create-smoodly-app 0.0.45 → 0.0.47

package/templates/lorem-intl/supabase/migrations/20261007120000_smoodly_v8.sql

@@ -0,0 +1,154 @@
+-- Smoodly core schema, version 8 (docs/superpowers/specs/2026-10-07-delivery-model-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 7: the delivery model's two derived tables,
+-- published_pages and published_entries, with the space trigger and the
+-- write-key-only policies every content table has (no row cap: they are
+-- derived), smoodly_list_published over the raw published snapshot, and
+-- the published_routes view, one lookup for any address.
+
+set client_min_messages = warning;
+
+-- The delivery model (spec 2026-10-07): Publish writes the finished document of a page, an entry
+-- or a global here; a live read is one lookup. Derived and rebuildable from the editing tables.
+create table if not exists "published_pages" (
+  "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
+  "page_id" uuid not null references "pages" ("id") on delete cascade,
+  "locale" text not null,
+  "parent_id" uuid,
+  "sort" numeric,
+  "path" text,
+  "title" text not null,
+  "has_page" boolean not null,
+  "link_fields" jsonb not null default '{}'::jsonb,
+  "document" jsonb,
+  "tags" text[] not null default '{}',
+  "model" text not null,
+  "stale" boolean not null default false,
+  "published_at" timestamptz not null default now(),
+  primary key ("page_id", "locale")
+);
+create unique index if not exists "published_pages_address_idx"
+  on "published_pages" ("space_id", "locale", "path") where "path" is not null;
+create index if not exists "published_pages_tree_idx"
+  on "published_pages" ("space_id", "locale", "parent_id", "sort");
+
+create table if not exists "published_entries" (
+  "space_id" uuid not null default '00000000-0000-0000-0000-000000000000',
+  "entry_id" uuid not null references "entries" ("id") on delete cascade,
+  "locale" text not null,
+  "collection" text not null,
+  "parent_id" uuid,
+  "sort" numeric,
+  "slug" text,
+  "path" text,
+  "created_at" timestamptz not null,
+  "updated_at" timestamptz not null,
+  "fields" jsonb not null,
+  "document" jsonb not null,
+  "tags" text[] not null default '{}',
+  "model" text not null,
+  "stale" boolean not null default false,
+  "published_at" timestamptz not null default now(),
+  primary key ("entry_id", "locale")
+);
+create index if not exists "published_entries_list_idx"
+  on "published_entries" ("space_id", "collection", "locale");
+create unique index if not exists "published_entries_address_idx"
+  on "published_entries" ("space_id", "locale", "path") where "path" is not null;
+create index if not exists "published_entries_fields_idx"
+  on "published_entries" using gin ("fields");
+
+alter table "published_pages" enable row level security;
+alter table "published_entries" enable row level security;
+
+-- smoodly_list_entries without the draft branch, over the delivery table (spec 2026-10-07 §3):
+-- `where` and `order` read the raw published snapshot, the row answers with its document.
+-- Invoker rights, so RLS decides what a key sees.
+create or replace function "smoodly_list_published"(
+  p_collection text, p_locale text, p_where jsonb, p_order jsonb,
+  p_limit integer, p_parent uuid, p_has_parent boolean, p_ids uuid[]
+) returns table ("id" uuid, "document" jsonb, "model" text, "stale" boolean) language sql stable set search_path = public as $$
+  with shown as (
+    select p."entry_id" as "id", p."sort", p."created_at", p."updated_at", p."fields", p."document", p."model", p."stale"
+    from "published_entries" p
+    where p."collection" = p_collection and p."locale" = p_locale
+      and (not p_has_parent or p."parent_id" is not distinct from p_parent)
+      and (p_ids is null or p."entry_id" = any(p_ids))
+  )
+  select s."id", s."document", s."model", s."stale" from shown s
+  where not exists (
+    select 1 from jsonb_each(coalesce(p_where, '{}'::jsonb)) w
+    where not (case when w.value ? 'in'
+                    then (s."fields" ->> w.key) = any (select jsonb_array_elements_text(w.value -> 'in'))
+                    else s."fields" @> jsonb_build_object(w.key, w.value -> 'contains') end))
+  order by
+    case when p_order ->> 'by' = 'manual' then s."sort" end asc nulls last,
+    case when p_order ->> 'direction' = 'asc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end asc nulls last,
+    case when p_order ->> 'direction' = 'desc' then
+      case p_order ->> 'by' when 'createdAt' then to_jsonb(s."created_at") when 'updatedAt' then to_jsonb(s."updated_at")
+           when 'manual' then null else nullif(nullif(s."fields" -> (p_order ->> 'by'), 'null'::jsonb), '""'::jsonb) end end desc nulls last,
+    s."created_at" asc, s."id" asc
+  limit p_limit;
+$$;
+
+-- One lookup for any address (spec 2026-10-07 §3): a page or an entry, under the caller's own policies.
+create or replace view "published_routes" with (security_invoker = true) as
+  select "space_id", "locale", "path", 'page' as "kind", "page_id" as "id", "document", "model", "stale", "tags", null::text as "collection"
+  from "published_pages" where "path" is not null and "has_page"
+  union all
+  select "space_id", "locale", "path", 'entry' as "kind", "entry_id" as "id", "document", "model", "stale", "tags", "collection"
+  from "published_entries" where "path" is not null;
+
+-- Stamped with the caller's space on insert, as every content table.
+drop trigger if exists "smoodly_a_set_space" on "published_pages";
+create trigger "smoodly_a_set_space" before insert on "published_pages"
+  for each row execute function "smoodly_set_space"();
+
+drop trigger if exists "smoodly_a_set_space" on "published_entries";
+create trigger "smoodly_a_set_space" before insert on "published_entries"
+  for each row execute function "smoodly_set_space"();
+
+-- A write key reads and writes its own space; no other key reads (spec 2026-09-29 content API contract §8).
+drop policy if exists "smoodly_write" on "published_pages";
+
+drop policy if exists "smoodly_insert" on "published_pages";
+create policy "smoodly_insert" on "published_pages" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "published_pages";
+create policy "smoodly_update" on "published_pages" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "published_pages";
+create policy "smoodly_delete" on "published_pages" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "published_pages";
+create policy "smoodly_read" on "published_pages" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_write" on "published_entries";
+
+drop policy if exists "smoodly_insert" on "published_entries";
+create policy "smoodly_insert" on "published_entries" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "published_entries";
+create policy "smoodly_update" on "published_entries" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "published_entries";
+create policy "smoodly_delete" on "published_entries" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "published_entries";
+create policy "smoodly_read" on "published_entries" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '8')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/20261007200000_smoodly_v9.sql

@@ -0,0 +1,30 @@
+-- Smoodly core schema, version 9 (packages/smoodly/MAINTAINERS.md, register 2026-10-07: what the delivery model left).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 8: smoodly_lookup_address, the route row and the
+-- locale's global items in one call, so a live page is one database call
+-- instead of the page then its layout's globals.
+
+set client_min_messages = warning;
+
+-- The address and the locale's global items in one call (schema v9; register 2026-10-07: a miss was two
+-- rounds, the page then the layout's globals). The route row first, kind 'page' or 'entry'; then one row per
+-- named global, kind 'global', the collection its name. A miss answers nothing: the globals ride with a page
+-- only. Invoker rights, so RLS decides what a key sees.
+create or replace function "smoodly_lookup_address"(p_locale text, p_path text, p_globals text[])
+returns table ("kind" text, "id" uuid, "collection" text, "document" jsonb, "model" text, "stale" boolean, "tags" text[])
+language sql stable set search_path = public as $$
+  with route as (
+    select r."kind", r."id", r."collection", r."document", r."model", r."stale", r."tags"
+    from "published_routes" r where r."locale" = p_locale and r."path" = p_path limit 1
+  )
+  select * from route
+  union all
+  select 'global' as "kind", e."entry_id", e."collection", e."document", e."model", e."stale", e."tags"
+  from "published_entries" e
+  where e."locale" = p_locale and e."collection" = any(coalesce(p_globals, '{}'::text[]))
+    and exists (select 1 from route);
+$$;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '9')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/20261008120000_smoodly_v10.sql

@@ -0,0 +1,47 @@
+-- Smoodly core schema, version 10 (DESIGN §3, the document stamp, decided 2026-10-08).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 9: published_models, one row per space holding the
+-- document stamp the space recorded as current, so only the deployment at that
+-- stamp rewrites delivery rows (a preview deployment on a newer package serves
+-- assembled documents and writes nothing). Additive: no function changes.
+
+set client_min_messages = warning;
+
+-- The document stamp a space recorded as current: set by `npx smoodly rebuild` and by the first writer
+-- into an empty record; only a reader at this stamp rewrites published_pages and published_entries.
+create table if not exists "published_models" (
+  "space_id" uuid primary key default '00000000-0000-0000-0000-000000000000',
+  "model" text not null,
+  "recorded_at" timestamptz not null default now()
+);
+
+alter table "published_models" enable row level security;
+
+-- Stamped with the caller's space on insert, as every content table.
+drop trigger if exists "smoodly_a_set_space" on "published_models";
+create trigger "smoodly_a_set_space" before insert on "published_models"
+  for each row execute function "smoodly_set_space"();
+
+-- A write key reads and writes its own space's record; no other key reads (spec 2026-09-29 content API contract §8).
+drop policy if exists "smoodly_write" on "published_models";
+
+drop policy if exists "smoodly_insert" on "published_models";
+create policy "smoodly_insert" on "published_models" for insert
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_update" on "published_models";
+create policy "smoodly_update" on "published_models" for update
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write')
+  with check ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_delete" on "published_models";
+create policy "smoodly_delete" on "published_models" for delete
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+drop policy if exists "smoodly_read" on "published_models";
+create policy "smoodly_read" on "published_models" for select
+  using ("space_id" = (select "smoodly_current_space"()) and not (select "smoodly_space_key_revoked"()) and (select "smoodly_key_kind"()) = 'write');
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '10')
+  on conflict ("key") do update set "value" = excluded."value";

package/templates/lorem-intl/supabase/migrations/20261008120100_smoodly_views.sql

@@ -0,0 +1,58 @@
+-- Smoodly: read views for this app's collections, written by `npx smoodly migrate`
+-- (2026-10-08T12:01:00.000Z). One block per collection; the marker's hash is the block's SQL, compared on the next run.
+-- Never edit a written file: change the collection and run migrate again.
+
+-- smoodly:collection people sha256:929798ebb4fa2bb6
+create or replace view "people" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'name' as "name",
+  coalesce(v."fields", e."fields" || l."fields")->>'role' as "role"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'people' and l."status" = 'published';
+
+-- smoodly:collection articles sha256:dcbe071d70e13943
+create or replace view "articles" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  coalesce(v."fields", e."fields" || l."fields")->'image' as "image",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->>'author' as "author",
+  coalesce(v."fields", e."fields" || l."fields")->>'excerpt' as "excerpt",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body",
+  coalesce(v."fields", e."fields" || l."fields")->'tags' as "tags"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'articles' and l."status" = 'published';
+
+-- smoodly:collection news sha256:03a94ad5ba35ffe4
+create or replace view "news" with (security_invoker = true) as
+select
+  e."id",
+  l."locale",
+  l."slug",
+  e."sort",
+  e."created_at",
+  l."updated_at",
+  coalesce(v."fields", e."fields" || l."fields")->>'title' as "title",
+  (coalesce(v."fields", e."fields" || l."fields")->>'date')::timestamptz as "date",
+  coalesce(v."fields", e."fields" || l."fields")->>'excerpt' as "excerpt",
+  coalesce(v."fields", e."fields" || l."fields")->'body' as "body"
+from "entries" e
+join "entry_locales" l on l."entry_id" = e."id"
+left join "entry_versions" v on v."id" = l."published_version_id"
+where e."collection" = 'news' and l."status" = 'published';

package/templates/blank/app/(smoodly)/admin/[[...segments]]/page.tsx

@@ -1 +0,0 @@
-export { AdminPage as default } from "@/smoodly/admin";

package/templates/blank/app/(smoodly)/admin/layout.tsx

@@ -1,15 +0,0 @@
-import type { ReactNode } from "react";
-import { AdminLayout } from "@/smoodly/admin";
-
-// The admin's own root layout: the site's is app/(site)/layout.tsx, a
-// sibling route group, so /admin has no parent layout and Next needs its
-// own <html> here.
-export default function AdminRootLayout({ children }: { children: ReactNode }) {
-  return (
-    <html lang="en">
-      <body>
-        <AdminLayout>{children}</AdminLayout>
-      </body>
-    </html>
-  );
-}

package/templates/blank/smoodly/admin.tsx

@@ -1,6 +0,0 @@
-import { createSmoodlyAdmin } from "smoodly/admin/next";
-import { config } from "./config";
-import { smoodlyOp } from "./ops";
-import { publicAuth, presence } from "./server";
-
-export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, presence });

package/templates/blank/smoodly/ops.ts

@@ -1,11 +0,0 @@
-"use server";
-// The app's entire write surface for the admin: ONE exported action,
-// gated by the editors table. ('use server' modules may only export
-// async functions — hence the shape.)
-import { createAdminOpHandler, type AdminOpCall } from "smoodly/admin/next";
-import { config } from "./config";
-import { adminDeps } from "./server";
-
-export async function smoodlyOp(call: AdminOpCall) {
-  return createAdminOpHandler({ config, ...adminDeps() })(call);
-}

package/templates/blank-intl/app/(smoodly)/admin/[[...segments]]/page.tsx

@@ -1 +0,0 @@
-export { AdminPage as default } from "@/smoodly/admin";

package/templates/blank-intl/app/(smoodly)/admin/layout.tsx

@@ -1,15 +0,0 @@
-import type { ReactNode } from "react";
-import { AdminLayout } from "@/smoodly/admin";
-
-// The admin's own root layout: the site's is app/[locale]/layout.tsx and
-// the admin sits outside the locale segment (the proxy skips /admin), so
-// Next needs a second <html> here.
-export default function AdminRootLayout({ children }: { children: ReactNode }) {
-  return (
-    <html lang="en">
-      <body>
-        <AdminLayout>{children}</AdminLayout>
-      </body>
-    </html>
-  );
-}

package/templates/blank-intl/smoodly/admin.tsx

@@ -1,6 +0,0 @@
-import { createSmoodlyAdmin } from "smoodly/admin/next";
-import { config } from "./config";
-import { smoodlyOp } from "./ops";
-import { publicAuth, presence } from "./server";
-
-export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, presence });

package/templates/blank-intl/smoodly/ops.ts

@@ -1,11 +0,0 @@
-"use server";
-// The app's entire write surface for the admin: ONE exported action,
-// gated by the editors table. ('use server' modules may only export
-// async functions — hence the shape.)
-import { createAdminOpHandler, type AdminOpCall } from "smoodly/admin/next";
-import { config } from "./config";
-import { adminDeps } from "./server";
-
-export async function smoodlyOp(call: AdminOpCall) {
-  return createAdminOpHandler({ config, ...adminDeps() })(call);
-}

package/templates/lorem/app/(smoodly)/admin/[[...segments]]/page.tsx

@@ -1 +0,0 @@
-export { AdminPage as default } from "@/smoodly/admin";

package/templates/lorem/app/(smoodly)/admin/layout.tsx

@@ -1,15 +0,0 @@
-import type { ReactNode } from "react";
-import { AdminLayout } from "@/smoodly/admin";
-
-// The admin's own root layout: the site's is app/(site)/layout.tsx, a
-// sibling route group, so /admin has no parent layout and Next needs its
-// own <html> here.
-export default function AdminRootLayout({ children }: { children: ReactNode }) {
-  return (
-    <html lang="en">
-      <body>
-        <AdminLayout>{children}</AdminLayout>
-      </body>
-    </html>
-  );
-}

package/templates/lorem/smoodly/admin.tsx

@@ -1,6 +0,0 @@
-import { createSmoodlyAdmin } from "smoodly/admin/next";
-import { config } from "./config";
-import { smoodlyOp } from "./ops";
-import { publicAuth, presence } from "./server";
-
-export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, presence });

package/templates/lorem/smoodly/ops.ts

@@ -1,11 +0,0 @@
-"use server";
-// The app's entire write surface for the admin: ONE exported action,
-// gated by the editors table. ('use server' modules may only export
-// async functions — hence the shape.)
-import { createAdminOpHandler, type AdminOpCall } from "smoodly/admin/next";
-import { config } from "./config";
-import { adminDeps } from "./server";
-
-export async function smoodlyOp(call: AdminOpCall) {
-  return createAdminOpHandler({ config, ...adminDeps() })(call);
-}

package/templates/lorem-intl/app/(smoodly)/admin/[[...segments]]/page.tsx

@@ -1 +0,0 @@
-export { AdminPage as default } from "@/smoodly/admin";

package/templates/lorem-intl/app/(smoodly)/admin/layout.tsx

@@ -1,15 +0,0 @@
-import type { ReactNode } from "react";
-import { AdminLayout } from "@/smoodly/admin";
-
-// The admin's own root layout: the site's is app/[locale]/layout.tsx and
-// the admin sits outside the locale segment (the proxy skips /admin), so
-// Next needs a second <html> here.
-export default function AdminRootLayout({ children }: { children: ReactNode }) {
-  return (
-    <html lang="en">
-      <body>
-        <AdminLayout>{children}</AdminLayout>
-      </body>
-    </html>
-  );
-}

package/templates/lorem-intl/smoodly/admin.tsx

@@ -1,6 +0,0 @@
-import { createSmoodlyAdmin } from "smoodly/admin/next";
-import { config } from "./config";
-import { smoodlyOp } from "./ops";
-import { publicAuth, presence } from "./server";
-
-export const { AdminPage, AdminLayout } = createSmoodlyAdmin({ config, op: smoodlyOp, auth: publicAuth, presence });

package/templates/lorem-intl/smoodly/ops.ts

@@ -1,11 +0,0 @@
-"use server";
-// The app's entire write surface for the admin: ONE exported action,
-// gated by the editors table. ('use server' modules may only export
-// async functions — hence the shape.)
-import { createAdminOpHandler, type AdminOpCall } from "smoodly/admin/next";
-import { config } from "./config";
-import { adminDeps } from "./server";
-
-export async function smoodlyOp(call: AdminOpCall) {
-  return createAdminOpHandler({ config, ...adminDeps() })(call);
-}