spine-framework 0.3.134 → 0.3.136

package/.framework/functions/invites.ts

@@ -137,14 +137,15 @@ function isAdminRole(roleSlug: string | undefined): boolean {
 // CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
-export const checkFirstUser = createHandler(async (_ctx, _body) => {
-  const { count, error } = await adminDb
+export const checkFirstUser = createPublicHandler(async (_ctx, _body) => {
+  const { data, error } = await adminDb
     .from('people')
-    .select('*', { count: 'exact', head: true })
+    .select('id')
+    .limit(1)
 
   if (error) throw new Error('Failed to check first user: ' + error.message)
 
-  return { is_first_user: (count ?? 0) === 0 }
+  return { is_first_user: (data?.length ?? 0) === 0 }
 })
 // CIL[END chunk_id="invites_checkfirstuser_1783968140"]
 // CIL[BEGIN chunk_id="invites_checkdomain_1783968140" type="function" identity="checkDomain" parent="none"]
@@ -161,7 +162,7 @@ export const checkFirstUser = createHandler(async (_ctx, _body) => {
 // CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
-export const checkDomain = createHandler(async (_ctx, _body) => {
+export const checkDomain = createPublicHandler(async (_ctx, _body) => {
   const email = _ctx.query?.email as string | undefined
   if (!email || !email.includes('@')) {
     throw new Error('Valid email is required')
@@ -198,7 +199,7 @@ export const checkDomain = createHandler(async (_ctx, _body) => {
 // CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
 // CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
 // CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
-export const validateToken = createHandler(async (_ctx, _body) => {
+export const validateToken = createPublicHandler(async (_ctx, _body) => {
   const token = _ctx.query?.token as string | undefined
   if (!token) throw new Error('Token is required')
 

package/.framework/migrations/003_core_system_data.sql

@@ -408,6 +408,36 @@ BEGIN
 
   ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
+  -- Seed the runtime account type for the spine-system master account
+  INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+  VALUES (
+    gen_random_uuid(),
+    v_spine_core_app_id,
+    'account',
+    'account',
+    'Account',
+    'Organization or tenant account',
+    '{}'::jsonb,
+    '{}'::jsonb,
+    'pack',
+    true
+  )
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
+
+  -- Seed the spine-system master account
+  INSERT INTO public.accounts (id, slug, display_name, description, data, is_active, design_schema, validation_schema, type_id)
+  SELECT
+    gen_random_uuid(),
+    'spine-system',
+    'Spine System',
+    'Master system account for internal Spine operations',
+    '{}'::jsonb,
+    true,
+    '{}'::jsonb,
+    '{}'::jsonb,
+    (SELECT id FROM public.types WHERE kind = 'account' AND slug = 'account' LIMIT 1)
+  WHERE NOT EXISTS (SELECT 1 FROM public.accounts WHERE slug = 'spine-system');
+
     UPDATE public.accounts 
   SET type_id = (SELECT id FROM public.types WHERE slug = 'account' AND app_id = v_spine_core_app_id LIMIT 1)
   WHERE slug = 'spine-system';

package/.framework/migrations/011_spine_system_account.sql

@@ -0,0 +1,31 @@
+-- Seed the account type and Spine system master account required by the auth trigger and existing-account registration flow
+
+-- Ensure the runtime account type exists
+INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
+SELECT
+  gen_random_uuid(),
+  (SELECT id FROM public.apps WHERE slug = 'spine-core' LIMIT 1),
+  'account',
+  'account',
+  'Account',
+  'Organization or tenant account',
+  '{}'::jsonb,
+  '{}'::jsonb,
+  'pack',
+  true
+WHERE NOT EXISTS (SELECT 1 FROM public.types WHERE kind = 'account' AND slug = 'account')
+ON CONFLICT (app_id, kind, slug) DO NOTHING;
+
+-- Ensure the spine-system master account exists
+INSERT INTO public.accounts (id, slug, display_name, description, data, is_active, design_schema, validation_schema, type_id)
+SELECT
+  gen_random_uuid(),
+  'spine-system',
+  'Spine System',
+  'Master system account for internal Spine operations',
+  '{}'::jsonb,
+  true,
+  '{}'::jsonb,
+  '{}'::jsonb,
+  (SELECT id FROM public.types WHERE kind = 'account' AND slug = 'account' LIMIT 1)
+WHERE NOT EXISTS (SELECT 1 FROM public.accounts WHERE slug = 'spine-system');

package/.framework/src/pages/auth/RegisterPage.tsx

@@ -294,6 +294,7 @@ export function RegisterPage() {
       }
 
       if (isFirstUser) {
+        await refreshUser()
         navigate('/spine-framework/admin', { replace: true })
         return
       }
@@ -353,6 +354,7 @@ export function RegisterPage() {
         return
       }
 
+      await refreshUser()
       const redirectPath = getPostRegistrationRedirect(regConfig, searchParams, false, effectiveRole)
       navigate(redirectPath, { replace: true })
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.134",
+  "version": "0.3.136",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {
@@ -26,6 +26,7 @@
     ".framework/migrations/008_items_target.sql",
     ".framework/migrations/009_roles_slug_unique.sql",
     ".framework/migrations/010_auth_user_trigger.sql",
+    ".framework/migrations/011_spine_system_account.sql",
     ".framework/public/",
     ".framework/scripts/",
     ".framework/seeds/",