spine-framework 0.3.132 → 0.3.134

package/.framework/cli/commands/migrate.ts

@@ -103,14 +103,17 @@ export async function runMigrations(opts: { frameworkOnly?: boolean } = {}): Pro
     const statements = splitSqlStatements(sql)
 
     try {
+      await client.query('BEGIN')
       for (const stmt of statements) await client.query(stmt)
       await client.query(
         `INSERT INTO _spine_migrations (filename) VALUES ($1) ON CONFLICT (filename) DO NOTHING`,
         [name]
       )
+      await client.query('COMMIT')
       console.log('✓')
       applied++
     } catch (err: any) {
+      await client.query('ROLLBACK').catch(() => {})
       console.log('✗')
       console.error(`    ${err.message}`)
       failed++

package/.framework/functions/invites.ts

@@ -175,12 +175,13 @@ export const checkDomain = createHandler(async (_ctx, _body) => {
 
   const { data } = await adminDb
     .from('people')
-    .select('id')
+    .select('account_id')
     .ilike('email', `%@${domain}`)
     .eq('status', 'active')
     .limit(1)
 
-  return { match: (data?.length ?? 0) > 0 }
+  const first = data?.[0]
+  return { match: !!first, account_id: first?.account_id ?? null }
 })
 // CIL[END chunk_id="invites_checkdomain_1783968140"]
 // CIL[BEGIN chunk_id="invites_validatetoken_1783968140" type="function" identity="validateToken" parent="none"]

package/.framework/migrations/001_core_schema.sql

@@ -319,7 +319,7 @@ CREATE TABLE IF NOT EXISTS public.account_paths (
   ancestor_id uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
   descendant_id uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
   depth integer NOT NULL,
-  PRIMARY KEY (ancestor_id, descendant_id)
+  PRIMARY KEY (ancestor_id, descendant_id),
   CONSTRAINT chk_account_paths_no_self CHECK (ancestor_id != descendant_id)
 );
 CREATE INDEX IF NOT EXISTS idx_accounts_parent_id ON public.accounts(parent_id);

package/.framework/migrations/002_core_rls_and_functions.sql

@@ -530,10 +530,6 @@ CREATE TRIGGER set_updated_at_account_paths
 BEFORE UPDATE ON public.account_paths
 FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
 
-DROP TRIGGER IF EXISTS set_updated_at_people_roles ON public.people_roles;
-CREATE TRIGGER set_updated_at_people_roles
-BEFORE UPDATE ON public.people_roles
-FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
 
 -- RLS policies
 
@@ -634,10 +630,6 @@ CREATE POLICY api_keys_access ON public.api_keys FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR id = auth.uid() );
 
-CREATE POLICY akul_access ON public.api_key_usage_logs FOR ALL
-  USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
-         );
-
 CREATE POLICY logs_access ON public.logs FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          );

package/.framework/migrations/004_core_rpc_and_broker.sql

@@ -122,6 +122,7 @@ COMMENT ON COLUMN public.integrations.is_configured IS 'True when required crede
 ALTER TABLE public.integrations DROP CONSTRAINT IF EXISTS integrations_app_id_slug_key;
 ALTER TABLE public.integrations ADD CONSTRAINT integrations_app_account_slug_key UNIQUE (app_id, account_id, slug);
 
+ALTER TABLE public.integrations DROP CONSTRAINT IF EXISTS fk_integrations_created_by;
 ALTER TABLE public.integrations ADD CONSTRAINT fk_integrations_created_by
   FOREIGN KEY (created_by) REFERENCES public.people(id) ON DELETE SET NULL;
 
@@ -153,6 +154,7 @@ COMMENT ON COLUMN public.api_keys.rate_limit IS 'Requests per rate_limit_window_
 
 ALTER TABLE public.api_keys ADD CONSTRAINT fk_api_keys_integration
   FOREIGN KEY (integration_id) REFERENCES public.integrations(id) ON DELETE CASCADE;
+ALTER TABLE public.api_keys DROP CONSTRAINT IF EXISTS fk_api_keys_created_by;
 ALTER TABLE public.api_keys ADD CONSTRAINT fk_api_keys_created_by
   FOREIGN KEY (created_by) REFERENCES public.people(id) ON DELETE SET NULL;
 

package/.framework/migrations/010_auth_user_trigger.sql

@@ -0,0 +1,82 @@
+-- Create trigger function to sync new auth users to people records
+CREATE OR REPLACE FUNCTION public.handle_new_auth_user()
+RETURNS TRIGGER LANGUAGE plpgsql SECURITY DEFINER SET search_path = public AS $$
+DECLARE
+  v_account_id         uuid;
+  v_type_id            uuid;
+  v_role_id            uuid;
+  v_is_first           boolean;
+  v_design_schema      jsonb;
+  v_validation_schema  jsonb;
+  v_stub_id            uuid;
+  v_stub_status        text;
+BEGIN
+  SELECT id INTO v_account_id FROM public.accounts WHERE slug = 'spine-system' LIMIT 1;
+  SELECT id, design_schema, validation_schema
+    INTO v_type_id, v_design_schema, v_validation_schema
+  FROM public.types WHERE kind = 'person' AND slug = 'person' LIMIT 1;
+
+  IF v_account_id IS NULL OR v_type_id IS NULL THEN
+    RAISE WARNING 'handle_new_auth_user: spine-system account or person type not found — skipping';
+    RETURN NEW;
+  END IF;
+
+  SELECT id, status
+    INTO v_stub_id, v_stub_status
+  FROM public.people
+  WHERE email = NEW.email
+    AND status IN ('invited', 'pending')
+    AND auth_uid IS NULL
+  LIMIT 1;
+
+  IF v_stub_id IS NOT NULL THEN
+    UPDATE public.people SET
+      auth_uid   = NEW.id,
+      full_name  = COALESCE(NEW.raw_user_meta_data->>'full_name', full_name, split_part(NEW.email, '@', 1)),
+      status     = CASE WHEN v_stub_status = 'invited' THEN 'active' ELSE 'pending' END,
+      updated_at = now()
+    WHERE id = v_stub_id;
+
+    RETURN NEW;
+  END IF;
+
+  SELECT NOT EXISTS (SELECT 1 FROM public.people LIMIT 1) INTO v_is_first;
+  IF v_is_first THEN
+    SELECT id INTO v_role_id FROM public.roles WHERE slug = 'system_admin' LIMIT 1;
+  END IF;
+
+  INSERT INTO public.people (
+    id,
+    auth_uid,
+    email,
+    full_name,
+    account_id,
+    type_id,
+    role_id,
+    status,
+    is_active,
+    design_schema,
+    validation_schema
+  ) VALUES (
+    NEW.id,
+    NEW.id,
+    NEW.email,
+    COALESCE(NEW.raw_user_meta_data->>'full_name', split_part(NEW.email, '@', 1)),
+    v_account_id,
+    v_type_id,
+    v_role_id,
+    'active',
+    true,
+    v_design_schema,
+    COALESCE(v_validation_schema, '{}'::jsonb)
+  )
+  ON CONFLICT (id) DO NOTHING;
+
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS on_auth_user_created ON auth.users;
+CREATE TRIGGER on_auth_user_created
+  AFTER INSERT ON auth.users
+  FOR EACH ROW EXECUTE FUNCTION public.handle_new_auth_user();

package/.framework/src/pages/auth/RegisterPage.tsx

@@ -262,8 +262,8 @@ export function RegisterPage() {
     const result = await callInvitesApi('check-domain', { email })
     setDomainCheckLoading(false)
 
-    if (result.data?.match) {
-      setDomainMatchAccountId('__matched__')
+    if (result.data?.match && result.data?.account_id) {
+      setDomainMatchAccountId(result.data.account_id)
     }
   }, [email, inviteToken, useType, isFirstUser])
 
@@ -323,23 +323,22 @@ export function RegisterPage() {
 
       const completeRegistrationParams: any = {
         email: resolvedEmail,
-        full_name: fullName,
-        app: effectiveApp,
-        role: effectiveRole,
-        redirect: getPostRegistrationRedirect(regConfig, searchParams, false, effectiveRole),
+        path: 'new_account',
+        role_slug: effectiveRole,
       }
 
       if (useType === 'company') {
-        completeRegistrationParams.account_name = companyName
+        completeRegistrationParams.account_name = companyName || fullName || email.split('@')[0]
+      } else {
+        completeRegistrationParams.account_name = fullName || email.split('@')[0]
       }
 
       if (effectiveAccountStrategy === 'existing' && targetAccount) {
-        completeRegistrationParams.account_id = targetAccount
-        completeRegistrationParams.strategy = 'join_request'
-      } else if (domainMatchAccountId === '__matched__' && domainMatchChoice === 'join') {
-        completeRegistrationParams.strategy = 'join_request'
-      } else {
-        completeRegistrationParams.strategy = 'new_account'
+        completeRegistrationParams.path = 'existing_account'
+        completeRegistrationParams.target_account = targetAccount
+      } else if (domainMatchAccountId && domainMatchChoice === 'join') {
+        completeRegistrationParams.path = 'join_request'
+        completeRegistrationParams.target_account_id = domainMatchAccountId
       }
 
       const result = await callInvitesApi('complete-registration', completeRegistrationParams, 'POST')
@@ -367,7 +366,7 @@ export function RegisterPage() {
   const isInvite = !!inviteToken && !tokenError
   const showPersonalCompanyToggle = !isInvite && !isFirstUser
   const showCompanyName = showPersonalCompanyToggle && useType === 'company'
-  const showDomainMatchChoice = domainMatchAccountId === '__matched__' && !isInvite && !isFirstUser
+  const showDomainMatchChoice = !!domainMatchAccountId && !isInvite && !isFirstUser
 
   if (tokenLoading || isFirstUser === null || (!isFirstUser && !isInvite && !regConfig)) {
     return (

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.132",
+  "version": "0.3.134",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {
@@ -25,6 +25,7 @@
     ".framework/migrations/007_kb_article_list.sql",
     ".framework/migrations/008_items_target.sql",
     ".framework/migrations/009_roles_slug_unique.sql",
+    ".framework/migrations/010_auth_user_trigger.sql",
     ".framework/public/",
     ".framework/scripts/",
     ".framework/seeds/",