+              content: html,
+            })
+          }
+        />
+
+        {/* ACTIONS */}
+        <div className="flex gap-4">
+          <button
+            onClick={create}
+            disabled={loading}
+            className="
+              px-6 py-2 rounded
+              bg-blue-600 text-white
+              hover:bg-blue-700
+              disabled:opacity-50
+            "
+          >
+            {loading ? "Creating..." : "Create"}
+          </button>
+
+          <button
+            onClick={() => router.push("/manager")}
+            className="px-6 py-2 border rounded"
+          >
+            Cancel
+          </button>
+        </div>
+      </div>
+    </main>
+  );
+}
diff --git a/src/app/manager/edit/[id]/page.tsx b/src/app/manager/edit/[id]/page.tsx
new file mode 100644
index 0000000..2964815
--- /dev/null
+++ b/src/app/manager/edit/[id]/page.tsx
@@ -0,0 +1,171 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import Editor from "@/components/Editor";
+
+type Post = {
+  title: string;
+  description: string;
+  content: string;
+};
+
+export default function EditPostPage({
+  params,
+}: {
+  params: Promise<{ id: string }>;
+}) {
+  const [id, setId] = useState<string | null>(null);
+
+  const [post, setPost] = useState<Post>({
+    title: "",
+    description: "",
+    content: "",
+  });
+
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState("");
+  const [saved, setSaved] = useState(false);
+
+  /* =========================
+     UNWRAP PARAMS (Next.js 16)
+     ========================= */
+  useEffect(() => {
+    params.then(p => setId(p.id));
+  }, [params]);
+
+  /* =========================
+     LOAD POST
+     ========================= */
+  useEffect(() => {
+    if (!id) return;
+
+    fetch(`/api/manager/posts/${id}`)
+      .then(res => {
+        if (!res.ok) {
+          throw new Error("Failed to load post");
+        }
+        return res.json();
+      })
+      .then(data => {
+        setPost({
+          title: data.title ?? "",
+          description: data.description ?? "",
+          content: data.content ?? "",
+        });
+        setLoading(false);
+      })
+      .catch(() => {
+        setError("Post not found");
+        setLoading(false);
+      });
+  }, [id]);
+
+  /* =========================
+     SAVE POST
+     ========================= */
+  async function save() {
+    if (!id) return;
+
+    setError("");
+    setSaved(false);
+
+    const res = await fetch(`/api/manager/posts/${id}`, {
+      method: "PUT",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        title: post.title,
+        description: post.description,
+        content: post.content, // HTML s viac videami + obrázkami
+      }),
+    });
+
+    if (!res.ok) {
+      setError("Failed to save post");
+      return;
+    }
+
+    setSaved(true);
+  }
+
+  /* =========================
+     RENDER STATES
+     ========================= */
+  if (loading) {
+    return <p className="p-10">Loading…</p>;
+  }
+
+  if (error) {
+    return (
+      <p className="p-10 text-red-600">
+        {error}
+      </p>
+    );
+  }
+
+  return (
+    <main className="max-w-5xl mx-auto px-6 py-16">
+      <h1 className="text-3xl font-bold mb-8">
+        Edit post
+      </h1>
+
+      {saved && (
+        <p className="mb-4 text-green-600">
+          Saved successfully
+        </p>
+      )}
+
+      <div className="space-y-6">
+        {/* TITLE */}
+        <input
+          className="w-full p-3 border rounded"
+          placeholder="Title"
+          value={post.title}
+          onChange={e =>
+            setPost({
+              ...post,
+              title: e.target.value,
+            })
+          }
+        />
+
+        {/* DESCRIPTION */}
+        <textarea
+          className="w-full p-3 border rounded h-24"
+          placeholder="Description"
+          value={post.description}
+          onChange={e =>
+            setPost({
+              ...post,
+              description: e.target.value,
+            })
+          }
+        />
+
+        {/* CONTENT – WYSIWYG EDITOR */}
+        <Editor
+          content={post.content}
+          onChange={html =>
+            setPost({
+              ...post,
+              content: html, // môže obsahovať ľubovoľný počet <img> a <video>
+            })
+          }
+        />
+
+        {/* SAVE */}
+        <button
+          onClick={save}
+          className="
+            px-6 py-2 rounded
+            bg-blue-600 text-white
+            hover:bg-blue-700
+          "
+        >
+          Save
+        </button>
+      </div>
+    </main>
+  );
+}
diff --git a/src/app/manager/login/page.tsx b/src/app/manager/login/page.tsx
new file mode 100644
index 0000000..4e00ae2
--- /dev/null
+++ b/src/app/manager/login/page.tsx
@@ -0,0 +1,72 @@
+"use client";
+
+import { useState } from "react";
+
+export default function ManagerLogin() {
+  const [username, setUsername] = useState("");
+  const [password, setPassword] = useState("");
+  const [error, setError] = useState("");
+
+  async function login(e: React.FormEvent) {
+    e.preventDefault();
+    setError("");
+
+    const res = await fetch("/api/auth/login", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ username, password }),
+    });
+
+    if (!res.ok) {
+      const data = await res.json();
+      setError(data.error || "Login failed");
+      return;
+    }
+
+    // 🔥 TERAZ už cookie EXISTUJE → normálna navigácia
+    window.location.href = "/manager";
+  }
+
+  return (
+    <main className="min-h-screen flex items-center justify-center">
+      <form
+        onSubmit={login}
+        className="w-full max-w-sm border rounded-xl p-6"
+      >
+        <h1 className="text-2xl font-bold mb-6">
+          Manager Login
+        </h1>
+
+        {error && (
+          <p className="mb-4 text-red-600">
+            {error}
+          </p>
+        )}
+
+        <input
+          className="w-full mb-3 p-2 border rounded"
+          placeholder="Username"
+          value={username}
+          onChange={e => setUsername(e.target.value)}
+          required
+        />
+
+        <input
+          className="w-full mb-4 p-2 border rounded"
+          type="password"
+          placeholder="Password"
+          value={password}
+          onChange={e => setPassword(e.target.value)}
+          required
+        />
+
+        <button
+          type="submit"
+          className="w-full py-2 bg-blue-600 text-white rounded hover:bg-blue-700"
+        >
+          Login
+        </button>
+      </form>
+    </main>
+  );
+}
diff --git a/src/app/manager/page.tsx b/src/app/manager/page.tsx
new file mode 100644
index 0000000..10862e4
--- /dev/null
+++ b/src/app/manager/page.tsx
@@ -0,0 +1,262 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { useRouter } from "next/navigation";
+
+type Post = {
+  id: number;
+  title: string;
+};
+
+type User = {
+  id: number;
+  username: string;
+  email: string;
+};
+
+export default function ManagerPage() {
+  const router = useRouter();
+
+  const [posts, setPosts] = useState<Post[]>([]);
+  const [users, setUsers] = useState<User[]>([]);
+  const [me, setMe] = useState<{ id: number; username: string } | null>(null);
+
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState("");
+
+  /* =========================
+     LOAD MANAGER DATA
+     ========================= */
+  useEffect(() => {
+    Promise.all([
+      fetch("/api/manager/posts").then(res =>
+        res.ok ? res.json() : []
+      ),
+      fetch("/api/manager/users").then(res =>
+        res.ok ? res.json() : []
+      ),
+      fetch("/api/auth/me").then(res =>
+        res.ok ? res.json() : null
+      ),
+    ])
+      .then(([postsData, usersData, meData]) => {
+        setPosts(postsData);
+        setUsers(usersData);
+        setMe(meData);
+        setLoading(false);
+      })
+      .catch(err => {
+        console.error(err);
+        setError("Failed to load manager data");
+        setLoading(false);
+      });
+  }, []);
+
+  /* =========================
+     LOGOUT
+     ========================= */
+  async function logout() {
+    await fetch("/api/auth/logout", {
+      method: "POST",
+    });
+    router.push("/manager/login");
+  }
+
+  /* =========================
+     DELETE POST
+     ========================= */
+  async function deletePost(id: number) {
+    if (!confirm("Delete this post?")) return;
+
+    const res = await fetch(
+      `/api/manager/posts/${id}`,
+      { method: "DELETE" }
+    );
+
+    if (!res.ok) {
+      alert("Failed to delete post");
+      return;
+    }
+
+    setPosts(posts.filter(p => p.id !== id));
+  }
+
+  /* =========================
+     DELETE USER
+     ========================= */
+  async function deleteUser(id: number) {
+    if (!confirm("Delete this user?")) return;
+
+    const res = await fetch(
+      `/api/manager/users/${id}`,
+      { method: "DELETE" }
+    );
+
+    const data = await res.json();
+
+    if (!res.ok) {
+      alert(data.error || "Failed to delete user");
+      return;
+    }
+
+    setUsers(users.filter(u => u.id !== id));
+  }
+
+  if (loading) {
+    return <p className="p-10">Loading…</p>;
+  }
+
+  return (
+    <main className="max-w-6xl mx-auto px-6 py-16 space-y-16">
+      {/* =========================
+         HEADER
+         ========================= */}
+      <div className="flex justify-between items-center">
+        <div>
+          <h1 className="text-3xl font-bold">
+            Manager
+          </h1>
+
+          {me && (
+            <p className="text-sm text-gray-500">
+              Logged in as{" "}
+              <strong>{me.username}</strong>
+            </p>
+          )}
+        </div>
+
+        <div className="flex gap-3">
+          <button
+            onClick={() =>
+              router.push("/manager/create")
+            }
+            className="px-4 py-2 bg-blue-600 text-white rounded"
+          >
+            Create post
+          </button>
+
+          <button
+            onClick={logout}
+            className="px-4 py-2 border rounded"
+          >
+            Logout
+          </button>
+        </div>
+      </div>
+
+      {error && (
+        <p className="text-red-600">{error}</p>
+      )}
+
+      {/* =========================
+         POSTS
+         ========================= */}
+      <section>
+        <h2 className="text-xl font-semibold mb-4">
+          Posts
+        </h2>
+
+        {posts.length === 0 ? (
+          <p>No posts yet.</p>
+        ) : (
+          <div className="space-y-3">
+            {posts.map(post => (
+              <div
+                key={post.id}
+                className="border rounded p-4 flex justify-between items-center"
+              >
+                <span>{post.title}</span>
+
+                <div className="flex gap-4">
+                  <button
+                    onClick={() =>
+                      router.push(
+                        `/manager/edit/${post.id}`
+                      )
+                    }
+                    className="text-blue-600 hover:underline"
+                  >
+                    Edit
+                  </button>
+
+                  <button
+                    onClick={() =>
+                      deletePost(post.id)
+                    }
+                    className="text-red-600 hover:underline"
+                  >
+                    Delete
+                  </button>
+                </div>
+              </div>
+            ))}
+          </div>
+        )}
+      </section>
+
+      {/* =========================
+         USERS
+         ========================= */}
+      <section>
+        <div className="flex justify-between items-center mb-4">
+          <h2 className="text-xl font-semibold">
+            Users
+          </h2>
+
+          <button
+            onClick={() =>
+              router.push("/manager/users/add")
+            }
+            className="px-4 py-2 border rounded"
+          >
+            Add user
+          </button>
+        </div>
+
+        {users.length === 0 ? (
+          <p>No users.</p>
+        ) : (
+          <div className="space-y-3">
+            {users.map(user => (
+              <div
+                key={user.id}
+                className="border rounded p-4 flex justify-between items-center"
+              >
+                <div>
+                  <p className="font-medium">
+                    {user.username}
+                  </p>
+                  <p className="text-sm text-gray-500">
+                    {user.email}
+                  </p>
+                </div>
+
+                <div className="flex gap-4">
+                  <button
+                    onClick={() =>
+                      router.push(
+                        `/manager/users/edit/${user.id}`
+                      )
+                    }
+                    className="text-blue-600 hover:underline"
+                  >
+                    Edit
+                  </button>
+
+                  <button
+                    onClick={() =>
+                      deleteUser(user.id)
+                    }
+                    className="text-red-600 hover:underline"
+                  >
+                    Delete
+                  </button>
+                </div>
+              </div>
+            ))}
+          </div>
+        )}
+      </section>
+    </main>
+  );
+}
diff --git a/src/app/manager/posts/route.ts b/src/app/manager/posts/route.ts
new file mode 100644
index 0000000..549ea9e
--- /dev/null
+++ b/src/app/manager/posts/route.ts
@@ -0,0 +1,12 @@
+import { pool } from "@/lib/db";
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  const conn = await pool.getConnection();
+  const posts = await conn.query(
+    "SELECT id, title FROM posts ORDER BY created_at DESC"
+  );
+  conn.release();
+
+  return NextResponse.json(posts);
+}
diff --git a/src/app/manager/users/add/page.tsx b/src/app/manager/users/add/page.tsx
new file mode 100644
index 0000000..32f380c
--- /dev/null
+++ b/src/app/manager/users/add/page.tsx
@@ -0,0 +1,102 @@
+"use client";
+
+import { useState } from "react";
+import { useRouter } from "next/navigation";
+
+export default function AddUserPage() {
+  const router = useRouter();
+
+  const [username, setUsername] = useState("");
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+
+  const [error, setError] = useState("");
+  const [loading, setLoading] = useState(false);
+
+  async function save() {
+    setError("");
+
+    if (!username || !email || !password) {
+      setError("All fields are required");
+      return;
+    }
+
+    setLoading(true);
+
+    const res = await fetch("/api/manager/users", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        username,
+        email,
+        password,
+      }),
+    });
+
+    setLoading(false);
+
+    if (!res.ok) {
+      const data = await res.json();
+      setError(data.error || "Failed to create user");
+      return;
+    }
+
+    router.push("/manager");
+  }
+
+  return (
+    <main className="max-w-xl mx-auto px-6 py-16">
+      <h1 className="text-3xl font-bold mb-8">
+        Add user
+      </h1>
+
+      {error && (
+        <p className="mb-4 text-red-600">
+          {error}
+        </p>
+      )}
+
+      <div className="space-y-6">
+        <input
+          className="w-full p-3 border rounded"
+          placeholder="Username"
+          value={username}
+          onChange={e => setUsername(e.target.value)}
+        />
+
+        <input
+          type="email"
+          className="w-full p-3 border rounded"
+          placeholder="Email"
+          value={email}
+          onChange={e => setEmail(e.target.value)}
+        />
+
+        <input
+          type="password"
+          className="w-full p-3 border rounded"
+          placeholder="Password"
+          value={password}
+          onChange={e => setPassword(e.target.value)}
+        />
+
+        <div className="flex gap-3">
+          <button
+            onClick={save}
+            disabled={loading}
+            className="px-6 py-2 bg-blue-600 text-white rounded disabled:opacity-50"
+          >
+            Create user
+          </button>
+
+          <button
+            onClick={() => router.back()}
+            className="px-6 py-2 border rounded"
+          >
+            Cancel
+          </button>
+        </div>
+      </div>
+    </main>
+  );
+}
diff --git a/src/app/manager/users/edit/[id]/page.tsx b/src/app/manager/users/edit/[id]/page.tsx
new file mode 100644
index 0000000..5ee3af6
--- /dev/null
+++ b/src/app/manager/users/edit/[id]/page.tsx
@@ -0,0 +1,160 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { useRouter } from "next/navigation";
+
+type User = {
+  username: string;
+  email: string;
+};
+
+export default function EditUserPage({
+  params,
+}: {
+  params: Promise<{ id: string }>;
+}) {
+  const router = useRouter();
+
+  const [id, setId] = useState<string | null>(null);
+  const [user, setUser] = useState<User>({
+    username: "",
+    email: "",
+  });
+  const [password, setPassword] = useState("");
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState("");
+  const [saved, setSaved] = useState(false);
+
+  /* =========================
+     UNWRAP PARAMS (Next 16)
+     ========================= */
+  useEffect(() => {
+    params.then(p => setId(p.id));
+  }, [params]);
+
+  /* =========================
+     LOAD USER
+     ========================= */
+  useEffect(() => {
+    if (!id) return;
+
+    fetch(`/api/manager/users/${id}`)
+      .then(res => {
+        if (!res.ok) {
+          throw new Error("Failed to load user");
+        }
+        return res.json();
+      })
+      .then(data => {
+        setUser({
+          username: data.username,
+          email: data.email,
+        });
+        setLoading(false);
+      })
+      .catch(() => {
+        setError("User not found");
+        setLoading(false);
+      });
+  }, [id]);
+
+  /* =========================
+     SAVE USER
+     ========================= */
+  async function save() {
+    if (!id) return;
+
+    setError("");
+    setSaved(false);
+
+    const res = await fetch(`/api/manager/users/${id}`, {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        ...user,
+        password: password || undefined,
+      }),
+    });
+
+    if (!res.ok) {
+      setError("Failed to save user");
+      return;
+    }
+
+    setSaved(true);
+    setPassword("");
+  }
+
+  if (loading) {
+    return <p className="p-10">Loading…</p>;
+  }
+
+  if (error) {
+    return <p className="p-10 text-red-600">{error}</p>;
+  }
+
+  return (
+    <main className="max-w-xl mx-auto px-6 py-16">
+      <h1 className="text-3xl font-bold mb-8">
+        Edit user
+      </h1>
+
+      {saved && (
+        <p className="mb-4 text-green-600">
+          User updated successfully
+        </p>
+      )}
+
+      <div className="space-y-6">
+        <input
+          className="w-full p-3 border rounded"
+          placeholder="Username"
+          value={user.username}
+          onChange={e =>
+            setUser({
+              ...user,
+              username: e.target.value,
+            })
+          }
+        />
+
+        <input
+          type="email"
+          className="w-full p-3 border rounded"
+          placeholder="Email"
+          value={user.email}
+          onChange={e =>
+            setUser({
+              ...user,
+              email: e.target.value,
+            })
+          }
+        />
+
+        <input
+          type="password"
+          className="w-full p-3 border rounded"
+          placeholder="New password (optional)"
+          value={password}
+          onChange={e => setPassword(e.target.value)}
+        />
+
+        <div className="flex gap-3">
+          <button
+            onClick={save}
+            className="px-6 py-2 bg-blue-600 text-white rounded"
+          >
+            Save
+          </button>
+
+          <button
+            onClick={() => router.back()}
+            className="px-6 py-2 border rounded"
+          >
+            Cancel
+          </button>
+        </div>
+      </div>
+    </main>
+  );
+}
diff --git a/src/app/news/[id]/page.tsx b/src/app/news/[id]/page.tsx
new file mode 100644
index 0000000..3a24b2a
--- /dev/null
+++ b/src/app/news/[id]/page.tsx
@@ -0,0 +1,110 @@
+import { pool } from "@/lib/db";
+import { notFound } from "next/navigation";
+
+type Post = {
+  id: number;
+  title: string;
+  description: string;
+  content: string;
+  created_at: string;
+  author: string | null;
+};
+
+export default async function PostPage({
+  params,
+}: {
+  params: Promise<{ id: string }>;
+}) {
+  const { id } = await params;
+
+  let post: Post | null = null;
+
+  try {
+    const conn = await pool.getConnection();
+    const rows = await conn.query(
+      `
+      SELECT
+        p.id,
+        p.title,
+        p.description,
+        p.content,
+        p.created_at,
+        u.username AS author
+      FROM posts p
+      LEFT JOIN users u ON p.author_id = u.id
+      WHERE p.id = ?
+      `,
+      [id]
+    );
+    conn.release();
+
+    post = rows[0] ?? null;
+  } catch (err) {
+    console.error("Failed to load post:", err);
+  }
+
+  if (!post) {
+    notFound();
+  }
+
+  return (
+    <main className="max-w-[1400px] mx-auto px-5 py-16">
+      <div className="grid grid-cols-1 lg:grid-cols-[1fr_360px] gap-5">
+
+        {/* ================= LEFT: ARTICLE CONTENT ================= */}
+        <article className="prose dark:prose-invert max-w-none">
+          <div
+            dangerouslySetInnerHTML={{ __html: post.content }}
+          />
+        </article>
+
+        {/* ================= RIGHT: META PANEL ================= */}
+        <aside
+          className="
+            border border-gray-200 dark:border-gray-700
+            rounded-xl p-6
+            h-fit
+            lg:sticky
+            lg:bottom-[10px]
+          "
+        >
+          {/* TITLE */}
+          <h1 className="text-2xl font-bold mb-6">
+            {post.title}
+          </h1>
+
+          {/* AUTHOR */}
+          <div className="mb-4">
+            <p className="font-semibold">
+              Author
+            </p>
+            <p>
+              {post.author ?? "Unknown"}
+            </p>
+          </div>
+
+          {/* DESCRIPTION */}
+          <div className="mb-4">
+            <p className="font-semibold">
+              Description
+            </p>
+            <p>
+              {post.description}
+            </p>
+          </div>
+
+          {/* PUBLISHED DATE */}
+          <div>
+            <p className="font-semibold">
+              Published
+            </p>
+            <p>
+              {new Date(post.created_at).toLocaleDateString()}
+            </p>
+          </div>
+        </aside>
+
+      </div>
+    </main>
+  );
+}
diff --git a/src/app/news/page.tsx b/src/app/news/page.tsx
new file mode 100644
index 0000000..5c7982b
--- /dev/null
+++ b/src/app/news/page.tsx
@@ -0,0 +1,75 @@
+import Link from "next/link";
+import { pool } from "@/lib/db";
+
+type Post = {
+  id: number;
+  title: string;
+  description: string;
+  created_at: string;
+};
+
+export default async function NewsPage() {
+  let posts: Post[] = [];
+
+  try {
+    const conn = await pool.getConnection();
+    posts = await conn.query(
+      `
+      SELECT id, title, description, created_at
+      FROM posts
+      ORDER BY created_at DESC
+      `
+    );
+    conn.release();
+  } catch (err) {
+    console.error("Failed to load posts:", err);
+  }
+
+  return (
+    <main className="max-w-7xl mx-auto px-6 py-20">
+      {/* HEADER */}
+      <header className="mb-16">
+        <h1 className="text-4xl font-extrabold">
+          News
+        </h1>
+        <p className="mt-4 text-gray-600 dark:text-gray-400 max-w-2xl">
+          All articles and updates published on Surafino.
+        </p>
+      </header>
+
+      {/* POSTS */}
+      {posts.length === 0 ? (
+        <p className="text-gray-500">
+          No posts available.
+        </p>
+      ) : (
+        <div className="grid md:grid-cols-2 lg:grid-cols-3 gap-8">
+          {posts.map(post => (
+            <article
+              key={post.id}
+              className="
+                rounded-2xl border border-gray-200 dark:border-gray-700
+                p-6 hover:shadow-md transition
+              "
+            >
+              <h2 className="text-xl font-semibold">
+                {post.title}
+              </h2>
+
+              <p className="mt-3 text-gray-600 dark:text-gray-400">
+                {post.description}
+              </p>
+
+              <Link
+                href={`/news/${post.id}`}
+                className="inline-block mt-5 text-blue-600 hover:underline"
+              >
+                Read article →
+              </Link>
+            </article>
+          ))}
+        </div>
+      )}
+    </main>
+  );
+}
diff --git a/src/app/page.tsx b/src/app/page.tsx
index 295f8fd..405b6be 100644
--- a/src/app/page.tsx
+++ b/src/app/page.tsx
@@ -1,65 +1,123 @@
-import Image from "next/image";
+import Link from "next/link";
+import { pool } from "@/lib/db";
+
+type Post = {
+  id: number;
+  title: string;
+  description: string;
+  created_at: string;
+};
+
+export default async function HomePage() {
+  let posts: Post[] = [];
+
+  try {
+    const conn = await pool.getConnection();
+    posts = await conn.query(
+      `
+      SELECT id, title, description, created_at
+      FROM posts
+      ORDER BY created_at DESC
+      LIMIT 3
+      `
+    );
+    conn.release();
+  } catch (err) {
+    console.error("Failed to load posts:", err);
+  }
 
-export default function Home() {
   return (
-    <div className="flex min-h-screen items-center justify-center bg-zinc-50 font-sans dark:bg-black">
-      <main className="flex min-h-screen w-full max-w-3xl flex-col items-center justify-between py-32 px-16 bg-white dark:bg-black sm:items-start">
-        <Image
-          className="dark:invert"
-          src="/next.svg"
-          alt="Next.js logo"
-          width={100}
-          height={20}
-          priority
-        />
-        <div className="flex flex-col items-center gap-6 text-center sm:items-start sm:text-left">
-          <h1 className="max-w-xs text-3xl font-semibold leading-10 tracking-tight text-black dark:text-zinc-50">
-            To get started, edit the page.tsx file.
-          </h1>
-          <p className="max-w-md text-lg leading-8 text-zinc-600 dark:text-zinc-400">
-            Looking for a starting point or more instructions? Head over to{" "}
-            <a
-              href="https://vercel.com/templates?framework=next.js&utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-              className="font-medium text-zinc-950 dark:text-zinc-50"
-            >
-              Templates
-            </a>{" "}
-            or the{" "}
-            <a
-              href="https://nextjs.org/learn?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-              className="font-medium text-zinc-950 dark:text-zinc-50"
-            >
-              Learning
-            </a>{" "}
-            center.
+    <main className="max-w-7xl mx-auto px-6 py-20 space-y-32">
+      {/* ================= HERO ================= */}
+      <section className="text-center max-w-3xl mx-auto">
+        <h1 className="text-5xl md:text-6xl font-extrabold tracking-tight">
+          Welcome to Surafino
+        </h1>
+
+        <p className="mt-6 text-lg text-gray-600 dark:text-gray-400">
+          A modern blog and news platform focused on technology,
+          development and digital projects.
+        </p>
+
+        <div className="mt-10 flex justify-center gap-4">
+          <Link
+            href="/news"
+            className="px-6 py-3 rounded-xl bg-blue-600 text-white font-semibold hover:bg-blue-700 transition"
+          >
+            Read articles
+          </Link>
+
+          <Link
+            href="/news"
+            className="px-6 py-3 rounded-xl border border-gray-300 dark:border-gray-600 hover:bg-gray-100 dark:hover:bg-gray-800 transition"
+          >
+            View news
+          </Link>
+        </div>
+      </section>
+
+      {/* ================= LATEST POSTS ================= */}
+      <section>
+        <div className="flex items-center justify-between mb-10">
+          <h2 className="text-3xl font-bold">
+            Latest posts
+          </h2>
+
+          <Link
+            href="/news"
+            className="text-blue-600 hover:underline"
+          >
+            View more
+          </Link>
+        </div>
+
+        {posts.length === 0 ? (
+          <p className="text-gray-500">
+            No posts have been published yet.
           </p>
-        </div>
-        <div className="flex flex-col gap-4 text-base font-medium sm:flex-row">
-          <a
-            className="flex h-12 w-full items-center justify-center gap-2 rounded-full bg-foreground px-5 text-background transition-colors hover:bg-[#383838] dark:hover:bg-[#ccc] md:w-[158px]"
-            href="https://vercel.com/new?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            <Image
-              className="dark:invert"
-              src="/vercel.svg"
-              alt="Vercel logomark"
-              width={16}
-              height={16}
-            />
-            Deploy Now
-          </a>
-          <a
-            className="flex h-12 w-full items-center justify-center rounded-full border border-solid border-black/[.08] px-5 transition-colors hover:border-transparent hover:bg-black/[.04] dark:border-white/[.145] dark:hover:bg-[#1a1a1a] md:w-[158px]"
-            href="https://nextjs.org/docs?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            Documentation
-          </a>
-        </div>
-      </main>
-    </div>
+        ) : (
+          <div className="grid md:grid-cols-3 gap-8">
+            {posts.map(post => (
+              <article
+                key={post.id}
+                className="
+                  rounded-2xl border border-gray-200 dark:border-gray-700
+                  p-6 hover:shadow-md transition
+                "
+              >
+                <h3 className="text-xl font-semibold">
+                  {post.title}
+                </h3>
+
+                <p className="mt-3 text-gray-600 dark:text-gray-400">
+                  {post.description}
+                </p>
+
+                <Link
+                  href={`/news/${post.id}`}
+                  className="inline-block mt-5 text-blue-600 hover:underline"
+                >
+                  Read more →
+                </Link>
+              </article>
+            ))}
+          </div>
+        )}
+      </section>
+
+      {/* ================= ABOUT ================= */}
+      <section className="max-w-3xl mx-auto text-center">
+        <h2 className="text-3xl font-bold mb-6">
+          About Surafino
+        </h2>
+
+        <p className="text-gray-700 dark:text-gray-400 leading-relaxed">
+          Surafino is a personal blog and news platform built with modern
+          web technologies. It allows publishing articles with rich content,
+          managing posts through a private admin panel, and supports
+          light and dark mode for better readability.
+        </p>
+      </section>
+    </main>
   );
 }
diff --git a/src/components/CookieBanner.tsx b/src/components/CookieBanner.tsx
new file mode 100644
index 0000000..d94b09d
--- /dev/null
+++ b/src/components/CookieBanner.tsx
@@ -0,0 +1,48 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+export default function CookieBanner() {
+  const [visible, setVisible] = useState(false);
+
+  useEffect(() => {
+    const accepted = document.cookie.includes("cookiesAccepted=true");
+    if (!accepted) setVisible(true);
+  }, []);
+
+  function acceptCookies() {
+    document.cookie = "cookiesAccepted=true; path=/; max-age=31536000";
+    setVisible(false);
+  }
+
+  if (!visible) return null;
+
+  return (
+    <div className="
+      fixed bottom-4 left-4 right-4
+      max-w-3xl mx-auto
+      rounded-xl p-4 shadow-lg
+      border
+      bg-white text-gray-800 border-gray-300
+      dark:bg-gray-800 dark:text-gray-200 dark:border-gray-700
+      flex flex-col md:flex-row gap-4
+      items-center justify-between
+    ">
+      <p className="text-sm">
+        This website uses cookies to store theme preferences.
+      </p>
+
+      <button
+        onClick={acceptCookies}
+        className="
+          px-5 py-2 rounded-lg
+          bg-blue-600 text-white
+          hover:bg-blue-700
+          transition
+        "
+      >
+        Accept
+      </button>
+    </div>
+  );
+}
diff --git a/src/components/Editor.tsx b/src/components/Editor.tsx
new file mode 100644
index 0000000..3a6a662
--- /dev/null
+++ b/src/components/Editor.tsx
@@ -0,0 +1,147 @@
+"use client";
+
+import { useEditor, EditorContent } from "@tiptap/react";
+import StarterKit from "@tiptap/starter-kit";
+import Image from "@tiptap/extension-image";
+import Link from "@tiptap/extension-link";
+import { Video } from "@/components/extensions/Video";
+
+export default function Editor({
+  content,
+  onChange,
+}: {
+  content: string;
+  onChange: (html: string) => void;
+}) {
+  const editor = useEditor({
+    extensions: [
+      StarterKit,
+      Image,
+      Link.configure({ openOnClick: false }),
+      Video,
+    ],
+    content,
+    immediatelyRender: false, // Next.js 16 SSR fix
+    onUpdate({ editor }) {
+      onChange(editor.getHTML());
+    },
+  });
+
+  if (!editor) return null;
+
+  async function upload(file: File) {
+    const data = new FormData();
+    data.append("file", file);
+
+    const res = await fetch("/api/upload", {
+      method: "POST",
+      body: data,
+    });
+
+    if (!res.ok) {
+      throw new Error("Upload failed");
+    }
+
+    return res.json() as Promise<{
+      url: string;
+      type: "image" | "video";
+    }>;
+  }
+
+  async function addImage(file: File) {
+    const { url } = await upload(file);
+    editor.chain().focus().setImage({ src: url }).run();
+  }
+
+  async function addVideo(file: File) {
+    const { url } = await upload(file);
+
+    editor
+      .chain()
+      .focus()
+      .insertContent([
+        {
+          type: "video",
+          attrs: {
+            src: url,
+            type: file.type,
+          },
+        },
+        { type: "paragraph" },
+      ])
+      .run();
+  }
+
+  return (
+    <div className="border rounded-lg bg-white dark:bg-gray-900">
+      {/* TOOLBAR */}
+      <div
+        className="
+          flex flex-wrap gap-2 p-2 border-b
+          bg-gray-100 text-gray-900
+          dark:bg-gray-800 dark:text-gray-100
+        "
+      >
+        <button
+          type="button"
+          onClick={() => editor.chain().focus().toggleBold().run()}
+          className="editor-btn"
+        >
+          Bold
+        </button>
+
+        <button
+          type="button"
+          onClick={() => editor.chain().focus().toggleItalic().run()}
+          className="editor-btn"
+        >
+          Italic
+        </button>
+
+        <button
+          type="button"
+          onClick={() =>
+            editor.chain().focus().toggleHeading({ level: 2 }).run()
+          }
+          className="editor-btn"
+        >
+          H2
+        </button>
+
+        <label className="editor-btn cursor-pointer">
+          Image
+          <input
+            type="file"
+            hidden
+            accept="image/*"
+            onChange={e =>
+              e.target.files && addImage(e.target.files[0])
+            }
+          />
+        </label>
+
+        <label className="editor-btn cursor-pointer">
+          Video
+          <input
+            type="file"
+            hidden
+            accept="video/mp4,video/webm"
+            onChange={e =>
+              e.target.files && addVideo(e.target.files[0])
+            }
+          />
+        </label>
+      </div>
+
+      {/* CONTENT */}
+      <EditorContent
+        editor={editor}
+        className="
+          p-4 min-h-[300px] outline-none
+          bg-white text-gray-900
+          dark:bg-gray-900 dark:text-gray-100
+        "
+      />
+    </div>
+  );
+}
diff --git a/src/components/Navbar.tsx b/src/components/Navbar.tsx
new file mode 100644
index 0000000..4989641
--- /dev/null
+++ b/src/components/Navbar.tsx
@@ -0,0 +1,116 @@
+"use client";
+
+import Link from "next/link";
+import { useEffect, useState } from "react";
+
+export default function Navbar() {
+  const [dark, setDark] = useState(false);
+  const [open, setOpen] = useState(false);
+
+  // Load theme from cookie on first render
+  useEffect(() => {
+    const match = document.cookie.match(/theme=(dark|light)/);
+    const isDark = match?.[1] === "dark";
+
+    setDark(isDark);
+    document.body.classList.toggle("dark", isDark);
+  }, []);
+
+  // Toggle theme and save to cookie
+  function toggleTheme() {
+    const newTheme = !dark;
+    setDark(newTheme);
+
+    document.body.classList.toggle("dark", newTheme);
+    document.cookie = `theme=${newTheme ? "dark" : "light"}; path=/; max-age=31536000`;
+  }
+
+  return (
+    <header
+      className="sticky top-0 z-50 border-b"
+      style={{
+        background: "var(--background)",
+        color: "var(--foreground)",
+        borderColor: dark ? "#2a2a2a" : "#e5e7eb",
+      }}
+    >
+      <nav className="max-w-7xl mx-auto px-6 py-4 flex items-center justify-between">
+        {/* LOGO */}
+        <Link
+          href="/"
+          className="text-xl font-bold tracking-wide"
+        >
+          Surafino
+        </Link>
+
+        {/* DESKTOP MENU */}
+        <div className="hidden md:flex items-center gap-8">
+          <Link
+            href="/"
+            className="hover:underline"
+          >
+            Home
+          </Link>
+
+          <Link
+            href="/news"
+            className="hover:underline"
+          >
+            News
+          </Link>
+
+          {/* THEME TOGGLE */}
+          <button
+            onClick={toggleTheme}
+            aria-label="Toggle theme"
+            className="p-2 rounded-lg border transition"
+            style={{
+              borderColor: dark ? "#3a3a3a" : "#d1d5db",
+            }}
+          >
+            {dark ? "☀️" : "🌙"}
+          </button>
+        </div>
+
+        {/* MOBILE BUTTON */}
+        <button
+          className="md:hidden text-2xl"
+          onClick={() => setOpen(!open)}
+          aria-label="Open menu"
+        >
+          ☰
+        </button>
+      </nav>
+
+      {/* MOBILE MENU */}
+      {open && (
+        <div
+          className="md:hidden px-6 py-4 space-y-4 border-t"
+          style={{
+            background: "var(--background)",
+            color: "var(--foreground)",
+            borderColor: dark ? "#2a2a2a" : "#e5e7eb",
+          }}
+        >
+          <Link href="/" onClick={() => setOpen(false)} className="block">
+            Home
+          </Link>
+
+          <Link href="/news" onClick={() => setOpen(false)} className="block">
+            News
+          </Link>
+
+          <button
+            onClick={() => {
+              toggleTheme();
+              setOpen(false);
+            }}
+            className="block"
+          >
+            {dark ? "Light mode" : "Dark mode"}
+          </button>
+        </div>
+      )}
+    </header>
+  );
+}
diff --git a/src/components/extensions/Video.ts b/src/components/extensions/Video.ts
new file mode 100644
index 0000000..06359ed
--- /dev/null
+++ b/src/components/extensions/Video.ts
@@ -0,0 +1,48 @@
+import { Node, mergeAttributes } from "@tiptap/core";
+
+export const Video = Node.create({
+  name: "video",
+
+  group: "block",
+
+  draggable: true,
+
+  addAttributes() {
+    return {
+      src: {
+        default: null,
+      },
+      type: {
+        default: "video/mp4",
+      },
+    };
+  },
+
+  parseHTML() {
+    return [
+      {
+        tag: "video",
+      },
+    ];
+  },
+
+  renderHTML({ HTMLAttributes }) {
+    return [
+      "video",
+      mergeAttributes(
+        {
+          controls: "true",
+          style: "max-width:100%;",
+        },
+        HTMLAttributes
+      ),
+      [
+        "source",
+        {
+          src: HTMLAttributes.src,
+          type: HTMLAttributes.type,
+        },
+      ],
+    ];
+  },
+});
diff --git a/src/lib/db.ts b/src/lib/db.ts
new file mode 100644
index 0000000..e0a25ec
--- /dev/null
+++ b/src/lib/db.ts
@@ -0,0 +1,24 @@
+import mariadb from "mariadb";
+
+declare global {
+  // eslint-disable-next-line no-var
+  var mariadbPool: mariadb.Pool | undefined;
+}
+
+export const pool =
+  global.mariadbPool ??
+  mariadb.createPool({
+    host: process.env.DB_HOST,
+    port: Number(process.env.DB_PORT),
+    user: process.env.DB_USER,
+    password: process.env.DB_PASSWORD,
+    database: process.env.DB_NAME,
+
+    connectionLimit: 5,
+    connectTimeout: 5000,
+    acquireTimeout: 5000,
+  });
+
+if (!global.mariadbPool) {
+  global.mariadbPool = pool;
+}
diff --git a/src/middleware.ts b/src/middleware.ts
new file mode 100644
index 0000000..4e2f1a1
--- /dev/null
+++ b/src/middleware.ts
@@ -0,0 +1,34 @@
+import { NextResponse } from "next/server";
+import type { NextRequest } from "next/server";
+
+export function middleware(req: NextRequest) {
+  const token = req.cookies.get("token")?.value;
+  const { pathname } = req.nextUrl;
+
+  // Chránené routy
+  if (pathname.startsWith("/manager")) {
+    // povolíme iba login stránku bez tokenu
+    if (!token && pathname !== "/manager/login") {
+      const loginUrl = new URL(
+        "/manager/login",
+        req.url
+      );
+      return NextResponse.redirect(loginUrl);
+    }
+
+    // ak je prihlásený a ide na login → hoď ho do managera
+    if (token && pathname === "/manager/login") {
+      const managerUrl = new URL(
+        "/manager",
+        req.url
+      );
+      return NextResponse.redirect(managerUrl);
+    }
+  }
+
+  return NextResponse.next();
+}
+
+export const config = {
+  matcher: ["/manager/:path*"],
+};