spine-framework 0.3.95 → 0.3.97

package/.framework/cli/commands/install-app.ts

@@ -22,6 +22,7 @@ import { existsSync, readFileSync, mkdirSync, cpSync, writeFileSync } from 'fs'
 import { resolve, dirname, join, basename } from 'path'
 import { fileURLToPath } from 'url'
 import { execSync } from 'child_process'
+import * as readline from 'readline'
 import { createClient } from '@supabase/supabase-js'
 import { runMigrations } from './migrate.js'
 
@@ -388,6 +389,9 @@ async function seedApp(appDir: string, appSlug: string) {
     table: string
     conflict: string
     inject_app_id?: boolean
+    // When true: only patch design_schema.record_permissions on existing types.
+    // The record must have { kind, slug, record_permissions } — no app_id injection.
+    permissions_patch?: boolean
   }
 
   const seedEntries: SeedEntry[] = Array.isArray(manifest.seed)
@@ -399,6 +403,18 @@ async function seedApp(appDir: string, appSlug: string) {
         { file: 'seed/link-types.json',  table: 'link_types', conflict: 'app_id,slug' },
       ]
 
+  // Always append the permissions patch file if it exists, unless already declared
+  const hasPermissionsPatch = seedEntries.some(e => e.permissions_patch)
+  if (!hasPermissionsPatch) {
+    seedEntries.push({
+      file: 'seed/type_permissions.json',
+      table: 'types',
+      conflict: 'kind,slug',
+      inject_app_id: false,
+      permissions_patch: true,
+    })
+  }
+
   for (const entry of seedEntries) {
     const filePath = join(appDir, entry.file)
     if (!existsSync(filePath)) {
@@ -419,6 +435,70 @@ async function seedApp(appDir: string, appSlug: string) {
       continue
     }
 
+    // ── type_permissions.json: targeted record_permissions patch with check-and-choose ──
+    if (entry.permissions_patch) {
+      console.log(`  Patching record_permissions for ${records.length} type(s) from ${entry.file}...`)
+      for (const record of records) {
+        const { kind, slug, record_permissions: newPerms } = record
+        if (!kind || !slug || !newPerms) {
+          console.warn(`    ⚠ Skipping malformed entry (requires kind, slug, record_permissions)`)
+          continue
+        }
+
+        // Fetch the existing type (match on kind+slug regardless of app_id)
+        const { data: existing } = await db
+          .from('types')
+          .select('id, design_schema')
+          .eq('kind', kind)
+          .eq('slug', slug)
+          .maybeSingle()
+
+        if (!existing) {
+          console.log(`    ○ ${kind}/${slug} not found in DB — skipping (install the owning app first)`)
+          continue
+        }
+
+        const existingSchema = (existing.design_schema ?? {}) as Record<string, any>
+        const existingPerms = existingSchema.record_permissions ?? null
+
+        // Deep-equal check
+        if (JSON.stringify(existingPerms) === JSON.stringify(newPerms)) {
+          console.log(`    ✓ ${kind}/${slug} record_permissions unchanged — skipped`)
+          continue
+        }
+
+        // Show diff and prompt
+        console.log(`\n    Type: ${kind}/${slug}`)
+        console.log(`    Existing record_permissions:`)
+        console.log('    ' + JSON.stringify(existingPerms, null, 2).replace(/\n/g, '\n    '))
+        console.log(`    New record_permissions:`)
+        console.log('    ' + JSON.stringify(newPerms, null, 2).replace(/\n/g, '\n    '))
+
+        const choice = await prompt('    Replace? [R]eplace / [K]eep  → ')
+        if (choice.trim().toLowerCase() !== 'r') {
+          console.log(`    ○ Kept existing`)
+          continue
+        }
+
+        // Targeted JSON merge: only update record_permissions key in design_schema
+        const { error: patchErr } = await db
+          .from('types')
+          .update({
+            design_schema: { ...existingSchema, record_permissions: newPerms },
+          })
+          .eq('id', existing.id)
+
+        if (patchErr) {
+          console.warn(`    ⚠ ${kind}/${slug}: ${patchErr.message}`)
+        } else {
+          console.log(`    ✓ ${kind}/${slug} record_permissions updated`)
+        }
+      }
+      console.log(`  ✓ type_permissions patch complete`)
+      continue
+    }
+
+    // ── Standard seed: upsert whole record ────────────────────────────────────
     const injectAppId = entry.inject_app_id !== false // default true
     console.log(`  Seeding ${records.length} record(s) from ${entry.file} → ${entry.table}...`)
 
@@ -437,6 +517,18 @@ async function seedApp(appDir: string, appSlug: string) {
   }
 }
 
+// ─── PROMPT HELPER ──────────────────────────────────────────────────────────
+
+function prompt(question: string): Promise<string> {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout })
+  return new Promise(resolve => {
+    rl.question(question, answer => {
+      rl.close()
+      resolve(answer)
+    })
+  })
+}
+
 // ─── SPINE CONFIG HELPERS ───────────────────────────────────────────────────
 
 interface RegistrationConfig {

package/.framework/functions/invites.ts

@@ -152,7 +152,7 @@ export const validateToken = createHandler(async (_ctx, _body) => {
 
   const { data: person } = await adminDb
     .from('people')
-    .select('id, email, account_id, role_id, status, data, account:accounts(display_name), role:roles(slug, name)')
+    .select('id, email, account_id, role_id, status, data, account:accounts!people_account_id_fkey(display_name), role:roles(slug, name)')
     .filter('data->>invite_token', 'eq', token)
     .in('status', ['invited', 'pending'])
     .single()
@@ -602,7 +602,7 @@ export const listInvites = createHandler(async (ctx, _body) => {
     .select(`
       id, email, full_name, status, created_at, updated_at,
       account_id, role_id,
-      account:accounts(id, slug, display_name),
+      account:accounts!people_account_id_fkey(id, slug, display_name),
       role:roles(id, slug, name),
       data
     `)

package/.framework/seeds/types/funnel_signal_use.json

@@ -87,9 +87,11 @@
       }
     },
     "record_permissions": {
-      "system-admin": ["create", "read", "update", "delete"],
-      "support": ["create", "read", "update"],
-      "member": ["create", "read"]
+      "system_admin": ["create", "read", "update", "delete"],
+      "support_admin": ["create", "read", "update"],
+      "support":       ["create", "read", "update"],
+      "member_admin":  ["create", "read", "update"],
+      "member":        ["create", "read", "update"]
     }
   },
   "validation_schema": {},

package/.framework/seeds/types/spine_instance.json

@@ -98,9 +98,11 @@
       }
     },
     "record_permissions": {
-      "system-admin": ["create", "read", "update", "delete"],
-      "support": ["create", "read", "update"],
-      "member": ["create", "read", "update"]
+      "system_admin": ["create", "read", "update", "delete"],
+      "support_admin": ["create", "read", "update"],
+      "support":       ["create", "read", "update"],
+      "member_admin":  ["create", "read", "update"],
+      "member":        ["create", "read", "update"]
     }
   },
   "validation_schema": {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.95",
+  "version": "0.3.97",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {