@fayz-ai/db 0.24.3 → 0.25.1

package/migrations/214_the_service_reads_facts_and_rings_the_bell.sql

@@ -0,0 +1,143 @@
+-- ============================================================================
+-- 214_the_service_reads_facts_and_rings_the_bell — two doors for the
+-- Integration service, so a fact recorded here can reach a person through it.
+--
+-- ADR 0003: the database records what happened (event_log) and answers who may
+-- see what; the service decides who is TOLD, and how. The first user is the
+-- low-stock alert (plugin-inventory 031 records `inventory.stock_low`; the
+-- service turns it into a bell line for whoever can read the stock, and is
+-- where WhatsApp and e-mail join later).
+--
+-- event_log_for_service(keys, since, limit)
+--   The facts of the given keys recorded since a moment, oldest first. The
+--   service keeps its own receipt of what it handled and asks for a window
+--   rather than a cursor: a transaction that committed late can carry a
+--   created_at older than the newest fact already read, and a cursor would
+--   step over it.
+--
+-- notifications_ring_for_service(tenant, permission, unit, type, title, body,
+--                                link, subject_type, subject_id, at)
+--   One bell line per active member whose effective role holds `permission`
+--   (or the `.manage` of its family) for `unit` — the same rule as
+--   app._has_permission_raw, asked here for every member instead of re-made in
+--   the service. The unique index of 130 on (user, subject_type, subject_id,
+--   type) keeps one line per person per subject: a newer ring marks it unread
+--   and moves it up; replaying the same ring (same `at`) changes nothing. The
+--   bell is poked over realtime as the order bell does. Returns how many people
+--   the line reached.
+--
+-- Granted to the service's role only (and service_role). Replay-safe.
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.event_log_for_service(
+  p_keys  text[],
+  p_since timestamptz,
+  p_limit integer DEFAULT 200
+)
+RETURNS TABLE (
+  id           uuid,
+  tenant_id    uuid,
+  event_key    text,
+  payload      jsonb,
+  subject_type text,
+  subject_id   text,
+  occurred_at  timestamptz,
+  created_at   timestamptz
+)
+LANGUAGE sql
+STABLE
+SECURITY DEFINER
+SET search_path TO ''
+AS $function$
+  SELECT e.id, e.tenant_id, e.event_key, e.payload, e.subject_type, e.subject_id,
+         e.occurred_at, e.created_at
+    FROM public.event_log e
+   WHERE e.event_key = ANY (p_keys)
+     AND e.created_at >= p_since
+   ORDER BY e.created_at, e.id
+   LIMIT least(greatest(coalesce(p_limit, 200), 1), 1000);
+$function$;
+
+CREATE OR REPLACE FUNCTION public.notifications_ring_for_service(
+  p_tenant       uuid,
+  p_permission   text,
+  p_unit         uuid,
+  p_type         text,
+  p_title        text,
+  p_body         text,
+  p_link         text,
+  p_subject_type text,
+  p_subject_id   uuid,
+  p_at           timestamptz DEFAULT now()
+)
+RETURNS integer
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path TO ''
+AS $function$
+DECLARE
+  v_reached integer;
+BEGIN
+  IF p_tenant IS NULL OR coalesce(p_permission, '') = '' OR coalesce(p_type, '') = ''
+     OR coalesce(p_title, '') = '' OR p_subject_id IS NULL THEN
+    RAISE EXCEPTION 'notifications_ring_for_service: tenant, permission, type, title and subject are required'
+      USING ERRCODE = 'invalid_parameter_value';
+  END IF;
+
+  WITH recipients AS (
+    SELECT DISTINCT m.user_id
+      FROM app.memberships m
+     WHERE m.tenant_id = p_tenant AND m.active AND m.user_id IS NOT NULL
+       AND EXISTS (
+             SELECT 1 FROM app.role_permissions rp
+              WHERE rp.tenant_id = p_tenant
+                AND rp.role_id = app.effective_role_id(p_tenant, m.user_id, p_unit)
+                AND rp.permission IN (p_permission, regexp_replace(p_permission, '\.[^.]+$', '.manage')))
+  ), rung AS (
+    INSERT INTO public.notifications (tenant_id, user_id, title, body, type, link, subject_type, subject_id, created_at)
+    SELECT p_tenant, r.user_id, p_title, p_body, p_type, p_link, p_subject_type, p_subject_id, coalesce(p_at, now())
+      FROM recipients r
+    ON CONFLICT (user_id, subject_type, subject_id, type) WHERE subject_id IS NOT NULL
+    DO UPDATE SET read = false, created_at = EXCLUDED.created_at,
+                  title = EXCLUDED.title, body = EXCLUDED.body, link = EXCLUDED.link
+          WHERE public.notifications.created_at < EXCLUDED.created_at
+    RETURNING 1
+  )
+  SELECT count(*)::integer INTO v_reached FROM rung;
+
+  IF v_reached > 0 AND to_regproc('realtime.send') IS NOT NULL THEN
+    BEGIN
+      PERFORM realtime.send(
+        jsonb_build_object('type', p_type, 'subjectId', p_subject_id),
+        'notification',
+        -- Contract with `subscribeBell()` in packages/admin/src/lib/bell.ts.
+        'avisos:' || p_tenant::text,
+        false);
+    EXCEPTION WHEN OTHERS THEN
+      RAISE WARNING 'notifications_ring_for_service: realtime: %', SQLERRM;
+    END;
+  END IF;
+
+  RETURN v_reached;
+END;
+$function$;
+
+DO $$
+DECLARE
+  f text;
+BEGIN
+  FOREACH f IN ARRAY ARRAY[
+    'public.event_log_for_service(text[], timestamptz, integer)',
+    'public.notifications_ring_for_service(uuid, text, uuid, text, text, text, text, text, uuid, timestamptz)'
+  ] LOOP
+    EXECUTE format('REVOKE ALL ON FUNCTION %s FROM PUBLIC', f);
+    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'anon') THEN EXECUTE format('REVOKE ALL ON FUNCTION %s FROM anon', f); END IF;
+    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'authenticated') THEN EXECUTE format('REVOKE ALL ON FUNCTION %s FROM authenticated', f); END IF;
+    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'service_role') THEN EXECUTE format('GRANT EXECUTE ON FUNCTION %s TO service_role', f); END IF;
+    -- The service's role, under its current name and the name it is moving to
+    -- (control_integration): granted to whichever exists, so this file is
+    -- right before and after the rename.
+    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration') THEN EXECUTE format('GRANT EXECUTE ON FUNCTION %s TO fayz_integration', f); END IF;
+    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'control_integration') THEN EXECUTE format('GRANT EXECUTE ON FUNCTION %s TO control_integration', f); END IF;
+  END LOOP;
+END $$;

package/package.json

@@ -3,7 +3,7 @@
   "fayz": {
     "status": "beta"
   },
-  "version": "0.24.3",
+  "version": "0.25.1",
   "description": "Fayz SDK database layer — Drizzle schema primitives, spine references, and migration helpers shared across plugins.",
   "type": "module",
   "sideEffects": false,