create-smoodly-app 0.0.34 → 0.0.35

package/dist/index.js

@@ -163,6 +163,10 @@ function renderEnv(keys) {
     `SMOODLY_URL=${keys.url}`,
     `SMOODLY_SECRET_KEY=${keys.secretKey}`,
     `SMOODLY_PUBLISHABLE_KEY=${keys.publishableKey}`,
+    "",
+    "# The site's own address: absolute hreflang and social URLs. Set it to",
+    "# the production URL where you deploy.",
+    "SITE_URL=http://localhost:3000",
     ""
   ].join("\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.34",
+  "version": "0.0.35",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/blank/app/(site)/layout.tsx

@@ -7,9 +7,11 @@ import "../globals.css";
 // a child of this one. The `site` global item (smoodly/globals.ts) gives
 // the document title and the footer line: read through `q`, cached under
 // its tag, null until published.
+// metadataBase makes Smoodly's hreflang alternates and social image URLs
+// absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
 export async function generateMetadata() {
   const site = await q().getGlobal("site");
-  return { title: site?.name ?? "Smoodly site" };
+  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.name ?? "Smoodly site" };
 }
 
 export default async function RootLayout({ children }: { children: ReactNode }) {

package/templates/blank/app/api/preview/route.ts

@@ -0,0 +1,3 @@
+// Draft mode on (with SMOODLY_PREVIEW_SECRET) or off (the preview pill's
+// Exit). The logic lives in the package.
+export { previewRoute as GET } from "smoodly/next";

package/templates/blank/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.34"
+    "smoodly": "0.0.35"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/blank/supabase/migrations/20260929135523_smoodly_v6.sql

@@ -0,0 +1,200 @@
+-- Smoodly core schema, version 6 (docs/superpowers/specs/2026-09-29-pre-install-fixes-design.md §3).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 5: one permissive policy per table and action (the
+-- write key reads through smoodly_read; smoodly_write splits into insert,
+-- update and delete where a public read exists; the media pair the same),
+-- indexes on the foreign keys without one, and no anon call of the row cap.
+-- Access is unchanged.
+
+set client_min_messages = warning;
+
+create index if not exists "page_locales_draft_version_idx" on "page_locales" ("draft_version_id");
+create index if not exists "entry_locales_draft_version_idx" on "entry_locales" ("draft_version_id");
+create index if not exists "page_locales_published_version_idx" on "page_locales" ("published_version_id");
+create index if not exists "entry_locales_published_version_idx" on "entry_locales" ("published_version_id");
+create index if not exists "pages_parent_id_idx" on "pages" ("parent_id");
+create index if not exists "entries_parent_id_idx" on "entries" ("parent_id");
+create index if not exists "assets_poster_idx" on "assets" ("poster_id");
+
+drop policy if exists "smoodly_write" on "pages";
+
+drop policy if exists "smoodly_insert" on "pages";
+create policy "smoodly_insert" on "pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "pages";
+create policy "smoodly_update" on "pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "pages";
+create policy "smoodly_delete" on "pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."page_id" = "pages"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "page_locales";
+
+drop policy if exists "smoodly_insert" on "page_locales";
+create policy "smoodly_insert" on "page_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_locales";
+create policy "smoodly_update" on "page_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_locales";
+create policy "smoodly_delete" on "page_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "page_versions";
+
+drop policy if exists "smoodly_insert" on "page_versions";
+create policy "smoodly_insert" on "page_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_versions";
+create policy "smoodly_update" on "page_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_versions";
+create policy "smoodly_delete" on "page_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."published_version_id" = "page_versions"."id")));
+
+drop policy if exists "smoodly_write" on "entries";
+
+drop policy if exists "smoodly_insert" on "entries";
+create policy "smoodly_insert" on "entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entries";
+create policy "smoodly_update" on "entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entries";
+create policy "smoodly_delete" on "entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."entry_id" = "entries"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "entry_locales";
+
+drop policy if exists "smoodly_insert" on "entry_locales";
+create policy "smoodly_insert" on "entry_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_locales";
+create policy "smoodly_update" on "entry_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_locales";
+create policy "smoodly_delete" on "entry_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "entry_versions";
+
+drop policy if exists "smoodly_insert" on "entry_versions";
+create policy "smoodly_insert" on "entry_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_versions";
+create policy "smoodly_update" on "entry_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_versions";
+create policy "smoodly_delete" on "entry_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."published_version_id" = "entry_versions"."id")));
+
+drop policy if exists "smoodly_write" on "refs";
+create policy "smoodly_write" on "refs" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "paths";
+
+drop policy if exists "smoodly_insert" on "paths";
+create policy "smoodly_insert" on "paths" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "paths";
+create policy "smoodly_update" on "paths" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "paths";
+create policy "smoodly_delete" on "paths" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or (("kind" = 'page' and exists (select 1 from "page_locales" l where l."page_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')) or ("kind" = 'entry' and exists (select 1 from "entry_locales" l where l."entry_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')))));
+
+drop policy if exists "smoodly_write" on "assets";
+
+drop policy if exists "smoodly_insert" on "assets";
+create policy "smoodly_insert" on "assets" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "assets";
+create policy "smoodly_update" on "assets" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "assets";
+create policy "smoodly_delete" on "assets" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'ready'));
+
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_media_write" on storage.objects;
+
+drop policy if exists "smoodly_media_insert" on storage.objects;
+create policy "smoodly_media_insert" on storage.objects for insert
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_update" on storage.objects;
+create policy "smoodly_media_update" on storage.objects for update
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_delete" on storage.objects;
+create policy "smoodly_media_delete" on storage.objects for delete
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+revoke execute on function "smoodly_space_row_cap"() from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '6')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/{20260929120100_smoodly_views.sql → 20260929135623_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-29T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-29T13:56:23.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection posts sha256:2e648b887b8e7146

package/templates/blank-intl/app/[locale]/layout.tsx

@@ -14,10 +14,12 @@ import "../globals.css";
 // from its own `locales` map, landing on the same page in the other
 // language (spec 2026-09-15). They are the visitor's only language switch,
 // since locale detection is off (see i18n/routing.ts).
+// metadataBase makes Smoodly's hreflang alternates and social image URLs
+// absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
 export async function generateMetadata({ params }: { params: Promise<{ locale: string }> }) {
   const { locale } = await params;
   const site = await q().getGlobal("site", { locale });
-  return { title: site?.name ?? "Smoodly site" };
+  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.name ?? "Smoodly site" };
 }
 
 export default async function LocaleLayout({ children, params }: { children: ReactNode; params: Promise<{ locale: string }> }) {

package/templates/blank-intl/app/api/preview/route.ts

@@ -0,0 +1,3 @@
+// Draft mode on (with SMOODLY_PREVIEW_SECRET) or off (the preview pill's
+// Exit). The logic lives in the package.
+export { previewRoute as GET } from "smoodly/next";

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.34",
+    "smoodly": "0.0.35",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/supabase/migrations/20260929135523_smoodly_v6.sql

@@ -0,0 +1,200 @@
+-- Smoodly core schema, version 6 (docs/superpowers/specs/2026-09-29-pre-install-fixes-design.md §3).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 5: one permissive policy per table and action (the
+-- write key reads through smoodly_read; smoodly_write splits into insert,
+-- update and delete where a public read exists; the media pair the same),
+-- indexes on the foreign keys without one, and no anon call of the row cap.
+-- Access is unchanged.
+
+set client_min_messages = warning;
+
+create index if not exists "page_locales_draft_version_idx" on "page_locales" ("draft_version_id");
+create index if not exists "entry_locales_draft_version_idx" on "entry_locales" ("draft_version_id");
+create index if not exists "page_locales_published_version_idx" on "page_locales" ("published_version_id");
+create index if not exists "entry_locales_published_version_idx" on "entry_locales" ("published_version_id");
+create index if not exists "pages_parent_id_idx" on "pages" ("parent_id");
+create index if not exists "entries_parent_id_idx" on "entries" ("parent_id");
+create index if not exists "assets_poster_idx" on "assets" ("poster_id");
+
+drop policy if exists "smoodly_write" on "pages";
+
+drop policy if exists "smoodly_insert" on "pages";
+create policy "smoodly_insert" on "pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "pages";
+create policy "smoodly_update" on "pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "pages";
+create policy "smoodly_delete" on "pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."page_id" = "pages"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "page_locales";
+
+drop policy if exists "smoodly_insert" on "page_locales";
+create policy "smoodly_insert" on "page_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_locales";
+create policy "smoodly_update" on "page_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_locales";
+create policy "smoodly_delete" on "page_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "page_versions";
+
+drop policy if exists "smoodly_insert" on "page_versions";
+create policy "smoodly_insert" on "page_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_versions";
+create policy "smoodly_update" on "page_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_versions";
+create policy "smoodly_delete" on "page_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."published_version_id" = "page_versions"."id")));
+
+drop policy if exists "smoodly_write" on "entries";
+
+drop policy if exists "smoodly_insert" on "entries";
+create policy "smoodly_insert" on "entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entries";
+create policy "smoodly_update" on "entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entries";
+create policy "smoodly_delete" on "entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."entry_id" = "entries"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "entry_locales";
+
+drop policy if exists "smoodly_insert" on "entry_locales";
+create policy "smoodly_insert" on "entry_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_locales";
+create policy "smoodly_update" on "entry_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_locales";
+create policy "smoodly_delete" on "entry_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "entry_versions";
+
+drop policy if exists "smoodly_insert" on "entry_versions";
+create policy "smoodly_insert" on "entry_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_versions";
+create policy "smoodly_update" on "entry_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_versions";
+create policy "smoodly_delete" on "entry_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."published_version_id" = "entry_versions"."id")));
+
+drop policy if exists "smoodly_write" on "refs";
+create policy "smoodly_write" on "refs" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "paths";
+
+drop policy if exists "smoodly_insert" on "paths";
+create policy "smoodly_insert" on "paths" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "paths";
+create policy "smoodly_update" on "paths" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "paths";
+create policy "smoodly_delete" on "paths" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or (("kind" = 'page' and exists (select 1 from "page_locales" l where l."page_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')) or ("kind" = 'entry' and exists (select 1 from "entry_locales" l where l."entry_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')))));
+
+drop policy if exists "smoodly_write" on "assets";
+
+drop policy if exists "smoodly_insert" on "assets";
+create policy "smoodly_insert" on "assets" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "assets";
+create policy "smoodly_update" on "assets" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "assets";
+create policy "smoodly_delete" on "assets" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'ready'));
+
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_media_write" on storage.objects;
+
+drop policy if exists "smoodly_media_insert" on storage.objects;
+create policy "smoodly_media_insert" on storage.objects for insert
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_update" on storage.objects;
+create policy "smoodly_media_update" on storage.objects for update
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_delete" on storage.objects;
+create policy "smoodly_media_delete" on storage.objects for delete
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+revoke execute on function "smoodly_space_row_cap"() from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '6')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/{20260929120100_smoodly_views.sql → 20260929135623_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-29T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-29T13:56:23.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection posts sha256:2e648b887b8e7146

package/templates/blank-intl.tsconfig.json

@@ -10,9 +10,6 @@
       "smoodly": [
         "../../smoodly/src/index.ts"
       ],
-      "smoodly/bridge": [
-        "../../smoodly/src/admin/next/bridge.tsx"
-      ],
       "smoodly/image/config": [
         "../../smoodly/src/image/next-config.ts"
       ],

package/templates/blank.tsconfig.json

@@ -10,9 +10,6 @@
       "smoodly": [
         "../../smoodly/src/index.ts"
       ],
-      "smoodly/bridge": [
-        "../../smoodly/src/admin/next/bridge.tsx"
-      ],
       "smoodly/image/config": [
         "../../smoodly/src/image/next-config.ts"
       ],

package/templates/lorem/app/(site)/layout.tsx

@@ -8,7 +8,9 @@ import "../globals.css";
 const serif = Newsreader({ subsets: ["latin", "latin-ext"], style: ["normal", "italic"], variable: "--font-serif" });
 const sans = Instrument_Sans({ subsets: ["latin", "latin-ext"], weight: ["400", "500", "600"], variable: "--font-sans" });
 
-export const metadata = { title: "Lorem Co." };
+// metadataBase makes Smoodly's hreflang alternates and social image URLs
+// absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
+export const metadata = { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: "Lorem Co." };
 
 // The site's root layout, in its own route group so the admin's layout
 // under app/(smoodly)/admin is a second root layout beside it rather than

package/templates/lorem/app/api/preview/route.ts

@@ -0,0 +1,3 @@
+// Draft mode on (with SMOODLY_PREVIEW_SECRET) or off (the preview pill's
+// Exit). The logic lives in the package.
+export { previewRoute as GET } from "smoodly/next";

package/templates/lorem/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.34"
+    "smoodly": "0.0.35"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/lorem/supabase/migrations/20260929135523_smoodly_v6.sql

@@ -0,0 +1,200 @@
+-- Smoodly core schema, version 6 (docs/superpowers/specs/2026-09-29-pre-install-fixes-design.md §3).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 5: one permissive policy per table and action (the
+-- write key reads through smoodly_read; smoodly_write splits into insert,
+-- update and delete where a public read exists; the media pair the same),
+-- indexes on the foreign keys without one, and no anon call of the row cap.
+-- Access is unchanged.
+
+set client_min_messages = warning;
+
+create index if not exists "page_locales_draft_version_idx" on "page_locales" ("draft_version_id");
+create index if not exists "entry_locales_draft_version_idx" on "entry_locales" ("draft_version_id");
+create index if not exists "page_locales_published_version_idx" on "page_locales" ("published_version_id");
+create index if not exists "entry_locales_published_version_idx" on "entry_locales" ("published_version_id");
+create index if not exists "pages_parent_id_idx" on "pages" ("parent_id");
+create index if not exists "entries_parent_id_idx" on "entries" ("parent_id");
+create index if not exists "assets_poster_idx" on "assets" ("poster_id");
+
+drop policy if exists "smoodly_write" on "pages";
+
+drop policy if exists "smoodly_insert" on "pages";
+create policy "smoodly_insert" on "pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "pages";
+create policy "smoodly_update" on "pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "pages";
+create policy "smoodly_delete" on "pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."page_id" = "pages"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "page_locales";
+
+drop policy if exists "smoodly_insert" on "page_locales";
+create policy "smoodly_insert" on "page_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_locales";
+create policy "smoodly_update" on "page_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_locales";
+create policy "smoodly_delete" on "page_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "page_versions";
+
+drop policy if exists "smoodly_insert" on "page_versions";
+create policy "smoodly_insert" on "page_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_versions";
+create policy "smoodly_update" on "page_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_versions";
+create policy "smoodly_delete" on "page_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."published_version_id" = "page_versions"."id")));
+
+drop policy if exists "smoodly_write" on "entries";
+
+drop policy if exists "smoodly_insert" on "entries";
+create policy "smoodly_insert" on "entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entries";
+create policy "smoodly_update" on "entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entries";
+create policy "smoodly_delete" on "entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."entry_id" = "entries"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "entry_locales";
+
+drop policy if exists "smoodly_insert" on "entry_locales";
+create policy "smoodly_insert" on "entry_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_locales";
+create policy "smoodly_update" on "entry_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_locales";
+create policy "smoodly_delete" on "entry_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "entry_versions";
+
+drop policy if exists "smoodly_insert" on "entry_versions";
+create policy "smoodly_insert" on "entry_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_versions";
+create policy "smoodly_update" on "entry_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_versions";
+create policy "smoodly_delete" on "entry_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."published_version_id" = "entry_versions"."id")));
+
+drop policy if exists "smoodly_write" on "refs";
+create policy "smoodly_write" on "refs" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "paths";
+
+drop policy if exists "smoodly_insert" on "paths";
+create policy "smoodly_insert" on "paths" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "paths";
+create policy "smoodly_update" on "paths" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "paths";
+create policy "smoodly_delete" on "paths" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or (("kind" = 'page' and exists (select 1 from "page_locales" l where l."page_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')) or ("kind" = 'entry' and exists (select 1 from "entry_locales" l where l."entry_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')))));
+
+drop policy if exists "smoodly_write" on "assets";
+
+drop policy if exists "smoodly_insert" on "assets";
+create policy "smoodly_insert" on "assets" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "assets";
+create policy "smoodly_update" on "assets" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "assets";
+create policy "smoodly_delete" on "assets" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'ready'));
+
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_media_write" on storage.objects;
+
+drop policy if exists "smoodly_media_insert" on storage.objects;
+create policy "smoodly_media_insert" on storage.objects for insert
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_update" on storage.objects;
+create policy "smoodly_media_update" on storage.objects for update
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_delete" on storage.objects;
+create policy "smoodly_media_delete" on storage.objects for delete
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+revoke execute on function "smoodly_space_row_cap"() from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '6')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem/supabase/migrations/{20260929120100_smoodly_views.sql → 20260929135623_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-29T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-29T13:56:23.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection people sha256:929798ebb4fa2bb6

package/templates/lorem-intl/app/[locale]/layout.tsx

@@ -11,7 +11,9 @@ import "../globals.css";
 const serif = Newsreader({ subsets: ["latin", "latin-ext"], style: ["normal", "italic"], variable: "--font-serif" });
 const sans = Instrument_Sans({ subsets: ["latin", "latin-ext"], weight: ["400", "500", "600"], variable: "--font-sans" });
 
-export const metadata = { title: "Lorem Co." };
+// metadataBase makes Smoodly's hreflang alternates and social image URLs
+// absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
+export const metadata = { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: "Lorem Co." };
 
 // The site's root layout. The admin has its own under app/(smoodly)/admin —
 // two root layouts, a full page load between them, which is fine: they

package/templates/lorem-intl/app/api/preview/route.ts

@@ -0,0 +1,3 @@
+// Draft mode on (with SMOODLY_PREVIEW_SECRET) or off (the preview pill's
+// Exit). The logic lives in the package.
+export { previewRoute as GET } from "smoodly/next";

package/templates/lorem-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.34",
+    "smoodly": "0.0.35",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/lorem-intl/supabase/migrations/20260929135523_smoodly_v6.sql

@@ -0,0 +1,200 @@
+-- Smoodly core schema, version 6 (docs/superpowers/specs/2026-09-29-pre-install-fixes-design.md §3).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 5: one permissive policy per table and action (the
+-- write key reads through smoodly_read; smoodly_write splits into insert,
+-- update and delete where a public read exists; the media pair the same),
+-- indexes on the foreign keys without one, and no anon call of the row cap.
+-- Access is unchanged.
+
+set client_min_messages = warning;
+
+create index if not exists "page_locales_draft_version_idx" on "page_locales" ("draft_version_id");
+create index if not exists "entry_locales_draft_version_idx" on "entry_locales" ("draft_version_id");
+create index if not exists "page_locales_published_version_idx" on "page_locales" ("published_version_id");
+create index if not exists "entry_locales_published_version_idx" on "entry_locales" ("published_version_id");
+create index if not exists "pages_parent_id_idx" on "pages" ("parent_id");
+create index if not exists "entries_parent_id_idx" on "entries" ("parent_id");
+create index if not exists "assets_poster_idx" on "assets" ("poster_id");
+
+drop policy if exists "smoodly_write" on "pages";
+
+drop policy if exists "smoodly_insert" on "pages";
+create policy "smoodly_insert" on "pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "pages";
+create policy "smoodly_update" on "pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "pages";
+create policy "smoodly_delete" on "pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."page_id" = "pages"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "page_locales";
+
+drop policy if exists "smoodly_insert" on "page_locales";
+create policy "smoodly_insert" on "page_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_locales";
+create policy "smoodly_update" on "page_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_locales";
+create policy "smoodly_delete" on "page_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "page_versions";
+
+drop policy if exists "smoodly_insert" on "page_versions";
+create policy "smoodly_insert" on "page_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "page_versions";
+create policy "smoodly_update" on "page_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "page_versions";
+create policy "smoodly_delete" on "page_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "page_locales" l where l."published_version_id" = "page_versions"."id")));
+
+drop policy if exists "smoodly_write" on "entries";
+
+drop policy if exists "smoodly_insert" on "entries";
+create policy "smoodly_insert" on "entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entries";
+create policy "smoodly_update" on "entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entries";
+create policy "smoodly_delete" on "entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."entry_id" = "entries"."id" and l."status" = 'published')));
+
+drop policy if exists "smoodly_write" on "entry_locales";
+
+drop policy if exists "smoodly_insert" on "entry_locales";
+create policy "smoodly_insert" on "entry_locales" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_locales";
+create policy "smoodly_update" on "entry_locales" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_locales";
+create policy "smoodly_delete" on "entry_locales" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'published'));
+
+drop policy if exists "smoodly_write" on "entry_versions";
+
+drop policy if exists "smoodly_insert" on "entry_versions";
+create policy "smoodly_insert" on "entry_versions" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "entry_versions";
+create policy "smoodly_update" on "entry_versions" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "entry_versions";
+create policy "smoodly_delete" on "entry_versions" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or exists (select 1 from "entry_locales" l where l."published_version_id" = "entry_versions"."id")));
+
+drop policy if exists "smoodly_write" on "refs";
+create policy "smoodly_write" on "refs" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "paths";
+
+drop policy if exists "smoodly_insert" on "paths";
+create policy "smoodly_insert" on "paths" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "paths";
+create policy "smoodly_update" on "paths" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "paths";
+create policy "smoodly_delete" on "paths" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or (("kind" = 'page' and exists (select 1 from "page_locales" l where l."page_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')) or ("kind" = 'entry' and exists (select 1 from "entry_locales" l where l."entry_id" = "paths"."target_id" and l."locale" = "paths"."locale" and l."status" = 'published')))));
+
+drop policy if exists "smoodly_write" on "assets";
+
+drop policy if exists "smoodly_insert" on "assets";
+create policy "smoodly_insert" on "assets" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "assets";
+create policy "smoodly_update" on "assets" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "assets";
+create policy "smoodly_delete" on "assets" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and ((select "smoodly_key_kind"()) = 'write' or "status" = 'ready'));
+
+drop policy if exists "smoodly_write" on "members";
+create policy "smoodly_write" on "members" for all
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_media_write" on storage.objects;
+
+drop policy if exists "smoodly_media_insert" on storage.objects;
+create policy "smoodly_media_insert" on storage.objects for insert
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_update" on storage.objects;
+create policy "smoodly_media_update" on storage.objects for update
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text)
+  with check ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+drop policy if exists "smoodly_media_delete" on storage.objects;
+create policy "smoodly_media_delete" on storage.objects for delete
+  using ("bucket_id" = 'media' and (select public."smoodly_key_kind"()) = 'write' and not (select public."smoodly_space_key_revoked"()) and split_part("name", '/', 1) = (select public."smoodly_current_space"())::text);
+
+revoke execute on function "smoodly_space_row_cap"() from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '6')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/{20260929120100_smoodly_views.sql → 20260929135623_smoodly_views.sql}

@@ -1,5 +1,5 @@
 -- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-29T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- (2026-09-29T13:56:23.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
 -- smoodly:collection people sha256:929798ebb4fa2bb6

package/templates/lorem-intl.tsconfig.json

@@ -10,9 +10,6 @@
       "smoodly": [
         "../../smoodly/src/index.ts"
       ],
-      "smoodly/bridge": [
-        "../../smoodly/src/admin/next/bridge.tsx"
-      ],
       "smoodly/image/config": [
         "../../smoodly/src/image/next-config.ts"
       ],

package/templates/lorem.tsconfig.json

@@ -10,9 +10,6 @@
       "smoodly": [
         "../../smoodly/src/index.ts"
       ],
-      "smoodly/bridge": [
-        "../../smoodly/src/admin/next/bridge.tsx"
-      ],
       "smoodly/image/config": [
         "../../smoodly/src/image/next-config.ts"
       ],