@fayz-ai/db 0.18.1 → 0.18.2

package/migrations/135_a_pessoa_diz_em_quais_unidades_esta_disponivel.sql

@@ -0,0 +1,140 @@
+-- A supplier, customer or other non-login Person may be shared with selected
+-- units. The grants live in app.*, so the browser gets a narrow public door
+-- instead of direct access to the authorization schema.
+
+-- The importer already preserved these V1 fields in metadata. Lift them into
+-- the declared V2 fields without overwriting anything edited in V2.
+UPDATE public.people p
+   SET custom_fields = jsonb_strip_nulls(jsonb_build_object(
+         'serviceProviderType', nullif(p.metadata #>> '{contact,service_provider_type}', ''),
+         'registrationNumber', nullif(p.metadata #>> '{legal,state_registration}', '')
+       )) || p.custom_fields
+ WHERE p.kind = 'supplier'
+   AND (
+     (NOT (p.custom_fields ? 'serviceProviderType') AND nullif(p.metadata #>> '{contact,service_provider_type}', '') IS NOT NULL)
+     OR
+     (NOT (p.custom_fields ? 'registrationNumber') AND nullif(p.metadata #>> '{legal,state_registration}', '') IS NOT NULL)
+   );
+
+-- Suppliers imported before the normalized address book kept one legacy main
+-- address on people. Copy complete addresses once; partial addresses remain on
+-- the Person instead of inventing required postal/city/state values.
+INSERT INTO public.addresses (
+  tenant_id, owner_type, owner_id, kind, label, recipient, phone, postal_code,
+  street, number, complement, district, city, state, country, is_default, metadata
+)
+SELECT p.tenant_id, 'person', p.id, 'both', 'Principal', p.name, p.phone,
+       p.postal_code, p.address,
+       nullif(p.metadata #>> '{address,number}', ''),
+       nullif(p.metadata #>> '{address,complement}', ''),
+       nullif(p.metadata #>> '{address,neighborhood}', ''),
+       p.city, p.state, coalesce(nullif(p.country, ''), 'BR'), true,
+       jsonb_build_object('source', 'people_legacy_address')
+  FROM public.people p
+ WHERE p.kind = 'supplier'
+   AND nullif(p.postal_code, '') IS NOT NULL
+   AND nullif(p.address, '') IS NOT NULL
+   AND nullif(p.city, '') IS NOT NULL
+   AND nullif(p.state, '') IS NOT NULL
+   AND NOT EXISTS (
+     SELECT 1 FROM public.addresses a
+      WHERE a.owner_type = 'person' AND a.owner_id = p.id
+   );
+
+CREATE OR REPLACE FUNCTION public.people_available_unit_ids(p_person uuid)
+RETURNS uuid[]
+LANGUAGE plpgsql
+STABLE
+SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE
+  v_tenant uuid := public.people_assert_scope('people.manage');
+  v_units uuid[];
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM public.people p
+     WHERE p.tenant_id = v_tenant AND p.id = p_person AND p.merged_into_id IS NULL
+  ) THEN
+    RAISE EXCEPTION 'people_available_unit_ids: person not found in this tenant'
+      USING ERRCODE = 'P0002';
+  END IF;
+
+  SELECT coalesce(array_agg(g.subject_id ORDER BY g.subject_id), '{}'::uuid[])
+    INTO v_units
+    FROM app.resource_grants g
+   WHERE g.tenant_id = v_tenant
+     AND g.resource_type = 'people.person'
+     AND g.resource_id = p_person
+     AND g.relation = 'available_in'
+     AND g.subject_type = 'unit';
+
+  RETURN v_units;
+END $$;
+
+CREATE OR REPLACE FUNCTION public.people_set_available_units(
+  p_person uuid,
+  p_unit_ids uuid[] DEFAULT '{}'::uuid[]
+)
+RETURNS uuid[]
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE
+  v_tenant uuid := public.people_assert_scope('people.manage');
+  v_unit_ids uuid[];
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM public.people p
+     WHERE p.tenant_id = v_tenant AND p.id = p_person AND p.merged_into_id IS NULL
+  ) THEN
+    RAISE EXCEPTION 'people_set_available_units: person not found in this tenant'
+      USING ERRCODE = 'P0002';
+  END IF;
+
+  SELECT coalesce(array_agg(DISTINCT requested.unit_id ORDER BY requested.unit_id), '{}'::uuid[])
+    INTO v_unit_ids
+    FROM unnest(coalesce(p_unit_ids, '{}'::uuid[])) AS requested(unit_id);
+
+  IF EXISTS (
+    SELECT 1
+      FROM unnest(v_unit_ids) AS requested(unit_id)
+      LEFT JOIN app.units u
+        ON u.id = requested.unit_id AND u.tenant_id = v_tenant
+     WHERE u.id IS NULL OR NOT app.has_unit(requested.unit_id)
+  ) THEN
+    RAISE EXCEPTION 'people_set_available_units: unit not found in this tenant'
+      USING ERRCODE = '42501';
+  END IF;
+
+  DELETE FROM app.resource_grants g
+   WHERE g.tenant_id = v_tenant
+     AND g.resource_type = 'people.person'
+     AND g.resource_id = p_person
+     AND g.relation = 'available_in'
+     AND g.subject_type = 'unit';
+
+  INSERT INTO app.resource_grants (
+    tenant_id, resource_type, resource_id, relation, subject_type, subject_id, created_by
+  )
+  SELECT v_tenant, 'people.person', p_person, 'available_in', 'unit', unit_id, auth.uid()
+    FROM unnest(v_unit_ids) AS requested(unit_id);
+
+  RETURN v_unit_ids;
+END $$;
+
+REVOKE ALL ON FUNCTION public.people_available_unit_ids(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.people_set_available_units(uuid, uuid[]) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.people_available_unit_ids(uuid) TO authenticated, service_role;
+GRANT EXECUTE ON FUNCTION public.people_set_available_units(uuid, uuid[]) TO authenticated, service_role;
+
+COMMENT ON FUNCTION public.people_available_unit_ids(uuid) IS
+  'Units where a Person record is available. Empty means organization-wide.';
+COMMENT ON FUNCTION public.people_set_available_units(uuid, uuid[]) IS
+  'Replaces the unit availability of a Person. Empty means organization-wide.';
+
+-- PostgREST may keep serving the previous function catalog after DDL. The
+-- explicit notification makes the new RPCs available as soon as this migration
+-- commits instead of waiting for a later cache refresh.
+NOTIFY pgrst, 'reload schema';

package/package.json

@@ -3,7 +3,7 @@
   "fayz": {
     "status": "beta"
   },
-  "version": "0.18.1",
+  "version": "0.18.2",
   "description": "Fayz SDK database layer — Drizzle schema primitives, spine references, and migration helpers shared across plugins.",
   "type": "module",
   "sideEffects": false,