smoodly 0.0.14 → 0.0.16

package/dist/admin/ui/primitives.js

@@ -106,11 +106,11 @@ export function Segmented({ options, value, onChange, stretch, disabled, label,
         }) }));
 }
 /* ── data ────────────────────────────────────────────────────────────── */
+// Keyed by the product labels of ui/status-label.ts (lowercased by StatusBadge).
 const STATUS_TONE = {
     published: "published",
+    "unpublished changes": "changes",
     draft: "draft",
-    "draft edits": "scheduled",
-    scheduled: "scheduled",
 };
 export function StatusBadge({ status }) {
     const tone = STATUS_TONE[status.toLowerCase()] ?? "draft";
@@ -134,9 +134,25 @@ export function SectionLabel({ children, action, mono, style }) {
 export function Divider({ bleed = 0 }) {
     return _jsx("div", { className: "sm-divider", style: { margin: `0 -${bleed}px` } });
 }
+/** The lines under a publish-validation banner: one per field, each focusing its widget
+ *  when the screen can reveal it (spec 2026-09-14 §2). */
+export function FieldErrorList({ fields, onReveal }) {
+    if (fields.length === 0)
+        return null;
+    return (_jsx("ul", { className: "sm-fielderr", children: fields.map((f) => (_jsxs("li", { children: [onReveal
+                    ? _jsx("button", { type: "button", className: "sm-fielderr__field", onClick: () => onReveal(f.field), children: f.field })
+                    : f.field, ": ", f.message] }, f.field))) }));
+}
 export function Banner({ tone, children, onDismiss }) {
     return (_jsxs("div", { className: `sm-banner sm-banner--${tone}`, role: tone === "error" ? "alert" : undefined, children: [_jsx("div", { style: { flex: 1, minWidth: 0 }, children: children }), onDismiss && (_jsx("button", { type: "button", onClick: onDismiss, "aria-label": "Dismiss", style: { background: "transparent", border: 0, color: "inherit", cursor: "pointer", font: "inherit", padding: 0 }, children: "\u00D7" }))] }));
 }
 export function cx(...parts) {
     return parts.filter(Boolean).join(" ");
 }
+/** One line of a form's info block: a muted label, the value right-aligned and clipped. */
+export function InfoRow({ label, value, mono }) {
+    return (_jsxs("div", { style: { display: "flex", justifyContent: "space-between", gap: 10, fontSize: "var(--text-sm)", color: "var(--text-muted)" }, children: [_jsx("span", { children: label }), _jsx("span", { style: {
+                    color: "var(--text)", fontFamily: mono ? "var(--font-mono)" : undefined,
+                    overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap",
+                }, children: value })] }));
+}

package/dist/admin/ui/status-label.d.ts

@@ -0,0 +1,10 @@
+import type { LocaleStatus } from "../shell/pages-tree.ts";
+export type StatusLabel = "Published" | "Unpublished changes" | "Draft";
+export declare function statusLabel(status: LocaleStatus): StatusLabel;
+/** Which of the three actions apply (spec §2). `pending`: the editor holds a change
+ *  the store has not confirmed yet — Publish wakes on the first keystroke, not on the ack. */
+export declare function publishActions(status: LocaleStatus | null, pending: boolean): {
+    publish: boolean;
+    discard: boolean;
+    unpublish: boolean;
+};

package/dist/admin/ui/status-label.js

@@ -0,0 +1,14 @@
+export function statusLabel(status) {
+    return status === "published" ? "Published" : status === "draft edits" ? "Unpublished changes" : "Draft";
+}
+/** Which of the three actions apply (spec §2). `pending`: the editor holds a change
+ *  the store has not confirmed yet — Publish wakes on the first keystroke, not on the ack. */
+export function publishActions(status, pending) {
+    if (status === null)
+        return { publish: false, discard: false, unpublish: false };
+    return {
+        publish: status !== "published" || pending,
+        discard: status === "draft edits",
+        unpublish: status === "published" || status === "draft edits",
+    };
+}

package/dist/admin/ui/theme.js

@@ -25,6 +25,7 @@ const TOKENS_LIGHT = `
   --line:#E8E3DA; --line-dashed:#D8D1C4; --line-soft:#EFEBE3;
   --text:#1F1D1A; --text-secondary:#4E4942; --text-muted:#7A746A; --text-subtle:#A39C90; --text-disabled:#C4BDB1;
   --selection:var(--accent); --nav-active-bg:var(--accent-soft); --nav-active-fg:var(--accent);
+  --selection-shared:#C4620C;
   --hover:rgba(31,29,26,.05); --press:rgba(31,29,26,.09); --control-hover:#F8F6F1;
   --btn-secondary-bg:var(--surface); --btn-secondary-hover:#F8F6F1; --tile-hover:var(--surface);
   --bar-bg:transparent; --bar-border:0; --menu-border:0; --card-divider:0;
@@ -40,7 +41,8 @@ const TOKENS_LIGHT = `
   --logo-color:var(--accent);
 
   --status-published-fg:var(--green-700); --status-published-bg:var(--green-50);
-  --status-draft-fg:var(--amber-700); --status-draft-bg:var(--amber-50);
+  --status-changes-fg:var(--amber-700); --status-changes-bg:var(--amber-50);
+  --status-draft-fg:var(--text-muted); --status-draft-bg:var(--surface-inset);
   --status-scheduled-fg:var(--accent); --status-scheduled-bg:var(--accent-soft);
   --status-saved-dot:var(--green-500);
   --warn:var(--amber-700); --warn-soft:var(--amber-50);
@@ -61,6 +63,7 @@ const TOKENS_LIGHT = `
 `;
 const TOKENS_DARK = `
   --accent:#6CC4A6; --accent-hover:#82D2B8; --accent-soft:rgba(108,196,166,.18); --accent-line:#6CC4A6; --on-accent:#0B1F18;
+  --selection-shared:#F09A5C;
   --bg:#1C1A17; --canvas:#141210; --surface:#27241F; --surface-form:#27241F; --surface-inset:#1C1A17;
   --input-bg:#211E1A; --input-hover-bg:#211E1A; --input-focus-bg:#211E1A;
   --line:#3A3630; --line-dashed:#4A453D; --line-soft:#3A3630;
@@ -70,7 +73,8 @@ const TOKENS_DARK = `
   --toolbar-bg:#0F0E0C; --toolbar-fg:#F1EDE6;
 
   --status-published-fg:var(--green-300); --status-published-bg:rgba(111,211,154,.14);
-  --status-draft-fg:var(--amber-300); --status-draft-bg:rgba(232,184,90,.14);
+  --status-changes-fg:var(--amber-300); --status-changes-bg:rgba(232,184,90,.14);
+  --status-draft-fg:var(--text-muted); --status-draft-bg:var(--press);
   --warn:var(--amber-300); --warn-soft:rgba(232,184,90,.14);
   --danger:var(--red-300); --danger-soft:rgba(244,102,92,.14);
 
@@ -106,6 +110,7 @@ const SCALE = `
   --table-pad:8px 12px; --table-top:80px; --canvas-pad:24px 40px 0; --card-pad:16px 18px; --card-gap:12px; --form-pad:32px 40px;
   --border:1px solid var(--line);
   --outline-selection:2px solid var(--selection);
+  --outline-selection-shared:2px solid var(--selection-shared);
 `;
 /* ── TEMPORARY: the original look, kept for side-by-side comparison while
    the warm restyle lands. Frozen copies of the three strings above as they
@@ -128,11 +133,13 @@ const TECHNICAL_LIGHT = `
   --text:var(--gray-900); --text-muted:var(--gray-600); --text-subtle:var(--gray-500);
   --accent:var(--brand-600); --on-accent:#FFFFFF; --accent-soft:var(--brand-50);
   --selection:var(--brand-600); --nav-active-bg:var(--brand-100); --nav-active-fg:var(--brand-600);
+  --selection-shared:#D2610A;
   --hover:rgba(15,20,32,.045); --press:rgba(15,20,32,.08);
   --control-hover:var(--gray-100);
 
   --status-published-fg:var(--green-700); --status-published-bg:var(--green-50);
-  --status-draft-fg:var(--amber-700); --status-draft-bg:var(--amber-50);
+  --status-changes-fg:var(--amber-700); --status-changes-bg:var(--amber-50);
+  --status-draft-fg:var(--text-muted); --status-draft-bg:var(--surface-inset);
   --status-scheduled-fg:var(--accent); --status-scheduled-bg:var(--accent-soft);
   --status-saved-dot:var(--green-500);
   --warn:var(--amber-700); --warn-soft:var(--amber-50);
@@ -155,12 +162,14 @@ const TECHNICAL_DARK = `
   --line:#2A2F3B; --line-dashed:#2A2F3B;
   --text:#EEF0F5; --text-muted:#8C94A8; --text-subtle:#6B7386;
   --accent:var(--brand-300); --on-accent:#06122F; --accent-soft:rgba(110,150,255,.16);
+  --selection-shared:#F2A35F;
   --nav-active-bg:rgba(110,150,255,.14); --nav-active-fg:var(--brand-200);
   --hover:rgba(238,240,245,.05); --press:rgba(238,240,245,.09);
   --control-hover:var(--input-bg);
 
   --status-published-fg:var(--green-300); --status-published-bg:rgba(111,211,154,.14);
-  --status-draft-fg:var(--amber-300); --status-draft-bg:rgba(232,184,90,.14);
+  --status-changes-fg:var(--amber-300); --status-changes-bg:rgba(232,184,90,.14);
+  --status-draft-fg:var(--text-muted); --status-draft-bg:var(--press);
   --warn:var(--amber-300); --warn-soft:rgba(232,184,90,.14);
   --danger:var(--red-300); --danger-soft:rgba(244,102,92,.14);
 
@@ -181,6 +190,7 @@ const TECHNICAL_SCALE = `
   --nav-w:72px; --inspector-w:380px;
   --border:1px solid var(--line);
   --outline-selection:1.5px solid var(--selection);
+  --outline-selection-shared:1.5px solid var(--selection-shared);
 `;
 /* The tokens the warm restyle added, with the values the technical look
    implied, so the frozen block above renders the old shapes too. */
@@ -293,7 +303,7 @@ body:has(.sm-admin){margin:0}
 .sm-rail__btn[aria-current="page"],.sm-rail__btn[aria-expanded="true"]{color:var(--nav-active-fg);font-weight:600}
 .sm-rail__btn[aria-current="page"]:hover,.sm-rail__btn[aria-expanded="true"]:hover{color:var(--nav-active-fg)}
 .sm-rail__btn[aria-current="page"] .sm-rail__tile,.sm-rail__btn[aria-expanded="true"] .sm-rail__tile{background:var(--nav-active-bg)}
-.sm-rail__tile svg{width:18px;height:18px;stroke:currentColor;fill:none;stroke-width:1.75;stroke-linecap:round;stroke-linejoin:round}
+.sm-rail__tile svg{width:18px;height:18px;stroke:currentColor;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
 .sm-rail__chev{position:absolute;right:4px;bottom:3px;width:8px;height:8px}
 .sm-rail__chev svg{width:8px;height:8px;stroke-width:3}
 .sm-rail__label{letter-spacing:.01em;white-space:nowrap}
@@ -592,6 +602,15 @@ body:has(.sm-admin){margin:0}
   border-radius:var(--radius-sm);line-height:1;height:24px;
 }
 .sm-rowmenu:hover{background:var(--surface-inset);color:var(--text)}
+.sm-dotmenu{
+  width:var(--button-h);height:var(--button-h);flex:none;border-radius:50%;border:0;padding:0;
+  background:var(--btn-secondary-bg);color:var(--text-muted);font:inherit;font-weight:700;letter-spacing:1px;
+  display:grid;place-items:center;cursor:pointer;
+}
+.sm-dotmenu:hover{background:var(--btn-secondary-hover);color:var(--text)}
+.sm-dotmenu:disabled{opacity:.4;cursor:default}
+.sm-dotmenu:disabled:hover{background:var(--btn-secondary-bg);color:var(--text-muted)}
+.sm-picker--menu{position:absolute;top:calc(100% + 6px);right:0;width:220px;z-index:60}
 
 /* Status pill: a dot before the word in the warm look (none in the technical). */
 .sm-badge{
@@ -664,6 +683,8 @@ body:has(.sm-admin){margin:0}
 .sm-banner--error{background:var(--danger-soft);color:var(--danger)}
 .sm-banner--ok{background:var(--status-published-bg);color:var(--status-published-fg)}
 .sm-banner--warn{background:var(--warn-soft);color:var(--warn)}
+.sm-fielderr{margin:6px 0 0;padding-left:18px;font:inherit;font-size:var(--text-sm);font-family:var(--font-mono)}
+.sm-fielderr__field{background:none;border:0;padding:0;font:inherit;color:inherit;text-decoration:underline;cursor:pointer}
 
 /* ── cards ─────────────────────────────────────────────────────────── */
 /* The inspector column (editor, entry and shared forms) is a stack of
@@ -732,6 +753,7 @@ body:has(.sm-admin){margin:0}
   letter-spacing:var(--blocktag-tracking);text-transform:var(--blocktag-transform);padding:3px 10px;
   border-radius:var(--blocktag-radius);white-space:nowrap;
 }
+.sm-blocktag--shared{background:var(--selection-shared)}
 .sm-blocktoolbar{
   display:flex;gap:2px;padding:3px;background:var(--toolbar-bg);border-radius:var(--radius-btn);
   box-shadow:var(--shadow-float);
@@ -785,6 +807,10 @@ body:has(.sm-admin){margin:0}
   border:0;border-radius:var(--radius-sm);padding:8px 10px;cursor:pointer;color:var(--text);font:inherit;
 }
 .sm-picker__item:hover{background:var(--nav-active-bg)}
+/* after the base item rule: same specificity, so source order decides (ActionMenu states) */
+.sm-picker__item:disabled{opacity:.4;cursor:default}
+.sm-picker__item:disabled:hover{background:transparent}
+.sm-picker__item--danger{color:var(--danger)}
 .sm-picker__icon{
   width:26px;height:26px;flex:none;border-radius:var(--radius-sm);background:var(--accent-soft);
   color:var(--accent);display:grid;place-items:center;font-size:13px;
@@ -796,7 +822,9 @@ body:has(.sm-admin){margin:0}
 }
 
 /* ── media ─────────────────────────────────────────────────────────── */
-.sm-modal{position:fixed;inset:0;z-index:70;background:rgba(0,0,0,.45);display:grid;place-items:center;padding:24px}
+/* The single track is minmax(0,1fr), not auto: an auto track grows to the panel's own width, so the
+   panel's max-width:100% would cap at nothing and a 1200px History panel ran past a laptop viewport. */
+.sm-modal{position:fixed;inset:0;z-index:70;background:rgba(0,0,0,.45);display:grid;grid-template-columns:minmax(0,1fr);grid-template-rows:minmax(0,1fr);place-items:center;padding:24px}
 .sm-modal__panel{
   max-width:100%;max-height:100%;display:flex;flex-direction:column;background:var(--surface);
   border:var(--menu-border);border-radius:var(--radius-card);box-shadow:var(--shadow-pop);overflow:hidden;
@@ -804,6 +832,18 @@ body:has(.sm-admin){margin:0}
 .sm-modal__head{display:flex;align-items:center;justify-content:space-between;padding:14px 16px 10px;border-bottom:var(--card-divider)}
 .sm-modal__body{padding:12px 16px;overflow:auto;display:flex;flex-direction:column;gap:10px;min-height:0}
 .sm-modal__foot{display:flex;justify-content:flex-end;gap:8px;padding:12px 16px 14px;border-top:var(--card-divider)}
+.sm-modal__body--flush{padding:0;gap:0;flex:1}
+/* ── history (spec 2026-09-13) ─────────────────────────────────── */
+.sm-history{display:flex;flex:1;min-height:0}
+.sm-history__list{width:260px;flex:none;overflow:auto;display:flex;flex-direction:column;border-right:var(--card-divider)}
+.sm-history__row{display:flex;align-items:center;justify-content:space-between;gap:8px;padding:10px 12px;border:0;border-bottom:var(--card-divider);background:none;color:inherit;font:inherit;font-size:var(--text-sm);text-align:left;cursor:pointer}
+.sm-history__row:hover{background:var(--input-bg)}
+.sm-history__row--active,.sm-history__row--active:hover{background:var(--input-bg);font-weight:600}
+.sm-history__tag{font-size:var(--text-sm);color:var(--text-muted);padding:1px 8px;border-radius:999px;border:1px solid var(--line-dashed)}
+.sm-history__tag--live{color:var(--status-published-fg);background:var(--status-published-bg);border-color:transparent}
+.sm-history__main{flex:1;min-width:0;display:flex;overflow:auto}
+.sm-history__frame{flex:1;width:100%;height:100%;border:0;background:#fff}
+.sm-history__form{flex:1;min-width:0;margin:0;padding:16px;border:0;pointer-events:none;display:flex;flex-direction:column;gap:14px}
 .sm-picker-bar{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
 .sm-dropzone{
   border:1px dashed var(--line-dashed);border-radius:var(--radius-lg);background:var(--input-bg);color:var(--text-muted);

package/dist/collections.d.ts

@@ -29,11 +29,6 @@ export type CollectionSchema<F extends BuilderMap = BuilderMap, N extends string
     admin?: {
         listColumns?: string[];
     };
-    /** Per-locale version history for this collection's entries (spec
-     *  2026-09-06 §7): every save becomes an `entry_versions` snapshot and
-     *  publish moves a pointer, as on pages. Off by default — a People list
-     *  does not want history; articles do. */
-    versions?: boolean;
     /** phantom: the entry value shape, used by f.ref target inference */
     readonly __entry?: NamespaceValues<F>;
 };
@@ -52,5 +47,4 @@ export declare function collection<F extends BuilderMap, const N extends string
     admin?: {
         listColumns?: string[];
     };
-    versions?: boolean;
 }): CollectionSchema<F, N>;

package/dist/collections.js

@@ -43,7 +43,6 @@ export function collection(input) {
         ...(input.path !== undefined ? { path: input.path } : {}),
         ...(input.tree !== undefined ? { tree: input.tree } : {}),
         ...(input.order !== undefined ? { order: input.order } : {}),
-        ...(input.versions ? { versions: true } : {}),
         admin: input.admin,
     };
 }

package/dist/entry-store.d.ts

@@ -13,6 +13,8 @@ export type EntryLocale = {
     draftVersionId: string | null;
     publishedVersionId: string | null;
     updatedAt: number;
+    /** The editor's email behind the last write that touched this row; null for the seed and scripts (spec 2026-09-13 history §2). */
+    updatedBy: string | null;
 };
 export type EntryRecord = {
     id: string;
@@ -32,7 +34,8 @@ export type EntryVersion = {
     locale: string;
     /** The MERGED fields (shared + localized + slug) at that save. */
     fields: Record<string, unknown>;
-    createdAt: number;
+    /** When the content last changed: the unpublished draft row is rewritten in place (spec 2026-09-13 history §1). */
+    savedAt: number;
 };
 export type EntryUsage = {
     sourceKind: string;
@@ -87,7 +90,7 @@ export interface EntryStore {
     /** Creates the node and ONE locale row from the merged `fields`: shared
      * keys go to the node, .localized() keys and `slug` to the row. The
      * parent (if any) must exist in that locale. */
-    create(collection: string, fields: Record<string, unknown>, options: CreateEntryOptions): Promise<EntryRecord>;
+    create(collection: string, fields: Record<string, unknown>, options: CreateEntryOptions, by?: string): Promise<EntryRecord>;
     get(collection: string, id: string): Promise<EntryRecord | null>;
     list(collection: string, options?: ListOptions): Promise<EntryRecord[]>;
     /** Batched read for the resolver: the MERGED fields in `locale`, keyed
@@ -101,17 +104,29 @@ export interface EntryStore {
     }): Promise<Record<string, Record<string, unknown>>>;
     /** Replaces the merged fields for `locale`: shared keys on the node
      * (every locale sees them), localized keys and the slug on the row. */
-    update(collection: string, id: string, locale: string, fields: Record<string, unknown>): Promise<EntryRecord>;
-    setStatus(collection: string, id: string, locale: string, status: "draft" | "published"): Promise<EntryRecord>;
+    update(collection: string, id: string, locale: string, fields: Record<string, unknown>, by?: string): Promise<EntryRecord>;
+    setStatus(collection: string, id: string, locale: string, status: "draft" | "published", by?: string): Promise<EntryRecord>;
+    /** The live row goes back to what is published: the published snapshot's fields
+     *  (shared and localized, split as on save — the slug is never versioned) written over
+     *  the row, the draft pointer set to the published one, the abandoned draft row deleted
+     *  (spec 2026-09-13 history §1). Refused when the locale has no published version (a
+     *  non-versioned collection never has one). */
+    discardDraft(collection: string, id: string, locale: string, by?: string): Promise<EntryRecord>;
     /** Copies `from`'s localized fields and slug as the new row (shared
      * fields need no copy); refused when the entry has the locale or its
      * parent lacks it. */
-    addLocale(collection: string, id: string, locale: string, options: AddEntryLocaleOptions): Promise<EntryRecord>;
+    addLocale(collection: string, id: string, locale: string, options: AddEntryLocaleOptions, by?: string): Promise<EntryRecord>;
     /** Deletes the row, its versions and its paths rows; refused for the
      * last locale and while a child has it. */
     removeLocale(collection: string, id: string, locale: string): Promise<EntryRecord>;
-    /** Newest first; empty for a collection without `versions`. */
+    /** Newest first (every collection is versioned, spec 2026-09-14 §1). */
     listVersions(collection: string, id: string, locale: string): Promise<EntryVersion[]>;
+    /** The snapshot's shared and localized fields become the draft (the slug is never
+     *  versioned) through the draft rule; the live version restores as a discard. Refused
+     *  when the version is not this entry's in this locale (spec 2026-09-13 history §6). */
+    restore(collection: string, id: string, locale: string, versionId: string, by?: string): Promise<EntryRecord>;
+    /** One stored version by id — callers check `entryId` and `locale`. */
+    getVersion(collection: string, versionId: string): Promise<EntryVersion | null>;
     /** Blocked while anything references the entry (the safe-delete guard),
      * and while it still has child entries. Removes every locale. */
     delete(collection: string, id: string): Promise<void>;
@@ -144,6 +159,7 @@ export declare const isSharedSchema: (schema: CollectionSchema<any>) => boolean;
 export declare const DEFAULT_ENTRY_LOCALES: LocaleSet;
 export declare const entryErrors: {
     notFound: (collection: string, id: string) => Error;
+    nothingPublished: (collection: string, id: string, locale: string) => Error;
     hasChildren: (collection: string, id: string) => Error;
     cycle: () => Error;
     foreignParent: () => Error;
@@ -162,6 +178,7 @@ export declare const entryErrors: {
     owned: (name: string, verb: string) => Error;
     noSlug: (name: string) => Error;
     everyLocale: (name: string) => Error;
+    foreignVersion: (collection: string, id: string, locale: string, versionId: string) => Error;
 };
 /** The keys a locale row owns: every field with .localized(), except
  *  `slug`, which is the row's own column (a segment is an address, per
@@ -204,7 +221,7 @@ export declare class MemoryEntryStore implements EntryStore {
     private refs;
     private entries;
     private versions;
-    /** Insertion order per version — `createdAt` alone can tie within a millisecond. */
+    /** Insertion order per version — `savedAt` alone can tie within a millisecond. */
     private versionSeq;
     private seq;
     private order;
@@ -221,9 +238,14 @@ export declare class MemoryEntryStore implements EntryStore {
     private subtree;
     /** An edit bumps the node and the edited row; `move` and `reorder` never call this. */
     private bump;
-    /** A versioned collection records every save as a merged snapshot and
-     *  points the locale's draft at it; others keep the row as the live content. */
+    /** The draft rule (spec 2026-09-13 history §1) for every collection (spec 2026-09-14 §1):
+     *  the unpublished draft row is rewritten in place and a new one starts only when the
+     *  draft IS the published one. */
     private recordVersion;
+    /** A published row from before every collection was versioned has no snapshot; give it
+     *  one from what is live BEFORE a write changes the fields, so the site keeps serving it
+     *  and the write lands in a new draft row (spec 2026-09-14 §1). */
+    private ensureLiveSnapshot;
     private dropVersions;
     /** Every field set the site can render for this entry: each present
      *  locale's live view, plus a published snapshot the draft has moved
@@ -240,17 +262,20 @@ export declare class MemoryEntryStore implements EntryStore {
     private assertParent;
     /** The parent rule: a locale can only be added where the parent has it. */
     private assertParentHasLocale;
-    create(collection: string, fields: Record<string, unknown>, options: CreateEntryOptions): Promise<EntryRecord>;
+    create(collection: string, fields: Record<string, unknown>, options: CreateEntryOptions, by?: string): Promise<EntryRecord>;
     get(collection: string, id: string): Promise<EntryRecord | null>;
     list(collection: string, options?: ListOptions): Promise<EntryRecord[]>;
     getMany(collection: string, ids: string[], locale: string, options?: {
         status?: "published";
     }): Promise<Record<string, Record<string, unknown>>>;
-    update(collection: string, id: string, locale: string, fields: Record<string, unknown>): Promise<EntryRecord>;
-    setStatus(collection: string, id: string, locale: string, status: "draft" | "published"): Promise<EntryRecord>;
-    addLocale(collection: string, id: string, locale: string, options: AddEntryLocaleOptions): Promise<EntryRecord>;
+    update(collection: string, id: string, locale: string, fields: Record<string, unknown>, by?: string): Promise<EntryRecord>;
+    setStatus(collection: string, id: string, locale: string, status: "draft" | "published", by?: string): Promise<EntryRecord>;
+    discardDraft(collection: string, id: string, locale: string, by?: string): Promise<EntryRecord>;
+    addLocale(collection: string, id: string, locale: string, options: AddEntryLocaleOptions, by?: string): Promise<EntryRecord>;
     removeLocale(collection: string, id: string, locale: string): Promise<EntryRecord>;
     listVersions(collection: string, id: string, locale: string): Promise<EntryVersion[]>;
+    restore(collection: string, id: string, locale: string, versionId: string, by?: string): Promise<EntryRecord>;
+    getVersion(collection: string, versionId: string): Promise<EntryVersion | null>;
     move(collection: string, id: string, to: {
         parentId: string | null;
         index?: number;

package/dist/entry-store.js

@@ -3,7 +3,7 @@
 // SHARED fields) with one row per locale it exists in (spec 2026-09-06
 // §7): the locale row owns its slug, its publish state and the
 // .localized() fields, and — for a collection registered with
-// `versions: true` — a history of merged snapshots. Nothing falls back
+// every collection — a history of merged snapshots, one row per publish. Nothing falls back
 // to another locale. Writes always flow through this API (never raw
 // table access), which is what lets the refs index stay correct: every
 // save rewrites the entry's outgoing edges over EVERY locale's live
@@ -47,6 +47,7 @@ const uid = (prefix) => `${prefix}-${++counter}-${Date.now().toString(36)}`;
 export const DEFAULT_ENTRY_LOCALES = { default: "en", supported: ["en"] };
 export const entryErrors = {
     notFound: (collection, id) => new Error(`smoodly: no entry "${id}" in "${collection}".`),
+    nothingPublished: (collection, id, locale) => new Error(`smoodly: entry "${id}" in "${collection}" has nothing published in locale "${locale}" — there is no version to restore.`),
     hasChildren: (collection, id) => new Error(`smoodly: "${collection}/${id}" has child entries — move or delete them first.`),
     cycle: () => new Error("smoodly: an entry cannot be moved under itself."),
     foreignParent: () => new Error("smoodly: the parent of an entry must be in the same collection."),
@@ -66,6 +67,7 @@ export const entryErrors = {
     owned: (name, verb) => new Error(`smoodly: shared item "${name}" is owned by code — ${verb}.`),
     noSlug: (name) => new Error(`smoodly: shared item "${name}" has no URL — it cannot take a slug.`),
     everyLocale: (name) => new Error(`smoodly: shared item "${name}" exists in every locale — it cannot be removed from one.`),
+    foreignVersion: (collection, id, locale, versionId) => new Error(`smoodly: "${versionId}" is not a version of entry "${id}" in "${collection}", locale "${locale}".`),
 };
 /** The keys a locale row owns: every field with .localized(), except
  *  `slug`, which is the row's own column (a segment is an address, per
@@ -158,7 +160,7 @@ export class MemoryEntryStore {
         this.refs = refs;
         this.entries = new Map();
         this.versions = new Map();
-        /** Insertion order per version — `createdAt` alone can tie within a millisecond. */
+        /** Insertion order per version — `savedAt` alone can tie within a millisecond. */
         this.versionSeq = new Map();
         this.seq = 0;
         this.order = new Map();
@@ -197,23 +199,44 @@ export class MemoryEntryStore {
         return out;
     }
     /** An edit bumps the node and the edited row; `move` and `reorder` never call this. */
-    bump(entry, row) {
+    bump(entry, row, by) {
         const now = Date.now();
         entry.updatedAt = now > entry.updatedAt ? now : entry.updatedAt + 1;
-        if (row)
+        if (row) {
             row.updatedAt = entry.updatedAt;
+            row.updatedBy = by ?? null;
+        }
     }
-    /** A versioned collection records every save as a merged snapshot and
-     *  points the locale's draft at it; others keep the row as the live content. */
+    /** The draft rule (spec 2026-09-13 history §1) for every collection (spec 2026-09-14 §1):
+     *  the unpublished draft row is rewritten in place and a new one starts only when the
+     *  draft IS the published one. */
     recordVersion(entry, locale) {
-        if (!this.schema(entry.collection).versions)
+        const row = entry.locales[locale];
+        const fields = entryFieldsIn(entry, locale);
+        const current = row.draftVersionId ? this.versions.get(row.draftVersionId) : undefined;
+        if (current && row.draftVersionId !== row.publishedVersionId) {
+            current.fields = fields;
+            current.savedAt = Date.now();
+            this.versionSeq.set(current.id, ++this.seq); // newest again
             return;
-        const version = {
-            id: uid("version"), entryId: entry.id, locale, fields: entryFieldsIn(entry, locale), createdAt: Date.now(),
-        };
+        }
+        const version = { id: uid("version"), entryId: entry.id, locale, fields, savedAt: Date.now() };
         this.versions.set(version.id, version);
         this.versionSeq.set(version.id, ++this.seq);
-        entry.locales[locale].draftVersionId = version.id;
+        row.draftVersionId = version.id;
+    }
+    /** A published row from before every collection was versioned has no snapshot; give it
+     *  one from what is live BEFORE a write changes the fields, so the site keeps serving it
+     *  and the write lands in a new draft row (spec 2026-09-14 §1). */
+    ensureLiveSnapshot(entry, locale) {
+        const row = entry.locales[locale];
+        if (row.status !== "published" || row.publishedVersionId !== null)
+            return;
+        const version = { id: uid("version"), entryId: entry.id, locale, fields: entryFieldsIn(entry, locale), savedAt: Date.now() };
+        this.versions.set(version.id, version);
+        this.versionSeq.set(version.id, ++this.seq);
+        row.draftVersionId = version.id;
+        row.publishedVersionId = version.id;
     }
     dropVersions(entryId, locale) {
         for (const [id, v] of this.versions) {
@@ -277,7 +300,7 @@ export class MemoryEntryStore {
         if (parent && !parent.locales[locale])
             throw entryErrors.parentNotInLocale(locale);
     }
-    async create(collection, fields, options) {
+    async create(collection, fields, options, by) {
         const schema = this.schema(collection);
         assertSupportedLocale(options.locale, this.locales);
         const parentId = options.parentId ?? null;
@@ -299,7 +322,9 @@ export class MemoryEntryStore {
             id: isSharedSchema(schema) ? await sharedEntryId(DEFAULT_SPACE_ID, collection) : uid("entry"),
             collection, parentId, fields: shared,
             locales: {
-                [options.locale]: { slug, status: "draft", fields: localized, draftVersionId: null, publishedVersionId: null, updatedAt: now },
+                [options.locale]: {
+                    slug, status: "draft", fields: localized, draftVersionId: null, publishedVersionId: null, updatedAt: now, updatedBy: by ?? null,
+                },
             },
             sort: null, createdAt: now, updatedAt: now,
         };
@@ -362,10 +387,11 @@ export class MemoryEntryStore {
         }
         return out;
     }
-    async update(collection, id, locale, fields) {
+    async update(collection, id, locale, fields, by) {
         const schema = this.schema(collection);
         const entry = this.must(collection, id);
         const row = entryLocaleRow(entry, locale);
+        this.ensureLiveSnapshot(entry, locale);
         const { shared, localized, slug } = splitFields(fields, schema);
         if (isSharedSchema(schema) && slug !== null)
             throw entryErrors.noSlug(collection);
@@ -383,27 +409,46 @@ export class MemoryEntryStore {
             throw e;
         }
         this.recordVersion(entry, locale);
-        this.bump(entry, row);
+        this.bump(entry, row, by);
         this.writeRefs(entry);
         return this.snapshot(entry);
     }
-    async setStatus(collection, id, locale, status) {
+    async setStatus(collection, id, locale, status, by) {
         const entry = this.must(collection, id);
         const row = entryLocaleRow(entry, locale);
         if (status === "published") {
-            // Publish points at the current draft; a versioned row always has one
-            // (create and update record it), but never trust that from here.
-            if (this.schema(collection).versions && !row.draftVersionId)
+            // Publish points at the current draft; a row always has one after its first write, but never trust that from here.
+            if (!row.draftVersionId)
                 this.recordVersion(entry, locale);
             row.publishedVersionId = row.draftVersionId;
         }
         // Unpublish keeps the pointer for a later republish (spec §2).
         row.status = status;
-        this.bump(entry, row);
+        this.bump(entry, row, by);
         this.writeRefs(entry); // the published snapshot just became, or stopped being, a live set
         return this.snapshot(entry);
     }
-    async addLocale(collection, id, locale, options) {
+    async discardDraft(collection, id, locale, by) {
+        const schema = this.schema(collection);
+        const entry = this.must(collection, id);
+        const row = entryLocaleRow(entry, locale);
+        const snapshot = row.publishedVersionId ? this.versions.get(row.publishedVersionId) : undefined;
+        if (!snapshot)
+            throw entryErrors.nothingPublished(collection, id, locale);
+        const { shared, localized } = splitFields(snapshot.fields, schema);
+        entry.fields = shared;
+        row.fields = localized;
+        const abandoned = row.draftVersionId;
+        row.draftVersionId = row.publishedVersionId;
+        if (abandoned && abandoned !== row.publishedVersionId) {
+            this.versions.delete(abandoned);
+            this.versionSeq.delete(abandoned);
+        }
+        this.bump(entry, row, by);
+        this.writeRefs(entry);
+        return this.snapshot(entry);
+    }
+    async addLocale(collection, id, locale, options, by) {
         assertSupportedLocale(locale, this.locales);
         const entry = this.must(collection, id);
         // The source is read FIRST: "copy from a locale that isn't there" is
@@ -417,7 +462,7 @@ export class MemoryEntryStore {
         const now = Date.now();
         entry.locales[locale] = {
             slug: source.slug, status: "draft", fields: structuredClone(source.fields),
-            draftVersionId: null, publishedVersionId: null, updatedAt: now,
+            draftVersionId: null, publishedVersionId: null, updatedAt: now, updatedBy: by ?? null,
         };
         this.recordVersion(entry, locale);
         // Only this node's rows change: a child cannot have a locale its parent lacked.
@@ -462,9 +507,31 @@ export class MemoryEntryStore {
         this.must(collection, id);
         return [...this.versions.values()]
             .filter((v) => v.entryId === id && v.locale === locale)
-            .sort((a, b) => b.createdAt - a.createdAt || this.versionSeq.get(b.id) - this.versionSeq.get(a.id))
+            .sort((a, b) => b.savedAt - a.savedAt || this.versionSeq.get(b.id) - this.versionSeq.get(a.id))
             .map((v) => structuredClone(v));
     }
+    async restore(collection, id, locale, versionId, by) {
+        const schema = this.schema(collection);
+        const entry = this.must(collection, id);
+        const row = entryLocaleRow(entry, locale);
+        const version = this.versions.get(versionId);
+        if (!version || version.entryId !== id || version.locale !== locale)
+            throw entryErrors.foreignVersion(collection, id, locale, versionId);
+        if (versionId === row.publishedVersionId)
+            return this.discardDraft(collection, id, locale, by);
+        const { shared, localized } = splitFields(version.fields, schema);
+        entry.fields = shared;
+        row.fields = localized; // the slug is the row's own and never versioned
+        this.recordVersion(entry, locale);
+        this.bump(entry, row, by);
+        this.writeRefs(entry);
+        return this.snapshot(entry);
+    }
+    async getVersion(collection, versionId) {
+        this.schema(collection);
+        const v = this.versions.get(versionId);
+        return v ? structuredClone(v) : null;
+    }
     async move(collection, id, to) {
         if (isSharedSchema(this.schema(collection)))
             throw entryErrors.owned(collection, "it has no tree position");

package/dist/next/page-renderer.js

@@ -17,12 +17,12 @@ export function createPageRenderer(options) {
     const entryPages = new Map(options.pages.filter((p) => p.schema.kind === "entryPage" && p.schema.collection).map((p) => [p.schema.collection, p]));
     /** locate (uncached: the id it returns IS the cache tag) then load —
      *  cached per (locale, path) outside draft mode. */
-    async function load(locale, path, draft) {
+    async function load(locale, path, draft, version) {
         const target = await site.locate(locale, path);
         if (!target)
             return null;
         if (draft)
-            return site.load(target, locale, path, { draft: true });
+            return site.load(target, locale, path, { draft: true, ...(version !== undefined ? { version } : {}) });
         return unstable_cache(() => site.load(target, locale, path), ["smoodly-site", locale, path], {
             tags: [target.kind === "page" ? pageTag(target.id) : entryTag(target.id)],
         })();
@@ -58,10 +58,14 @@ export function createPageRenderer(options) {
         const locale = opts?.locale ?? site.locales.default;
         const path = pathFor(locale);
         const { isEnabled: draft } = await draftMode();
-        const hit = await load(locale, path, draft);
+        const params = await opts?.searchParams;
+        // Both parameters exist only inside draft mode: the public site never sees an editor bridge or an old version.
+        const editor = draft && params?.["smoodly-editor"] === "1";
+        const versionParam = params?.["smoodly-version"];
+        const version = draft && typeof versionParam === "string" && versionParam !== "" ? versionParam : undefined;
+        const hit = await load(locale, path, draft, version);
         if (!hit || !accept(hit))
             notFound();
-        const editor = draft && (await opts?.searchParams)?.["smoodly-editor"] === "1";
         return (_jsxs(_Fragment, { children: [editor ? _jsx(EditorBridge, {}) : null, render(hit, editor, locale)] }));
     }
     async function metadata(pathFor, opts, accept) {