create-smoodly-app 0.0.35 → 0.0.37

package/README.md

@@ -4,7 +4,7 @@
 
 A fresh Next.js app with the Smoodly admin mounted at `/admin`, a Supabase
 project holding the schema, `.env.local` written, and a first editor who can
-sign in. Spec: `docs/superpowers/specs/2026-09-04-create-smoodly-app-design.md`.
+sign in.
 
 ## What it asks
 
@@ -41,202 +41,3 @@ Every prompt has a flag, so CI can run it: `--supabase local|hosted`, `--locales
 `SMOODLY_EDITOR_PASSWORD`), `--skip-link`, `--yes`. `--help` lists them.
 A hidden `--smoodly-dep <spec>` overrides the `smoodly` dependency written into
 `package.json`; CI points it at the packed tarball.
-
-## How it is built
-
-`templates/lorem`, `templates/lorem-intl`, `templates/blank` and
-`templates/blank-intl` are all generated by `scripts/build-template.ts`.
-The Lorem Co. pair comes from `examples/site` — the multilingual layout —
-plus the five single-language files under `variants/lorem/single/`. The
-blank pair (spec 2026-09-11) takes only the content-free glue from the
-example (`smoodly/server.ts`, `ops.ts`, `admin.tsx`, `richtext.tsx`, the
-admin route files, next-intl's files) and everything with content from
-`variants/blank/{common,single,intl}/`. Each template also gets a generated
-`package.json` (with `smoodly` pinned to this package's version),
-`tsconfig`, `next.config`, README, `AGENTS.md`, a `CLAUDE.md` that imports
-it, and the one migration (`coreTablesSQL` + the starter's collection
-views). Two exact-line transforms turn the example's glue (locale config,
-`href`) into the single-language one; a drifted example fails the build
-rather than silently shipping stale copies. Every template gets a check
-tsconfig beside it; `npm run typecheck` runs `tsc` over all four
-(`typecheck:templates`), so hand-kept files cannot drift silently. All
-four templates are git-ignored and rebuilt by `npm run build`.
-
-`src/plan.ts` turns answers into steps; `src/run.ts` executes them with
-injected `exec`, fs and Supabase client so the sequence and every fallback
-message are unit-tested. `src/prompts.ts` is the only interactive code.
-The CLI has no runtime dependency on `smoodly`.
-
-    npm test          # unit tests (template build, planner, runner, editor)
-    npm run typecheck # tsc, then the four templates
-    npm run build     # templates + esbuild bundle → dist/index.js
-
-Walked 2026-09-06: both templates scaffolded against the repo's local stack
-in hosted mode, `tsc`, `next build` and `/admin` 200 for each; the
-multilingual one with `--locales en,de`.
-
-Walked 2026-09-11: blank multilingual scaffolded in local mode with
-`--locales en,fr` from the built CLI, `next build`, `/` and `/fr` seeded
-with the Text section and the site footer line, the admin listing Home,
-Posts and the Site item, a post with a Button element published and
-served at `/posts/<slug>` in both locales; blank single-language
-scaffolded in hosted mode against the repo stack and `next build` only.
-
-## Follow-ups (logged 2026-09-28, fresh-install proof of 0.0.30)
-
-Walked 2026-09-28: `npx create-smoodly-app@0.0.30 proof-0030 --supabase
-local --yes --editor-email …` from the published package, in a scratch
-directory beside three running stacks (the new one took the `563xx`
-block). `smoodly` 0.0.30 installed, `tsc` and `next build` clean, `/`,
-`/posts`, `/posts/<slug>`, `/company/about-us` and `/admin` 200, the
-admin document's `<html lang="en">` present, the editor signed in, an
-SEO title edit saved and published and served on `/`. Found:
-
-- **Local mode left Realtime out (0.0.26–0.0.30).** `LOCAL_START_ARGS`
-  excluded `realtime` from before the concurrency spec, whose presence
-  channel and `saved` events ride it; the admin retried the WebSocket
-  forever (a console error per attempt) and a local install had no
-  presence or stale-page notice. CI's repo stack already kept Realtime.
-  Fixed 2026-09-28: the list no longer excludes it; restarted with the new
-  flags, a script signed in as the editor joined `space:<id>` and saw both
-  open admin tabs tracked on Home. The live job does not catch this
-  (it requests `/admin` once, no browser); an existing local install
-  restarts with `supabase stop && supabase start -x imgproxy,edge-runtime,logflare,vector,supavisor`.
-- **The Lorem home's custom-section CTA linked `/articles`**, a 404 —
-  the articles collection lives at `/posts`. `examples/site/scripts/seed.ts`
-  hardcoded the href; fixed 2026-09-28 to `paths(locale).articles` like
-  every other starter link (Finnish gets its own segment too).
-- **`--editor-email` without `SMOODLY_EDITOR_PASSWORD` fails late.** The
-  check lives in `askEditorWith`, which runs after the copy, install,
-  `git init` and `supabase start`, so the run stops at `ensureEditor`
-  with a half-made app. It has to be late for hosted mode (the email may
-  name an existing Auth user, no password needed), but a local stack is
-  always fresh, so local mode could refuse up front. Fixed 2026-09-28:
-  `resolveAnswers` refuses local `--editor-email` without the variable
-  before anything is written (the built CLI exits 1, no directory made);
-  hosted keeps the late check.
-
-## Follow-ups (logged 2026-09-25, docs walk)
-
-- **Single-language `/admin` had no root `<html>` (0.0.15–0.0.20).** The
-  variant's `app/(smoodly)/admin/layout.tsx` re-exported `AdminLayout`,
-  which renders a `<div>`; that only worked while the site had a
-  top-level `app/layout.tsx`, and 0.0.15 moved the site into `app/(site)`.
-  `next dev` showed two errors on the first visit to `/admin`: "Missing
-  <html> tags in the root layout" and, from the client-rendered tree, the
-  theme boot's "Encountered a script tag while rendering React component".
-  Found walking the Getting started guide on a fresh `lorem` install of
-  0.0.20. Fixed 2026-09-25: the variant layout wraps `AdminLayout` in
-  `<html><body>` like the example's; both errors gone in the walk. CI's
-  live job only checks `/admin` for a 200, which this passed; an assertion
-  on the dev overlay (or on `<html>` in the served document) would have
-  caught it.
-
-## Follow-ups (logged 2026-09-11)
-
-- **Blank single-language is typechecked, never built by CI.** The live
-  job scaffolds lorem single (hosted), lorem intl and blank intl (local).
-  A fourth stack costs ~2 minutes; add it if blank single ever breaks in
-  a way `tsc` cannot see (a runtime import, a missing file at a path
-  Next reads).
-- **The guide inside the package.** `AGENTS.md` is generated per scaffold
-  and frozen at install time. Once its text settles, ship it in the
-  `smoodly` package (`smoodly/AGENTS.md`) and have the scaffold's copy
-  point there, so it tracks the package version.
-
-## Follow-ups (logged 2026-09-06)
-
-- Local mode on a fresh multilingual install (0.0.5, 2026-09-06) failed at
-  `supabase start` with `supabase_storage_<app> container is not ready:
-  unhealthy` — the storage container logged `Started Successfully` and the
-  CLI still stopped the stack. Five local stacks (57 containers) were
-  sharing 7.8 GB of Docker memory at the time, the same pressure that
-  made the repo's live suites flake on 2026-09-05. Smoodly never uses
-  storage, so the CLI could start the app's stack with
-  `supabase start -x storage-api,imgproxy,edge-runtime,logflare,vector,realtime`
-  (the container names `supabase start --help` lists; CI already excludes
-  most of these for the repo stack), and the "Finish by hand" text could
-  mention `supabase stop` on other projects. Retried the same day with
-  the other four stacks stopped (`supabase stop --project-id <name>`):
-  `npx create-smoodly-app@0.0.5 --supabase local --locales en,fi --yes`
-  came up with every container healthy, storage included, and the app
-  built and served `/admin` 200, `/` and `/fi` 404 — so the cause is
-  memory pressure, not the CLI. Fixed the same day: `run.ts` starts the
-  app's stack with `-x storage-api,imgproxy,edge-runtime,logflare,vector,realtime,supavisor`
-  (`LOCAL_START_ARGS`), and the "Finish by hand" text carries the same
-  flags. Kept: db, kong, auth, PostgREST, Studio and pg-meta, mailpit.
-  Storage is back in the local stack since the media library
-  (2026-09-08); the health-check flake is a Docker memory problem, see
-  the repo's memory note.
-- **A non-interactive run without `--locales` needs `--yes`.** The
-  "Multilingual site?" prompt is asked whenever `--locales` is absent, and
-  with no TTY (a CI step, stdin at EOF) the CLI exits 13 having created
-  nothing — "Detected unsettled top-level await". CI's hosted-mode e2e step
-  hit this; both e2e steps now pass a flag that settles the question
-  (`--yes` for single-language, `--locales en,de` for the multilingual one).
-  A prompt that treated EOF as its default value would need no flag.
-- **The next-intl template inherits next-intl's `localeDetection`
-  default**, which redirects an unprefixed URL to the visitor's preferred
-  locale *keeping the source locale's slugs* — on a site with translated
-  slugs that redirect lands on a 404 (`/company/about-us` →
-  `/fi/company/about-us` for a Finnish browser). Recorded in
-  `examples/site/README.md` under "Multilingual (2026-09-06)". Fixed the
-  same day: `i18n/routing.ts` in the example — and so in the generated
-  `templates/next-intl` — sets `localeDetection: false`, so the English
-  URL stays English for a Finnish browser and the visitor picks a
-  language through the site's own switcher.
-
-## Follow-ups (logged 2026-09-05)
-
-- Text prompts drop `@` when the terminal sends Option as Meta (macOS,
-  Finnish/Nordic layouts put `@` on Option+2): the terminal emits `ESC 2` and
-  Node's readline discards meta-keys, so nothing reaches the prompt.
-  Reproduced against `@clack/prompts` 1.7.0 with a scripted stdin. Not
-  fixable from prompt options; documented under "What it asks" with the
-  paste / `--editor-email` workaround. Revisit if clack exposes a key hook.
-- Fresh installs printed a `NOTICE ... does not exist, skipping` for every
-  `drop trigger/policy if exists` in the migration (fixed 2026-09-05: the
-  migration opens with `set client_min_messages = warning`).
-
-## Follow-ups (logged 2026-09-04)
-
-- The port probe binds `0.0.0.0` (a loopback-only bind coexists with a Docker-published port on macOS), so macOS may prompt once to allow `node` incoming connections during local mode; either answer is fine.
-- Windows: `exec` passes `shell: true` on win32 (needed for the `.cmd` shims)
-  but does not quote arguments, so a project name or path containing a space
-  or `&` breaks. Quote the args when the shell is on, or resolve the `.cmd`
-  path and drop `shell`. Untested on Windows.
-- Hosted mode, manual run against a real hosted project with new-format keys
-  (done 2026-09-05, throwaway project, `sb_secret_` + `sb_publishable_`):
-  `db push` of the template migration printed no NOTICE, the CLI listed and
-  created the first editor through the GoTrue admin API with the secret key
-  as the sole `apikey`, the `members` row landed with role `admin`, `next
-  build` passed, `/admin` served the shell, and a password sign-in with the
-  publishable key returned a session. Caveat: the link step ran by hand with
-  an explicit `--project-ref` (see the next-but-one item); the CLI's own
-  `supabase link` was not driven interactively.
-- Supabase CLI 2.78.1 prints `sb_secret_` keys masked (middle dots) from
-  `supabase projects api-keys`; 2.116.0 needs `--reveal`. A user who copies
-  the key from the CLI rather than the dashboard gets "Invalid API key" at
-  the editor step. Worth a hint in the "Finish by hand" text.
-- `listUsers` reads one page of 200 Auth users when offering an existing user
-  to make the first editor. Fine for a fresh project, wrong for a populated one.
-- `supabase link` ran without `--project-ref`, so the CLI opened the
-  project picker, which preselects the account's first project; `db push`
-  follows the link, so one Enter would push Smoodly's schema into whichever
-  project sorts first (seen 2026-09-05 during the hosted run, caught before
-  the push). Fixed 2026-09-05: `projectRef` (src/env.ts) takes the ref from
-  the typed URL's first host label and the link step and every fallback
-  line pass it. Seen again 2026-09-05 from the published 0.0.3: a URL typed
-  without `https://` gave no ref (the picker opened) and then failed
-  `ensureEditor` with supabase-js's "Invalid supabaseUrl". Fixed the same
-  day: `normalizeProjectUrl` (src/env.ts) adds the scheme and refuses
-  non-URLs at the prompt and for `--url`; a URL with no ref (custom domain)
-  never offers the link, and `run` throws rather than run a bare
-  `supabase link`.
-- The `--yes` flag defaults to local mode; with the Supabase CLI absent that
-  stops with the install message rather than falling through to hosted.
-- Captured `exec` output is stdout only; stderr streams straight through, so
-  `git init` hints and the Supabase CLI's update notice appear between the
-  prompt lines.
-- The "Local" option is still offered in the select when the Supabase CLI is
-  absent, and only bails afterwards; the spec wants the check before the prompt.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.35",
+  "version": "0.0.37",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/blank/app/(site)/layout.tsx

@@ -11,7 +11,7 @@ import "../globals.css";
 // absolute; SITE_URL is the deployed address (spec 2026-09-29 pre-install fixes §6).
 export async function generateMetadata() {
   const site = await q().getGlobal("site");
-  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.name ?? "Smoodly site" };
+  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.fields.name ?? "Smoodly site" };
 }
 
 export default async function RootLayout({ children }: { children: ReactNode }) {
@@ -20,7 +20,7 @@ export default async function RootLayout({ children }: { children: ReactNode })
     <html lang="en">
       <body>
         <main>{children}</main>
-        {site && <footer className="container site-footer">{site.name} · {site.tagline}</footer>}
+        {site && <footer className="container site-footer">{site.fields.name} · {site.fields.tagline}</footer>}
       </body>
     </html>
   );

package/templates/blank/components/pages/Home.tsx

@@ -13,7 +13,7 @@ export const homeSchema = smoodly.schema.page({
   zones: {
     body: z.freeform({ sections: [Text], custom: true }),
   },
-  meta: { seo: true },
+  seo: true,
 });
 
 function HomeView({ zones, page }: Props<typeof homeSchema>) {

package/templates/blank/components/pages/Page.tsx

@@ -11,7 +11,7 @@ export const pageSchema = smoodly.schema.page({
   zones: {
     body: z.freeform({ sections: [Text], custom: true }),
   },
-  meta: { seo: true },
+  seo: true,
 });
 
 function PageView({ zones, page }: Props<typeof pageSchema>) {

package/templates/blank/components/pages/Post.tsx

@@ -1,4 +1,4 @@
-import { smoodly, type EntryPageProps } from "smoodly";
+import { smoodly } from "smoodly";
 import { RichText } from "@/smoodly/richtext";
 import { posts } from "@/smoodly/collections";
 import { LocaleNav } from "../LocaleNav";
@@ -6,10 +6,9 @@ import { LocaleNav } from "../LocaleNav";
 // The entry page for `posts`, served at /posts/<slug>. It receives the
 // entry's fields; the body is richtext rendered by the site's bound
 // RichText, which knows the registered elements.
-type PostFields = { title: string; date?: string; body?: unknown };
-
-function PostView({ entry, locale, locales }: EntryPageProps) {
-  const post = entry.fields as PostFields;
+export const PostPage = smoodly.entryPage(posts, function PostView({ entry }) {
+  const { locale, locales } = entry;
+  const post = entry.fields;
   return (
     <>
       <LocaleNav locale={locale} locales={locales} />
@@ -20,6 +19,5 @@ function PostView({ entry, locale, locales }: EntryPageProps) {
       </article>
     </>
   );
-}
+});
 
-export const PostPage = smoodly.entryPage(posts, PostView);

package/templates/blank/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.35"
+    "smoodly": "0.0.37"
   },
   "devDependencies": {
     "@next/env": "^16.3.4",

package/templates/blank/smoodly/admin.tsx

@@ -1,6 +1,6 @@
 import { createSmoodlyAdmin } from "smoodly/admin/next";
 import { config } from "./config";
 import { smoodlyOp } from "./ops";
-import { publicAuth, publicContent } from "./server";
+import { publicAuth, presence } from "./server";
 
-export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, content: publicContent });
+export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, presence });

package/templates/blank/smoodly/server.ts

@@ -9,7 +9,7 @@
 // admin route enters it from config.ts — so nothing here may read the
 // config at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, publicContentConfig, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type ContentConfig, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, presenceConfig, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type PresenceConfig, type SmoodlySite,
 } from "smoodly";
 // The admin gate from `smoodly/admin`, which holds no client code: the site
 // routes import this file, and `smoodly/admin/next` would put the admin
@@ -89,8 +89,8 @@ export function publicAuth(): AuthConfig {
 
 /** What the browser needs to join the editing-presence channel — public values only (spec 2026-09-26 concurrency §5).
  * The space is asked of the database once per process. */
-export function publicContent(): Promise<ContentConfig> {
-  return publicContentConfig(smoodlyEnv());
+export function presence(): Promise<PresenceConfig> {
+  return presenceConfig(smoodlyEnv());
 }
 
 /** Locale-relative CMS path → site URL: the one seam for the renderer

package/templates/blank/supabase/migrations/20260930040956_smoodly_v7.sql

@@ -0,0 +1,84 @@
+-- Smoodly core schema, version 7 (docs/superpowers/specs/2026-09-29-content-api-contract-design.md §5).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 6: smoodly_list_entries, which filters, orders and
+-- limits a collection over the snapshot the reader is shown, and the read
+-- policies of every content table admit a write key only (§8).
+
+-- The shown snapshot of one collection's entries in a locale, filtered,
+-- ordered and limited in one query (spec 2026-09-29 content API contract
+-- §5): the published snapshot, or the live merge in preview. Invoker
+-- rights, so RLS decides what a key sees; a preview read needs the
+-- service role or a write key, anything else reads published.
+create or replace function "smoodly_list_entries"(
+  p_collection text, p_locale text, p_draft boolean, p_where jsonb, p_order jsonb,
+  p_limit integer, p_parent uuid, p_has_parent boolean, p_ids uuid[]
+) returns table ("id" uuid, "fields" jsonb) language sql stable set search_path = public as $$
+  with mode as (
+    select p_draft and (current_user = 'service_role' or "smoodly_key_kind"() = 'write') as draft
+  ), shown as (
+    select e."id", e."sort", e."created_at", l."updated_at",
+      case when (select draft from mode) then e."fields" || l."fields" || jsonb_build_object('slug', l."slug")
+           else coalesce(v."fields", e."fields" || l."fields" || jsonb_build_object('slug', l."slug")) end as "fields"
+    from "entries" e
+    join "entry_locales" l on l."entry_id" = e."id" and l."locale" = p_locale
+    left join "entry_versions" v on v."id" = l."published_version_id"
+    where e."collection" = p_collection
+      and ((select draft from mode) or l."status" = 'published')
+      and (not p_has_parent or e."parent_id" is not distinct from p_parent)
+      and (p_ids is null or e."id" = any(p_ids))
+  )
+  select s."id", s."fields" from shown s
+  where not exists (
+    select 1 from jsonb_each(coalesce(p_where, '{}'::jsonb)) w
+    where not (case when w.value ? 'in'
+                    then (s."fields" ->> w.key) = any (select jsonb_array_elements_text(w.value -> 'in'))
+                    else s."fields" @> jsonb_build_object(w.key, w.value -> 'contains') end))
+  order by
+    case when p_order ->> 'by' = 'manual' then s."sort" end asc nulls last,
+    case when p_order ->> 'direction' = 'asc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end asc nulls last,
+    case when p_order ->> 'direction' = 'desc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end desc nulls last,
+    s."created_at" asc, s."id" asc
+  limit p_limit;
+$$;
+
+-- No public content reads (spec 2026-09-29 content API contract §8): the
+-- publishable key and a read key read nothing; a write key reads its own space.
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '7')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank/supabase/migrations/{20260929135623_smoodly_views.sql → 20260930041056_smoodly_views.sql}

@@ -1,8 +1,8 @@
--- Smoodly: read views and order indexes for this app's collections, written by `npx smoodly migrate`
--- (2026-09-29T13:56:23.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Smoodly: read views for this app's collections, written by `npx smoodly migrate`
+-- (2026-09-30T04:10:56.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
 -- Never edit a written file: change the collection and run migrate again.
 
--- smoodly:collection posts sha256:2e648b887b8e7146
+-- smoodly:collection posts sha256:38ba2918f83ab367
 create or replace view "posts" with (security_invoker = true) as
 select
   e."id",
@@ -18,6 +18,3 @@ from "entries" e
 join "entry_locales" l on l."entry_id" = e."id"
 left join "entry_versions" v on v."id" = l."published_version_id"
 where e."collection" = 'posts' and l."status" = 'published';
-
-create index if not exists "entries_posts_date_idx"
-  on "entries" (("fields"->'date')) where "collection" = 'posts';

package/templates/blank-intl/app/[locale]/layout.tsx

@@ -19,7 +19,7 @@ import "../globals.css";
 export async function generateMetadata({ params }: { params: Promise<{ locale: string }> }) {
   const { locale } = await params;
   const site = await q().getGlobal("site", { locale });
-  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.name ?? "Smoodly site" };
+  return { metadataBase: new URL(process.env.SITE_URL || "http://localhost:3000"), title: site?.fields.name ?? "Smoodly site" };
 }
 
 export default async function LocaleLayout({ children, params }: { children: ReactNode; params: Promise<{ locale: string }> }) {
@@ -31,7 +31,7 @@ export default async function LocaleLayout({ children, params }: { children: Rea
       <body>
         <NextIntlClientProvider>
           <main>{children}</main>
-          {site && <footer className="container site-footer">{site.name} · {site.tagline}</footer>}
+          {site && <footer className="container site-footer">{site.fields.name} · {site.fields.tagline}</footer>}
         </NextIntlClientProvider>
       </body>
     </html>

package/templates/blank-intl/components/pages/Home.tsx

@@ -13,7 +13,7 @@ export const homeSchema = smoodly.schema.page({
   zones: {
     body: z.freeform({ sections: [Text], custom: true }),
   },
-  meta: { seo: true },
+  seo: true,
 });
 
 function HomeView({ zones, page }: Props<typeof homeSchema>) {

package/templates/blank-intl/components/pages/Page.tsx

@@ -11,7 +11,7 @@ export const pageSchema = smoodly.schema.page({
   zones: {
     body: z.freeform({ sections: [Text], custom: true }),
   },
-  meta: { seo: true },
+  seo: true,
 });
 
 function PageView({ zones, page }: Props<typeof pageSchema>) {

package/templates/blank-intl/components/pages/Post.tsx

@@ -1,4 +1,4 @@
-import { smoodly, type EntryPageProps } from "smoodly";
+import { smoodly } from "smoodly";
 import { RichText } from "@/smoodly/richtext";
 import { posts } from "@/smoodly/collections";
 import { LocaleNav } from "../LocaleNav";
@@ -6,10 +6,9 @@ import { LocaleNav } from "../LocaleNav";
 // The entry page for `posts`, served at /posts/<slug>. It receives the
 // entry's fields; the body is richtext rendered by the site's bound
 // RichText, which knows the registered elements.
-type PostFields = { title: string; date?: string; body?: unknown };
-
-function PostView({ entry, locale, locales }: EntryPageProps) {
-  const post = entry.fields as PostFields;
+export const PostPage = smoodly.entryPage(posts, function PostView({ entry }) {
+  const { locale, locales } = entry;
+  const post = entry.fields;
   return (
     <>
       <LocaleNav locale={locale} locales={locales} />
@@ -20,6 +19,5 @@ function PostView({ entry, locale, locales }: EntryPageProps) {
       </article>
     </>
   );
-}
+});
 
-export const PostPage = smoodly.entryPage(posts, PostView);

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.35",
+    "smoodly": "0.0.37",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/smoodly/admin.tsx

@@ -1,6 +1,6 @@
 import { createSmoodlyAdmin } from "smoodly/admin/next";
 import { config } from "./config";
 import { smoodlyOp } from "./ops";
-import { publicAuth, publicContent } from "./server";
+import { publicAuth, presence } from "./server";
 
-export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, content: publicContent });
+export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, presence });

package/templates/blank-intl/smoodly/server.ts

@@ -9,7 +9,7 @@
 // admin route enters it from config.ts — so nothing here may read the
 // config at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, publicContentConfig, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type ContentConfig, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, presenceConfig, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type PresenceConfig, type SmoodlySite,
 } from "smoodly";
 // The admin gate from `smoodly/admin`, which holds no client code: the site
 // routes import this file, and `smoodly/admin/next` would put the admin
@@ -90,8 +90,8 @@ export function publicAuth(): AuthConfig {
 
 /** What the browser needs to join the editing-presence channel — public values only (spec 2026-09-26 concurrency §5).
  * The space is asked of the database once per process. */
-export function publicContent(): Promise<ContentConfig> {
-  return publicContentConfig(smoodlyEnv());
+export function presence(): Promise<PresenceConfig> {
+  return presenceConfig(smoodlyEnv());
 }
 
 /** Locale-relative CMS path → site URL: the one seam for the renderer

package/templates/blank-intl/supabase/migrations/20260930040956_smoodly_v7.sql

@@ -0,0 +1,84 @@
+-- Smoodly core schema, version 7 (docs/superpowers/specs/2026-09-29-content-api-contract-design.md §5).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 6: smoodly_list_entries, which filters, orders and
+-- limits a collection over the snapshot the reader is shown, and the read
+-- policies of every content table admit a write key only (§8).
+
+-- The shown snapshot of one collection's entries in a locale, filtered,
+-- ordered and limited in one query (spec 2026-09-29 content API contract
+-- §5): the published snapshot, or the live merge in preview. Invoker
+-- rights, so RLS decides what a key sees; a preview read needs the
+-- service role or a write key, anything else reads published.
+create or replace function "smoodly_list_entries"(
+  p_collection text, p_locale text, p_draft boolean, p_where jsonb, p_order jsonb,
+  p_limit integer, p_parent uuid, p_has_parent boolean, p_ids uuid[]
+) returns table ("id" uuid, "fields" jsonb) language sql stable set search_path = public as $$
+  with mode as (
+    select p_draft and (current_user = 'service_role' or "smoodly_key_kind"() = 'write') as draft
+  ), shown as (
+    select e."id", e."sort", e."created_at", l."updated_at",
+      case when (select draft from mode) then e."fields" || l."fields" || jsonb_build_object('slug', l."slug")
+           else coalesce(v."fields", e."fields" || l."fields" || jsonb_build_object('slug', l."slug")) end as "fields"
+    from "entries" e
+    join "entry_locales" l on l."entry_id" = e."id" and l."locale" = p_locale
+    left join "entry_versions" v on v."id" = l."published_version_id"
+    where e."collection" = p_collection
+      and ((select draft from mode) or l."status" = 'published')
+      and (not p_has_parent or e."parent_id" is not distinct from p_parent)
+      and (p_ids is null or e."id" = any(p_ids))
+  )
+  select s."id", s."fields" from shown s
+  where not exists (
+    select 1 from jsonb_each(coalesce(p_where, '{}'::jsonb)) w
+    where not (case when w.value ? 'in'
+                    then (s."fields" ->> w.key) = any (select jsonb_array_elements_text(w.value -> 'in'))
+                    else s."fields" @> jsonb_build_object(w.key, w.value -> 'contains') end))
+  order by
+    case when p_order ->> 'by' = 'manual' then s."sort" end asc nulls last,
+    case when p_order ->> 'direction' = 'asc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end asc nulls last,
+    case when p_order ->> 'direction' = 'desc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end desc nulls last,
+    s."created_at" asc, s."id" asc
+  limit p_limit;
+$$;
+
+-- No public content reads (spec 2026-09-29 content API contract §8): the
+-- publishable key and a read key read nothing; a write key reads its own space.
+drop policy if exists "smoodly_read" on "pages";
+create policy "smoodly_read" on "pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_locales";
+create policy "smoodly_read" on "page_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "page_versions";
+create policy "smoodly_read" on "page_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entries";
+create policy "smoodly_read" on "entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_locales";
+create policy "smoodly_read" on "entry_locales" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "entry_versions";
+create policy "smoodly_read" on "entry_versions" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "paths";
+create policy "smoodly_read" on "paths" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "assets";
+create policy "smoodly_read" on "assets" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '7')
+  on conflict ("key") do update set "value" = excluded."value";