spine-framework 0.3.47 → 0.3.49

package/.framework/cli/commands/migrate.ts

@@ -90,10 +90,39 @@ async function migrateCommand(options: MigrateOptions): Promise<void> {
     process.exit(1)
   }
 
+  // Create migration tracking table if it doesn't exist
+  try {
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS _spine_migrations (
+        id SERIAL PRIMARY KEY,
+        filename TEXT UNIQUE NOT NULL,
+        applied_at TIMESTAMPTZ DEFAULT NOW()
+      )
+    `)
+  } catch {
+    // Non-fatal: proceed without tracking
+  }
+
+  // Load already-applied migrations
+  let appliedMigrations = new Set<string>()
+  try {
+    const { rows } = await client.query('SELECT filename FROM _spine_migrations')
+    appliedMigrations = new Set(rows.map((r: { filename: string }) => r.filename))
+  } catch {
+    // Non-fatal: proceed without tracking
+  }
+
   let applied = 0
+  let skipped = 0
   let failed = 0
 
   for (const { name, path } of migrationFiles) {
+    if (appliedMigrations.has(name)) {
+      console.log(`  Skipping ${name} (already applied)`)
+      skipped++
+      continue
+    }
+
     const sql = readFileSync(path, 'utf8')
     process.stdout.write(`  Applying ${name}... `)
 
@@ -103,6 +132,11 @@ async function migrateCommand(options: MigrateOptions): Promise<void> {
       for (const stmt of statements) {
         await client.query(stmt)
       }
+      // Record as applied
+      await client.query(
+        `INSERT INTO _spine_migrations (filename) VALUES ($1) ON CONFLICT (filename) DO NOTHING`,
+        [name]
+      )
       console.log('✓')
       applied++
     } catch (err: any) {
@@ -114,7 +148,7 @@ async function migrateCommand(options: MigrateOptions): Promise<void> {
 
   await client.end()
 
-  console.log(`\n  ${applied} applied, ${failed} failed`)
+  console.log(`\n  ${applied} applied, ${skipped} skipped, ${failed} failed`)
 
   if (failed > 0) {
     console.error('\nSome migrations failed. Check errors above.')

package/.framework/migrations/001_schema.sql

@@ -14,7 +14,7 @@ CREATE EXTENSION IF NOT EXISTS vector;
 -- IDENTITY TABLES (accounts, people)
 -- ============================================
 
-CREATE TABLE public.accounts (
+CREATE TABLE IF NOT EXISTS public.accounts (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   parent_id uuid, type_id uuid NOT NULL, slug text NOT NULL UNIQUE,
   display_name text NOT NULL, description text,
@@ -24,7 +24,7 @@ CREATE TABLE public.accounts (
   app_id uuid, created_by uuid, updated_by uuid
 );
 
-CREATE TABLE public.people (
+CREATE TABLE IF NOT EXISTS public.people (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   auth_uid uuid UNIQUE, email text UNIQUE NOT NULL, full_name text NOT NULL,
   avatar_url text, phone text, status text DEFAULT 'active',
@@ -39,7 +39,7 @@ CREATE TABLE public.people (
 -- TYPES, APPS, ROLES
 -- ============================================
 
-CREATE TABLE public.types (
+CREATE TABLE IF NOT EXISTS public.types (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, kind text NOT NULL, slug text NOT NULL, name text NOT NULL,
   description text, icon text, color text,
@@ -49,7 +49,7 @@ CREATE TABLE public.types (
   UNIQUE(app_id, kind, slug)
 );
 
-CREATE TABLE public.apps (
+CREATE TABLE IF NOT EXISTS public.apps (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   slug text NOT NULL UNIQUE, name text NOT NULL, description text,
   icon text, color text, version text DEFAULT '1.0.0',
@@ -64,7 +64,7 @@ CREATE TABLE public.apps (
   CONSTRAINT chk_apps_renderer CHECK (renderer IN ('generic', 'custom', 'none'))
 );
 
-CREATE TABLE public.roles (
+CREATE TABLE IF NOT EXISTS public.roles (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   slug text NOT NULL, name text NOT NULL, description text,
   permissions jsonb DEFAULT '[]', is_system boolean DEFAULT false,
@@ -78,7 +78,7 @@ CREATE TABLE public.roles (
 -- RUNTIME ENTITIES
 -- ============================================
 
-CREATE TABLE public.items (
+CREATE TABLE IF NOT EXISTS public.items (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id uuid NOT NULL, account_id uuid NOT NULL, app_id uuid,
   title text, description text, status text DEFAULT 'active',
@@ -88,7 +88,7 @@ CREATE TABLE public.items (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.threads (
+CREATE TABLE IF NOT EXISTS public.threads (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id uuid NOT NULL, account_id uuid NOT NULL, app_id uuid,
   title text, target_type text NOT NULL, target_id uuid NOT NULL,
@@ -100,7 +100,7 @@ CREATE TABLE public.threads (
   CONSTRAINT threads_unique_target_visibility UNIQUE (target_type, target_id, visibility)
 );
 
-CREATE TABLE public.messages (
+CREATE TABLE IF NOT EXISTS public.messages (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id uuid NOT NULL, thread_id uuid NOT NULL,
   content text NOT NULL, direction text DEFAULT 'outbound',
@@ -112,7 +112,7 @@ CREATE TABLE public.messages (
   UNIQUE(thread_id, sequence)
 );
 
-CREATE TABLE public.links (
+CREATE TABLE IF NOT EXISTS public.links (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id uuid NOT NULL, account_id uuid NOT NULL, link_type_id uuid,
   source_type text NOT NULL, source_id uuid NOT NULL,
@@ -124,7 +124,7 @@ CREATE TABLE public.links (
   UNIQUE(source_type, source_id, target_type, target_id, link_type_id)
 );
 
-CREATE TABLE public.attachments (
+CREATE TABLE IF NOT EXISTS public.attachments (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id uuid NOT NULL, account_id uuid NOT NULL,
   filename text NOT NULL, file_size integer, mime_type text,
@@ -135,7 +135,7 @@ CREATE TABLE public.attachments (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.watchers (
+CREATE TABLE IF NOT EXISTS public.watchers (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id uuid NOT NULL, account_id uuid,
   target_type text NOT NULL, target_id uuid NOT NULL, person_id uuid NOT NULL,
@@ -150,7 +150,7 @@ CREATE TABLE public.watchers (
 -- ADMIN/AUTOMATION TABLES
 -- ============================================
 
-CREATE TABLE public.link_types (
+CREATE TABLE IF NOT EXISTS public.link_types (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, slug text NOT NULL, name text NOT NULL,
   description text, icon text, color text,
@@ -159,7 +159,7 @@ CREATE TABLE public.link_types (
   UNIQUE(app_id, slug)
 );
 
-CREATE TABLE public.pipelines (
+CREATE TABLE IF NOT EXISTS public.pipelines (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, account_id uuid, name text NOT NULL,
   description text, trigger_type text, config jsonb DEFAULT '{}',
@@ -169,7 +169,7 @@ CREATE TABLE public.pipelines (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.pipeline_executions (
+CREATE TABLE IF NOT EXISTS public.pipeline_executions (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   pipeline_id uuid NOT NULL, account_id uuid NOT NULL,
   status text DEFAULT 'pending', trigger_data jsonb DEFAULT '{}',
@@ -178,7 +178,7 @@ CREATE TABLE public.pipeline_executions (
   created_by uuid, created_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.triggers (
+CREATE TABLE IF NOT EXISTS public.triggers (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, account_id uuid, name text NOT NULL,
   description text, trigger_type text NOT NULL, event_type text,
@@ -189,7 +189,7 @@ CREATE TABLE public.triggers (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.trigger_executions (
+CREATE TABLE IF NOT EXISTS public.trigger_executions (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   trigger_id uuid NOT NULL, status text DEFAULT 'pending',
   triggered_at timestamptz DEFAULT now(), started_at timestamptz,
@@ -198,7 +198,7 @@ CREATE TABLE public.trigger_executions (
   created_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.timers (
+CREATE TABLE IF NOT EXISTS public.timers (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, account_id uuid, name text NOT NULL,
   description text, timer_type text NOT NULL, config jsonb DEFAULT '{}',
@@ -213,7 +213,7 @@ CREATE TABLE public.timers (
 -- SYSTEM TABLES (AI, Integrations, Logs, API Keys)
 -- ============================================
 
-CREATE TABLE public.ai_agents (
+CREATE TABLE IF NOT EXISTS public.ai_agents (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, account_id uuid, name text NOT NULL,
   description text, agent_type text NOT NULL, model_config jsonb DEFAULT '{}',
@@ -224,7 +224,7 @@ CREATE TABLE public.ai_agents (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.embeddings (
+CREATE TABLE IF NOT EXISTS public.embeddings (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   account_id uuid NOT NULL, model_id text NOT NULL, document_id text NOT NULL,
   chunk_index integer NOT NULL, content text NOT NULL, embedding vector(1536),
@@ -232,7 +232,7 @@ CREATE TABLE public.embeddings (
   UNIQUE(model_id, document_id, chunk_index)
 );
 
-CREATE TABLE public.integrations (
+CREATE TABLE IF NOT EXISTS public.integrations (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, account_id uuid, name text NOT NULL,
   description text, integration_type text NOT NULL, provider text,
@@ -243,7 +243,7 @@ CREATE TABLE public.integrations (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.prompt_configs (
+CREATE TABLE IF NOT EXISTS public.prompt_configs (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   app_id uuid, account_id uuid, name text NOT NULL, slug text NOT NULL,
   system_prompt text, context_template text, model text, temperature numeric,
@@ -257,7 +257,7 @@ CREATE TABLE public.prompt_configs (
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.api_keys (
+CREATE TABLE IF NOT EXISTS public.api_keys (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   integration_id uuid, account_id uuid, name text NOT NULL,
   key_value text UNIQUE NOT NULL, key_prefix text NOT NULL,
@@ -269,7 +269,7 @@ CREATE TABLE public.api_keys (
   created_by uuid, created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.api_key_usage_logs (
+CREATE TABLE IF NOT EXISTS public.api_key_usage_logs (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   api_key_id uuid NOT NULL, account_id uuid NOT NULL,
   request_method text, request_path text, request_ip text, user_agent text,
@@ -278,14 +278,14 @@ CREATE TABLE public.api_key_usage_logs (
   created_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.logs (
+CREATE TABLE IF NOT EXISTS public.logs (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   level text NOT NULL, message text NOT NULL, context jsonb DEFAULT '{}',
   source text, source_type text, source_id uuid, person_id uuid, account_id uuid,
   metadata jsonb DEFAULT '{}', created_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.actions (
+CREATE TABLE IF NOT EXISTS public.actions (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   account_id uuid, name text NOT NULL, slug text NOT NULL,
   description text, handler text NOT NULL, handler_module text DEFAULT 'functions',
@@ -296,7 +296,7 @@ CREATE TABLE public.actions (
   retry_count integer DEFAULT 3, created_by uuid, created_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.schedules (
+CREATE TABLE IF NOT EXISTS public.schedules (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   account_id uuid, action_id uuid NOT NULL, name text NOT NULL,
   schedule_type text NOT NULL, cron_expression text,
@@ -306,7 +306,7 @@ CREATE TABLE public.schedules (
   created_by uuid, created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
 );
 
-CREATE TABLE public.schedule_executions (
+CREATE TABLE IF NOT EXISTS public.schedule_executions (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   schedule_id uuid NOT NULL, account_id uuid NOT NULL, machine_principal_id uuid,
   status text DEFAULT 'pending', input_params jsonb DEFAULT '{}',
@@ -318,7 +318,7 @@ CREATE TABLE public.schedule_executions (
 -- TEST TABLES
 -- ============================================
 
-CREATE TABLE public.test_runs (
+CREATE TABLE IF NOT EXISTS public.test_runs (
   id           uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   suite        text NOT NULL,
   status       text NOT NULL,
@@ -333,7 +333,7 @@ CREATE TABLE public.test_runs (
   account_id   uuid REFERENCES public.accounts(id)
 );
 
-CREATE TABLE public.test_results (
+CREATE TABLE IF NOT EXISTS public.test_results (
   id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   run_id      uuid NOT NULL REFERENCES public.test_runs(id) ON DELETE CASCADE,
   suite       text NOT NULL,
@@ -350,7 +350,7 @@ CREATE TABLE public.test_results (
 -- ITEM PROGRESS
 -- ============================================
 
-CREATE TABLE public.item_progress (
+CREATE TABLE IF NOT EXISTS public.item_progress (
   id                uuid PRIMARY KEY DEFAULT gen_random_uuid(),
   type_id           uuid NOT NULL,
   account_id        uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
@@ -376,7 +376,7 @@ CREATE TABLE public.item_progress (
 -- WEBHOOK HANDLERS
 -- ============================================
 
-CREATE TABLE public.webhook_handlers (
+CREATE TABLE IF NOT EXISTS public.webhook_handlers (
   id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
   name VARCHAR(255) NOT NULL UNIQUE,
   function_name VARCHAR(255) NOT NULL,
@@ -394,7 +394,7 @@ CREATE TABLE public.webhook_handlers (
 -- ACCOUNT HIERARCHY (from 005_functions.sql)
 -- ============================================
 
-CREATE TABLE public.account_paths (
+CREATE TABLE IF NOT EXISTS public.account_paths (
   ancestor_id uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
   descendant_id uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
   depth integer NOT NULL,

package/.framework/migrations/002_rls_and_functions.sql

@@ -90,6 +90,7 @@ END;
 $$ LANGUAGE plpgsql;
 
 -- Trigger for account paths
+DROP TRIGGER IF EXISTS account_paths_trigger ON public.accounts;
 CREATE TRIGGER account_paths_trigger
 AFTER INSERT OR UPDATE OR DELETE ON public.accounts
 FOR EACH ROW EXECUTE FUNCTION public.update_account_paths();
@@ -334,155 +335,155 @@ ALTER TABLE public.schedule_executions ADD CONSTRAINT fk_se_machine
 -- ============================================
 
 -- account_paths indexes
-CREATE INDEX idx_account_paths_ancestor ON public.account_paths(ancestor_id);
-CREATE INDEX idx_account_paths_descendant ON public.account_paths(descendant_id);
+CREATE INDEX IF NOT EXISTS idx_account_paths_ancestor ON public.account_paths(ancestor_id);
+CREATE INDEX IF NOT EXISTS idx_account_paths_descendant ON public.account_paths(descendant_id);
 
 -- accounts
-CREATE INDEX idx_accounts_parent_id ON public.accounts(parent_id);
-CREATE INDEX idx_accounts_type_id ON public.accounts(type_id);
-CREATE INDEX idx_accounts_active ON public.accounts(is_active);
+CREATE INDEX IF NOT EXISTS idx_accounts_parent_id ON public.accounts(parent_id);
+CREATE INDEX IF NOT EXISTS idx_accounts_type_id ON public.accounts(type_id);
+CREATE INDEX IF NOT EXISTS idx_accounts_active ON public.accounts(is_active);
 
 -- people
-CREATE INDEX idx_people_account ON public.people(account_id);
-CREATE INDEX idx_people_auth_uid ON public.people(auth_uid);
-CREATE INDEX idx_people_email ON public.people(email);
-CREATE INDEX idx_people_role ON public.people(role_id);
-CREATE INDEX idx_people_active ON public.people(is_active);
+CREATE INDEX IF NOT EXISTS idx_people_account ON public.people(account_id);
+CREATE INDEX IF NOT EXISTS idx_people_auth_uid ON public.people(auth_uid);
+CREATE INDEX IF NOT EXISTS idx_people_email ON public.people(email);
+CREATE INDEX IF NOT EXISTS idx_people_role ON public.people(role_id);
+CREATE INDEX IF NOT EXISTS idx_people_active ON public.people(is_active);
 
 -- types
-CREATE INDEX idx_types_slug ON public.types(slug);
-CREATE INDEX idx_types_kind ON public.types(kind);
+CREATE INDEX IF NOT EXISTS idx_types_slug ON public.types(slug);
+CREATE INDEX IF NOT EXISTS idx_types_kind ON public.types(kind);
 
 -- apps
-CREATE INDEX idx_apps_slug ON public.apps(slug);
-CREATE INDEX idx_apps_owner ON public.apps(owner_account_id);
-CREATE UNIQUE INDEX idx_apps_route_prefix ON public.apps(route_prefix) 
+CREATE INDEX IF NOT EXISTS idx_apps_slug ON public.apps(slug);
+CREATE INDEX IF NOT EXISTS idx_apps_owner ON public.apps(owner_account_id);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_apps_route_prefix ON public.apps(route_prefix) 
   WHERE is_active = true AND route_prefix IS NOT NULL;
 
 -- roles
-CREATE INDEX idx_roles_slug ON public.roles(slug);
+CREATE INDEX IF NOT EXISTS idx_roles_slug ON public.roles(slug);
 
 -- items
-CREATE INDEX idx_items_type ON public.items(type_id);
-CREATE INDEX idx_items_account ON public.items(account_id);
-CREATE INDEX idx_items_active ON public.items(is_active);
-CREATE INDEX idx_items_created_at ON public.items(created_at);
+CREATE INDEX IF NOT EXISTS idx_items_type ON public.items(type_id);
+CREATE INDEX IF NOT EXISTS idx_items_account ON public.items(account_id);
+CREATE INDEX IF NOT EXISTS idx_items_active ON public.items(is_active);
+CREATE INDEX IF NOT EXISTS idx_items_created_at ON public.items(created_at);
 
 -- threads
-CREATE INDEX idx_threads_type ON public.threads(type_id);
-CREATE INDEX idx_threads_account ON public.threads(account_id);
-CREATE INDEX idx_threads_target ON public.threads(target_type, target_id);
-CREATE INDEX idx_threads_active ON public.threads(is_active);
+CREATE INDEX IF NOT EXISTS idx_threads_type ON public.threads(type_id);
+CREATE INDEX IF NOT EXISTS idx_threads_account ON public.threads(account_id);
+CREATE INDEX IF NOT EXISTS idx_threads_target ON public.threads(target_type, target_id);
+CREATE INDEX IF NOT EXISTS idx_threads_active ON public.threads(is_active);
 
 -- messages
-CREATE INDEX idx_messages_thread ON public.messages(thread_id);
-CREATE INDEX idx_messages_type ON public.messages(type_id);
-CREATE INDEX idx_messages_person ON public.messages(person_id);
+CREATE INDEX IF NOT EXISTS idx_messages_thread ON public.messages(thread_id);
+CREATE INDEX IF NOT EXISTS idx_messages_type ON public.messages(type_id);
+CREATE INDEX IF NOT EXISTS idx_messages_person ON public.messages(person_id);
 
 -- links
-CREATE INDEX idx_links_type ON public.links(type_id);
-CREATE INDEX idx_links_account ON public.links(account_id);
-CREATE INDEX idx_links_source ON public.links(source_type, source_id);
-CREATE INDEX idx_links_target ON public.links(target_type, target_id);
+CREATE INDEX IF NOT EXISTS idx_links_type ON public.links(type_id);
+CREATE INDEX IF NOT EXISTS idx_links_account ON public.links(account_id);
+CREATE INDEX IF NOT EXISTS idx_links_source ON public.links(source_type, source_id);
+CREATE INDEX IF NOT EXISTS idx_links_target ON public.links(target_type, target_id);
 
 -- attachments
-CREATE INDEX idx_attachments_type ON public.attachments(type_id);
-CREATE INDEX idx_attachments_account ON public.attachments(account_id);
+CREATE INDEX IF NOT EXISTS idx_attachments_type ON public.attachments(type_id);
+CREATE INDEX IF NOT EXISTS idx_attachments_account ON public.attachments(account_id);
 
 -- watchers
-CREATE INDEX idx_watchers_type ON public.watchers(type_id);
-CREATE INDEX idx_watchers_target ON public.watchers(target_type, target_id);
-CREATE INDEX idx_watchers_person ON public.watchers(person_id);
+CREATE INDEX IF NOT EXISTS idx_watchers_type ON public.watchers(type_id);
+CREATE INDEX IF NOT EXISTS idx_watchers_target ON public.watchers(target_type, target_id);
+CREATE INDEX IF NOT EXISTS idx_watchers_person ON public.watchers(person_id);
 
 -- link_types
-CREATE INDEX idx_link_types_slug ON public.link_types(slug);
+CREATE INDEX IF NOT EXISTS idx_link_types_slug ON public.link_types(slug);
 
 -- pipelines
-CREATE INDEX idx_pipelines_app ON public.pipelines(app_id);
-CREATE INDEX idx_pipelines_account ON public.pipelines(account_id);
+CREATE INDEX IF NOT EXISTS idx_pipelines_app ON public.pipelines(app_id);
+CREATE INDEX IF NOT EXISTS idx_pipelines_account ON public.pipelines(account_id);
 
 -- pipeline_executions
-CREATE INDEX idx_pe_pipeline ON public.pipeline_executions(pipeline_id);
-CREATE INDEX idx_pe_account ON public.pipeline_executions(account_id);
-CREATE INDEX idx_pe_status ON public.pipeline_executions(status);
+CREATE INDEX IF NOT EXISTS idx_pe_pipeline ON public.pipeline_executions(pipeline_id);
+CREATE INDEX IF NOT EXISTS idx_pe_account ON public.pipeline_executions(account_id);
+CREATE INDEX IF NOT EXISTS idx_pe_status ON public.pipeline_executions(status);
 
 -- triggers
-CREATE INDEX idx_triggers_app ON public.triggers(app_id);
-CREATE INDEX idx_triggers_account ON public.triggers(account_id);
-CREATE INDEX idx_triggers_pipeline ON public.triggers(pipeline_id);
+CREATE INDEX IF NOT EXISTS idx_triggers_app ON public.triggers(app_id);
+CREATE INDEX IF NOT EXISTS idx_triggers_account ON public.triggers(account_id);
+CREATE INDEX IF NOT EXISTS idx_triggers_pipeline ON public.triggers(pipeline_id);
 
 -- trigger_executions
-CREATE INDEX idx_te_trigger ON public.trigger_executions(trigger_id);
+CREATE INDEX IF NOT EXISTS idx_te_trigger ON public.trigger_executions(trigger_id);
 
 -- timers
-CREATE INDEX idx_timers_app ON public.timers(app_id);
-CREATE INDEX idx_timers_account ON public.timers(account_id);
-CREATE INDEX idx_timers_pipeline ON public.timers(pipeline_id);
+CREATE INDEX IF NOT EXISTS idx_timers_app ON public.timers(app_id);
+CREATE INDEX IF NOT EXISTS idx_timers_account ON public.timers(account_id);
+CREATE INDEX IF NOT EXISTS idx_timers_pipeline ON public.timers(pipeline_id);
 
 -- ai_agents
-CREATE INDEX idx_ai_agents_app ON public.ai_agents(app_id);
-CREATE INDEX idx_ai_agents_account ON public.ai_agents(account_id);
+CREATE INDEX IF NOT EXISTS idx_ai_agents_app ON public.ai_agents(app_id);
+CREATE INDEX IF NOT EXISTS idx_ai_agents_account ON public.ai_agents(account_id);
 
 -- embeddings
-CREATE INDEX idx_embeddings_account ON public.embeddings(account_id);
-CREATE INDEX idx_embeddings_model_doc ON public.embeddings(model_id, document_id);
+CREATE INDEX IF NOT EXISTS idx_embeddings_account ON public.embeddings(account_id);
+CREATE INDEX IF NOT EXISTS idx_embeddings_model_doc ON public.embeddings(model_id, document_id);
 
 -- integrations
-CREATE INDEX idx_integrations_app ON public.integrations(app_id);
-CREATE INDEX idx_integrations_account ON public.integrations(account_id);
+CREATE INDEX IF NOT EXISTS idx_integrations_app ON public.integrations(app_id);
+CREATE INDEX IF NOT EXISTS idx_integrations_account ON public.integrations(account_id);
 
 -- prompt_configs
-CREATE INDEX idx_prompt_configs_slug ON public.prompt_configs(slug);
-CREATE INDEX idx_prompt_configs_app ON public.prompt_configs(app_id);
-CREATE INDEX idx_prompt_configs_account ON public.prompt_configs(account_id);
+CREATE INDEX IF NOT EXISTS idx_prompt_configs_slug ON public.prompt_configs(slug);
+CREATE INDEX IF NOT EXISTS idx_prompt_configs_app ON public.prompt_configs(app_id);
+CREATE INDEX IF NOT EXISTS idx_prompt_configs_account ON public.prompt_configs(account_id);
 
 -- api_keys
-CREATE INDEX idx_api_keys_integration ON public.api_keys(integration_id);
-CREATE INDEX idx_api_keys_account ON public.api_keys(account_id);
-CREATE INDEX idx_api_keys_key_value ON public.api_keys(key_value);
+CREATE INDEX IF NOT EXISTS idx_api_keys_integration ON public.api_keys(integration_id);
+CREATE INDEX IF NOT EXISTS idx_api_keys_account ON public.api_keys(account_id);
+CREATE INDEX IF NOT EXISTS idx_api_keys_key_value ON public.api_keys(key_value);
 
 -- api_key_usage_logs
-CREATE INDEX idx_akul_api_key ON public.api_key_usage_logs(api_key_id);
-CREATE INDEX idx_akul_account ON public.api_key_usage_logs(account_id);
-CREATE INDEX idx_akul_created ON public.api_key_usage_logs(created_at);
+CREATE INDEX IF NOT EXISTS idx_akul_api_key ON public.api_key_usage_logs(api_key_id);
+CREATE INDEX IF NOT EXISTS idx_akul_account ON public.api_key_usage_logs(account_id);
+CREATE INDEX IF NOT EXISTS idx_akul_created ON public.api_key_usage_logs(created_at);
 
 -- logs
-CREATE INDEX idx_logs_account ON public.logs(account_id);
-CREATE INDEX idx_logs_level ON public.logs(level);
-CREATE INDEX idx_logs_created ON public.logs(created_at);
-CREATE INDEX idx_logs_source ON public.logs(source_type, source_id);
+CREATE INDEX IF NOT EXISTS idx_logs_account ON public.logs(account_id);
+CREATE INDEX IF NOT EXISTS idx_logs_level ON public.logs(level);
+CREATE INDEX IF NOT EXISTS idx_logs_created ON public.logs(created_at);
+CREATE INDEX IF NOT EXISTS idx_logs_source ON public.logs(source_type, source_id);
 
 -- actions
-CREATE INDEX idx_actions_account ON public.actions(account_id);
-CREATE INDEX idx_actions_slug ON public.actions(slug);
+CREATE INDEX IF NOT EXISTS idx_actions_account ON public.actions(account_id);
+CREATE INDEX IF NOT EXISTS idx_actions_slug ON public.actions(slug);
 
 -- schedules
-CREATE INDEX idx_schedules_account ON public.schedules(account_id);
-CREATE INDEX idx_schedules_action ON public.schedules(action_id);
-CREATE INDEX idx_schedules_next_run ON public.schedules(next_run_at);
+CREATE INDEX IF NOT EXISTS idx_schedules_account ON public.schedules(account_id);
+CREATE INDEX IF NOT EXISTS idx_schedules_action ON public.schedules(action_id);
+CREATE INDEX IF NOT EXISTS idx_schedules_next_run ON public.schedules(next_run_at);
 
 -- schedule_executions
-CREATE INDEX idx_se_schedule ON public.schedule_executions(schedule_id);
-CREATE INDEX idx_se_account ON public.schedule_executions(account_id);
+CREATE INDEX IF NOT EXISTS idx_se_schedule ON public.schedule_executions(schedule_id);
+CREATE INDEX IF NOT EXISTS idx_se_account ON public.schedule_executions(account_id);
 
 -- test tables
-CREATE INDEX idx_test_results_run_id ON public.test_results(run_id);
-CREATE INDEX idx_test_runs_suite ON public.test_runs(suite);
-CREATE INDEX idx_test_runs_started_at ON public.test_runs(started_at DESC);
+CREATE INDEX IF NOT EXISTS idx_test_results_run_id ON public.test_results(run_id);
+CREATE INDEX IF NOT EXISTS idx_test_runs_suite ON public.test_runs(suite);
+CREATE INDEX IF NOT EXISTS idx_test_runs_started_at ON public.test_runs(started_at DESC);
 
 -- item_progress
-CREATE INDEX idx_item_progress_person ON public.item_progress(person_id);
-CREATE INDEX idx_item_progress_item ON public.item_progress(item_id);
-CREATE INDEX idx_item_progress_account ON public.item_progress(account_id);
-CREATE INDEX idx_item_progress_type ON public.item_progress(type_id);
-CREATE INDEX idx_item_progress_status ON public.item_progress(status);
-CREATE INDEX idx_item_progress_data_gin ON public.item_progress USING gin(data);
-CREATE INDEX idx_item_progress_active ON public.item_progress(account_id, is_active) WHERE is_active = true;
+CREATE INDEX IF NOT EXISTS idx_item_progress_person ON public.item_progress(person_id);
+CREATE INDEX IF NOT EXISTS idx_item_progress_item ON public.item_progress(item_id);
+CREATE INDEX IF NOT EXISTS idx_item_progress_account ON public.item_progress(account_id);
+CREATE INDEX IF NOT EXISTS idx_item_progress_type ON public.item_progress(type_id);
+CREATE INDEX IF NOT EXISTS idx_item_progress_status ON public.item_progress(status);
+CREATE INDEX IF NOT EXISTS idx_item_progress_data_gin ON public.item_progress USING gin(data);
+CREATE INDEX IF NOT EXISTS idx_item_progress_active ON public.item_progress(account_id, is_active) WHERE is_active = true;
 
 -- webhook_handlers
-CREATE INDEX idx_webhook_handlers_name ON public.webhook_handlers(name) WHERE is_active = true AND is_deleted = false;
-CREATE INDEX idx_webhook_handlers_account ON public.webhook_handlers(account_id) WHERE is_deleted = false;
-CREATE INDEX idx_webhook_handlers_events ON public.webhook_handlers USING GIN(events) WHERE is_active = true;
+CREATE INDEX IF NOT EXISTS idx_webhook_handlers_name ON public.webhook_handlers(name) WHERE is_active = true AND is_deleted = false;
+CREATE INDEX IF NOT EXISTS idx_webhook_handlers_account ON public.webhook_handlers(account_id) WHERE is_deleted = false;
+CREATE INDEX IF NOT EXISTS idx_webhook_handlers_events ON public.webhook_handlers USING GIN(events) WHERE is_active = true;
 
 -- ============================================
 -- ENABLE RLS ON ALL TABLES
@@ -523,31 +524,38 @@ ALTER TABLE public.webhook_handlers ENABLE ROW LEVEL SECURITY;
 -- ============================================
 
 -- accounts
+DROP POLICY IF EXISTS accounts_access ON public.accounts;
 CREATE POLICY accounts_access ON public.accounts FOR ALL
   USING (id IN (SELECT public.get_accessible_accounts(public.current_actor_id()))
          OR public.current_actor_id() IS NULL);
 
 -- people
+DROP POLICY IF EXISTS people_access ON public.people;
 CREATE POLICY people_access ON public.people FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(public.current_actor_id()))
          OR public.current_actor_id() IS NULL);
 
 -- types
+DROP POLICY IF EXISTS types_access ON public.types;
 CREATE POLICY types_access ON public.types FOR ALL
   USING (public.current_actor_id() IS NOT NULL OR true);
 
 -- apps
+DROP POLICY IF EXISTS apps_access ON public.apps;
 CREATE POLICY apps_access ON public.apps FOR ALL
   USING (is_system = true OR owner_account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- roles
+DROP POLICY IF EXISTS roles_read ON public.roles;
 CREATE POLICY roles_read ON public.roles FOR SELECT USING (true);
+DROP POLICY IF EXISTS roles_modify ON public.roles;
 CREATE POLICY roles_modify ON public.roles FOR ALL
   USING ((is_system = true AND public.person_is_system_admin(public.current_actor_id()))
          OR is_system = false OR public.current_actor_id() IS NULL);
 
 -- items (with platform scope visibility from 012_rls_scope.sql)
+DROP POLICY IF EXISTS items_access ON public.items;
 CREATE POLICY items_access ON public.items FOR ALL
   USING (
     account_id IN (SELECT public.get_accessible_accounts(public.current_actor_id()))
@@ -556,6 +564,7 @@ CREATE POLICY items_access ON public.items FOR ALL
   );
 
 -- threads (with platform scope visibility from 012_rls_scope.sql)
+DROP POLICY IF EXISTS threads_access ON public.threads;
 CREATE POLICY threads_access ON public.threads FOR ALL
   USING (
     account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
@@ -564,6 +573,7 @@ CREATE POLICY threads_access ON public.threads FOR ALL
   );
 
 -- messages
+DROP POLICY IF EXISTS messages_access ON public.messages;
 CREATE POLICY messages_access ON public.messages FOR ALL
   USING (EXISTS (SELECT 1 FROM public.threads t
                  WHERE t.id = messages.thread_id
@@ -571,6 +581,7 @@ CREATE POLICY messages_access ON public.messages FOR ALL
          OR auth.uid() IS NULL);
 
 -- links (with platform scope visibility from 012_rls_scope.sql)
+DROP POLICY IF EXISTS links_access ON public.links;
 CREATE POLICY links_access ON public.links FOR ALL
   USING (
     account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
@@ -579,6 +590,7 @@ CREATE POLICY links_access ON public.links FOR ALL
   );
 
 -- attachments (with platform scope visibility from 012_rls_scope.sql)
+DROP POLICY IF EXISTS attachments_access ON public.attachments;
 CREATE POLICY attachments_access ON public.attachments FOR ALL
   USING (
     account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
@@ -587,10 +599,12 @@ CREATE POLICY attachments_access ON public.attachments FOR ALL
   );
 
 -- watchers
+DROP POLICY IF EXISTS watchers_access ON public.watchers;
 CREATE POLICY watchers_access ON public.watchers FOR ALL
   USING (auth.uid() IS NOT NULL OR true);
 
 -- link_types
+DROP POLICY IF EXISTS link_types_access ON public.link_types;
 CREATE POLICY link_types_access ON public.link_types FOR ALL
   USING (app_id IS NULL
          OR EXISTS (SELECT 1 FROM public.apps a WHERE a.id = link_types.app_id
@@ -598,21 +612,25 @@ CREATE POLICY link_types_access ON public.link_types FOR ALL
          OR auth.uid() IS NULL);
 
 -- pipelines
+DROP POLICY IF EXISTS pipelines_access ON public.pipelines;
 CREATE POLICY pipelines_access ON public.pipelines FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- pipeline_executions
+DROP POLICY IF EXISTS pe_access ON public.pipeline_executions;
 CREATE POLICY pe_access ON public.pipeline_executions FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- triggers
+DROP POLICY IF EXISTS triggers_access ON public.triggers;
 CREATE POLICY triggers_access ON public.triggers FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- trigger_executions
+DROP POLICY IF EXISTS te_access ON public.trigger_executions;
 CREATE POLICY te_access ON public.trigger_executions FOR ALL
   USING (EXISTS (SELECT 1 FROM public.triggers t
                  WHERE t.id = trigger_executions.trigger_id
@@ -620,26 +638,31 @@ CREATE POLICY te_access ON public.trigger_executions FOR ALL
          OR auth.uid() IS NULL);
 
 -- timers
+DROP POLICY IF EXISTS timers_access ON public.timers;
 CREATE POLICY timers_access ON public.timers FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- ai_agents
+DROP POLICY IF EXISTS ai_agents_access ON public.ai_agents;
 CREATE POLICY ai_agents_access ON public.ai_agents FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- embeddings
+DROP POLICY IF EXISTS embeddings_access ON public.embeddings;
 CREATE POLICY embeddings_access ON public.embeddings FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- integrations
+DROP POLICY IF EXISTS integrations_access ON public.integrations;
 CREATE POLICY integrations_access ON public.integrations FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- prompt_configs
+DROP POLICY IF EXISTS prompt_configs_access ON public.prompt_configs;
 CREATE POLICY prompt_configs_access ON public.prompt_configs FOR ALL
   USING ((app_id IS NULL OR EXISTS (SELECT 1 FROM public.apps a
           WHERE a.id = prompt_configs.app_id
@@ -647,36 +670,43 @@ CREATE POLICY prompt_configs_access ON public.prompt_configs FOR ALL
          OR auth.uid() IS NULL);
 
 -- api_keys
+DROP POLICY IF EXISTS api_keys_access ON public.api_keys;
 CREATE POLICY api_keys_access ON public.api_keys FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR id = auth.uid() OR auth.uid() IS NULL);
 
 -- api_key_usage_logs
+DROP POLICY IF EXISTS akul_access ON public.api_key_usage_logs;
 CREATE POLICY akul_access ON public.api_key_usage_logs FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- logs
+DROP POLICY IF EXISTS logs_access ON public.logs;
 CREATE POLICY logs_access ON public.logs FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- actions
+DROP POLICY IF EXISTS actions_access ON public.actions;
 CREATE POLICY actions_access ON public.actions FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- schedules
+DROP POLICY IF EXISTS schedules_access ON public.schedules;
 CREATE POLICY schedules_access ON public.schedules FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- schedule_executions
+DROP POLICY IF EXISTS se_access ON public.schedule_executions;
 CREATE POLICY se_access ON public.schedule_executions FOR ALL
   USING (account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
          OR auth.uid() IS NULL);
 
 -- item_progress
+DROP POLICY IF EXISTS item_progress_access ON public.item_progress;
 CREATE POLICY item_progress_access ON public.item_progress FOR ALL
   USING (
     account_id IN (SELECT public.get_accessible_accounts(auth.uid()))
@@ -684,6 +714,7 @@ CREATE POLICY item_progress_access ON public.item_progress FOR ALL
   );
 
 -- webhook_handlers
+DROP POLICY IF EXISTS webhook_handlers_system_admin ON public.webhook_handlers;
 CREATE POLICY webhook_handlers_system_admin ON public.webhook_handlers
   FOR ALL
   TO authenticated
@@ -694,6 +725,7 @@ CREATE POLICY webhook_handlers_system_admin ON public.webhook_handlers
     (SELECT raw_user_meta_data->>'role' FROM auth.users WHERE id = auth.uid()) = 'system_admin'
   );
 
+DROP POLICY IF EXISTS webhook_handlers_service_role ON public.webhook_handlers;
 CREATE POLICY webhook_handlers_service_role ON public.webhook_handlers
   FOR ALL
   TO service_role

package/.framework/migrations/003_system_data.sql

@@ -18,7 +18,8 @@ VALUES (
   true,
   NULL,
   NULL
-);
+)
+ON CONFLICT (app_id, slug) DO NOTHING;
 
 -- NOTE: System account inserted after types are seeded (section 5) to satisfy FK constraint.
 
@@ -39,7 +40,8 @@ VALUES (
   true,
   'none',
   NULL
-);
+)
+ON CONFLICT (slug) DO NOTHING;
 
 -- ============================================
 -- 4. ADMIN APP
@@ -127,6 +129,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 2. MASTER SYSTEM ACCOUNT (inserted here to satisfy FK on type_id)
   INSERT INTO public.accounts (id, slug, display_name, description, data, is_active, design_schema, validation_schema, type_id)
@@ -187,6 +190,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 5.3 items type
   INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
@@ -229,6 +233,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 5.4 threads type
   INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
@@ -273,6 +278,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 5.5 messages type
   INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
@@ -316,6 +322,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 5.6 links type
   INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
@@ -359,6 +366,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 5.7 attachments type
   INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
@@ -403,6 +411,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- 5.8 watchers type
   INSERT INTO public.types (id, app_id, kind, slug, name, description, design_schema, validation_schema, ownership, is_active)
@@ -447,6 +456,7 @@ BEGIN
     'pack',
     true
   );
+  ON CONFLICT (app_id, kind, slug) DO NOTHING;
 
   -- Update the spine-system account with the actual accounts type_id
   UPDATE public.accounts 

package/.framework/migrations/006_fix_current_actor_id.sql

@@ -0,0 +1,21 @@
+-- Patch: fix uuid = text operator error in current_actor_id()
+-- The previous version cast v_auth_id to text before comparing with auth_uid (uuid),
+-- which causes PostgreSQL error 42883. This re-creates the function with matching types.
+
+CREATE OR REPLACE FUNCTION public.current_actor_id()
+RETURNS uuid AS $$
+DECLARE
+  v_auth_id UUID;
+  v_person_id UUID;
+BEGIN
+  v_auth_id := auth.uid();
+
+  -- Look up internal person ID from auth_uid
+  SELECT p.id INTO v_person_id
+  FROM public.people p
+  WHERE p.auth_uid = v_auth_id AND p.is_active = true
+  LIMIT 1;
+
+  RETURN v_person_id;
+END;
+$$ LANGUAGE plpgsql SECURITY DEFINER STABLE;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.47",
+  "version": "0.3.49",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {
@@ -20,6 +20,7 @@
     ".framework/migrations/003_system_data.sql",
     ".framework/migrations/004_enhancements.sql",
     ".framework/migrations/005_auth_user_trigger.sql",
+    ".framework/migrations/006_fix_current_actor_id.sql",
     ".framework/public/",
     ".framework/scripts/",
     ".framework/seeds/",