@wecode-team/cms-supabase-api 0.1.46 → 0.1.47

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wecode-team/cms-supabase-api",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "A CMS API package using Hono framework with Supabase and dynamic table management",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",

package/supabase-setup.sql

@@ -125,6 +125,25 @@ $$;
 -- Initialize the CMS models table
 SELECT create_cms_models_table_if_not_exists ();
 
+-- Global CMS config table.
+-- Runtime code uses ordinary select/upsert operations on this table, so config
+-- reads and writes do not need the high-privilege execute_sql RPC.
+CREATE TABLE IF NOT EXISTS "_cms_configs" (
+  id SERIAL PRIMARY KEY,
+  session_id TEXT NOT NULL,
+  namespace TEXT NOT NULL,
+  values JSONB NOT NULL DEFAULT '{}'::jsonb,
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW(),
+  UNIQUE (session_id, namespace)
+);
+
+DROP TRIGGER IF EXISTS update_cms_configs_updated_at ON "_cms_configs";
+CREATE TRIGGER update_cms_configs_updated_at
+  BEFORE UPDATE ON "_cms_configs"
+  FOR EACH ROW
+  EXECUTE FUNCTION update_updated_at_column();
+
 -- Grant necessary permissions (adjust as needed for your security requirements)
 -- Note: Be careful with these permissions in production
 GRANT USAGE ON SCHEMA public TO anon, authenticated;
@@ -137,15 +156,21 @@ GRANT ALL ON ALL FUNCTIONS IN SCHEMA public TO anon, authenticated;
 
 -- Create RLS policies for the CMS models table (optional, adjust as needed)
 ALTER TABLE "_cms_models" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "_cms_configs" ENABLE ROW LEVEL SECURITY;
 
 -- Allow all operations for all users (development environment)
 CREATE POLICY "Allow all operations" ON "_cms_models" FOR ALL USING (true);
+DROP POLICY IF EXISTS "Allow all operations" ON "_cms_configs";
+CREATE POLICY "Allow all operations" ON "_cms_configs" FOR ALL USING (true);
 
 COMMENT ON
 TABLE "_cms_models" IS 'CMS models configuration table for we0-cms-supabase-hono-api';
 
+COMMENT ON
+TABLE "_cms_configs" IS 'Session-scoped CMS global configuration values';
+
 COMMENT ON FUNCTION execute_sql (text) IS 'Execute SQL queries for dynamic table management';
 
 COMMENT ON FUNCTION check_table_exists (text) IS 'Check if a table exists in the public schema';
 
-COMMENT ON FUNCTION get_table_structure (text) IS 'Get the structure of a table';
+COMMENT ON FUNCTION get_table_structure (text) IS 'Get the structure of a table';