@fayz-ai/db 0.20.1 → 0.22.0

package/migrations/004_the_projections_get_a_successor.sql

@@ -42,7 +42,27 @@ CREATE OR REPLACE VIEW public.v_team_members WITH (security_invoker='true') AS
 COMMENT ON VIEW public.v_team_members IS
   'Active memberships with the role KEY (#214). Drop-in successor to public.tenant_members: same columns, security_invoker, so app.memberships RLS decides the rows.';
 
-CREATE OR REPLACE VIEW public.v_units WITH (security_invoker='true') AS
+-- ── replay: quem alargou a view depois é quem manda na forma dela ──────────
+--
+-- `CREATE OR REPLACE VIEW` sabe ACRESCENTAR coluna no fim e não sabe tirar. As
+-- migrations 141, 142, 168 e 169 alargaram `v_units` depois desta; quando a
+-- cadeia é aplicada do zero e depois REPLAYADA, este statement voltaria a
+-- definir a versão ESTREITA e o Postgres recusa com «cannot drop columns from
+-- view» — derrubando o replay inteiro aqui, no arquivo 4 de 141.
+--
+-- A view NASCE aqui e evolui adiante. Então aqui ela se cria uma vez só: se já
+-- existe, a forma atual é de quem a alargou, e o replay não a desfaz. É o mesmo
+-- raciocínio do backfill fora de ordem, que já custou view estreitada antes.
+--
+-- Em cluster que já aplicou este arquivo nada muda — o ledger não o roda de
+-- novo. O que muda é que a cadeia passa a sobreviver ao próprio replay.
+DO $v_units$
+BEGIN
+  IF to_regclass('public.v_units') IS NOT NULL THEN
+    RETURN;
+  END IF;
+  EXECUTE $ddl$
+CREATE VIEW public.v_units WITH (security_invoker='true') AS
  SELECT u.id,
         u.tenant_id,
         coalesce(u.metadata ->> 'legacy_kind', u.kind) AS kind,
@@ -79,6 +99,8 @@ CREATE OR REPLACE VIEW public.v_units WITH (security_invoker='true') AS
         CASE WHEN u.metadata ->> 'longitude' ~ '^-?[0-9]+(\.[0-9]+)?$'
              THEN (u.metadata ->> 'longitude')::numeric END AS longitude
    FROM app.units u;
+  $ddl$;
+END $v_units$;
 
 COMMENT ON VIEW public.v_units IS
   'Units in the shape the units screen reads (#214). Drop-in successor to public.locations, deriving the same columns from app.units + metadata as app.compat_sync_unit did.';

package/migrations/162_o_walter_liga_a_lista_da_vez.sql

@@ -0,0 +1,92 @@
+-- The Beauty app offers the turn queue as an independent module. Walter's is
+-- the first tenant to turn it on; every other salon keeps today's behavior
+-- until an operator enables it from Settings > Modules.
+--
+-- ── por que as escritas do TENANT são condicionais ─────────────────────────
+--
+-- Três linhas aqui apontam para um tenant por uuid, e `tenant_apps`,
+-- `tenant_plugins` e `tenant_nav` têm FK para `public.tenants`. Num banco que
+-- nasce do zero — a cadeia do `db-from-zero`, o banco do bench — esse tenant
+-- não existe, e a FK derrubava a CADEIA INTEIRA no arquivo 162: nada depois
+-- dele chegava a rodar.
+--
+-- `WHERE EXISTS` não muda nada onde a conta existe: lá a linha entra igual. O
+-- que ele faz é não exigir que todo banco do mundo contenha a conta do Walter
+-- para que o resto do produto possa ser aplicado.
+--
+-- (O que é do PRODUTO — o preset do app, as permissões, os papéis-modelo —
+-- segue incondicional, porque é verdade em qualquer banco.)
+
+-- Walter's is a salon account. Keep Beauty active so app_config selects the
+-- StudioControl rail even if the tenant also owns a back-office application.
+INSERT INTO app.tenant_apps (tenant_id, app_id, status, source)
+SELECT t.id, 'beauty', 'active', 'manual'
+  FROM public.tenants t
+ WHERE t.id = 'c3a8f61d-742b-4e05-9d16-8b47e2f0a5c3'
+ON CONFLICT (tenant_id, app_id)
+DO UPDATE SET status = 'active', source = 'manual', updated_at = now();
+
+UPDATE public.tenants
+   SET vertical_id = 'beauty', updated_at = now()
+ WHERE id = 'c3a8f61d-742b-4e05-9d16-8b47e2f0a5c3'
+   AND vertical_id IS DISTINCT FROM 'beauty';
+
+UPDATE app.apps
+   SET preset = jsonb_set(
+     preset,
+     '{modules}',
+     coalesce(preset -> 'modules', '[]'::jsonb) || '["agenda-turn-queue"]'::jsonb
+   )
+ WHERE id = 'beauty'
+   AND NOT (coalesce(preset -> 'modules', '[]'::jsonb) ? 'agenda-turn-queue');
+
+SELECT app.seed_permissions($$[
+  {"key":"agenda.turn_queue.read","plugin":"agenda-turn-queue","description":"See the live turn queue and its audit trail"},
+  {"key":"agenda.turn_queue.create","plugin":"agenda-turn-queue","description":"Enter the turn queue"},
+  {"key":"agenda.turn_queue.edit","plugin":"agenda-turn-queue","description":"Enter or leave your own turn"},
+  {"key":"agenda.turn_queue.manage","plugin":"agenda-turn-queue","description":"Record front-desk exceptions in the turn queue"}
+]$$::jsonb);
+
+SELECT app.seed_role_template_rows('salon', 'manager', 'Gerente', 1,
+  ARRAY['agenda.turn_queue.read','agenda.turn_queue.edit','agenda.turn_queue.manage']);
+SELECT app.seed_role_template_rows('salon', 'reception', 'Recepção', 2,
+  ARRAY['agenda.turn_queue.read','agenda.turn_queue.manage']);
+SELECT app.seed_role_template_rows('salon', 'professional', 'Profissional', 3,
+  ARRAY['agenda.turn_queue.read','agenda.turn_queue.edit']);
+SELECT app.seed_role_template_rows('clinic', 'manager', 'Coordenação', 1,
+  ARRAY['agenda.turn_queue.read','agenda.turn_queue.edit','agenda.turn_queue.manage']);
+SELECT app.seed_role_template_rows('clinic', 'reception', 'Recepção', 2,
+  ARRAY['agenda.turn_queue.read','agenda.turn_queue.manage']);
+SELECT app.seed_role_template_rows('clinic', 'professional', 'Profissional', 3,
+  ARRAY['agenda.turn_queue.read','agenda.turn_queue.edit']);
+
+INSERT INTO app.role_permissions (tenant_id, role_id, permission)
+SELECT r.tenant_id, r.id, p.permission
+  FROM app.roles r
+ CROSS JOIN LATERAL (
+   SELECT unnest(CASE r.key
+     WHEN 'owner' THEN ARRAY['agenda.turn_queue.read','agenda.turn_queue.create','agenda.turn_queue.edit','agenda.turn_queue.manage']
+     WHEN 'manager' THEN ARRAY['agenda.turn_queue.read','agenda.turn_queue.edit','agenda.turn_queue.manage']
+     WHEN 'reception' THEN ARRAY['agenda.turn_queue.read','agenda.turn_queue.manage']
+     WHEN 'professional' THEN ARRAY['agenda.turn_queue.read','agenda.turn_queue.edit']
+     ELSE ARRAY[]::text[] END) AS permission
+ ) p
+ WHERE r.tenant_id = 'c3a8f61d-742b-4e05-9d16-8b47e2f0a5c3'
+   AND r.key IN ('owner','manager','reception','professional')
+ON CONFLICT DO NOTHING;
+
+INSERT INTO app.tenant_plugins (tenant_id, plugin_id, facet, status, source)
+SELECT t.id, 'agenda-turn-queue', '', 'active', 'manual'
+  FROM public.tenants t
+ WHERE t.id = 'c3a8f61d-742b-4e05-9d16-8b47e2f0a5c3'
+ON CONFLICT (tenant_id, plugin_id, facet)
+DO UPDATE SET status = 'active', source = 'manual', updated_at = now();
+
+-- Walter's must see the existing check-in entry even if the tenant previously
+-- hid it while shaping its menu. The Beauty preset already groups it in Agenda.
+INSERT INTO app.tenant_nav (tenant_id, entry_key, hidden)
+SELECT t.id, '/checkin', false
+  FROM public.tenants t
+ WHERE t.id = 'c3a8f61d-742b-4e05-9d16-8b47e2f0a5c3'
+ON CONFLICT (tenant_id, entry_key)
+DO UPDATE SET hidden = false, updated_at = now();

package/migrations/164_checkin_e_confirmacoes_vieram_com_a_agenda.sql

@@ -0,0 +1,29 @@
+-- 164: check-in e confirmações eram opção de BUILD, nunca um item de plano —
+-- toda conta com Agenda os tinha, de graça. Virar facet (rail-preset, mesma
+-- onda que criou `requiresFacet`) sem seguir esse fato para `app.plan_grants`
+-- quebrou o teto: `plan_permits('agenda','checkin',tenant)` nega em qualquer
+-- plano que já restrinja QUALQUER OUTRA coisa (a regra é "silêncio total
+-- permite", não "silêncio por facet") — então `tenant_plugin_set` rejeitava o
+-- toggle em todo plano com ao menos uma linha em `plan_grants`, e ligar
+-- Check-in em Módulos não fazia nada.
+--
+-- A correção segue o mesmo plano que já concede a Agenda: onde a Agenda em si
+-- está `included` ou `optional`, as duas facets entram `included` — elas
+-- nunca foram um upsell, só eram invisíveis para o catálogo de planos.
+
+DO $$
+DECLARE
+  v_plan record;
+BEGIN
+  IF to_regprocedure('public.register_plan_grant(text,text,text,text,text)') IS NULL THEN
+    RAISE NOTICE '164: register_plan_grant ausente — pulado (pool sem app.plan_grants ainda)';
+    RETURN;
+  END IF;
+
+  FOR v_plan IN SELECT DISTINCT plan_id FROM app.plan_grants WHERE plugin_id = 'agenda' AND facet = '' LOOP
+    PERFORM public.register_plan_grant(v_plan.plan_id, 'agenda', 'checkin', 'included',
+      'Vem com a Agenda desde sempre — nunca foi upsell, só nunca tinha linha própria.');
+    PERFORM public.register_plan_grant(v_plan.plan_id, 'agenda', 'confirmations', 'included',
+      'Vem com a Agenda desde sempre — nunca foi upsell, só nunca tinha linha própria.');
+  END LOOP;
+END $$;

package/migrations/165_unit_address_geocoding.sql

@@ -0,0 +1,258 @@
+-- Unit coordinates must follow the address they describe. Queue an asynchronous
+-- geocode only when the normalized, location-bearing fields actually change.
+-- Saving remains available if the provider or pg_net is temporarily offline.
+
+CREATE OR REPLACE FUNCTION app.unit_address_geocode_fingerprint(
+  p_street text,
+  p_number text,
+  p_district text,
+  p_city text,
+  p_state text,
+  p_postal_code text,
+  p_country text
+) RETURNS text
+LANGUAGE sql
+IMMUTABLE
+SET search_path = ''
+AS $$
+  SELECT md5(concat_ws('|',
+    lower(regexp_replace(btrim(coalesce(p_street, '')), '\s+', ' ', 'g')),
+    lower(regexp_replace(btrim(coalesce(p_number, '')), '\s+', ' ', 'g')),
+    lower(regexp_replace(btrim(coalesce(p_district, '')), '\s+', ' ', 'g')),
+    lower(regexp_replace(btrim(coalesce(p_city, '')), '\s+', ' ', 'g')),
+    upper(regexp_replace(btrim(coalesce(p_state, '')), '\s+', ' ', 'g')),
+    regexp_replace(coalesce(p_postal_code, ''), '\D', '', 'g'),
+    upper(btrim(coalesce(p_country, 'BR')))
+  ));
+$$;
+
+REVOKE ALL ON FUNCTION app.unit_address_geocode_fingerprint(text, text, text, text, text, text, text) FROM PUBLIC;
+
+CREATE OR REPLACE FUNCTION app.trg_queue_unit_address_geocode() RETURNS trigger
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = ''
+AS $$
+DECLARE
+  v_fingerprint text;
+  v_old_fingerprint text;
+  v_request_id bigint;
+  v_coordinates_supplied boolean;
+BEGIN
+  IF NEW.owner_type <> 'unit' THEN
+    RETURN NEW;
+  END IF;
+
+  v_fingerprint := app.unit_address_geocode_fingerprint(
+    NEW.street, NEW.number, NEW.district, NEW.city, NEW.state,
+    NEW.postal_code, NEW.country
+  );
+
+  IF TG_OP = 'UPDATE' THEN
+    v_old_fingerprint := app.unit_address_geocode_fingerprint(
+      OLD.street, OLD.number, OLD.district, OLD.city, OLD.state,
+      OLD.postal_code, OLD.country
+    );
+    IF v_fingerprint = v_old_fingerprint THEN
+      RETURN NEW;
+    END IF;
+  END IF;
+
+  -- A coordinate pair edited alongside the address is an explicit answer and
+  -- wins over automatic geocoding. An unchanged old pair does not: it points
+  -- to the previous address and must be invalidated before the async lookup.
+  v_coordinates_supplied := NEW.latitude IS NOT NULL AND NEW.longitude IS NOT NULL
+    AND (TG_OP = 'INSERT'
+      OR NEW.latitude IS DISTINCT FROM OLD.latitude
+      OR NEW.longitude IS DISTINCT FROM OLD.longitude);
+
+  IF v_coordinates_supplied THEN
+    NEW.metadata := jsonb_set(
+      coalesce(NEW.metadata, '{}'::jsonb),
+      '{geocode}',
+      jsonb_build_object(
+        'status', 'manual',
+        'fingerprint', v_fingerprint,
+        'updated_at', now()
+      ),
+      true
+    );
+    RETURN NEW;
+  END IF;
+
+  NEW.latitude := NULL;
+  NEW.longitude := NULL;
+  IF to_regprocedure('net.http_get(text,jsonb,jsonb,integer)') IS NULL THEN
+    NEW.metadata := jsonb_set(
+      coalesce(NEW.metadata, '{}'::jsonb), '{geocode}',
+      jsonb_build_object('status', 'unconfigured', 'fingerprint', v_fingerprint, 'updated_at', now()), true
+    );
+    RETURN NEW;
+  END IF;
+
+  BEGIN
+    v_request_id := net.http_get(
+      url := 'https://nominatim.openstreetmap.org/search',
+      params := jsonb_strip_nulls(jsonb_build_object(
+        'format', 'jsonv2',
+        'limit', '1',
+        'street', concat_ws(' ', NEW.number, NEW.street),
+        'city', NEW.city,
+        'state', NEW.state,
+        'postalcode', NEW.postal_code,
+        'country', coalesce(nullif(NEW.country, ''), 'BR'),
+        'countrycodes', CASE WHEN coalesce(NEW.country, 'BR') ~* '^[a-z]{2}$'
+                             THEN lower(coalesce(NEW.country, 'BR')) END,
+        'email', 'support@fayz.ai'
+      )),
+      headers := jsonb_build_object(
+        'Accept', 'application/json',
+        'User-Agent', 'Fayz/1.0 (support@fayz.ai)',
+        'Referer', 'https://fayz.ai/'
+      )
+    );
+  EXCEPTION WHEN OTHERS THEN
+    v_request_id := NULL;
+  END;
+
+  NEW.metadata := jsonb_set(
+    coalesce(NEW.metadata, '{}'::jsonb),
+    '{geocode}',
+    jsonb_build_object(
+      'status', CASE WHEN v_request_id IS NULL THEN 'delivery_failed' ELSE 'pending' END,
+      'fingerprint', v_fingerprint,
+      'request_id', v_request_id,
+      'requested_at', now()
+    ),
+    true
+  );
+
+  RETURN NEW;
+END;
+$$;
+
+REVOKE ALL ON FUNCTION app.trg_queue_unit_address_geocode() FROM PUBLIC;
+
+DROP TRIGGER IF EXISTS queue_unit_address_geocode ON public.addresses;
+CREATE TRIGGER queue_unit_address_geocode
+  BEFORE INSERT OR UPDATE OF street, number, district, city, state, postal_code,
+    country, latitude, longitude
+  ON public.addresses
+  FOR EACH ROW
+  EXECUTE FUNCTION app.trg_queue_unit_address_geocode();
+
+COMMENT ON FUNCTION app.trg_queue_unit_address_geocode() IS
+  'Invalidates stale unit coordinates and asynchronously requests geocoding when the normalized address changes.';
+
+CREATE OR REPLACE FUNCTION app.process_unit_address_geocodes(p_limit integer DEFAULT 100)
+RETURNS integer
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = ''
+AS $$
+DECLARE
+  v_row record;
+  v_body jsonb;
+  v_hit jsonb;
+  v_lat numeric;
+  v_lng numeric;
+  v_processed integer := 0;
+  v_status text;
+BEGIN
+  FOR v_row IN
+    SELECT a.id,
+           a.metadata,
+           a.metadata #>> '{geocode,fingerprint}' AS fingerprint,
+           r.status_code,
+           r.error_msg,
+           r.content
+      FROM public.addresses a
+      JOIN net._http_response r
+        ON r.id = CASE
+          WHEN a.metadata #>> '{geocode,request_id}' ~ '^[0-9]+$'
+          THEN (a.metadata #>> '{geocode,request_id}')::bigint
+        END
+     WHERE a.owner_type = 'unit'
+       AND a.metadata #>> '{geocode,status}' = 'pending'
+       AND a.metadata #>> '{geocode,request_id}' ~ '^[0-9]+$'
+     ORDER BY r.created
+     LIMIT greatest(1, least(coalesce(p_limit, 100), 500))
+     FOR UPDATE OF a SKIP LOCKED
+  LOOP
+    v_status := 'failed';
+    v_lat := NULL;
+    v_lng := NULL;
+
+    IF v_row.status_code = 200 THEN
+      BEGIN
+        v_body := v_row.content::jsonb;
+        IF jsonb_typeof(v_body) = 'array' AND jsonb_array_length(v_body) > 0 THEN
+          v_hit := v_body -> 0;
+          IF v_hit ->> 'lat' ~ '^-?[0-9]+(\.[0-9]+)?$'
+             AND v_hit ->> 'lon' ~ '^-?[0-9]+(\.[0-9]+)?$' THEN
+            v_lat := (v_hit ->> 'lat')::numeric;
+            v_lng := (v_hit ->> 'lon')::numeric;
+            IF v_lat BETWEEN -90 AND 90 AND v_lng BETWEEN -180 AND 180 THEN
+              v_status := 'resolved';
+            END IF;
+          ELSE
+            v_status := 'not_found';
+          END IF;
+        ELSE
+          v_status := 'not_found';
+        END IF;
+      EXCEPTION WHEN OTHERS THEN
+        v_status := 'failed';
+      END;
+    END IF;
+
+    UPDATE public.addresses a
+       SET latitude = CASE WHEN v_status = 'resolved' THEN v_lat ELSE NULL END,
+           longitude = CASE WHEN v_status = 'resolved' THEN v_lng ELSE NULL END,
+           metadata = jsonb_set(
+             coalesce(a.metadata, '{}'::jsonb),
+             '{geocode}',
+             jsonb_strip_nulls(jsonb_build_object(
+               'status', v_status,
+               'fingerprint', v_row.fingerprint,
+               'source', CASE WHEN v_status = 'resolved' THEN 'nominatim_openstreetmap' END,
+               'precision', CASE WHEN v_status = 'resolved'
+                                 THEN coalesce(v_hit ->> 'addresstype', v_hit ->> 'type') END,
+               'updated_at', now()
+             )),
+             true
+           )
+     WHERE a.id = v_row.id
+       AND a.metadata #>> '{geocode,fingerprint}' = v_row.fingerprint;
+
+    v_processed := v_processed + 1;
+  END LOOP;
+
+  RETURN v_processed;
+END;
+$$;
+
+REVOKE ALL ON FUNCTION app.process_unit_address_geocodes(integer) FROM PUBLIC;
+
+COMMENT ON FUNCTION app.process_unit_address_geocodes(integer) IS
+  'Consumes completed pg_net geocoding responses and writes coordinates only while the address fingerprint still matches.';
+
+DO $$
+DECLARE
+  v_job_id bigint;
+BEGIN
+  IF to_regnamespace('cron') IS NULL THEN RETURN; END IF;
+
+  FOR v_job_id IN SELECT jobid FROM cron.job WHERE jobname = 'fayz-unit-address-geocode' LOOP
+    PERFORM cron.unschedule(v_job_id);
+  END LOOP;
+
+  PERFORM cron.schedule(
+    'fayz-unit-address-geocode',
+    '10 seconds',
+    'SELECT app.process_unit_address_geocodes()'
+  );
+EXCEPTION WHEN OTHERS THEN
+  RAISE WARNING 'unit address geocoding scheduler was not installed: %', SQLERRM;
+END;
+$$;