create-smoodly-app 0.0.26 → 0.0.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.26",
+  "version": "0.0.28",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/blank/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.26"
+    "smoodly": "0.0.28"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/blank/supabase/migrations/20260926140000_smoodly_v3.sql

@@ -0,0 +1,38 @@
+-- Smoodly core schema, version 3 (docs/superpowers/specs/2026-09-26-security-pass-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 2: the presence channel admits a signed-in
+-- member of the topic's space (a definer lookup in members by the session
+-- token's user), the five unpinned functions get a search_path, and the
+-- three mutation RPCs are no longer executable by anon or public.
+
+set client_min_messages = warning;
+
+create or replace function "smoodly_presence_member"() returns boolean
+language sql stable security definer set search_path = public as $$
+  select exists (select 1 from "members" m
+    where m."user_id" = auth.uid()
+      and realtime.topic() = 'space:' || m."space_id"::text);
+$$;
+
+drop policy if exists "smoodly_presence_read" on "realtime"."messages";
+create policy "smoodly_presence_read" on "realtime"."messages" for select
+  using ((select public."smoodly_presence_member"()));
+
+drop policy if exists "smoodly_presence_write" on "realtime"."messages";
+create policy "smoodly_presence_write" on "realtime"."messages" for insert
+  with check ((select public."smoodly_presence_member"()));
+
+alter function "smoodly_current_space"() set search_path = '';
+alter function "smoodly_key_kind"() set search_path = '';
+alter function "smoodly_set_space"() set search_path = '';
+alter function "smoodly_reorder"(text, uuid[]) set search_path = public;
+alter function "smoodly_reorder_pages"(uuid[]) set search_path = public;
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+
+revoke execute on function "smoodly_reorder"(text, uuid[]) from public, anon;
+revoke execute on function "smoodly_reorder_pages"(uuid[]) from public, anon;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '3')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/20260926150000_smoodly_v4.sql

@@ -0,0 +1,41 @@
+-- Smoodly core schema, version 4 (docs/superpowers/specs/2026-09-26-redirects-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 3: a `redirect` flag on the paths index — a row
+-- with it set is an old address of its target — and the rewrite function
+-- keeps the published old rows as redirects when a target names their
+-- locales. The read policy is unchanged: a redirect row is visible when
+-- its target is published in that locale.
+
+set client_min_messages = warning;
+
+alter table "paths" add column if not exists "redirect" boolean not null default false;
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+  where p."redirect" and p."locale" = r.locale and p."path" = r.path
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                    where r.locale = p."locale" and r.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "path", "kind", "target_id")
+  select r.locale, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid);
+$$;
+
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '4')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/{20260926130100_smoodly_views.sql → 20260926150100_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-26T13:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-26T15:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection posts sha256:2e648b887b8e7146

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.26",
+    "smoodly": "0.0.28",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/supabase/migrations/20260926140000_smoodly_v3.sql

@@ -0,0 +1,38 @@
+-- Smoodly core schema, version 3 (docs/superpowers/specs/2026-09-26-security-pass-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 2: the presence channel admits a signed-in
+-- member of the topic's space (a definer lookup in members by the session
+-- token's user), the five unpinned functions get a search_path, and the
+-- three mutation RPCs are no longer executable by anon or public.
+
+set client_min_messages = warning;
+
+create or replace function "smoodly_presence_member"() returns boolean
+language sql stable security definer set search_path = public as $$
+  select exists (select 1 from "members" m
+    where m."user_id" = auth.uid()
+      and realtime.topic() = 'space:' || m."space_id"::text);
+$$;
+
+drop policy if exists "smoodly_presence_read" on "realtime"."messages";
+create policy "smoodly_presence_read" on "realtime"."messages" for select
+  using ((select public."smoodly_presence_member"()));
+
+drop policy if exists "smoodly_presence_write" on "realtime"."messages";
+create policy "smoodly_presence_write" on "realtime"."messages" for insert
+  with check ((select public."smoodly_presence_member"()));
+
+alter function "smoodly_current_space"() set search_path = '';
+alter function "smoodly_key_kind"() set search_path = '';
+alter function "smoodly_set_space"() set search_path = '';
+alter function "smoodly_reorder"(text, uuid[]) set search_path = public;
+alter function "smoodly_reorder_pages"(uuid[]) set search_path = public;
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+
+revoke execute on function "smoodly_reorder"(text, uuid[]) from public, anon;
+revoke execute on function "smoodly_reorder_pages"(uuid[]) from public, anon;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '3')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/20260926150000_smoodly_v4.sql

@@ -0,0 +1,41 @@
+-- Smoodly core schema, version 4 (docs/superpowers/specs/2026-09-26-redirects-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 3: a `redirect` flag on the paths index — a row
+-- with it set is an old address of its target — and the rewrite function
+-- keeps the published old rows as redirects when a target names their
+-- locales. The read policy is unchanged: a redirect row is visible when
+-- its target is published in that locale.
+
+set client_min_messages = warning;
+
+alter table "paths" add column if not exists "redirect" boolean not null default false;
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+  where p."redirect" and p."locale" = r.locale and p."path" = r.path
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                    where r.locale = p."locale" and r.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "path", "kind", "target_id")
+  select r.locale, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid);
+$$;
+
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '4')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/{20260926130100_smoodly_views.sql → 20260926150100_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-26T13:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-26T15:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection posts sha256:2e648b887b8e7146

package/templates/lorem/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.26"
+    "smoodly": "0.0.28"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/lorem/supabase/migrations/20260926140000_smoodly_v3.sql

@@ -0,0 +1,38 @@
+-- Smoodly core schema, version 3 (docs/superpowers/specs/2026-09-26-security-pass-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 2: the presence channel admits a signed-in
+-- member of the topic's space (a definer lookup in members by the session
+-- token's user), the five unpinned functions get a search_path, and the
+-- three mutation RPCs are no longer executable by anon or public.
+
+set client_min_messages = warning;
+
+create or replace function "smoodly_presence_member"() returns boolean
+language sql stable security definer set search_path = public as $$
+  select exists (select 1 from "members" m
+    where m."user_id" = auth.uid()
+      and realtime.topic() = 'space:' || m."space_id"::text);
+$$;
+
+drop policy if exists "smoodly_presence_read" on "realtime"."messages";
+create policy "smoodly_presence_read" on "realtime"."messages" for select
+  using ((select public."smoodly_presence_member"()));
+
+drop policy if exists "smoodly_presence_write" on "realtime"."messages";
+create policy "smoodly_presence_write" on "realtime"."messages" for insert
+  with check ((select public."smoodly_presence_member"()));
+
+alter function "smoodly_current_space"() set search_path = '';
+alter function "smoodly_key_kind"() set search_path = '';
+alter function "smoodly_set_space"() set search_path = '';
+alter function "smoodly_reorder"(text, uuid[]) set search_path = public;
+alter function "smoodly_reorder_pages"(uuid[]) set search_path = public;
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+
+revoke execute on function "smoodly_reorder"(text, uuid[]) from public, anon;
+revoke execute on function "smoodly_reorder_pages"(uuid[]) from public, anon;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '3')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem/supabase/migrations/20260926150000_smoodly_v4.sql

@@ -0,0 +1,41 @@
+-- Smoodly core schema, version 4 (docs/superpowers/specs/2026-09-26-redirects-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 3: a `redirect` flag on the paths index — a row
+-- with it set is an old address of its target — and the rewrite function
+-- keeps the published old rows as redirects when a target names their
+-- locales. The read policy is unchanged: a redirect row is visible when
+-- its target is published in that locale.
+
+set client_min_messages = warning;
+
+alter table "paths" add column if not exists "redirect" boolean not null default false;
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+  where p."redirect" and p."locale" = r.locale and p."path" = r.path
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                    where r.locale = p."locale" and r.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "path", "kind", "target_id")
+  select r.locale, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid);
+$$;
+
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '4')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem/supabase/migrations/{20260926130100_smoodly_views.sql → 20260926150100_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-26T13:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-26T15:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection people sha256:929798ebb4fa2bb6

package/templates/lorem-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.26",
+    "smoodly": "0.0.28",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/lorem-intl/supabase/migrations/20260926140000_smoodly_v3.sql

@@ -0,0 +1,38 @@
+-- Smoodly core schema, version 3 (docs/superpowers/specs/2026-09-26-security-pass-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 2: the presence channel admits a signed-in
+-- member of the topic's space (a definer lookup in members by the session
+-- token's user), the five unpinned functions get a search_path, and the
+-- three mutation RPCs are no longer executable by anon or public.
+
+set client_min_messages = warning;
+
+create or replace function "smoodly_presence_member"() returns boolean
+language sql stable security definer set search_path = public as $$
+  select exists (select 1 from "members" m
+    where m."user_id" = auth.uid()
+      and realtime.topic() = 'space:' || m."space_id"::text);
+$$;
+
+drop policy if exists "smoodly_presence_read" on "realtime"."messages";
+create policy "smoodly_presence_read" on "realtime"."messages" for select
+  using ((select public."smoodly_presence_member"()));
+
+drop policy if exists "smoodly_presence_write" on "realtime"."messages";
+create policy "smoodly_presence_write" on "realtime"."messages" for insert
+  with check ((select public."smoodly_presence_member"()));
+
+alter function "smoodly_current_space"() set search_path = '';
+alter function "smoodly_key_kind"() set search_path = '';
+alter function "smoodly_set_space"() set search_path = '';
+alter function "smoodly_reorder"(text, uuid[]) set search_path = public;
+alter function "smoodly_reorder_pages"(uuid[]) set search_path = public;
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+
+revoke execute on function "smoodly_reorder"(text, uuid[]) from public, anon;
+revoke execute on function "smoodly_reorder_pages"(uuid[]) from public, anon;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '3')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/20260926150000_smoodly_v4.sql

@@ -0,0 +1,41 @@
+-- Smoodly core schema, version 4 (docs/superpowers/specs/2026-09-26-redirects-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 3: a `redirect` flag on the paths index — a row
+-- with it set is an old address of its target — and the rewrite function
+-- keeps the published old rows as redirects when a target names their
+-- locales. The read policy is unchanged: a redirect row is visible when
+-- its target is published in that locale.
+
+set client_min_messages = warning;
+
+alter table "paths" add column if not exists "redirect" boolean not null default false;
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+  where p."redirect" and p."locale" = r.locale and p."path" = r.path
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                    where r.locale = p."locale" and r.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "path", "kind", "target_id")
+  select r.locale, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid);
+$$;
+
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '4')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/{20260926130100_smoodly_views.sql → 20260926150100_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-26T13:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-26T15:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection people sha256:929798ebb4fa2bb6