@fayz-ai/plugin-agenda 0.13.3 → 0.13.5

package/dist/index.js

@@ -3243,17 +3243,6 @@ function CalendarView() {
   }, []);
   return /* @__PURE__ */ jsxs("div", { ref: shellRef, className: "flex", style: { height: shellHeight ?? void 0 }, children: [
     /* @__PURE__ */ jsxs("div", { className: "hidden md:flex w-[220px] shrink-0 flex-col overflow-y-auto py-4 px-3 mr-4", children: [
-      /* @__PURE__ */ jsxs(
-        "button",
-        {
-          onClick: () => openModal("create"),
-          className: "flex items-center gap-2 rounded-button bg-primary text-primary-foreground border border-primary pl-3 pr-4 py-1.5 text-sm font-semibold hover:bg-primary/90 shadow-button-primary active:shadow-button-inset transition-all mb-6 w-fit",
-          children: [
-            /* @__PURE__ */ jsx(Plus, { className: "h-4 w-4" }),
-            t2("agenda.sidebar.create")
-          ]
-        }
-      ),
       /* @__PURE__ */ jsx(MiniCalendar, { selectedDate, onDateSelect: handleMiniDateSelect }),
       config.capabilities.professional && /* @__PURE__ */ jsxs(Fragment, { children: [
         /* @__PURE__ */ jsx("div", { className: "h-px bg-border my-4" }),
@@ -3282,7 +3271,7 @@ function CalendarView() {
         ) })
       ] })
     ] }),
-    isMobile && /* @__PURE__ */ jsx(PageHeaderActions, { children: /* @__PURE__ */ jsx(
+    /* @__PURE__ */ jsx(PageHeaderActions, { children: /* @__PURE__ */ jsx(
       PageActions,
       {
         actions: [
@@ -3329,29 +3318,15 @@ function CalendarView() {
             ] }),
             !(isMobile && !mobileGridActive) && /* @__PURE__ */ jsx("h2", { className: "truncate text-base font-normal sm:text-lg", children: calendarTitle })
           ] }),
-          /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-1 shrink-0", children: [
-            /* @__PURE__ */ jsx("div", { className: "hidden md:flex items-center gap-1", children: viewOptions.map((opt) => /* @__PURE__ */ jsx(
-              "button",
-              {
-                onClick: () => handleViewChange(opt.key),
-                className: `rounded-md px-3 py-1 text-sm transition-colors ${currentView === opt.key ? "bg-primary/10 text-primary font-medium" : "text-muted-foreground hover:bg-muted/50"}`,
-                children: t2(opt.labelKey)
-              },
-              opt.key
-            )) }),
-            /* @__PURE__ */ jsx(
-              Button,
-              {
-                variant: "outline",
-                size: "icon",
-                onClick: () => window.location.hash = "/settings/agenda",
-                "aria-label": t2("agenda.settings.title"),
-                title: t2("agenda.settings.title"),
-                className: "ml-1 hidden md:inline-flex",
-                children: /* @__PURE__ */ jsx(Settings, { className: "h-4 w-4" })
-              }
-            )
-          ] })
+          /* @__PURE__ */ jsx("div", { className: "flex items-center gap-1 shrink-0", children: /* @__PURE__ */ jsx("div", { className: "hidden md:flex items-center gap-1", children: viewOptions.map((opt) => /* @__PURE__ */ jsx(
+            "button",
+            {
+              onClick: () => handleViewChange(opt.key),
+              className: `rounded-md px-3 py-1 text-sm transition-colors ${currentView === opt.key ? "bg-primary/10 text-primary font-medium" : "text-muted-foreground hover:bg-muted/50"}`,
+              children: t2(opt.labelKey)
+            },
+            opt.key
+          )) }) })
         ] }),
         /* @__PURE__ */ jsx("div", { className: "flex md:hidden items-center gap-1 overflow-x-auto px-3 pb-2", children: mobileViewOptions.map((opt) => /* @__PURE__ */ jsx(
           "button",
@@ -4914,7 +4889,6 @@ var en = {
   "agenda.sidebar.searchAgendas": "Find an agenda",
   "agenda.sidebar.tooManyAgendas": "Up to {max} agendas at a time \u2014 uncheck one to add another.",
   "agenda.sidebar.allLocations": "All locations",
-  "agenda.sidebar.create": "Create",
   "agenda.sidebar.location": "Location",
   "agenda.sidebar.status": "Status",
   "agenda.toolbar.next": "Next",
@@ -5138,7 +5112,6 @@ var ptBR = {
   "agenda.sidebar.searchAgendas": "Buscar agenda",
   "agenda.sidebar.tooManyAgendas": "At\xE9 {max} agendas por vez \u2014 desmarque uma para incluir outra.",
   "agenda.sidebar.allLocations": "Todos os locais",
-  "agenda.sidebar.create": "Criar",
   "agenda.sidebar.location": "Local",
   "agenda.sidebar.status": "Status",
   "agenda.toolbar.next": "Pr\xF3ximo",
@@ -6927,6 +6900,678 @@ CREATE OR REPLACE VIEW public.v_appointments WITH (security_invoker = true) AS
         LIMIT 1
      ) inv ON true;
 `;
+var MIGRATION_007_O_CASCADE_LEVOU_A_AGENDA_JUNTO = `-- O CASCADE levou a agenda junto.
+--
+-- Sintoma: a tela de check-in (\`#/agenda/checkin\`) demora e n\xE3o abre. A causa
+-- n\xE3o est\xE1 na agenda \u2014 est\xE1 numa migration do FINANCEIRO, escrita tr\xEAs dias
+-- antes.
+--
+-- As migrations 044 e 045 do plugin-financial come\xE7am com:
+--
+--     DROP VIEW IF EXISTS public.v_financial_invoice_balances CASCADE;
+--
+-- e recriam, logo abaixo, \`v_financial_invoice_balances\` e \`v_invoice_balances\`
+-- \u2014 as duas que o autor (eu) sabia que dependiam. O CASCADE, por\xE9m, n\xE3o se
+-- limita ao que o autor conhece: ele derruba a \xE1rvore inteira. Debaixo de
+-- \`v_invoice_balances\` moravam mais seis views, de dois plugins:
+--
+--     v_appointments                  (agenda \u2014 o read model do agendamento)
+--       \u251C\u2500\u2500 rep_appointments_by_period
+--       \u2502     \u2514\u2500\u2500 plg_agenda_rep_bookings
+--       \u251C\u2500\u2500 rep_confirmation_queue
+--       \u251C\u2500\u2500 rep_revenue_by_professional
+--       \u2514\u2500\u2500 rep_revenue_by_service
+--     plg_financial_rep_receivables   (financeiro \u2014 restaurada na 053 de l\xE1)
+--
+-- \`v_appointments\` l\xEA \`v_invoice_balances\` desde a migration 006 desta corrente
+-- (o LATERAL que fez a agenda parar de apurar 8.134 faturas por agendamento).
+-- Essa depend\xEAncia foi o conserto de um problema real e continua certa; o que
+-- ela criou, sem ningu\xE9m notar, foi uma aresta do financeiro para a agenda \u2014
+-- e \xE9 por ela que o CASCADE passou.
+--
+-- Nada gritou. O \`DROP\` n\xE3o avisa o que levou, o \`apply\` das duas migrations
+-- passou verde, a lista de contas a pagar (o que eu estava consertando) ficou
+-- correta, e a agenda s\xF3 falha quando algu\xE9m a abre. O erro que chega ao
+-- navegador \xE9 um 404 do PostgREST sobre uma rela\xE7\xE3o que o c\xF3digo tem certeza
+-- de que existe \u2014 pista que aponta para o lugar errado.
+--
+-- \u2500\u2500 O que esta migration faz \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Recria as cinco views da agenda, com o corpo EXATO em que estavam: o de
+-- \`v_appointments\` vem da migration 006 (a forma com LATERAL, n\xE3o a do
+-- baseline), e os quatro relat\xF3rios v\xEAm do baseline, que n\xE3o os alterou desde
+-- ent\xE3o. Nenhuma coluna muda, nenhuma regra muda \u2014 o que muda \xE9 existirem.
+--
+-- \`WITH (security_invoker = true)\` expl\xEDcito em todas: uma view recriada n\xE3o
+-- herda op\xE7\xE3o nenhuma, e sem isso ela passa a rodar com os direitos do dono \u2014
+-- a RLS de quem l\xEA deixa de valer. Os GRANTs tamb\xE9m s\xE3o reescritos, porque
+-- morreram com as views.
+--
+-- \u2500\u2500 A li\xE7\xE3o, para a pr\xF3xima \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Antes de um \`DROP \u2026 CASCADE\`, pergunte ao banco quem depende:
+--
+--     SELECT DISTINCT dependente.relname
+--       FROM pg_depend d
+--       JOIN pg_rewrite r   ON r.oid = d.objid
+--       JOIN pg_class dependente ON dependente.oid = r.ev_class
+--      WHERE d.refobjid = 'public.v_financial_invoice_balances'::regclass
+--        AND dependente.relname <> 'v_financial_invoice_balances';
+--
+-- A lista que voltar \xE9 a lista que a migration tem que recriar. E depois de
+-- aplicar, o diff entre as views que o c\xF3digo declara e as que o banco tem \xE9 o
+-- que pega o que escapou \u2014 foi ele que encontrou estas seis.
+--
+-- Idempotente.
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 1. v_appointments \u2014 corpo da migration 006 (LATERAL sobre v_invoice_balances)
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE OR REPLACE VIEW public.v_appointments WITH (security_invoker = true) AS
+ SELECT b.id,
+    b.tenant_id,
+    b.kind,
+    b.starts_at,
+    b.ends_at,
+    b.status,
+    b.notes,
+    b.order_id,
+    b.location_id,
+    b.metadata,
+    b.created_at,
+    b.updated_at,
+    b.party_id AS client_id,
+    COALESCE(pc.name, b.metadata ->> 'title'::text) AS client_name,
+    pc.phone AS client_phone,
+    pc.email AS client_email,
+    pc.avatar_url AS client_avatar_url,
+    b.assignee_id AS professional_id,
+    ps.name AS professional_name,
+    ps.avatar_url AS professional_avatar_url,
+    l.name AS location_name,
+    o.total AS order_total,
+    o.status AS order_status,
+    EXTRACT(epoch FROM COALESCE(b.ends_at, b.starts_at) - b.starts_at)::integer / 60 AS total_duration_minutes,
+    o.reference_number,
+    o.status AS stage,
+    o.metadata ->> 'direction'::text AS direction,
+    ( SELECT json_agg(json_build_object('id', oi.id, 'serviceId', oi.product_id, 'name', oi.name, 'durationMinutes', oi.duration_minutes, 'price', oi.unit_price, 'assigneeId', oi.assignee_id) ORDER BY oi.sort_order) AS json_agg
+           FROM items oi
+          WHERE oi.order_id = b.order_id) AS services,
+    inv.status AS payment_status,
+    inv.paid AS order_paid,
+    inv.balance AS order_balance
+   FROM appointments b
+     LEFT JOIN people pc ON pc.id = b.party_id
+     LEFT JOIN people ps ON ps.id = b.assignee_id
+     LEFT JOIN app.units l ON l.id = b.location_id
+     LEFT JOIN orders o ON o.id = b.order_id
+     LEFT JOIN LATERAL (
+       SELECT vb.status, vb.paid, vb.balance
+         FROM v_invoice_balances vb
+        WHERE vb.invoice_id = b.order_id
+        LIMIT 1
+     ) inv ON true;
+
+COMMENT ON VIEW public.v_appointments IS
+  'O read model do agendamento: a linha do calend\xE1rio com cliente, '
+  'profissional, unidade, itens e o estado de pagamento da Venda. L\xEA '
+  'v_invoice_balances por LATERAL para que o filtro des\xE7a por baixo do '
+  'agregado \u2014 como JOIN, a agenda apurava as faturas do tenant inteiro por '
+  'agendamento.';
+
+GRANT SELECT ON TABLE public.v_appointments TO authenticated, service_role;
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 2. Os quatro relat\xF3rios que penduram nela, e o quinto que pendura no primeiro
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE OR REPLACE VIEW public.rep_appointments_by_period WITH (security_invoker = true) AS
+ SELECT tenant_id,
+    id AS booking_id,
+    (starts_at)::date AS date,
+    starts_at,
+    client_id,
+    client_name,
+    professional_id,
+    professional_name,
+    COALESCE(((services -> 0) ->> 'name'::text), ((services -> 0) ->> 'serviceName'::text)) AS service_name,
+    status,
+    order_total AS revenue,
+    created_at,
+    updated_at
+   FROM public.v_appointments b;
+
+GRANT SELECT ON TABLE public.rep_appointments_by_period TO authenticated, service_role;
+
+CREATE OR REPLACE VIEW public.plg_agenda_rep_bookings WITH (security_invoker = true) AS
+ SELECT tenant_id,
+    booking_id,
+    date,
+    starts_at,
+    client_id,
+    client_name,
+    professional_id,
+    professional_name,
+    service_name,
+    status,
+    revenue AS booked_revenue,
+        CASE
+            WHEN (status = ANY (ARRAY['cancelled'::text, 'no_show'::text])) THEN (0)::numeric
+            ELSE COALESCE(revenue, (0)::numeric)
+        END AS effective_revenue,
+        CASE
+            WHEN (status = ANY (ARRAY['cancelled'::text, 'no_show'::text])) THEN COALESCE(revenue, (0)::numeric)
+            ELSE (0)::numeric
+        END AS lost_revenue,
+        CASE
+            WHEN (status = 'completed'::text) THEN 1
+            ELSE 0
+        END AS is_completed,
+        CASE
+            WHEN (status = 'cancelled'::text) THEN 1
+            ELSE 0
+        END AS is_cancelled,
+        CASE
+            WHEN (status = 'no_show'::text) THEN 1
+            ELSE 0
+        END AS is_no_show,
+    created_at,
+    updated_at
+   FROM public.rep_appointments_by_period b;
+
+GRANT SELECT ON TABLE public.plg_agenda_rep_bookings TO authenticated, service_role;
+
+CREATE OR REPLACE VIEW public.rep_confirmation_queue WITH (security_invoker = true) AS
+ SELECT tenant_id,
+    id AS booking_id,
+    (starts_at)::date AS date,
+    starts_at,
+    client_id,
+    client_name,
+    professional_id,
+    professional_name,
+    COALESCE(((services -> 0) ->> 'name'::text), ((services -> 0) ->> 'serviceName'::text)) AS service_name,
+    'pending'::text AS confirmation_status,
+    NULL::text AS confirmation_channel,
+    NULL::timestamp with time zone AS confirmation_sent_at,
+    NULL::timestamp with time zone AS confirmed_at,
+    created_at,
+    updated_at
+   FROM public.v_appointments b
+  WHERE ((status <> ALL (ARRAY['cancelled'::text, 'no_show'::text])) AND (starts_at >= (now() - '1 day'::interval)));
+
+GRANT SELECT ON TABLE public.rep_confirmation_queue TO authenticated, service_role;
+
+CREATE OR REPLACE VIEW public.rep_revenue_by_professional WITH (security_invoker = true) AS
+ SELECT tenant_id,
+    (starts_at)::date AS date,
+    professional_id,
+    COALESCE(professional_name, 'Sem profissional'::text) AS professional_name,
+    (count(*))::integer AS appointment_count,
+    (COALESCE(sum(NULLIF(order_total, (0)::numeric)), (0)::numeric))::numeric(14,2) AS total_revenue,
+    (COALESCE(avg(NULLIF(order_total, (0)::numeric)), (0)::numeric))::numeric(14,2) AS avg_ticket,
+    (0)::numeric(14,2) AS commission,
+    max(updated_at) AS updated_at
+   FROM public.v_appointments b
+  WHERE (status <> ALL (ARRAY['cancelled'::text, 'no_show'::text]))
+  GROUP BY tenant_id, ((starts_at)::date), professional_id, COALESCE(professional_name, 'Sem profissional'::text);
+
+GRANT SELECT ON TABLE public.rep_revenue_by_professional TO authenticated, service_role;
+
+CREATE OR REPLACE VIEW public.rep_revenue_by_service WITH (security_invoker = true) AS
+ SELECT b.tenant_id,
+    (b.starts_at)::date AS date,
+    NULLIF((service_item.value ->> 'serviceId'::text), ''::text) AS service_id,
+    COALESCE((service_item.value ->> 'name'::text), (service_item.value ->> 'serviceName'::text), 'Sem servico'::text) AS service_name,
+    (count(DISTINCT b.id))::integer AS quantity,
+    (COALESCE(sum((NULLIF((service_item.value ->> 'price'::text), ''::text))::numeric), (0)::numeric))::numeric(14,2) AS total_revenue,
+    (COALESCE(avg((NULLIF((service_item.value ->> 'price'::text), ''::text))::numeric), (0)::numeric))::numeric(14,2) AS avg_ticket,
+    max(b.updated_at) AS updated_at
+   FROM (public.v_appointments b
+     CROSS JOIN LATERAL jsonb_array_elements(COALESCE((b.services)::jsonb, '[]'::jsonb)) service_item(value))
+  WHERE (b.status <> ALL (ARRAY['cancelled'::text, 'no_show'::text]))
+  GROUP BY b.tenant_id, ((b.starts_at)::date), NULLIF((service_item.value ->> 'serviceId'::text), ''::text), COALESCE((service_item.value ->> 'name'::text), (service_item.value ->> 'serviceName'::text), 'Sem servico'::text);
+
+GRANT SELECT ON TABLE public.rep_revenue_by_service TO authenticated, service_role;
+`;
+var MIGRATION_008_A_AGENDA_DO_V1_ATRAVESSA = `-- A agenda do V1 atravessa.
+--
+-- 354.206 agendamentos e 314.310 servi\xE7os agendados do Espa\xE7o Facial n\xE3o tinham
+-- para onde ir: \`appointments\` e \`appointment_services\` n\xE3o estavam nem na
+-- \`migration.allowlist\` nem na \`migration.excluded_tables\`. N\xE3o era uma decis\xE3o
+-- de deixar de fora \u2014 era a aus\xEAncia de decis\xE3o, e a tela de check-in abria
+-- vazia por isso.
+--
+-- \u2500\u2500 O de-para \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+--   V1 appointments          \u2192 public.appointments
+--   V1 appointment_services  \u2192 public.appointment_items
+--
+-- Tr\xEAs refer\xEAncias o ledger resolve, porque as tr\xEAs j\xE1 atravessaram:
+-- \`client_id\` \u2192 \`public.people\` (123.304 linhas), \`professional_id\` \u2192
+-- \`public.people\` (300) e \`service_id\` \u2192 \`public.products\` (122).
+--
+-- \u2500\u2500 A unidade, que o V1 n\xE3o guarda no agendamento \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- \`public.appointments\` do V2 quer \`unit_id\` \u2014 \xE9 por ela que a rede de 63
+-- unidades filtra a agenda. O V1 n\xE3o tem essa coluna: ele guarda
+-- \`service_location_id\`, a SALA, e \xE9 a sala que sabe a unidade
+-- (\`service_locations.unit_id\`, um uuid que casa com \`companies.uuid\`).
+--
+-- A ponte \xE9 feita no extrator (\`augment\` do Step), n\xE3o aqui, porque ela \xE9
+-- conhecimento da ORIGEM. Medido em 19/09/2026, tenant 1:
+--
+--     agendamentos                              354.206
+--     com sala que resolve a unidade            352.315   (99,5%)
+--     sem sala nenhuma                            1.891
+--
+-- Os 1.891 sem sala entram com \`unit_id\` NULL \u2014 \xE9 o que o V1 tem, e inventar
+-- unidade para eles seria coloc\xE1-los na agenda de algu\xE9m.
+--
+-- \u2500\u2500 O estado \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- O vocabul\xE1rio do V1 tem sete palavras; o de \`appointment_kinds.appointment\`
+-- tem seis. Cinco s\xE3o a mesma palavra. Sobram duas, e o mapa \xE9 declarado no
+-- \`writer_args\` \u2014 dado, n\xE3o c\xF3digo:
+--
+--     unmarked \u2192 cancelled   desmarcado \xE9 cancelado; o V2 n\xE3o tem a terceira
+--                            palavra, e 'unmarked' n\xE3o \xE9 um estado, \xE9 a
+--                            aus\xEAncia de um.
+--     waiting  \u2192 confirmed   a cliente chegou e espera. O V2 diz isso com
+--                            \`checked_in_at\` (migration 003 desta corrente),
+--                            que o pr\xF3prio V1 j\xE1 preenche \u2014 ent\xE3o a palavra
+--                            vira 'confirmed' e o REL\xD3GIO carrega o resto.
+--
+-- O original fica em \`metadata.migration.source_status\`, como em toda tradu\xE7\xE3o
+-- de vocabul\xE1rio deste motor.
+--
+-- \u2500\u2500 O que N\xC3O vem \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- O agendamento do V1 n\xE3o tem Venda. \`order_id\` fica NULL, e \xE9 por isso que
+-- \`v_appointments\` traz \`order_total\`/\`payment_status\` vazios para o que
+-- migrou: o financeiro do V1 chega pela fatura (\`invoices\`), que \xE9 outra
+-- tabela e outro caminho. Costurar as duas \xE9 trabalho de reconcilia\xE7\xE3o, n\xE3o de
+-- transporte, e faz\xEA-lo aqui inventaria uma Venda que n\xE3o existe.
+--
+-- Idempotente.
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 1. O vocabul\xE1rio fechado aprende duas palavras
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+-- A lista era LITERAL aqui, e literal \xE9 o que quebra a corrente: a restri\xE7\xE3o \xE9
+-- um vocabul\xE1rio fechado, e reescrev\xEA-la por extenso APAGA toda palavra que um
+-- passo anterior tenha acrescentado depois de algu\xE9m escrever esta lista. Foi o
+-- que aconteceu com \`fin_cash_session\`, registrado por \`financial/072\`, e com
+-- \`crm_pipeline\`, que o spine acrescenta antes das cadeias de plugin: a linha j\xE1
+-- existia no de-para e a restaurada n\xE3o a admitia \u2014
+-- \`check constraint "allowlist_writer_check" is violated by some row\`, e o
+-- encadeamento do zero parava aqui.
+--
+-- Vira acr\xE9scimo, que \xE9 como \`inventory/004\` j\xE1 fazia: l\xEA a defini\xE7\xE3o vigente,
+-- costura as duas palavras novas dentro dela e devolve. O que veio antes
+-- sobrevive, e o passo seguinte herda tudo.
+DO $$
+DECLARE v_def text;
+BEGIN
+  SELECT pg_get_constraintdef(oid) INTO v_def
+    FROM pg_constraint WHERE conname = 'allowlist_writer_check';
+  IF v_def IS NULL OR strpos(v_def, 'appointment_item') > 0 THEN RETURN; END IF;
+  ALTER TABLE migration.allowlist DROP CONSTRAINT allowlist_writer_check;
+  EXECUTE replace(
+    'ALTER TABLE migration.allowlist ADD CONSTRAINT allowlist_writer_check ' || v_def,
+    '''person''::text',
+    '''person''::text, ''appointment''::text, ''appointment_item''::text');
+END $$;
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 2. O writer do agendamento
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE OR REPLACE FUNCTION migration.upsert_appointment(
+  p_tenant uuid, p_id uuid, p_row jsonb, p_args jsonb DEFAULT '{}'::jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER SET search_path TO ''
+AS $function$
+DECLARE
+  v_map        jsonb := coalesce(p_args -> 'status_map', '{}'::jsonb);
+  v_kind       text  := coalesce(p_args ->> 'kind', 'appointment');
+  v_src_status text  := p_row ->> 'status';
+  v_status     text;
+  v_meta       jsonb := coalesce(p_row -> 'metadata', '{}'::jsonb);
+  v_starts     timestamptz;
+  v_ends       timestamptz;
+  v_dur        integer;
+  v_party      uuid;
+  v_assignee   uuid;
+  v_unit       uuid;
+  v_existing   uuid;
+  v_created    boolean := false;
+  v_standalone boolean := migration._standalone();
+BEGIN
+  IF v_standalone THEN PERFORM migration._assert_fence(p_tenant); PERFORM set_config('migration.writer', 'on', true); END IF;
+  IF p_id IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'state', 'reason', 'an appointment needs an id');
+  END IF;
+
+  -- A hora \xE9 o agendamento. Sem ela n\xE3o h\xE1 linha no calend\xE1rio, e uma linha
+  -- sem hora n\xE3o \xE9 um agendamento incompleto: \xE9 outra coisa.
+  v_starts := (p_row ->> 'starts_at')::timestamptz;
+  IF v_starts IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'value', 'reason', 'an appointment needs starts_at');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM public.appointment_kinds k WHERE k.kind = v_kind) THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'value',
+      'reason', format('appointment kind %L is not declared in public.appointment_kinds', v_kind));
+  END IF;
+
+  v_dur  := nullif(p_row ->> 'duration_minutes', '')::integer;
+  v_ends := v_starts + make_interval(mins => coalesce(v_dur, 0));
+
+  v_status := coalesce(v_map ->> coalesce(v_src_status, ''), v_map ->> '*', v_src_status, 'scheduled');
+  -- \`appointment_kinds.statuses\` \xE9 text[], n\xE3o jsonb: o vocabul\xE1rio do tipo \xE9
+  -- uma lista de palavras, e \`= ANY (array)\` \xE9 como se pergunta a ela.
+  IF NOT EXISTS (SELECT 1 FROM public.appointment_kinds k
+                  WHERE k.kind = v_kind AND v_status = ANY (k.statuses)) THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'value',
+      'reason', format('status %L is not one of the statuses declared for kind %L', v_status, v_kind));
+  END IF;
+  v_meta := migration._deep_set(v_meta, ARRAY['migration', 'source_status'], to_jsonb(v_src_status));
+
+  BEGIN v_party    := (p_row ->> 'party_id')::uuid;    EXCEPTION WHEN OTHERS THEN v_party := NULL; END;
+  BEGIN v_assignee := (p_row ->> 'assignee_id')::uuid; EXCEPTION WHEN OTHERS THEN v_assignee := NULL; END;
+  BEGIN v_unit     := (p_row ->> 'unit_id')::uuid;     EXCEPTION WHEN OTHERS THEN v_unit := NULL; END;
+
+  SELECT tenant_id INTO v_existing FROM public.appointments WHERE id = p_id;
+  IF v_existing IS NOT NULL AND v_existing <> p_tenant THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'tenant',
+      'reason', format('appointment %s already exists in another tenant', p_id));
+  END IF;
+
+  IF v_existing IS NULL THEN
+    INSERT INTO public.appointments
+      (id, tenant_id, kind, party_id, assignee_id, location_id, unit_id,
+       starts_at, ends_at, status, notes, metadata, checked_in_at, created_at, updated_at)
+    VALUES
+      (p_id, p_tenant, v_kind, v_party, v_assignee, v_unit, v_unit,
+       v_starts, v_ends, v_status, p_row ->> 'notes', v_meta,
+       nullif(p_row ->> 'checked_in_at', '')::timestamptz,
+       coalesce(nullif(p_row ->> 'created_at', '')::timestamptz, now()),
+       coalesce(nullif(p_row ->> 'updated_at', '')::timestamptz, now()));
+    v_created := true;
+  ELSE
+    UPDATE public.appointments SET
+      kind          = v_kind,
+      party_id      = coalesce(v_party, party_id),
+      assignee_id   = coalesce(v_assignee, assignee_id),
+      -- \`location_id\` \xE9 a unidade na leitura (v_appointments junta app.units
+      -- por ela); \`unit_id\` \xE9 a unidade na RLS. As duas apontam para a mesma
+      -- coisa e \xE9 isso que as mant\xE9m verdadeiras juntas.
+      location_id   = coalesce(v_unit, location_id),
+      starts_at     = v_starts,
+      ends_at       = v_ends,
+      status        = CASE WHEN p_row ? 'status' THEN v_status ELSE status END,
+      notes         = CASE WHEN p_row ? 'notes' THEN p_row ->> 'notes' ELSE notes END,
+      checked_in_at = CASE WHEN p_row ? 'checked_in_at'
+                           THEN nullif(p_row ->> 'checked_in_at', '')::timestamptz ELSE checked_in_at END,
+      metadata      = migration._merge_meta(metadata, v_meta),
+      updated_at    = coalesce(nullif(p_row ->> 'updated_at', '')::timestamptz, now())
+    WHERE id = p_id;
+  END IF;
+
+  PERFORM migration._set_unit('public.appointments', p_id, v_unit);
+
+  IF v_standalone THEN
+    PERFORM migration._audit(p_tenant, 'public.appointments', p_id,
+      jsonb_build_object('reason', CASE WHEN v_created THEN 'created' ELSE 'updated' END));
+  END IF;
+  RETURN jsonb_build_object('status', 'migrated', 'target_id', p_id,
+    'reason', CASE WHEN v_created THEN 'created' ELSE 'updated' END);
+END $function$;
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 3. O writer do servi\xE7o agendado
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE OR REPLACE FUNCTION migration.upsert_appointment_item(
+  p_tenant uuid, p_id uuid, p_row jsonb, p_args jsonb DEFAULT '{}'::jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER SET search_path TO ''
+AS $function$
+DECLARE
+  v_meta       jsonb := coalesce(p_row -> 'metadata', '{}'::jsonb);
+  v_booking    uuid;
+  v_service    uuid;
+  v_name       text;
+  v_unit       uuid;
+  v_existing   uuid;
+  v_created    boolean := false;
+  v_standalone boolean := migration._standalone();
+BEGIN
+  IF v_standalone THEN PERFORM migration._assert_fence(p_tenant); PERFORM set_config('migration.writer', 'on', true); END IF;
+  IF p_id IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'state', 'reason', 'an appointment item needs an id');
+  END IF;
+
+  BEGIN v_booking := (p_row ->> 'booking_id')::uuid; EXCEPTION WHEN OTHERS THEN v_booking := NULL; END;
+  -- Um item sem agendamento n\xE3o \xE9 um item solto, \xE9 um item perdido. Recusa em
+  -- vez de escrever uma linha que nenhuma tela alcan\xE7a.
+  IF v_booking IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'fk',
+      'reason', 'an appointment item needs the appointment it belongs to');
+  END IF;
+
+  BEGIN v_service := (p_row ->> 'service_id')::uuid; EXCEPTION WHEN OTHERS THEN v_service := NULL; END;
+
+  -- O nome \xE9 NOT NULL no destino. A origem guarda o nome no SERVI\xC7O, n\xE3o no
+  -- item, ent\xE3o ele vem pela ponte do extrator; se faltar, o nome do produto
+  -- que a refer\xEAncia resolveu serve, e s\xF3 ent\xE3o o r\xF3tulo gen\xE9rico.
+  v_name := coalesce(
+    nullif(p_row ->> 'name', ''),
+    (SELECT pr.name FROM public.products pr WHERE pr.id = v_service),
+    'Servi\xE7o');
+
+  SELECT a.unit_id INTO v_unit FROM public.appointments a WHERE a.id = v_booking;
+
+  SELECT tenant_id INTO v_existing FROM public.appointment_items WHERE id = p_id;
+  IF v_existing IS NOT NULL AND v_existing <> p_tenant THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'tenant',
+      'reason', format('appointment item %s already exists in another tenant', p_id));
+  END IF;
+
+  IF v_existing IS NULL THEN
+    INSERT INTO public.appointment_items
+      (id, tenant_id, booking_id, service_id, name, duration_minutes, price,
+       sort_order, unit_id, metadata, created_at, updated_at)
+    VALUES
+      (p_id, p_tenant, v_booking, v_service, v_name,
+       nullif(p_row ->> 'duration_minutes', '')::integer,
+       coalesce(nullif(p_row ->> 'price', '')::numeric, 0),
+       coalesce(nullif(p_row ->> 'sort_order', '')::integer, 0),
+       v_unit, v_meta,
+       coalesce(nullif(p_row ->> 'created_at', '')::timestamptz, now()),
+       coalesce(nullif(p_row ->> 'updated_at', '')::timestamptz, now()));
+    v_created := true;
+  ELSE
+    UPDATE public.appointment_items SET
+      booking_id       = v_booking,
+      service_id       = coalesce(v_service, service_id),
+      name             = v_name,
+      duration_minutes = CASE WHEN p_row ? 'duration_minutes'
+                              THEN nullif(p_row ->> 'duration_minutes', '')::integer ELSE duration_minutes END,
+      unit_id          = coalesce(v_unit, unit_id),
+      metadata         = migration._merge_meta(metadata, v_meta),
+      updated_at       = coalesce(nullif(p_row ->> 'updated_at', '')::timestamptz, now())
+    WHERE id = p_id;
+  END IF;
+
+  IF v_standalone THEN
+    PERFORM migration._audit(p_tenant, 'public.appointment_items', p_id,
+      jsonb_build_object('reason', CASE WHEN v_created THEN 'created' ELSE 'updated' END));
+  END IF;
+  RETURN jsonb_build_object('status', 'migrated', 'target_id', p_id,
+    'reason', CASE WHEN v_created THEN 'created' ELSE 'updated' END);
+END $function$;
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 4. As duas linhas do de-para
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- A allowlist congela a linha depois de escrita \u2014 mudar o de-para \xE9 um arquivo
+-- de migration, n\xE3o um UPDATE avulso, e o gatilho \`trg_allowlist_frozen\` \xE9 quem
+-- cobra isso. Este \xC9 o arquivo de migration, ent\xE3o ele destrava; \`set_local\`
+-- para a destrava morrer com a transa\xE7\xE3o, tenha ela terminado bem ou mal.
+
+SET LOCAL migration.allowlist_unlock = 'on';
+
+SELECT migration._allow(
+  'appointments', 'public.appointments', 'agenda', 'appointment',
+  jsonb_build_object(
+    'kind', 'appointment',
+    'status_map', jsonb_build_object(
+      'scheduled',   'scheduled',
+      'confirmed',   'confirmed',
+      'in_progress', 'in_progress',
+      'completed',   'completed',
+      'no_show',     'no_show',
+      'unmarked',    'cancelled',
+      'waiting',     'confirmed')),
+  NULL::text[],
+  jsonb_build_object(
+    'uuid',                    'id',
+    'appointment_date',        'starts_at',
+    'duration_minutes',        'duration_minutes',
+    'status',                  'status',
+    'notes',                   'notes',
+    'checked_in_at',           'checked_in_at',
+    'created_at',              'created_at',
+    'updated_at',              'updated_at',
+    'client_id',               'party_id@clients',
+    'professional_id',         'assignee_id@professionals',
+    'unit_company_id',         'unit_id@companies',
+    'tenant_id',               '-',
+    'checkout_confirmed_by',   '-',
+    'price',                   'jsonb:agenda.v1_price',
+    'is_prepaid',              'jsonb:agenda.is_prepaid',
+    'prepaid_invoice_item_id', 'jsonb:agenda.v1_prepaid_invoice_item_ref',
+    'checkout_confirmed_at',   'jsonb:agenda.checkout_confirmed_at',
+    'service_location_id',     'jsonb:agenda.v1_service_location_ref',
+    'opportunity_id',          'jsonb:crm.v1_opportunity_ref',
+    'whatsapp_sent',           'jsonb:agenda.whatsapp_sent',
+    'whatsapp_confirmed',      'jsonb:agenda.whatsapp_confirmed'),
+  'O Compromisso do V1. A unidade n\xE3o vem de uma coluna: vem da SALA '
+  '(service_location_id \u2192 service_locations.unit_id \u2192 companies.uuid), e a '
+  'ponte \xE9 feita no extrator. 99,5% resolvem; os 1.891 sem sala entram sem '
+  'unidade, que \xE9 o que a origem tem. Sem Venda: order_id fica NULL porque o '
+  'financeiro do V1 chega pela fatura, que \xE9 outro caminho.'
+);
+
+SELECT migration._allow(
+  'appointment_services', 'public.appointment_items', 'agenda', 'appointment_item',
+  '{}'::jsonb,
+  NULL::text[],
+  jsonb_build_object(
+    'uuid',                          'id',
+    'appointment_id',                'booking_id@appointments',
+    'service_id',                    'service_id@services',
+    'service_name',                  'name',
+    'duration_minutes',              'duration_minutes',
+    'price',                         'price',
+    'created_at',                    'created_at',
+    'updated_at',                    'updated_at',
+    'tenant_id',                     '-',
+    'is_revision',                   'jsonb:agenda.is_revision',
+    'revision_number',               'jsonb:agenda.revision_number',
+    'parent_journey_id',             'jsonb:agenda.v1_parent_journey_ref',
+    'added_during_execution',        'jsonb:agenda.added_during_execution',
+    'source_evaluation_execution_id','jsonb:agenda.v1_source_evaluation_ref'),
+  'O servi\xE7o dentro do Compromisso. \`service_name\` n\xE3o existe no V1 \u2014 vem da '
+  'ponte do extrator, porque o destino exige nome e a origem guarda o nome no '
+  'servi\xE7o, n\xE3o na linha. O pre\xE7o \xE9 o pre\xE7o praticado NAQUELE agendamento, e '
+  'por isso vem cru e n\xE3o da tabela de pre\xE7os.'
+);
+
+DELETE FROM migration.excluded_tables WHERE source_table IN ('appointments', 'appointment_services');
+
+RESET migration.allowlist_unlock;
+
+
+-- \u2500\u2500 quem pode executar \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Fun\xE7\xE3o nova nasce execut\xE1vel por PUBLIC, e \`anon\`/\`authenticated\` herdam
+-- dali. Estas s\xE3o de PORTE: SECURITY DEFINER, escrevem dados de qualquer
+-- inquilino. S\xF3 o service_role, que \xE9 quem roda a onda.
+REVOKE ALL ON FUNCTION migration.upsert_appointment(uuid, uuid, jsonb, jsonb) FROM PUBLIC, anon, authenticated;
+GRANT EXECUTE ON FUNCTION migration.upsert_appointment(uuid, uuid, jsonb, jsonb) TO service_role;
+REVOKE ALL ON FUNCTION migration.upsert_appointment_item(uuid, uuid, jsonb, jsonb) FROM PUBLIC, anon, authenticated;
+GRANT EXECUTE ON FUNCTION migration.upsert_appointment_item(uuid, uuid, jsonb, jsonb) TO service_role;
+`;
+var MIGRATION_009_O_EXECUTOR_SE_ACHA_PELO_PEDIDO = `-- O executor se acha pelo pedido.
+--
+-- \`trg_financial_seed_item_participant\` dispara em todo INSERT de
+-- \`public.items\` e pergunta uma coisa s\xF3:
+--
+--     SELECT a.assignee_id, a.unit_id
+--       FROM public.appointments a
+--      WHERE a.order_id = NEW.order_id AND a.assignee_id IS NOT NULL
+--      ORDER BY a.created_at LIMIT 1
+--
+-- \xC9 a pergunta certa \u2014 "quem executou o servi\xE7o desta linha?" \u2014, e \xE9 o que
+-- alimenta a comiss\xE3o. O que faltava era o \xEDndice que a responde:
+-- \`public.appointments\` tem dez \xEDndices e **nenhum por \`order_id\`**.
+--
+-- \u2500\u2500 Medido \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- EXPLAIN ANALYZE de um INSERT em \`public.items\`, tenant Espa\xE7o Facial,
+-- 20/09/2026, com 179.613 agendamentos na tabela:
+--
+--     Trigger items_financial_seed_participant:   time=56.799
+--     ... os outros dezesseis gatilhos somados:   time= 5.268
+--     Execution Time: 62.067 ms
+--
+-- **91% do custo de inserir um item.** E o n\xFAmero cresce com a agenda: o mesmo
+-- INSERT vai custar o dobro quando os 354.208 compromissos do V1 tiverem
+-- entrado, porque a varredura \xE9 da tabela inteira.
+--
+-- \u2500\u2500 N\xE3o \xE9 s\xF3 da migra\xE7\xE3o \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Vale registrar, porque o \xEDndice se paga duas vezes: este gatilho roda toda
+-- vez que algu\xE9m acrescenta uma linha a uma venda no app \u2014 a comanda, o
+-- carrinho, o atendimento que ganha um produto no fim. Numa rede com agenda
+-- cheia, cada item somava dezenas de milissegundos de varredura que ningu\xE9m
+-- pediu. O porte s\xF3 foi quem gritou primeiro: 220.462 itens a 62 ms s\xE3o quatro
+-- horas.
+--
+-- \u2500\u2500 Por que PARCIAL \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- O compromisso do V1 n\xE3o tem Venda: ele chega com \`order_id\` NULL, e s\xE3o
+-- centenas de milhares assim. Um \xEDndice completo carregaria todos eles para
+-- responder sobre os poucos que t\xEAm pedido. O parcial indexa s\xF3 as linhas que
+-- a consulta pode encontrar \u2014 e o planejador o usa porque o predicado
+-- (\`order_id = \u2026\`) implica a condi\xE7\xE3o do \xEDndice.
+--
+-- \`CONCURRENTLY\` porque o app est\xE1 no ar: a forma normal tranca a escrita em
+-- \`appointments\` enquanto constr\xF3i, e uma recep\xE7\xE3o marcando hor\xE1rio n\xE3o tem
+-- por que esperar por um \xEDndice.
+--
+-- Idempotente.
+
+-- Sem CONCURRENTLY: \xE9 o \xFAnico arquivo do reposit\xF3rio que o usava, e ele n\xE3o
+-- roda dentro de transa\xE7\xE3o \u2014 o encadeamento aplica cada migra\xE7\xE3o numa. A
+-- tabela \xE9 pequena o bastante para o bloqueio curto de um CREATE INDEX comum.
+CREATE INDEX IF NOT EXISTS appointments_order_idx
+  ON public.appointments (order_id)
+  WHERE order_id IS NOT NULL;
+
+COMMENT ON INDEX public.appointments_order_idx IS
+  'O caminho de "quem executou o servi\xE7o desta linha da venda", que '
+  'trg_financial_seed_item_participant percorre em todo INSERT de items. Sem '
+  'ele a pergunta era varredura da agenda inteira: 56,8 ms dos 62 ms de '
+  'inserir um item, medido com 179.613 compromissos.';
+`;
 var MIGRATIONS = [
   { id: "000_baseline", sql: MIGRATION_000_BASELINE },
   { id: "001_the_connector_definers_keep_a_pinned_path", sql: MIGRATION_001_THE_CONNECTOR_DEFINERS_KEEP_A_PINNED_PATH },
@@ -6934,7 +7579,10 @@ var MIGRATIONS = [
   { id: "003_the_client_arrives_before_being_served", sql: MIGRATION_003_THE_CLIENT_ARRIVES_BEFORE_BEING_SERVED },
   { id: "004_the_appointment_carries_its_unit", sql: MIGRATION_004_THE_APPOINTMENT_CARRIES_ITS_UNIT },
   { id: "005_the_queue_knows_how_long_she_waited", sql: MIGRATION_005_THE_QUEUE_KNOWS_HOW_LONG_SHE_WAITED },
-  { id: "006_the_agenda_stops_pricing_every_invoice", sql: MIGRATION_006_THE_AGENDA_STOPS_PRICING_EVERY_INVOICE }
+  { id: "006_the_agenda_stops_pricing_every_invoice", sql: MIGRATION_006_THE_AGENDA_STOPS_PRICING_EVERY_INVOICE },
+  { id: "007_o_cascade_levou_a_agenda_junto", sql: MIGRATION_007_O_CASCADE_LEVOU_A_AGENDA_JUNTO },
+  { id: "008_a_agenda_do_v1_atravessa", sql: MIGRATION_008_A_AGENDA_DO_V1_ATRAVESSA },
+  { id: "009_o_executor_se_acha_pelo_pedido", sql: MIGRATION_009_O_EXECUTOR_SE_ACHA_PELO_PEDIDO }
 ];
 function computeCommissionAmount(total, ratePercent) {
   const base = Number(total) || 0;