smoodly 0.0.23 → 0.0.25

package/dist/admin/shell/EntryForm.js

@@ -15,7 +15,10 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 // publish control. A draft may be incomplete; publish validates it and
 // lists the fields in an amber banner. The safe-delete guard's message
 // renders verbatim — it is product surface.
+import { Eye } from "lucide-react";
 import { useEffect, useMemo, useRef, useState } from "react";
+import { stillFailing, validateFields } from "../validate.js";
+import { elementSchemas } from "../../richtext-walk.js";
 import { FieldWidget } from "../forms/FieldWidget.js";
 import { revealField } from "../forms/reveal.js";
 import { useRefOptions } from "../forms/useRefOptions.js";
@@ -32,6 +35,8 @@ import { entrySourceLocale, entryTitle, localizedFieldKeys } from "./entries-lis
 import { useAdminHref } from "./base.js";
 import { localeFromUrl, writeLocaleToUrl } from "../editor/locale-url.js";
 import { navigate, useLeaveGuard } from "./router.js";
+import { LIVE_URL_CONFIRM, liveUrlChanges } from "./live-url.js";
+import { confirm, DISCARD_CONFIRM } from "../ui/confirm.js";
 /** A stable empty map for the hooks that run before the "no such collection" return. */
 const NO_FIELDS = {};
 export function EntryForm({ ops, registry, collection, id }) {
@@ -59,10 +64,28 @@ export function EntryForm({ ops, registry, collection, id }) {
     const formRef = useRef(null);
     const fieldsRef = useRef(fields);
     fieldsRef.current = fields;
+    const recordRef = useRef(record);
+    recordRef.current = record;
+    /** The slug the editor already confirmed as a live-URL change, so the next autosave does not ask again. */
+    const confirmedSlug = useRef(null);
     // The page editor's controller: debounced, retrying, flushable (spec 2026-09-14 §3).
     const { saveState, mark, flush } = useDraftAutosave({
         read: () => fieldsRef.current,
         persist: async (value) => {
+            // A published entry's slug is a live URL: one confirm at the save, Cancel restores it (members management §5).
+            const row = recordRef.current?.locales[locale];
+            const stored = row?.slug ?? null;
+            const next = typeof value.slug === "string" ? value.slug : null;
+            if (next !== confirmedSlug.current && liveUrlChanges({ status: row?.status, from: stored, to: next })) {
+                const current = recordRef.current;
+                const subject = current && meta ? { name: entryTitle(current, meta, registry, locale), path: slugPrefix && stored ? `${slugPrefix}${stored}` : null } : undefined;
+                if (await confirm({ ...LIVE_URL_CONFIRM, subject }))
+                    confirmedSlug.current = next;
+                else {
+                    value = { ...value, slug: stored };
+                    setFields((f) => ({ ...(f ?? {}), slug: stored }));
+                }
+            }
             const r = await ops.entries.save(collection, id, locale, value);
             if (r.ok)
                 setRecord(r.data);
@@ -110,6 +133,22 @@ export function EntryForm({ ops, registry, collection, id }) {
         return _jsx("p", { style: { padding: 32 }, children: "No such collection." });
     const row = record?.locales[locale];
     const status = row ? localeStatusOf(row) : null;
+    // A refused publish's field errors clear one by one as the fields are fixed: every change revalidates
+    // (the same rules the op applies) and keeps only what still fails; the notice's list shrinks with them.
+    const elementDescs = useMemo(() => elementSchemas(registry.elements), [registry]);
+    const hasFieldErrors = Object.keys(fieldErrors).length > 0;
+    useEffect(() => {
+        if (!hasFieldErrors || !fields || !meta)
+            return;
+        const fresh = validateFields(fields, meta.fields, elementDescs);
+        setFieldErrors((prev) => stillFailing(prev, fresh));
+        setNotice((n) => {
+            if (!n?.fields)
+                return n;
+            const left = n.fields.filter((f) => fresh.some((e) => e.field === f.field));
+            return left.length === 0 ? null : left.length === n.fields.length ? n : { ...n, fields: left };
+        });
+    }, [fields, hasFieldErrors, meta, elementDescs]);
     /** An op's failure onto the screen: amber with the fields for a validation result, red otherwise. */
     const fail = (r) => {
         if (r.code === "validation" && r.fields && r.fields.length > 0) {
@@ -163,7 +202,7 @@ export function EntryForm({ ops, registry, collection, id }) {
     };
     /** Discard (spec 2026-09-13 publish flow §4): confirm, flush so a late save cannot re-dirty the row, restore, reload. */
     const discard = async () => {
-        if (!window.confirm("Discard your changes and restore the published version?"))
+        if (!(await confirm({ ...DISCARD_CONFIRM, subject: entrySubject() })))
             return;
         setNotice(null);
         setBusy("discard");
@@ -273,7 +312,14 @@ export function EntryForm({ ops, registry, collection, id }) {
         const remaining = Object.keys(record.locales).filter((l) => l !== locale);
         if (remaining.length === 0)
             return;
-        if (!window.confirm(`Remove this entry from ${locale}? Its ${locale} fields and history are deleted.`))
+        const ok = await confirm({
+            title: `Remove this entry from ${locale}?`,
+            body: `Its ${locale} fields and history are deleted. Other languages are not affected.`,
+            confirmLabel: `Remove from ${locale}`,
+            destructive: true,
+            subject: entrySubject(),
+        });
+        if (!ok)
             return;
         let result;
         try {
@@ -290,11 +336,18 @@ export function EntryForm({ ops, registry, collection, id }) {
         goToLocale(remaining.includes(registry.locales.default) ? registry.locales.default : remaining[0]);
     };
     const destroy = async () => {
-        if (!window.confirm(multilingual ? "Delete this entry in every language?" : "Delete this entry?"))
+        const ok = await confirm({
+            title: "Delete this entry?",
+            body: `The entry${multilingual ? " in every language" : ""} and its history are removed. Anything referencing it loses the reference. This cannot be undone.`,
+            confirmLabel: "Delete entry",
+            destructive: true,
+            subject: entrySubject(),
+        });
+        if (!ok)
             return;
         const r = await ops.entries.delete(collection, id);
         if (r.ok)
-            navigate(adminHref(`/${collection}`), { force: true });
+            void navigate(adminHref(`/${collection}`), { force: true });
         else
             fail(r);
     };
@@ -302,6 +355,11 @@ export function EntryForm({ ops, registry, collection, id }) {
     // The mount's path in the ACTIVE locale prefixes the slug; no path, no prefix.
     const base = meta.path?.[locale];
     const slugPrefix = base ? `/${base}/` : undefined;
+    /** The confirm dialogs' context chip: the entry's title and, on a routed collection, its URL. */
+    const entrySubject = () => {
+        const slug = record?.locales[locale]?.slug;
+        return record ? { name: heading, path: slugPrefix && slug ? `${slugPrefix}${slug}` : null } : undefined;
+    };
     const present = record ? registry.locales.supported.filter((l) => record.locales[l]) : [locale];
     const widget = ([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: fields?.[key], errors: fieldErrors, refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, suggestions: tagSuggestions[key], prefix: d.type === "slug" ? slugPrefix : undefined, mark: multilingual && !localeKeys.includes(key) ? _jsx(UnlocalizedMark, {}) : undefined, onChange: (value) => {
             setFields((f) => ({ ...(f ?? {}), [key]: value }));
@@ -316,6 +374,6 @@ export function EntryForm({ ops, registry, collection, id }) {
                                 trailing: multilingual && (_jsx(LocaleSwitcher, { registry: registry, present: present, parentLocales: parentLocales, value: locale, adding: adding, onSwitch: (l) => { void switchLocale(l); }, onAdd: (l) => void doAddLocale(l) })),
                             },
                             { label: heading },
-                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState }), urls[locale] && (_jsx(LinkButton, { href: urls[locale], target: "_blank", rel: "noreferrer", title: "Opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: "View live" })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsxs("div", { className: "sm-editor", children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
+                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState }), urls[locale] && (_jsx(LinkButton, { icon: true, href: urls[locale], target: "_blank", rel: "noreferrer", "aria-label": "View live", title: "View live \u2014 opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: _jsx(Eye, { size: 16, strokeWidth: 1.5, "aria-hidden": "true" }) })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsxs("div", { className: "sm-editor", children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
                                             revealField(formRef.current, path); } })] })), absent ? (_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 12 }, children: [_jsxs("p", { children: ["This entry doesn't exist in ", locale, " yet. Adding it copies the ", entrySourceLocale(record, registry), " fields as the first ", locale, " draft."] }), _jsxs("div", { style: { display: "flex", gap: 8 }, children: [_jsxs(Button, { onClick: () => void doAddLocale(locale), disabled: adding || !parentLocales.includes(locale), title: parentLocales.includes(locale) ? undefined : `add ${locale} to the parent first`, children: ["Add ", locale] }), _jsxs(Button, { variant: "secondary", onClick: () => { void switchLocale(entrySourceLocale(record, registry)); }, children: ["Back to ", entrySourceLocale(record, registry)] })] })] })) : fields !== null ? (Object.entries(meta.fields).map(widget)) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsxs("aside", { className: "sm-inspector", children: [record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Created", value: relativeTime(record.createdAt) }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), multilingual && _jsx(InfoRow, { label: "Languages", value: Object.keys(record.locales).join(", ") }), _jsx(InfoRow, { label: "ID", value: id, mono: true })] })), record && (_jsxs("div", { className: "sm-card", children: [multilingual && row && Object.keys(record.locales).length > 1 && (_jsxs(Button, { variant: "secondary", onClick: () => void doRemoveLocale(), children: ["Remove from ", locale] })), _jsx(Button, { variant: "danger", onClick: destroy, children: "Delete" })] }))] })] })] }));
 }

package/dist/admin/shell/GlobalForm.js

@@ -12,6 +12,8 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 // validates the draft and lists the fields in an amber banner. "Used on
 // N pages" is the refs index's answer.
 import { useEffect, useMemo, useRef, useState } from "react";
+import { stillFailing, validateNode } from "../validate.js";
+import { elementSchemas } from "../../richtext-walk.js";
 import { CSS_KEY, SETTINGS_KEY, STYLES_KEY } from "../../global.js";
 import { tabsFor } from "../forms/tabs.js";
 import { revealField } from "../forms/reveal.js";
@@ -28,6 +30,7 @@ import { useAdminHref } from "./base.js";
 import { GlobalFields } from "./GlobalFields.js";
 import { localeFromUrl, writeLocaleToUrl } from "../editor/locale-url.js";
 import { useLeaveGuard } from "./router.js";
+import { confirm, DISCARD_CONFIRM } from "../ui/confirm.js";
 export function GlobalForm({ ops, registry, name }) {
     const adminHref = useAdminHref();
     const item = registry.globals.find((s) => s.name === name);
@@ -101,6 +104,23 @@ export function GlobalForm({ ops, registry, name }) {
         else
             setNotice({ tone: "error", text: r.message });
     };
+    // A refused publish's field errors clear as the fields are fixed: every change revalidates the way the
+    // op does (a visual item like a node: fields, `$settings` under `settings.`, `$css`) and keeps what still fails.
+    const elementDescs = useMemo(() => elementSchemas(registry.elements), [registry]);
+    const hasFieldErrors = Object.keys(fieldErrors).length > 0;
+    useEffect(() => {
+        if (!hasFieldErrors || !fields || !item)
+            return;
+        const { [SETTINGS_KEY]: settings, [CSS_KEY]: css, ...values } = fields;
+        const fresh = validateNode({ fields: values, settings: settings !== null && typeof settings === "object" ? settings : {}, css }, { fields: item.fields, settings: item.section !== undefined ? item.settings : undefined }, elementDescs);
+        setFieldErrors((prev) => stillFailing(prev, fresh));
+        setNotice((n) => {
+            if (!n?.fields)
+                return n;
+            const left = n.fields.filter((f) => fresh.some((e) => e.field === f.field));
+            return left.length === 0 ? null : left.length === n.fields.length ? n : { ...n, fields: left };
+        });
+    }, [fields, hasFieldErrors, item, elementDescs]);
     const publish = async () => {
         setNotice(null);
         setBusy("publish");
@@ -143,7 +163,7 @@ export function GlobalForm({ ops, registry, name }) {
             fail(r);
     };
     const discard = async () => {
-        if (!window.confirm("Discard your changes and restore the published version?"))
+        if (!(await confirm({ ...DISCARD_CONFIRM, subject: { name: item.title } })))
             return;
         setNotice(null);
         setBusy("discard");
@@ -235,7 +255,7 @@ export function GlobalForm({ ops, registry, name }) {
     };
     return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsx(_Fragment, { children: _jsx(Breadcrumb, { backHref: adminHref("/globals"), items: [
                             {
-                                label: "Globals", href: adminHref("/globals"),
+                                label: "Site", href: adminHref("/globals"),
                                 trailing: multilingual && (_jsx(LocaleSwitcher, { registry: registry, present: registry.locales.supported, parentLocales: [], value: locale, adding: false, onSwitch: (l) => { void switchLocale(l); }, onAdd: () => undefined })),
                             },
                             { label: item.title },

package/dist/admin/shell/GlobalList.js

@@ -14,30 +14,16 @@ import { LocalePicker } from "../ui/LocaleSwitcher.js";
 import { relativeTime } from "../ui/format.js";
 import { useAdminHref } from "./base.js";
 import { ErrorPane } from "./ErrorPane.js";
-const LOCALE_KEY = "smoodly.entries.locale"; // the same choice the collection lists remember
-function rememberedLocale(registry) {
-    try {
-        const stored = window.sessionStorage.getItem(LOCALE_KEY);
-        if (stored && registry.locales.supported.includes(stored))
-            return stored;
-    }
-    catch {
-        // storage unavailable — the default is fine
-    }
-    return registry.locales.default;
-}
+import { rememberLocale, rememberedLocale } from "./locale-memory.js";
 export function GlobalList({ ops, registry }) {
     const adminHref = useAdminHref();
     const [items, setItems] = useState(null);
     const [error, setError] = useState(null);
-    const [locale, setLocale] = useState(() => rememberedLocale(registry));
+    const [locale, setLocale] = useState(() => rememberedLocale(registry.locales));
     const multilingual = registry.locales.supported.length > 1;
     const pickLocale = (next) => {
         setLocale(next);
-        try {
-            window.sessionStorage.setItem(LOCALE_KEY, next);
-        }
-        catch { /* see rememberedLocale */ }
+        rememberLocale(next);
     };
     const load = useCallback(() => {
         ops.globals.list()
@@ -48,7 +34,7 @@ export function GlobalList({ ops, registry }) {
     if (error)
         return _jsx(ErrorPane, { message: error });
     const rows = items ? globalRows(items, registry, locale) : [];
-    return (_jsx(ListView, { title: "Globals", titleTrailing: multilingual && _jsx(LocalePicker, { locales: registry.locales.supported, value: locale, onChange: pickLocale }), columns: [
+    return (_jsx(ListView, { title: "Site", titleTrailing: multilingual && _jsx(LocalePicker, { locales: registry.locales.supported, value: locale, onChange: pickLocale }), columns: [
             { label: "Title", width: "minmax(160px,1fr)" },
             { label: "Kind", width: "90px" },
             { label: "Updated", width: "minmax(110px,160px)" },

package/dist/admin/shell/IconRail.d.ts

@@ -1,7 +1,9 @@
 import type { AdminRegistry } from "../serialize.ts";
-export declare function IconRail({ registry, active, email, onSignOut }: {
+export declare function IconRail({ registry, active, email, settings, onSignOut }: {
     registry: AdminRegistry;
     active: string;
     email?: string;
+    /** Whether the Settings tile shows — `can(role, "settings")` in the shell. */
+    settings?: boolean;
     onSignOut: () => void;
 }): import("react").JSX.Element;

package/dist/admin/shell/IconRail.js

@@ -10,7 +10,8 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Collections — one rail item whose flyout lists every collection — then
 // Media, Globals (the global content items, when the registry has any;
 // the route is /globals), and Settings (the Settings area, spec
-// 2026-09-25; the route is /settings). The user avatar is pinned to the bottom and opens the same
+// 2026-09-25; the route is /settings; admins only, so the shell passes
+// `settings` false for an editor). The user avatar is pinned to the bottom and opens the same
 // flyout with the theme toggle and Sign out, which the old nav's footer
 // held.
 //
@@ -25,11 +26,13 @@ import { RouteLink } from "./RouteLink.js";
 /** Lucide at the rail's size and stroke (the tile's CSS restates both). */
 const ICON = { size: 18, strokeWidth: 2, "aria-hidden": true };
 /** The app icon, inlined: a package can't ship a file into the host app's
- *  /public. Brand blue on white in both themes, so no --logo-filter. */
+ *  /public. design_handoff_smoodly_neutral/assets/smoodly-logo.svg — the
+ *  outer and inner shapes take --logo-outer / --logo-inner (white over
+ *  navy on the frame), so a look decides its colours. */
 function AppIcon() {
-    return (_jsxs("svg", { className: "sm-rail__logo", viewBox: "0 0 89 86", fill: "none", xmlns: "http://www.w3.org/2000/svg", role: "img", "aria-label": "Smoodly", children: [_jsx("path", { fill: "#0038B1", d: "M0 51.5552C0 24.3141 25.0505 0 52.5493 0H52.7761C74.4707 0 89 14.6336 89 34.445C89 61.6862 64.4034 86 36.0066 86C14.0946 86 0 70.9165 0 51.5552Z" }), _jsx("path", { fill: "#FFFFFF", d: "M23.25 46.1188C23.25 33.0027 34.8806 21.2959 47.6479 21.2959H47.7532C57.8257 21.2959 64.5714 28.3417 64.5714 37.8805C64.5714 50.9966 53.1516 62.7033 39.9674 62.7033C29.7939 62.7033 23.25 55.4409 23.25 46.1188Z" })] }));
+    return (_jsxs("svg", { className: "sm-rail__logo", viewBox: "0 0 28 27", fill: "none", xmlns: "http://www.w3.org/2000/svg", role: "img", "aria-label": "Smoodly", children: [_jsx("path", { style: { fill: "var(--logo-outer)" }, d: "M0 16.1859C0 7.6335 7.88106 0 16.5324 0H16.6037C23.429 0 28 4.59428 28 10.8141C28 19.3666 20.2618 27 11.3279 27C4.43425 27 0 22.2645 0 16.1859Z" }), _jsx("path", { style: { fill: "var(--logo-inner)" }, d: "M7 14.7932C7 10.6754 10.6591 7 14.6757 7H14.7089C17.8777 7 20 9.21206 20 12.2068C20 16.3247 16.4072 20 12.2594 20C9.05876 20 7 17.7199 7 14.7932Z" })] }));
 }
-export function IconRail({ registry, active, email, onSignOut }) {
+export function IconRail({ registry, active, email, settings = true, onSignOut }) {
     const adminHref = useAdminHref();
     const root = useRef(null);
     const uid = useId();
@@ -43,14 +46,21 @@ export function IconRail({ registry, active, email, onSignOut }) {
     const close = () => setOpen(null);
     const hoverLeave = () => setHovered(false);
     // A click open moves focus into the menu; a pointer down outside closes it.
+    // Outside means outside the menu and its trigger — the rest of the rail
+    // counts too (2026-09-26); the trigger is left to its own toggle.
     useEffect(() => {
         if (!open || !root.current)
             return;
         if (!hovered)
             root.current.querySelector(`#${CSS.escape(menuId(open))} [role=menuitem]`)?.focus();
         const onPointerDown = (e) => {
-            if (e.target instanceof Node && !root.current?.contains(e.target))
-                close();
+            if (!(e.target instanceof Node))
+                return;
+            const menu = root.current?.querySelector(`#${CSS.escape(menuId(open))}`);
+            const trigger = root.current?.querySelector(`[aria-controls="${menuId(open)}"]`);
+            if (menu?.contains(e.target) || trigger?.contains(e.target))
+                return;
+            close();
         };
         document.addEventListener("pointerdown", onPointerDown);
         return () => document.removeEventListener("pointerdown", onPointerDown);
@@ -78,5 +88,5 @@ export function IconRail({ registry, active, email, onSignOut }) {
     const collectionsOpen = open === "collections" || (hovered && open === null);
     const name = email?.split("@")[0] ?? "Editor";
     const initials = name.slice(0, 2).toUpperCase();
-    return (_jsxs("nav", { className: "sm-rail", "aria-label": "Primary", ref: root, onKeyDown: onKeyDown, children: [_jsx(AppIcon, {}), _jsxs("ul", { className: "sm-rail__list", children: [link("pages", "Pages", _jsx(PanelTop, { ...ICON }), adminHref("/pages")), collections.length > 0 && (_jsxs("li", { className: "sm-rail__item", onMouseEnter: () => setHovered(true), onMouseLeave: hoverLeave, children: [_jsxs("button", { type: "button", className: "sm-rail__btn", "aria-current": collectionActive ? "page" : undefined, "aria-haspopup": "menu", "aria-expanded": collectionsOpen, "aria-controls": menuId("collections"), onClick: () => toggle("collections"), children: [_jsx("span", { className: "sm-rail__tile", children: _jsx(LibraryBig, { ...ICON }) }), _jsx("span", { className: "sm-rail__label", children: "Collections" })] }), _jsx("ul", { className: "sm-rail__menu sm-rail__menu--collections", role: "menu", id: menuId("collections"), "data-open": collectionsOpen, children: collections.map((c) => (_jsx("li", { role: "none", children: _jsx(RouteLink, { role: "menuitem", className: "sm-rail__menu-item", href: adminHref(`/${c.name}`), "aria-current": c.name === active ? "page" : undefined, onClick: () => { close(); hoverLeave(); }, children: _jsx("span", { children: c.title }) }) }, c.name))) })] })), link("media", "Media", _jsx(Image, { ...ICON }), adminHref("/media")), registry.globals.length > 0 && link("globals", "Globals", _jsx(Globe, { ...ICON }), adminHref("/globals")), link("settings", "Settings", _jsx(Settings, { ...ICON }), adminHref("/settings"))] }), _jsxs("div", { className: "sm-rail__item sm-rail__foot", children: [_jsx("button", { type: "button", className: "sm-rail__user", title: name, "aria-haspopup": "menu", "aria-expanded": open === "user", "aria-controls": menuId("user"), onClick: () => toggle("user"), children: initials }), _jsxs("ul", { className: "sm-rail__menu sm-rail__menu--up", role: "menu", id: menuId("user"), "data-open": open === "user", children: [_jsx("li", { className: "sm-rail__menu-title", role: "presentation", children: name }), _jsx("li", { role: "none", children: _jsx(ThemeToggle, {}) }), _jsx("li", { role: "none", children: _jsx("button", { type: "button", role: "menuitem", className: "sm-rail__menu-item", onClick: () => { close(); onSignOut(); }, children: "Sign out" }) })] })] })] }));
+    return (_jsxs("nav", { className: "sm-rail", "aria-label": "Primary", ref: root, onKeyDown: onKeyDown, children: [_jsx(AppIcon, {}), _jsxs("ul", { className: "sm-rail__list", children: [link("pages", "Pages", _jsx(PanelTop, { ...ICON }), adminHref("/pages")), collections.length > 0 && (_jsxs("li", { className: "sm-rail__item", onMouseEnter: () => setHovered(true), onMouseLeave: hoverLeave, children: [_jsxs("button", { type: "button", className: "sm-rail__btn", "aria-current": collectionActive ? "page" : undefined, "aria-haspopup": "menu", "aria-expanded": collectionsOpen, "aria-controls": menuId("collections"), onClick: () => toggle("collections"), children: [_jsx("span", { className: "sm-rail__tile", children: _jsx(LibraryBig, { ...ICON }) }), _jsx("span", { className: "sm-rail__label", children: "Collections" })] }), _jsx("ul", { className: "sm-rail__menu sm-rail__menu--collections", role: "menu", id: menuId("collections"), "data-open": collectionsOpen, children: collections.map((c) => (_jsx("li", { role: "none", children: _jsx(RouteLink, { role: "menuitem", className: "sm-rail__menu-item", href: adminHref(`/${c.name}`), "aria-current": c.name === active ? "page" : undefined, onClick: () => { close(); hoverLeave(); }, children: _jsx("span", { children: c.title }) }) }, c.name))) })] })), link("media", "Media", _jsx(Image, { ...ICON }), adminHref("/media")), registry.globals.length > 0 && link("globals", "Site", _jsx(Globe, { ...ICON }), adminHref("/globals")), settings && link("settings", "Settings", _jsx(Settings, { ...ICON }), adminHref("/settings"))] }), _jsxs("div", { className: "sm-rail__item sm-rail__foot", children: [_jsx("button", { type: "button", className: "sm-rail__user", title: name, "aria-haspopup": "menu", "aria-expanded": open === "user", "aria-controls": menuId("user"), onClick: () => toggle("user"), children: initials }), _jsxs("ul", { className: "sm-rail__menu sm-rail__menu--up", role: "menu", id: menuId("user"), "data-open": open === "user", children: [_jsx("li", { className: "sm-rail__menu-title", role: "presentation", children: name }), _jsx("li", { role: "none", children: _jsx(ThemeToggle, {}) }), _jsx("li", { role: "none", children: _jsx("button", { type: "button", role: "menuitem", className: "sm-rail__menu-item", onClick: () => { close(); onSignOut(); }, children: "Sign out" }) })] })] })] }));
 }

package/dist/admin/shell/InviteModal.d.ts

@@ -0,0 +1,6 @@
+import type { InviteInput } from "../../member-store.ts";
+export declare function InviteModal({ onClose, onInvite }: {
+    onClose(): void;
+    /** Resolves to an error message, or null when the invite landed (the caller closes). */
+    onInvite(input: Omit<InviteInput, "redirectTo">): Promise<string | null>;
+}): import("react").JSX.Element;

package/dist/admin/shell/InviteModal.js

@@ -0,0 +1,28 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// packages/smoodly/src/admin/shell/InviteModal.tsx
+// Invite a member (spec 2026-09-25 members management §4): an email, a
+// role, Send. The role is a radio list with a line under each option
+// saying what it may do — the one place the difference is explained in
+// the admin (the Roles page was dropped 2026-09-25). The op's error
+// shows inside; success closes it and the page reports what happened.
+import { useState } from "react";
+import { MEMBER_ROLES } from "../../permissions.js";
+import { Modal } from "../ui/Modal.js";
+import { Banner, Button, Field } from "../ui/primitives.js";
+import { ROLE_DESCRIPTION, roleLabel } from "./members-list.js";
+export function InviteModal({ onClose, onInvite }) {
+    const [email, setEmail] = useState("");
+    const [role, setRole] = useState("editor");
+    const [error, setError] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const submit = async (e) => {
+        e.preventDefault();
+        setBusy(true);
+        setError(await onInvite({ email: email.trim(), role }));
+        setBusy(false);
+    };
+    // Editor first: the default, and the one most invites want.
+    const roles = [...MEMBER_ROLES].reverse();
+    return (_jsx(Modal, { title: "Invite a member", width: 420, onClose: onClose, children: _jsxs("form", { onSubmit: submit, style: { display: "flex", flexDirection: "column", gap: 14 }, children: [_jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", required: true, autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Role", asDiv: true, children: _jsx("div", { className: "sm-choices", role: "radiogroup", children: roles.map((r) => (_jsxs("label", { className: "sm-choice sm-choice--desc", children: [_jsx("input", { type: "radio", name: "role", value: r, checked: role === r, onChange: () => setRole(r) }), _jsxs("span", { children: [_jsx("span", { className: "sm-choice__label", children: roleLabel(r) }), _jsx("span", { className: "sm-choice__desc", children: ROLE_DESCRIPTION[r] })] })] }, r))) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: 8 }, children: [_jsx(Button, { variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx("button", { type: "submit", className: "sm-btn sm-btn--primary", disabled: busy, children: busy ? "Sending…" : "Send invite" })] })] }) }));
+}

package/dist/admin/shell/ListView.js

@@ -6,10 +6,10 @@ import { navigate } from "./router.js";
 export function ListView({ title, titleTrailing, actions, notice, columns, rows, empty, sortable }) {
     const widths = sortable ? ["24px", ...columns.map((c) => c.width)] : columns.map((c) => c.width);
     const grid = { gridTemplateColumns: widths.join(" ") };
-    return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsxs(_Fragment, { children: [_jsx("span", { className: "sm-title", children: title }), titleTrailing] }), right: actions }), notice, _jsx("div", { className: "sm-listwrap", children: _jsxs("div", { className: "sm-table", children: [_jsxs("div", { className: "sm-table__head", style: grid, children: [sortable && _jsx("span", { "aria-hidden": "true" }), columns.map((c) => _jsx("span", { children: c.label }, c.label))] }), _jsxs("div", { className: "sm-table__body", ref: sortable?.hook.containerRef, children: [rows.map((r, i) => {
+    return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsxs(_Fragment, { children: [_jsx("span", { className: "sm-title", children: title }), titleTrailing] }), right: actions }), notice && _jsx("div", { className: "sm-listnotice", children: notice }), _jsx("div", { className: "sm-listwrap", children: _jsxs("div", { className: "sm-table", children: [_jsxs("div", { className: "sm-table__head", style: grid, children: [sortable && _jsx("span", { "aria-hidden": "true" }), columns.map((c) => _jsx("span", { children: c.label }, c.label))] }), _jsxs("div", { className: "sm-table__body", ref: sortable?.hook.containerRef, children: [rows.map((r, i) => {
                                     const clickable = Boolean(r.href || r.onClick);
                                     const href = r.href;
-                                    const go = r.onClick ?? (href ? () => { navigate(href); } : undefined);
+                                    const go = r.onClick ?? (href ? () => { void navigate(href); } : undefined);
                                     return (_jsxs("div", { style: { ...grid, ...sortable?.hook.rowStyle(i) }, role: clickable ? "button" : undefined, tabIndex: clickable ? 0 : undefined, className: cx("sm-row", clickable && "sm-row--clickable", sortable?.hook.rowClass(i)), onClick: go, onKeyDown: (e) => { if (go && (e.key === "Enter" || e.key === " ")) {
                                             e.preventDefault();
                                             go();

package/dist/admin/shell/LoginView.js

@@ -4,10 +4,18 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Google/GitHub when the auth project has them. Errors come from
 // Supabase Auth verbatim. Being an editor is checked by the server on
 // the first op — a signed-in non-editor sees that message in the shell.
+// Forgot password (members management §6) mails a reset link; the reply
+// is the same whatever the email, so the form reveals no membership.
 import { useState } from "react";
 import { Banner, Button, Field, Logo } from "../ui/primitives.js";
 const LABELS = { google: "Continue with Google", github: "Continue with GitHub" };
+const CARD = {
+    width: 320, display: "flex", flexDirection: "column", gap: 14,
+    background: "var(--surface)", padding: 28, borderRadius: "var(--radius-card-lg)",
+    border: "var(--menu-border)", boxShadow: "var(--shadow-page)",
+};
 export function LoginView({ client, providers = [] }) {
+    const [mode, setMode] = useState("signin");
     const [email, setEmail] = useState("");
     const [password, setPassword] = useState("");
     const [error, setError] = useState(null);
@@ -28,6 +36,20 @@ export function LoginView({ client, providers = [] }) {
             setBusy(false);
         }
     };
+    const forgot = async (e) => {
+        e.preventDefault();
+        setBusy(true);
+        setError(null);
+        try {
+            // The answer is not shown: the form must not reveal whether an email is registered.
+            await client.auth.resetPasswordForEmail(email, { redirectTo: window.location.origin + window.location.pathname });
+        }
+        catch { /* same */ }
+        finally {
+            setBusy(false);
+            setMode("sent");
+        }
+    };
     const oauth = async (provider) => {
         setBusy(true);
         setError(null);
@@ -43,9 +65,16 @@ export function LoginView({ client, providers = [] }) {
             setBusy(false);
         }
     };
-    return (_jsx("div", { style: { minHeight: "100vh", display: "grid", placeItems: "center", background: "var(--bg)" }, children: _jsxs("form", { onSubmit: submit, style: {
-                width: 320, display: "flex", flexDirection: "column", gap: 14,
-                background: "var(--surface)", padding: 28, borderRadius: "var(--radius-card-lg)",
-                border: "var(--menu-border)", boxShadow: "var(--shadow-page)",
-            }, children: [_jsx(Logo, { height: 20 }), _jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", value: email, required: true, autoComplete: "email", onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Password", children: _jsx("input", { className: "sm-input", type: "password", value: password, required: true, autoComplete: "current-password", onChange: (e) => setPassword(e.target.value) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsx("button", { type: "submit", disabled: busy, className: "sm-btn sm-btn--primary sm-btn--lg", children: busy ? "Signing in…" : "Sign in" }), providers.map((p) => (_jsx(Button, { variant: "secondary", size: "lg", disabled: busy, onClick: () => oauth(p), children: LABELS[p] }, p)))] }) }));
+    const back = (_jsx(Button, { variant: "secondary", size: "lg", disabled: busy, onClick: () => { setError(null); setMode("signin"); }, children: "Back to sign in" }));
+    let card;
+    if (mode === "sent") {
+        card = (_jsxs("div", { style: CARD, children: [_jsx(Logo, { height: 20 }), _jsx("span", { children: "Check your email for a link to choose a new password." }), back] }));
+    }
+    else if (mode === "forgot") {
+        card = (_jsxs("form", { onSubmit: forgot, style: CARD, children: [_jsx(Logo, { height: 20 }), _jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", value: email, required: true, autoComplete: "email", autoFocus: true, onChange: (e) => setEmail(e.target.value) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsx("button", { type: "submit", disabled: busy, className: "sm-btn sm-btn--primary sm-btn--lg", children: busy ? "Sending…" : "Send reset link" }), back] }));
+    }
+    else {
+        card = (_jsxs("form", { onSubmit: submit, style: CARD, children: [_jsx(Logo, { height: 20 }), _jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", value: email, required: true, autoComplete: "email", onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Password", children: _jsx("input", { className: "sm-input", type: "password", value: password, required: true, autoComplete: "current-password", onChange: (e) => setPassword(e.target.value) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsx("button", { type: "submit", disabled: busy, className: "sm-btn sm-btn--primary sm-btn--lg", children: busy ? "Signing in…" : "Sign in" }), providers.map((p) => (_jsx(Button, { variant: "secondary", size: "lg", disabled: busy, onClick: () => oauth(p), children: LABELS[p] }, p))), _jsx("button", { type: "button", className: "sm-link", disabled: busy, onClick: () => { setError(null); setMode("forgot"); }, style: { background: "transparent", border: 0, color: "var(--text-muted)", cursor: "pointer", font: "inherit", padding: 0 }, children: "Forgot password?" })] }));
+    }
+    return (_jsx("div", { style: { minHeight: "100vh", display: "grid", placeItems: "center", background: "var(--bg)" }, children: card }));
 }

package/dist/admin/shell/MediaScreen.js

@@ -9,6 +9,7 @@ import { useAssets } from "../forms/assets-context.js";
 import { uploadFile } from "../forms/upload.js";
 import { MediaGrid } from "../forms/MediaGrid.js";
 import { Banner, Button, Field, Segmented, TopBar } from "../ui/primitives.js";
+import { confirm } from "../ui/confirm.js";
 import { RouteLink } from "./RouteLink.js";
 import { KIND_FILTERS, acceptFor, formatBytes, kindOfFilter, usageLabel } from "./media-list.js";
 const META = ["title", "alt", "caption", "credit"];
@@ -70,7 +71,16 @@ export function MediaScreen({ initialItems = [], initialSelected = null, initial
         load();
     };
     const remove = async () => {
-        if (!selected || !window.confirm(`Delete "${selected.title ?? selected.filename}"? This cannot be undone.`))
+        if (!selected)
+            return;
+        const ok = await confirm({
+            title: "Delete this file?",
+            body: "The file is removed from the media library and from storage. This cannot be undone.",
+            confirmLabel: "Delete file",
+            destructive: true,
+            subject: { name: selected.title ?? selected.filename },
+        });
+        if (!ok)
             return;
         const r = await assets.ops.delete(selected.id);
         if (!r.ok) {

package/dist/admin/shell/MembersPage.d.ts

@@ -1,5 +1,6 @@
 import type { AdminOps, MembersListResult } from "../ops.ts";
-export declare function MembersPage({ ops, initial }: {
+export declare function MembersPage({ ops, userId, initial }: {
     ops: AdminOps;
+    userId: string;
     initial?: MembersListResult | null;
 }): import("react").JSX.Element;