smoodly 0.0.26 → 0.0.28

package/dist/admin/shell/AddRedirectModal.js

@@ -0,0 +1,29 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Add a redirect by hand (spec 2026-09-26 redirects §5–§6): the old
+// address, checked as typed with redirect-path.ts so the message shows
+// before the op repeats the check, and the target — one type-ahead over
+// every page and routed entry live in the locale, "Title · /path".
+import { useState } from "react";
+import { REDIRECT_PATH_MESSAGE, redirectPathProblem } from "../redirect-path.js";
+import { Combobox } from "../ui/Combobox.js";
+import { Modal } from "../ui/Modal.js";
+import { Banner, Button, Field } from "../ui/primitives.js";
+import { parseTargetValue, targetOptions } from "./redirects-list.js";
+export function AddRedirectModal({ locale, registry, targets, onClose, onAdd }) {
+    const [path, setPath] = useState("");
+    const [target, setTarget] = useState(null);
+    const [error, setError] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const problem = redirectPathProblem(path, { adminPath: registry.adminPath, multilingual: registry.locales.supported.length > 1 });
+    const picked = target ? targets.find((t) => t.target.kind === target.kind && t.target.id === target.id) : undefined;
+    const submit = async (e) => {
+        e.preventDefault();
+        if (!target || problem)
+            return;
+        setBusy(true);
+        setError(await onAdd(path, target));
+        setBusy(false);
+    };
+    return (_jsx(Modal, { title: "Add redirect", width: 480, onClose: onClose, children: _jsxs("form", { onSubmit: submit, style: { display: "flex", flexDirection: "column", gap: 14 }, children: [_jsx(Field, { label: "Old address", error: path !== "" && problem ? REDIRECT_PATH_MESSAGE[problem] : undefined, children: _jsx("input", { className: "sm-input sm-input--mono", autoFocus: true, placeholder: "/old-address", value: path, onChange: (e) => setPath(e.target.value) }) }), _jsx(Field, { label: "Redirects to", asDiv: true, hint: picked ? `${picked.title} · ${picked.path}` : `A page or entry that is live in ${locale}.`, children: _jsx(Combobox, { label: "Redirects to", options: targetOptions(targets), placeholder: "Type a title or an address", emptyText: `Nothing is live in ${locale} yet.`, onPick: (value) => setTarget(parseTargetValue(value)) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: 8 }, children: [_jsx(Button, { variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx("button", { type: "submit", className: "sm-btn sm-btn--primary", disabled: busy || !target || path === "" || problem !== null, children: busy ? "Saving…" : "Save redirect" })] })] }) }));
+}

package/dist/admin/shell/AdminApp.js

@@ -12,7 +12,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // (shell/IconRail.tsx), then the main column whose views own their own
 // 48px top bar (the editor adds the third, its inspector). The shell is
 // viewport-height; every column scrolls inside itself.
-import { useEffect, useState } from "react";
+import { useEffect, useRef, useState } from "react";
 import { makeClientOps } from "../client-ops.js";
 import { PagesList } from "./PagesList.js";
 import { EntriesList } from "./EntriesList.js";
@@ -28,7 +28,6 @@ import { ConfirmHost } from "../ui/ConfirmDialog.js";
 import { useRoute } from "./router.js";
 import { AdminPathProvider } from "./base.js";
 import { mountMismatch } from "../../admin-path.js";
-import { can } from "../../permissions.js";
 import { ErrorPane } from "./ErrorPane.js";
 import { MediaScreen } from "./MediaScreen.js";
 import { SettingsView } from "./SettingsView.js";
@@ -37,7 +36,7 @@ import { ElementsProvider } from "../forms/elements-context.js";
 import { TimeZoneProvider } from "../forms/time-zone-context.js";
 import { SchemaNotice } from "./SchemaNotice.js";
 import { schemaBehind } from "../../schema-version.js";
-import { createPresence } from "./presence.js";
+import { createPresence, followTokenRefresh } from "./presence.js";
 import { connectRealtime } from "./presence-realtime.js";
 import { PresenceProvider } from "./presence-context.js";
 export function AdminApp({ registry, op, auth, content }) {
@@ -81,9 +80,15 @@ export function AdminApp({ registry, op, auth, content }) {
         return () => { live = false; };
     }, [signedIn, ops]);
     const userId = session.state.status === "signed_in" ? session.state.session.user.id : "";
-    // Presence (spec 2026-09-26 concurrency §5): one channel per signed-in session,
-    // joined with the content project's public config; absent config = presence off.
+    // Presence (spec 2026-09-26 concurrency §5; gated 2026-09-26 security pass §1):
+    // one channel per signed-in session, the content project's public config as the
+    // gateway and the SESSION token on the socket; absent config = presence off.
+    // The token getter is a new closure every render — read it through a ref so
+    // the effect keys on the session, not on the render.
     const [presence, setPresence] = useState(null);
+    const tokenRef = useRef(session.token);
+    tokenRef.current = session.token;
+    const authClient = session.client;
     const contentUrl = content?.url, contentKey = content?.key, contentSpace = content?.spaceId;
     useEffect(() => {
         if (!signedIn || !contentUrl || !contentKey || !contentSpace || !email) {
@@ -91,11 +96,20 @@ export function AdminApp({ registry, op, auth, content }) {
             return;
         }
         const config = { url: contentUrl, key: contentKey, spaceId: contentSpace };
-        const p = createPresence({ email, connect: () => connectRealtime(config, email) });
+        const p = createPresence({
+            email,
+            connect: () => {
+                const token = tokenRef.current();
+                if (!token)
+                    throw new Error("smoodly: no session token for presence");
+                return connectRealtime(config, email, token);
+            },
+        });
         p.join();
         setPresence(p);
-        return () => { p.dispose(); setPresence(null); };
-    }, [signedIn, contentUrl, contentKey, contentSpace, email]);
+        const stop = followTokenRefresh(authClient.auth, p);
+        return () => { stop(); p.dispose(); setPresence(null); };
+    }, [signedIn, contentUrl, contentKey, contentSpace, email, authClient]);
     if (session.state.status === "loading") {
         return (_jsx("div", { style: { height: "100vh", display: "grid", placeItems: "center", color: "var(--text-muted)" }, children: "Loading\u2026" }));
     }
@@ -124,10 +138,10 @@ export function AdminApp({ registry, op, auth, content }) {
     else if (head === "globals" && tail)
         main = _jsx(GlobalForm, { ops: ops, registry: registry, name: decodeURIComponent(tail) });
     else if (head === "settings")
-        main = _jsx(SettingsView, { ops: ops, tail: tail, role: role, userId: userId });
+        main = _jsx(SettingsView, { ops: ops, registry: registry, tail: tail, role: role, userId: userId });
     else if (head === "media")
         main = _jsx(MediaScreen, {});
     else
         main = _jsx(ErrorPane, { message: "Not found." });
-    return (_jsx(AdminPathProvider, { value: registry.adminPath, children: _jsx(PresenceProvider, { value: presence, children: _jsx(ElementsProvider, { elements: registry.elements, children: _jsx(TimeZoneProvider, { zone: registry.timeZone, children: _jsxs(AssetsProvider, { ops: ops, media: registry.media, children: [_jsxs("div", { className: "sm-shell", children: [_jsx(IconRail, { registry: registry, active: head, email: email, settings: role !== null && can(role, "settings"), onSignOut: () => session.client.auth.signOut() }), _jsx("main", { className: "sm-main", children: main }, `${head}/${tail ?? ""}`)] }), _jsx(ConfirmHost, {})] }) }) }) }) }));
+    return (_jsx(AdminPathProvider, { value: registry.adminPath, children: _jsx(PresenceProvider, { value: presence, children: _jsx(ElementsProvider, { elements: registry.elements, children: _jsx(TimeZoneProvider, { zone: registry.timeZone, children: _jsxs(AssetsProvider, { ops: ops, media: registry.media, children: [_jsxs("div", { className: "sm-shell", children: [_jsx(IconRail, { registry: registry, active: head, email: email, settings: role !== null, onSignOut: () => session.client.auth.signOut() }), _jsx("main", { className: "sm-main", children: main }, `${head}/${tail ?? ""}`)] }), _jsx(ConfirmHost, {})] }) }) }) }) }));
 }

package/dist/admin/shell/EntryForm.js

@@ -35,8 +35,8 @@ import { entrySourceLocale, entryTitle, localizedFieldKeys } from "./entries-lis
 import { useAdminHref } from "./base.js";
 import { localeFromUrl, writeLocaleToUrl } from "../editor/locale-url.js";
 import { navigate, useLeaveGuard } from "./router.js";
-import { LIVE_URL_CONFIRM, liveUrlChanges } from "./live-url.js";
-import { confirm, DISCARD_CONFIRM } from "../ui/confirm.js";
+import { LIVE_URL_CONFIRM, LIVE_URL_OPTION, liveUrlChanges } from "./live-url.js";
+import { confirm, confirmWithOption, DISCARD_CONFIRM } from "../ui/confirm.js";
 import { draftToken } from "../../draft-token.js";
 import { isStale, staleInfoOf } from "./stale.js";
 import { StaleBanner } from "../ui/StaleBanner.js";
@@ -53,6 +53,7 @@ export function EntryForm({ ops, registry, collection, id }) {
     const [record, setRecord] = useState(null);
     const [fields, setFields] = useState(null);
     const [urls, setUrls] = useState({});
+    const [redirects, setRedirects] = useState({});
     const [parentLocales, setParentLocales] = useState(registry.locales.supported);
     const [notice, setNotice] = useState(null);
     const [fieldErrors, setFieldErrors] = useState({});
@@ -75,6 +76,8 @@ export function EntryForm({ ops, registry, collection, id }) {
     recordRef.current = record;
     /** The slug the editor already confirmed as a live-URL change, so the next autosave does not ask again. */
     const confirmedSlug = useRef(null);
+    /** The confirm's "Redirect the old address" answer for the save that follows it (spec 2026-09-26 redirects §6). */
+    const redirectRef = useRef(true);
     // The page editor's controller: debounced, retrying, flushable (spec 2026-09-14 §3).
     /** The token of the row on screen — what every guarded op sends (spec 2026-09-26 concurrency §1). */
     const token = () => { const row = recordRef.current?.locales[locale]; return row ? draftToken(row) : null; };
@@ -93,15 +96,19 @@ export function EntryForm({ ops, registry, collection, id }) {
             if (next !== confirmedSlug.current && liveUrlChanges({ status: row?.status, from: stored, to: next })) {
                 const current = recordRef.current;
                 const subject = current && meta ? { name: entryTitle(current, meta, registry, locale), path: slugPrefix && stored ? `${slugPrefix}${stored}` : null } : undefined;
-                if (await confirm({ ...LIVE_URL_CONFIRM, subject }))
+                const { yes, checked } = await confirmWithOption({ ...LIVE_URL_CONFIRM, option: { ...LIVE_URL_OPTION }, subject });
+                if (yes) {
                     confirmedSlug.current = next;
+                    redirectRef.current = checked;
+                }
                 else {
                     value = { ...value, slug: stored };
                     setFields((f) => ({ ...(f ?? {}), slug: stored }));
                 }
             }
-            const r = await ops.entries.save(collection, id, locale, value, token());
+            const r = await ops.entries.save(collection, id, locale, value, token(), { redirect: redirectRef.current });
             if (r.ok) {
+                redirectRef.current = true;
                 setRecord(r.data);
                 presence?.announce(target, r.data.locales[locale]?.draftSavedAt ?? null);
             }
@@ -140,6 +147,7 @@ export function EntryForm({ ops, registry, collection, id }) {
                 setRecord(r.data.record);
                 setFields(r.data.fields);
                 setUrls(r.data.urls);
+                setRedirects(r.data.redirects);
                 setParentLocales(r.data.parentLocales);
             }
             else
@@ -411,6 +419,6 @@ export function EntryForm({ ops, registry, collection, id }) {
                                 trailing: multilingual && (_jsx(LocaleSwitcher, { registry: registry, present: present, parentLocales: parentLocales, value: locale, adding: adding, onSwitch: (l) => { void switchLocale(l); }, onAdd: (l) => void doAddLocale(l) })),
                             },
                             { label: heading },
-                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState }), urls[locale] && (_jsx(LinkButton, { icon: true, href: urls[locale], target: "_blank", rel: "noreferrer", "aria-label": "View live", title: "View live \u2014 opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: _jsx(Eye, { size: 16, strokeWidth: 1.5, "aria-hidden": "true" }) })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsx(PresenceLine, { names: editorsOf(others, target), noun: "entry" }), stale && _jsx(StaleBanner, { info: stale, onReload: loadTheirs }), _jsxs("div", { className: "sm-editor", inert: stale ? true : undefined, children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
-                                            revealField(formRef.current, path); } })] })), absent ? (_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 12 }, children: [_jsxs("p", { children: ["This entry doesn't exist in ", locale, " yet. Adding it copies the ", entrySourceLocale(record, registry), " fields as the first ", locale, " draft."] }), _jsxs("div", { style: { display: "flex", gap: 8 }, children: [_jsxs(Button, { onClick: () => void doAddLocale(locale), disabled: adding || !parentLocales.includes(locale), title: parentLocales.includes(locale) ? undefined : `add ${locale} to the parent first`, children: ["Add ", locale] }), _jsxs(Button, { variant: "secondary", onClick: () => { void switchLocale(entrySourceLocale(record, registry)); }, children: ["Back to ", entrySourceLocale(record, registry)] })] })] })) : fields !== null ? (Object.entries(meta.fields).map(widget)) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsxs("aside", { className: "sm-inspector", children: [record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Created", value: relativeTime(record.createdAt) }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), multilingual && _jsx(InfoRow, { label: "Languages", value: Object.keys(record.locales).join(", ") }), _jsx(InfoRow, { label: "ID", value: id, mono: true })] })), record && (_jsxs("div", { className: "sm-card", children: [multilingual && row && Object.keys(record.locales).length > 1 && (_jsxs(Button, { variant: "secondary", onClick: () => void doRemoveLocale(), children: ["Remove from ", locale] })), _jsx(Button, { variant: "danger", onClick: destroy, children: "Delete" })] }))] })] })] }));
+                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState, pending: dirty }), urls[locale] && (_jsx(LinkButton, { icon: true, href: urls[locale], target: "_blank", rel: "noreferrer", "aria-label": "View live", title: "View live \u2014 opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: _jsx(Eye, { size: 16, strokeWidth: 1.5, "aria-hidden": "true" }) })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsx(PresenceLine, { names: editorsOf(others, target), noun: "entry" }), stale && _jsx(StaleBanner, { info: stale, onReload: loadTheirs }), _jsxs("div", { className: "sm-editor", inert: stale ? true : undefined, children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
+                                            revealField(formRef.current, path); } })] })), absent ? (_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 12 }, children: [_jsxs("p", { children: ["This entry doesn't exist in ", locale, " yet. Adding it copies the ", entrySourceLocale(record, registry), " fields as the first ", locale, " draft."] }), _jsxs("div", { style: { display: "flex", gap: 8 }, children: [_jsxs(Button, { onClick: () => void doAddLocale(locale), disabled: adding || !parentLocales.includes(locale), title: parentLocales.includes(locale) ? undefined : `add ${locale} to the parent first`, children: ["Add ", locale] }), _jsxs(Button, { variant: "secondary", onClick: () => { void switchLocale(entrySourceLocale(record, registry)); }, children: ["Back to ", entrySourceLocale(record, registry)] })] })] })) : fields !== null ? (Object.entries(meta.fields).map(widget)) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsxs("aside", { className: "sm-inspector", children: [record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Created", value: relativeTime(record.createdAt) }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), (redirects[locale] ?? []).length > 0 && _jsx(InfoRow, { label: "Redirects from", value: redirects[locale].join(", "), mono: true }), multilingual && _jsx(InfoRow, { label: "Languages", value: Object.keys(record.locales).join(", ") }), _jsx(InfoRow, { label: "ID", value: id, mono: true })] })), record && (_jsxs("div", { className: "sm-card", children: [multilingual && row && Object.keys(record.locales).length > 1 && (_jsxs(Button, { variant: "secondary", onClick: () => void doRemoveLocale(), children: ["Remove from ", locale] })), _jsx(Button, { variant: "danger", onClick: destroy, children: "Delete" })] }))] })] })] }));
 }

package/dist/admin/shell/GlobalForm.js

@@ -298,6 +298,6 @@ export function GlobalForm({ ops, registry, name }) {
                                 trailing: multilingual && (_jsx(LocaleSwitcher, { registry: registry, present: registry.locales.supported, parentLocales: [], value: locale, adding: false, onSwitch: (l) => { void switchLocale(l); }, onAdd: () => undefined })),
                             },
                             { label: item.title },
-                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState }), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsxs("fieldset", { disabled: true, className: "sm-history__form", children: [_jsx(GlobalFields, { item: item, groups: contentGroups, fields: snapshot.fields, refOptions: refOptions, multilingual: multilingual, onChange: () => { } }), settingGroups.length > 0 && (_jsxs(_Fragment, { children: [_jsx(SectionLabel, { children: "Settings" }), _jsx(GlobalFields, { item: item, groups: settingGroups, fields: snapshot.fields, refOptions: refOptions, multilingual: multilingual, onChange: () => { } })] }))] })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsx(PresenceLine, { names: editorsOf(others, target), noun: "item" }), stale && _jsx(StaleBanner, { info: stale, onReload: loadTheirs }), _jsxs("div", { className: "sm-editor", inert: stale ? true : undefined, children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
+                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState, pending: dirty }), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsxs("fieldset", { disabled: true, className: "sm-history__form", children: [_jsx(GlobalFields, { item: item, groups: contentGroups, fields: snapshot.fields, refOptions: refOptions, multilingual: multilingual, onChange: () => { } }), settingGroups.length > 0 && (_jsxs(_Fragment, { children: [_jsx(SectionLabel, { children: "Settings" }), _jsx(GlobalFields, { item: item, groups: settingGroups, fields: snapshot.fields, refOptions: refOptions, multilingual: multilingual, onChange: () => { } })] }))] })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsx(PresenceLine, { names: editorsOf(others, target), noun: "item" }), stale && _jsx(StaleBanner, { info: stale, onReload: loadTheirs }), _jsxs("div", { className: "sm-editor", inert: stale ? true : undefined, children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
                                             revealField(formRef.current, path); } })] })), record && (_jsxs("p", { className: "sm-hint", children: [pages.size === 0 ? "Not placed on any page yet." : `Used on ${pages.size} page${pages.size === 1 ? "" : "s"}: `, [...pages].map((id, i) => (_jsxs("span", { children: [i > 0 && ", ", _jsx("a", { href: adminHref(`/pages/${encodeURIComponent(id)}?locale=${encodeURIComponent(locale)}`), children: id })] }, id)))] })), fields !== null ? (_jsxs(_Fragment, { children: [_jsx(GlobalFields, { item: item, groups: contentGroups, fields: fields, errors: fieldErrors, refOptions: refOptions, multilingual: multilingual, onChange: onChange }), settingGroups.length > 0 && (_jsxs(_Fragment, { children: [_jsx(SectionLabel, { children: "Settings" }), _jsx(GlobalFields, { item: item, groups: settingGroups, fields: fields, errors: fieldErrors, refOptions: refOptions, multilingual: multilingual, onChange: onChange })] }))] })) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsx("aside", { className: "sm-inspector", children: record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Kind", value: item.section !== undefined ? `Visual · ${item.section}` : "Fields" }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), _jsx(InfoRow, { label: "ID", value: record.id, mono: true })] })) })] })] }));
 }

package/dist/admin/shell/IconRail.d.ts

@@ -3,7 +3,7 @@ export declare function IconRail({ registry, active, email, settings, onSignOut
     registry: AdminRegistry;
     active: string;
     email?: string;
-    /** Whether the Settings tile shows — `can(role, "settings")` in the shell. */
+    /** Whether the Settings tile shows — once the role is known, in the shell (every member has a Settings page). */
     settings?: boolean;
     onSignOut: () => void;
 }): import("react").JSX.Element;

package/dist/admin/shell/IconRail.js

@@ -10,8 +10,9 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Collections — one rail item whose flyout lists every collection — then
 // Media, Globals (the global content items, when the registry has any;
 // the route is /globals), and Settings (the Settings area, spec
-// 2026-09-25; the route is /settings; admins only, so the shell passes
-// `settings` false for an editor). The user avatar is pinned to the bottom and opens the same
+// 2026-09-25; the route is /settings; every member has a page there since
+// Redirects, 2026-09-26, so the shell passes `settings` once the role is
+// known). The user avatar is pinned to the bottom and opens the same
 // flyout with the theme toggle and Sign out, which the old nav's footer
 // held.
 //

package/dist/admin/shell/PagesList.js

@@ -68,9 +68,10 @@ export function PagesList({ ops, registry }) {
                 return;
             // A published page under a new parent is a new live URL (members management §5).
             const current = row.record.locales[locale];
-            if (!(await confirmLiveUrl({ status: current?.status, from: row.parentId ?? "", to: projection.parentId ?? "" }, { name: row.title, path: row.path })))
+            const live = await confirmLiveUrl({ status: current?.status, from: row.parentId ?? "", to: projection.parentId ?? "" }, { name: row.title, path: row.path });
+            if (!live.ok)
                 return;
-            const ok = await run(() => ops.pages.move(row.id, { parentId: projection.parentId, index: projection.index }));
+            const ok = await run(() => ops.pages.move(row.id, { parentId: projection.parentId, index: projection.index, redirect: live.redirect }));
             if (!ok)
                 throw new Error("move refused");
         },
@@ -150,9 +151,10 @@ export function PagesList({ ops, registry }) {
         // The site root's slug is the config's homePageSlug — title only there.
         if (row.isHome)
             return attempt(() => ops.pages.rename(row.id, { locale, title: values.title }));
-        if (!(await confirmLiveUrl({ status: current.status, from: current.slug, to: values.slug }, { name: row.title, path: row.path })))
+        const live = await confirmLiveUrl({ status: current.status, from: current.slug, to: values.slug }, { name: row.title, path: row.path });
+        if (!live.ok)
             return null;
-        return attempt(() => ops.pages.rename(row.id, { locale, title: values.title, slug: values.slug }));
+        return attempt(() => ops.pages.rename(row.id, { locale, title: values.title, slug: values.slug, redirect: live.redirect }));
     };
     const addLocale = async (row) => {
         const from = sourceLocaleOf(row.record, registry);

package/dist/admin/shell/RedirectsPage.d.ts

@@ -0,0 +1,11 @@
+import type { AdminOps, RedirectItem } from "../ops.ts";
+import type { AdminRegistry } from "../serialize.ts";
+export declare function RedirectsPage({ ops, registry, initial }: {
+    ops: AdminOps;
+    registry: AdminRegistry;
+    /** Static-markup tests: the rows without a load. */
+    initial?: {
+        locale: string;
+        items: RedirectItem[];
+    } | null;
+}): import("react").JSX.Element;

package/dist/admin/shell/RedirectsPage.js

@@ -0,0 +1,75 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// Settings › Redirects (spec 2026-09-26 redirects §6): the active
+// locale's redirect rows — old address → the target's title (opens its
+// editor) and current URL — with Add redirect and a row menu whose one
+// item removes the row after a confirm. Every member, as renaming is.
+import { useEffect, useState } from "react";
+import { ActionMenu } from "../ui/ActionMenu.js";
+import { LocalePicker } from "../ui/LocaleSwitcher.js";
+import { confirm } from "../ui/confirm.js";
+import { Banner, Button } from "../ui/primitives.js";
+import { AddRedirectModal } from "./AddRedirectModal.js";
+import { useAdminHref } from "./base.js";
+import { ErrorPane } from "./ErrorPane.js";
+import { ListView } from "./ListView.js";
+import { RouteLink } from "./RouteLink.js";
+import { rememberLocale, rememberedLocale } from "./locale-memory.js";
+import { REMOVE_REDIRECT_CONFIRM, editorHref } from "./redirects-list.js";
+export function RedirectsPage({ ops, registry, initial = null }) {
+    const adminHref = useAdminHref();
+    const multilingual = registry.locales.supported.length > 1;
+    const [locale, setLocale] = useState(initial?.locale ?? rememberedLocale(registry.locales));
+    const [items, setItems] = useState(initial?.items ?? null);
+    const [error, setError] = useState(null);
+    const [notice, setNotice] = useState(null);
+    const [adding, setAdding] = useState(null);
+    const load = (l) => ops.redirects.list(l)
+        .then((r) => (r.ok ? setItems(r.data) : setError(r.message)))
+        .catch(() => setError("Couldn't reach the server."));
+    useEffect(() => { if (!initial)
+        void load(locale); }, [ops, locale, initial]); // eslint-disable-line react-hooks/exhaustive-deps
+    const pickLocale = (next) => { rememberLocale(next); setLocale(next); setItems(null); };
+    const openAdd = async () => {
+        const r = await ops.redirects.targets(locale);
+        if (!r.ok) {
+            setNotice({ tone: "error", text: r.message });
+            return;
+        }
+        setAdding(r.data);
+    };
+    const add = async (path, target) => {
+        const r = await ops.redirects.add(locale, path, target);
+        if (!r.ok)
+            return r.message;
+        setAdding(null);
+        setNotice({ tone: "ok", text: `${path} now redirects.` });
+        void load(locale);
+        return null;
+    };
+    const remove = async (item) => {
+        if (!(await confirm({ ...REMOVE_REDIRECT_CONFIRM, subject: { name: item.title, path: item.path } })))
+            return;
+        const r = await ops.redirects.remove(locale, item.path);
+        if (!r.ok) {
+            setNotice({ tone: "error", text: r.message });
+            return;
+        }
+        setNotice(null); // an earlier "now redirects" must not outlive the row
+        void load(locale);
+    };
+    if (error)
+        return _jsx(ErrorPane, { message: error });
+    return (_jsxs(_Fragment, { children: [_jsx(ListView, { title: "Redirects", titleTrailing: multilingual && _jsx(LocalePicker, { locales: registry.locales.supported, value: locale, onChange: pickLocale }), actions: _jsx(Button, { onClick: () => void openAdd(), children: "Add redirect" }), notice: notice && _jsx(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: notice.text }), columns: [
+                    { label: "Old address", width: "minmax(200px,1fr)" },
+                    { label: "Redirects to", width: "minmax(200px,1fr)" },
+                    { label: "", width: "48px" },
+                ], rows: (items ?? []).map((item) => ({
+                    key: item.path,
+                    cells: [
+                        _jsx("code", { children: item.path }),
+                        _jsxs("span", { style: { display: "flex", gap: 8, alignItems: "baseline", minWidth: 0 }, children: [_jsx(RouteLink, { href: adminHref(editorHref(item, locale)), children: item.title }), item.currentPath ? _jsx("code", { children: item.currentPath }) : _jsxs("span", { className: "sm-hint", children: ["not published in ", locale] })] }),
+                        _jsx(ActionMenu, { label: "Redirect actions", small: true, items: [{ label: "Remove redirect", danger: true, run: () => void remove(item) }] }),
+                    ],
+                })), empty: items === null ? "Loading…" : `No redirects in ${locale}` }), adding && _jsx(AddRedirectModal, { locale: locale, registry: registry, targets: adding, onClose: () => setAdding(null), onAdd: add })] }));
+}

package/dist/admin/shell/SettingsView.d.ts

@@ -1,7 +1,9 @@
-import { type MemberRole } from "../../permissions.ts";
+import type { MemberRole } from "../../permissions.ts";
 import type { AdminOps } from "../ops.ts";
-export declare function SettingsView({ ops, tail, role, userId }: {
+import type { AdminRegistry } from "../serialize.ts";
+export declare function SettingsView({ ops, registry, tail, role, userId }: {
     ops: AdminOps;
+    registry: AdminRegistry;
     tail: string | undefined;
     /** The caller's role from `members.me`; null while it loads. */
     role: MemberRole | null;

package/dist/admin/shell/SettingsView.js

@@ -4,31 +4,35 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // The Settings area (spec 2026-09-25 §5): a 200px secondary nav at the
 // left of the main column, its card starting where the page's card starts (no heading since 2026-09-26) —
 // then the page with its own top bar. The head segment alone replaces
-// itself with the default page, so Back skips the empty URL. An unknown
-// page is the shell's Not found pane. Admins only (members management
-// §2): an editor gets the error pane, and until the role is known the
-// area is loading. Members is the only page (the Roles table moved into
-// the invite modal's role descriptions; API Keys never had contents).
+// itself with the role's first page, so Back skips the empty URL. An
+// unknown page is the shell's Not found pane. Each page names its
+// capability (settings.ts): Members is for admins (members management
+// §2) and an editor opening it gets the error pane; Redirects (spec
+// 2026-09-26 redirects §6) is for every member. Until the role is known
+// the area is loading.
 import { useEffect } from "react";
-import { can } from "../../permissions.js";
 import { useAdminHref } from "./base.js";
 import { ErrorPane } from "./ErrorPane.js";
 import { MembersPage } from "./MembersPage.js";
+import { RedirectsPage } from "./RedirectsPage.js";
 import { RouteLink } from "./RouteLink.js";
 import { navigate } from "./router.js";
-import { DEFAULT_SETTINGS_PAGE, SETTINGS_PAGES, settingsPage } from "./settings.js";
-export function SettingsView({ ops, tail, role, userId }) {
+import { defaultSettingsPage, settingsPage, visibleSettingsPages } from "./settings.js";
+export function SettingsView({ ops, registry, tail, role, userId }) {
     const adminHref = useAdminHref();
     const page = settingsPage(tail);
     useEffect(() => {
-        if (tail === undefined)
-            void navigate(adminHref(`/settings/${DEFAULT_SETTINGS_PAGE}`), { replace: true });
-    }, [tail, adminHref]);
+        if (tail === undefined && role !== null)
+            void navigate(adminHref(`/settings/${defaultSettingsPage(role)}`), { replace: true });
+    }, [tail, role, adminHref]);
     if (role === null)
         return _jsx("div", { className: "sm-empty", children: "Loading\u2026" });
-    if (!can(role, "settings"))
-        return _jsx(ErrorPane, { message: "Settings are for admins." });
+    const visible = visibleSettingsPages(role);
+    if (tail === undefined)
+        return _jsx("div", { className: "sm-empty", children: "Loading\u2026" });
     if (!page)
         return _jsx(ErrorPane, { message: "Not found." });
-    return (_jsxs("div", { className: "sm-settings", children: [_jsx("nav", { className: "sm-settings__nav", "aria-label": "Settings", children: SETTINGS_PAGES.map((p) => (_jsx(RouteLink, { className: "sm-settings__link", href: adminHref(`/settings/${p.id}`), "aria-current": p.id === page ? "page" : undefined, children: p.title }, p.id))) }), _jsx("section", { className: "sm-settings__page", children: _jsx(MembersPage, { ops: ops, userId: userId }) })] }));
+    if (!visible.some((p) => p.id === page))
+        return _jsx(ErrorPane, { message: "Settings are for admins." });
+    return (_jsxs("div", { className: "sm-settings", children: [_jsx("nav", { className: "sm-settings__nav", "aria-label": "Settings", children: visible.map((p) => (_jsx(RouteLink, { className: "sm-settings__link", href: adminHref(`/settings/${p.id}`), "aria-current": p.id === page ? "page" : undefined, children: p.title }, p.id))) }), _jsx("section", { className: "sm-settings__page", children: page === "members" ? _jsx(MembersPage, { ops: ops, userId: userId }) : _jsx(RedirectsPage, { ops: ops, registry: registry }) })] }));
 }

package/dist/admin/shell/live-url.d.ts

@@ -1,10 +1,18 @@
 import { type ConfirmOptions, type ConfirmSubject } from "../ui/confirm.ts";
 export declare const LIVE_URL_CONFIRM: Omit<ConfirmOptions, "subject">;
+/** The rider (spec 2026-09-26 redirects §1): on by default, the editor unticks to let the old address go dark. */
+export declare const LIVE_URL_OPTION: {
+    readonly label: "Redirect the old address";
+    readonly checked: true;
+};
 /** `from` null = there was no URL part to change (a new row, a collection without a path). */
 export declare function liveUrlChanges(input: {
     status: "draft" | "published" | undefined;
     from: string | null;
     to: string | null;
 }): boolean;
-/** Resolves true when the change may go ahead: not a live change, or confirmed. */
-export declare function confirmLiveUrl(input: Parameters<typeof liveUrlChanges>[0], subject?: ConfirmSubject): Promise<boolean>;
+/** `ok` false = cancelled. `redirect` is the checkbox (true when no question was asked: the store's default). */
+export declare function confirmLiveUrl(input: Parameters<typeof liveUrlChanges>[0], subject?: ConfirmSubject): Promise<{
+    ok: boolean;
+    redirect: boolean;
+}>;

package/dist/admin/shell/live-url.js

@@ -3,17 +3,22 @@
 // published page's parent. Whoever the role — the mistake is the same.
 // Asked in the admin's own dialog (ui/confirm.ts); the subject chip names
 // the record and the URL part that is about to change.
-import { confirm } from "../ui/confirm.js";
+import { confirmWithOption } from "../ui/confirm.js";
 export const LIVE_URL_CONFIRM = {
     title: "Change the live URL?",
-    body: "This is published. Old links to it stop working until a redirect exists, and Smoodly has none yet.",
+    body: "This is published. With a redirect, visitors and search engines who open the old address are sent to the new one.",
     confirmLabel: "Change URL",
 };
+/** The rider (spec 2026-09-26 redirects §1): on by default, the editor unticks to let the old address go dark. */
+export const LIVE_URL_OPTION = { label: "Redirect the old address", checked: true };
 /** `from` null = there was no URL part to change (a new row, a collection without a path). */
 export function liveUrlChanges(input) {
     return input.status === "published" && input.from !== null && input.to !== input.from;
 }
-/** Resolves true when the change may go ahead: not a live change, or confirmed. */
+/** `ok` false = cancelled. `redirect` is the checkbox (true when no question was asked: the store's default). */
 export async function confirmLiveUrl(input, subject) {
-    return !liveUrlChanges(input) || confirm({ ...LIVE_URL_CONFIRM, subject });
+    if (!liveUrlChanges(input))
+        return { ok: true, redirect: true };
+    const { yes, checked } = await confirmWithOption({ ...LIVE_URL_CONFIRM, option: { ...LIVE_URL_OPTION }, subject });
+    return { ok: yes, redirect: checked };
 }

package/dist/admin/shell/members-list.js

@@ -2,7 +2,7 @@ import { normalizeRole } from "../../permissions.js";
 export const roleLabel = (role) => (role ? role[0].toUpperCase() + role.slice(1) : "");
 /** What each role may do, in one line — the invite modal's radio descriptions (permissions.ts decides). */
 export const ROLE_DESCRIPTION = {
-    editor: "Edits, publishes and deletes content and media.",
+    editor: "Edits, publishes and deletes content and media, and manages redirects.",
     admin: "Everything an editor can, and Settings: invites, re-roles and removes members.",
 };
 export function memberRows(members, opts) {

package/dist/admin/shell/presence-realtime.d.ts

@@ -1,3 +1,3 @@
 import type { ContentConfig } from "../../env.ts";
 import type { PresenceChannel } from "./presence.ts";
-export declare function connectRealtime(config: ContentConfig, email: string): PresenceChannel;
+export declare function connectRealtime(config: ContentConfig, email: string, token: string): PresenceChannel;

package/dist/admin/shell/presence-realtime.js

@@ -1,16 +1,26 @@
 "use client";
-// The real channel behind `createPresence` (spec 2026-09-26 concurrency §5–§6): one
-// supabase-js client on the CONTENT project with its public key (the anon key in
-// self-host, the read key in the cloud), a private channel named after the space,
-// presence keyed by the email. A key that is a JWT is also the realtime token.
+// The real channel behind `createPresence` (spec 2026-09-26 concurrency §5–§6;
+// gated 2026-09-26 security pass §1): one supabase-js client on the CONTENT
+// project whose public key (the anon key in self-host, the read key in the
+// cloud) is only the gateway apikey — the socket authenticates with the
+// editor's SESSION token, which the policies read auth.uid() from. A
+// private channel named after the space, presence keyed by the email.
+//
+// The token rides the client's `accessToken` callback, not a bare
+// `realtime.setAuth(token)`: realtime-js treats the callback as the source
+// of truth and re-asks it after every join and reconnect — with the
+// default callback that answer is the public key, which the server then
+// refuses ("no permissions to read"). The join itself waits for the first
+// setAuth, so it never goes out with the apikey alone.
 import { createClient } from "@supabase/supabase-js";
-export function connectRealtime(config, email) {
-    const client = createClient(config.url, config.key, { auth: { persistSession: false, autoRefreshToken: false } });
-    if (config.key.split(".").length === 3)
-        void client.realtime.setAuth(config.key);
+export function connectRealtime(config, email, token) {
+    let current = token;
+    const client = createClient(config.url, config.key, { accessToken: async () => current });
+    const ready = client.realtime.setAuth(token).catch(() => { });
     const channel = client.channel(`space:${config.spaceId}`, { config: { private: true, presence: { key: email } } });
     return {
-        subscribe: (onStatus) => { channel.subscribe((status) => onStatus(status)); },
+        subscribe: (onStatus) => { void ready.then(() => { channel.subscribe((status) => onStatus(status)); }); },
+        setAuth: (fresh) => { current = fresh; return client.realtime.setAuth(fresh); },
         track: (state) => channel.track(state),
         untrack: () => channel.untrack(),
         send: (message) => channel.send(message),

package/dist/admin/shell/presence.d.ts

@@ -18,6 +18,8 @@ export type PresenceState = {
 /** The slice of a Realtime channel presence uses. */
 export type PresenceChannel = {
     subscribe(onStatus: (status: string) => void): void;
+    /** A session token for the socket (spec 2026-09-26 security pass §1): the channel policies admit by auth.uid(). */
+    setAuth(token: string): Promise<unknown>;
     track(state: Record<string, unknown>): Promise<unknown>;
     untrack(): Promise<unknown>;
     send(message: {
@@ -37,6 +39,8 @@ export type Presence = {
     track(target: PresenceTarget | null): void;
     /** After a guarded op acked: tell the others. */
     announce(target: PresenceTarget, savedAt: string | null): void;
+    /** The session token was refreshed: re-authenticate the socket so the channel outlives the old token. No-op unless joined. */
+    setAuth(token: string): void;
     onSaved(listener: (event: SavedEvent) => void): () => void;
     getState(): PresenceState;
     subscribe(listener: () => void): () => void;
@@ -49,3 +53,17 @@ export declare function createPresence(opts: {
     email: string;
     connect: () => PresenceChannel;
 }): Presence;
+/** What the shell needs from the auth client to follow refreshes — supabase-js's `auth` satisfies it. */
+export type RefreshSource = {
+    onAuthStateChange(cb: (event: string, session: {
+        access_token: string;
+    } | null) => void): {
+        data: {
+            subscription: {
+                unsubscribe(): void;
+            };
+        };
+    };
+};
+/** Re-send every refreshed session token to the socket (spec 2026-09-26 security pass §1). Returns the stop function. */
+export declare function followTokenRefresh(auth: RefreshSource, presence: Pick<Presence, "setAuth">): () => void;

package/dist/admin/shell/presence.js

@@ -76,6 +76,11 @@ export function createPresence(opts) {
                 return;
             void channel.send({ type: "broadcast", event: "saved", payload: { ...target, email: opts.email, savedAt } }).catch(() => { });
         },
+        setAuth(token) {
+            if (!channel)
+                return;
+            void channel.setAuth(token).catch(() => { });
+        },
         onSaved(listener) { savedListeners.add(listener); return () => { savedListeners.delete(listener); }; },
         getState: () => state,
         subscribe(listener) { listeners.add(listener); return () => { listeners.delete(listener); }; },
@@ -88,3 +93,11 @@ export function createPresence(opts) {
         },
     };
 }
+/** Re-send every refreshed session token to the socket (spec 2026-09-26 security pass §1). Returns the stop function. */
+export function followTokenRefresh(auth, presence) {
+    const { data } = auth.onAuthStateChange((event, session) => {
+        if (event === "TOKEN_REFRESHED" && session)
+            presence.setAuth(session.access_token);
+    });
+    return () => data.subscription.unsubscribe();
+}

package/dist/admin/shell/redirects-list.d.ts

@@ -0,0 +1,12 @@
+import type { PathTarget } from "../../paths.ts";
+import type { RedirectTargetItem } from "../ops.ts";
+import type { ComboOption } from "../ui/combo-box.ts";
+import type { ConfirmOptions } from "../ui/confirm.ts";
+export declare const targetOptions: (targets: RedirectTargetItem[]) => ComboOption[];
+export declare function parseTargetValue(value: string): PathTarget | null;
+/** Admin-relative (the caller applies adminHref). */
+export declare const editorHref: (item: {
+    target: PathTarget;
+    collection: string | null;
+}, locale: string) => string;
+export declare const REMOVE_REDIRECT_CONFIRM: Omit<ConfirmOptions, "subject">;