create-smoodly-app 0.0.21 → 0.0.23

package/README.md

@@ -30,7 +30,8 @@ sign in. Spec: `docs/superpowers/specs/2026-09-04-create-smoodly-app-design.md`.
    so an app that keeps its own tables in Supabase gives them a project of
    their own, or takes Smoodly Cloud for content (DESIGN.md §1).
 4. The first editor: pick an existing Auth user or create one (email +
-   password). The `editors` row is written with role `owner`.
+   password). The `members` row is written with role `owner`, the email
+   beside the id.
    If `@` does not appear when you type it (macOS, `@` on Option+2 with the
    terminal's "Option as Meta" setting on), paste the address or pass
    `--editor-email`.
@@ -174,7 +175,7 @@ scaffolded in hosted mode against the repo stack and `next build` only.
   (done 2026-09-05, throwaway project, `sb_secret_` + `sb_publishable_`):
   `db push` of the template migration printed no NOTICE, the CLI listed and
   created the first editor through the GoTrue admin API with the secret key
-  as the sole `apikey`, the `editors` row landed with role `owner`, `next
+  as the sole `apikey`, the `members` row landed with role `owner`, `next
   build` passed, `/admin` served the shell, and a password sign-in with the
   publishable key returned a session. Caveat: the link step ran by hand with
   an explicit `--project-ref` (see the next-but-one item); the CLI's own

package/dist/index.js

@@ -82,7 +82,7 @@ async function ensureEditor(client, ask) {
   const existing = await client.listUsers();
   const choice = await ask(existing);
   const user = choice.kind === "pick" ? choice.user : await client.createUser(choice.email, choice.password);
-  await client.upsertEditor(user.id);
+  await client.upsertEditor(user.id, user.email);
   return user;
 }
 function clientFor(keys) {
@@ -106,9 +106,9 @@ function supabaseEditorClient(keys) {
       if (res.error) throw fail("creating the Auth user", res.error.message);
       return { id: res.data.user.id, email: res.data.user.email ?? null };
     },
-    async upsertEditor(userId) {
-      const res = await db.from("editors").upsert({ user_id: userId, role: "owner" }, { onConflict: "space_id,user_id" });
-      if (res.error) throw fail("inserting the editors row", res.error.message);
+    async upsertEditor(userId, email) {
+      const res = await db.from("members").upsert({ user_id: userId, email, role: "owner" }, { onConflict: "space_id,user_id" });
+      if (res.error) throw fail("inserting the members row", res.error.message);
     }
   };
 }
@@ -503,7 +503,7 @@ ${renderEnv(keys).split("\n").filter((l) => !l.startsWith("#")).join("\n").trimE
   const editorLines = [
     "Create the first editor: add a user in Supabase Studio (Authentication \u2192 Users), then in the SQL editor:",
     "",
-    "    insert into editors (user_id, role) values ('<the user id>', 'owner');"
+    "    insert into members (user_id, email, role) values ('<the user id>', '<the email>', 'owner');"
   ].join("\n");
   switch (step) {
     case "supabaseLocal":
@@ -518,7 +518,7 @@ ${renderEnv(keys).split("\n").filter((l) => !l.startsWith("#")).join("\n").trimE
       return [envLines, "", editorLines].join("\n");
     case "ensureEditor":
       return [
-        "If the editors table is missing, apply the migration first: `supabase db push` (hosted) or `supabase start` (local).",
+        "If the members table is missing, apply the migration first: `supabase db push` (hosted) or `supabase start` (local).",
         "",
         editorLines
       ].join("\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/blank/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.21"
+    "smoodly": "0.0.23"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/blank/smoodly/server.ts

@@ -1,4 +1,4 @@
-// Server-only glue: the client, both stores, the site layer and the
+// Server-only glue: the client, the stores, the site layer and the
 // renderer, constructed lazily so `next build` doesn't need env vars at
 // import time. The env shape is the package's (SMOODLY_*); whether the
 // secret is a service-role key or a cloud write key is invisible here.
@@ -9,7 +9,7 @@
 // admin route enters it from config.ts — so nothing here may read the
 // config at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
 } from "smoodly";
 import { supabaseAdminAuth, type AdminAuth, type AuthConfig } from "smoodly/admin/next";
 import { createPageRenderer, createSmoodlyQueries, type PageRegistration } from "smoodly/next";
@@ -19,7 +19,7 @@ import { collections, config, elements, sections, globals } from "./config";
 type Renderer = ReturnType<typeof createPageRenderer>;
 type Queries = ReturnType<typeof createSmoodlyQueries<typeof collections, typeof globals>>;
 type Bound = {
-  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
+  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; members: SupabaseMemberStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
 };
 
 let cached: Bound | null = null;
@@ -41,6 +41,8 @@ function bound(): Bound {
   });
   // The media library: rows in `assets`, bytes in the public `media` bucket.
   const assets = new SupabaseAssetStore(db);
+  // The admission table, read by the Members page (spec 2026-09-25 §4).
+  const members = new SupabaseMemberStore(db);
   const auth = supabaseAdminAuth({ authUrl: env.authUrl, authKey: env.authKey, db });
   // Shadows the exported `stores` below on purpose: `createSmoodlySite`
   // takes this local closure, not the export, so it never re-enters `bound()`.
@@ -58,13 +60,13 @@ function bound(): Bound {
   });
   // The read API (spec 2026-09-11): typed by the registry, draft-aware, cached under tags the admin expires.
   const q = createSmoodlyQueries({ site, collections, globals });
-  cached = { db, pages, entries, assets, auth, site, renderer, q };
+  cached = { db, pages, entries, assets, members, auth, site, renderer, q };
   return cached;
 }
 
 export function stores() {
-  const { pages, entries, assets } = bound();
-  return { pages, entries, assets };
+  const { pages, entries, assets, members } = bound();
+  return { pages, entries, assets, members };
 }
 
 /** The server-side client (seed script, one-off admin tasks). */

package/templates/blank/supabase/migrations/00000000000000_smoodly.sql

@@ -227,13 +227,17 @@ alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
 
--- ── Cloud state (spec 2026-09-04 §1): three ordinary tables, shipped
--- for everyone with ONE definition. Self-host fills them by hand or
--- leaves them empty; smoodly.io writes rows with the service role.
--- There is never cloud-only SQL on a content database.
-create table if not exists "editors" (
+-- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
+-- tables, shipped for everyone with ONE definition. Self-host fills them
+-- by hand or leaves them empty; smoodly.io writes rows with the service
+-- role. There is never cloud-only SQL on a content database.
+-- members: who may open /admin for a space (spec 2026-09-25 §1–§2). The
+-- email is stored so the Members page needs no Auth lookup — the auth
+-- project is not the content project in the cloud.
+create table if not exists "members" (
   "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
   "user_id" uuid not null,
+  "email" text,
   "role" text not null default 'editor',
   primary key ("space_id", "user_id")
 );
@@ -245,14 +249,18 @@ create table if not exists "space_keys" (
   "revoked_at" timestamptz
 );
 
-create table if not exists "space_caps" (
+-- spaces: the control plane's row for a space (spec 2026-09-25 §3). No
+-- row = self-host: no cap, members managed in /admin. console_url set =
+-- smoodly.io manages the members and /admin links there.
+create table if not exists "spaces" (
   "space_id" uuid primary key,
-  "row_cap" integer not null
+  "row_cap" integer,
+  "console_url" text
 );
 
-alter table "editors" enable row level security;
+alter table "members" enable row level security;
 alter table "space_keys" enable row level security;
-alter table "space_caps" enable row level security;
+alter table "spaces" enable row level security;
 
 -- ── Claim readers. The two lookups run as definer so they can read the
 -- service-role-only tables from inside a policy; search_path is pinned.
@@ -271,7 +279,7 @@ $$;
 
 create or replace function "smoodly_space_row_cap"() returns integer
 language sql stable security definer set search_path = public as $$
-  select c."row_cap" from "space_caps" c where c."space_id" = "smoodly_current_space"();
+  select c."row_cap" from "spaces" c where c."space_id" = "smoodly_current_space"();
 $$;
 
 -- ── Triggers. A key's claim wins over whatever the insert said, so an
@@ -288,7 +296,7 @@ begin
 end;
 $$;
 
--- Per table, per space. No space_caps row = no cap (self-host). Trigger
+-- Per table, per space. No spaces row, or a null cap = no cap (self-host). Trigger
 -- a_ (smoodly_set_space) runs first, so new.space_id already equals the
 -- current space for a keyed insert; smoodly_space_row_cap() reads the
 -- current space itself, so this never needs the row's space_id as an
@@ -366,8 +374,8 @@ drop trigger if exists "smoodly_a_set_space" on "assets";
 create trigger "smoodly_a_set_space" before insert on "assets"
   for each row execute function "smoodly_set_space"();
 
-drop trigger if exists "smoodly_a_set_space" on "editors";
-create trigger "smoodly_a_set_space" before insert on "editors"
+drop trigger if exists "smoodly_a_set_space" on "members";
+create trigger "smoodly_a_set_space" before insert on "members"
   for each row execute function "smoodly_set_space"();
 
 drop trigger if exists "smoodly_b_row_cap" on "pages";
@@ -483,11 +491,15 @@ drop policy if exists "smoodly_read" on "assets";
 create policy "smoodly_read" on "assets" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and "status" = 'ready');
 
-drop policy if exists "smoodly_write" on "editors";
-create policy "smoodly_write" on "editors" for all
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
   with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "spaces";
+create policy "smoodly_read" on "spaces" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.21",
+    "smoodly": "0.0.23",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/smoodly/server.ts

@@ -1,4 +1,4 @@
-// Server-only glue: the client, both stores, the site layer and the
+// Server-only glue: the client, the stores, the site layer and the
 // renderer, constructed lazily so `next build` doesn't need env vars at
 // import time. The env shape is the package's (SMOODLY_*); whether the
 // secret is a service-role key or a cloud write key is invisible here.
@@ -9,7 +9,7 @@
 // admin route enters it from config.ts — so nothing here may read the
 // config at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
 } from "smoodly";
 import { supabaseAdminAuth, type AdminAuth, type AuthConfig } from "smoodly/admin/next";
 import { createPageRenderer, createSmoodlyQueries, type PageRegistration } from "smoodly/next";
@@ -20,7 +20,7 @@ import { collections, config, elements, sections, globals } from "./config";
 type Renderer = ReturnType<typeof createPageRenderer>;
 type Queries = ReturnType<typeof createSmoodlyQueries<typeof collections, typeof globals>>;
 type Bound = {
-  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
+  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; members: SupabaseMemberStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
 };
 
 let cached: Bound | null = null;
@@ -42,6 +42,8 @@ function bound(): Bound {
   });
   // The media library: rows in `assets`, bytes in the public `media` bucket.
   const assets = new SupabaseAssetStore(db);
+  // The admission table, read by the Members page (spec 2026-09-25 §4).
+  const members = new SupabaseMemberStore(db);
   const auth = supabaseAdminAuth({ authUrl: env.authUrl, authKey: env.authKey, db });
   // Shadows the exported `stores` below on purpose: `createSmoodlySite`
   // takes this local closure, not the export, so it never re-enters `bound()`.
@@ -59,13 +61,13 @@ function bound(): Bound {
   });
   // The read API (spec 2026-09-11): typed by the registry, draft-aware, cached under tags the admin expires.
   const q = createSmoodlyQueries({ site, collections, globals });
-  cached = { db, pages, entries, assets, auth, site, renderer, q };
+  cached = { db, pages, entries, assets, members, auth, site, renderer, q };
   return cached;
 }
 
 export function stores() {
-  const { pages, entries, assets } = bound();
-  return { pages, entries, assets };
+  const { pages, entries, assets, members } = bound();
+  return { pages, entries, assets, members };
 }
 
 /** The server-side client (seed script, one-off admin tasks). */

package/templates/blank-intl/supabase/migrations/00000000000000_smoodly.sql

@@ -227,13 +227,17 @@ alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
 
--- ── Cloud state (spec 2026-09-04 §1): three ordinary tables, shipped
--- for everyone with ONE definition. Self-host fills them by hand or
--- leaves them empty; smoodly.io writes rows with the service role.
--- There is never cloud-only SQL on a content database.
-create table if not exists "editors" (
+-- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
+-- tables, shipped for everyone with ONE definition. Self-host fills them
+-- by hand or leaves them empty; smoodly.io writes rows with the service
+-- role. There is never cloud-only SQL on a content database.
+-- members: who may open /admin for a space (spec 2026-09-25 §1–§2). The
+-- email is stored so the Members page needs no Auth lookup — the auth
+-- project is not the content project in the cloud.
+create table if not exists "members" (
   "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
   "user_id" uuid not null,
+  "email" text,
   "role" text not null default 'editor',
   primary key ("space_id", "user_id")
 );
@@ -245,14 +249,18 @@ create table if not exists "space_keys" (
   "revoked_at" timestamptz
 );
 
-create table if not exists "space_caps" (
+-- spaces: the control plane's row for a space (spec 2026-09-25 §3). No
+-- row = self-host: no cap, members managed in /admin. console_url set =
+-- smoodly.io manages the members and /admin links there.
+create table if not exists "spaces" (
   "space_id" uuid primary key,
-  "row_cap" integer not null
+  "row_cap" integer,
+  "console_url" text
 );
 
-alter table "editors" enable row level security;
+alter table "members" enable row level security;
 alter table "space_keys" enable row level security;
-alter table "space_caps" enable row level security;
+alter table "spaces" enable row level security;
 
 -- ── Claim readers. The two lookups run as definer so they can read the
 -- service-role-only tables from inside a policy; search_path is pinned.
@@ -271,7 +279,7 @@ $$;
 
 create or replace function "smoodly_space_row_cap"() returns integer
 language sql stable security definer set search_path = public as $$
-  select c."row_cap" from "space_caps" c where c."space_id" = "smoodly_current_space"();
+  select c."row_cap" from "spaces" c where c."space_id" = "smoodly_current_space"();
 $$;
 
 -- ── Triggers. A key's claim wins over whatever the insert said, so an
@@ -288,7 +296,7 @@ begin
 end;
 $$;
 
--- Per table, per space. No space_caps row = no cap (self-host). Trigger
+-- Per table, per space. No spaces row, or a null cap = no cap (self-host). Trigger
 -- a_ (smoodly_set_space) runs first, so new.space_id already equals the
 -- current space for a keyed insert; smoodly_space_row_cap() reads the
 -- current space itself, so this never needs the row's space_id as an
@@ -366,8 +374,8 @@ drop trigger if exists "smoodly_a_set_space" on "assets";
 create trigger "smoodly_a_set_space" before insert on "assets"
   for each row execute function "smoodly_set_space"();
 
-drop trigger if exists "smoodly_a_set_space" on "editors";
-create trigger "smoodly_a_set_space" before insert on "editors"
+drop trigger if exists "smoodly_a_set_space" on "members";
+create trigger "smoodly_a_set_space" before insert on "members"
   for each row execute function "smoodly_set_space"();
 
 drop trigger if exists "smoodly_b_row_cap" on "pages";
@@ -483,11 +491,15 @@ drop policy if exists "smoodly_read" on "assets";
 create policy "smoodly_read" on "assets" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and "status" = 'ready');
 
-drop policy if exists "smoodly_write" on "editors";
-create policy "smoodly_write" on "editors" for all
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
   with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "spaces";
+create policy "smoodly_read" on "spaces" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";

package/templates/lorem/README.md

@@ -27,7 +27,7 @@ The Lorem Co. site the installer seeded is a tour of the features:
 
 - **Home** — a locked hero (fields only; nobody adds, moves or removes it), then a freeform body: image and text (richtext), the global **quote** placed from the picker's Global group, points (a list with a minimum and a maximum, an object per item), favourite articles (an editor-picked list of refs).
 - **Articles** — a fixed page at the collection's own URL segment, so it is the collection's index: the hero is the editor's, the grid is code fetching published articles.
-- **Company / About** — a folder and a page under it (the breadcrumb), the same body sections, plus people.
+- **Company / About** — a path and a page under it (the breadcrumb), the same body sections, plus people.
 - **An article** — a collection entry with a richtext body, tags (a localized list), a date and an author ref; versioned, so every save is a snapshot.
 - **Global content** — the header every page renders through `components/PageFrame.tsx`, the footer the layout renders, the contact details the footer reads, the quote pages place.
 

package/templates/lorem/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.21"
+    "smoodly": "0.0.23"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/lorem/smoodly/server.ts

@@ -1,4 +1,4 @@
-// Server-only glue: the client, both stores, the site layer and the
+// Server-only glue: the client, the stores, the site layer and the
 // renderer, constructed lazily so `next build` doesn't need env vars at
 // import time. The env shape is the package's (SMOODLY_*); whether the
 // secret is a service-role key or a cloud write key is invisible here.
@@ -9,7 +9,7 @@
 // admin route enters it from config.ts — so nothing here may read the
 // config at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
 } from "smoodly";
 import { supabaseAdminAuth, type AdminAuth, type AuthConfig } from "smoodly/admin/next";
 import { createPageRenderer, createSmoodlyQueries, type PageRegistration } from "smoodly/next";
@@ -19,7 +19,7 @@ import { collections, config, elements, sections, globals } from "./config";
 type Renderer = ReturnType<typeof createPageRenderer>;
 type Queries = ReturnType<typeof createSmoodlyQueries<typeof collections, typeof globals>>;
 type Bound = {
-  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
+  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; members: SupabaseMemberStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
 };
 
 let cached: Bound | null = null;
@@ -41,6 +41,8 @@ function bound(): Bound {
   });
   // The media library: rows in `assets`, bytes in the public `media` bucket.
   const assets = new SupabaseAssetStore(db);
+  // The admission table, read by the Members page (spec 2026-09-25 §4).
+  const members = new SupabaseMemberStore(db);
   const auth = supabaseAdminAuth({ authUrl: env.authUrl, authKey: env.authKey, db });
   // Shadows the exported `stores` below on purpose: `createSmoodlySite`
   // takes this local closure, not the export, so it never re-enters `bound()`.
@@ -58,13 +60,13 @@ function bound(): Bound {
   });
   // The read API (spec 2026-09-11): typed by the registry, draft-aware, cached under tags the admin expires.
   const q = createSmoodlyQueries({ site, collections, globals });
-  cached = { db, pages, entries, assets, auth, site, renderer, q };
+  cached = { db, pages, entries, assets, members, auth, site, renderer, q };
   return cached;
 }
 
 export function stores() {
-  const { pages, entries, assets } = bound();
-  return { pages, entries, assets };
+  const { pages, entries, assets, members } = bound();
+  return { pages, entries, assets, members };
 }
 
 /** The server-side client (seed script, one-off admin tasks). */

package/templates/lorem/supabase/migrations/00000000000000_smoodly.sql

@@ -227,13 +227,17 @@ alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
 
--- ── Cloud state (spec 2026-09-04 §1): three ordinary tables, shipped
--- for everyone with ONE definition. Self-host fills them by hand or
--- leaves them empty; smoodly.io writes rows with the service role.
--- There is never cloud-only SQL on a content database.
-create table if not exists "editors" (
+-- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
+-- tables, shipped for everyone with ONE definition. Self-host fills them
+-- by hand or leaves them empty; smoodly.io writes rows with the service
+-- role. There is never cloud-only SQL on a content database.
+-- members: who may open /admin for a space (spec 2026-09-25 §1–§2). The
+-- email is stored so the Members page needs no Auth lookup — the auth
+-- project is not the content project in the cloud.
+create table if not exists "members" (
   "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
   "user_id" uuid not null,
+  "email" text,
   "role" text not null default 'editor',
   primary key ("space_id", "user_id")
 );
@@ -245,14 +249,18 @@ create table if not exists "space_keys" (
   "revoked_at" timestamptz
 );
 
-create table if not exists "space_caps" (
+-- spaces: the control plane's row for a space (spec 2026-09-25 §3). No
+-- row = self-host: no cap, members managed in /admin. console_url set =
+-- smoodly.io manages the members and /admin links there.
+create table if not exists "spaces" (
   "space_id" uuid primary key,
-  "row_cap" integer not null
+  "row_cap" integer,
+  "console_url" text
 );
 
-alter table "editors" enable row level security;
+alter table "members" enable row level security;
 alter table "space_keys" enable row level security;
-alter table "space_caps" enable row level security;
+alter table "spaces" enable row level security;
 
 -- ── Claim readers. The two lookups run as definer so they can read the
 -- service-role-only tables from inside a policy; search_path is pinned.
@@ -271,7 +279,7 @@ $$;
 
 create or replace function "smoodly_space_row_cap"() returns integer
 language sql stable security definer set search_path = public as $$
-  select c."row_cap" from "space_caps" c where c."space_id" = "smoodly_current_space"();
+  select c."row_cap" from "spaces" c where c."space_id" = "smoodly_current_space"();
 $$;
 
 -- ── Triggers. A key's claim wins over whatever the insert said, so an
@@ -288,7 +296,7 @@ begin
 end;
 $$;
 
--- Per table, per space. No space_caps row = no cap (self-host). Trigger
+-- Per table, per space. No spaces row, or a null cap = no cap (self-host). Trigger
 -- a_ (smoodly_set_space) runs first, so new.space_id already equals the
 -- current space for a keyed insert; smoodly_space_row_cap() reads the
 -- current space itself, so this never needs the row's space_id as an
@@ -366,8 +374,8 @@ drop trigger if exists "smoodly_a_set_space" on "assets";
 create trigger "smoodly_a_set_space" before insert on "assets"
   for each row execute function "smoodly_set_space"();
 
-drop trigger if exists "smoodly_a_set_space" on "editors";
-create trigger "smoodly_a_set_space" before insert on "editors"
+drop trigger if exists "smoodly_a_set_space" on "members";
+create trigger "smoodly_a_set_space" before insert on "members"
   for each row execute function "smoodly_set_space"();
 
 drop trigger if exists "smoodly_b_row_cap" on "pages";
@@ -483,11 +491,15 @@ drop policy if exists "smoodly_read" on "assets";
 create policy "smoodly_read" on "assets" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and "status" = 'ready');
 
-drop policy if exists "smoodly_write" on "editors";
-create policy "smoodly_write" on "editors" for all
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
   with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "spaces";
+create policy "smoodly_read" on "spaces" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";

package/templates/lorem-intl/README.md

@@ -34,7 +34,7 @@ The Lorem Co. site the installer seeded is a tour of the features:
 
 - **Home** — a locked hero (fields only; nobody adds, moves or removes it), then a freeform body: image and text (richtext), the global **quote** placed from the picker's Global group, points (a list with a minimum and a maximum, an object per item), favourite articles (an editor-picked list of refs).
 - **Articles** — a fixed page at the collection's own URL segment, so it is the collection's index: the hero is the editor's, the grid is code fetching published articles.
-- **Company / About** — a folder and a page under it (the breadcrumb), the same body sections, plus people.
+- **Company / About** — a path and a page under it (the breadcrumb), the same body sections, plus people.
 - **An article** — a collection entry with a richtext body, tags (a localized list), a date and an author ref; versioned, so every save is a snapshot.
 - **Global content** — the header every page renders through `components/PageFrame.tsx`, the footer the layout renders, the contact details the footer reads, the quote pages place.
 

package/templates/lorem-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.21",
+    "smoodly": "0.0.23",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/lorem-intl/smoodly/server.ts

@@ -1,4 +1,4 @@
-// Server-only glue: the client, both stores, the site layer and the
+// Server-only glue: the client, the stores, the site layer and the
 // renderer, constructed lazily so `next build` doesn't need env vars at
 // import time. The env shape is the package's (SMOODLY_*); whether the
 // secret is a service-role key or a cloud write key is invisible here.
@@ -9,7 +9,7 @@
 // admin route enters it from config.ts — so nothing here may read the
 // config at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type SmoodlySite,
 } from "smoodly";
 import { supabaseAdminAuth, type AdminAuth, type AuthConfig } from "smoodly/admin/next";
 import { createPageRenderer, createSmoodlyQueries, type PageRegistration } from "smoodly/next";
@@ -20,7 +20,7 @@ import { collections, config, elements, sections, globals } from "./config";
 type Renderer = ReturnType<typeof createPageRenderer>;
 type Queries = ReturnType<typeof createSmoodlyQueries<typeof collections, typeof globals>>;
 type Bound = {
-  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
+  db: SupabaseClient; pages: SupabasePageStore; entries: SupabaseEntryStore; assets: SupabaseAssetStore; members: SupabaseMemberStore; auth: AdminAuth; site: SmoodlySite; renderer: Renderer; q: Queries;
 };
 
 let cached: Bound | null = null;
@@ -42,6 +42,8 @@ function bound(): Bound {
   });
   // The media library: rows in `assets`, bytes in the public `media` bucket.
   const assets = new SupabaseAssetStore(db);
+  // The admission table, read by the Members page (spec 2026-09-25 §4).
+  const members = new SupabaseMemberStore(db);
   const auth = supabaseAdminAuth({ authUrl: env.authUrl, authKey: env.authKey, db });
   // Shadows the exported `stores` below on purpose: `createSmoodlySite`
   // takes this local closure, not the export, so it never re-enters `bound()`.
@@ -59,13 +61,13 @@ function bound(): Bound {
   });
   // The read API (spec 2026-09-11): typed by the registry, draft-aware, cached under tags the admin expires.
   const q = createSmoodlyQueries({ site, collections, globals });
-  cached = { db, pages, entries, assets, auth, site, renderer, q };
+  cached = { db, pages, entries, assets, members, auth, site, renderer, q };
   return cached;
 }
 
 export function stores() {
-  const { pages, entries, assets } = bound();
-  return { pages, entries, assets };
+  const { pages, entries, assets, members } = bound();
+  return { pages, entries, assets, members };
 }
 
 /** The server-side client (seed script, one-off admin tasks). */

package/templates/lorem-intl/supabase/migrations/00000000000000_smoodly.sql

@@ -227,13 +227,17 @@ alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
 
--- ── Cloud state (spec 2026-09-04 §1): three ordinary tables, shipped
--- for everyone with ONE definition. Self-host fills them by hand or
--- leaves them empty; smoodly.io writes rows with the service role.
--- There is never cloud-only SQL on a content database.
-create table if not exists "editors" (
+-- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
+-- tables, shipped for everyone with ONE definition. Self-host fills them
+-- by hand or leaves them empty; smoodly.io writes rows with the service
+-- role. There is never cloud-only SQL on a content database.
+-- members: who may open /admin for a space (spec 2026-09-25 §1–§2). The
+-- email is stored so the Members page needs no Auth lookup — the auth
+-- project is not the content project in the cloud.
+create table if not exists "members" (
   "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
   "user_id" uuid not null,
+  "email" text,
   "role" text not null default 'editor',
   primary key ("space_id", "user_id")
 );
@@ -245,14 +249,18 @@ create table if not exists "space_keys" (
   "revoked_at" timestamptz
 );
 
-create table if not exists "space_caps" (
+-- spaces: the control plane's row for a space (spec 2026-09-25 §3). No
+-- row = self-host: no cap, members managed in /admin. console_url set =
+-- smoodly.io manages the members and /admin links there.
+create table if not exists "spaces" (
   "space_id" uuid primary key,
-  "row_cap" integer not null
+  "row_cap" integer,
+  "console_url" text
 );
 
-alter table "editors" enable row level security;
+alter table "members" enable row level security;
 alter table "space_keys" enable row level security;
-alter table "space_caps" enable row level security;
+alter table "spaces" enable row level security;
 
 -- ── Claim readers. The two lookups run as definer so they can read the
 -- service-role-only tables from inside a policy; search_path is pinned.
@@ -271,7 +279,7 @@ $$;
 
 create or replace function "smoodly_space_row_cap"() returns integer
 language sql stable security definer set search_path = public as $$
-  select c."row_cap" from "space_caps" c where c."space_id" = "smoodly_current_space"();
+  select c."row_cap" from "spaces" c where c."space_id" = "smoodly_current_space"();
 $$;
 
 -- ── Triggers. A key's claim wins over whatever the insert said, so an
@@ -288,7 +296,7 @@ begin
 end;
 $$;
 
--- Per table, per space. No space_caps row = no cap (self-host). Trigger
+-- Per table, per space. No spaces row, or a null cap = no cap (self-host). Trigger
 -- a_ (smoodly_set_space) runs first, so new.space_id already equals the
 -- current space for a keyed insert; smoodly_space_row_cap() reads the
 -- current space itself, so this never needs the row's space_id as an
@@ -366,8 +374,8 @@ drop trigger if exists "smoodly_a_set_space" on "assets";
 create trigger "smoodly_a_set_space" before insert on "assets"
   for each row execute function "smoodly_set_space"();
 
-drop trigger if exists "smoodly_a_set_space" on "editors";
-create trigger "smoodly_a_set_space" before insert on "editors"
+drop trigger if exists "smoodly_a_set_space" on "members";
+create trigger "smoodly_a_set_space" before insert on "members"
   for each row execute function "smoodly_set_space"();
 
 drop trigger if exists "smoodly_b_row_cap" on "pages";
@@ -483,11 +491,15 @@ drop policy if exists "smoodly_read" on "assets";
 create policy "smoodly_read" on "assets" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and "status" = 'ready');
 
-drop policy if exists "smoodly_write" on "editors";
-create policy "smoodly_write" on "editors" for all
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
   with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "spaces";
+create policy "smoodly_read" on "spaces" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";