smoodly 0.0.26 → 0.0.28

package/dist/supabase-store.d.ts

@@ -1,6 +1,7 @@
 import type { SupabaseClient } from "@supabase/supabase-js";
 import { type AddLocaleOptions, type CreatePageInput, type PageRecord, type PageStore, type PageStoreOptions, type PageVersion } from "./store.ts";
 import type { PageTree } from "./render.tsx";
+import type { PathRow } from "./path-index.ts";
 import { type DraftToken } from "./draft-token.ts";
 import { type PathTarget } from "./paths.ts";
 export declare class SupabasePageStore implements PageStore {
@@ -60,19 +61,29 @@ export declare class SupabasePageStore implements PageStore {
     listPages(): Promise<PageRecord[]>;
     /** The site's one warning per process (spec 2026-09-26 §5): fired by the first locate, never blocking. */
     private schemaChecked;
-    resolvePath(locale: string, path: string): Promise<PathTarget | null>;
+    resolvePath(locale: string, path: string): Promise<import("./path-index.ts").PathHit | null>;
     schemaVersion(): Promise<number | null>;
     pathsOf(id: string): Promise<{}>;
+    targetPaths(target: PathTarget): Promise<Record<string, string>>;
+    redirectsOf(id: string): Promise<Record<string, string[]>>;
+    listLive(locale: string): Promise<PathRow[]>;
+    listRedirects(locale: string): Promise<PathRow[]>;
+    addRedirect(row: PathRow): Promise<void>;
+    removeRedirect(locale: string, path: string): Promise<void>;
     addLocale(id: string, locale: string, options: AddLocaleOptions, by?: string): Promise<PageRecord>;
     removeLocale(id: string, locale: string): Promise<PageRecord>;
     rename(id: string, patch: {
         locale: string;
         slug?: string;
         title?: string;
-    }, by?: string): Promise<PageRecord>;
+    }, by?: string, options?: {
+        redirect?: boolean;
+    }): Promise<PageRecord>;
     move(id: string, to: {
         parentId: string | null;
         index?: number;
+    }, options?: {
+        redirect?: boolean;
     }): Promise<PageRecord>;
     setTemplate(id: string, template: string, by?: string): Promise<PageRecord>;
     saveDraft(id: string, locale: string, tree: PageTree, by?: string, expected?: DraftToken | null): Promise<PageVersion>;

package/dist/supabase-store.js

@@ -9,8 +9,9 @@
 import { assertPublishable, assertSupportedLocale, localeRow, pageErrors, pageRefEdges, pathOptions, refSections, } from "./store.js";
 import { SupabasePathIndex } from "./supabase-path-index.js";
 import { SCHEMA_VERSION_KEY, schemaBehind, schemaBehindMessage } from "./schema-version.js";
+import { groupRedirects } from "./store.js";
 import { assertFresh, draftToken, StaleDraftError } from "./draft-token.js";
-import { assertDepth, assertSegment, isHomeNode, pagePathRows } from "./paths.js";
+import { assertDepth, assertSegment, isHomeNode, pagePathRows, rewriteTargets } from "./paths.js";
 const SELECT = "*, page_locales(*, draft:page_versions!page_locales_draft_version_fkey(saved_at))";
 const UNIQUE_VIOLATION = "23505";
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -121,11 +122,11 @@ export class SupabasePageStore {
     }
     /** Rewrite path rows for a subtree: ancestors are loaded once so the
      *  chain lookup is a map, then ONE RPC replaces every target's rows. */
-    async writePaths(top) {
+    async writePaths(top, redirect = true) {
         const ancestors = await this.chain(top);
         const nodes = await this.subtree(top);
         const byId = new Map([...ancestors, ...nodes].map((n) => [n.id, n]));
-        await this.paths.rewrite(nodes.map((n) => ({ kind: "page", id: n.id })), pagePathRows(nodes, (id) => byId.get(id), this.opts));
+        await this.paths.rewrite(rewriteTargets("page", nodes, redirect), pagePathRows(nodes, (id) => byId.get(id), this.opts));
     }
     /** `touch` defaults to true (the normal edit path bumps updated_at).
      *  A rollback restoring prior column values passes `{ touch: false }`,
@@ -358,6 +359,12 @@ export class SupabasePageStore {
     pathsOf(id) {
         return UUID_RE.test(id) ? this.paths.pathsOf({ kind: "page", id }) : Promise.resolve({});
     }
+    targetPaths(target) { return this.paths.pathsOf(target); }
+    async redirectsOf(id) { return UUID_RE.test(id) ? groupRedirects(await this.paths.redirectsOf({ kind: "page", id })) : {}; }
+    listLive(locale) { return this.paths.listLive(locale); }
+    listRedirects(locale) { return this.paths.listRedirects(locale); }
+    addRedirect(row) { return this.paths.addRedirect(row); }
+    removeRedirect(locale, path) { return this.paths.removeRedirect(locale, path); }
     async addLocale(id, locale, options, by) {
         assertSupportedLocale(locale, this.opts.locales);
         const page = await this.must(id);
@@ -403,11 +410,11 @@ export class SupabasePageStore {
         // content — until the next write of this node fixes it.
         await this.deleteLocale(id, locale);
         const remaining = await this.must(id);
-        await this.writePaths(remaining);
+        await this.writePaths(remaining, false);
         await this.writeRefs(remaining);
         return remaining;
     }
-    async rename(id, patch, by) {
+    async rename(id, patch, by, options) {
         const page = await this.must(id);
         const row = localeRow(page, patch.locale);
         if (patch.slug !== undefined)
@@ -431,7 +438,7 @@ export class SupabasePageStore {
             columns.title = patch.title;
         const renamed = await this.updateLocale(id, patch.locale, columns, { by });
         try {
-            await this.writePaths(renamed);
+            await this.writePaths(renamed, options?.redirect ?? true);
         }
         catch (e) {
             // The audit pair goes back too: a rejected rename is not an edit.
@@ -440,7 +447,7 @@ export class SupabasePageStore {
         }
         return renamed;
     }
-    async move(id, to) {
+    async move(id, to, options) {
         const page = await this.must(id);
         const subtree = await this.subtree(page);
         if (to.parentId !== null) {
@@ -485,7 +492,7 @@ export class SupabasePageStore {
         ordered.splice(index, 0, id);
         try {
             await this.reorder(ordered);
-            await this.writePaths(moved);
+            await this.writePaths(moved, options?.redirect ?? true);
         }
         catch (e) {
             await this.updateNode(id, { parent_id: page.parentId, sort: page.sort }, { touch: false });

package/migrations/20260926140000_smoodly_v3.sql

@@ -0,0 +1,38 @@
+-- Smoodly core schema, version 3 (docs/superpowers/specs/2026-09-26-security-pass-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 2: the presence channel admits a signed-in
+-- member of the topic's space (a definer lookup in members by the session
+-- token's user), the five unpinned functions get a search_path, and the
+-- three mutation RPCs are no longer executable by anon or public.
+
+set client_min_messages = warning;
+
+create or replace function "smoodly_presence_member"() returns boolean
+language sql stable security definer set search_path = public as $$
+  select exists (select 1 from "members" m
+    where m."user_id" = auth.uid()
+      and realtime.topic() = 'space:' || m."space_id"::text);
+$$;
+
+drop policy if exists "smoodly_presence_read" on "realtime"."messages";
+create policy "smoodly_presence_read" on "realtime"."messages" for select
+  using ((select public."smoodly_presence_member"()));
+
+drop policy if exists "smoodly_presence_write" on "realtime"."messages";
+create policy "smoodly_presence_write" on "realtime"."messages" for insert
+  with check ((select public."smoodly_presence_member"()));
+
+alter function "smoodly_current_space"() set search_path = '';
+alter function "smoodly_key_kind"() set search_path = '';
+alter function "smoodly_set_space"() set search_path = '';
+alter function "smoodly_reorder"(text, uuid[]) set search_path = public;
+alter function "smoodly_reorder_pages"(uuid[]) set search_path = public;
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+
+revoke execute on function "smoodly_reorder"(text, uuid[]) from public, anon;
+revoke execute on function "smoodly_reorder_pages"(uuid[]) from public, anon;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '3')
+  on conflict ("key") do update set "value" = excluded."value";

package/migrations/20260926150000_smoodly_v4.sql

@@ -0,0 +1,41 @@
+-- Smoodly core schema, version 4 (docs/superpowers/specs/2026-09-26-redirects-design.md).
+-- Shipped in the smoodly package; `npx smoodly migrate` copies it into supabase/migrations/.
+-- Never edit a published file: the next change is the next file.
+-- The delta over version 3: a `redirect` flag on the paths index — a row
+-- with it set is an old address of its target — and the rewrite function
+-- keeps the published old rows as redirects when a target names their
+-- locales. The read policy is unchanged: a redirect row is visible when
+-- its target is published in that locale.
+
+set client_min_messages = warning;
+
+alter table "paths" add column if not exists "redirect" boolean not null default false;
+
+create or replace function "smoodly_rewrite_paths"(p_targets jsonb, p_rows jsonb) returns void language sql set search_path = public as $$
+  delete from "paths" p
+  using jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+  where p."redirect" and p."locale" = r.locale and p."path" = r.path
+    and p."space_id" = "smoodly_current_space"();
+  update "paths" p set "redirect" = true
+  from jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where not p."redirect" and p."kind" = t.kind and p."target_id" = t.id
+    and p."locale" = any (coalesce(t.redirect_locales, '{}'::text[]))
+    and not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                    where r.locale = p."locale" and r.path = p."path")
+    and p."space_id" = "smoodly_current_space"();
+  delete from "paths" p
+  using jsonb_to_recordset(p_targets) as t(kind text, id uuid, redirect_locales text[])
+  where p."kind" = t.kind and p."target_id" = t.id
+    and (not p."redirect" or not exists (select 1 from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid)
+                                          where r.kind = p."kind" and r.id = p."target_id" and r.locale = p."locale"))
+    and p."space_id" = "smoodly_current_space"();
+  insert into "paths" ("locale", "path", "kind", "target_id")
+  select r.locale, r.path, r.kind, r.id
+  from jsonb_to_recordset(p_rows) as r(locale text, path text, kind text, id uuid);
+$$;
+
+alter function "smoodly_rewrite_paths"(jsonb, jsonb) set search_path = public;
+revoke execute on function "smoodly_rewrite_paths"(jsonb, jsonb) from public, anon;
+
+insert into "smoodly_meta" ("key", "value") values ('schema_version', '4')
+  on conflict ("key") do update set "value" = excluded."value";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "smoodly",
-  "version": "0.0.26",
+  "version": "0.0.28",
   "description": "Open-source, code-first CMS for Next.js on Supabase: define a component once, it becomes a typed, editable building block.",
   "license": "MIT",
   "repository": {