create-smoodly-app 0.0.33 → 0.0.35

package/dist/index.js

@@ -163,6 +163,10 @@ function renderEnv(keys) {
     `SMOODLY_URL=${keys.url}`,
     `SMOODLY_SECRET_KEY=${keys.secretKey}`,
     `SMOODLY_PUBLISHABLE_KEY=${keys.publishableKey}`,
+    "",
+    "# The site's own address: absolute hreflang and social URLs. Set it to",
+    "# the production URL where you deploy.",
+    "SITE_URL=http://localhost:3000",
     ""
   ].join("\n");
 }
@@ -212,10 +216,16 @@ var ROUTING_LOCALES = '  locales: ["en", "fi"],';
 var ROUTING_DEFAULT = '  defaultLocale: "en",';
 var ARTICLES_PATH_LINE = '  path: { en: "posts", fi: "artikkelit" },';
 var ARTICLES_SLUG_LINE = '  slug: { en: "posts", fi: "artikkelit" },';
+var NEWS_PATH_LINE = '  path: { en: "company/news", fi: "yritys/uutiset" },';
+var NEWS_SLUG_LINE = '  slug: { en: "company/news", fi: "yritys/uutiset" },';
 function articlesSegments(locales) {
   const entries = locales.map((l) => `${/^[a-z]+$/.test(l) ? l : JSON.stringify(l)}: ${l === "fi" ? '"artikkelit"' : '"posts"'}`);
   return `{ ${entries.join(", ")} }`;
 }
+function newsSegments(locales) {
+  const entries = locales.map((l) => `${/^[a-z]+$/.test(l) ? l : JSON.stringify(l)}: ${l === "fi" ? '"yritys/uutiset"' : '"company/news"'}`);
+  return `{ ${entries.join(", ")} }`;
+}
 async function scaffold(opts) {
   await cp(opts.templateDir, opts.dir, { recursive: true });
   await rename(join(opts.dir, "_gitignore"), join(opts.dir, ".gitignore"));
@@ -235,13 +245,18 @@ async function scaffold(opts) {
       routing.replace(ROUTING_LOCALES, `  locales: [${opts.locales.map((l) => JSON.stringify(l)).join(", ")}],`).replace(ROUTING_DEFAULT, `  defaultLocale: ${JSON.stringify(opts.locales[0])},`)
     );
     if (opts.starter !== "blank") {
-      const map = articlesSegments(opts.locales);
-      for (const [rel, line] of [["smoodly/collections.ts", ARTICLES_PATH_LINE], ["components/pages/Articles.tsx", ARTICLES_SLUG_LINE]]) {
-        const path = join(opts.dir, rel);
-        const source = await readFile(path, "utf8");
-        if (!source.includes(line)) throw new Error(`${rel} in the template has drifted; expected the line
+      const rewrites = [
+        { map: articlesSegments(opts.locales), from: '{ en: "posts", fi: "artikkelit" }', lines: [["smoodly/collections.ts", ARTICLES_PATH_LINE], ["components/pages/Articles.tsx", ARTICLES_SLUG_LINE]] },
+        { map: newsSegments(opts.locales), from: '{ en: "company/news", fi: "yritys/uutiset" }', lines: [["smoodly/collections.ts", NEWS_PATH_LINE], ["components/pages/News.tsx", NEWS_SLUG_LINE]] }
+      ];
+      for (const { map, from, lines } of rewrites) {
+        for (const [rel, line] of lines) {
+          const path = join(opts.dir, rel);
+          const source = await readFile(path, "utf8");
+          if (!source.includes(line)) throw new Error(`${rel} in the template has drifted; expected the line
 ${line}`);
-        await writeFile(path, source.replace(line, line.replace('{ en: "posts", fi: "artikkelit" }', map)));
+          await writeFile(path, source.replace(line, line.replace(from, map)));
+        }
       }
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.33",
+  "version": "0.0.35",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/blank/app/(site)/layout.tsx

@@ -7,9 +7,11 @@ import "../globals.css";
 // a child of this one. The `site` global item (smoodly/globals.ts) gives
 // the document title and the footer line: read through `q`, cached under
 // its tag, null until published.
+// metadataBase makes Smoodly's hreflang alternates and social image URLs
+// absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
 export async function generateMetadata() {
   const site = await q().getGlobal("site");
-  return { title: site?.name ?? "Smoodly site" };
+  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.name ?? "Smoodly site" };
 }
 
 export default async function RootLayout({ children }: { children: ReactNode }) {

package/templates/blank/app/api/preview/route.ts

@@ -0,0 +1,3 @@
+// Draft mode on (with SMOODLY_PREVIEW_SECRET) or off (the preview pill's
+// Exit). The logic lives in the package.
+export { previewRoute as GET } from "smoodly/next";

package/templates/blank/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.33"
+    "smoodly": "0.0.35"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/blank/scripts/seed.ts

@@ -72,7 +72,7 @@ const tree = {
   },
 } as unknown as PageTree;
 
-const home = await pages.createPage({ locale: DEFAULT, slug: "home", title: "Home", template: "home" });
+const home = await pages.createPage({ locale: DEFAULT, slug: "home", title: "Home", template: "home", fixed: "page:home" });
 await pages.saveDraft(home.id, DEFAULT, tree);
 await pages.publish(home.id, DEFAULT);
 for (const locale of OTHERS) {

package/templates/blank/smoodly/server.ts

@@ -32,7 +32,8 @@ function bound(): Bound {
   const env = smoodlyEnv();
   const db = createSmoodlyClient(env);
   // ONE path index for both stores: pages and entries share the URL space.
-  const paths = new SupabasePathIndex(db);
+  // The index reads the code-owned addresses from the config (spec 2026-09-29 anchored paths §2).
+  const paths = new SupabasePathIndex(db, config.anchors);
   const locales = config.locales;
   const entries = new SupabaseEntryStore(db, collections, { paths, locales, globals, elements });
   const pages = new SupabasePageStore(db, {
@@ -40,6 +41,8 @@ function bound(): Bound {
     // The custom section's columns toolset, so a column's images count as usage (spec 2026-09-14 §6).
     custom: config.custom,
     homePageSlug: config.homePageSlug,
+    // Code-owned addresses by owner: a fixed page's or a collection's path (spec 2026-09-29 nested paths §3).
+    addresses: config.addresses,
     tree: config.pages?.tree,
   });
   // The media library: rows in `assets`, bytes in the public `media` bucket.
@@ -84,8 +87,9 @@ export function publicAuth(): AuthConfig {
   return { url: env.authUrl, key: env.authKey };
 }
 
-/** What the browser needs to join the editing-presence channel — public values only (spec 2026-09-26 concurrency §5). */
-export function publicContent(): ContentConfig {
+/** What the browser needs to join the editing-presence channel — public values only (spec 2026-09-26 concurrency §5).
+ * The space is asked of the database once per process. */
+export function publicContent(): Promise<ContentConfig> {
   return publicContentConfig(smoodlyEnv());
 }
 

package/templates/blank/supabase/migrations/20260929120000_smoodly_v5.sql

@@ -0,0 +1,56 @@
+-- Smoodly core schema, version 5 (docs/superpowers/specs/2026-09-29-nested-collection-paths-design.md,
+-- docs/superpowers/specs/2026-09-29-anchored-paths-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 4: `pages.fixed` names the registration that owns a
+-- code-owned record, unique per space; `paths.anchor` names the code address
+-- a URL row hangs under, and the row keeps only the part editors made.
+-- No backfill: a record without `fixed` is an editor's page, a row without
+-- an anchor is the editors' tree.
+
+set client_min_messages = warning;
+
+alter table "pages" add column if not exists "fixed" text;
+
+create unique index if not exists "pages_fixed_idx"
+  on "pages" ("space_id", "fixed") where "fixed" is not null;
+
+alter table "paths" add column if not exists "anchor" text not null default '';
+alter table "paths" drop constraint if exists "paths_pkey";
+alter table "paths" add constraint "paths_pkey" primary key ("space_id", "locale", "anchor", "path");
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid, keys jsonb)
+  where p."redirect" and p."locale" = r.locale
+    and exists (select 1 from jsonb_to_recordset(r.keys) as k(anchor text, path text) where k.anchor = p."anchor" and k.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid, keys jsonb)
+                    cross join lateral jsonb_to_recordset(r.keys) as k(anchor text, path text)
+                    where r.locale = p."locale" and k.anchor = p."anchor" and k.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "anchor", "path", "kind", "target_id")
+  select r.locale, r.anchor, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid);
+$$;
+
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+create or replace function "smoodly_resolve_path"(p_locale text, p_keys jsonb) returns setof "paths" language sql stable set search_path = public as $$
+  select p.* from "paths" p
+  join jsonb_to_recordset(p_keys) as k(anchor text, path text) on p."anchor" = k.anchor and p."path" = k.path
+  where p."locale" = p_locale;
+$$;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '5')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/20260929135523_smoodly_v6.sql

@@ -0,0 +1,200 @@
+-- Smoodly core schema, version 6 (docs/superpowers/specs/2026-09-29-pre-install-fixes-design.md §3).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 5: one permissive policy per table and action (the
+-- write key reads through smoodly_read; smoodly_write splits into insert,
+-- update and delete where a public read exists; the media pair the same),
+-- indexes on the foreign keys without one, and no anon call of the row cap.
+-- Access is unchanged.
+
+set client_min_messages = warning;
+
+create index if not exists "page_locales_draft_version_idx" on "page_locales" ("draft_version_id");
+create index if not exists "entry_locales_draft_version_idx" on "entry_locales" ("draft_version_id");
+create index if not exists "page_locales_published_version_idx" on "page_locales" ("published_version_id");
+create index if not exists "entry_locales_published_version_idx" on "entry_locales" ("published_version_id");
+create index if not exists "pages_parent_id_idx" on "pages" ("parent_id");
+create index if not exists "entries_parent_id_idx" on "entries" ("parent_id");
+create index if not exists "assets_poster_idx" on "assets" ("poster_id");
+
+drop policy if exists "smoodly_write" on "pages";
+
+drop policy if exists "smoodly_insert" on "pages";
+create policy "smoodly_insert" on "pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "pages";
+create policy "smoodly_update" on "pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "pages";
+create policy "smoodly_delete" on "pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."page_id" = "pages"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "page_locales";
+
+drop policy if exists "smoodly_insert" on "page_locales";
+create policy "smoodly_insert" on "page_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_locales";
+create policy "smoodly_update" on "page_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_locales";
+create policy "smoodly_delete" on "page_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "page_versions";
+
+drop policy if exists "smoodly_insert" on "page_versions";
+create policy "smoodly_insert" on "page_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_versions";
+create policy "smoodly_update" on "page_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_versions";
+create policy "smoodly_delete" on "page_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."published_version_id" = "page_versions"."id")));
+
+drop policy if exists "smoodly_write" on "entries";
+
+drop policy if exists "smoodly_insert" on "entries";
+create policy "smoodly_insert" on "entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entries";
+create policy "smoodly_update" on "entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entries";
+create policy "smoodly_delete" on "entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."entry_id" = "entries"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "entry_locales";
+
+drop policy if exists "smoodly_insert" on "entry_locales";
+create policy "smoodly_insert" on "entry_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_locales";
+create policy "smoodly_update" on "entry_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_locales";
+create policy "smoodly_delete" on "entry_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "entry_versions";
+
+drop policy if exists "smoodly_insert" on "entry_versions";
+create policy "smoodly_insert" on "entry_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_versions";
+create policy "smoodly_update" on "entry_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_versions";
+create policy "smoodly_delete" on "entry_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."published_version_id" = "entry_versions"."id")));
+
+drop policy if exists "smoodly_write" on "refs";
+create policy "smoodly_write" on "refs" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "paths";
+
+drop policy if exists "smoodly_insert" on "paths";
+create policy "smoodly_insert" on "paths" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "paths";
+create policy "smoodly_update" on "paths" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "paths";
+create policy "smoodly_delete" on "paths" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or (("kind" = 'page' and exists (select 1 from "page_locales" l where l."page_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')) or ("kind" = 'entry' and exists (select 1 from "entry_locales" l where l."entry_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')))));
+
+drop policy if exists "smoodly_write" on "assets";
+
+drop policy if exists "smoodly_insert" on "assets";
+create policy "smoodly_insert" on "assets" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "assets";
+create policy "smoodly_update" on "assets" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "assets";
+create policy "smoodly_delete" on "assets" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'ready'));
+
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_media_write" on storage.objects;
+
+drop policy if exists "smoodly_media_insert" on storage.objects;
+create policy "smoodly_media_insert" on storage.objects for insert
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_update" on storage.objects;
+create policy "smoodly_media_update" on storage.objects for update
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_delete" on storage.objects;
+create policy "smoodly_media_delete" on storage.objects for delete
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+revoke execute on function "smoodly_space_row_cap"() from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '6')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/{20260926150100_smoodly_views.sql → 20260929135623_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-26T15:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-29T13:56:23.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection posts sha256:2e648b887b8e7146

package/templates/blank-intl/app/[locale]/layout.tsx

@@ -14,10 +14,12 @@ import "../globals.css";
 // from its own `locales` map, landing on the same page in the other
 // language (spec 2026-09-15). They are the visitor's only language switch,
 // since locale detection is off (see i18n/routing.ts).
+// metadataBase makes Smoodly's hreflang alternates and social image URLs
+// absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
 export async function generateMetadata({ params }: { params: Promise<{ locale: string }> }) {
   const { locale } = await params;
   const site = await q().getGlobal("site", { locale });
-  return { title: site?.name ?? "Smoodly site" };
+  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.name ?? "Smoodly site" };
 }
 
 export default async function LocaleLayout({ children, params }: { children: ReactNode; params: Promise<{ locale: string }> }) {

package/templates/blank-intl/app/api/preview/route.ts

@@ -0,0 +1,3 @@
+// Draft mode on (with SMOODLY_PREVIEW_SECRET) or off (the preview pill's
+// Exit). The logic lives in the package.
+export { previewRoute as GET } from "smoodly/next";

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.33",
+    "smoodly": "0.0.35",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/scripts/seed.ts

@@ -72,7 +72,7 @@ const tree = {
   },
 } as unknown as PageTree;
 
-const home = await pages.createPage({ locale: DEFAULT, slug: "home", title: "Home", template: "home" });
+const home = await pages.createPage({ locale: DEFAULT, slug: "home", title: "Home", template: "home", fixed: "page:home" });
 await pages.saveDraft(home.id, DEFAULT, tree);
 await pages.publish(home.id, DEFAULT);
 for (const locale of OTHERS) {

package/templates/blank-intl/smoodly/server.ts

@@ -33,7 +33,8 @@ function bound(): Bound {
   const env = smoodlyEnv();
   const db = createSmoodlyClient(env);
   // ONE path index for both stores: pages and entries share the URL space.
-  const paths = new SupabasePathIndex(db);
+  // The index reads the code-owned addresses from the config (spec 2026-09-29 anchored paths §2).
+  const paths = new SupabasePathIndex(db, config.anchors);
   const locales = config.locales;
   const entries = new SupabaseEntryStore(db, collections, { paths, locales, globals, elements });
   const pages = new SupabasePageStore(db, {
@@ -41,6 +42,8 @@ function bound(): Bound {
     // The custom section's columns toolset, so a column's images count as usage (spec 2026-09-14 §6).
     custom: config.custom,
     homePageSlug: config.homePageSlug,
+    // Code-owned addresses by owner: a fixed page's or a collection's path (spec 2026-09-29 nested paths §3).
+    addresses: config.addresses,
     tree: config.pages?.tree,
   });
   // The media library: rows in `assets`, bytes in the public `media` bucket.
@@ -85,8 +88,9 @@ export function publicAuth(): AuthConfig {
   return { url: env.authUrl, key: env.authKey };
 }
 
-/** What the browser needs to join the editing-presence channel — public values only (spec 2026-09-26 concurrency §5). */
-export function publicContent(): ContentConfig {
+/** What the browser needs to join the editing-presence channel — public values only (spec 2026-09-26 concurrency §5).
+ * The space is asked of the database once per process. */
+export function publicContent(): Promise<ContentConfig> {
   return publicContentConfig(smoodlyEnv());
 }
 

package/templates/blank-intl/supabase/migrations/20260929120000_smoodly_v5.sql

@@ -0,0 +1,56 @@
+-- Smoodly core schema, version 5 (docs/superpowers/specs/2026-09-29-nested-collection-paths-design.md,
+-- docs/superpowers/specs/2026-09-29-anchored-paths-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 4: `pages.fixed` names the registration that owns a
+-- code-owned record, unique per space; `paths.anchor` names the code address
+-- a URL row hangs under, and the row keeps only the part editors made.
+-- No backfill: a record without `fixed` is an editor's page, a row without
+-- an anchor is the editors' tree.
+
+set client_min_messages = warning;
+
+alter table "pages" add column if not exists "fixed" text;
+
+create unique index if not exists "pages_fixed_idx"
+  on "pages" ("space_id", "fixed") where "fixed" is not null;
+
+alter table "paths" add column if not exists "anchor" text not null default '';
+alter table "paths" drop constraint if exists "paths_pkey";
+alter table "paths" add constraint "paths_pkey" primary key ("space_id", "locale", "anchor", "path");
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid, keys jsonb)
+  where p."redirect" and p."locale" = r.locale
+    and exists (select 1 from jsonb_to_recordset(r.keys) as k(anchor text, path text) where k.anchor = p."anchor" and k.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid, keys jsonb)
+                    cross join lateral jsonb_to_recordset(r.keys) as k(anchor text, path text)
+                    where r.locale = p."locale" and k.anchor = p."anchor" and k.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "anchor", "path", "kind", "target_id")
+  select r.locale, r.anchor, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, anchor text, path text, kind text, id uuid);
+$$;
+
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+create or replace function "smoodly_resolve_path"(p_locale text, p_keys jsonb) returns setof "paths" language sql stable set search_path = public as $$
+  select p.* from "paths" p
+  join jsonb_to_recordset(p_keys) as k(anchor text, path text) on p."anchor" = k.anchor and p."path" = k.path
+  where p."locale" = p_locale;
+$$;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '5')
+  on conflict ("key") do update set "value" = excluded."value";