smoodly 0.0.14 → 0.0.16

package/README.md

@@ -61,8 +61,10 @@ Implemented:
   `pages.tree.depth` capping how deep editors may nest), and expose
   `rename` (a locale's slug/title), `move`, `setTemplate`, `addLocale`,
   `removeLocale`, `resolvePath(locale, path)` and `pathsOf(id)` alongside
-  the draft/publish semantics (versions accumulate; publish moves that
-  locale's pointer; drafts never leak into published reads). The contract
+  the draft/publish semantics (one version row per publish plus the live
+  draft, rewritten in place; publish moves that locale's pointer and
+  freezes the row; discard deletes the abandoned draft; `restore` writes
+  an old version as the draft; drafts never leak into published reads). The contract
   is a reusable suite (`test/page-store-contract.ts`); every adapter runs
   the same tests.
 - `SupabasePageStore` — the same id-keyed contract over
@@ -148,10 +150,11 @@ Implemented:
   collection-entry persistence over entries/entry_locales/entry_versions/paths
   — one node, one row per locale, each locale with its own slug, status
   and `.localized()` fields, shared fields on the node, and a per-locale
-  version history for collections with `versions: true` (spec 2026-09-06
-  §7): `create({ locale })`, `update(id, locale, fields)`,
+  version history for every collection (spec 2026-09-14; the 2026-09-06
+  opt-in is gone): `create({ locale })`, `update(id, locale, fields)`,
   `setStatus(id, locale, status)`, `addLocale`, `removeLocale`,
-  `listVersions`; saves rewrite the entry's refs rows over every locale's
+  `listVersions`, `getVersion` and `restore`; the draft row is rewritten
+  in place until published (spec 2026-09-13 history); saves rewrite the entry's refs rows over every locale's
   live field set, `referencesTo` answers the reverse
   question, `getMany` is the batched read whose signature is
   `resolveTree`'s `EntryFetcher`, now `(collection, ids, locale, { status })`,
@@ -426,6 +429,74 @@ after both are on the registry. From the repo root:
 `prepublishOnly` rebuilds each package. The Claude Code skill
 `.claude/skills/releasing-smoodly` carries the same order with its checks.
 
+## Follow-ups (logged 2026-09-14, collections draft/publish spec)
+
+- Publish integrity for an entry's own refs: an entry can publish while
+  pointing at an unpublished entry; pages are gated, entries are not.
+- A create dialog (title and slug) before "+ New entry", if empty Untitled
+  drafts turn out to litter lists.
+- The page editor's publish banner lists fields as plain text; the forms'
+  lines focus the widget. Selecting the node from a `node.field` path is
+  the missing piece.
+- Discard on a published row from before versioning that nobody has
+  written since is refused as "nothing published" (its pointers are null);
+  the control never offers it there, so nothing shows — the store could
+  answer it as a no-op instead.
+
+## Follow-ups (logged 2026-09-13, history spec)
+
+- Existing databases (every install so far is ours; DESIGN.md OQ #2):
+  `alter table "page_locales" add column "updated_by" text;`
+  `alter table "entry_locales" add column "updated_by" text;`
+  `alter table "page_versions" rename column "created_at" to "saved_at";`
+  `alter table "page_versions" drop column "created_by";`
+  `alter table "entry_versions" rename column "created_at" to "saved_at";`
+  `alter table "entry_versions" drop column "created_by";`
+  The indexes follow the rename. Autosave rows from before read as
+  extra history rows until the page is published again; harmless.
+  Since 2026-09-14 every collection is versioned and `collectionSQL` emits one
+  view shape: re-apply `collectionSQL(collection)` for each collection on an
+  existing install (`supabase db reset` locally), or a published row from
+  before versioning reads through the view's live-row fallback until its
+  first write gives it a snapshot — either way nothing goes dark.
+- Client-side undo in the editor (a stack of tree snapshots); the store
+  is no longer an undo stack by design.
+- The author per version row and in the lists; named versions.
+- History on the canvas card's menu and in the list row menus.
+- A diff between two versions.
+- Ops are built per call (`createAdminOps` inside the handler) so the
+  session rides in as `actor`; if that ever measures, memoize the
+  actor-free parts.
+
+## Follow-ups (logged 2026-09-13, publish flow spec)
+
+- Unpublishing a page does not cascade: a published child keeps serving
+  under an unpublished parent's path. Decide whether it should.
+- Versioning collections by default — decided 2026-09-14: every
+  collection, no flag, the forms autosave (spec
+  `docs/superpowers/specs/2026-09-14-collections-draft-publish-design.md`).
+- A draft-mode banner on the site, or an "exit preview" action in the
+  admin: the same browser shows drafts of unpublished items after an
+  Unpublish, which reads as "it published my draft".
+- The lists' row menus (Pages, Entries) do not offer Unpublish; the
+  document's own control does.
+
+## Follow-ups (logged 2026-09-13, shared inline editing spec)
+
+- Layout items in the outline: a "From the layout" group the bridge could
+  populate from the `shared:` ids it reports; canvas-only today.
+- The page autosave loses an edit made within the debounce window before
+  navigating away (`useDraftAutosave` only clears timers on unmount). The
+  shared controller flushes on unmount; the page's should too.
+- A validation failure on a shared save retries with backoff like a
+  transport failure; the field error shows on the widget meanwhile. A
+  distinct "fix the field" state would stop the retries.
+- The shared card's usage line lists page ids; titles need a pages
+  lookup the editor does not hold (the usage rows carry only ids).
+- A "save and publish" action for sites that want no draft stage on a
+  shared item (every item is versioned since 2026-09-13; the flag is
+  gone).
+
 ## Follow-ups (logged 2026-09-11, queries spec)
 
 - `where` on localized fields (a join on the locale row), ranges and
@@ -449,9 +520,21 @@ after both are on the registry. From the repo root:
   `revalidate` hook for out-of-band writers.
 - `getEntriesTree` has no `q` counterpart yet; add one when a site
   needs a nested collection nav.
+- `getShared(["header", "footer", "contact"], { locale })` returning a
+  typed tuple, as sugar over the `Promise.all` the layout writes today.
+  Keep one cache unit per item under its own tag — a single unit tagged
+  with all three would expire the header whenever the footer is edited.
 - `getEntry` by id goes through `site.getEntry`, which lists the whole
   collection to find one row; a primary-key read first would be cheaper
   on the uncached path (draft mode, first miss).
+- The read API returns the site layer's shapes unprojected: `getEntries`
+  gives `{ entry: EntryRecord, path }` (the locales map, sort, parentId,
+  collection and timestamps ride along under `entry`), `getPage` gives
+  the renderer's `SitePage` (`record`, `tree`). Project in `queries.ts`,
+  at the public boundary, to `{ id, path, fields, updatedAt }` per entry
+  and a page without renderer internals; the tree item is already lean.
+  Do it before the Astro glue (OQ 29) wraps the same reads and before
+  a second site depends on the shape — it is a breaking change to `q`.
 
 ## Follow-ups (logged 2026-09-10, page fields and SEO spec)
 
@@ -474,10 +557,6 @@ after both are on the registry. From the repo root:
 
 ## Follow-ups (logged 2026-09-10, inline editing spec)
 
-- Shared placements ignore field clicks: their fields live in the shared
-  item under Globals, which the page editor cannot patch. The starter's
-  Header and Footer carry marks already; inline editing of shared content
-  needs the shared form's ops behind the canvas.
 - Richtext instant write from the inspector: the pure `RichText` render
   swapped into the container while the widget is typed in.
 - Item-level chrome in the canvas ("Key points · 3 of 4" on hover, add,
@@ -878,8 +957,9 @@ the toolbar instead of pushing the content.
 - Instance mode: a shared *type* with many editor-created items; today
   the answer is a collection plus a section with `f.ref` (decision 1).
 - Zone-shaped shared items (`smoodly.shared({ zone })`) (decision 2).
-- Standalone live preview on a visual item's admin page — needs a
-  preview route in the glue; the page canvas shows placements today (§6).
+- Standalone live preview on a visual item's admin page — would need a
+  preview route in the glue. Less pressing since 2026-09-13: every shared
+  render is edited in the page canvas, and the Globals page is the form.
 - Built-in meta on shared items and on placements (anchor per placement
   is the likely shape).
 - Per-placement overrides (a shared band with a per-page heading) — out
@@ -1186,10 +1266,9 @@ the toolbar instead of pushing the content.
   is generated by `packages/smoodly/scripts/emit-sql.ts` from that
   script's OWN fixture collections, not from
   `examples/site/smoodly/collections.ts`; the create-smoodly-app template
-  migration IS generated from the example. Since the example's `articles`
-  is now `versions: true`, the repo-root `articles` view reads the live
-  locale row while the example's model serves the published snapshot —
-  the two should share one source.
+  migration IS generated from the example. Since 2026-09-14 both emit the
+  same view shape for every collection, but the repo-root fixture's field
+  lists still drift from the example's — the two should share one source.
 - In the entry form, a shared ref field (e.g. an article's author) shows
   `—` in a locale where the target is absent, because the picker offers
   only targets present in the edited locale; the value is kept on the

package/dist/admin/auth.d.ts

@@ -1,10 +1,13 @@
 import type { AdminOpCall, OpResult } from "./ops.ts";
+/** The verified editor: the Auth user id and the email the locale rows record as `updated_by` (spec 2026-09-13 history §2). */
+export type AdminSession = {
+    userId: string;
+    email: string | null;
+};
 export type AdminAuth = {
     /** The user behind a session token, or null when the auth project rejects it. */
-    verify(token: string): Promise<{
-        userId: string;
-    } | null>;
+    verify(token: string): Promise<AdminSession | null>;
     /** Does `editors` hold this user for the current space? */
     isEditor(userId: string): Promise<boolean>;
 };
-export declare function gateAdminOp(auth: AdminAuth, call: AdminOpCall, run: (call: AdminOpCall) => Promise<OpResult<unknown>>): Promise<OpResult<unknown>>;
+export declare function gateAdminOp(auth: AdminAuth, call: AdminOpCall, run: (call: AdminOpCall, session: AdminSession) => Promise<OpResult<unknown>>): Promise<OpResult<unknown>>;

package/dist/admin/auth.js

@@ -24,5 +24,5 @@ export async function gateAdminOp(auth, call, run) {
     if (!editor) {
         return unauthorized("smoodly: this account is not an editor of this site.");
     }
-    return run(call);
+    return run(call, session);
 }

package/dist/admin/client-ops.js

@@ -1,7 +1,7 @@
 const GROUPS = {
-    pages: ["list", "get", "create", "saveDraft", "publish", "delete", "rename", "move", "setTemplate", "addLocale", "removeLocale"],
-    entries: ["list", "get", "create", "save", "setStatus", "delete", "move", "addLocale", "removeLocale"],
-    shared: ["list", "get", "save", "setStatus"],
+    pages: ["list", "get", "create", "saveDraft", "publish", "unpublish", "discardDraft", "delete", "rename", "move", "setTemplate", "addLocale", "removeLocale", "listVersions", "restore"],
+    entries: ["list", "get", "create", "save", "setStatus", "discardDraft", "delete", "move", "addLocale", "removeLocale", "listVersions", "getVersion", "restore"],
+    shared: ["list", "get", "save", "setStatus", "discardDraft", "listVersions", "getVersion", "restore"],
     assets: ["list", "get", "beginUpload", "finishUpload", "update", "delete", "usage"],
     preview: ["enable", "disable"],
 };

package/dist/admin/editor/CanvasOverlay.d.ts

@@ -7,10 +7,14 @@ export type OverlaySelection = {
     title: string;
     shared: boolean;
     locked: boolean;
+    /** Rendered by the site's layout, not placed in a zone: no tree gestures (spec 2026-09-13 §2). */
+    layout?: boolean;
 };
-export declare function CanvasOverlay({ emptyZones, hoverRect, selection, plusButtons, fieldHover, editing, onPlus, onMove, onDuplicate, onRemove, }: {
+export declare function CanvasOverlay({ emptyZones, hoverRect, hoverShared, selection, plusButtons, fieldHover, editing, onPlus, onMove, onDuplicate, onRemove, }: {
     emptyZones: ZoneRect[];
     hoverRect: BridgeRect | undefined;
+    /** The hovered block is a shared item: the ring takes the shared colour. */
+    hoverShared?: boolean;
     selection: OverlaySelection | null;
     plusButtons: PlusButton[];
     /** The marked field under the pointer, inside the selected section (spec 2026-09-10 §2). */

package/dist/admin/editor/CanvasOverlay.js

@@ -7,7 +7,7 @@ import { jsxs as _jsxs, jsx as _jsx, Fragment as _Fragment } from "react/jsx-run
 // itself never touches the iframe.
 import { useState } from "react";
 import { IconButton } from "../ui/primitives.js";
-export function CanvasOverlay({ emptyZones, hoverRect, selection, plusButtons, fieldHover, editing, onPlus, onMove, onDuplicate, onRemove, }) {
+export function CanvasOverlay({ emptyZones, hoverRect, hoverShared, selection, plusButtons, fieldHover, editing, onPlus, onMove, onDuplicate, onRemove, }) {
     const [hoverPlus, setHoverPlus] = useState(null);
     return (_jsxs("div", { style: { position: "absolute", inset: 0, pointerEvents: "none" }, children: [emptyZones.map((z) => (_jsxs("div", { className: "sm-dashed", style: {
                     position: "absolute", left: z.x + 12, top: z.y, width: Math.max(0, z.w - 24),
@@ -15,17 +15,17 @@ export function CanvasOverlay({ emptyZones, hoverRect, selection, plusButtons, f
                 }, children: [z.zone, " \u00B7 empty"] }, `empty-${z.zone}`))), hoverRect && (_jsx("div", { style: {
                     position: "absolute", left: hoverRect.x, top: hoverRect.y,
                     width: hoverRect.w, height: hoverRect.h,
-                    outline: "1.5px solid color-mix(in srgb, var(--selection) 45%, transparent)",
+                    outline: `1.5px solid color-mix(in srgb, var(${hoverShared ? "--selection-shared" : "--selection"}) 45%, transparent)`,
                     outlineOffset: -1.5, borderRadius: "var(--selection-radius)",
                 } })), fieldHover && !(editing && editing.node === fieldHover.node && editing.path === fieldHover.path) && (_jsx("div", { className: "sm-fieldhover", style: { position: "absolute", left: fieldHover.x, top: fieldHover.y, width: fieldHover.w, height: fieldHover.h } })), editing && (_jsx("div", { className: "sm-fieldedit", style: { position: "absolute", left: editing.x, top: editing.y, width: editing.w, height: editing.h } })), selection && (_jsxs(_Fragment, { children: [_jsx("div", { style: {
                             position: "absolute", left: selection.rect.x, top: selection.rect.y,
                             width: selection.rect.w, height: selection.rect.h,
-                            outline: "var(--outline-selection)", outlineOffset: -1.5,
+                            outline: selection.shared ? "var(--outline-selection-shared)" : "var(--outline-selection)", outlineOffset: -1.5,
                             borderRadius: "var(--selection-radius)",
-                        } }), _jsxs("span", { className: "sm-blocktag", style: { position: "absolute", left: selection.rect.x, top: selection.rect.y }, children: [selection.title, selection.shared && " · shared", selection.locked && " · locked"] }), _jsx("div", { className: "sm-blocktoolbar", style: {
+                        } }), _jsxs("span", { className: selection.shared ? "sm-blocktag sm-blocktag--shared" : "sm-blocktag", style: { position: "absolute", left: selection.rect.x, top: selection.rect.y }, children: [selection.title, selection.shared && " · shared", selection.locked && " · locked"] }), !selection.layout && (_jsx("div", { className: "sm-blocktoolbar", style: {
                             position: "absolute", left: selection.rect.x + selection.rect.w - 8, top: selection.rect.y + 8,
                             transform: "translateX(-100%)", pointerEvents: "auto",
-                        }, children: selection.locked ? (_jsx("span", { className: "sm-blocktoolbar__note", children: "fields only" })) : (_jsxs(_Fragment, { children: [_jsx(IconButton, { label: "Move up", tone: "inverse", onClick: () => onMove(selection.node.id, -1), children: "\u2191" }), _jsx(IconButton, { label: "Move down", tone: "inverse", onClick: () => onMove(selection.node.id, 1), children: "\u2193" }), _jsx(IconButton, { label: "Duplicate", tone: "inverse", onClick: () => onDuplicate(selection.node), children: "\u29C9" }), _jsx(IconButton, { label: "Remove", tone: "inverse", onClick: () => onRemove(selection.node.id), children: "\u00D7" })] })) })] })), plusButtons.map((p) => {
+                        }, children: selection.locked ? (_jsx("span", { className: "sm-blocktoolbar__note", children: "fields only" })) : (_jsxs(_Fragment, { children: [_jsx(IconButton, { label: "Move up", tone: "inverse", onClick: () => onMove(selection.node.id, -1), children: "\u2191" }), _jsx(IconButton, { label: "Move down", tone: "inverse", onClick: () => onMove(selection.node.id, 1), children: "\u2193" }), _jsx(IconButton, { label: "Duplicate", tone: "inverse", onClick: () => onDuplicate(selection.node), children: "\u29C9" }), _jsx(IconButton, { label: "Remove", tone: "inverse", onClick: () => onRemove(selection.node.id), children: "\u00D7" })] })) }))] })), plusButtons.map((p) => {
                 const key = `${p.zone}-${p.index}`;
                 const hot = hoverPlus === key;
                 return (_jsxs("div", { style: { position: "absolute", left: 0, right: 0, top: p.y }, children: [hot && _jsx("div", { className: "sm-guide", style: { margin: "0 12px" } }), _jsx("div", { style: {

package/dist/admin/editor/EditorView.d.ts

@@ -1,6 +1,8 @@
 import type { AdminOps } from "../ops.ts";
 import type { AdminRegistry } from "../serialize.ts";
 export declare const withEditorParam: (url: string) => string;
+/** The site URL of a stored version — History's iframe (spec 2026-09-13 history §5); no editor parameter, so no bridge. */
+export declare const withVersionParam: (url: string, versionId: string) => string;
 export declare function EditorView({ ops, registry, id }: {
     ops: AdminOps;
     registry: AdminRegistry;