spine-framework 0.1.60 → 0.2.0

package/.framework/migrations/003_system_data.sql

@@ -0,0 +1,520 @@
+-- Migration 003: System Data
+-- Seeds for day-zero operation including system role, system account, spine-core app,
+-- runtime types, admin app, and RPC functions.
+
+-- ============================================
+-- 1. SYSTEM ROLE (system_admin)
+-- ============================================
+
+INSERT INTO public.roles (id, slug, name, description, permissions, is_system, is_active, is_protected, app_id, account_id)
+VALUES (
+  gen_random_uuid(),
+  'system_admin',
+  'System Admin',
+  'Full system access - can manage all accounts, types, and system configuration',
+  '["*"]'::jsonb,
+  true,
+  true,
+  true,
+  NULL,
+  NULL
+);
+
+-- ============================================
+-- 2. MASTER SYSTEM ACCOUNT
+-- ============================================
+
+INSERT INTO public.accounts (id, slug, display_name, description, data, is_active, design_schema, validation_schema, type_id)
+VALUES (
+  gen_random_uuid(),
+  'spine-system',
+  'Spine System',
+  'Master system account for internal Spine operations',
+  '{}'::jsonb,
+  true,
+  '{}'::jsonb,
+  '{}'::jsonb,
+  gen_random_uuid()  -- placeholder, will update after types seeded
+);
+
+-- ============================================
+-- 3. SYSTEM APP (spine-core)
+-- ============================================
+
+INSERT INTO public.apps (id, slug, name, description, version, app_type, source, is_active, is_system, renderer, route_prefix)
+VALUES (
+  gen_random_uuid(),
+  'spine-core',
+  'Spine Core',
+  'Core Spine runtime - provides accounts, people, items, threads, messages, links, attachments, watchers',
+  '1.0.0',
+  'system',
+  'builtin',
+  true,
+  true,
+  'none',
+  NULL
+);
+
+-- ============================================
+-- 4. ADMIN APP
+-- ============================================
+
+INSERT INTO public.apps (
+  id, slug, name, description, icon, color, version,
+  app_type, source, config, nav_items, min_role,
+  is_active, is_system, route_prefix, renderer
+)
+VALUES (
+  gen_random_uuid(),
+  'admin',
+  'Admin',
+  'Spine system administration interface',
+  'settings',
+  'slate',
+  '1.0.0',
+  'system',
+  'builtin',
+  '{}'::jsonb,
+  '[]'::jsonb,
+  'system_admin',
+  true,
+  true,
+  '/admin',
+  'custom'
+)
+ON CONFLICT (slug) DO UPDATE SET
+  route_prefix = EXCLUDED.route_prefix,
+  renderer = EXCLUDED.renderer,
+  min_role = EXCLUDED.min_role,
+  is_system = EXCLUDED.is_system,
+  app_type = EXCLUDED.app_type;
+
+-- ============================================
+-- 5. RUNTIME ENTITY TYPES (8 core types)
+-- ============================================
+
+DO $$
+DECLARE
+  v_spine_core_app_id uuid;
+  v_system_account_id uuid;
+BEGIN
+  SELECT id INTO v_spine_core_app_id FROM public.apps WHERE slug = 'spine-core' LIMIT 1;
+  SELECT id INTO v_system_account_id FROM public.accounts WHERE slug = 'spine-system' LIMIT 1;
+
+  -- 5.1 accounts type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'account',
+    'account',
+    'Account',
+    'Organization or tenant account',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'slug', jsonb_build_object('data_type', 'text', 'label', 'Slug', 'required', true, 'system', true, 'validation', null),
+        'display_name', jsonb_build_object('data_type', 'text', 'label', 'Display Name', 'required', true, 'system', true, 'validation', null),
+        'description', jsonb_build_object('data_type', 'textarea', 'label', 'Description', 'required', false, 'system', true, 'validation', null),
+        'is_active', jsonb_build_object('data_type', 'boolean', 'label', 'Active', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Accounts',
+          'fields', jsonb_build_object(
+            'display_name', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'slug', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'is_active', jsonb_build_object('sortable', true, 'display_type', 'badge')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Account',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Overview', 'fields', jsonb_build_array('slug', 'display_name', 'description', 'is_active')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.2 people type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'person',
+    'person',
+    'Person',
+    'User or contact person',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'full_name', jsonb_build_object('data_type', 'text', 'label', 'Full Name', 'required', true, 'system', true, 'validation', null),
+        'email', jsonb_build_object('data_type', 'email', 'label', 'Email', 'required', true, 'system', true, 'validation', null),
+        'phone', jsonb_build_object('data_type', 'phone', 'label', 'Phone', 'required', false, 'system', true, 'validation', null),
+        'avatar_url', jsonb_build_object('data_type', 'url', 'label', 'Avatar URL', 'required', false, 'system', true, 'validation', null),
+        'status', jsonb_build_object('data_type', 'text', 'label', 'Status', 'required', true, 'system', true, 'validation', null),
+        'is_active', jsonb_build_object('data_type', 'boolean', 'label', 'Active', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'People',
+          'fields', jsonb_build_object(
+            'full_name', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'email', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'status', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'is_active', jsonb_build_object('sortable', true, 'display_type', 'badge')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Person',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Profile', 'fields', jsonb_build_array('full_name', 'email', 'phone', 'avatar_url')),
+            jsonb_build_object('title', 'Status', 'fields', jsonb_build_array('status', 'is_active')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.3 items type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'item',
+    'item',
+    'Item',
+    'Generic item - tickets, tasks, records',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'title', jsonb_build_object('data_type', 'text', 'label', 'Title', 'required', true, 'system', true, 'validation', null),
+        'description', jsonb_build_object('data_type', 'textarea', 'label', 'Description', 'required', false, 'system', true, 'validation', null),
+        'status', jsonb_build_object('data_type', 'text', 'label', 'Status', 'required', true, 'system', true, 'validation', null),
+        'is_active', jsonb_build_object('data_type', 'boolean', 'label', 'Active', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Items',
+          'fields', jsonb_build_object(
+            'title', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'status', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'is_active', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'created_at', jsonb_build_object('sortable', true, 'display_type', 'datetime')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Item',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Overview', 'fields', jsonb_build_array('title', 'description', 'status', 'is_active')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.4 threads type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'thread',
+    'thread',
+    'Thread',
+    'Discussion thread for items or accounts',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'title', jsonb_build_object('data_type', 'text', 'label', 'Title', 'required', false, 'system', true, 'validation', null),
+        'target_type', jsonb_build_object('data_type', 'text', 'label', 'Target Type', 'required', true, 'system', true, 'validation', null),
+        'target_id', jsonb_build_object('data_type', 'uuid', 'label', 'Target ID', 'required', true, 'system', true, 'validation', null),
+        'visibility', jsonb_build_object('data_type', 'text', 'label', 'Visibility', 'required', true, 'system', true, 'validation', null),
+        'status', jsonb_build_object('data_type', 'text', 'label', 'Status', 'required', true, 'system', true, 'validation', null),
+        'is_active', jsonb_build_object('data_type', 'boolean', 'label', 'Active', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Threads',
+          'fields', jsonb_build_object(
+            'title', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'target_type', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'visibility', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'status', jsonb_build_object('sortable', true, 'display_type', 'badge')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Thread',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Overview', 'fields', jsonb_build_array('title', 'target_type', 'target_id', 'visibility', 'status')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.5 messages type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'message',
+    'message',
+    'Message',
+    'Individual message within a thread',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'content', jsonb_build_object('data_type', 'textarea', 'label', 'Content', 'required', true, 'system', true, 'validation', null),
+        'direction', jsonb_build_object('data_type', 'text', 'label', 'Direction', 'required', true, 'system', true, 'validation', null),
+        'sequence', jsonb_build_object('data_type', 'number', 'label', 'Sequence', 'required', true, 'system', true, 'validation', null),
+        'visibility', jsonb_build_object('data_type', 'text', 'label', 'Visibility', 'required', true, 'system', true, 'validation', null),
+        'is_active', jsonb_build_object('data_type', 'boolean', 'label', 'Active', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Messages',
+          'fields', jsonb_build_object(
+            'content', jsonb_build_object('sortable', false, 'display_type', 'text'),
+            'direction', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'visibility', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'created_at', jsonb_build_object('sortable', true, 'display_type', 'datetime')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Message',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Content', 'fields', jsonb_build_array('content', 'direction', 'visibility')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('sequence', 'created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.6 links type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'link',
+    'link',
+    'Link',
+    'Relationship between two entities',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'source_type', jsonb_build_object('data_type', 'text', 'label', 'Source Type', 'required', true, 'system', true, 'validation', null),
+        'source_id', jsonb_build_object('data_type', 'uuid', 'label', 'Source ID', 'required', true, 'system', true, 'validation', null),
+        'target_type', jsonb_build_object('data_type', 'text', 'label', 'Target Type', 'required', true, 'system', true, 'validation', null),
+        'target_id', jsonb_build_object('data_type', 'uuid', 'label', 'Target ID', 'required', true, 'system', true, 'validation', null),
+        'link_type', jsonb_build_object('data_type', 'text', 'label', 'Link Type', 'required', false, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Links',
+          'fields', jsonb_build_object(
+            'source_type', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'target_type', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'link_type', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'created_at', jsonb_build_object('sortable', true, 'display_type', 'datetime')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Link',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Connection', 'fields', jsonb_build_array('source_type', 'source_id', 'target_type', 'target_id', 'link_type')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.7 attachments type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'attachment',
+    'attachment',
+    'Attachment',
+    'File attachment with storage reference',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'filename', jsonb_build_object('data_type', 'text', 'label', 'Filename', 'required', true, 'system', true, 'validation', null),
+        'file_size', jsonb_build_object('data_type', 'number', 'label', 'File Size', 'required', false, 'system', true, 'validation', null),
+        'mime_type', jsonb_build_object('data_type', 'text', 'label', 'MIME Type', 'required', false, 'system', true, 'validation', null),
+        'storage_path', jsonb_build_object('data_type', 'text', 'label', 'Storage Path', 'required', false, 'system', true, 'validation', null),
+        'storage_provider', jsonb_build_object('data_type', 'text', 'label', 'Storage Provider', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Attachments',
+          'fields', jsonb_build_object(
+            'filename', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'file_size', jsonb_build_object('sortable', true, 'display_type', 'number'),
+            'mime_type', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'created_at', jsonb_build_object('sortable', true, 'display_type', 'datetime')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Attachment',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'File', 'fields', jsonb_build_array('filename', 'file_size', 'mime_type', 'storage_provider')),
+            jsonb_build_object('title', 'Storage', 'fields', jsonb_build_array('storage_path')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- 5.8 watchers type
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'watcher',
+    'watcher',
+    'Watcher',
+    'Person watching an entity for notifications',
+    jsonb_build_object(
+      'scope', 'account',
+      'record_permissions', jsonb_build_object('system_admin', ARRAY['create', 'read', 'update', 'delete']),
+      'fields', jsonb_build_object(
+        'target_type', jsonb_build_object('data_type', 'text', 'label', 'Target Type', 'required', true, 'system', true, 'validation', null),
+        'target_id', jsonb_build_object('data_type', 'uuid', 'label', 'Target ID', 'required', true, 'system', true, 'validation', null),
+        'person_id', jsonb_build_object('data_type', 'uuid', 'label', 'Person', 'required', true, 'system', true, 'validation', null),
+        'watch_type', jsonb_build_object('data_type', 'text', 'label', 'Watch Type', 'required', true, 'system', true, 'validation', null),
+        'notification_level', jsonb_build_object('data_type', 'text', 'label', 'Notification Level', 'required', true, 'system', true, 'validation', null),
+        'created_at', jsonb_build_object('data_type', 'datetime', 'label', 'Created', 'required', false, 'system', true, 'readonly', true, 'validation', null),
+        'updated_at', jsonb_build_object('data_type', 'datetime', 'label', 'Updated', 'required', false, 'system', true, 'readonly', true, 'validation', null)
+      ),
+      'views', jsonb_build_object(
+        'default_list', jsonb_build_object('type', 'list', 'display', 'table', 'label', 'Watchers',
+          'fields', jsonb_build_object(
+            'target_type', jsonb_build_object('sortable', true, 'display_type', 'text'),
+            'watch_type', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'notification_level', jsonb_build_object('sortable', true, 'display_type', 'badge'),
+            'created_at', jsonb_build_object('sortable', true, 'display_type', 'datetime')
+          )
+        ),
+        'default_detail', jsonb_build_object('type', 'detail', 'label', 'Watcher',
+          'sections', jsonb_build_array(
+            jsonb_build_object('title', 'Target', 'fields', jsonb_build_array('target_type', 'target_id')),
+            jsonb_build_object('title', 'Settings', 'fields', jsonb_build_array('person_id', 'watch_type', 'notification_level')),
+            jsonb_build_object('title', 'Metadata', 'fields', jsonb_build_array('created_at', 'updated_at'))
+          )
+        )
+      )
+    ),
+    '{}'::jsonb,
+    'pack',
+    true
+  );
+
+  -- Update the spine-system account with the actual accounts type_id
+  UPDATE public.accounts 
+  SET type_id = (SELECT id FROM public.types WHERE slug = 'account' AND app_id = v_spine_core_app_id LIMIT 1)
+  WHERE slug = 'spine-system';
+
+END $$;
+
+-- ============================================
+-- 6. RPC FUNCTION: get_account_apps
+-- ============================================
+
+CREATE OR REPLACE FUNCTION public.get_account_apps(
+  account_id uuid,
+  include_system boolean DEFAULT true,
+  include_inactive boolean DEFAULT false
+)
+RETURNS TABLE(
+  id uuid,
+  slug text,
+  name text,
+  description text,
+  icon text,
+  color text,
+  version text,
+  app_type text,
+  source text,
+  owner_account_id uuid,
+  is_active boolean,
+  is_system boolean,
+  min_role text,
+  config jsonb,
+  nav_items jsonb,
+  route_prefix text,
+  renderer text,
+  created_at timestamptz
+)
+LANGUAGE plpgsql
+AS $function$
+BEGIN
+  RETURN QUERY
+  SELECT
+    a.id,
+    a.slug,
+    a.name,
+    a.description,
+    a.icon,
+    a.color,
+    a.version,
+    a.app_type,
+    a.source,
+    a.owner_account_id,
+    a.is_active,
+    a.is_system,
+    a.min_role,
+    a.config,
+    a.nav_items,
+    a.route_prefix,
+    a.renderer,
+    a.created_at
+  FROM public.apps a
+  WHERE
+    (include_system OR a.is_system = false)
+    AND (include_inactive OR a.is_active = true)
+    AND (a.is_system OR a.owner_account_id = get_account_apps.account_id)
+  ORDER BY
+    a.is_system DESC,
+    a.app_type,
+    a.name;
+END;
+$function$;

package/.framework/migrations/004_enhancements.sql

@@ -0,0 +1,43 @@
+-- Migration 004: Enhancements
+-- Additional enhancements and refinements to the Spine schema
+
+-- ============================================
+-- TYPE SCOPE STAMPING (from 012_type_scope.sql)
+-- ============================================
+-- Platform-scoped types: owned by spine-system, any authenticated user can read
+UPDATE public.types
+SET design_schema = design_schema || '{"scope":"platform"}'::jsonb
+WHERE slug IN ('kb_article', 'course_lesson', 'community_post', 'community_question');
+
+-- Customer-scoped types: owned by the customer's account
+UPDATE public.types
+SET design_schema = design_schema || '{"scope":"customer"}'::jsonb
+WHERE slug IN ('support_ticket');
+
+-- Account-scoped types: owned by the calling account (default, explicit for clarity)
+UPDATE public.types
+SET design_schema = design_schema || '{"scope":"account"}'::jsonb
+WHERE design_schema->>'scope' IS NULL;
+
+-- ============================================
+-- TABLE COMMENTS
+-- ============================================
+
+COMMENT ON TABLE public.account_paths IS 
+'Stores ancestor-descendant relationships for account hierarchy traversal';
+
+COMMENT ON TABLE public.webhook_handlers IS 
+'Dynamic registry for webhook handlers. Custom functions self-register here to be discoverable by the integration-routes handler without static imports.';
+
+-- ============================================
+-- ENHANCEMENT NOTES
+-- ============================================
+-- This file contains miscellaneous enhancements that refine the core schema:
+--
+-- 1. Type scope stamping: Ensures all types have an explicit scope field
+--    in their design_schema for proper RLS and visibility control.
+--
+-- 2. Table comments: Documentation for key infrastructure tables.
+--
+-- Future enhancements should be added here as ALTER statements or
+-- configuration updates that don't require new table creation.

package/.framework/public/_redirects

@@ -0,0 +1,3 @@
+/api/*    /.netlify/functions/:splat    200
+/v2/*     /.netlify/v2/functions/:splat  200
+/*        /index.html                   200

package/.framework/public/spine-logo.svg

@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" fill="none">
+  <rect width="32" height="32" rx="5" fill="#1e2a4a"/>
+</svg>

package/{scripts → .framework/scripts}/assemble-frontend.sh

@@ -17,7 +17,7 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-PROJECT_ROOT="${PROJECT_ROOT:-$(dirname "$SCRIPT_DIR")}"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
 
 CORE_SRC_DIR="$PROJECT_ROOT/.framework/src"
 CUSTOM_SRC_DIR="$PROJECT_ROOT/custom/apps"

package/{scripts → .framework/scripts}/assemble-functions.sh

@@ -18,7 +18,7 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-PROJECT_ROOT="${PROJECT_ROOT:-$(dirname "$SCRIPT_DIR")}"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
 
 CORE_DIR="$PROJECT_ROOT/.framework/functions"
 CUSTOM_DIR="$PROJECT_ROOT/custom"

package/{scripts → .framework/scripts}/assemble.sh

@@ -19,12 +19,6 @@ set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
 
-# Detect if running inside node_modules (consumer project install)
-# If so, output to actual project root (3 levels up from scripts/)
-if [[ "$SCRIPT_DIR" == *"/node_modules/spine-framework/"* ]]; then
-  PROJECT_ROOT="$(dirname "$(dirname "$(dirname "$SCRIPT_DIR")")")"
-fi
-
 echo "Assembling Spine..."
 
 # Remove stale dist/ so Netlify CLI never reads its _redirects during dev
@@ -32,10 +26,10 @@ rm -rf "$PROJECT_ROOT/dist"
 
 # Step 1: Assemble functions
 echo "Assembling functions..."
-PROJECT_ROOT="$PROJECT_ROOT" bash "$SCRIPT_DIR/assemble-functions.sh"
+bash "$SCRIPT_DIR/assemble-functions.sh"
 
 # Step 2: Assemble frontend
 echo "Assembling frontend..."
-PROJECT_ROOT="$PROJECT_ROOT" bash "$SCRIPT_DIR/assemble-frontend.sh"
+bash "$SCRIPT_DIR/assemble-frontend.sh"
 
 echo "Spine assembly complete"

package/.framework/seeds/link_types/account_cli_instances.json

@@ -0,0 +1,9 @@
+{
+  "slug": "account_cli_instances",
+  "source_kind": "account",
+  "target_kind": "item",
+  "target_type_slug": "spine_instance",
+  "name": "Account CLI Instances",
+  "description": "Links accounts to their CLI installations",
+  "is_active": true
+}