@fayz-ai/db 0.13.0 → 0.14.0

package/migrations/004_archetypes.sql

@@ -1,343 +0,0 @@
--- ============================================================================
--- core archetype tables (public schema)
--- Shared base entities that project-specific tables extend via FK
--- ============================================================================
-
--- ---------------------------------------------------------------------------
--- 1. people — any human entity (staff, customer, supplier, professional)
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.people (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  name text NOT NULL,
-  email text,
-  phone text,
-  document_number text,
-  avatar_url text,
-  date_of_birth date,
-  address text,
-  city text,
-  state text,
-  country text DEFAULT 'BR',
-  postal_code text,
-  tags text[] DEFAULT '{}',
-  is_active boolean DEFAULT true,
-  notes text,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS people_tenant_kind ON public.people(tenant_id, kind);
-DROP TRIGGER IF EXISTS people_updated_at ON public.people;
-CREATE TRIGGER people_updated_at BEFORE UPDATE ON public.people
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 2. categories — generic taxonomy (species, menu categories, regions)
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.categories (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  name text NOT NULL,
-  slug text,
-  parent_id uuid REFERENCES public.categories(id) ON DELETE SET NULL,
-  icon text,
-  color text,
-  sort_order integer DEFAULT 0,
-  is_active boolean DEFAULT true,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS categories_tenant_kind ON public.categories(tenant_id, kind);
-DROP TRIGGER IF EXISTS categories_updated_at ON public.categories;
-CREATE TRIGGER categories_updated_at BEFORE UPDATE ON public.categories
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 3. products — physical/trackable items (menu items, equipment, ingredients)
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.products (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  category_id uuid REFERENCES public.categories(id) ON DELETE SET NULL,
-  name text NOT NULL,
-  description text,
-  sku text,
-  price numeric,
-  cost numeric,
-  currency text DEFAULT 'BRL',
-  unit text,
-  image_url text,
-  stock numeric,
-  min_stock numeric,
-  status text DEFAULT 'active',
-  is_active boolean DEFAULT true,
-  tags text[] DEFAULT '{}',
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS products_tenant ON public.products(tenant_id);
-DROP TRIGGER IF EXISTS products_updated_at ON public.products;
-CREATE TRIGGER products_updated_at BEFORE UPDATE ON public.products
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 4. services — intangible offerings (exam types, consultations)
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.services (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  category_id uuid REFERENCES public.categories(id) ON DELETE SET NULL,
-  name text NOT NULL,
-  description text,
-  price numeric,
-  cost numeric,
-  currency text DEFAULT 'BRL',
-  duration_minutes integer,
-  image_url text,
-  status text DEFAULT 'active',
-  is_active boolean DEFAULT true,
-  tags text[] DEFAULT '{}',
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS services_tenant ON public.services(tenant_id);
-DROP TRIGGER IF EXISTS services_updated_at ON public.services;
-CREATE TRIGGER services_updated_at BEFORE UPDATE ON public.services
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 5. orders — business orders/jobs
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.orders (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  reference_number text,
-  status text DEFAULT 'draft',
-  party_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
-  assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
-  location_id uuid REFERENCES public.locations(id) ON DELETE SET NULL,
-  subtotal numeric DEFAULT 0,
-  discount numeric DEFAULT 0,
-  tax numeric DEFAULT 0,
-  total numeric DEFAULT 0,
-  currency text DEFAULT 'BRL',
-  due_at timestamptz,
-  completed_at timestamptz,
-  notes text,
-  tags text[] DEFAULT '{}',
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS orders_tenant_kind ON public.orders(tenant_id, kind);
-CREATE INDEX IF NOT EXISTS orders_status ON public.orders(tenant_id, status);
-DROP TRIGGER IF EXISTS orders_updated_at ON public.orders;
-CREATE TRIGGER orders_updated_at BEFORE UPDATE ON public.orders
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 6. order_items — line items for orders
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.order_items (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  order_id uuid NOT NULL REFERENCES public.orders(id) ON DELETE CASCADE,
-  product_id uuid REFERENCES public.products(id) ON DELETE SET NULL,
-  service_id uuid REFERENCES public.services(id) ON DELETE SET NULL,
-  name text NOT NULL,
-  description text,
-  quantity numeric DEFAULT 1,
-  unit_price numeric DEFAULT 0,
-  discount numeric DEFAULT 0,
-  total numeric DEFAULT 0,
-  sort_order integer DEFAULT 0,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS order_items_order ON public.order_items(order_id);
-
--- ---------------------------------------------------------------------------
--- 7. transactions — financial movements (payments, refunds, expenses)
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.transactions (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  order_id uuid REFERENCES public.orders(id) ON DELETE SET NULL,
-  party_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
-  amount numeric NOT NULL,
-  currency text DEFAULT 'BRL',
-  payment_method text,
-  reference text,
-  status text DEFAULT 'completed',
-  transacted_at timestamptz DEFAULT now(),
-  notes text,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS transactions_tenant_kind ON public.transactions(tenant_id, kind);
-DROP TRIGGER IF EXISTS transactions_updated_at ON public.transactions;
-CREATE TRIGGER transactions_updated_at BEFORE UPDATE ON public.transactions
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 8. appointments — reservations/appointments
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.appointments (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  party_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
-  assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
-  location_id uuid REFERENCES public.locations(id) ON DELETE SET NULL,
-  order_id uuid REFERENCES public.orders(id) ON DELETE SET NULL,
-  starts_at timestamptz NOT NULL,
-  ends_at timestamptz,
-  status text DEFAULT 'pending',
-  notes text,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS appointments_tenant_kind ON public.appointments(tenant_id, kind);
-CREATE INDEX IF NOT EXISTS appointments_starts ON public.appointments(tenant_id, starts_at);
-DROP TRIGGER IF EXISTS appointments_updated_at ON public.appointments;
-CREATE TRIGGER appointments_updated_at BEFORE UPDATE ON public.appointments
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ---------------------------------------------------------------------------
--- 9. appointment_items — services within an appointment
---    (booking_id column name preserved for parity with converted pools —
---     the in-place converter renames the table, not the FK column)
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.appointment_items (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  booking_id uuid NOT NULL REFERENCES public.appointments(id) ON DELETE CASCADE,
-  service_id uuid REFERENCES public.services(id) ON DELETE SET NULL,
-  assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL,
-  name text NOT NULL,
-  duration_minutes integer,
-  price numeric DEFAULT 0,
-  sort_order integer DEFAULT 0,
-  notes text,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS appointment_items_booking ON public.appointment_items(booking_id);
-
--- ---------------------------------------------------------------------------
--- 10. schedules — recurring availability/shifts
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS public.schedules (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  assignee_id uuid REFERENCES public.people(id) ON DELETE CASCADE,
-  location_id uuid REFERENCES public.locations(id) ON DELETE SET NULL,
-  day_of_week smallint,
-  specific_date date,
-  starts_at time NOT NULL,
-  ends_at time NOT NULL,
-  is_active boolean DEFAULT true,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS schedules_tenant_kind ON public.schedules(tenant_id, kind);
-CREATE INDEX IF NOT EXISTS schedules_assignee ON public.schedules(assignee_id, day_of_week);
-DROP TRIGGER IF EXISTS schedules_updated_at ON public.schedules;
-CREATE TRIGGER schedules_updated_at BEFORE UPDATE ON public.schedules
-  FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
-
--- ============================================================================
--- RLS policies — tenant isolation for all archetype tables
--- ============================================================================
-
-DO $$
-DECLARE
-  tbl text;
-BEGIN
-  FOREACH tbl IN ARRAY ARRAY[
-    'people', 'categories', 'products', 'services',
-    'orders', 'transactions', 'appointments', 'schedules'
-  ]
-  LOOP
-    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', tbl);
-    -- Drop first so a replay on an already-provisioned pool no-ops cleanly.
-    EXECUTE format('DROP POLICY IF EXISTS "%s_select" ON public.%I', tbl, tbl);
-    EXECUTE format('DROP POLICY IF EXISTS "%s_insert" ON public.%I', tbl, tbl);
-    EXECUTE format('DROP POLICY IF EXISTS "%s_update" ON public.%I', tbl, tbl);
-    EXECUTE format('DROP POLICY IF EXISTS "%s_delete" ON public.%I', tbl, tbl);
-    EXECUTE format(
-      'CREATE POLICY "%s_select" ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
-      tbl, tbl
-    );
-    EXECUTE format(
-      'CREATE POLICY "%s_insert" ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
-      tbl, tbl
-    );
-    EXECUTE format(
-      'CREATE POLICY "%s_update" ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
-      tbl, tbl
-    );
-    EXECUTE format(
-      'CREATE POLICY "%s_delete" ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid()))',
-      tbl, tbl
-    );
-  END LOOP;
-
-  -- Child tables (order_items, appointment_items) — RLS via parent FK
-  FOREACH tbl IN ARRAY ARRAY['order_items', 'appointment_items']
-  LOOP
-    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', tbl);
-  END LOOP;
-END $$;
-
--- order_items: access via parent order's tenant
-DROP POLICY IF EXISTS "order_items_select" ON public.order_items;
-CREATE POLICY "order_items_select" ON public.order_items FOR SELECT TO authenticated
-  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-DROP POLICY IF EXISTS "order_items_insert" ON public.order_items;
-CREATE POLICY "order_items_insert" ON public.order_items FOR INSERT TO authenticated
-  WITH CHECK (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-DROP POLICY IF EXISTS "order_items_update" ON public.order_items;
-CREATE POLICY "order_items_update" ON public.order_items FOR UPDATE TO authenticated
-  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-DROP POLICY IF EXISTS "order_items_delete" ON public.order_items;
-CREATE POLICY "order_items_delete" ON public.order_items FOR DELETE TO authenticated
-  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-
--- appointment_items: access via parent appointment's tenant
-DROP POLICY IF EXISTS "appointment_items_select" ON public.appointment_items;
-CREATE POLICY "appointment_items_select" ON public.appointment_items FOR SELECT TO authenticated
-  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-DROP POLICY IF EXISTS "appointment_items_insert" ON public.appointment_items;
-CREATE POLICY "appointment_items_insert" ON public.appointment_items FOR INSERT TO authenticated
-  WITH CHECK (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-DROP POLICY IF EXISTS "appointment_items_update" ON public.appointment_items;
-CREATE POLICY "appointment_items_update" ON public.appointment_items FOR UPDATE TO authenticated
-  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-DROP POLICY IF EXISTS "appointment_items_delete" ON public.appointment_items;
-CREATE POLICY "appointment_items_delete" ON public.appointment_items FOR DELETE TO authenticated
-  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid())));
-
--- Grant access to archetype tables
-GRANT ALL ON ALL TABLES IN SCHEMA public TO authenticated, service_role;
-GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;

package/migrations/005_locations_archetype.sql

@@ -1,18 +0,0 @@
--- Bring public.locations in line with other archetype tables
-ALTER TABLE public.locations
-  ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'branch',
-  ADD COLUMN IF NOT EXISTS email text,
-  ADD COLUMN IF NOT EXISTS postal_code text,
-  ADD COLUMN IF NOT EXISTS tags text[] DEFAULT '{}',
-  ADD COLUMN IF NOT EXISTS notes text,
-  ADD COLUMN IF NOT EXISTS metadata jsonb DEFAULT '{}';
-
--- Migrate settings → metadata for existing rows (if settings column still exists)
-DO $$ BEGIN
-  IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'locations' AND column_name = 'settings') THEN
-    UPDATE public.locations SET metadata = settings WHERE metadata = '{}' AND settings != '{}';
-    ALTER TABLE public.locations DROP COLUMN settings;
-  END IF;
-END $$;
-
-CREATE INDEX IF NOT EXISTS locations_tenant_kind ON public.locations(tenant_id, kind);

package/migrations/006_archetype_rls.sql

@@ -1,74 +0,0 @@
--- Fix archetype RLS policies to use SECURITY DEFINER function
--- The raw subquery on tenant_members fails due to recursive RLS
-
--- Ensure the SECURITY DEFINER helper exists (bypasses RLS)
-CREATE OR REPLACE FUNCTION public.user_tenant_ids()
-RETURNS SETOF uuid
-LANGUAGE sql STABLE SECURITY DEFINER AS $$
-  SELECT tenant_id FROM public.tenant_members WHERE user_id = auth.uid();
-$$;
-
--- Drop and recreate all archetype table policies using the SECURITY DEFINER function
-DO $$
-DECLARE
-  tbl text;
-BEGIN
-  FOREACH tbl IN ARRAY ARRAY[
-    'people', 'categories', 'products', 'services',
-    'orders', 'transactions', 'appointments', 'schedules'
-  ]
-  LOOP
-    -- Drop old policies
-    EXECUTE format('DROP POLICY IF EXISTS "%s_select" ON public.%I', tbl, tbl);
-    EXECUTE format('DROP POLICY IF EXISTS "%s_insert" ON public.%I', tbl, tbl);
-    EXECUTE format('DROP POLICY IF EXISTS "%s_update" ON public.%I', tbl, tbl);
-    EXECUTE format('DROP POLICY IF EXISTS "%s_delete" ON public.%I', tbl, tbl);
-
-    -- Create new policies using SECURITY DEFINER function
-    EXECUTE format(
-      'CREATE POLICY "%s_select" ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))',
-      tbl, tbl
-    );
-    EXECUTE format(
-      'CREATE POLICY "%s_insert" ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))',
-      tbl, tbl
-    );
-    EXECUTE format(
-      'CREATE POLICY "%s_update" ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))',
-      tbl, tbl
-    );
-    EXECUTE format(
-      'CREATE POLICY "%s_delete" ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))',
-      tbl, tbl
-    );
-  END LOOP;
-END $$;
-
--- Fix child table policies too
-DROP POLICY IF EXISTS "order_items_select" ON public.order_items;
-DROP POLICY IF EXISTS "order_items_insert" ON public.order_items;
-DROP POLICY IF EXISTS "order_items_update" ON public.order_items;
-DROP POLICY IF EXISTS "order_items_delete" ON public.order_items;
-
-CREATE POLICY "order_items_select" ON public.order_items FOR SELECT TO authenticated
-  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-CREATE POLICY "order_items_insert" ON public.order_items FOR INSERT TO authenticated
-  WITH CHECK (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-CREATE POLICY "order_items_update" ON public.order_items FOR UPDATE TO authenticated
-  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-CREATE POLICY "order_items_delete" ON public.order_items FOR DELETE TO authenticated
-  USING (order_id IN (SELECT id FROM public.orders WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-
-DROP POLICY IF EXISTS "appointment_items_select" ON public.appointment_items;
-DROP POLICY IF EXISTS "appointment_items_insert" ON public.appointment_items;
-DROP POLICY IF EXISTS "appointment_items_update" ON public.appointment_items;
-DROP POLICY IF EXISTS "appointment_items_delete" ON public.appointment_items;
-
-CREATE POLICY "appointment_items_select" ON public.appointment_items FOR SELECT TO authenticated
-  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-CREATE POLICY "appointment_items_insert" ON public.appointment_items FOR INSERT TO authenticated
-  WITH CHECK (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-CREATE POLICY "appointment_items_update" ON public.appointment_items FOR UPDATE TO authenticated
-  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));
-CREATE POLICY "appointment_items_delete" ON public.appointment_items FOR DELETE TO authenticated
-  USING (booking_id IN (SELECT id FROM public.appointments WHERE tenant_id IN (SELECT public.user_tenant_ids())));

package/migrations/007_archetype_grants.sql

@@ -1,4 +0,0 @@
--- Grant access to archetype tables created in migration 004
--- The original GRANT ALL ON ALL TABLES only covered tables that existed at that time
-GRANT ALL ON ALL TABLES IN SCHEMA public TO authenticated, service_role;
-GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;

package/migrations/008_grants.sql

@@ -1,5 +0,0 @@
--- Ensure all roles have access to the public schema
-GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role;
-GRANT ALL ON ALL TABLES IN SCHEMA public TO authenticated, service_role;
-GRANT SELECT ON ALL TABLES IN SCHEMA public TO anon;
-GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA public TO anon, authenticated, service_role;

package/migrations/009_anon_hardening.sql

@@ -1,19 +0,0 @@
--- ============================================================================
--- 009: anon hardening — close 008's blanket grants for the anon role.
---
--- 008_grants.sql grants SELECT on all tables and EXECUTE on all functions to
--- anon. RLS (policies are TO authenticated) already returns zero rows for
--- table reads, but EXECUTE on SECURITY DEFINER functions like
--- create_tenant_with_owner is a real abuse surface on projects that serve
--- public (anon-key) pages. Revoke everything; anon-facing surfaces must grant
--- themselves explicitly (e.g. plugin-agenda's public booking RPCs/views).
---
--- Apply AFTER 008 and BEFORE plugin migrations that grant anon access.
--- ============================================================================
-
-REVOKE EXECUTE ON ALL FUNCTIONS IN SCHEMA public FROM anon;
-
-REVOKE SELECT ON ALL TABLES IN SCHEMA public FROM anon;
-
--- Future objects: don't default-grant anon anything.
-ALTER DEFAULT PRIVILEGES IN SCHEMA public REVOKE EXECUTE ON FUNCTIONS FROM anon;

package/migrations/010_migration_ledger.sql

@@ -1,46 +0,0 @@
--- ============================================================================
--- 010_migration_ledger.sql — per-pool applied-migration ledger.
---
--- The Runner v2 executor records every applied SQL file here (plugin_id +
--- file_name + checksum) so re-applies are detected and checksum drift on an
--- already-applied file is a HARD STOP.
---
--- service_role only: no anon/authenticated grants, RLS enabled with NO
--- policies, so PostgREST (anon/authenticated) is deny-all. Only the service
--- role (which bypasses RLS) — i.e. the runner — can read/write it.
---
--- Naming: the ledger is an internal, non-API table, so it uses the `_`-prefixed
--- `public._migrations` name (excluded from the project_rls auto-policy pass by
--- the `NOT LIKE '\_%'` filter). Legacy pools provisioned as `fayz_migration_ledger`
--- are migrated by 012_rename_migration_ledger.sql (and by the runner's
--- ensureLedger guard); fresh installs are born as `_migrations` here.
--- ============================================================================
-
-CREATE TABLE IF NOT EXISTS public._migrations (
-  id bigserial PRIMARY KEY,
-  plugin_id text NOT NULL,
-  file_name text NOT NULL,
-  checksum text NOT NULL,
-  plugin_version text,
-  applied_at timestamptz NOT NULL DEFAULT now(),
-  applied_by text,
-  UNIQUE(plugin_id, file_name)
-);
-
-ALTER TABLE public._migrations ENABLE ROW LEVEL SECURITY;
-
--- Deny-all through PostgREST: revoke any inherited grants, grant to nobody but
--- service_role (which bypasses RLS anyway). No policies = no anon/authenticated access.
-REVOKE ALL ON public._migrations FROM anon, authenticated;
-GRANT ALL ON public._migrations TO service_role;
--- The sequence, WHATEVER IT IS CALLED. A legacy pool whose table was renamed
--- ahead of 012 still owns fayz_migration_ledger_id_seq, and naming the new one
--- here would stop the chain twelve files before the migration that renames it.
--- pg_get_serial_sequence asks the column instead of guessing.
-DO $$
-DECLARE v_seq text := pg_get_serial_sequence('public._migrations', 'id');
-BEGIN
-  IF v_seq IS NOT NULL THEN
-    EXECUTE format('GRANT USAGE, SELECT ON SEQUENCE %s TO service_role', v_seq);
-  END IF;
-END $$;

package/migrations/011_anon_write_revoke.sql

@@ -1,12 +0,0 @@
--- 009 revoked anon SELECT/EXECUTE but Supabase default privileges also hand
--- anon INSERT/UPDATE/DELETE/... on every table created by postgres. RLS blocks
--- those writes today; make the grant layer agree and stop future tables from
--- being born writable-by-anon.
-
-REVOKE INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER
-  ON ALL TABLES IN SCHEMA public FROM anon;
-
-ALTER DEFAULT PRIVILEGES IN SCHEMA public
-  REVOKE INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER ON TABLES FROM anon;
-
-ALTER DEFAULT PRIVILEGES IN SCHEMA public REVOKE SELECT ON TABLES FROM anon;

package/migrations/012_rename_migration_ledger.sql

@@ -1,61 +0,0 @@
--- ============================================================================
--- 012_rename_migration_ledger.sql — rename the migration ledger onto the
--- internal `_`-prefixed baseline name:
---
---   public.fayz_migration_ledger → public._migrations
---
--- Legacy-pool remediation ONLY: 010_migration_ledger.sql now creates `_migrations`
--- directly, so fresh installs never reach a rename branch. The runner's
--- ensureLedger (cli/src/lib/ledger.ts) performs the same guarded rename at the
--- START of every apply, so on a real pool the ledger is already `_migrations`
--- by the time this migration runs — this file is the declarative backstop.
---
--- Fully idempotent + guarded: each RENAME fires only when the old object exists
--- and the new one does not. A table RENAME preserves the rows (the applied-file
--- history MUST survive), plus RLS state, grants and constraints; re-assert the
--- deny-all grants afterwards to keep the baseline explicit.
--- ============================================================================
-
-DO $$
-BEGIN
-  -- Table (carries the applied-migration history — never drop + recreate).
-  IF to_regclass('public.fayz_migration_ledger') IS NOT NULL
-     AND to_regclass('public._migrations') IS NULL THEN
-    ALTER TABLE public.fayz_migration_ledger RENAME TO _migrations;
-  END IF;
-
-  -- bigserial owns fayz_migration_ledger_id_seq — a table rename does not move it.
-  IF to_regclass('public.fayz_migration_ledger_id_seq') IS NOT NULL
-     AND to_regclass('public._migrations_id_seq') IS NULL THEN
-    ALTER SEQUENCE public.fayz_migration_ledger_id_seq RENAME TO _migrations_id_seq;
-  END IF;
-
-  -- Named constraints are auto-named after the old table; rename for parity with
-  -- a fresh install. Guard on the new table existing so this is safe pre-rename.
-  IF to_regclass('public._migrations') IS NOT NULL THEN
-    IF EXISTS (SELECT 1 FROM pg_constraint
-               WHERE conname = 'fayz_migration_ledger_pkey'
-                 AND conrelid = 'public._migrations'::regclass) THEN
-      ALTER TABLE public._migrations RENAME CONSTRAINT fayz_migration_ledger_pkey TO _migrations_pkey;
-    END IF;
-    IF EXISTS (SELECT 1 FROM pg_constraint
-               WHERE conname = 'fayz_migration_ledger_plugin_id_file_name_key'
-                 AND conrelid = 'public._migrations'::regclass) THEN
-      ALTER TABLE public._migrations
-        RENAME CONSTRAINT fayz_migration_ledger_plugin_id_file_name_key
-        TO _migrations_plugin_id_file_name_key;
-    END IF;
-  END IF;
-END $$;
-
--- Re-assert the deny-all posture (idempotent; RLS/grants survive a rename but the
--- baseline keeps this explicit so a manually-created ledger converges too).
-DO $$
-BEGIN
-  IF to_regclass('public._migrations') IS NOT NULL THEN
-    EXECUTE 'ALTER TABLE public._migrations ENABLE ROW LEVEL SECURITY';
-    EXECUTE 'REVOKE ALL ON public._migrations FROM anon, authenticated';
-    EXECUTE 'GRANT ALL ON public._migrations TO service_role';
-    EXECUTE 'GRANT USAGE, SELECT ON SEQUENCE public._migrations_id_seq TO service_role';
-  END IF;
-END $$;

package/migrations/013_sequences_rls.sql

@@ -1,22 +0,0 @@
--- ============================================================================
--- 013_sequences_rls.sql — close the RLS drift on public.sequences.
---
--- public.sequences (the REC-/PAG- numbering counter, created by the financial
--- plugin's 004_order_to_cash.sql) shipped WITHOUT row-level security on a set of
--- pools. Baseline = RLS ON, deny-all (no policies), exactly like the salon pool:
--- the table is written ONLY through the SECURITY DEFINER function
--- public.next_sequence(), which runs as the table owner and so bypasses RLS.
--- With RLS on and no policy, the PostgREST anon/authenticated surface is deny-all,
--- so the counter can never be read or tampered with directly by a tenant.
---
--- Legacy-pool remediation: guarded so it is a no-op on pools that never enabled
--- Payments (sequences absent) and idempotent on pools already at RLS ON. Fresh
--- installs are born with RLS via the financial plugin's own 004_order_to_cash.sql.
---
--- NOTE: next_sequence() MUST be SECURITY DEFINER for the deny-all baseline to
--- keep working — it is called directly via PostgREST RPC by authenticated users
--- (plugins/plugin-financial/src/data/supabase.ts → createInvoice). That fix ships
--- in the financial plugin migration alongside this one.
--- ============================================================================
-
-ALTER TABLE IF EXISTS public.sequences ENABLE ROW LEVEL SECURITY;

package/migrations/014_plan_entitlements.sql

@@ -1,28 +0,0 @@
--- ============================================================================
--- 014_plan_entitlements.sql — plans carry machine-readable entitlements.
---
--- public.plans shipped with `features jsonb` as DISPLAY BULLETS only — nothing
--- in the pool encodes what a plan actually gates. Server-side enforcement (the
--- agent RPCs' role→plan→limit guard, and eventually RLS defense-in-depth)
--- needs the SAME `{features: {id: bool}, limits: {key: number}}` structure the
--- client resolves from `config.billing` (@fayz-ai/core PlanEntitlements; -1 =
--- unlimited, absent feature = allowed).
---
--- Writer: the app's plan catalog is code (billing.ts) → synced into this table
--- (transitionally by the app seed, then by the Fayz platform on
--- `fayz manifest sync` — the manifest carries billing.plans verbatim).
---
--- `hidden` retires the "qa-free-test plans visible on SubscriptionPage" debt:
--- QA/internal plans stay selectable by id but are never rendered.
---
--- Guarded + idempotent: no-op when the pool predates public.plans (legacy
--- saas_core pools run their app-local mirror of this ALTER instead).
--- ============================================================================
-
-DO $$
-BEGIN
-  IF to_regclass('public.plans') IS NOT NULL THEN
-    ALTER TABLE public.plans ADD COLUMN IF NOT EXISTS entitlements jsonb NOT NULL DEFAULT '{}'::jsonb;
-    ALTER TABLE public.plans ADD COLUMN IF NOT EXISTS hidden boolean NOT NULL DEFAULT false;
-  END IF;
-END $$;