spine-framework 0.3.68 → 0.3.70

package/.framework/cli/commands/install-app.ts

@@ -248,6 +248,10 @@ async function seedApp(appDir: string, appSlug: string) {
         is_active: true,
         route_prefix: manifest.route_prefix ?? ('/' + appSlug),
         renderer: manifest.renderer ?? 'custom',
+        // required_roles: full array from manifest (e.g. ["support", "support_admin"])
+        required_roles: manifest.required_roles ?? (manifest.min_role ? [manifest.min_role] : []),
+        // min_role: kept as legacy fallback — first entry of required_roles
+        min_role: manifest.required_roles?.[0] ?? manifest.min_role ?? null,
       },
       { onConflict: 'slug' }
     )

package/.framework/src/components/AppWrapper.tsx

@@ -23,9 +23,14 @@ export function AppWrapper({ app, children }: AppWrapperProps) {
     return <Navigate to="/login" replace />
   }
 
-  // Role gate
-  if (app.min_role) {
-    const hasRole = user.roles?.includes('system_admin') || user.roles?.includes(app.min_role)
+  // Role gate — check required_roles array (preferred) or min_role (fallback)
+  const requiredRoles: string[] = app.required_roles?.length
+    ? app.required_roles
+    : app.min_role ? [app.min_role] : []
+
+  if (requiredRoles.length > 0) {
+    const hasRole = user.roles?.includes('system_admin') ||
+      requiredRoles.some(r => user.roles?.includes(r))
     if (!hasRole) {
       return (
         <div className="min-h-screen flex items-center justify-center bg-slate-50">
@@ -39,7 +44,7 @@ export function AppWrapper({ app, children }: AppWrapperProps) {
             <p className="text-slate-600 mb-6">You don't have permission to access {app.name}.</p>
             <div className="bg-slate-100 rounded-lg p-4 text-left">
               <p className="text-sm text-slate-600 mb-2"><strong>Your roles:</strong> {user.roles?.join(', ') || 'None'}</p>
-              <p className="text-sm text-slate-600"><strong>Required:</strong> {app.min_role}</p>
+              <p className="text-sm text-slate-600"><strong>Required (any):</strong> {requiredRoles.join(', ')}</p>
             </div>
           </div>
         </div>

package/.framework/src/pages/auth/RegisterPage.tsx

@@ -300,10 +300,12 @@ export function RegisterPage() {
       }
 
       // Handle account creation vs existing account assignment
+      // IMPORTANT: use effectiveAccountStrategy (local var), NOT accountStrategy (React state)
+      // React state updates are async — accountStrategy may still hold the previous value here
       let registrationResult
-      console.log('Registration decision:', { accountStrategy, targetAccount, effectiveRole })
+      console.log('Registration decision:', { effectiveAccountStrategy, targetAccount, effectiveRole })
       
-      if (accountStrategy === 'existing' && targetAccount) {
+      if (effectiveAccountStrategy === 'existing' && targetAccount) {
         // Assign to existing account
         console.log('Using existing_account path')
         registrationResult = await callInvitesApi('complete-registration', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.68",
+  "version": "0.3.70",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {