smoodly 0.0.51 → 0.0.53

package/dist/admin/shell/InviteModal.d.ts

@@ -1,6 +0,0 @@
-import type { InviteInput } from "../../member-store.ts";
-export declare function InviteModal({ onClose, onInvite }: {
-    onClose(): void;
-    /** Resolves to an error message, or null when the invite landed (the caller closes). */
-    onInvite(input: Omit<InviteInput, "redirectTo">): Promise<string | null>;
-}): import("react").JSX.Element;

package/dist/admin/shell/InviteModal.js

@@ -1,28 +0,0 @@
-"use client";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// packages/smoodly/src/admin/shell/InviteModal.tsx
-// Invite a member (spec 2026-09-25 members management §4): an email, a
-// role, Send. The role is a radio list with a line under each option
-// saying what it may do — the one place the difference is explained in
-// the admin (the Roles page was dropped 2026-09-25). The op's error
-// shows inside; success closes it and the page reports what happened.
-import { useState } from "react";
-import { MEMBER_ROLES } from "../../permissions.js";
-import { Modal } from "../ui/Modal.js";
-import { Banner, Button, Field } from "../ui/primitives.js";
-import { ROLE_DESCRIPTION, roleLabel } from "./members-list.js";
-export function InviteModal({ onClose, onInvite }) {
-    const [email, setEmail] = useState("");
-    const [role, setRole] = useState("editor");
-    const [error, setError] = useState(null);
-    const [busy, setBusy] = useState(false);
-    const submit = async (e) => {
-        e.preventDefault();
-        setBusy(true);
-        setError(await onInvite({ email: email.trim(), role }));
-        setBusy(false);
-    };
-    // Editor first: the default, and the one most invites want.
-    const roles = [...MEMBER_ROLES].reverse();
-    return (_jsx(Modal, { title: "Invite a member", width: 420, onClose: onClose, children: _jsxs("form", { onSubmit: submit, style: { display: "flex", flexDirection: "column", gap: 14 }, children: [_jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", required: true, autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Role", asDiv: true, children: _jsx("div", { className: "sm-choices", role: "radiogroup", children: roles.map((r) => (_jsxs("label", { className: "sm-choice sm-choice--desc", children: [_jsx("input", { type: "radio", name: "role", value: r, checked: role === r, onChange: () => setRole(r) }), _jsxs("span", { children: [_jsx("span", { className: "sm-choice__label", children: roleLabel(r) }), _jsx("span", { className: "sm-choice__desc", children: ROLE_DESCRIPTION[r] })] })] }, r))) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: 8 }, children: [_jsx(Button, { variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx("button", { type: "submit", className: "sm-btn sm-btn--primary", disabled: busy, children: busy ? "Sending…" : "Send invite" })] })] }) }));
-}

package/dist/admin/shell/LoginView.d.ts

@@ -1,5 +0,0 @@
-import type { SupabaseClient } from "@supabase/supabase-js";
-export declare function LoginView({ client, providers }: {
-    client: SupabaseClient;
-    providers?: ("google" | "github")[];
-}): import("react").JSX.Element;

package/dist/admin/shell/LoginView.js

@@ -1,80 +0,0 @@
-"use client";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// The admin's front door (spec 2026-09-04 §5): email+password always;
-// Google/GitHub when the auth project has them. Errors come from
-// Supabase Auth verbatim. Being an editor is checked by the server on
-// the first op — a signed-in non-editor sees that message in the shell.
-// Forgot password (members management §6) mails a reset link; the reply
-// is the same whatever the email, so the form reveals no membership.
-import { useState } from "react";
-import { Banner, Button, Field, Logo } from "../ui/primitives.js";
-const LABELS = { google: "Continue with Google", github: "Continue with GitHub" };
-const CARD = {
-    width: 320, display: "flex", flexDirection: "column", gap: 14,
-    background: "var(--surface)", padding: 28, borderRadius: "var(--radius-card-lg)",
-    border: "var(--menu-border)", boxShadow: "var(--shadow-page)",
-};
-export function LoginView({ client, providers = [] }) {
-    const [mode, setMode] = useState("signin");
-    const [email, setEmail] = useState("");
-    const [password, setPassword] = useState("");
-    const [error, setError] = useState(null);
-    const [busy, setBusy] = useState(false);
-    const submit = async (e) => {
-        e.preventDefault();
-        setBusy(true);
-        setError(null);
-        try {
-            const res = await client.auth.signInWithPassword({ email, password });
-            if (res.error)
-                setError(res.error.message);
-        }
-        catch (e) {
-            setError(e instanceof Error ? e.message : String(e));
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    const forgot = async (e) => {
-        e.preventDefault();
-        setBusy(true);
-        setError(null);
-        try {
-            // The answer is not shown: the form must not reveal whether an email is registered.
-            await client.auth.resetPasswordForEmail(email, { redirectTo: window.location.origin + window.location.pathname });
-        }
-        catch { /* same */ }
-        finally {
-            setBusy(false);
-            setMode("sent");
-        }
-    };
-    const oauth = async (provider) => {
-        setBusy(true);
-        setError(null);
-        try {
-            const res = await client.auth.signInWithOAuth({ provider, options: { redirectTo: window.location.href } });
-            if (res.error)
-                setError(res.error.message);
-        }
-        catch (e) {
-            setError(e instanceof Error ? e.message : String(e));
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    const back = (_jsx(Button, { variant: "secondary", size: "lg", disabled: busy, onClick: () => { setError(null); setMode("signin"); }, children: "Back to sign in" }));
-    let card;
-    if (mode === "sent") {
-        card = (_jsxs("div", { style: CARD, children: [_jsx(Logo, { height: 20 }), _jsx("span", { children: "Check your email for a link to choose a new password." }), back] }));
-    }
-    else if (mode === "forgot") {
-        card = (_jsxs("form", { onSubmit: forgot, style: CARD, children: [_jsx(Logo, { height: 20 }), _jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", value: email, required: true, autoComplete: "email", autoFocus: true, onChange: (e) => setEmail(e.target.value) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsx("button", { type: "submit", disabled: busy, className: "sm-btn sm-btn--primary sm-btn--lg", children: busy ? "Sending…" : "Send reset link" }), back] }));
-    }
-    else {
-        card = (_jsxs("form", { onSubmit: submit, style: CARD, children: [_jsx(Logo, { height: 20 }), _jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", value: email, required: true, autoComplete: "email", onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Password", children: _jsx("input", { className: "sm-input", type: "password", value: password, required: true, autoComplete: "current-password", onChange: (e) => setPassword(e.target.value) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsx("button", { type: "submit", disabled: busy, className: "sm-btn sm-btn--primary sm-btn--lg", children: busy ? "Signing in…" : "Sign in" }), providers.map((p) => (_jsx(Button, { variant: "secondary", size: "lg", disabled: busy, onClick: () => oauth(p), children: LABELS[p] }, p))), _jsx("button", { type: "button", className: "sm-link", disabled: busy, onClick: () => { setError(null); setMode("forgot"); }, style: { background: "transparent", border: 0, color: "var(--text-muted)", cursor: "pointer", font: "inherit", padding: 0 }, children: "Forgot password?" })] }));
-    }
-    return (_jsx("div", { style: { minHeight: "100vh", display: "grid", placeItems: "center", background: "var(--bg)" }, children: card }));
-}

package/dist/admin/shell/SchemaNotice.d.ts

@@ -1,4 +0,0 @@
-import type { SchemaStatus } from "../ops.ts";
-export declare function SchemaNotice({ status }: {
-    status: SchemaStatus;
-}): import("react").JSX.Element;

package/dist/admin/shell/SchemaNotice.js

@@ -1,4 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-export function SchemaNotice({ status }) {
-    return (_jsx("div", { style: { height: "100vh", display: "grid", placeItems: "center", padding: 24, color: "var(--text)" }, children: _jsxs("div", { style: { maxWidth: 520, display: "grid", gap: 12 }, children: [_jsx("h1", { className: "sm-title", style: { fontSize: 22, margin: 0 }, children: "The database needs an update" }), _jsxs("p", { style: { margin: 0 }, children: ["The database schema is at version ", status.database ?? "none", ". This version of Smoodly needs version ", status.required, "."] }), _jsx("p", { style: { margin: 0 }, children: "From the site's folder:" }), _jsx("pre", { className: "sm-code", children: _jsx("code", { children: "npx smoodly migrate" }) }), _jsx("p", { style: { margin: 0 }, children: "then apply it:" }), _jsx("pre", { className: "sm-code", children: _jsx("code", { children: "supabase db push" }) }), _jsxs("p", { style: { margin: 0, color: "var(--text-muted)" }, children: ["That is for a hosted project; for the local stack run ", _jsx("code", { children: "supabase migration up" }), ", which keeps the content. Reload this page afterwards."] })] }) }));
-}

package/dist/admin/shell/SetPasswordView.d.ts

@@ -1,7 +0,0 @@
-import type { SupabaseClient } from "@supabase/supabase-js";
-import type { Arrival } from "./session.ts";
-export declare function SetPasswordView({ client, mode, onDone }: {
-    client: SupabaseClient;
-    mode: Arrival;
-    onDone(): void;
-}): import("react").JSX.Element;

package/dist/admin/shell/SetPasswordView.js

@@ -1,41 +0,0 @@
-"use client";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// packages/smoodly/src/admin/shell/SetPasswordView.tsx
-// The arrival screen (spec 2026-09-25 members management §6): an invite
-// link or a reset link signed the person in; now they choose a password.
-// An invite cannot skip it (the account has none yet); a recovery may.
-import { useState } from "react";
-import { Banner, Button, Field, Logo } from "../ui/primitives.js";
-export function SetPasswordView({ client, mode, onDone }) {
-    const [password, setPassword] = useState("");
-    const [again, setAgain] = useState("");
-    const [error, setError] = useState(null);
-    const [busy, setBusy] = useState(false);
-    const submit = async (e) => {
-        e.preventDefault();
-        if (password !== again) {
-            setError("The two passwords differ.");
-            return;
-        }
-        setBusy(true);
-        setError(null);
-        try {
-            const res = await client.auth.updateUser({ password });
-            if (res.error)
-                setError(res.error.message);
-            else
-                onDone();
-        }
-        catch (e) {
-            setError(e instanceof Error ? e.message : String(e));
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    return (_jsx("div", { style: { minHeight: "100vh", display: "grid", placeItems: "center", background: "var(--bg)" }, children: _jsxs("form", { onSubmit: submit, style: {
-                width: 320, display: "flex", flexDirection: "column", gap: 14,
-                background: "var(--surface)", padding: 28, borderRadius: "var(--radius-card-lg)",
-                border: "var(--menu-border)", boxShadow: "var(--shadow-page)",
-            }, children: [_jsx(Logo, { height: 20 }), _jsx("span", { className: "sm-title", children: mode === "invite" ? "Set your password" : "Choose a new password" }), _jsx(Field, { label: "Password", children: _jsx("input", { className: "sm-input", type: "password", required: true, minLength: 8, autoComplete: "new-password", value: password, onChange: (e) => setPassword(e.target.value) }) }), _jsx(Field, { label: "Again", children: _jsx("input", { className: "sm-input", type: "password", required: true, autoComplete: "new-password", value: again, onChange: (e) => setAgain(e.target.value) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsx("button", { type: "submit", disabled: busy, className: "sm-btn sm-btn--primary sm-btn--lg", children: busy ? "Saving…" : "Save" }), mode === "recovery" && _jsx(Button, { variant: "secondary", size: "lg", onClick: onDone, children: "Skip" })] }) }));
-}

package/dist/admin/shell/presence-realtime.d.ts

@@ -1,3 +0,0 @@
-import type { PresenceConfig } from "../../env.ts";
-import type { PresenceChannel } from "./presence.ts";
-export declare function connectRealtime(config: PresenceConfig, email: string, token: string): PresenceChannel;

package/dist/admin/shell/presence-realtime.js

@@ -1,32 +0,0 @@
-"use client";
-// The real channel behind `createPresence` (spec 2026-09-26 concurrency §5–§6;
-// gated 2026-09-26 security pass §1): one supabase-js client on the CONTENT
-// project whose public key (the anon key in self-host, the read key in the
-// cloud) is only the gateway apikey — the socket authenticates with the
-// editor's SESSION token, which the policies read auth.uid() from. A
-// private channel named after the space, presence keyed by the email.
-//
-// The token rides the client's `accessToken` callback, not a bare
-// `realtime.setAuth(token)`: realtime-js treats the callback as the source
-// of truth and re-asks it after every join and reconnect — with the
-// default callback that answer is the public key, which the server then
-// refuses ("no permissions to read"). The join itself waits for the first
-// setAuth, so it never goes out with the apikey alone.
-import { createClient } from "@supabase/supabase-js";
-export function connectRealtime(config, email, token) {
-    let current = token;
-    const client = createClient(config.url, config.key, { accessToken: async () => current });
-    const ready = client.realtime.setAuth(token).catch(() => { });
-    const channel = client.channel(`space:${config.spaceId}`, { config: { private: true, presence: { key: email } } });
-    return {
-        subscribe: (onStatus) => { void ready.then(() => { channel.subscribe((status) => onStatus(status)); }); },
-        setAuth: (fresh) => { current = fresh; return client.realtime.setAuth(fresh); },
-        track: (state) => channel.track(state),
-        untrack: () => channel.untrack(),
-        send: (message) => channel.send(message),
-        onSync: (listener) => { channel.on("presence", { event: "sync" }, listener); },
-        presenceState: () => channel.presenceState(),
-        onBroadcast: (event, listener) => { channel.on("broadcast", { event }, (m) => listener(m.payload)); },
-        unsubscribe: async () => { await channel.unsubscribe(); await client.removeAllChannels(); },
-    };
-}

package/dist/admin/supabase-auth.d.ts

@@ -1,7 +0,0 @@
-import { type SupabaseClient } from "@supabase/supabase-js";
-import type { AdminAuth } from "./auth.ts";
-export declare function supabaseAdminAuth(input: {
-    authUrl: string;
-    authKey: string;
-    db: SupabaseClient;
-}): AdminAuth;

package/dist/admin/supabase-auth.js

@@ -1,30 +0,0 @@
-// The Supabase-backed AdminAuth: the session is verified against the
-// AUTH project (smoodly.io's in the cloud, the customer's own in self-
-// host — same code, different SMOODLY_AUTH_URL), the members row is read
-// from the CONTENT project with the write key, its role onto the session.
-// No space filter: the policy set scopes the write key, and self-host
-// has one space.
-import { createClient } from "@supabase/supabase-js";
-export function supabaseAdminAuth(input) {
-    // Built on the first sign-in check, not here: a live page constructs the glue with no publishable
-    // key and never verifies anyone (spec 2026-09-30 tester findings §4).
-    let client = null;
-    const auth = () => {
-        if (!input.authKey) {
-            throw new Error("smoodly: set SMOODLY_PUBLISHABLE_KEY in .env (Astro) or .env.local (Next.js), or in your host's environment variables — the admin signs in with it (Deploying: https://smoodly.io/docs/getting-started/deploying).");
-        }
-        return (client ?? (client = createClient(input.authUrl, input.authKey, { auth: { persistSession: false, autoRefreshToken: false } })));
-    };
-    return {
-        async verify(token) {
-            const res = await auth().auth.getUser(token);
-            return res.data.user ? { userId: res.data.user.id, email: res.data.user.email ?? null } : null;
-        },
-        async memberOf(userId) {
-            const res = await input.db.from("members").select("role").eq("user_id", userId).limit(1);
-            if (res.error)
-                throw new Error(`smoodly: ${res.error.message}`);
-            return res.data.length > 0 ? String(res.data[0].role) : null;
-        },
-    };
-}

package/dist/astro/deploy-deps.d.ts

@@ -1,10 +0,0 @@
-import type { DeployDeps } from "../admin/ops-impl.ts";
-export declare function deployDepsOf(input: {
-    output: "static" | "server";
-    /** astro.config's `site` (SITE_URL), the live address the marker is read from. */
-    site: string | undefined;
-    env: Record<string, string | undefined>;
-    store: DeployDeps["store"];
-}): (DeployDeps & {
-    mode: "live" | "static";
-}) | undefined;

package/dist/astro/deploy-deps.js

@@ -1,8 +0,0 @@
-export function deployDepsOf(input) {
-    if (input.output !== "static")
-        return undefined;
-    if (!input.site)
-        throw new Error("smoodly: static output needs `site` (SITE_URL) — the Deploy tile reads the build marker from the live address.");
-    const hook = input.env.SMOODLY_DEPLOY_HOOK?.trim() || undefined;
-    return { mode: "static", siteUrl: input.site.replace(/\/$/, ""), hook, store: input.store };
-}

package/dist/astro/image.d.ts

@@ -1,27 +0,0 @@
-import type { ResolvedImage } from "../media.ts";
-/** The srcset candidates, up to the original's width: Astro ignores any wider than the image anyway. */
-export declare const IMAGE_WIDTHS: number[];
-export declare function imageWidths(width: number): number[];
-export type ImagePlacement = {
-    box: string;
-    frame: string;
-    svg: boolean;
-};
-export declare function placeImage(image: ResolvedImage, options?: {
-    aspect?: string;
-    handlesCrop?: boolean;
-}): ImagePlacement;
-export type ImageRequest = {
-    src: string;
-    width: number;
-    height: number;
-    format: "webp";
-    widths?: number[];
-    sizes?: string;
-};
-/** What to ask Astro's image service for, or null when the original URL is served as it is: an SVG (a vector
- *  has no sizes) or `unoptimized`. Widths, and so a srcset, only when the page says its `sizes`. */
-export declare function imageRequest(image: ResolvedImage, options?: {
-    sizes?: string;
-    unoptimized?: boolean;
-}): ImageRequest | null;

package/dist/astro/image.js

@@ -1,29 +0,0 @@
-// What <Image> renders in Astro (spec 2026-09-08 media §9; the React one is image/SmoodlyImage.tsx): a box at
-// the aspect, the picture inside placed by crop and hotspot, as inline style strings; and the candidate widths
-// Astro's image service is asked for. Pure, so Image.astro is only markup around `getImage`.
-import { boxAspectOf, frameFor } from "../image/crop-math.js";
-/** The srcset candidates, up to the original's width: Astro ignores any wider than the image anyway. */
-export const IMAGE_WIDTHS = [320, 640, 960, 1280, 1920, 2560];
-export function imageWidths(width) {
-    return [...IMAGE_WIDTHS.filter((w) => w < width), width];
-}
-const pct = (n) => `${Math.round(n * 1000) / 1000}%`;
-export function placeImage(image, options = {}) {
-    const box = boxAspectOf(image, options.aspect);
-    const frame = options.handlesCrop ? { left: 0, top: 0, width: 100, height: 100 } : frameFor(image, box);
-    return {
-        box: `display:block;position:relative;overflow:hidden;aspect-ratio:${box}`,
-        frame: `position:absolute;left:${pct(frame.left)};top:${pct(frame.top)};width:${pct(frame.width)};height:${pct(frame.height)};max-width:none`,
-        svg: image.mime === "image/svg+xml",
-    };
-}
-/** What to ask Astro's image service for, or null when the original URL is served as it is: an SVG (a vector
- *  has no sizes) or `unoptimized`. Widths, and so a srcset, only when the page says its `sizes`. */
-export function imageRequest(image, options = {}) {
-    if (options.unoptimized || image.mime === "image/svg+xml")
-        return null;
-    return {
-        src: image.url, width: image.width, height: image.height, format: "webp",
-        ...(options.sizes ? { widths: imageWidths(image.width), sizes: options.sizes } : {}),
-    };
-}

package/dist/bind.d.ts

@@ -1,19 +0,0 @@
-import type { SupabaseClient } from "@supabase/supabase-js";
-import type { ResolvedConfig } from "./config.ts";
-import type { SiteOptions } from "./site.ts";
-import { SupabaseAssetStore } from "./supabase-asset-store.ts";
-import { SupabaseEntryStore } from "./supabase-entry-store.ts";
-import { SupabaseMemberStore } from "./supabase-member-store.ts";
-import { SupabasePathIndex } from "./supabase-path-index.ts";
-import { SupabasePublishedStore } from "./supabase-published-store.ts";
-import { SupabasePageStore } from "./supabase-store.ts";
-export declare function createSupabaseStores(db: SupabaseClient, config: ResolvedConfig): {
-    paths: SupabasePathIndex;
-    pages: SupabasePageStore;
-    entries: SupabaseEntryStore;
-    assets: SupabaseAssetStore;
-    members: SupabaseMemberStore;
-    published: SupabasePublishedStore;
-};
-/** What createSmoodlySite takes, read off the config. */
-export declare function siteOptions(config: ResolvedConfig, stores: SiteOptions["stores"]): SiteOptions;

package/dist/bind.js

@@ -1,34 +0,0 @@
-import { SupabaseAssetStore } from "./supabase-asset-store.js";
-import { SupabaseEntryStore } from "./supabase-entry-store.js";
-import { SupabaseMemberStore } from "./supabase-member-store.js";
-import { SupabasePathIndex } from "./supabase-path-index.js";
-import { SupabasePublishedStore } from "./supabase-published-store.js";
-import { SupabasePageStore } from "./supabase-store.js";
-export function createSupabaseStores(db, config) {
-    const { sections, elements, collections, globals } = config.registry;
-    const locales = config.locales;
-    // ONE path index for both stores: pages and entries share the URL space.
-    const paths = new SupabasePathIndex(db, config.anchors);
-    const entries = new SupabaseEntryStore(db, collections, { paths, locales, globals, elements: elements });
-    const pages = new SupabasePageStore(db, {
-        sections: sections, elements: elements, entries, paths, locales,
-        custom: config.custom,
-        homePageSlug: config.homePageSlug,
-        addresses: config.addresses,
-        tree: config.pages?.tree,
-    });
-    return {
-        paths, pages, entries, assets: new SupabaseAssetStore(db), members: new SupabaseMemberStore(db),
-        published: new SupabasePublishedStore(db, collections),
-    };
-}
-/** What createSmoodlySite takes, read off the config. */
-export function siteOptions(config, stores) {
-    const { sections, elements, collections, globals, pages } = config.registry;
-    return {
-        stores, collections, globals,
-        // defineConfig's checks guarantee a section and an element carry `fields`.
-        sections: sections, elements: elements,
-        locales: config.locales, homePageSlug: config.homePageSlug, styles: config.styles, custom: config.custom, pages,
-    };
-}

package/dist/cli/add-admin.d.ts

@@ -1,11 +0,0 @@
-import type { MemberStore } from "../member-store.ts";
-/** `adminUrl`: where an invite link lands — the site's admin address. */
-export type AddAdminArgs = {
-    email: string;
-    adminUrl?: string;
-};
-export declare function runAddAdmin(args: AddAdminArgs, out: (line: string) => void, deps?: {
-    cwd?: string;
-    members?: MemberStore;
-    env?: Record<string, string | undefined>;
-}): Promise<number>;

package/dist/cli/add-admin.js

@@ -1,25 +0,0 @@
-// `smoodly add-admin <email>` (spec 2026-09-30 tester findings §1): the first
-// admin of a project the installer did not make — after an import, say.
-import { SupabaseMemberStore } from "../supabase-member-store.js";
-import { addAdmin } from "../content/content-api.js";
-import { connectFromEnv } from "./space-io.js";
-export async function runAddAdmin(args, out, deps = {}) {
-    const members = deps.members ?? new SupabaseMemberStore(connectFromEnv(deps.cwd ?? process.cwd()).db);
-    // Read after connectFromEnv: it loads the app's .env files.
-    const password = (deps.env ?? process.env).SMOODLY_ADMIN_PASSWORD;
-    // An invite link has to land on the admin, which finishes the sign-in: --admin-url, else SITE_URL's /admin.
-    const siteUrl = (deps.env ?? process.env).SITE_URL;
-    const redirectTo = args.adminUrl ?? (siteUrl ? `${siteUrl.replace(/\/+$/, "")}/admin` : undefined);
-    const { invited } = await addAdmin(members, args.email, password !== undefined ? { password } : { redirectTo });
-    if (password !== undefined)
-        out(`${args.email} is an admin. Sign in at your admin address with that password (an account that already existed keeps its own).`);
-    else if (invited) {
-        out(`Invited ${args.email} as an admin: the mail has the sign-in link.`);
-        out(redirectTo
-            ? `The link lands on ${redirectTo}, which must be in the Auth project's redirect URLs.`
-            : "No --admin-url and no SITE_URL: the link lands on the Auth project's Site URL. If that is not the admin, run it again with --admin-url <the admin's address>, or set SMOODLY_ADMIN_PASSWORD.");
-    }
-    else
-        out(`${args.email} already had an account and is now an admin.`);
-    return 0;
-}

package/dist/cli/load-collections.d.ts

@@ -1,2 +0,0 @@
-import type { CollectionSchema } from "../collections.ts";
-export declare function loadCollections(file: string, cwd: string): Promise<CollectionSchema<any>[]>;

package/dist/cli/load-collections.js

@@ -1,27 +0,0 @@
-// packages/smoodly/src/cli/load-collections.ts
-// Loads the app's `smoodly/collections.ts` — TypeScript, through tsx's
-// import API, under the app's own tsconfig so its `@/` alias resolves.
-// The barrel and not `smoodly/config.ts`: the collections are all a
-// migration needs, and the barrel is what the config registers in both
-// starters. (Since the registration split the config imports no
-// component either; a command that needs the whole registry may load it.)
-import { existsSync } from "node:fs";
-import { join } from "node:path";
-import { pathToFileURL } from "node:url";
-import { tsImport } from "tsx/esm/api";
-export async function loadCollections(file, cwd) {
-    if (!existsSync(file)) {
-        throw new Error(`smoodly: ${file} does not exist — pass --collections <file> for the module that exports \`collections\`.`);
-    }
-    const tsconfig = join(cwd, "tsconfig.json");
-    const mod = (await tsImport(pathToFileURL(file).href, {
-        parentURL: import.meta.url,
-        ...(existsSync(tsconfig) ? { tsconfig } : {}),
-    }));
-    const list = mod.collections;
-    const isCollection = (c) => typeof c === "object" && c !== null && typeof c.name === "string";
-    if (!Array.isArray(list) || !list.every(isCollection)) {
-        throw new Error(`smoodly: ${file} must export \`collections\`, the list of smoodly.collection() definitions the config registers.`);
-    }
-    return list;
-}

package/dist/cli/migrate.d.ts

@@ -1,43 +0,0 @@
-import type { CollectionSchema } from "../collections.ts";
-import { type SchemaRead } from "../schema-read.ts";
-import { type MigrationFile, type MigratePlan } from "../migrations.ts";
-export type MigrateArgs = {
-    check: boolean;
-    collections: string;
-    migrations: string;
-};
-export declare const DEFAULT_COLLECTIONS = "smoodly/collections.ts";
-/** The Astro starter keeps the setup under src/ (plan 2026-10-06 astro adapter 3); the default follows it when the Next path is absent. */
-export declare function collectionsFile(cwd: string, given: string, exists?: (p: string) => boolean): string;
-/** The folder shipped in the package: `../../migrations/` from dist/cli/ and from src/cli/ alike. */
-export declare const PACKAGE_MIGRATIONS_DIR: string;
-export declare const NO_FOLDER: (dir: string) => string;
-export declare const NEXT_STEP = "Next: apply it \u2014 `supabase db push` (hosted) or `supabase migration up` (local).";
-export declare const upToDate: (version: number, n: number) => string;
-export declare const KEY_NOT_CHECKED = "Key not checked: SMOODLY_URL and SMOODLY_SECRET_KEY are not both set here.";
-export declare const keyChecked: (version: number) => string;
-export declare const modifiedMessage: (name: string) => string;
-export declare function readSqlFiles(dir: string): Promise<MigrationFile[]>;
-/** One line per thing the plan does; "Pending" wording under --check. */
-export declare function describePlan(plan: MigratePlan, check: boolean): string[];
-export type MigrateDeps = {
-    cwd?: string;
-    /** Test seam: replaces the tsx loader. */
-    load?: (file: string, cwd: string) => Promise<CollectionSchema<any>[]>;
-    now?: () => Date;
-    /** The env the key check reads; `.env.local` and `.env` fill what it lacks, as Next does. */
-    env?: Record<string, string | undefined>;
-    /** Test seam: replaces the database read behind the key check. */
-    readKey?: (env: Record<string, string | undefined>) => Promise<SchemaRead>;
-    /** Test seam: the delivery rows behind the site's document stamp (DESIGN §3); default: the app's config, loaded, against the key's space. */
-    delivery?: (env: Record<string, string | undefined>, cwd: string) => Promise<{
-        behind: number;
-        total: number;
-    }>;
-};
-/** The delivery line of `--check` (DESIGN §3, the document stamp): a count with the one command to run, never a verdict. */
-export declare const deliveryLine: (d: {
-    behind: number;
-    total: number;
-}) => string;
-export declare function runMigrate(args: MigrateArgs, out: (line: string) => void, deps?: MigrateDeps): Promise<number>;