create-smoodly-app 0.0.23 → 0.0.25

package/README.md

@@ -30,7 +30,7 @@ sign in. Spec: `docs/superpowers/specs/2026-09-04-create-smoodly-app-design.md`.
    so an app that keeps its own tables in Supabase gives them a project of
    their own, or takes Smoodly Cloud for content (DESIGN.md §1).
 4. The first editor: pick an existing Auth user or create one (email +
-   password). The `members` row is written with role `owner`, the email
+   password). The `members` row is written with role `admin`, the email
    beside the id.
    If `@` does not appear when you type it (macOS, `@` on Option+2 with the
    terminal's "Option as Meta" setting on), paste the address or pass
@@ -175,7 +175,7 @@ scaffolded in hosted mode against the repo stack and `next build` only.
   (done 2026-09-05, throwaway project, `sb_secret_` + `sb_publishable_`):
   `db push` of the template migration printed no NOTICE, the CLI listed and
   created the first editor through the GoTrue admin API with the secret key
-  as the sole `apikey`, the `members` row landed with role `owner`, `next
+  as the sole `apikey`, the `members` row landed with role `admin`, `next
   build` passed, `/admin` served the shell, and a password sign-in with the
   publishable key returned a session. Caveat: the link step ran by hand with
   an explicit `--project-ref` (see the next-but-one item); the CLI's own

package/dist/index.js

@@ -82,7 +82,7 @@ async function ensureEditor(client, ask) {
   const existing = await client.listUsers();
   const choice = await ask(existing);
   const user = choice.kind === "pick" ? choice.user : await client.createUser(choice.email, choice.password);
-  await client.upsertEditor(user.id, user.email);
+  await client.upsertEditor(user.id, user.email, "admin");
   return user;
 }
 function clientFor(keys) {
@@ -106,8 +106,8 @@ function supabaseEditorClient(keys) {
       if (res.error) throw fail("creating the Auth user", res.error.message);
       return { id: res.data.user.id, email: res.data.user.email ?? null };
     },
-    async upsertEditor(userId, email) {
-      const res = await db.from("members").upsert({ user_id: userId, email, role: "owner" }, { onConflict: "space_id,user_id" });
+    async upsertEditor(userId, email, role) {
+      const res = await db.from("members").upsert({ user_id: userId, email, role }, { onConflict: "space_id,user_id" });
       if (res.error) throw fail("inserting the members row", res.error.message);
     }
   };
@@ -503,7 +503,7 @@ ${renderEnv(keys).split("\n").filter((l) => !l.startsWith("#")).join("\n").trimE
   const editorLines = [
     "Create the first editor: add a user in Supabase Studio (Authentication \u2192 Users), then in the SQL editor:",
     "",
-    "    insert into members (user_id, email, role) values ('<the user id>', '<the email>', 'owner');"
+    "    insert into members (user_id, email, role) values ('<the user id>', '<the email>', 'admin');"
   ].join("\n");
   switch (step) {
     case "supabaseLocal":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.23",
+  "version": "0.0.25",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/blank/AGENTS.md

@@ -12,11 +12,12 @@ where things are.
   `elements.ts`, `collections.ts`, `globals.ts`) and `smoodly/config.ts`
   is the one registry. A component that is not registered does not exist
   for the admin.
-- **A new collection is a new migration.** Write its view with
-  `collectionSQL` from `smoodly` into a new file under
-  `supabase/migrations/`, then apply it: `supabase db push` (hosted) or
-  `supabase db reset` (local). The admin cannot list a collection whose
-  view is missing.
+- **After a new collection or a `smoodly` upgrade, run `npx smoodly migrate`**
+  and apply what it writes (`supabase db push` hosted, `supabase db reset`
+  local). It copies the core schema files the package ships and writes a
+  read view and order index per collection. Never edit a file it wrote.
+  The admin reads the base tables, so it lists a collection either way;
+  the view is for SQL and PostgREST readers, the index for `order`.
 - **Seed through the stores.** `scripts/seed.ts` is starter content,
   written through the page and entry stores, never raw SQL. It is
   idempotent; run it with `npm run seed`.

package/templates/blank/README.md

@@ -40,14 +40,12 @@ editor's "/" menu.
 Copy the `posts` block in `smoodly/collections.ts`, add the new
 collection to `collections`, and write its entry page by copying
 `components/pages/Post.tsx` (register it in `config.ts` under `pages`).
-Then create a migration with its view:
+Then write its read view and order index and apply them:
 
-    import { collectionSQL } from "smoodly";
-    import { people } from "./smoodly/collections";
-    console.log(collectionSQL(people));
+    npx smoodly migrate
+    supabase db push        # hosted; `supabase db reset` for the local stack
 
-Save the output as `supabase/migrations/<timestamp>_people.sql` and apply
-it with `supabase db push` (hosted) or `supabase db reset` (local).
+The same command brings the core schema forward after a `smoodly` upgrade.
 
 ## Add a global item
 

package/templates/blank/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.23"
+    "smoodly": "0.0.25"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/blank/smoodly/collections.ts

@@ -4,10 +4,9 @@ import { text } from "./toolsets";
 // A collection: structured content with its own admin list, served at
 // `path` by its entry page (components/pages/Post.tsx). Fields marked
 // .localized() are stored per locale; the rest are shared across
-// locales. To add a
-// collection: copy this block, add it to `collections`, write its view
-// into a new migration with `collectionSQL` from "smoodly", and apply
-// it (supabase db push, or supabase db reset locally).
+// locales. To add a collection: copy this block, add it to
+// `collections`, run `npx smoodly migrate` and apply the file it writes
+// (supabase db push, or supabase db reset locally).
 export const posts = smoodly.collection({
   name: "posts",
   title: "Posts",

package/templates/blank/supabase/migrations/{00000000000000_smoodly.sql → 20260926120000_smoodly_v1.sql}

@@ -1,3 +1,7 @@
+-- Smoodly core schema, version 1 (docs/superpowers/specs/2026-09-26-schema-migrations-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+
 set client_min_messages = warning;
 
 -- The space a request acts in: the key's claim in Smoodly Cloud, the
@@ -217,6 +221,15 @@ $$;
 -- to anything but a write key. The generated per-collection views
 -- (collectionSQL) run with security_invoker = true, so they are subject
 -- to this same smoodly_read policy rather than their owner's privileges.
+-- smoodly_meta: which version of this schema the database holds (spec
+-- 2026-09-26 §1). One row per database, not per space; every core
+-- migration file upserts the version row as its last statement, and the
+-- package compares it with SCHEMA_VERSION (behind blocks the admin).
+create table if not exists "smoodly_meta" (
+  "key" text primary key,
+  "value" text not null
+);
+
 alter table "pages" enable row level security;
 alter table "page_locales" enable row level security;
 alter table "page_versions" enable row level security;
@@ -226,6 +239,7 @@ alter table "entry_versions" enable row level security;
 alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
+alter table "smoodly_meta" enable row level security;
 
 -- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
 -- tables, shipped for everyone with ONE definition. Self-host fills them
@@ -500,6 +514,10 @@ drop policy if exists "smoodly_read" on "spaces";
 create policy "smoodly_read" on "spaces" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "smoodly_meta";
+create policy "smoodly_read" on "smoodly_meta" for select
+  using ((select "smoodly_key_kind"()) = 'write' and not (select "smoodly_space_key_revoked"()));
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";
@@ -513,21 +531,5 @@ create policy "smoodly_media_write" on storage.objects for all
   using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
   with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
 
-create or replace view "posts" with (security_invoker = true) as
-select
-  e."id",
-  l."locale",
-  l."slug",
-  e."sort",
-  e."created_at",
-  l."updated_at",
-  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
-  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
-  coalesce(v."fields", e."fields" || l."fields")->'body' as "body"
-from "entries" e
-join "entry_locales" l on l."entry_id" = e."id"
-left join "entry_versions" v on v."id" = l."published_version_id"
-where e."collection" = 'posts' and l."status" = 'published';
-
-create index if not exists "entries_posts_date_idx"
-  on "entries" (("fields"->'date')) where "collection" = 'posts';
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '1')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/20260926120100_smoodly_views.sql

@@ -0,0 +1,23 @@
+-- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
+-- (2026-09-26T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Never edit a written file: change the collection and run migrate again.
+
+-- smoodly:collection posts sha256:2e648b887b8e7146
+create or replace view "posts" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'posts' and l."status" = 'published';
+
+create index if not exists "entries_posts_date_idx"
+  on "entries" (("fields"->'date')) where "collection" = 'posts';

package/templates/blank-intl/AGENTS.md

@@ -12,11 +12,12 @@ where things are.
   `elements.ts`, `collections.ts`, `globals.ts`) and `smoodly/config.ts`
   is the one registry. A component that is not registered does not exist
   for the admin.
-- **A new collection is a new migration.** Write its view with
-  `collectionSQL` from `smoodly` into a new file under
-  `supabase/migrations/`, then apply it: `supabase db push` (hosted) or
-  `supabase db reset` (local). The admin cannot list a collection whose
-  view is missing.
+- **After a new collection or a `smoodly` upgrade, run `npx smoodly migrate`**
+  and apply what it writes (`supabase db push` hosted, `supabase db reset`
+  local). It copies the core schema files the package ships and writes a
+  read view and order index per collection. Never edit a file it wrote.
+  The admin reads the base tables, so it lists a collection either way;
+  the view is for SQL and PostgREST readers, the index for `order`.
 - **Seed through the stores.** `scripts/seed.ts` is starter content,
   written through the page and entry stores, never raw SQL. It is
   idempotent; run it with `npm run seed`.

package/templates/blank-intl/README.md

@@ -41,14 +41,12 @@ editor's "/" menu.
 Copy the `posts` block in `smoodly/collections.ts`, add the new
 collection to `collections`, and write its entry page by copying
 `components/pages/Post.tsx` (register it in `config.ts` under `pages`).
-Then create a migration with its view:
+Then write its read view and order index and apply them:
 
-    import { collectionSQL } from "smoodly";
-    import { people } from "./smoodly/collections";
-    console.log(collectionSQL(people));
+    npx smoodly migrate
+    supabase db push        # hosted; `supabase db reset` for the local stack
 
-Save the output as `supabase/migrations/<timestamp>_people.sql` and apply
-it with `supabase db push` (hosted) or `supabase db reset` (local).
+The same command brings the core schema forward after a `smoodly` upgrade.
 
 ## Add a global item
 

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.23",
+    "smoodly": "0.0.25",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/smoodly/collections.ts

@@ -4,10 +4,9 @@ import { text } from "./toolsets";
 // A collection: structured content with its own admin list, served at
 // `path` by its entry page (components/pages/Post.tsx). Fields marked
 // .localized() are stored per locale; the rest are shared across
-// locales. To add a
-// collection: copy this block, add it to `collections`, write its view
-// into a new migration with `collectionSQL` from "smoodly", and apply
-// it (supabase db push, or supabase db reset locally).
+// locales. To add a collection: copy this block, add it to
+// `collections`, run `npx smoodly migrate` and apply the file it writes
+// (supabase db push, or supabase db reset locally).
 export const posts = smoodly.collection({
   name: "posts",
   title: "Posts",

package/templates/blank-intl/supabase/migrations/{00000000000000_smoodly.sql → 20260926120000_smoodly_v1.sql}

@@ -1,3 +1,7 @@
+-- Smoodly core schema, version 1 (docs/superpowers/specs/2026-09-26-schema-migrations-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+
 set client_min_messages = warning;
 
 -- The space a request acts in: the key's claim in Smoodly Cloud, the
@@ -217,6 +221,15 @@ $$;
 -- to anything but a write key. The generated per-collection views
 -- (collectionSQL) run with security_invoker = true, so they are subject
 -- to this same smoodly_read policy rather than their owner's privileges.
+-- smoodly_meta: which version of this schema the database holds (spec
+-- 2026-09-26 §1). One row per database, not per space; every core
+-- migration file upserts the version row as its last statement, and the
+-- package compares it with SCHEMA_VERSION (behind blocks the admin).
+create table if not exists "smoodly_meta" (
+  "key" text primary key,
+  "value" text not null
+);
+
 alter table "pages" enable row level security;
 alter table "page_locales" enable row level security;
 alter table "page_versions" enable row level security;
@@ -226,6 +239,7 @@ alter table "entry_versions" enable row level security;
 alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
+alter table "smoodly_meta" enable row level security;
 
 -- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
 -- tables, shipped for everyone with ONE definition. Self-host fills them
@@ -500,6 +514,10 @@ drop policy if exists "smoodly_read" on "spaces";
 create policy "smoodly_read" on "spaces" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "smoodly_meta";
+create policy "smoodly_read" on "smoodly_meta" for select
+  using ((select "smoodly_key_kind"()) = 'write' and not (select "smoodly_space_key_revoked"()));
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";
@@ -513,21 +531,5 @@ create policy "smoodly_media_write" on storage.objects for all
   using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
   with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
 
-create or replace view "posts" with (security_invoker = true) as
-select
-  e."id",
-  l."locale",
-  l."slug",
-  e."sort",
-  e."created_at",
-  l."updated_at",
-  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
-  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
-  coalesce(v."fields", e."fields" || l."fields")->'body' as "body"
-from "entries" e
-join "entry_locales" l on l."entry_id" = e."id"
-left join "entry_versions" v on v."id" = l."published_version_id"
-where e."collection" = 'posts' and l."status" = 'published';
-
-create index if not exists "entries_posts_date_idx"
-  on "entries" (("fields"->'date')) where "collection" = 'posts';
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '1')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/20260926120100_smoodly_views.sql

@@ -0,0 +1,23 @@
+-- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
+-- (2026-09-26T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Never edit a written file: change the collection and run migrate again.
+
+-- smoodly:collection posts sha256:2e648b887b8e7146
+create or replace view "posts" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'posts' and l."status" = 'published';
+
+create index if not exists "entries_posts_date_idx"
+  on "entries" (("fields"->'date')) where "collection" = 'posts';

package/templates/lorem/AGENTS.md

@@ -12,11 +12,12 @@ where things are.
   `elements.ts`, `collections.ts`, `globals.ts`) and `smoodly/config.ts`
   is the one registry. A component that is not registered does not exist
   for the admin.
-- **A new collection is a new migration.** Write its view with
-  `collectionSQL` from `smoodly` into a new file under
-  `supabase/migrations/`, then apply it: `supabase db push` (hosted) or
-  `supabase db reset` (local). The admin cannot list a collection whose
-  view is missing.
+- **After a new collection or a `smoodly` upgrade, run `npx smoodly migrate`**
+  and apply what it writes (`supabase db push` hosted, `supabase db reset`
+  local). It copies the core schema files the package ships and writes a
+  read view and order index per collection. Never edit a file it wrote.
+  The admin reads the base tables, so it lists a collection either way;
+  the view is for SQL and PostgREST readers, the index for `order`.
 - **Seed through the stores.** `scripts/seed.ts` is starter content,
   written through the page and entry stores, never raw SQL. It is
   idempotent; run it with `npm run seed`.

package/templates/lorem/README.md

@@ -17,7 +17,7 @@ for an agent (or a person) building the site.
 - `components/strings.ts`, `messages/` — the site's own UI strings and the request locale, one seam.
 - `public/images/` — the starter's photos; image fields hold URLs like `/images/hero_image.jpg`.
 - `scripts/seed.ts` — the starter content, written through the stores. `npm run seed` is idempotent.
-- `smoodly/collections.ts` — structured content (people, articles). Add a collection, then add its view to a new migration with `collectionSQL` from `smoodly`.
+- `smoodly/collections.ts` — structured content (people, articles). Add a collection, run `npx smoodly migrate`, apply the file it writes.
 - `smoodly/` — the wiring: `config.ts` (the registry and settings), `collections.ts`, `sections.ts`, `server.ts` (stores, site layer, renderer), `ops.ts` (the admin's one server action), `admin.tsx` (the admin mount).
 - `.env.local` — `SMOODLY_URL`, `SMOODLY_SECRET_KEY`, `SMOODLY_PUBLISHABLE_KEY`.
 

package/templates/lorem/components/PageFrame.tsx

@@ -10,7 +10,8 @@ import { HeaderView, type LocaleLink } from "./sections/Header";
 // entry's map (spec 2026-09-15): the other locale's path where the page
 // exists and is published there, that locale's home otherwise. With one
 // locale (the single-language scaffold) there are no links at all. The
-// header itself is the global item, read through `q` per locale.
+// header itself is the global item, read through `q` per locale, and its
+// brand links to the locale's home — so the nav needs no Home item.
 export async function PageFrame({ locale, locales, children }: {
   locale: string;
   locales: Record<string, LocaleAlternate | null>;
@@ -23,7 +24,7 @@ export async function PageFrame({ locale, locales, children }: {
     : undefined;
   return (
     <>
-      {header && <HeaderView {...header} locales={links} />}
+      {header && <HeaderView {...header} home={href("/", locale)} locales={links} />}
       <main>{children}</main>
     </>
   );

package/templates/lorem/components/articles.ts

@@ -28,6 +28,10 @@ export const articlePath = (slug: string, locale: string) => `/${segment(locale)
 export const formatDate = (iso: string, locale: string) =>
   new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeZone: "UTC" }).format(new Date(iso));
 
+/** A datetime field's UTC instant, shown in the site's zone (config.timeZone). */
+export const formatDateTime = (iso: string, locale: string, timeZone: string) =>
+  new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeStyle: "short", timeZone }).format(new Date(iso));
+
 type Node = { text?: string; content?: Node[] };
 export function richtextText(doc: unknown): string {
   const walk = (n: Node): string => n.text ?? (n.content ?? []).map(walk).join(" ");

package/templates/lorem/components/sections/Header.tsx

@@ -24,8 +24,7 @@ export type LocaleLink = { code: string; url: string; current: boolean };
 
 const m = smoodly.marks(headerSchema);
 
-export function HeaderView({ brand, nav, locales, styles }: Props<typeof headerSchema> & { locales?: LocaleLink[] }) {
-  const home = locales?.find((l) => l.current)?.url ?? "/";
+export function HeaderView({ brand, nav, home = "/", locales, styles }: Props<typeof headerSchema> & { home?: string; locales?: LocaleLink[] }) {
   return (
     <smoodly.Section as="header" styles={styles} className="site-header">
       <div className="container site-header__bar">

package/templates/lorem/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.23"
+    "smoodly": "0.0.25"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/lorem/scripts/seed.ts

@@ -175,17 +175,17 @@ const article = await seedEntry("articles", {
 
 // --- global items ---------------------------------------------------
 
-const nav = (locale: string, labels: [string, string, string]) => {
+// No Home item: the brand in the header is the way home.
+const nav = (locale: string, labels: [string, string]) => {
   const links = paths(locale);
   return [
-    { label: labels[0], href: links.home },
-    { label: labels[1], href: links.articles },
-    { label: labels[2], href: links.about },
+    { label: labels[0], href: links.articles },
+    { label: labels[1], href: links.about },
   ];
 };
 await seedEntry("header",
-  { brand: "Lorem Co.", nav: nav(EN, ["Home", "Articles", "About"]) },
-  FI ? { nav: nav(FI, ["Etusivu", "Artikkelit", "Tietoa meistä"]) } : undefined,
+  { brand: "Lorem Co.", nav: nav(EN, ["Articles", "About"]) },
+  FI ? { nav: nav(FI, ["Artikkelit", "Tietoa meistä"]) } : undefined,
 );
 
 await seedEntry("footer", {

package/templates/lorem/smoodly/config.ts

@@ -25,6 +25,8 @@ export const config = defineConfig({
     pages: [HomePage, ArticlesPage, StandardPage, ArticlePage],
   },
   locales: { default: "en", supported: ["en"] },
+  // Editors pick dates and times in this zone; the views format with it (an IANA name, never an offset).
+  timeZone: "Europe/Helsinki",
   // Smoodly's own default, spelled out: the record the site root serves.
   homePageSlug: "home",
   // Nesting on: an editor can put pages three deep.

package/templates/lorem/supabase/migrations/{00000000000000_smoodly.sql → 20260926120000_smoodly_v1.sql}

@@ -1,3 +1,7 @@
+-- Smoodly core schema, version 1 (docs/superpowers/specs/2026-09-26-schema-migrations-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+
 set client_min_messages = warning;
 
 -- The space a request acts in: the key's claim in Smoodly Cloud, the
@@ -217,6 +221,15 @@ $$;
 -- to anything but a write key. The generated per-collection views
 -- (collectionSQL) run with security_invoker = true, so they are subject
 -- to this same smoodly_read policy rather than their owner's privileges.
+-- smoodly_meta: which version of this schema the database holds (spec
+-- 2026-09-26 §1). One row per database, not per space; every core
+-- migration file upserts the version row as its last statement, and the
+-- package compares it with SCHEMA_VERSION (behind blocks the admin).
+create table if not exists "smoodly_meta" (
+  "key" text primary key,
+  "value" text not null
+);
+
 alter table "pages" enable row level security;
 alter table "page_locales" enable row level security;
 alter table "page_versions" enable row level security;
@@ -226,6 +239,7 @@ alter table "entry_versions" enable row level security;
 alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
+alter table "smoodly_meta" enable row level security;
 
 -- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
 -- tables, shipped for everyone with ONE definition. Self-host fills them
@@ -500,6 +514,10 @@ drop policy if exists "smoodly_read" on "spaces";
 create policy "smoodly_read" on "spaces" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "smoodly_meta";
+create policy "smoodly_read" on "smoodly_meta" for select
+  using ((select "smoodly_key_kind"()) = 'write' and not (select "smoodly_space_key_revoked"()));
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";
@@ -513,40 +531,5 @@ create policy "smoodly_media_write" on storage.objects for all
   using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
   with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
 
-create or replace view "people" with (security_invoker = true) as
-select
-  e."id",
-  l."locale",
-  l."slug",
-  e."sort",
-  e."created_at",
-  l."updated_at",
-  coalesce(v."fields", e."fields" || l."fields")->>'name' as "name",
-  coalesce(v."fields", e."fields" || l."fields")->>'role' as "role"
-from "entries" e
-join "entry_locales" l on l."entry_id" = e."id"
-left join "entry_versions" v on v."id" = l."published_version_id"
-where e."collection" = 'people' and l."status" = 'published';
-
-create or replace view "articles" with (security_invoker = true) as
-select
-  e."id",
-  l."locale",
-  l."slug",
-  e."sort",
-  e."created_at",
-  l."updated_at",
-  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
-  coalesce(v."fields", e."fields" || l."fields")->'image' as "image",
-  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
-  coalesce(v."fields", e."fields" || l."fields")->>'author' as "author",
-  coalesce(v."fields", e."fields" || l."fields")->>'excerpt' as "excerpt",
-  coalesce(v."fields", e."fields" || l."fields")->'body' as "body",
-  coalesce(v."fields", e."fields" || l."fields")->'tags' as "tags"
-from "entries" e
-join "entry_locales" l on l."entry_id" = e."id"
-left join "entry_versions" v on v."id" = l."published_version_id"
-where e."collection" = 'articles' and l."status" = 'published';
-
-create index if not exists "entries_articles_date_idx"
-  on "entries" (("fields"->'date')) where "collection" = 'articles';
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '1')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem/supabase/migrations/20260926120100_smoodly_views.sql

@@ -0,0 +1,43 @@
+-- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
+-- (2026-09-26T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Never edit a written file: change the collection and run migrate again.
+
+-- smoodly:collection people sha256:929798ebb4fa2bb6
+create or replace view "people" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'name' as "name",
+  coalesce(v."fields", e."fields" || l."fields")->>'role' as "role"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'people' and l."status" = 'published';
+
+-- smoodly:collection articles sha256:f0257bf8fe462954
+create or replace view "articles" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  coalesce(v."fields", e."fields" || l."fields")->'image' as "image",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->>'author' as "author",
+  coalesce(v."fields", e."fields" || l."fields")->>'excerpt' as "excerpt",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body",
+  coalesce(v."fields", e."fields" || l."fields")->'tags' as "tags"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'articles' and l."status" = 'published';
+
+create index if not exists "entries_articles_date_idx"
+  on "entries" (("fields"->'date')) where "collection" = 'articles';

package/templates/lorem-intl/AGENTS.md

@@ -12,11 +12,12 @@ where things are.
   `elements.ts`, `collections.ts`, `globals.ts`) and `smoodly/config.ts`
   is the one registry. A component that is not registered does not exist
   for the admin.
-- **A new collection is a new migration.** Write its view with
-  `collectionSQL` from `smoodly` into a new file under
-  `supabase/migrations/`, then apply it: `supabase db push` (hosted) or
-  `supabase db reset` (local). The admin cannot list a collection whose
-  view is missing.
+- **After a new collection or a `smoodly` upgrade, run `npx smoodly migrate`**
+  and apply what it writes (`supabase db push` hosted, `supabase db reset`
+  local). It copies the core schema files the package ships and writes a
+  read view and order index per collection. Never edit a file it wrote.
+  The admin reads the base tables, so it lists a collection either way;
+  the view is for SQL and PostgREST readers, the index for `order`.
 - **Seed through the stores.** `scripts/seed.ts` is starter content,
   written through the page and entry stores, never raw SQL. It is
   idempotent; run it with `npm run seed`.

package/templates/lorem-intl/README.md

@@ -18,7 +18,7 @@ for an agent (or a person) building the site.
 - `components/strings.ts`, `messages/` — the site's own UI strings and the request locale, one seam.
 - `public/images/` — the starter's photos; image fields hold URLs like `/images/hero_image.jpg`.
 - `scripts/seed.ts` — the starter content, written through the stores. `npm run seed` is idempotent.
-- `smoodly/collections.ts` — structured content (people, articles). Add a collection, then add its view to a new migration with `collectionSQL` from `smoodly`.
+- `smoodly/collections.ts` — structured content (people, articles). Add a collection, run `npx smoodly migrate`, apply the file it writes.
 - `smoodly/` — the wiring: `config.ts` (the registry and settings), `collections.ts`, `sections.ts`, `server.ts` (stores, site layer, renderer), `ops.ts` (the admin's one server action), `admin.tsx` (the admin mount).
 - `.env.local` — `SMOODLY_URL`, `SMOODLY_SECRET_KEY`, `SMOODLY_PUBLISHABLE_KEY`.
 

package/templates/lorem-intl/components/PageFrame.tsx

@@ -10,7 +10,8 @@ import { HeaderView, type LocaleLink } from "./sections/Header";
 // entry's map (spec 2026-09-15): the other locale's path where the page
 // exists and is published there, that locale's home otherwise. With one
 // locale (the single-language scaffold) there are no links at all. The
-// header itself is the global item, read through `q` per locale.
+// header itself is the global item, read through `q` per locale, and its
+// brand links to the locale's home — so the nav needs no Home item.
 export async function PageFrame({ locale, locales, children }: {
   locale: string;
   locales: Record<string, LocaleAlternate | null>;
@@ -23,7 +24,7 @@ export async function PageFrame({ locale, locales, children }: {
     : undefined;
   return (
     <>
-      {header && <HeaderView {...header} locales={links} />}
+      {header && <HeaderView {...header} home={href("/", locale)} locales={links} />}
       <main>{children}</main>
     </>
   );

package/templates/lorem-intl/components/articles.ts

@@ -28,6 +28,10 @@ export const articlePath = (slug: string, locale: string) => `/${segment(locale)
 export const formatDate = (iso: string, locale: string) =>
   new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeZone: "UTC" }).format(new Date(iso));
 
+/** A datetime field's UTC instant, shown in the site's zone (config.timeZone). */
+export const formatDateTime = (iso: string, locale: string, timeZone: string) =>
+  new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeStyle: "short", timeZone }).format(new Date(iso));
+
 type Node = { text?: string; content?: Node[] };
 export function richtextText(doc: unknown): string {
   const walk = (n: Node): string => n.text ?? (n.content ?? []).map(walk).join(" ");

package/templates/lorem-intl/components/sections/Header.tsx

@@ -24,8 +24,7 @@ export type LocaleLink = { code: string; url: string; current: boolean };
 
 const m = smoodly.marks(headerSchema);
 
-export function HeaderView({ brand, nav, locales, styles }: Props<typeof headerSchema> & { locales?: LocaleLink[] }) {
-  const home = locales?.find((l) => l.current)?.url ?? "/";
+export function HeaderView({ brand, nav, home = "/", locales, styles }: Props<typeof headerSchema> & { home?: string; locales?: LocaleLink[] }) {
   return (
     <smoodly.Section as="header" styles={styles} className="site-header">
       <div className="container site-header__bar">

package/templates/lorem-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.23",
+    "smoodly": "0.0.25",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/lorem-intl/scripts/seed.ts

@@ -175,17 +175,17 @@ const article = await seedEntry("articles", {
 
 // --- global items ---------------------------------------------------
 
-const nav = (locale: string, labels: [string, string, string]) => {
+// No Home item: the brand in the header is the way home.
+const nav = (locale: string, labels: [string, string]) => {
   const links = paths(locale);
   return [
-    { label: labels[0], href: links.home },
-    { label: labels[1], href: links.articles },
-    { label: labels[2], href: links.about },
+    { label: labels[0], href: links.articles },
+    { label: labels[1], href: links.about },
   ];
 };
 await seedEntry("header",
-  { brand: "Lorem Co.", nav: nav(EN, ["Home", "Articles", "About"]) },
-  FI ? { nav: nav(FI, ["Etusivu", "Artikkelit", "Tietoa meistä"]) } : undefined,
+  { brand: "Lorem Co.", nav: nav(EN, ["Articles", "About"]) },
+  FI ? { nav: nav(FI, ["Artikkelit", "Tietoa meistä"]) } : undefined,
 );
 
 await seedEntry("footer", {

package/templates/lorem-intl/smoodly/config.ts

@@ -29,6 +29,8 @@ export const config = defineConfig({
     pages: [HomePage, ArticlesPage, StandardPage, ArticlePage],
   },
   locales: { default: routing.defaultLocale, supported: [...routing.locales] },
+  // Editors pick dates and times in this zone; the views format with it (an IANA name, never an offset).
+  timeZone: "Europe/Helsinki",
   // Smoodly's own default, spelled out: the record the site root serves.
   homePageSlug: "home",
   // Nesting on: an editor can put pages three deep.

package/templates/lorem-intl/supabase/migrations/{00000000000000_smoodly.sql → 20260926120000_smoodly_v1.sql}

@@ -1,3 +1,7 @@
+-- Smoodly core schema, version 1 (docs/superpowers/specs/2026-09-26-schema-migrations-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+
 set client_min_messages = warning;
 
 -- The space a request acts in: the key's claim in Smoodly Cloud, the
@@ -217,6 +221,15 @@ $$;
 -- to anything but a write key. The generated per-collection views
 -- (collectionSQL) run with security_invoker = true, so they are subject
 -- to this same smoodly_read policy rather than their owner's privileges.
+-- smoodly_meta: which version of this schema the database holds (spec
+-- 2026-09-26 §1). One row per database, not per space; every core
+-- migration file upserts the version row as its last statement, and the
+-- package compares it with SCHEMA_VERSION (behind blocks the admin).
+create table if not exists "smoodly_meta" (
+  "key" text primary key,
+  "value" text not null
+);
+
 alter table "pages" enable row level security;
 alter table "page_locales" enable row level security;
 alter table "page_versions" enable row level security;
@@ -226,6 +239,7 @@ alter table "entry_versions" enable row level security;
 alter table "refs" enable row level security;
 alter table "paths" enable row level security;
 alter table "assets" enable row level security;
+alter table "smoodly_meta" enable row level security;
 
 -- ── Cloud state (spec 2026-09-04 §1, names 2026-09-25): three ordinary
 -- tables, shipped for everyone with ONE definition. Self-host fills them
@@ -500,6 +514,10 @@ drop policy if exists "smoodly_read" on "spaces";
 create policy "smoodly_read" on "spaces" for select
   using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
 
+drop policy if exists "smoodly_read" on "smoodly_meta";
+create policy "smoodly_read" on "smoodly_meta" for select
+  using ((select "smoodly_key_kind"()) = 'write' and not (select "smoodly_space_key_revoked"()));
+
 insert into storage.buckets ("id", "name", "public", "file_size_limit")
   values ('media', 'media', true, 104857600)
   on conflict ("id") do update set "public" = excluded."public", "file_size_limit" = excluded."file_size_limit";
@@ -513,40 +531,5 @@ create policy "smoodly_media_write" on storage.objects for all
   using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
   with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
 
-create or replace view "people" with (security_invoker = true) as
-select
-  e."id",
-  l."locale",
-  l."slug",
-  e."sort",
-  e."created_at",
-  l."updated_at",
-  coalesce(v."fields", e."fields" || l."fields")->>'name' as "name",
-  coalesce(v."fields", e."fields" || l."fields")->>'role' as "role"
-from "entries" e
-join "entry_locales" l on l."entry_id" = e."id"
-left join "entry_versions" v on v."id" = l."published_version_id"
-where e."collection" = 'people' and l."status" = 'published';
-
-create or replace view "articles" with (security_invoker = true) as
-select
-  e."id",
-  l."locale",
-  l."slug",
-  e."sort",
-  e."created_at",
-  l."updated_at",
-  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
-  coalesce(v."fields", e."fields" || l."fields")->'image' as "image",
-  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
-  coalesce(v."fields", e."fields" || l."fields")->>'author' as "author",
-  coalesce(v."fields", e."fields" || l."fields")->>'excerpt' as "excerpt",
-  coalesce(v."fields", e."fields" || l."fields")->'body' as "body",
-  coalesce(v."fields", e."fields" || l."fields")->'tags' as "tags"
-from "entries" e
-join "entry_locales" l on l."entry_id" = e."id"
-left join "entry_versions" v on v."id" = l."published_version_id"
-where e."collection" = 'articles' and l."status" = 'published';
-
-create index if not exists "entries_articles_date_idx"
-  on "entries" (("fields"->'date')) where "collection" = 'articles';
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '1')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/20260926120100_smoodly_views.sql

@@ -0,0 +1,43 @@
+-- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
+-- (2026-09-26T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Never edit a written file: change the collection and run migrate again.
+
+-- smoodly:collection people sha256:929798ebb4fa2bb6
+create or replace view "people" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'name' as "name",
+  coalesce(v."fields", e."fields" || l."fields")->>'role' as "role"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'people' and l."status" = 'published';
+
+-- smoodly:collection articles sha256:f0257bf8fe462954
+create or replace view "articles" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  coalesce(v."fields", e."fields" || l."fields")->'image' as "image",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->>'author' as "author",
+  coalesce(v."fields", e."fields" || l."fields")->>'excerpt' as "excerpt",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body",
+  coalesce(v."fields", e."fields" || l."fields")->'tags' as "tags"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'articles' and l."status" = 'published';
+
+create index if not exists "entries_articles_date_idx"
+  on "entries" (("fields"->'date')) where "collection" = 'articles';