@fayz-ai/db 0.1.1 → 0.8.0

package/migrations/004_archetypes.sql

@@ -0,0 +1,343 @@
+-- ============================================================================
+-- core archetype tables (public schema)
+-- Shared base entities that project-specific tables extend via FK
+-- ============================================================================
+
+-- ---------------------------------------------------------------------------
+-- 1. people — any human entity (staff, customer, supplier, professional)
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.people (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  kind text NOT NULL,
+  name text NOT NULL,
+  email text,
+  phone text,
+  document_number text,
+  avatar_url text,
+  date_of_birth date,
+  address text,
+  city text,
+  state text,
+  country text DEFAULT 'BR',
+  postal_code text,
+  tags text[] DEFAULT '{}',
+  is_active boolean DEFAULT true,
+  notes text,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS people_tenant_kind ON public.people(tenant_id, kind);
+DROP TRIGGER IF EXISTS people_updated_at ON public.people;
+CREATE TRIGGER people_updated_at BEFORE UPDATE ON public.people
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 2. categories — generic taxonomy (species, menu categories, regions)
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.categories (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  kind text NOT NULL,
+  name text NOT NULL,
+  slug text,
+  parent_id uuid REFERENCES public.categories(id) ON DELETE SET NULL,
+  icon text,
+  color text,
+  sort_order integer DEFAULT 0,
+  is_active boolean DEFAULT true,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS categories_tenant_kind ON public.categories(tenant_id, kind);
+DROP TRIGGER IF EXISTS categories_updated_at ON public.categories;
+CREATE TRIGGER categories_updated_at BEFORE UPDATE ON public.categories
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 3. products — physical/trackable items (menu items, equipment, ingredients)
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.products (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  category_id uuid REFERENCES public.categories(id) ON DELETE SET NULL,
+  name text NOT NULL,
+  description text,
+  sku text,
+  price numeric,
+  cost numeric,
+  currency text DEFAULT 'BRL',
+  unit text,
+  image_url text,
+  stock numeric,
+  min_stock numeric,
+  status text DEFAULT 'active',
+  is_active boolean DEFAULT true,
+  tags text[] DEFAULT '{}',
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS products_tenant ON public.products(tenant_id);
+DROP TRIGGER IF EXISTS products_updated_at ON public.products;
+CREATE TRIGGER products_updated_at BEFORE UPDATE ON public.products
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 4. services — intangible offerings (exam types, consultations)
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.services (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  category_id uuid REFERENCES public.categories(id) ON DELETE SET NULL,
+  name text NOT NULL,
+  description text,
+  price numeric,
+  cost numeric,
+  currency text DEFAULT 'BRL',
+  duration_minutes integer,
+  image_url text,
+  status text DEFAULT 'active',
+  is_active boolean DEFAULT true,
+  tags text[] DEFAULT '{}',
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS services_tenant ON public.services(tenant_id);
+DROP TRIGGER IF EXISTS services_updated_at ON public.services;
+CREATE TRIGGER services_updated_at BEFORE UPDATE ON public.services
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 5. orders — business orders/jobs
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.orders (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  kind text NOT NULL,
+  reference_number text,
+  status text DEFAULT 'draft',
+  party_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  location_id uuid REFERENCES public.locations(id) ON DELETE SET NULL,
+  subtotal numeric DEFAULT 0,
+  discount numeric DEFAULT 0,
+  tax numeric DEFAULT 0,
+  total numeric DEFAULT 0,
+  currency text DEFAULT 'BRL',
+  due_at timestamptz,
+  completed_at timestamptz,
+  notes text,
+  tags text[] DEFAULT '{}',
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS orders_tenant_kind ON public.orders(tenant_id, kind);
+CREATE INDEX IF NOT EXISTS orders_status ON public.orders(tenant_id, status);
+DROP TRIGGER IF EXISTS orders_updated_at ON public.orders;
+CREATE TRIGGER orders_updated_at BEFORE UPDATE ON public.orders
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 6. order_items — line items for orders
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.order_items (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  order_id uuid NOT NULL REFERENCES public.orders(id) ON DELETE CASCADE,
+  product_id uuid REFERENCES public.products(id) ON DELETE SET NULL,
+  service_id uuid REFERENCES public.services(id) ON DELETE SET NULL,
+  name text NOT NULL,
+  description text,
+  quantity numeric DEFAULT 1,
+  unit_price numeric DEFAULT 0,
+  discount numeric DEFAULT 0,
+  total numeric DEFAULT 0,
+  sort_order integer DEFAULT 0,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS order_items_order ON public.order_items(order_id);
+
+-- ---------------------------------------------------------------------------
+-- 7. transactions — financial movements (payments, refunds, expenses)
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.transactions (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  kind text NOT NULL,
+  order_id uuid REFERENCES public.orders(id) ON DELETE SET NULL,
+  party_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  amount numeric NOT NULL,
+  currency text DEFAULT 'BRL',
+  payment_method text,
+  reference text,
+  status text DEFAULT 'completed',
+  transacted_at timestamptz DEFAULT now(),
+  notes text,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS transactions_tenant_kind ON public.transactions(tenant_id, kind);
+DROP TRIGGER IF EXISTS transactions_updated_at ON public.transactions;
+CREATE TRIGGER transactions_updated_at BEFORE UPDATE ON public.transactions
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 8. appointments — reservations/appointments
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.appointments (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  kind text NOT NULL,
+  party_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  location_id uuid REFERENCES public.locations(id) ON DELETE SET NULL,
+  order_id uuid REFERENCES public.orders(id) ON DELETE SET NULL,
+  starts_at timestamptz NOT NULL,
+  ends_at timestamptz,
+  status text DEFAULT 'pending',
+  notes text,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS appointments_tenant_kind ON public.appointments(tenant_id, kind);
+CREATE INDEX IF NOT EXISTS appointments_starts ON public.appointments(tenant_id, starts_at);
+DROP TRIGGER IF EXISTS appointments_updated_at ON public.appointments;
+CREATE TRIGGER appointments_updated_at BEFORE UPDATE ON public.appointments
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ---------------------------------------------------------------------------
+-- 9. appointment_items — services within an appointment
+--    (booking_id column name preserved for parity with converted pools —
+--     the in-place converter renames the table, not the FK column)
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.appointment_items (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  booking_id uuid NOT NULL REFERENCES public.appointments(id) ON DELETE CASCADE,
+  service_id uuid REFERENCES public.services(id) ON DELETE SET NULL,
+  assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  name text NOT NULL,
+  duration_minutes integer,
+  price numeric DEFAULT 0,
+  sort_order integer DEFAULT 0,
+  notes text,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS appointment_items_booking ON public.appointment_items(booking_id);
+
+-- ---------------------------------------------------------------------------
+-- 10. schedules — recurring availability/shifts
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS public.schedules (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  kind text NOT NULL,
+  assignee_id uuid REFERENCES public.people(id) ON DELETE CASCADE,
+  location_id uuid REFERENCES public.locations(id) ON DELETE SET NULL,
+  day_of_week smallint,
+  specific_date date,
+  starts_at time NOT NULL,
+  ends_at time NOT NULL,
+  is_active boolean DEFAULT true,
+  metadata jsonb DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS schedules_tenant_kind ON public.schedules(tenant_id, kind);
+CREATE INDEX IF NOT EXISTS schedules_assignee ON public.schedules(assignee_id, day_of_week);
+DROP TRIGGER IF EXISTS schedules_updated_at ON public.schedules;
+CREATE TRIGGER schedules_updated_at BEFORE UPDATE ON public.schedules
+  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+-- ============================================================================
+-- RLS policies — tenant isolation for all archetype tables
+-- ============================================================================
+
+DO $$
+DECLARE
+  tbl text;
+BEGIN
+  FOREACH tbl IN ARRAY ARRAY[
+    'people', 'categories', 'products', 'services',
+    'orders', 'transactions', 'appointments', 'schedules'
+  ]
+  LOOP
+    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', tbl);
+    -- Drop first so a replay on an already-provisioned pool no-ops cleanly.
+    EXECUTE format('DROP POLICY IF EXISTS "%s_select" ON public.%I', tbl, tbl);
+    EXECUTE format('DROP POLICY IF EXISTS "%s_insert" ON public.%I', tbl, tbl);
+    EXECUTE format('DROP POLICY IF EXISTS "%s_update" ON public.%I', tbl, tbl);
+    EXECUTE format('DROP POLICY IF EXISTS "%s_delete" ON public.%I', tbl, tbl);
+    EXECUTE format(
+      'CREATE POLICY "%s_select" ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
+      tbl, tbl
+    );
+    EXECUTE format(
+      'CREATE POLICY "%s_insert" ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
+      tbl, tbl
+    );
+    EXECUTE format(
+      'CREATE POLICY "%s_update" ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
+      tbl, tbl
+    );
+    EXECUTE format(
+      'CREATE POLICY "%s_delete" ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
+      tbl, tbl
+    );
+  END LOOP;
+
+  -- Child tables (order_items, appointment_items) — RLS via parent FK
+  FOREACH tbl IN ARRAY ARRAY['order_items', 'appointment_items']
+  LOOP
+    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', tbl);
+  END LOOP;
+END $$;
+
+-- order_items: access via parent order's tenant
+DROP POLICY IF EXISTS "order_items_select" ON public.order_items;
+CREATE POLICY "order_items_select" ON public.order_items FOR SELECT TO authenticated
+  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+DROP POLICY IF EXISTS "order_items_insert" ON public.order_items;
+CREATE POLICY "order_items_insert" ON public.order_items FOR INSERT TO authenticated
+  WITH CHECK (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+DROP POLICY IF EXISTS "order_items_update" ON public.order_items;
+CREATE POLICY "order_items_update" ON public.order_items FOR UPDATE TO authenticated
+  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+DROP POLICY IF EXISTS "order_items_delete" ON public.order_items;
+CREATE POLICY "order_items_delete" ON public.order_items FOR DELETE TO authenticated
+  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+
+-- appointment_items: access via parent appointment's tenant
+DROP POLICY IF EXISTS "appointment_items_select" ON public.appointment_items;
+CREATE POLICY "appointment_items_select" ON public.appointment_items FOR SELECT TO authenticated
+  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+DROP POLICY IF EXISTS "appointment_items_insert" ON public.appointment_items;
+CREATE POLICY "appointment_items_insert" ON public.appointment_items FOR INSERT TO authenticated
+  WITH CHECK (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+DROP POLICY IF EXISTS "appointment_items_update" ON public.appointment_items;
+CREATE POLICY "appointment_items_update" ON public.appointment_items FOR UPDATE TO authenticated
+  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+DROP POLICY IF EXISTS "appointment_items_delete" ON public.appointment_items;
+CREATE POLICY "appointment_items_delete" ON public.appointment_items FOR DELETE TO authenticated
+  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
+
+-- Grant access to archetype tables
+GRANT ALL ON ALL TABLES IN SCHEMA public TO authenticated, service_role;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;

package/migrations/005_locations_archetype.sql

@@ -0,0 +1,18 @@
+-- Bring public.locations in line with other archetype tables
+ALTER TABLE public.locations
+  ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'branch',
+  ADD COLUMN IF NOT EXISTS email text,
+  ADD COLUMN IF NOT EXISTS postal_code text,
+  ADD COLUMN IF NOT EXISTS tags text[] DEFAULT '{}',
+  ADD COLUMN IF NOT EXISTS notes text,
+  ADD COLUMN IF NOT EXISTS metadata jsonb DEFAULT '{}';
+
+-- Migrate settings → metadata for existing rows (if settings column still exists)
+DO $$ BEGIN
+  IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'locations' AND column_name = 'settings') THEN
+    UPDATE public.locations SET metadata = settings WHERE metadata = '{}' AND settings != '{}';
+    ALTER TABLE public.locations DROP COLUMN settings;
+  END IF;
+END $$;
+
+CREATE INDEX IF NOT EXISTS locations_tenant_kind ON public.locations(tenant_id, kind);

package/migrations/006_archetype_rls.sql

@@ -0,0 +1,74 @@
+-- Fix archetype RLS policies to use SECURITY DEFINER function
+-- The raw subquery on tenant_members fails due to recursive RLS
+
+-- Ensure the SECURITY DEFINER helper exists (bypasses RLS)
+CREATE OR REPLACE FUNCTION public.user_tenant_ids()
+RETURNS SETOF uuid
+LANGUAGE sql STABLE SECURITY DEFINER AS $$
+  SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid();
+$$;
+
+-- Drop and recreate all archetype table policies using the SECURITY DEFINER function
+DO $$
+DECLARE
+  tbl text;
+BEGIN
+  FOREACH tbl IN ARRAY ARRAY[
+    'people', 'categories', 'products', 'services',
+    'orders', 'transactions', 'appointments', 'schedules'
+  ]
+  LOOP
+    -- Drop old policies
+    EXECUTE format('DROP POLICY IF EXISTS "%s_select" ON public.%I', tbl, tbl);
+    EXECUTE format('DROP POLICY IF EXISTS "%s_insert" ON public.%I', tbl, tbl);
+    EXECUTE format('DROP POLICY IF EXISTS "%s_update" ON public.%I', tbl, tbl);
+    EXECUTE format('DROP POLICY IF EXISTS "%s_delete" ON public.%I', tbl, tbl);
+
+    -- Create new policies using SECURITY DEFINER function
+    EXECUTE format(
+      'CREATE POLICY "%s_select" ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))',
+      tbl, tbl
+    );
+    EXECUTE format(
+      'CREATE POLICY "%s_insert" ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))',
+      tbl, tbl
+    );
+    EXECUTE format(
+      'CREATE POLICY "%s_update" ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))',
+      tbl, tbl
+    );
+    EXECUTE format(
+      'CREATE POLICY "%s_delete" ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))',
+      tbl, tbl
+    );
+  END LOOP;
+END $$;
+
+-- Fix child table policies too
+DROP POLICY IF EXISTS "order_items_select" ON public.order_items;
+DROP POLICY IF EXISTS "order_items_insert" ON public.order_items;
+DROP POLICY IF EXISTS "order_items_update" ON public.order_items;
+DROP POLICY IF EXISTS "order_items_delete" ON public.order_items;
+
+CREATE POLICY "order_items_select" ON public.order_items FOR SELECT TO authenticated
+  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+CREATE POLICY "order_items_insert" ON public.order_items FOR INSERT TO authenticated
+  WITH CHECK (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+CREATE POLICY "order_items_update" ON public.order_items FOR UPDATE TO authenticated
+  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+CREATE POLICY "order_items_delete" ON public.order_items FOR DELETE TO authenticated
+  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+
+DROP POLICY IF EXISTS "appointment_items_select" ON public.appointment_items;
+DROP POLICY IF EXISTS "appointment_items_insert" ON public.appointment_items;
+DROP POLICY IF EXISTS "appointment_items_update" ON public.appointment_items;
+DROP POLICY IF EXISTS "appointment_items_delete" ON public.appointment_items;
+
+CREATE POLICY "appointment_items_select" ON public.appointment_items FOR SELECT TO authenticated
+  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+CREATE POLICY "appointment_items_insert" ON public.appointment_items FOR INSERT TO authenticated
+  WITH CHECK (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+CREATE POLICY "appointment_items_update" ON public.appointment_items FOR UPDATE TO authenticated
+  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));
+CREATE POLICY "appointment_items_delete" ON public.appointment_items FOR DELETE TO authenticated
+  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));

package/migrations/007_archetype_grants.sql

@@ -0,0 +1,4 @@
+-- Grant access to archetype tables created in migration 004
+-- The original GRANT ALL ON ALL TABLES only covered tables that existed at that time
+GRANT ALL ON ALL TABLES IN SCHEMA public TO authenticated, service_role;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;

package/migrations/008_grants.sql

@@ -0,0 +1,5 @@
+-- Ensure all roles have access to the public schema
+GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role;
+GRANT ALL ON ALL TABLES IN SCHEMA public TO authenticated, service_role;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;
+GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA public TO anon, authenticated, service_role;

package/migrations/009_anon_hardening.sql

@@ -0,0 +1,19 @@
+-- ============================================================================
+-- 009: anon hardening — close 008's blanket grants for the anon role.
+--
+-- 008_grants.sql grants SELECT on all tables and EXECUTE on all functions to
+-- anon. RLS (policies are TO authenticated) already returns zero rows for
+-- table reads, but EXECUTE on SECURITY DEFINER functions like
+-- create_tenant_with_owner is a real abuse surface on projects that serve
+-- public (anon-key) pages. Revoke everything; anon-facing surfaces must grant
+-- themselves explicitly (e.g. plugin-agenda's public booking RPCs/views).
+--
+-- Apply AFTER 008 and BEFORE plugin migrations that grant anon access.
+-- ============================================================================
+
+REVOKE EXECUTE ON ALL FUNCTIONS IN SCHEMA public FROM anon;
+
+REVOKE SELECT ON ALL TABLES IN SCHEMA public FROM anon;
+
+-- Future objects: don't default-grant anon anything.
+ALTER DEFAULT PRIVILEGES IN SCHEMA public REVOKE EXECUTE ON FUNCTIONS FROM anon;

package/migrations/010_migration_ledger.sql

@@ -0,0 +1,30 @@
+-- ============================================================================
+-- 010_migration_ledger.sql — per-pool applied-migration ledger.
+--
+-- The Runner v2 executor records every applied SQL file here (plugin_id +
+-- file_name + checksum) so re-applies are detected and checksum drift on an
+-- already-applied file is a HARD STOP.
+--
+-- service_role only: no anon/authenticated grants, RLS enabled with NO
+-- policies, so PostgREST (anon/authenticated) is deny-all. Only the service
+-- role (which bypasses RLS) — i.e. the runner — can read/write it.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS public.fayz_migration_ledger (
+  id bigserial PRIMARY KEY,
+  plugin_id text NOT NULL,
+  file_name text NOT NULL,
+  checksum text NOT NULL,
+  plugin_version text,
+  applied_at timestamptz NOT NULL DEFAULT now(),
+  applied_by text,
+  UNIQUE(plugin_id, file_name)
+);
+
+ALTER TABLE public.fayz_migration_ledger ENABLE ROW LEVEL SECURITY;
+
+-- Deny-all through PostgREST: revoke any inherited grants, grant to nobody but
+-- service_role (which bypasses RLS anyway). No policies = no anon/authenticated access.
+REVOKE ALL ON public.fayz_migration_ledger FROM anon, authenticated;
+GRANT ALL ON public.fayz_migration_ledger TO service_role;
+GRANT USAGE, SELECT ON SEQUENCE public.fayz_migration_ledger_id_seq TO service_role;

package/migrations/011_anon_write_revoke.sql

@@ -0,0 +1,12 @@
+-- 009 revoked anon SELECT/EXECUTE but Supabase default privileges also hand
+-- anon INSERT/UPDATE/DELETE/... on every table created by postgres. RLS blocks
+-- those writes today; make the grant layer agree and stop future tables from
+-- being born writable-by-anon.
+
+REVOKE INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER
+  ON ALL TABLES IN SCHEMA public FROM anon;
+
+ALTER DEFAULT PRIVILEGES IN SCHEMA public
+  REVOKE INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER ON TABLES FROM anon;
+
+ALTER DEFAULT PRIVILEGES IN SCHEMA public REVOKE SELECT ON TABLES FROM anon;

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "@fayz-ai/db",
-  "version": "0.1.1",
+  "fayz": {
+    "status": "beta"
+  },
+  "version": "0.8.0",
   "description": "Fayz SDK database layer — Drizzle schema primitives, spine references, and migration helpers shared across plugins.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -16,7 +19,8 @@
   },
   "files": [
     "dist",
-    "src"
+    "src",
+    "migrations"
   ],
   "dependencies": {
     "drizzle-orm": "^0.36.4"
@@ -25,9 +29,6 @@
     "tsup": "^8.2.0",
     "typescript": "^5.5.0"
   },
-  "publishConfig": {
-    "access": "public"
-  },
   "license": "MIT",
   "keywords": [
     "fayz",

package/src/helpers.ts

@@ -3,7 +3,7 @@ import { tenants } from './schema/spine'
 
 /**
  * Canonical tenant-scoping column: `tenant_id uuid NOT NULL REFERENCES
- * saas_core.tenants(id) ON DELETE CASCADE`. Every Ring-1 plugin table uses this
+ * public.tenants(id) ON DELETE CASCADE`. Every Ring-1 plugin table uses this
  * so tenancy is identical everywhere (and RLS can assume the column exists).
  */
 export const tenantId = () =>

package/src/index.ts

@@ -8,5 +8,5 @@
 // when an app composes its own tables with @fayz-ai/db spine refs + plugin schema).
 export * from 'drizzle-orm/pg-core'
 
-export { saasCore, tenants, persons, orders, bookings, products, orderItems } from './schema/spine'
+export { tenants, people, orders, appointments, products, orderItems } from './schema/spine'
 export { tenantId, timestamps, createdAt } from './helpers'

package/src/schema/spine.ts

@@ -1,36 +1,35 @@
-import { pgSchema, uuid } from 'drizzle-orm/pg-core'
+import { pgTable, uuid } from 'drizzle-orm/pg-core'
 
 /**
- * Ring 0 — the saas_core spine, declared as Drizzle *references* only.
+ * Ring 0 — the core spine, declared as Drizzle *references* only.
  *
- * These tables are owned by the platform (@fayz/saas-core) and already exist in
- * every provisioned project. We declare a minimal shape here purely so plugin
- * tables can express real cross-schema foreign keys in TypeScript. They land in
- * the Drizzle *baseline* snapshot (never re-created), so only the `id` FK target
- * is needed — the live columns are authoritative.
+ * These tables are owned by the platform (@fayz-ai/saas core) and already exist
+ * in every provisioned pool, directly in the `public` schema (industry-pool
+ * model — no saas_core schema). We declare a minimal shape here purely so plugin
+ * tables can express real foreign keys in TypeScript. They land in the Drizzle
+ * *baseline* snapshot (never re-created), so only the `id` FK target is needed —
+ * the live columns are authoritative.
  */
-export const saasCore = pgSchema('saas_core')
-
-export const tenants = saasCore.table('tenants', {
+export const tenants = pgTable('tenants', {
   id: uuid('id').primaryKey(),
 })
 
-export const persons = saasCore.table('persons', {
+export const people = pgTable('people', {
   id: uuid('id').primaryKey(),
 })
 
-export const orders = saasCore.table('orders', {
+export const orders = pgTable('orders', {
   id: uuid('id').primaryKey(),
 })
 
-export const bookings = saasCore.table('bookings', {
+export const appointments = pgTable('appointments', {
   id: uuid('id').primaryKey(),
 })
 
-export const products = saasCore.table('products', {
+export const products = pgTable('products', {
   id: uuid('id').primaryKey(),
 })
 
-export const orderItems = saasCore.table('order_items', {
+export const orderItems = pgTable('order_items', {
   id: uuid('id').primaryKey(),
 })