@fayz-ai/db 0.24.0 → 0.24.1

package/migrations/206_the_account_access_has_one_screen.sql

@@ -0,0 +1,25 @@
+-- 206: the account's access layers get one screen (Configurações › Acesso):
+-- QR code access (keys from 205), 2FA, invitations and the inactivity timeout.
+-- The last three were written by the old Security screen as an untyped blob in
+-- tenants.settings.security; they become typed keys, and whatever an account
+-- already chose there is carried over. Nothing reads them yet (marked "Em
+-- breve" on screen). Additive and idempotent: an existing access.* value wins.
+
+SELECT app.seed_setting_keys($keys$[
+  { "key": "access.require_2fa", "type": "boolean", "default": false, "scope": "tenant", "reader": "core",
+    "description": "Every login confirms with an authenticator code. Saved, not enforced yet." },
+  { "key": "access.invite_only", "type": "boolean", "default": true, "scope": "tenant", "reader": "core",
+    "description": "Only invited people join the account. Saved, not enforced yet." },
+  { "key": "access.session_timeout_minutes", "type": "number", "default": 0, "scope": "tenant", "reader": "core",
+    "description": "Sign out after this many idle minutes; 0 is no limit. Saved, not enforced yet." }
+]$keys$::jsonb);
+
+UPDATE public.tenants t
+   SET settings = jsonb_set(coalesce(t.settings, '{}'::jsonb), '{access}',
+         coalesce(t.settings -> 'access', '{}'::jsonb)
+         || jsonb_strip_nulls(jsonb_build_object(
+              'require_2fa', t.settings -> 'security' -> 'require2FA',
+              'invite_only', t.settings -> 'security' -> 'inviteOnly',
+              'session_timeout_minutes', t.settings -> 'security' -> 'sessionTimeoutMinutes'))
+         || coalesce(t.settings -> 'access', '{}'::jsonb))
+ WHERE jsonb_typeof(t.settings -> 'security') = 'object';

package/migrations/207_a_line_answers_to_its_document.sql

@@ -0,0 +1,65 @@
+-- 207: a line is read and changed with the permission of the document it
+-- belongs to. public.items holds order, invoice and fulfillment lines; the
+-- insert policy already asked financial.create for a bill's line, but the
+-- scaffold generator rewrote select/update/delete from the table's registry
+-- plugin (orders), so anyone without orders.read stopped seeing the lines of
+-- their own bills — a bill showed its total and no items. The generator now
+-- renders a parent-aware check for public.items, and the policies are rebuilt.
+-- Additive and idempotent.
+
+CREATE OR REPLACE FUNCTION app.scaffold_line_perm_sql(p_action text)
+  RETURNS text
+  LANGUAGE sql IMMUTABLE
+  SET search_path TO ''
+  AS $$
+  SELECT format('(select app.has_permission(CASE parent_kind WHEN %L THEN %L WHEN %L THEN %L ELSE %L END, unit_id))',
+                'invoice', 'financial.' || p_action, 'fulfillment', 'inventory.' || p_action, 'orders.' || p_action);
+$$;
+REVOKE ALL ON FUNCTION app.scaffold_line_perm_sql(text) FROM PUBLIC;
+GRANT ALL ON FUNCTION app.scaffold_line_perm_sql(text) TO service_role;
+
+CREATE OR REPLACE FUNCTION app.scaffold_refresh_policies(p_table text) RETURNS void
+    LANGUAGE plpgsql SECURITY DEFINER
+    SET search_path TO ''
+    AS $$
+DECLARE
+  v_schema text := split_part(replace(p_table, '"', ''), '.', 1);
+  v_name   text := split_part(replace(p_table, '"', ''), '.', 2);
+  v_q      text := format('%I.%I', split_part(replace(p_table, '"', ''), '.', 1), split_part(replace(p_table, '"', ''), '.', 2));
+  r        app.scaffold_registry%ROWTYPE;
+  v_scope  text;
+  v_class  text;
+  v_items  boolean;
+BEGIN
+  SELECT * INTO r FROM app.scaffold_registry WHERE table_schema = v_schema AND table_name = v_name;
+  IF NOT FOUND THEN
+    RAISE EXCEPTION 'scaffold_refresh_policies: %.% is not in the scaffold registry', v_schema, v_name USING ERRCODE = 'P0002';
+  END IF;
+
+  -- The `unit` rendering drops the `unit_id IS NULL OR` branch, which is only
+  -- sound when the column really is NOT NULL. Declaring a table `unit` while its
+  -- writers still produce NULLs is exactly the state this file leaves most tables
+  -- in — so the optimisation follows the CONSTRAINT, never the label. Getting
+  -- this wrong hid every unit-less financial movement and took
+  -- v_financial_customer_credit to 0.00.
+  SELECT CASE WHEN c.is_nullable = 'NO' THEN 'unit' ELSE NULL END INTO v_class
+    FROM information_schema.columns c
+   WHERE c.table_schema = v_schema AND c.table_name = v_name AND c.column_name = 'unit_id';
+  v_scope := app.scaffold_scope_sql(r.resource_type, r.plugin, v_class);
+  v_items := v_schema = 'public' AND v_name = 'items';
+
+  EXECUTE format('DROP POLICY IF EXISTS %I ON %s', v_name || '_authz_select', v_q);
+  EXECUTE format('CREATE POLICY %I ON %s FOR SELECT TO authenticated USING (%s AND %s)',
+                 v_name || '_authz_select', v_q, v_scope, CASE WHEN v_items THEN app.scaffold_line_perm_sql('read') ELSE app.scaffold_perm_sql(r.plugin || '.read', v_class) END);
+  EXECUTE format('DROP POLICY IF EXISTS %I ON %s', v_name || '_authz_update', v_q);
+  EXECUTE format('CREATE POLICY %I ON %s FOR UPDATE TO authenticated USING (%s AND %s) WITH CHECK (tenant_id = (select app.current_tenant_id()) AND (unit_id IS NULL OR (select app.has_unit(unit_id))) AND %s)',
+                 v_name || '_authz_update', v_q, v_scope, CASE WHEN v_items THEN app.scaffold_line_perm_sql('edit') ELSE app.scaffold_perm_sql(r.plugin || '.edit', v_class) END,
+                 CASE WHEN v_items THEN app.scaffold_line_perm_sql('edit') ELSE format('(select app.has_permission(%L, unit_id))', r.plugin || '.edit') END);
+  EXECUTE format('DROP POLICY IF EXISTS %I ON %s', v_name || '_authz_delete', v_q);
+  EXECUTE format('CREATE POLICY %I ON %s FOR DELETE TO authenticated USING (%s AND %s)',
+                 v_name || '_authz_delete', v_q, v_scope, CASE WHEN v_items THEN app.scaffold_line_perm_sql('delete') ELSE app.scaffold_perm_sql(r.plugin || '.delete', v_class) END);
+END $$;
+
+
+SELECT app.scaffold_refresh_policies('public.items')
+ WHERE EXISTS (SELECT 1 FROM app.scaffold_registry WHERE table_schema = 'public' AND table_name = 'items');

package/migrations/208_a_service_opens_and_closes_per_unit.sql

@@ -0,0 +1,18 @@
+-- 208: the top-bar switches "Delivery" and "Cardápio QR" say whether the house
+-- is taking those orders right now, and each unit answers for itself. Until now
+-- the switches held their state in the screen only and forgot it on reload.
+-- `delivery.enabled` becomes unit-scoped (house default + a unit's own value; no
+-- unit holds one yet), and the QR menu gets its key. Additive and idempotent.
+
+SELECT app.seed_setting_keys($keys$[
+  {
+    "key": "delivery.enabled", "type": "boolean", "default": true, "scope": "unit",
+    "reader": "plugin:orders",
+    "description": "Se a casa entrega. Desligado, o quadro de despacho segue existindo para o histórico e nenhum canal novo nasce como entrega."
+  },
+  {
+    "key": "qr_menu.enabled", "type": "boolean", "default": true, "scope": "unit",
+    "reader": "plugin:menu",
+    "description": "Se o cardápio digital (QR) está recebendo pedidos agora. Desligado, a mesa vê o cardápio e não pede."
+  }
+]$keys$::jsonb);

package/package.json

@@ -3,7 +3,7 @@
   "fayz": {
     "status": "beta"
   },
-  "version": "0.24.0",
+  "version": "0.24.1",
   "description": "Fayz SDK database layer — Drizzle schema primitives, spine references, and migration helpers shared across plugins.",
   "type": "module",
   "sideEffects": false,