spine-framework 0.3.98 → 0.3.99

package/.framework/cli/commands/install-app.ts

@@ -272,6 +272,8 @@ export function registerInstallAppCommands(program: Command) {
             renderer: manifest.renderer ?? 'custom',
             required_roles: manifest.required_roles ?? (manifest.min_role ? [manifest.min_role] : []),
             min_role: manifest.required_roles?.[0] ?? manifest.min_role ?? null,
+            preview_domain: manifest.preview_domain ?? null,
+            prod_domain: manifest.prod_domain ?? null,
           },
           { onConflict: 'slug' }
         )
@@ -360,6 +362,8 @@ async function seedApp(appDir: string, appSlug: string) {
         required_roles: manifest.required_roles ?? (manifest.min_role ? [manifest.min_role] : []),
         // min_role: kept as legacy fallback — first entry of required_roles
         min_role: manifest.required_roles?.[0] ?? manifest.min_role ?? null,
+        preview_domain: manifest.preview_domain ?? null,
+        prod_domain: manifest.prod_domain ?? null,
       },
       { onConflict: 'slug' }
     )

package/.framework/functions/_shared/app-manifest.ts

@@ -25,6 +25,8 @@ export interface AppManifest {
   description?: string
   version?: string
   required_roles: string[]  // Migrated from min_role (string) to array
+  route_prefix?: string
+  renderer?: 'generic' | 'custom' | 'none'
   routes: string[]
   nav_items: NavItem[]
   features?: string[]
@@ -32,6 +34,8 @@ export interface AppManifest {
   entry_point: string
   is_public?: boolean
   auth_required?: boolean
+  preview_domain?: string
+  prod_domain?: string
 }
 
 export interface NavItem {

package/.framework/functions/_shared/permissions.ts

@@ -434,6 +434,8 @@ class _PermissionEngineInternal {
         route_prefix: record.route_prefix,
         min_role: record.min_role,
         required_roles: record.required_roles,
+        preview_domain: record.preview_domain,
+        prod_domain: record.prod_domain,
         is_active: record.is_active,
         is_system: record.is_system,
         renderer: record.renderer,
@@ -863,6 +865,8 @@ class _PermissionEngineInternal {
         route_prefix: record.route_prefix,
         min_role: record.min_role,
         required_roles: record.required_roles,
+        preview_domain: record.preview_domain,
+        prod_domain: record.prod_domain,
         is_active: record.is_active,
         is_system: record.is_system,
         renderer: record.renderer,

package/.framework/migrations/001_schema.sql

@@ -60,6 +60,8 @@ CREATE TABLE IF NOT EXISTS public.apps (
   account_id uuid, owner_account_id uuid,
   created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
   route_prefix text,
+  preview_domain text,
+  prod_domain text,
   renderer text NOT NULL DEFAULT 'generic',
   CONSTRAINT chk_apps_renderer CHECK (renderer IN ('generic', 'custom', 'none'))
 );

package/.framework/migrations/021_app_domains.sql

@@ -0,0 +1,112 @@
+-- Migration 021: Add preview/prod domain scoping to apps
+--
+-- Allows each app to declare which hostnames it should be served on
+-- in preview and production environments. The frontend uses VITE_ENVIRONMENT
+-- to pick the correct field and filters the routable app list by the
+-- current hostname.
+--
+-- Apps with null preview_domain and prod_domain remain global (backward compatible).
+
+ALTER TABLE public.apps
+  ADD COLUMN IF NOT EXISTS preview_domain text,
+  ADD COLUMN IF NOT EXISTS prod_domain text;
+
+DROP FUNCTION IF EXISTS public.get_account_apps(uuid, boolean, boolean, text[], boolean);
+
+CREATE OR REPLACE FUNCTION public.get_account_apps(
+  account_id        uuid,
+  include_system    boolean  DEFAULT true,
+  include_inactive  boolean  DEFAULT false,
+  user_role_slugs   text[]   DEFAULT NULL,
+  is_system_admin   boolean  DEFAULT false
+)
+RETURNS TABLE(
+  id                uuid,
+  slug              text,
+  name              text,
+  description       text,
+  icon              text,
+  color             text,
+  version           text,
+  app_type          text,
+  source            text,
+  owner_account_id  uuid,
+  is_active         boolean,
+  is_system         boolean,
+  min_role          text,
+  required_roles    jsonb,
+  preview_domain    text,
+  prod_domain       text,
+  config            jsonb,
+  nav_items         jsonb,
+  route_prefix      text,
+  renderer          text,
+  metadata          jsonb,
+  integration_deps  jsonb,
+  created_at        timestamptz
+)
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $$
+BEGIN
+  RETURN QUERY
+  SELECT
+    a.id,
+    a.slug,
+    a.name,
+    a.description,
+    a.icon,
+    a.color,
+    a.version,
+    a.app_type,
+    a.source,
+    a.owner_account_id,
+    a.is_active,
+    a.is_system,
+    a.min_role,
+    a.required_roles,
+    a.preview_domain,
+    a.prod_domain,
+    a.config,
+    a.nav_items,
+    a.route_prefix,
+    a.renderer,
+    a.metadata,
+    a.integration_deps,
+    a.created_at
+  FROM public.apps a
+  WHERE
+    (include_inactive OR a.is_active = true)
+    AND (
+      a.is_system = true
+      OR a.owner_account_id = get_account_apps.account_id
+      OR a.owner_account_id IS NULL
+    )
+    AND (
+      user_role_slugs IS NULL
+      OR is_system_admin
+      OR (
+        (a.required_roles IS NULL OR a.required_roles = '[]'::jsonb)
+        AND a.min_role IS NULL
+      )
+      OR (
+        a.required_roles IS NOT NULL
+        AND a.required_roles != '[]'::jsonb
+        AND EXISTS (
+          SELECT 1
+          FROM jsonb_array_elements_text(a.required_roles) AS rr(role_slug)
+          WHERE rr.role_slug = ANY(user_role_slugs)
+        )
+      )
+      OR (
+        (a.required_roles IS NULL OR a.required_roles = '[]'::jsonb)
+        AND a.min_role IS NOT NULL
+        AND a.min_role = ANY(user_role_slugs)
+      )
+    )
+  ORDER BY
+    a.is_system DESC,
+    a.app_type,
+    a.name;
+END;
+$$;

package/.framework/src/contexts/AppContext.tsx

@@ -73,7 +73,9 @@ interface AppsRegistryProviderProps {
  *
  * Role-based filtering is done server-side by the `get_account_apps` RPC
  * (migration 020). The client trusts the backend response and only filters
- * for routability (has a route_prefix and a renderer).
+ * for routability (has a route_prefix and a renderer) and the current
+ * environment's domain (preview_domain or prod_domain, selected by
+ * `VITE_ENVIRONMENT`).
  *
  * Uses an AbortController to cancel in-flight fetches when dependencies
  * change, preventing interleaved responses from stale requests.
@@ -140,8 +142,17 @@ export function AppsRegistryProvider({ children }: AppsRegistryProviderProps) {
   // yet (effect hasn't fired), treat as loading to prevent 404 flash.
   const effectiveLoading = loading || (!!user && loadedForUserRef.current !== user.id)
 
+  const environment = (import.meta.env.VITE_ENVIRONMENT as string) || 'prod'
+  const currentHost = typeof window !== 'undefined' ? window.location.hostname : ''
+
+  const appMatchesDomain = (app: AppRecord): boolean => {
+    const domain = environment === 'preview' ? app.preview_domain : app.prod_domain
+    if (!domain) return true
+    return currentHost === domain.split(':')[0]
+  }
+
   const routableApps = apps.filter(
-    app => app.route_prefix != null && app.renderer !== 'none'
+    app => app.route_prefix != null && app.renderer !== 'none' && appMatchesDomain(app)
   )
 
   const refetch = useCallback(() => {

package/.framework/src/hooks/useApps.ts

@@ -20,6 +20,8 @@ export interface AppRecord {
   is_system: boolean
   route_prefix: string | null
   renderer: 'generic' | 'custom' | 'none'
+  preview_domain?: string | null
+  prod_domain?: string | null
 }
 
 interface UseAppsResult {
@@ -65,10 +67,20 @@ export function useApps(): UseAppsResult {
 
       const allApps: AppRecord[] = data.data || data || []
 
+      const environment = (import.meta.env.VITE_ENVIRONMENT as string) || 'prod'
+      const currentHost = typeof window !== 'undefined' ? window.location.hostname : ''
+
+      const appMatchesDomain = (app: AppRecord): boolean => {
+        const domain = environment === 'preview' ? app.preview_domain : app.prod_domain
+        if (!domain) return true
+        return currentHost === domain.split(':')[0]
+      }
+
       // Filter by user's roles: include app if user has any of the required_roles,
       // or if app has no role restrictions
       const accessible = allApps.filter(app => {
         if (!app.is_active) return false
+        if (!appMatchesDomain(app)) return false
         
         // Support both new required_roles array and legacy min_role
         const requiredRoles = app.required_roles || (app.min_role ? [app.min_role] : [])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.98",
+  "version": "0.3.99",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {
@@ -27,6 +27,7 @@
     ".framework/migrations/018_apps_required_roles.sql",
     ".framework/migrations/019_triggers_unique_constraint.sql",
     ".framework/migrations/020_get_account_apps_role_filter.sql",
+    ".framework/migrations/021_app_domains.sql",
     ".framework/public/",
     ".framework/scripts/",
     ".framework/seeds/",