@fayz-ai/plugin-agenda 0.3.0 → 0.8.1

package/dist/migrations/index.d.ts

@@ -1,2 +1,9 @@
-export declare const MIGRATION_001_PUBLIC_BOOKING = "-- ============================================================================\n-- plugin-agenda 001: booking read model + public (anon) booking surface\n--\n-- Ships the objects the agenda providers reference but the spine (packages/db\n-- migrations 001\u2013008) does not define:\n--   \u00A71  order_items columns the admin provider writes (duration/assignee)\n--   \u00A72  public.v_bookings        \u2014 admin read model (authenticated, RLS applies)\n--   \u00A73  public.v_public_services \u2014 anon-readable service catalog\n--   \u00A74  public.get_available_slots      \u2014 anon RPC (mirrors the mock algorithm)\n--   \u00A75  public.create_public_booking    \u2014 anon RPC (validated, race-safe write)\n--\n-- Anon-access design: public booking pages run with the publishable key and no\n-- session, so the canonical tenant RLS yields nothing. Anon access is granted\n-- ONLY via the column-whitelisted view (\u00A73) and SECURITY DEFINER RPCs (\u00A74, \u00A75)\n-- with tight input validation and hardcoded statuses.\n-- ============================================================================\n\n-- \u00A71 \u2014 columns the agenda provider writes but 004_archetypes lacks\nALTER TABLE saas_core.order_items\n  ADD COLUMN IF NOT EXISTS duration_minutes integer,\n  ADD COLUMN IF NOT EXISTS assignee_id uuid REFERENCES saas_core.persons(id) ON DELETE SET NULL;\n\n-- Upsert key for public customers (per tenant, by normalized phone)\nCREATE UNIQUE INDEX IF NOT EXISTS persons_tenant_customer_phone\n  ON saas_core.persons(tenant_id, phone)\n  WHERE kind = 'customer' AND phone IS NOT NULL;\n\n-- Slot-conflict scan\nCREATE INDEX IF NOT EXISTS bookings_assignee_time\n  ON saas_core.bookings(assignee_id, starts_at, ends_at)\n  WHERE status NOT IN ('cancelled', 'no_show');\n\n-- \u00A72 \u2014 admin read model (security_invoker \u2192 underlying RLS applies; anon sees 0 rows)\nCREATE OR REPLACE VIEW public.v_bookings\nWITH (security_invoker = true) AS\nSELECT\n  b.id, b.tenant_id, b.kind, b.starts_at, b.ends_at, b.status, b.notes,\n  b.order_id, b.location_id, b.metadata, b.created_at, b.updated_at,\n  b.party_id                              AS client_id,\n  COALESCE(pc.name, b.metadata->>'title') AS client_name,\n  pc.phone                                AS client_phone,\n  pc.email                                AS client_email,\n  pc.avatar_url                           AS client_avatar_url,\n  b.assignee_id                           AS professional_id,\n  ps.name                                 AS professional_name,\n  ps.avatar_url                           AS professional_avatar_url,\n  l.name                                  AS location_name,\n  o.total                                 AS order_total,\n  o.status                                AS order_status,\n  (EXTRACT(EPOCH FROM (COALESCE(b.ends_at, b.starts_at) - b.starts_at))::int / 60)\n                                          AS total_duration_minutes\nFROM saas_core.bookings b\nLEFT JOIN saas_core.persons   pc ON pc.id = b.party_id\nLEFT JOIN saas_core.persons   ps ON ps.id = b.assignee_id\nLEFT JOIN saas_core.locations l  ON l.id  = b.location_id\nLEFT JOIN saas_core.orders    o  ON o.id  = b.order_id;\n\nGRANT SELECT ON public.v_bookings TO authenticated, service_role;\nREVOKE SELECT ON public.v_bookings FROM anon;\n\n-- \u00A73 \u2014 anon-readable public catalog (owner-rights view = deliberate, whitelisted)\nCREATE OR REPLACE VIEW public.v_public_services AS\nSELECT\n  s.id, s.tenant_id, s.name, s.description, s.price, s.currency,\n  COALESCE(s.duration_minutes, 30)                AS duration_minutes,\n  s.image_url,\n  COALESCE((s.metadata->>'sort_order')::int, 0)   AS sort_order\nFROM saas_core.services s\nWHERE s.is_active AND s.status = 'active';\n\nGRANT SELECT ON public.v_public_services TO anon, authenticated, service_role;\n\n-- \u00A74 \u2014 availability RPC (mirrors plugin-agenda/src/data/mock.ts getAvailableSlots)\nCREATE OR REPLACE FUNCTION public.get_available_slots(\n  p_tenant_id uuid,\n  p_date date,\n  p_duration_minutes integer,\n  p_assignee_id uuid DEFAULT NULL,\n  p_slot_interval integer DEFAULT 30\n) RETURNS TABLE (slot_start timestamptz, slot_end timestamptz)\nLANGUAGE plpgsql STABLE SECURITY DEFINER\nSET search_path = saas_core, public\nAS $$\nDECLARE\n  v_tz text;\nBEGIN\n  -- tight validation: this function is anon-callable\n  IF p_duration_minutes IS NULL OR p_duration_minutes NOT BETWEEN 5 AND 480 THEN\n    RAISE EXCEPTION 'invalid duration';\n  END IF;\n  IF p_slot_interval IS NULL OR p_slot_interval NOT BETWEEN 5 AND 240 THEN\n    RAISE EXCEPTION 'invalid interval';\n  END IF;\n  IF p_date IS NULL OR p_date < current_date OR p_date > current_date + 90 THEN\n    RETURN;\n  END IF;\n\n  SELECT COALESCE(t.settings->>'timezone', 'America/Sao_Paulo') INTO v_tz\n  FROM tenants t WHERE t.id = p_tenant_id;\n  IF v_tz IS NULL THEN RETURN; END IF;  -- unknown tenant \u2192 empty, not an error\n\n  RETURN QUERY\n  WITH day_schedules AS (\n    SELECT sc.assignee_id, sc.starts_at AS win_start, sc.ends_at AS win_end\n    FROM schedules sc\n    WHERE sc.tenant_id = p_tenant_id\n      AND sc.kind = 'working_hours'\n      AND sc.is_active\n      AND (p_assignee_id IS NULL OR sc.assignee_id = p_assignee_id)\n      AND (\n        sc.specific_date = p_date\n        OR (sc.specific_date IS NULL AND sc.day_of_week = EXTRACT(dow FROM p_date)::smallint)\n      )\n  ),\n  candidate AS (\n    SELECT\n      ds.assignee_id,\n      gs                                              AS s_start,\n      gs + make_interval(mins => p_duration_minutes)  AS s_end\n    FROM day_schedules ds\n    CROSS JOIN LATERAL generate_series(\n      (p_date + ds.win_start) AT TIME ZONE v_tz,\n      ((p_date + ds.win_end) AT TIME ZONE v_tz) - make_interval(mins => p_duration_minutes),\n      make_interval(mins => p_slot_interval)\n    ) AS gs\n  )\n  SELECT DISTINCT c.s_start, c.s_end\n  FROM candidate c\n  WHERE NOT EXISTS (\n    SELECT 1 FROM bookings b\n    WHERE b.tenant_id = p_tenant_id\n      AND b.assignee_id = c.assignee_id\n      AND b.status NOT IN ('cancelled', 'no_show')\n      AND b.starts_at < c.s_end\n      AND COALESCE(b.ends_at, b.starts_at) > c.s_start\n  )\n  ORDER BY 1;\nEND;\n$$;\n\nREVOKE ALL ON FUNCTION public.get_available_slots(uuid, date, integer, uuid, integer) FROM public;\nGRANT EXECUTE ON FUNCTION public.get_available_slots(uuid, date, integer, uuid, integer)\n  TO anon, authenticated, service_role;\n\n-- \u00A75 \u2014 public booking write RPC (validated, race-safe, hardcoded statuses)\nCREATE OR REPLACE FUNCTION public.create_public_booking(\n  p_tenant_id uuid,\n  p_service_id uuid,\n  p_starts_at timestamptz,\n  p_name text,\n  p_phone text,\n  p_email text DEFAULT NULL,\n  p_notes text DEFAULT NULL\n) RETURNS TABLE (booking_id uuid, starts_at timestamptz, ends_at timestamptz)\nLANGUAGE plpgsql SECURITY DEFINER\nSET search_path = saas_core, public\nAS $$\nDECLARE\n  v_service record;\n  v_person_id uuid;\n  v_assignee uuid;\n  v_ends timestamptz;\n  v_order uuid;\n  v_booking uuid;\n  v_phone text;\n  v_tz text;\n  v_notes text;\nBEGIN\n  -- validation: anon-callable, everything tight\n  IF p_name IS NULL OR length(trim(p_name)) NOT BETWEEN 2 AND 120 THEN\n    RAISE EXCEPTION 'invalid name';\n  END IF;\n  v_phone := regexp_replace(COALESCE(p_phone, ''), '\\D', '', 'g');\n  IF length(v_phone) NOT BETWEEN 8 AND 15 THEN\n    RAISE EXCEPTION 'invalid phone';\n  END IF;\n  IF p_email IS NOT NULL AND (length(p_email) > 254 OR p_email !~ '^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$') THEN\n    RAISE EXCEPTION 'invalid email';\n  END IF;\n  v_notes := left(p_notes, 500);\n  IF p_starts_at IS NULL OR p_starts_at <= now() OR p_starts_at > now() + interval '90 days' THEN\n    RAISE EXCEPTION 'invalid start';\n  END IF;\n\n  SELECT s.id, s.name, s.price, COALESCE(s.duration_minutes, 30) AS duration_minutes\n    INTO v_service\n  FROM services s\n  WHERE s.id = p_service_id AND s.tenant_id = p_tenant_id\n    AND s.is_active AND s.status = 'active';\n  IF NOT FOUND THEN RAISE EXCEPTION 'unknown service'; END IF;\n\n  v_ends := p_starts_at + make_interval(mins => v_service.duration_minutes);\n  SELECT COALESCE(t.settings->>'timezone', 'America/Sao_Paulo') INTO v_tz\n  FROM tenants t WHERE t.id = p_tenant_id;\n  IF v_tz IS NULL THEN RAISE EXCEPTION 'unknown tenant'; END IF;\n\n  -- pick the assignee whose working hours cover the slot\n  SELECT sc.assignee_id INTO v_assignee\n  FROM schedules sc\n  WHERE sc.tenant_id = p_tenant_id\n    AND sc.kind = 'working_hours'\n    AND sc.is_active\n    AND (\n      sc.specific_date = (p_starts_at AT TIME ZONE v_tz)::date\n      OR (sc.specific_date IS NULL\n          AND sc.day_of_week = EXTRACT(dow FROM p_starts_at AT TIME ZONE v_tz)::smallint)\n    )\n    AND (p_starts_at AT TIME ZONE v_tz)::time >= sc.starts_at\n    AND (v_ends AT TIME ZONE v_tz)::time <= sc.ends_at\n  ORDER BY sc.assignee_id\n  LIMIT 1;\n  IF v_assignee IS NULL THEN RAISE EXCEPTION 'slot outside working hours'; END IF;\n\n  -- serialize per (tenant, assignee) to kill the double-book race\n  PERFORM pg_advisory_xact_lock(hashtextextended(p_tenant_id::text || v_assignee::text, 0));\n\n  IF EXISTS (\n    SELECT 1 FROM bookings b\n    WHERE b.tenant_id = p_tenant_id\n      AND b.assignee_id = v_assignee\n      AND b.status NOT IN ('cancelled', 'no_show')\n      AND b.starts_at < v_ends\n      AND COALESCE(b.ends_at, b.starts_at) > p_starts_at\n  ) THEN\n    RAISE EXCEPTION 'slot no longer available';\n  END IF;\n\n  -- anti-spam: cap open future public bookings per phone per tenant\n  IF (\n    SELECT count(*) FROM bookings b\n    JOIN persons p ON p.id = b.party_id\n    WHERE b.tenant_id = p_tenant_id\n      AND p.phone = v_phone\n      AND b.starts_at > now()\n      AND b.status = 'scheduled'\n  ) >= 3 THEN\n    RAISE EXCEPTION 'too many open bookings for this phone';\n  END IF;\n\n  -- upsert the customer by (tenant, phone) \u2014 matches persons_tenant_customer_phone\n  INSERT INTO persons (tenant_id, kind, name, phone, email, metadata)\n  VALUES (p_tenant_id, 'customer', trim(p_name), v_phone, p_email,\n          jsonb_build_object('source', 'public_booking'))\n  ON CONFLICT (tenant_id, phone) WHERE kind = 'customer' AND phone IS NOT NULL\n  DO UPDATE SET\n    name = EXCLUDED.name,\n    email = COALESCE(EXCLUDED.email, persons.email),\n    updated_at = now()\n  RETURNING id INTO v_person_id;\n\n  -- order + booking + order_item (statuses hardcoded \u2014 caller cannot set)\n  INSERT INTO orders (tenant_id, kind, status, party_id, assignee_id, subtotal, total, notes, metadata)\n  VALUES (p_tenant_id, 'appointment', 'scheduled', v_person_id, v_assignee,\n          v_service.price, v_service.price, v_notes,\n          jsonb_build_object('source', 'public_booking',\n                             'serviceNames', v_service.name,\n                             'contactName', trim(p_name)))\n  RETURNING id INTO v_order;\n\n  INSERT INTO bookings (tenant_id, kind, party_id, assignee_id, order_id,\n                        starts_at, ends_at, status, notes, metadata)\n  VALUES (p_tenant_id, 'appointment', v_person_id, v_assignee, v_order,\n          p_starts_at, v_ends, 'scheduled', v_notes,\n          jsonb_build_object('source', 'public_booking', 'serviceNames', v_service.name))\n  RETURNING id INTO v_booking;\n\n  INSERT INTO order_items (order_id, service_id, name, quantity, unit_price, total,\n                           sort_order, duration_minutes, assignee_id)\n  VALUES (v_order, v_service.id, v_service.name, 1, v_service.price, v_service.price,\n          0, v_service.duration_minutes, v_assignee);\n\n  RETURN QUERY SELECT v_booking, p_starts_at, v_ends;\nEND;\n$$;\n\nREVOKE ALL ON FUNCTION public.create_public_booking(uuid, uuid, timestamptz, text, text, text, text) FROM public;\nGRANT EXECUTE ON FUNCTION public.create_public_booking(uuid, uuid, timestamptz, text, text, text, text)\n  TO anon, authenticated, service_role;\n";
+export declare const MIGRATION_000B_V_BOOKINGS_RENAME = "-- Salon-only unblock: the pre-pools beauty deployment built rep_* report\n-- views on top of its (wider) v_bookings view, so 001's cleanup DROP cannot\n-- run there. Renaming keeps the dependents attached (they track the OID) and\n-- frees the name for 001; 002_v_bookings_compat re-creates v_bookings as a\n-- thin alias for live pre-M5 clients. No-op on fresh pools and on pools whose\n-- v_bookings has no dependents (001's DROP handles those).\n\nDO $rename$\nBEGIN\n  IF to_regclass('public.v_bookings') IS NOT NULL\n     AND to_regclass('public.v_bookings_legacy_beauty') IS NULL\n     AND EXISTS (\n       SELECT 1 FROM pg_depend d\n       JOIN pg_rewrite rw ON rw.oid = d.objid\n       JOIN pg_class dep ON dep.oid = rw.ev_class\n       JOIN pg_class ref ON ref.oid = d.refobjid\n       WHERE ref.relname = 'v_bookings' AND dep.relname <> 'v_bookings'\n     ) THEN\n    EXECUTE 'ALTER VIEW public.v_bookings RENAME TO v_bookings_legacy_beauty';\n  END IF;\nEND $rename$;\n";
+export declare const MIGRATION_000C_DEDUPE_CUSTOMER_PHONES = "-- 001 needs the customer-phone upsert key UNIQUE(tenant_id, phone). Converted\n-- pools can carry duplicates (found live on salon: 9 dogfood test records all\n-- sharing the founder's phone). Non-destructive dedupe: per (tenant_id, phone)\n-- customer group keep the row with most appointments (tie: oldest), NULL the\n-- phone on the rest and stash the original in metadata->'dedupedPhone'.\n-- Idempotent: reruns find no groups > 1.\n\nDO $dedupe$\nDECLARE\n  r record;\nBEGIN\n  IF to_regclass('public.people') IS NULL THEN\n    RETURN;\n  END IF;\n\n  FOR r IN\n    SELECT p.id, p.phone\n    FROM public.people p\n    JOIN LATERAL (\n      SELECT count(*) AS appts\n      FROM public.appointments a WHERE a.party_id = p.id\n    ) ac ON true\n    WHERE p.kind = 'customer' AND p.phone IS NOT NULL\n      AND p.id NOT IN (\n        SELECT DISTINCT ON (p2.tenant_id, p2.phone) p2.id\n        FROM public.people p2\n        WHERE p2.kind = 'customer' AND p2.phone IS NOT NULL\n        ORDER BY p2.tenant_id, p2.phone,\n          (SELECT count(*) FROM public.appointments a2 WHERE a2.party_id = p2.id) DESC,\n          p2.created_at ASC\n      )\n      AND (p.tenant_id, p.phone) IN (\n        SELECT tenant_id, phone FROM public.people\n        WHERE kind = 'customer' AND phone IS NOT NULL\n        GROUP BY tenant_id, phone HAVING count(*) > 1\n      )\n  LOOP\n    UPDATE public.people\n    SET metadata = COALESCE(metadata, '{}'::jsonb) || jsonb_build_object('dedupedPhone', r.phone),\n        phone = NULL\n    WHERE id = r.id;\n  END LOOP;\nEND $dedupe$;\n";
+export declare const MIGRATION_001_PUBLIC_BOOKING = "-- ============================================================================\n-- plugin-agenda 001: booking read model + public (anon) booking surface\n--\n-- Ships the objects the agenda providers reference but the spine (packages/db\n-- migrations 001\u2013010) does not define:\n--   \u00A70  converted-pool cleanup \u2014 drop the pre-rename v_bookings view / indexes\n--   \u00A71  order_items columns the admin provider writes (duration/assignee)\n--   \u00A72  public.v_appointments    \u2014 admin read model (authenticated, RLS applies)\n--   \u00A73  public.v_public_services \u2014 anon-readable service catalog\n--   \u00A74  public.get_available_slots      \u2014 anon RPC (mirrors the mock algorithm)\n--   \u00A75  public.create_public_booking    \u2014 anon RPC (validated, race-safe write)\n--\n-- Core v1 lives directly in PUBLIC (no separate core schema): people (was\n-- persons), appointments (was bookings). This migration is written against public\n-- names and is idempotent + safe on both fresh and converted pools.\n--\n-- Anon-access design: public booking pages run with the publishable key and no\n-- session, so the canonical tenant RLS yields nothing. Anon access is granted\n-- ONLY via the column-whitelisted view (\u00A73) and SECURITY DEFINER RPCs (\u00A74, \u00A75)\n-- with tight input validation and hardcoded statuses.\n-- ============================================================================\n\n-- \u00A70 \u2014 converted-pool cleanup. The pre-industry-pool shape shipped a v_bookings\n-- view and persons_/bookings_-named indexes; drop them so this file re-emits the\n-- canonical v_appointments view + people_/appointments_ indexes without leaving\n-- duplicates. All guarded with IF EXISTS \u2192 no-ops on a fresh pool.\nDROP VIEW IF EXISTS public.v_bookings;\nDROP INDEX IF EXISTS public.persons_tenant_customer_phone;\nDROP INDEX IF EXISTS public.bookings_assignee_time;\n\n-- \u00A71 \u2014 columns the agenda provider writes but 004_archetypes lacks\nALTER TABLE public.order_items\n  ADD COLUMN IF NOT EXISTS duration_minutes integer,\n  ADD COLUMN IF NOT EXISTS assignee_id uuid REFERENCES public.people(id) ON DELETE SET NULL;\n\n-- Upsert key for public customers (per tenant, by normalized phone)\nCREATE UNIQUE INDEX IF NOT EXISTS people_tenant_customer_phone\n  ON public.people(tenant_id, phone)\n  WHERE kind = 'customer' AND phone IS NOT NULL;\n\n-- Slot-conflict scan\nCREATE INDEX IF NOT EXISTS appointments_assignee_time\n  ON public.appointments(assignee_id, starts_at, ends_at)\n  WHERE status NOT IN ('cancelled', 'no_show');\n\n-- \u00A72 \u2014 admin read model (security_invoker \u2192 underlying RLS applies; anon sees 0 rows)\nCREATE OR REPLACE VIEW public.v_appointments\nWITH (security_invoker = true) AS\nSELECT\n  b.id, b.tenant_id, b.kind, b.starts_at, b.ends_at, b.status, b.notes,\n  b.order_id, b.location_id, b.metadata, b.created_at, b.updated_at,\n  b.party_id                              AS client_id,\n  COALESCE(pc.name, b.metadata->>'title') AS client_name,\n  pc.phone                                AS client_phone,\n  pc.email                                AS client_email,\n  pc.avatar_url                           AS client_avatar_url,\n  b.assignee_id                           AS professional_id,\n  ps.name                                 AS professional_name,\n  ps.avatar_url                           AS professional_avatar_url,\n  l.name                                  AS location_name,\n  o.total                                 AS order_total,\n  o.status                                AS order_status,\n  (EXTRACT(EPOCH FROM (COALESCE(b.ends_at, b.starts_at) - b.starts_at))::int / 60)\n                                          AS total_duration_minutes\nFROM public.appointments b\nLEFT JOIN public.people    pc ON pc.id = b.party_id\nLEFT JOIN public.people    ps ON ps.id = b.assignee_id\nLEFT JOIN public.locations l  ON l.id  = b.location_id\nLEFT JOIN public.orders    o  ON o.id  = b.order_id;\n\nGRANT SELECT ON public.v_appointments TO authenticated, service_role;\nREVOKE SELECT ON public.v_appointments FROM anon;\n\n-- \u00A73 \u2014 anon-readable public catalog (owner-rights view = deliberate, whitelisted)\nCREATE OR REPLACE VIEW public.v_public_services AS\nSELECT\n  s.id, s.tenant_id, s.name, s.description, s.price, s.currency,\n  COALESCE(s.duration_minutes, 30)                AS duration_minutes,\n  s.image_url,\n  COALESCE((s.metadata->>'sort_order')::int, 0)   AS sort_order\nFROM public.services s\nWHERE s.is_active AND s.status = 'active';\n\nGRANT SELECT ON public.v_public_services TO anon, authenticated, service_role;\n\n-- \u00A74 \u2014 availability RPC (mirrors plugin-agenda/src/data/mock.ts getAvailableSlots)\nCREATE OR REPLACE FUNCTION public.get_available_slots(\n  p_tenant_id uuid,\n  p_date date,\n  p_duration_minutes integer,\n  p_assignee_id uuid DEFAULT NULL,\n  p_slot_interval integer DEFAULT 30\n) RETURNS TABLE (slot_start timestamptz, slot_end timestamptz)\nLANGUAGE plpgsql STABLE SECURITY DEFINER\nSET search_path = public\nAS $$\nDECLARE\n  v_tz text;\nBEGIN\n  -- tight validation: this function is anon-callable\n  IF p_duration_minutes IS NULL OR p_duration_minutes NOT BETWEEN 5 AND 480 THEN\n    RAISE EXCEPTION 'invalid duration';\n  END IF;\n  IF p_slot_interval IS NULL OR p_slot_interval NOT BETWEEN 5 AND 240 THEN\n    RAISE EXCEPTION 'invalid interval';\n  END IF;\n  IF p_date IS NULL OR p_date < current_date OR p_date > current_date + 90 THEN\n    RETURN;\n  END IF;\n\n  SELECT COALESCE(t.settings->>'timezone', 'America/Sao_Paulo') INTO v_tz\n  FROM tenants t WHERE t.id = p_tenant_id;\n  IF v_tz IS NULL THEN RETURN; END IF;  -- unknown tenant \u2192 empty, not an error\n\n  RETURN QUERY\n  WITH day_schedules AS (\n    SELECT sc.assignee_id, sc.starts_at AS win_start, sc.ends_at AS win_end\n    FROM schedules sc\n    WHERE sc.tenant_id = p_tenant_id\n      AND sc.kind = 'working_hours'\n      AND sc.is_active\n      AND (p_assignee_id IS NULL OR sc.assignee_id = p_assignee_id)\n      AND (\n        sc.specific_date = p_date\n        OR (sc.specific_date IS NULL AND sc.day_of_week = EXTRACT(dow FROM p_date)::smallint)\n      )\n  ),\n  candidate AS (\n    SELECT\n      ds.assignee_id,\n      gs                                              AS s_start,\n      gs + make_interval(mins => p_duration_minutes)  AS s_end\n    FROM day_schedules ds\n    CROSS JOIN LATERAL generate_series(\n      (p_date + ds.win_start) AT TIME ZONE v_tz,\n      ((p_date + ds.win_end) AT TIME ZONE v_tz) - make_interval(mins => p_duration_minutes),\n      make_interval(mins => p_slot_interval)\n    ) AS gs\n  )\n  SELECT DISTINCT c.s_start, c.s_end\n  FROM candidate c\n  WHERE NOT EXISTS (\n    SELECT 1 FROM appointments b\n    WHERE b.tenant_id = p_tenant_id\n      AND b.assignee_id = c.assignee_id\n      AND b.status NOT IN ('cancelled', 'no_show')\n      AND b.starts_at < c.s_end\n      AND COALESCE(b.ends_at, b.starts_at) > c.s_start\n  )\n  ORDER BY 1;\nEND;\n$$;\n\nREVOKE ALL ON FUNCTION public.get_available_slots(uuid, date, integer, uuid, integer) FROM public;\nGRANT EXECUTE ON FUNCTION public.get_available_slots(uuid, date, integer, uuid, integer)\n  TO anon, authenticated, service_role;\n\n-- \u00A75 \u2014 public booking write RPC (validated, race-safe, hardcoded statuses)\nCREATE OR REPLACE FUNCTION public.create_public_booking(\n  p_tenant_id uuid,\n  p_service_id uuid,\n  p_starts_at timestamptz,\n  p_name text,\n  p_phone text,\n  p_email text DEFAULT NULL,\n  p_notes text DEFAULT NULL\n) RETURNS TABLE (booking_id uuid, starts_at timestamptz, ends_at timestamptz)\nLANGUAGE plpgsql SECURITY DEFINER\nSET search_path = public\nAS $$\nDECLARE\n  v_service record;\n  v_person_id uuid;\n  v_assignee uuid;\n  v_ends timestamptz;\n  v_order uuid;\n  v_booking uuid;\n  v_phone text;\n  v_tz text;\n  v_notes text;\nBEGIN\n  -- validation: anon-callable, everything tight\n  IF p_name IS NULL OR length(trim(p_name)) NOT BETWEEN 2 AND 120 THEN\n    RAISE EXCEPTION 'invalid name';\n  END IF;\n  v_phone := regexp_replace(COALESCE(p_phone, ''), '\\D', '', 'g');\n  IF length(v_phone) NOT BETWEEN 8 AND 15 THEN\n    RAISE EXCEPTION 'invalid phone';\n  END IF;\n  IF p_email IS NOT NULL AND (length(p_email) > 254 OR p_email !~ '^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$') THEN\n    RAISE EXCEPTION 'invalid email';\n  END IF;\n  v_notes := left(p_notes, 500);\n  IF p_starts_at IS NULL OR p_starts_at <= now() OR p_starts_at > now() + interval '90 days' THEN\n    RAISE EXCEPTION 'invalid start';\n  END IF;\n\n  SELECT s.id, s.name, s.price, COALESCE(s.duration_minutes, 30) AS duration_minutes\n    INTO v_service\n  FROM services s\n  WHERE s.id = p_service_id AND s.tenant_id = p_tenant_id\n    AND s.is_active AND s.status = 'active';\n  IF NOT FOUND THEN RAISE EXCEPTION 'unknown service'; END IF;\n\n  v_ends := p_starts_at + make_interval(mins => v_service.duration_minutes);\n  SELECT COALESCE(t.settings->>'timezone', 'America/Sao_Paulo') INTO v_tz\n  FROM tenants t WHERE t.id = p_tenant_id;\n  IF v_tz IS NULL THEN RAISE EXCEPTION 'unknown tenant'; END IF;\n\n  -- pick the assignee whose working hours cover the slot\n  SELECT sc.assignee_id INTO v_assignee\n  FROM schedules sc\n  WHERE sc.tenant_id = p_tenant_id\n    AND sc.kind = 'working_hours'\n    AND sc.is_active\n    AND (\n      sc.specific_date = (p_starts_at AT TIME ZONE v_tz)::date\n      OR (sc.specific_date IS NULL\n          AND sc.day_of_week = EXTRACT(dow FROM p_starts_at AT TIME ZONE v_tz)::smallint)\n    )\n    AND (p_starts_at AT TIME ZONE v_tz)::time >= sc.starts_at\n    AND (v_ends AT TIME ZONE v_tz)::time <= sc.ends_at\n  ORDER BY sc.assignee_id\n  LIMIT 1;\n  IF v_assignee IS NULL THEN RAISE EXCEPTION 'slot outside working hours'; END IF;\n\n  -- serialize per (tenant, assignee) to kill the double-book race\n  PERFORM pg_advisory_xact_lock(hashtextextended(p_tenant_id::text || v_assignee::text, 0));\n\n  IF EXISTS (\n    SELECT 1 FROM appointments b\n    WHERE b.tenant_id = p_tenant_id\n      AND b.assignee_id = v_assignee\n      AND b.status NOT IN ('cancelled', 'no_show')\n      AND b.starts_at < v_ends\n      AND COALESCE(b.ends_at, b.starts_at) > p_starts_at\n  ) THEN\n    RAISE EXCEPTION 'slot no longer available';\n  END IF;\n\n  -- anti-spam: cap open future public bookings per phone per tenant\n  IF (\n    SELECT count(*) FROM appointments b\n    JOIN people p ON p.id = b.party_id\n    WHERE b.tenant_id = p_tenant_id\n      AND p.phone = v_phone\n      AND b.starts_at > now()\n      AND b.status = 'scheduled'\n  ) >= 3 THEN\n    RAISE EXCEPTION 'too many open bookings for this phone';\n  END IF;\n\n  -- upsert the customer by (tenant, phone) \u2014 matches people_tenant_customer_phone\n  INSERT INTO people (tenant_id, kind, name, phone, email, metadata)\n  VALUES (p_tenant_id, 'customer', trim(p_name), v_phone, p_email,\n          jsonb_build_object('source', 'public_booking'))\n  ON CONFLICT (tenant_id, phone) WHERE kind = 'customer' AND phone IS NOT NULL\n  DO UPDATE SET\n    name = EXCLUDED.name,\n    email = COALESCE(EXCLUDED.email, people.email),\n    updated_at = now()\n  RETURNING id INTO v_person_id;\n\n  -- order + booking + order_item (statuses hardcoded \u2014 caller cannot set)\n  INSERT INTO orders (tenant_id, kind, status, party_id, assignee_id, subtotal, total, notes, metadata)\n  VALUES (p_tenant_id, 'appointment', 'scheduled', v_person_id, v_assignee,\n          v_service.price, v_service.price, v_notes,\n          jsonb_build_object('source', 'public_booking',\n                             'serviceNames', v_service.name,\n                             'contactName', trim(p_name)))\n  RETURNING id INTO v_order;\n\n  INSERT INTO appointments (tenant_id, kind, party_id, assignee_id, order_id,\n                        starts_at, ends_at, status, notes, metadata)\n  VALUES (p_tenant_id, 'appointment', v_person_id, v_assignee, v_order,\n          p_starts_at, v_ends, 'scheduled', v_notes,\n          jsonb_build_object('source', 'public_booking', 'serviceNames', v_service.name))\n  RETURNING id INTO v_booking;\n\n  INSERT INTO order_items (order_id, service_id, name, quantity, unit_price, total,\n                           sort_order, duration_minutes, assignee_id)\n  VALUES (v_order, v_service.id, v_service.name, 1, v_service.price, v_service.price,\n          0, v_service.duration_minutes, v_assignee);\n\n  RETURN QUERY SELECT v_booking, p_starts_at, v_ends;\nEND;\n$$;\n\nREVOKE ALL ON FUNCTION public.create_public_booking(uuid, uuid, timestamptz, text, text, text, text) FROM public;\nGRANT EXECUTE ON FUNCTION public.create_public_booking(uuid, uuid, timestamptz, text, text, text, text)\n  TO anon, authenticated, service_role;\n";
+export declare const MIGRATION_002_V_BOOKINGS_COMPAT = "-- Where 000b preserved the legacy beauty view, re-create v_bookings as a\n-- thin alias over it so live pre-M5 clients that SELECT v_bookings by name\n-- keep their full legacy column set. Dropped for good once the beauty app\n-- ships on v_appointments (M5 follow-up).\n\nDO $compat$\nBEGIN\n  IF to_regclass('public.v_bookings_legacy_beauty') IS NOT NULL\n     AND to_regclass('public.v_bookings') IS NULL THEN\n    EXECUTE 'CREATE VIEW public.v_bookings WITH (security_invoker = true) AS SELECT * FROM public.v_bookings_legacy_beauty';\n    EXECUTE 'GRANT SELECT ON public.v_bookings TO authenticated, service_role';\n    EXECUTE 'REVOKE SELECT ON public.v_bookings FROM anon';\n  END IF;\nEND $compat$;\n";
+export declare const MIGRATIONS: Array<{
+    id: string;
+    sql: string;
+}>;
 //# sourceMappingURL=index.d.ts.map

package/dist/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,4BAA4B,2uXAsRxC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,gCAAgC,09BAqB5C,CAAA;AAED,eAAO,MAAM,qCAAqC,giDA2CjD,CAAA;AAED,eAAO,MAAM,4BAA4B,mgZAmSxC,CAAA;AAED,eAAO,MAAM,+BAA+B,0sBAc3C,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAKzD,CAAA"}

package/dist/public/createPublicBookingPlugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createPublicBookingPlugin.d.ts","sourceRoot":"","sources":["../../src/public/createPublicBookingPlugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,EAAE,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAE9D,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAG7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAmC,KAAK,yBAAyB,EAAE,MAAM,QAAQ,CAAA;AAExF,OAAO,EAAmD,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAGpG,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,aAAa,EAGb,YAAY,EACb,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7C;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;IAC1B,gFAAgF;IAChF,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,sDAAsD;IACtD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/B,wDAAwD;IACxD,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACrC,wEAAwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvC,uFAAuF;IACvF,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,qFAAqF;IACrF,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,YAAY,CAAC,EAAE,yBAAyB,CAAA;IACxC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,QAAQ,EAAE,EAAE,CAAC;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;IACrC,YAAY,EAAE,yBAAyB,CAAA;CACxC;AAiGD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CA+F5F"}
+{"version":3,"file":"createPublicBookingPlugin.d.ts","sourceRoot":"","sources":["../../src/public/createPublicBookingPlugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,EAAE,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAE9D,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAmC,KAAK,yBAAyB,EAAE,MAAM,QAAQ,CAAA;AAExF,OAAO,EAAmD,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAGpG,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,aAAa,EAGb,YAAY,EACb,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7C;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;IAC1B,gFAAgF;IAChF,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,sDAAsD;IACtD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/B,wDAAwD;IACxD,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACrC,wEAAwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvC,uFAAuF;IACvF,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,qFAAqF;IACrF,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,YAAY,CAAC,EAAE,yBAAyB,CAAA;IACxC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,QAAQ,EAAE,EAAE,CAAC;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;IACrC,YAAY,EAAE,yBAAyB,CAAA;CACxC;AAiGD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAmG5F"}

package/dist/public/index.cjs

@@ -50,9 +50,7 @@ function createMockPublicBookingProvider(options) {
   };
 }
 function getClient() {
-  const client = core.getSupabaseClientOptional();
-  if (!client) throw new Error("[plugin-agenda/public] Supabase client not initialized");
-  return client;
+  return core.getSupabaseClientOptional() ?? core.getFayzCloudClient();
 }
 function toPhoneDigits(phone) {
   return (phone ?? "").replace(/\D/g, "");
@@ -1340,21 +1338,23 @@ function createPublicBookingPlugin(options) {
     schedules: buildSchedules(mockProfessionalId, hours),
     bookings: []
   };
-  const provider = options.dataProvider ?? core.createSafeDataProvider(
-    () => {
-      if (!options.tenantId) {
-        throw new Error(
-          "[plugin-agenda/public] `tenantId` is required when a Supabase client is configured (setGlobalSupabaseClient)."
-        );
-      }
-      return createSupabasePublicBookingProvider({ tenantId: options.tenantId });
-    },
-    () => createMockPublicBookingProvider({
+  let provider;
+  if (options.dataProvider) {
+    provider = options.dataProvider;
+  } else if (options.tenantId) {
+    provider = createSupabasePublicBookingProvider({ tenantId: options.tenantId });
+  } else {
+    if (typeof console !== "undefined") {
+      console.warn(
+        "[plugin-agenda/public] no `tenantId` and no `dataProvider` \u2014 falling back to the seeded MOCK provider. Pass `tenantId` to book against Fayz Cloud, or inject a dataProvider."
+      );
+    }
+    provider = createMockPublicBookingProvider({
       seed: mockSeed,
       services: staticServices ?? [],
       professionalId: mockProfessionalId
-    })
-  );
+    });
+  }
   const base = {
     provider,
     professionalId,
@@ -1386,7 +1386,7 @@ function createPublicBookingPlugin(options) {
     id: "booking",
     name: "Agendamento",
     icon: "CalendarCheck",
-    version: "0.3.0",
+    version: "0.4.0",
     scope: options.scope ?? "universal",
     verticalId: options.verticalId,
     scaffolds: ["website", "landing_page"],