spine-framework 0.2.7 → 0.2.9

package/.framework/cli/commands/migrate.ts

@@ -99,13 +99,10 @@ async function migrateCommand(options: MigrateOptions): Promise<void> {
     // Dollar-quoted strings ($$ ... $$ or $tag$ ... $tag$) can contain semicolons
     // that are NOT statement terminators.
     function splitSqlStatements(sql: string): string[] {
-      // Simple approach: use regex to split, but protect dollar-quoted blocks first
-      // Replace dollar-quoted blocks with placeholders, split by semicolons, then restore
-
       const dollarBlocks: string[] = []
       let blockIndex = 0
 
-      // Extract dollar-quoted blocks and replace with placeholders
+      // Step 1: Protect dollar-quoted blocks with placeholders (preserves internal semicolons)
       const protectedSql = sql.replace(/\$[A-Za-z_]*\$[\s\S]*?\$[A-Za-z_]*\$/g, (match) => {
         const placeholder = `__DOLLAR_BLOCK_${blockIndex}__`
         dollarBlocks[blockIndex] = match
@@ -113,23 +110,23 @@ async function migrateCommand(options: MigrateOptions): Promise<void> {
         return placeholder
       })
 
-      // Split by semicolons
-      const rawStatements = protectedSql.split(';')
+      // Step 2: Strip single-line comments (prevents semicolons inside -- comments
+      //         from being treated as statement terminators)
+      const noComments = protectedSql.replace(/--[^\n]*/g, '')
 
-      // Restore dollar blocks and filter
-      const statements = rawStatements
+      // Step 3: Split by semicolons, restore dollar blocks, and filter empty statements
+      return noComments
+        .split(';')
         .map(s => {
           let restored = s.trim()
-          // Restore dollar blocks
+          // Use function form of replace — prevents JS from interpreting $$ as $
           dollarBlocks.forEach((block, idx) => {
-            restored = restored.replace(`__DOLLAR_BLOCK_${idx}__`, block)
+            restored = restored.replace(`__DOLLAR_BLOCK_${idx}__`, () => block)
           })
           return restored
         })
-        .filter(s => s.length > 0 && !s.startsWith('--'))
+        .filter(s => s.length > 0)
         .map(s => s + ';')
-
-      return statements
     }
 
     const statements = splitSqlStatements(sql)

package/.framework/migrations/000_foundation.sql

@@ -1278,3 +1278,20 @@ BEGIN
   ORDER BY e.embedding <=> p_query_embedding LIMIT p_limit;
 END;
 $$;
+
+-- ---------------------------------------------------------------------------
+-- Role Grants
+-- Raw SQL migrations bypass Supabase's automatic grant setup. These grants
+-- are required for the PostgREST API to function with anon/service_role keys.
+-- ---------------------------------------------------------------------------
+GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role;
+GRANT ALL ON ALL TABLES IN SCHEMA public TO service_role;
+GRANT ALL ON ALL SEQUENCES IN SCHEMA public TO service_role;
+GRANT ALL ON ALL FUNCTIONS IN SCHEMA public TO service_role;
+GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO authenticated;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO service_role;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO authenticated;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO anon;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role, authenticated;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role, authenticated;

package/dist/cli/commands/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../.framework/cli/commands/migrate.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAiJxC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAevD"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../.framework/cli/commands/migrate.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA8IxC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAevD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "private": false,
   "description": "Spine — enterprise application framework built on Supabase + Netlify + React",
   "type": "module",