create-smoodly-app 0.0.45 → 0.0.47

package/templates/blank-intl/components/sections/Text.tsx

@@ -1,32 +1,12 @@
-import { f, smoodly, type Props } from "smoodly";
+import { smoodly, type Props } from "smoodly/react";
 import { RichText } from "@/smoodly/richtext";
-import { text } from "@/smoodly/toolsets";
+import { textSchema } from "./Text.schema";
 
-// A section: a title and a richtext body. Registered in
-// smoodly/sections.ts and allowed in the page shapes' zones
-// (components/pages/*.tsx). Copy this file to add another section.
-// The section wrapper renders the root element, Smoodly's styles set
-// inline (spacing, width, align) and the node id; a setting the CSS
-// reads — here `background` — is the view's own data attribute.
-export const textSchema = smoodly.schema.section({
-  name: "text",
-  title: "Text",
-  description: "A title and a body of text.",
-  fields: {
-    title: f.text(),
-    body: f.richtext({ toolset: text }),
-  },
-  settings: {
-    background: f.radio([{ value: "paper", label: "Paper" }, { value: "ink", label: "Ink" }]).default("paper"),
-  },
-  sample: {
-    title: "Hello",
-    body: { type: "doc", content: [{ type: "paragraph", content: [{ type: "text", text: "Write something here." }] }] },
-  },
-});
-
-// Marks tie the rendered elements to their fields, so the editor can
-// select and inline-edit them on the canvas.
+// The section's component. The section wrapper renders the root element,
+// Smoodly's styles set inline (spacing, width, align) and the node id; a
+// setting the CSS reads — here `background` — is the view's own data
+// attribute. Marks tie the rendered elements to their fields, so the
+// editor can select and inline-edit them on the canvas.
 const m = smoodly.marks(textSchema);
 
 function TextView({ title, body, settings, styles }: Props<typeof textSchema>) {

package/templates/blank-intl/package.json

@@ -14,7 +14,7 @@
     "next": "^16.3.4",
     "react": "^19",
     "react-dom": "^19",
-    "smoodly": "0.0.45",
+    "smoodly": "0.0.47",
     "next-intl": "^4.14.2"
   },
   "devDependencies": {

package/templates/blank-intl/scripts/seed.ts

@@ -14,7 +14,7 @@ loadEnvConfig(process.cwd());
 
 const { config } = await import("../smoodly/config");
 const { content, node } = await import("../smoodly/server");
-const { Text } = await import("../components/sections/Text");
+const { textSchema } = await import("../components/sections/Text.schema");
 const c = content();
 
 const DEFAULT = config.locales.default;
@@ -59,7 +59,7 @@ const tree: PageTree = {
   meta: { description: "A new site, built with Smoodly." },
   zones: {
     body: [
-      node(Text, {
+      node(textSchema, {
         title: "Hello",
         body: doc(
           p("This is your home page. Open the admin to edit this text, add sections, create pages and write posts."),

package/templates/blank-intl/smoodly/config.ts

@@ -4,15 +4,15 @@ import { collections } from "./collections";
 import { sections } from "./sections";
 import { globals } from "./globals";
 import { elements } from "./elements";
-import { HomePage } from "@/components/pages/Home";
-import { StandardPage } from "@/components/pages/Page";
-import { PostPage } from "@/components/pages/Post";
+import { homeSchema } from "@/components/pages/Home.schema";
+import { pageSchema } from "@/components/pages/Page.schema";
 
 export { collections, sections, globals, elements };
 
-// The registry and the plain settings, one file. Runtime-free: nothing
-// here imports a route file or Next, so a script and the CLI's template
-// build can load it outside the app. The locale set comes from
+// The registry of schemas and the plain settings, one file. It imports
+// no component, no route file and no Next API, so a script and the CLI
+// can load it outside the app; smoodly/views.ts lists the components
+// that render these schemas. The locale set comes from
 // i18n/routing.ts (plain config, no Next inside) — the proxy runs in the
 // edge runtime and could not import this file the other way round.
 export const config = defineConfig({
@@ -21,7 +21,8 @@ export const config = defineConfig({
     elements,
     collections,
     globals,
-    pages: [HomePage, StandardPage, PostPage],
+    // Page types. The entry page is a view: smoodly/views.ts lists it.
+    pages: [homeSchema, pageSchema],
   },
   locales: { default: routing.defaultLocale, supported: [...routing.locales] },
   // The record the site root serves.

package/templates/blank-intl/smoodly/elements.ts

@@ -1,5 +1,5 @@
-// The site's element registrations, in one list: the config registers
-// them, toolsets embed them by value, and smoodly/richtext.tsx renders them.
-import { Button } from "@/components/elements/Button";
+// The element schemas a richtext body may embed; smoodly/views.ts lists
+// the components that render them.
+import { buttonSchema } from "@/components/elements/Button.schema";
 
-export const elements = [Button];
+export const elements = [buttonSchema];

package/templates/blank-intl/smoodly/globals.ts

@@ -1,7 +1,8 @@
 // Global content: code-declared singletons, edited once under Globals
 // and read anywhere. `site` is an object item — fields code consumes;
-// the layout reads it through q().getGlobal("site"). A visual item
-// (`section: SomeSection`) renders through a section instead.
+// the layout reads it through q().getGlobal("site"), so it is a layout
+// global: it comes with the page's own read. A visual item
+// (`section: someSectionSchema`) renders through a section instead.
 import { f, smoodly } from "smoodly";
 
 export const site = smoodly.global({
@@ -11,6 +12,7 @@ export const site = smoodly.global({
     name: f.text(),
     tagline: f.text().localized(),
   },
+  layout: true,
 });
 
 export const globals = [site];

package/templates/blank-intl/smoodly/richtext.tsx

@@ -1,7 +1,6 @@
-// The site's richtext renderer, bound once: it knows the elements a body
-// may embed and renders body images through <SmoodlyImage>. Sections and
-// entry pages import RichText from here, never from the package root.
+// The site's bound RichText: the element components a body may embed,
+// images through <SmoodlyImage>.
 import { createRichText } from "smoodly/richtext";
-import { elements } from "./elements";
+import { Button } from "@/components/elements/Button";
 
-export const RichText = createRichText({ elements, sizes: "(min-width: 900px) 720px, 100vw" });
+export const RichText = createRichText({ elements: [Button], sizes: "(min-width: 900px) 720px, 100vw" });

package/templates/blank-intl/smoodly/sections.ts

@@ -1,5 +1,5 @@
-// The site's section registrations, in one list. config.ts puts it in
-// the registry; the stores and the renderer share the same array.
-import { Text } from "@/components/sections/Text";
+// The section schemas the config registers; smoodly/views.ts lists the
+// components that render them.
+import { textSchema } from "@/components/sections/Text.schema";
 
-export const sections = [Text];
+export const sections = [textSchema];

package/templates/blank-intl/smoodly/server.ts

@@ -5,23 +5,23 @@
 // SMOODLY_PUBLISHABLE_KEY (the `smoodlyEnv("admin")` calls below); whether the
 // secret is a service-role key or a cloud write key is invisible here.
 //
-// Lazy on purpose, the site and renderer included: config.ts imports the
-// page shapes, and a page shape may import this file to read through
-// `q` (components/pages/Articles.tsx). That is a cycle, and the
-// admin route enters it from config.ts — so nothing here may read the
-// config at module scope.
+// Lazy on purpose: a page component imports this file to read through
+// `q` (components/pages/Articles.tsx), and this file imports the
+// components through ./views. That is a cycle, so nothing here reads
+// views() or the env at module scope.
 import {
-  createSmoodlyClient, createSmoodlySite, presenceConfig, smoodlyEnv, SupabaseAssetStore, SupabaseEntryStore, SupabaseMemberStore, SupabasePageStore, SupabasePathIndex, type PresenceConfig, type SmoodlySite,
+  createSmoodlyClient, createSmoodlySite, createSupabaseStores, presenceConfig, siteOptions, smoodlyEnv,
+  type PresenceConfig, type SmoodlySite, type SupabaseAssetStore, type SupabaseEntryStore, type SupabaseMemberStore, type SupabasePageStore,
 } from "smoodly";
-// The admin gate from `smoodly/admin`, which holds no client code: the site
-// routes import this file, and `smoodly/admin/next` would put the admin
-// shell in every live page's JavaScript.
+// The admin's server pieces: the sign-in check and the content API. No browser code lives in the package's
+// entries; the admin itself is prebuilt and served by app/(smoodly)/admin/[[...segments]]/route.ts.
 import { createSmoodlyContent, supabaseAdminAuth, type AdminAuth, type AuthConfig, type SmoodlyContent } from "smoodly/admin";
-import { createPageRenderer, createSmoodlyQueries, type PageRegistration } from "smoodly/next";
+import { createPageRenderer, createSmoodlyQueries } from "smoodly/next";
 import { connection } from "next/server";
 import type { SupabaseClient } from "@supabase/supabase-js";
 import { getPathname } from "@/i18n/navigation";
-import { collections, config, elements, sections, globals } from "./config";
+import { collections, config, globals } from "./config";
+import { views } from "./views";
 
 type Renderer = ReturnType<typeof createPageRenderer>;
 type Queries = ReturnType<typeof createSmoodlyQueries<typeof collections, typeof globals>>;
@@ -35,49 +35,27 @@ function bound(): Bound {
   if (cached) return cached;
   const env = smoodlyEnv();
   const db = createSmoodlyClient(env);
-  // ONE path index for both stores: pages and entries share the URL space.
-  // The index reads the code-owned addresses from the config (spec 2026-09-29 anchored paths §2).
-  const paths = new SupabasePathIndex(db, config.anchors);
-  const locales = config.locales;
-  const entries = new SupabaseEntryStore(db, collections, { paths, locales, globals, elements });
-  const pages = new SupabasePageStore(db, {
-    sections, elements, entries, paths, locales,
-    // The custom section's columns toolset, so a column's images count as usage (spec 2026-09-14 §6).
-    custom: config.custom,
-    homePageSlug: config.homePageSlug,
-    // Code-owned addresses by owner: a fixed page's or a collection's path (spec 2026-09-29 nested paths §3).
-    addresses: config.addresses,
-    tree: config.pages?.tree,
-  });
-  // The media library: rows in `assets`, bytes in the public `media` bucket.
-  const assets = new SupabaseAssetStore(db);
-  // The admission table, read by the Members page (spec 2026-09-25 §4).
-  const members = new SupabaseMemberStore(db);
+  // The stores, read off the config: pages, entries, the media library and the admission table.
+  const { pages, entries, assets, members, published } = createSupabaseStores(db, config);
   const auth = supabaseAdminAuth({ authUrl: env.authUrl, authKey: env.authKey, db });
-  // The site layer's own view of the stores; nothing outside this file reads them.
-  const stores = () => ({ pages, entries, assets });
   // The site layer: (locale, path) → page or entry, and the content API
   // `q` wraps below. Not exported — the app reads through `q`, which adds
   // draft awareness and the cache.
-  const site = createSmoodlySite({ stores, collections, globals, sections, elements, locales, homePageSlug: config.homePageSlug, styles: config.styles, custom: config.custom, pages: config.registry.pages ?? [] });
-  const renderer = createPageRenderer({
-    site,
-    sections,
-    elements,
-    pages: (config.registry.pages ?? []) as PageRegistration[],
-    href,
-  });
+  const site = createSmoodlySite(siteOptions(config, () => ({ pages, entries, assets, published })));
+  // The components, checked against the config's schemas here, on first use.
+  const renderer = createPageRenderer({ site, ...views(), href });
   // The read API (spec 2026-09-11): typed by the registry, draft-aware, cached under tags the admin expires.
   const q = createSmoodlyQueries({ site, collections, globals });
   cached = { db, pages, entries, assets, members, auth, site, renderer, q };
   return cached;
 }
 
-/** The admin's wiring, for `smoodly/ops.ts` only. Scripts write through `content()`. */
+/** The admin's wiring, for the admin route only. Scripts write through `content()`. */
 export function adminDeps() {
   smoodlyEnv("admin"); // the admin signs in with the publishable key: a missing one is named here, not on a live page
-  const { pages, entries, assets, members, auth } = bound();
-  return { pages, entries, assets, members, auth, href };
+  const { pages, entries, assets, members, auth, site } = bound();
+  // The projector: a publish writes the finished documents a live page reads.
+  return { pages, entries, assets, members, auth, href, projector: site.projector };
 }
 
 /** Write content from code — seeds, migrations, route handlers (spec 2026-09-30 tester findings §1).
@@ -85,8 +63,8 @@ export function adminDeps() {
  *  throws `SmoodlyContentError`. `content().pages.create(…)`, `.entries.create(…)`, `.globals.set(…)`,
  *  `.media.upload(…)`; build tree nodes with `node(Section, fields)`. */
 export function content(): SmoodlyContent {
-  const { pages, entries, assets, members } = bound();
-  return createSmoodlyContent({ config, pages, entries, assets, members, href });
+  const { pages, entries, assets, members, site } = bound();
+  return createSmoodlyContent({ config, pages, entries, assets, members, href, projector: site.projector });
 }
 
 export { node } from "smoodly";

package/templates/blank-intl/smoodly/toolsets.ts

@@ -5,10 +5,10 @@
 // Relative imports on purpose: collections.ts pulls this file into
 // create-smoodly-app's template build, which runs outside the app.
 import { smoodly } from "smoodly";
-import { Button } from "../components/elements/Button";
+import { buttonSchema } from "../components/elements/Button.schema";
 
 export const text = smoodly.toolset({
   marks: ["bold", "italic", "link"],
   nodes: ["h2", "h3", "bulletList", "orderedList", "blockquote"],
-  elements: [Button],
+  elements: [buttonSchema],
 });

package/templates/blank-intl/smoodly/views.ts

@@ -0,0 +1,15 @@
+// The components that render the registered schemas. A function, not a
+// value: a page component may import smoodly/server.ts, which imports
+// this file. defineViews names a schema with no component, and a
+// component with no schema, the first time the site renders.
+import { defineViews } from "smoodly/react";
+import { config } from "./config";
+import { RichText } from "./richtext";
+import { Text } from "@/components/sections/Text";
+import { Button } from "@/components/elements/Button";
+import { HomePage } from "@/components/pages/Home";
+import { StandardPage } from "@/components/pages/Page";
+import { PostPage } from "@/components/pages/Post";
+
+export const views = () =>
+  defineViews(config, { sections: [Text], elements: [Button], pages: [HomePage, StandardPage, PostPage], RichText });

package/templates/blank-intl/supabase/migrations/20261007120000_smoodly_v8.sql

@@ -0,0 +1,154 @@
+-- Smoodly core schema, version 8 (docs/superpowers/specs/2026-10-07-delivery-model-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 7: the delivery model's two derived tables,
+-- published_pages and published_entries, with the space trigger and the
+-- write-key-only policies every content table has (no row cap: they are
+-- derived), smoodly_list_published over the raw published snapshot, and
+-- the published_routes view, one lookup for any address.
+
+set client_min_messages = warning;
+
+-- The delivery model (spec 2026-10-07): Publish writes the finished document of a page, an entry
+-- or a global here; a live read is one lookup. Derived and rebuildable from the editing tables.
+create table if not exists "published_pages" (
+  "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
+  "page_id" uuid not null references "pages" ("id") on delete cascade,
+  "locale" text not null,
+  "parent_id" uuid,
+  "sort" numeric,
+  "path" text,
+  "title" text not null,
+  "has_page" boolean not null,
+  "link_fields" jsonb not null default '{}'::jsonb,
+  "document" jsonb,
+  "tags" text[] not null default '{}',
+  "model" text not null,
+  "stale" boolean not null default false,
+  "published_at" timestamptz not null default now(),
+  primary key ("page_id", "locale")
+);
+create unique index if not exists "published_pages_address_idx"
+  on "published_pages" ("space_id", "locale", "path") where "path" is not null;
+create index if not exists "published_pages_tree_idx"
+  on "published_pages" ("space_id", "locale", "parent_id", "sort");
+
+create table if not exists "published_entries" (
+  "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
+  "entry_id" uuid not null references "entries" ("id") on delete cascade,
+  "locale" text not null,
+  "collection" text not null,
+  "parent_id" uuid,
+  "sort" numeric,
+  "slug" text,
+  "path" text,
+  "created_at" timestamptz not null,
+  "updated_at" timestamptz not null,
+  "fields" jsonb not null,
+  "document" jsonb not null,
+  "tags" text[] not null default '{}',
+  "model" text not null,
+  "stale" boolean not null default false,
+  "published_at" timestamptz not null default now(),
+  primary key ("entry_id", "locale")
+);
+create index if not exists "published_entries_list_idx"
+  on "published_entries" ("space_id", "collection", "locale");
+create unique index if not exists "published_entries_address_idx"
+  on "published_entries" ("space_id", "locale", "path") where "path" is not null;
+create index if not exists "published_entries_fields_idx"
+  on "published_entries" using gin ("fields");
+
+alter table "published_pages" enable row level security;
+alter table "published_entries" enable row level security;
+
+-- smoodly_list_entries without the draft branch, over the delivery table (spec 2026-10-07 §3):
+-- `where` and `order` read the raw published snapshot, the row answers with its document.
+-- Invoker rights, so RLS decides what a key sees.
+create or replace function "smoodly_list_published"(
+  p_collection text, p_locale text, p_where jsonb, p_order jsonb,
+  p_limit integer, p_parent uuid, p_has_parent boolean, p_ids uuid[]
+) returns table ("id" uuid, "document" jsonb, "model" text, "stale" boolean) language sql stable set search_path = public as $$
+  with shown as (
+    select p."entry_id" as "id", p."sort", p."created_at", p."updated_at", p."fields", p."document", p."model", p."stale"
+    from "published_entries" p
+    where p."collection" = p_collection and p."locale" = p_locale
+      and (not p_has_parent or p."parent_id" is not distinct from p_parent)
+      and (p_ids is null or p."entry_id" = any(p_ids))
+  )
+  select s."id", s."document", s."model", s."stale" from shown s
+  where not exists (
+    select 1 from jsonb_each(coalesce(p_where, '{}'::jsonb)) w
+    where not (case when w.value ? 'in'
+                    then (s."fields" ->> w.key) = any (select jsonb_array_elements_text(w.value -> 'in'))
+                    else s."fields" @> jsonb_build_object(w.key, w.value -> 'contains') end))
+  order by
+    case when p_order ->> 'by' = 'manual' then s."sort" end asc nulls last,
+    case when p_order ->> 'direction' = 'asc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end asc nulls last,
+    case when p_order ->> 'direction' = 'desc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end desc nulls last,
+    s."created_at" asc, s."id" asc
+  limit p_limit;
+$$;
+
+-- One lookup for any address (spec 2026-10-07 §3): a page or an entry, under the caller's own policies.
+create or replace view "published_routes" with (security_invoker = true) as
+  select "space_id", "locale", "path", 'page' as "kind", "page_id" as "id", "document", "model", "stale", "tags", null::text as "collection"
+  from "published_pages" where "path" is not null and "has_page"
+  union all
+  select "space_id", "locale", "path", 'entry' as "kind", "entry_id" as "id", "document", "model", "stale", "tags", "collection"
+  from "published_entries" where "path" is not null;
+
+-- Stamped with the caller's space on insert, as every content table.
+drop trigger if exists "smoodly_a_set_space" on "published_pages";
+create trigger "smoodly_a_set_space" before insert on "published_pages"
+  for each row execute function "smoodly_set_space"();
+
+drop trigger if exists "smoodly_a_set_space" on "published_entries";
+create trigger "smoodly_a_set_space" before insert on "published_entries"
+  for each row execute function "smoodly_set_space"();
+
+-- A write key reads and writes its own space; no other key reads (spec 2026-09-29 content API contract §8).
+drop policy if exists "smoodly_write" on "published_pages";
+
+drop policy if exists "smoodly_insert" on "published_pages";
+create policy "smoodly_insert" on "published_pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "published_pages";
+create policy "smoodly_update" on "published_pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "published_pages";
+create policy "smoodly_delete" on "published_pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "published_pages";
+create policy "smoodly_read" on "published_pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "published_entries";
+
+drop policy if exists "smoodly_insert" on "published_entries";
+create policy "smoodly_insert" on "published_entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "published_entries";
+create policy "smoodly_update" on "published_entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "published_entries";
+create policy "smoodly_delete" on "published_entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "published_entries";
+create policy "smoodly_read" on "published_entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '8')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/20261007200000_smoodly_v9.sql

@@ -0,0 +1,30 @@
+-- Smoodly core schema, version 9 (packages/smoodly/MAINTAINERS.md, register 2026-10-07: what the delivery model left).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 8: smoodly_lookup_address, the route row and the
+-- locale's global items in one call, so a live page is one database call
+-- instead of the page then its layout's globals.
+
+set client_min_messages = warning;
+
+-- The address and the locale's global items in one call (schema v9; register 2026-10-07: a miss was two
+-- rounds, the page then the layout's globals). The route row first, kind 'page' or 'entry'; then one row per
+-- named global, kind 'global', the collection its name. A miss answers nothing: the globals ride with a page
+-- only. Invoker rights, so RLS decides what a key sees.
+create or replace function "smoodly_lookup_address"(p_locale text, p_path text, p_globals text[])
+returns table ("kind" text, "id" uuid, "collection" text, "document" jsonb, "model" text, "stale" boolean, "tags" text[])
+language sql stable set search_path = public as $$
+  with route as (
+    select r."kind", r."id", r."collection", r."document", r."model", r."stale", r."tags"
+    from "published_routes" r where r."locale" = p_locale and r."path" = p_path limit 1
+  )
+  select * from route
+  union all
+  select 'global' as "kind", e."entry_id", e."collection", e."document", e."model", e."stale", e."tags"
+  from "published_entries" e
+  where e."locale" = p_locale and e."collection" = any(coalesce(p_globals, '{}'::text[]))
+    and exists (select 1 from route);
+$$;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '9')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/20261008120000_smoodly_v10.sql

@@ -0,0 +1,47 @@
+-- Smoodly core schema, version 10 (DESIGN §3, the document stamp, decided 2026-10-08).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 9: published_models, one row per space holding the
+-- document stamp the space recorded as current, so only the deployment at that
+-- stamp rewrites delivery rows (a preview deployment on a newer package serves
+-- assembled documents and writes nothing). Additive: no function changes.
+
+set client_min_messages = warning;
+
+-- The document stamp a space recorded as current: set by `npx smoodly rebuild` and by the first writer
+-- into an empty record; only a reader at this stamp rewrites published_pages and published_entries.
+create table if not exists "published_models" (
+  "space_id" uuid primary key default '00000000-0000-0000-0000-000000000000',
+  "model" text not null,
+  "recorded_at" timestamptz not null default now()
+);
+
+alter table "published_models" enable row level security;
+
+-- Stamped with the caller's space on insert, as every content table.
+drop trigger if exists "smoodly_a_set_space" on "published_models";
+create trigger "smoodly_a_set_space" before insert on "published_models"
+  for each row execute function "smoodly_set_space"();
+
+-- A write key reads and writes its own space's record; no other key reads (spec 2026-09-29 content API contract §8).
+drop policy if exists "smoodly_write" on "published_models";
+
+drop policy if exists "smoodly_insert" on "published_models";
+create policy "smoodly_insert" on "published_models" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "published_models";
+create policy "smoodly_update" on "published_models" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "published_models";
+create policy "smoodly_delete" on "published_models" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "published_models";
+create policy "smoodly_read" on "published_models" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '10')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/blank-intl/supabase/migrations/20261008120100_smoodly_views.sql

@@ -0,0 +1,20 @@
+-- Smoodly: read views for this app's collections, written by `npx smoodly migrate`
+-- (2026-10-08T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Never edit a written file: change the collection and run migrate again.
+
+-- smoodly:collection posts sha256:38ba2918f83ab367
+create or replace view "posts" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'posts' and l."status" = 'published';

package/templates/lorem/AGENTS.md

@@ -7,11 +7,19 @@ where things are.
 
 ## Rules
 
-- **Register everything in `smoodly/`.** Every section, element,
-  collection and global item is listed in its barrel (`sections.ts`,
-  `elements.ts`, `collections.ts`, `globals.ts`) and `smoodly/config.ts`
-  is the one registry. A component that is not registered does not exist
-  for the admin.
+- **Register schemas in the config, components in `smoodly/views.ts`.**
+  Every section, element and page type is two files: `Name.schema.ts`
+  and `Name.tsx`. The schema is listed in its barrel (`sections.ts`,
+  `elements.ts`, the config's `pages`; collections and global items in
+  `collections.ts`, `globals.ts`) and `smoodly/config.ts` is the one
+  registry. The component is listed in `smoodly/views.ts`, an element's
+  also in `smoodly/richtext.tsx`; an entry page is listed only in
+  `smoodly/views.ts`. A schema with no component, or a component with
+  no schema, is a named error on the first render.
+- **A `.schema.ts` file imports no component** and nothing from
+  `smoodly/server.ts` or `smoodly/richtext.tsx`. Zones, toolsets, global
+  items and `node()` take schemas (`z.locked(heroSchema)`), never
+  components.
 - **After a new collection or a `smoodly` upgrade, run `npx smoodly migrate`**
   and apply what it writes (`supabase db push` hosted, `supabase migration up`
   local). It copies the core schema files the package ships and writes a
@@ -23,16 +31,15 @@ where things are.
   the admin's own operations, so validation and publish checks apply and
   a failure throws. Never write rows or call the stores directly. The
   seed is idempotent; run it with `npm run seed`.
-- **Never import the admin into the site.** Nothing under `app/(site)`,
-  `app/[locale]` or `components/`, and nothing they import
-  (`smoodly/server.ts` included), may import `@/smoodly/admin` or
-  `smoodly/admin/next`: Next ships every client module a route imports,
-  rendered or not, and the admin's chunk must not reach visitors. The
-  package's `smoodly/admin` entry has no client code; server-side
-  admin glue such as `supabaseAdminAuth` comes from there.
-- **Two root layouts.** The site's layout lives in its route group or
-  locale segment and is never the admin's parent; `app/(smoodly)/admin`
-  is a second root layout. Do not add an `app/layout.tsx`.
+- **The admin is one route.** `app/(smoodly)/admin/[[...segments]]/route.ts`
+  serves the admin's page, its files and its operations from the
+  `smoodly` package; the folder name must match `admin.path` in the
+  config. The admin is prebuilt: nothing of it is compiled into the
+  site, and it takes no layout. Server-side pieces such as
+  `supabaseAdminAuth` and the content API come from `smoodly/admin`.
+- **One root layout.** The site's layout lives in its route group or
+  locale segment. Do not add an `app/layout.tsx`: it would wrap that
+  layout in a second `<html>`.
 - **Toolsets and elements.** A richtext field names a toolset
   (`smoodly/toolsets.ts`); a toolset embeds elements by value; the config
   must register those elements too. Files the toolset imports use
@@ -45,7 +52,7 @@ where things are.
 - **Multilingual sites.** Content locales are Smoodly's; URL locales are
   next-intl's. The locale set is `i18n/routing.ts`. UI strings of the
   site's own go through next-intl's messages in `messages/<locale>.json`.
-- **Fixed versus open pages.** A page shape with a `slug` is fixed: one
+- **Fixed versus open pages.** A page type with a `slug` is fixed: one
   record, created for you, never deleted. Without one it is open: editors
   create as many as they like.