@amalgm/automations 0.1.0

package/supabase/migrations/20260802000000_create_automations.sql

@@ -0,0 +1,609 @@
+-- Isolated integration-test schema for this service. The canonical deployment
+-- copy is amalgm-ui/supabase/migrations/20260806210000_create_automations.sql.
+-- Keep their SQL bodies equivalent.
+
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+
+CREATE TABLE amalgm_automations (
+  user_id uuid NOT NULL,
+  id text NOT NULL,
+  target_id text NOT NULL,
+  name text,
+  description text,
+  enabled boolean NOT NULL DEFAULT true,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (user_id, id)
+);
+
+CREATE TABLE amalgm_automation_workflows (
+  user_id uuid NOT NULL,
+  automation_id text NOT NULL,
+  id text NOT NULL,
+  name text,
+  script text NOT NULL,
+  compiled jsonb,
+  allowlist jsonb,
+  limits jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (user_id, automation_id),
+  FOREIGN KEY (user_id, automation_id)
+    REFERENCES amalgm_automations(user_id, id) ON DELETE CASCADE
+);
+
+CREATE TABLE amalgm_automation_triggers (
+  user_id uuid NOT NULL,
+  automation_id text NOT NULL,
+  id text NOT NULL,
+  kind text NOT NULL CHECK (kind IN ('schedule', 'webhook')),
+  enabled boolean NOT NULL DEFAULT true,
+  cron text,
+  timezone text,
+  source text,
+  event text,
+  secret text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (user_id, automation_id, id),
+  FOREIGN KEY (user_id, automation_id)
+    REFERENCES amalgm_automations(user_id, id) ON DELETE CASCADE,
+  CHECK (
+    (kind = 'schedule' AND cron IS NOT NULL AND timezone IS NOT NULL
+      AND source IS NULL AND event IS NULL AND secret IS NULL)
+    OR
+    (kind = 'webhook' AND cron IS NULL AND timezone IS NULL AND source IS NOT NULL
+      AND event IS NOT NULL AND length(secret) >= 16)
+  )
+);
+
+CREATE INDEX amalgm_automation_triggers_by_automation
+  ON amalgm_automation_triggers(user_id, automation_id, kind, created_at, id);
+
+CREATE TABLE amalgm_automation_runs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  user_id uuid NOT NULL,
+  target_id text NOT NULL,
+  automation_id text NOT NULL,
+  trigger_id text NOT NULL,
+  workflow_id text NOT NULL,
+  automation_payload jsonb NOT NULL DEFAULT '{}'::jsonb,
+  input jsonb NOT NULL DEFAULT '{}'::jsonb,
+  status text NOT NULL DEFAULT 'pending'
+    CHECK (status IN ('pending', 'sent', 'running', 'completed', 'failed')),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  sent_at timestamptz,
+  started_at timestamptz,
+  finished_at timestamptz,
+  output jsonb,
+  error text
+);
+
+CREATE INDEX amalgm_automation_runs_history
+  ON amalgm_automation_runs(user_id, automation_id, created_at DESC, id DESC);
+
+ALTER TABLE amalgm_automations ENABLE ROW LEVEL SECURITY;
+ALTER TABLE amalgm_automation_workflows ENABLE ROW LEVEL SECURITY;
+ALTER TABLE amalgm_automation_triggers ENABLE ROW LEVEL SECURITY;
+ALTER TABLE amalgm_automation_runs ENABLE ROW LEVEL SECURITY;
+
+CREATE FUNCTION amalgm_trigger_json(p_trigger amalgm_automation_triggers)
+RETURNS jsonb
+LANGUAGE sql
+IMMUTABLE
+SET search_path = public
+AS $$
+  SELECT jsonb_build_object(
+    'id', p_trigger.id,
+    'automation_id', p_trigger.automation_id,
+    'kind', p_trigger.kind,
+    'enabled', p_trigger.enabled,
+    'cron', p_trigger.cron,
+    'timezone', p_trigger.timezone,
+    'source', p_trigger.source,
+    'event', p_trigger.event,
+    'secret_configured', p_trigger.secret IS NOT NULL,
+    'created_at', p_trigger.created_at,
+    'updated_at', p_trigger.updated_at
+  );
+$$;
+
+CREATE FUNCTION create_amalgm_automation(p_user_id uuid, p_automation jsonb)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automations;
+BEGIN
+  INSERT INTO amalgm_automations (user_id, id, target_id, name, description, enabled)
+  VALUES (
+    p_user_id,
+    p_automation->>'id',
+    p_automation->>'targetId',
+    NULLIF(p_automation->>'name', ''),
+    NULLIF(p_automation->>'description', ''),
+    (p_automation->>'enabled')::boolean
+  )
+  RETURNING * INTO v_row;
+  RETURN to_jsonb(v_row) - 'user_id';
+END;
+$$;
+
+CREATE FUNCTION list_amalgm_automations(
+  p_user_id uuid,
+  p_target_id text,
+  p_enabled boolean,
+  p_limit integer,
+  p_offset integer
+)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  WITH filtered AS (
+    SELECT id, target_id, name, description, enabled, created_at, updated_at
+    FROM amalgm_automations
+    WHERE user_id = p_user_id
+      AND (p_target_id IS NULL OR target_id = p_target_id)
+      AND (p_enabled IS NULL OR enabled = p_enabled)
+  ), page_rows AS (
+    SELECT * FROM filtered ORDER BY created_at DESC, id DESC LIMIT p_limit OFFSET p_offset
+  )
+  SELECT jsonb_build_object(
+    'items', COALESCE((SELECT jsonb_agg(to_jsonb(page_rows)) FROM page_rows), '[]'::jsonb),
+    'total', (SELECT count(*) FROM filtered)
+  );
+$$;
+
+CREATE FUNCTION get_amalgm_automation(p_user_id uuid, p_automation_id text)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT to_jsonb(a) - 'user_id'
+  FROM amalgm_automations a
+  WHERE a.user_id = p_user_id AND a.id = p_automation_id;
+$$;
+
+CREATE FUNCTION update_amalgm_automation(
+  p_user_id uuid,
+  p_automation_id text,
+  p_patch jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automations;
+BEGIN
+  UPDATE amalgm_automations SET
+    target_id = CASE WHEN p_patch ? 'targetId' THEN p_patch->>'targetId' ELSE target_id END,
+    name = CASE WHEN p_patch ? 'name' THEN NULLIF(p_patch->>'name', '') ELSE name END,
+    description = CASE WHEN p_patch ? 'description' THEN NULLIF(p_patch->>'description', '') ELSE description END,
+    enabled = CASE WHEN p_patch ? 'enabled' THEN (p_patch->>'enabled')::boolean ELSE enabled END,
+    updated_at = now()
+  WHERE user_id = p_user_id AND id = p_automation_id
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN to_jsonb(v_row) - 'user_id';
+END;
+$$;
+
+CREATE FUNCTION delete_amalgm_automation(p_user_id uuid, p_automation_id text)
+RETURNS boolean
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+BEGIN
+  DELETE FROM amalgm_automations WHERE user_id = p_user_id AND id = p_automation_id;
+  RETURN FOUND;
+END;
+$$;
+
+CREATE FUNCTION create_amalgm_schedule_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automation_triggers;
+BEGIN
+  INSERT INTO amalgm_automation_triggers (
+    user_id, automation_id, id, kind, enabled, cron, timezone
+  )
+  SELECT p_user_id, p_automation_id, p_trigger->>'id', 'schedule',
+    (p_trigger->>'enabled')::boolean, p_trigger->>'cron', p_trigger->>'timezone'
+  WHERE EXISTS (
+    SELECT 1 FROM amalgm_automations
+    WHERE user_id = p_user_id AND id = p_automation_id
+  )
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN amalgm_trigger_json(v_row);
+END;
+$$;
+
+CREATE FUNCTION list_amalgm_schedule_triggers(
+  p_user_id uuid,
+  p_automation_id text,
+  p_limit integer,
+  p_offset integer
+)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  WITH filtered AS (
+    SELECT * FROM amalgm_automation_triggers
+    WHERE user_id = p_user_id AND automation_id = p_automation_id AND kind = 'schedule'
+  ), page_rows AS (
+    SELECT * FROM filtered ORDER BY created_at DESC, id DESC LIMIT p_limit OFFSET p_offset
+  )
+  SELECT jsonb_build_object(
+    'items', COALESCE((SELECT jsonb_agg(amalgm_trigger_json(ROW(page_rows.*)::amalgm_automation_triggers)) FROM page_rows), '[]'::jsonb),
+    'total', (SELECT count(*) FROM filtered)
+  );
+$$;
+
+CREATE FUNCTION get_amalgm_schedule_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text
+)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT amalgm_trigger_json(t)
+  FROM amalgm_automation_triggers t
+  WHERE t.user_id = p_user_id AND t.automation_id = p_automation_id
+    AND t.id = p_trigger_id AND t.kind = 'schedule';
+$$;
+
+CREATE FUNCTION update_amalgm_schedule_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text,
+  p_patch jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automation_triggers;
+BEGIN
+  UPDATE amalgm_automation_triggers SET
+    cron = CASE WHEN p_patch ? 'cron' THEN p_patch->>'cron' ELSE cron END,
+    timezone = CASE WHEN p_patch ? 'timezone' THEN p_patch->>'timezone' ELSE timezone END,
+    enabled = CASE WHEN p_patch ? 'enabled' THEN (p_patch->>'enabled')::boolean ELSE enabled END,
+    updated_at = now()
+  WHERE user_id = p_user_id AND automation_id = p_automation_id
+    AND id = p_trigger_id AND kind = 'schedule'
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN amalgm_trigger_json(v_row);
+END;
+$$;
+
+CREATE FUNCTION delete_amalgm_schedule_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text
+)
+RETURNS boolean
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+BEGIN
+  DELETE FROM amalgm_automation_triggers
+  WHERE user_id = p_user_id AND automation_id = p_automation_id
+    AND id = p_trigger_id AND kind = 'schedule';
+  RETURN FOUND;
+END;
+$$;
+
+CREATE FUNCTION create_amalgm_webhook_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automation_triggers;
+BEGIN
+  INSERT INTO amalgm_automation_triggers (
+    user_id, automation_id, id, kind, enabled, source, event, secret
+  )
+  SELECT p_user_id, p_automation_id, p_trigger->>'id', 'webhook',
+    (p_trigger->>'enabled')::boolean, p_trigger->>'source', p_trigger->>'event', p_trigger->>'secret'
+  WHERE EXISTS (
+    SELECT 1 FROM amalgm_automations
+    WHERE user_id = p_user_id AND id = p_automation_id
+  )
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN amalgm_trigger_json(v_row);
+END;
+$$;
+
+CREATE FUNCTION list_amalgm_webhook_triggers(
+  p_user_id uuid,
+  p_automation_id text,
+  p_limit integer,
+  p_offset integer
+)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  WITH filtered AS (
+    SELECT * FROM amalgm_automation_triggers
+    WHERE user_id = p_user_id AND automation_id = p_automation_id AND kind = 'webhook'
+  ), page_rows AS (
+    SELECT * FROM filtered ORDER BY created_at DESC, id DESC LIMIT p_limit OFFSET p_offset
+  )
+  SELECT jsonb_build_object(
+    'items', COALESCE((SELECT jsonb_agg(amalgm_trigger_json(ROW(page_rows.*)::amalgm_automation_triggers)) FROM page_rows), '[]'::jsonb),
+    'total', (SELECT count(*) FROM filtered)
+  );
+$$;
+
+CREATE FUNCTION get_amalgm_webhook_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text
+)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT amalgm_trigger_json(t)
+  FROM amalgm_automation_triggers t
+  WHERE t.user_id = p_user_id AND t.automation_id = p_automation_id
+    AND t.id = p_trigger_id AND t.kind = 'webhook';
+$$;
+
+CREATE FUNCTION update_amalgm_webhook_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text,
+  p_patch jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automation_triggers;
+BEGIN
+  UPDATE amalgm_automation_triggers SET
+    source = CASE WHEN p_patch ? 'source' THEN p_patch->>'source' ELSE source END,
+    event = CASE WHEN p_patch ? 'event' THEN p_patch->>'event' ELSE event END,
+    secret = CASE WHEN p_patch ? 'secret' THEN p_patch->>'secret' ELSE secret END,
+    enabled = CASE WHEN p_patch ? 'enabled' THEN (p_patch->>'enabled')::boolean ELSE enabled END,
+    updated_at = now()
+  WHERE user_id = p_user_id AND automation_id = p_automation_id
+    AND id = p_trigger_id AND kind = 'webhook'
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN amalgm_trigger_json(v_row);
+END;
+$$;
+
+CREATE FUNCTION delete_amalgm_webhook_trigger(
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text
+)
+RETURNS boolean
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+BEGIN
+  DELETE FROM amalgm_automation_triggers
+  WHERE user_id = p_user_id AND automation_id = p_automation_id
+    AND id = p_trigger_id AND kind = 'webhook';
+  RETURN FOUND;
+END;
+$$;
+
+CREATE FUNCTION list_amalgm_triggers(p_user_id uuid, p_automation_id text)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT COALESCE(jsonb_agg(amalgm_trigger_json(t) ORDER BY t.created_at DESC, t.id DESC), '[]'::jsonb)
+  FROM amalgm_automation_triggers t
+  WHERE t.user_id = p_user_id AND t.automation_id = p_automation_id;
+$$;
+
+CREATE FUNCTION create_amalgm_workflow(
+  p_user_id uuid,
+  p_automation_id text,
+  p_workflow jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automation_workflows;
+BEGIN
+  INSERT INTO amalgm_automation_workflows (
+    user_id, automation_id, id, name, script, compiled, allowlist, limits
+  )
+  SELECT p_user_id, p_automation_id, p_workflow->>'id',
+    NULLIF(p_workflow->>'name', ''), p_workflow->>'script',
+    p_workflow->'compiled', p_workflow->'allowlist', p_workflow->'limits'
+  WHERE EXISTS (
+    SELECT 1 FROM amalgm_automations
+    WHERE user_id = p_user_id AND id = p_automation_id
+  )
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN to_jsonb(v_row) - 'user_id';
+END;
+$$;
+
+CREATE FUNCTION get_amalgm_workflow(p_user_id uuid, p_automation_id text)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT to_jsonb(w) - 'user_id'
+  FROM amalgm_automation_workflows w
+  WHERE w.user_id = p_user_id AND w.automation_id = p_automation_id;
+$$;
+
+CREATE FUNCTION update_amalgm_workflow(
+  p_user_id uuid,
+  p_automation_id text,
+  p_patch jsonb
+)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_row amalgm_automation_workflows;
+BEGIN
+  UPDATE amalgm_automation_workflows SET
+    name = CASE WHEN p_patch ? 'name' THEN NULLIF(p_patch->>'name', '') ELSE name END,
+    script = CASE WHEN p_patch ? 'script' THEN p_patch->>'script' ELSE script END,
+    compiled = CASE WHEN p_patch ? 'compiled' THEN p_patch->'compiled' ELSE compiled END,
+    allowlist = CASE WHEN p_patch ? 'allowlist' THEN p_patch->'allowlist' ELSE allowlist END,
+    limits = CASE WHEN p_patch ? 'limits' THEN p_patch->'limits' ELSE limits END,
+    updated_at = now()
+  WHERE user_id = p_user_id AND automation_id = p_automation_id
+  RETURNING * INTO v_row;
+  IF NOT FOUND THEN RETURN NULL; END IF;
+  RETURN to_jsonb(v_row) - 'user_id';
+END;
+$$;
+
+CREATE FUNCTION delete_amalgm_workflow(p_user_id uuid, p_automation_id text)
+RETURNS boolean
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+BEGIN
+  DELETE FROM amalgm_automation_workflows
+  WHERE user_id = p_user_id AND automation_id = p_automation_id;
+  RETURN FOUND;
+END;
+$$;
+
+CREATE FUNCTION list_amalgm_runs(
+  p_user_id uuid,
+  p_automation_id text,
+  p_status text,
+  p_limit integer,
+  p_offset integer
+)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  WITH filtered AS (
+    SELECT id, automation_id, trigger_id, workflow_id, target_id, status, input,
+      created_at, sent_at, started_at, finished_at, output, error
+    FROM amalgm_automation_runs
+    WHERE user_id = p_user_id AND automation_id = p_automation_id
+      AND (p_status IS NULL OR status = p_status)
+  ), page_rows AS (
+    SELECT * FROM filtered ORDER BY created_at DESC, id DESC LIMIT p_limit OFFSET p_offset
+  )
+  SELECT jsonb_build_object(
+    'items', COALESCE((SELECT jsonb_agg(to_jsonb(page_rows)) FROM page_rows), '[]'::jsonb),
+    'total', (SELECT count(*) FROM filtered)
+  );
+$$;
+
+CREATE FUNCTION get_amalgm_run(p_user_id uuid, p_automation_id text, p_run_id text)
+RETURNS jsonb
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT to_jsonb(r) - 'user_id' - 'automation_payload'
+  FROM amalgm_automation_runs r
+  WHERE r.user_id = p_user_id AND r.automation_id = p_automation_id AND r.id::text = p_run_id;
+$$;
+
+REVOKE ALL ON FUNCTION amalgm_trigger_json(amalgm_automation_triggers) FROM PUBLIC;
+REVOKE ALL ON FUNCTION create_amalgm_automation(uuid, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION list_amalgm_automations(uuid, text, boolean, integer, integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_amalgm_automation(uuid, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION update_amalgm_automation(uuid, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION delete_amalgm_automation(uuid, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION create_amalgm_schedule_trigger(uuid, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION list_amalgm_schedule_triggers(uuid, text, integer, integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_amalgm_schedule_trigger(uuid, text, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION update_amalgm_schedule_trigger(uuid, text, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION delete_amalgm_schedule_trigger(uuid, text, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION create_amalgm_webhook_trigger(uuid, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION list_amalgm_webhook_triggers(uuid, text, integer, integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_amalgm_webhook_trigger(uuid, text, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION update_amalgm_webhook_trigger(uuid, text, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION delete_amalgm_webhook_trigger(uuid, text, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION list_amalgm_triggers(uuid, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION create_amalgm_workflow(uuid, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_amalgm_workflow(uuid, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION update_amalgm_workflow(uuid, text, jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION delete_amalgm_workflow(uuid, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION list_amalgm_runs(uuid, text, text, integer, integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_amalgm_run(uuid, text, text) FROM PUBLIC;
+
+GRANT EXECUTE ON FUNCTION create_amalgm_automation(uuid, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION list_amalgm_automations(uuid, text, boolean, integer, integer) TO service_role;
+GRANT EXECUTE ON FUNCTION get_amalgm_automation(uuid, text) TO service_role;
+GRANT EXECUTE ON FUNCTION update_amalgm_automation(uuid, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION delete_amalgm_automation(uuid, text) TO service_role;
+GRANT EXECUTE ON FUNCTION create_amalgm_schedule_trigger(uuid, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION list_amalgm_schedule_triggers(uuid, text, integer, integer) TO service_role;
+GRANT EXECUTE ON FUNCTION get_amalgm_schedule_trigger(uuid, text, text) TO service_role;
+GRANT EXECUTE ON FUNCTION update_amalgm_schedule_trigger(uuid, text, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION delete_amalgm_schedule_trigger(uuid, text, text) TO service_role;
+GRANT EXECUTE ON FUNCTION create_amalgm_webhook_trigger(uuid, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION list_amalgm_webhook_triggers(uuid, text, integer, integer) TO service_role;
+GRANT EXECUTE ON FUNCTION get_amalgm_webhook_trigger(uuid, text, text) TO service_role;
+GRANT EXECUTE ON FUNCTION update_amalgm_webhook_trigger(uuid, text, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION delete_amalgm_webhook_trigger(uuid, text, text) TO service_role;
+GRANT EXECUTE ON FUNCTION list_amalgm_triggers(uuid, text) TO service_role;
+GRANT EXECUTE ON FUNCTION create_amalgm_workflow(uuid, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION get_amalgm_workflow(uuid, text) TO service_role;
+GRANT EXECUTE ON FUNCTION update_amalgm_workflow(uuid, text, jsonb) TO service_role;
+GRANT EXECUTE ON FUNCTION delete_amalgm_workflow(uuid, text) TO service_role;
+GRANT EXECUTE ON FUNCTION list_amalgm_runs(uuid, text, text, integer, integer) TO service_role;
+GRANT EXECUTE ON FUNCTION get_amalgm_run(uuid, text, text) TO service_role;