@fayz-ai/plugin-agenda 0.9.0 → 0.9.1

package/src/migrations/009_public_booking_location.sql

@@ -1,162 +0,0 @@
--- Public bookings were written with location_id = NULL. The agenda's location
--- filter is optional (default "all"), so they still rendered — but the moment
--- an operator filtered by their unit, every booking taken from the website
--- disappeared from the calendar. Single-location tenants are the common case
--- and have an unambiguous answer, so default to it; multi-location tenants
--- stay NULL (there is no correct guess) until the public flow asks.
---
--- Only the assignment is new; the rest of the body is unchanged from 004.
-
-CREATE OR REPLACE FUNCTION public.create_public_booking(
-  p_tenant_id uuid,
-  p_service_id uuid,
-  p_starts_at timestamptz,
-  p_name text,
-  p_phone text,
-  p_email text DEFAULT NULL,
-  p_notes text DEFAULT NULL
-)
-RETURNS TABLE(booking_id uuid, starts_at timestamptz, ends_at timestamptz)
-LANGUAGE plpgsql
-SECURITY DEFINER
-SET search_path TO 'public'
-AS $function$
-DECLARE
-  v_service record;
-  v_person_id uuid;
-  v_assignee uuid;
-  v_ends timestamptz;
-  v_order uuid;
-  v_booking uuid;
-  v_phone text;
-  v_tz text;
-  v_notes text;
-  v_location uuid;
-BEGIN
-  -- validation: anon-callable, everything tight
-  IF p_name IS NULL OR length(trim(p_name)) NOT BETWEEN 2 AND 120 THEN
-    RAISE EXCEPTION 'invalid name';
-  END IF;
-  v_phone := regexp_replace(COALESCE(p_phone, ''), '\D', '', 'g');
-  IF length(v_phone) NOT BETWEEN 8 AND 15 THEN
-    RAISE EXCEPTION 'invalid phone';
-  END IF;
-  IF p_email IS NOT NULL AND (length(p_email) > 254 OR p_email !~ '^[^@\s]+@[^@\s]+\.[^@\s]+$') THEN
-    RAISE EXCEPTION 'invalid email';
-  END IF;
-  v_notes := left(p_notes, 500);
-  IF p_starts_at IS NULL OR p_starts_at <= now() OR p_starts_at > now() + interval '90 days' THEN
-    RAISE EXCEPTION 'invalid start';
-  END IF;
-
-  SELECT s.id, s.name, s.price, COALESCE(s.duration_minutes, 30) AS duration_minutes
-    INTO v_service
-  FROM services s
-  WHERE s.id = p_service_id AND s.tenant_id = p_tenant_id
-    AND s.is_active AND s.status = 'active';
-  IF NOT FOUND THEN RAISE EXCEPTION 'unknown service'; END IF;
-
-  v_ends := p_starts_at + make_interval(mins => v_service.duration_minutes);
-  SELECT COALESCE(t.settings->>'timezone', 'America/Sao_Paulo') INTO v_tz
-  FROM tenants t WHERE t.id = p_tenant_id;
-  IF v_tz IS NULL THEN RAISE EXCEPTION 'unknown tenant'; END IF;
-
-  -- pick the assignee whose working hours cover the slot
-  SELECT sc.assignee_id INTO v_assignee
-  FROM schedules sc
-  WHERE sc.tenant_id = p_tenant_id
-    AND sc.kind = 'working_hours'
-    AND sc.is_active
-    AND (
-      sc.specific_date = (p_starts_at AT TIME ZONE v_tz)::date
-      OR (sc.specific_date IS NULL
-          AND sc.day_of_week = EXTRACT(dow FROM p_starts_at AT TIME ZONE v_tz)::smallint)
-    )
-    AND (p_starts_at AT TIME ZONE v_tz)::time >= sc.starts_at
-    AND (v_ends AT TIME ZONE v_tz)::time <= sc.ends_at
-  ORDER BY sc.assignee_id
-  LIMIT 1;
-  IF v_assignee IS NULL THEN RAISE EXCEPTION 'slot outside working hours'; END IF;
-
-  -- NEW: stamp the unit so the calendar's location filter keeps these visible.
-  -- Prefer the schedule's own location; else the tenant's only location.
-  SELECT sc.location_id INTO v_location
-  FROM schedules sc
-  WHERE sc.tenant_id = p_tenant_id
-    AND sc.kind = 'working_hours'
-    AND sc.is_active
-    AND sc.assignee_id = v_assignee
-    AND sc.location_id IS NOT NULL
-  LIMIT 1;
-
-  IF v_location IS NULL THEN
-    SELECT l.id INTO v_location
-    FROM locations l
-    WHERE l.tenant_id = p_tenant_id
-    HAVING count(*) = 1;  -- unambiguous only
-  END IF;
-
-  -- serialize per (tenant, assignee) to kill the double-book race
-  PERFORM pg_advisory_xact_lock(hashtextextended(p_tenant_id::text || v_assignee::text, 0));
-
-  IF EXISTS (
-    SELECT 1 FROM appointments b
-    WHERE b.tenant_id = p_tenant_id
-      AND b.assignee_id = v_assignee
-      AND b.status NOT IN ('cancelled', 'no_show')
-      AND b.starts_at < v_ends
-      AND COALESCE(b.ends_at, b.starts_at) > p_starts_at
-  ) THEN
-    RAISE EXCEPTION 'slot no longer available';
-  END IF;
-
-  -- anti-spam: cap open future public bookings per phone per tenant
-  IF (
-    SELECT count(*) FROM appointments b
-    JOIN people p ON p.id = b.party_id
-    WHERE b.tenant_id = p_tenant_id
-      AND p.phone = v_phone
-      AND b.starts_at > now()
-      AND b.status = 'scheduled'
-  ) >= 3 THEN
-    RAISE EXCEPTION 'too many open bookings for this phone';
-  END IF;
-
-  -- upsert the customer by (tenant, phone) — matches people_tenant_customer_phone
-  INSERT INTO people (tenant_id, kind, name, phone, email, metadata)
-  VALUES (p_tenant_id, 'customer', trim(p_name), v_phone, p_email,
-          jsonb_build_object('source', 'public_booking'))
-  ON CONFLICT (tenant_id, phone) WHERE kind = 'customer' AND phone IS NOT NULL
-  DO UPDATE SET
-    name = EXCLUDED.name,
-    email = COALESCE(EXCLUDED.email, people.email),
-    updated_at = now()
-  RETURNING id INTO v_person_id;
-
-  -- order + booking + order_item (statuses hardcoded — caller cannot set)
-  INSERT INTO orders (tenant_id, kind, status, party_id, assignee_id, location_id,
-                      subtotal, total, notes, metadata)
-  VALUES (p_tenant_id, 'appointment', 'scheduled', v_person_id, v_assignee, v_location,
-          v_service.price, v_service.price, v_notes,
-          jsonb_build_object('source', 'public_booking',
-                             'serviceNames', v_service.name,
-                             'contactName', trim(p_name)))
-  RETURNING id INTO v_order;
-
-  INSERT INTO appointments (tenant_id, kind, party_id, assignee_id, order_id, location_id,
-                        starts_at, ends_at, status, notes, metadata)
-  VALUES (p_tenant_id, 'appointment', v_person_id, v_assignee, v_order, v_location,
-          p_starts_at, v_ends, 'scheduled', v_notes,
-          jsonb_build_object('source', 'public_booking', 'serviceNames', v_service.name))
-  RETURNING id INTO v_booking;
-
-  INSERT INTO order_items (order_id, service_id, name, quantity, unit_price, total,
-                           sort_order, duration_minutes, assignee_id)
-  VALUES (v_order, v_service.id, v_service.name, 1, v_service.price, v_service.price,
-          0, v_service.duration_minutes, v_assignee);
-
-  RETURN QUERY SELECT v_booking, p_starts_at, v_ends;
-END;
-$function$;
-
-GRANT EXECUTE ON FUNCTION public.create_public_booking(uuid, uuid, timestamptz, text, text, text, text) TO anon, authenticated;

package/src/migrations/010_public_service_curation.sql

@@ -1,31 +0,0 @@
--- plugin-agenda 010: curate what the PUBLIC booking page sells.
---
--- v_public_services published every active service, so the website catalog was
--- "whatever exists in the system". That conflates two different questions:
---
---   • is this service usable at all?          → services.is_active / status
---   • should a stranger be able to book it?   → this flag
---
--- Without the split, hiding something from the site means deactivating it —
--- which also removes it from the internal agenda and orphans its history. The
--- case that forced this: a school whose public page listed 7 services when it
--- sells 3, and one of the 4 extras already had real bookings attached.
---
--- OPT-OUT on purpose: a service is public unless explicitly marked otherwise.
--- Opt-in would silently empty every live catalog the moment this ships.
-
-CREATE OR REPLACE VIEW public.v_public_services AS
-SELECT id,
-    tenant_id,
-    name,
-    description,
-    price,
-    currency,
-    COALESCE(duration_minutes, 30) AS duration_minutes,
-    image_url,
-    COALESCE(((metadata ->> 'sort_order'::text))::integer, 0) AS sort_order
-   FROM services s
-  WHERE is_active
-    AND status = 'active'::text
-    -- absent → public (back-compat). Only an explicit false hides it.
-    AND COALESCE((metadata ->> 'bookableOnline'::text)::boolean, true);

package/src/migrations/011_default_assignee.sql

@@ -1,167 +0,0 @@
--- plugin-agenda 011: honour a tenant's default professional.
---
--- create_public_booking picks the assignee from whoever's working hours cover
--- the slot, ordered by assignee_id — i.e. the lowest UUID wins. That is fine
--- when the caller names the professional, and wrong when it does not: the
--- public page confirms "Equipe Great DJs" while the booking silently lands on
--- an unrelated instructor whose UUID happened to sort first.
---
--- Clients shipped before p_assignee_id existed still call this with 7 named
--- args, so the parameter defaults to NULL and every live booking on those sites
--- is mis-assigned today. Republishing the SDK fixes the caller, but the sites
--- already deployed cannot be fixed that way — this can, from the database.
---
--- Precedence: explicit arg > tenant default > first covering schedule.
--- Tenants without the setting keep exactly the previous behaviour.
-
-CREATE OR REPLACE FUNCTION public.create_public_booking(p_tenant_id uuid, p_service_id uuid, p_starts_at timestamp with time zone, p_name text, p_phone text, p_email text DEFAULT NULL::text, p_notes text DEFAULT NULL::text, p_assignee_id uuid DEFAULT NULL::uuid)
- RETURNS TABLE(booking_id uuid, starts_at timestamp with time zone, ends_at timestamp with time zone)
- LANGUAGE plpgsql
- SECURITY DEFINER
- SET search_path TO 'public'
-AS $function$
-DECLARE
-  v_service record;
-  v_person_id uuid;
-  v_assignee uuid;
-  v_requested uuid;
-  v_ends timestamptz;
-  v_order uuid;
-  v_booking uuid;
-  v_phone text;
-  v_tz text;
-  v_notes text;
-  v_client_kind text;
-BEGIN
-  -- validation: anon-callable, everything tight
-  IF p_name IS NULL OR length(trim(p_name)) NOT BETWEEN 2 AND 120 THEN
-    RAISE EXCEPTION 'invalid name';
-  END IF;
-  v_phone := regexp_replace(COALESCE(p_phone, ''), '\D', '', 'g');
-  IF length(v_phone) NOT BETWEEN 8 AND 15 THEN
-    RAISE EXCEPTION 'invalid phone';
-  END IF;
-  IF p_email IS NOT NULL AND (length(p_email) > 254 OR p_email !~ '^[^@\s]+@[^@\s]+\.[^@\s]+$') THEN
-    RAISE EXCEPTION 'invalid email';
-  END IF;
-  v_notes := left(p_notes, 500);
-  IF p_starts_at IS NULL OR p_starts_at <= now() OR p_starts_at > now() + interval '90 days' THEN
-    RAISE EXCEPTION 'invalid start';
-  END IF;
-
-  SELECT s.id, s.name, s.price, COALESCE(s.duration_minutes, 30) AS duration_minutes
-    INTO v_service
-  FROM services s
-  WHERE s.id = p_service_id AND s.tenant_id = p_tenant_id
-    AND s.is_active AND s.status = 'active';
-  IF NOT FOUND THEN RAISE EXCEPTION 'unknown service'; END IF;
-
-  v_ends := p_starts_at + make_interval(mins => v_service.duration_minutes);
-
-  -- tenant config: timezone + client kind (admin-set; sanitized, never caller input)
-  SELECT COALESCE(t.settings->>'timezone', 'America/Sao_Paulo'),
-         COALESCE(NULLIF(trim(t.settings->'booking'->>'client_kind'), ''), 'customer')
-    INTO v_tz, v_client_kind
-  FROM tenants t WHERE t.id = p_tenant_id;
-  IF v_tz IS NULL THEN RAISE EXCEPTION 'unknown tenant'; END IF;
-  IF v_client_kind !~ '^[a-z_]{2,32}$' THEN v_client_kind := 'customer'; END IF;
-
-  -- resolve the professional, in order of trust:
-  --   1. the id the caller sent (the one the visitor actually saw)
-  --   2. the tenant's configured default (settings->>'defaultAssigneeId')
-  --   3. whoever's working hours cover the slot
-  --
-  -- Step 2 is why this migration exists. Older published clients call this with
-  -- 7 named args, leaving p_assignee_id NULL, and step 3 then resolved to
-  -- "lowest assignee UUID" — an arbitrary instructor who had nothing to do with
-  -- the name the site displayed on the confirmation screen. The default gives
-  -- those clients a correct answer without waiting for a redeploy.
-  v_requested := COALESCE(
-    p_assignee_id,
-    (SELECT NULLIF(t.settings ->> 'defaultAssigneeId', '')::uuid
-       FROM tenants t WHERE t.id = p_tenant_id)
-  );
-
-  SELECT w.assignee_id INTO v_assignee
-  FROM agenda_working_windows(
-         p_tenant_id, (p_starts_at AT TIME ZONE v_tz)::date, v_requested) w
-  WHERE (p_starts_at AT TIME ZONE v_tz)::time >= w.win_start
-    AND (v_ends AT TIME ZONE v_tz)::time <= w.win_end
-  ORDER BY w.assignee_id
-  LIMIT 1;
-  IF v_assignee IS NULL THEN RAISE EXCEPTION 'slot outside working hours'; END IF;
-
-  -- serialize per (tenant, assignee) to kill the double-book race
-  PERFORM pg_advisory_xact_lock(hashtextextended(p_tenant_id::text || v_assignee::text, 0));
-
-  IF EXISTS (
-    SELECT 1 FROM appointments b
-    WHERE b.tenant_id = p_tenant_id
-      AND b.assignee_id = v_assignee
-      AND b.status NOT IN ('cancelled', 'no_show')
-      AND b.starts_at < v_ends
-      AND COALESCE(b.ends_at, b.starts_at) > p_starts_at
-  ) THEN
-    RAISE EXCEPTION 'slot no longer available';
-  END IF;
-
-  -- anti-spam: cap open future public bookings per phone per tenant
-  IF (
-    SELECT count(*) FROM appointments b
-    JOIN people p ON p.id = b.party_id
-    WHERE b.tenant_id = p_tenant_id
-      AND p.phone = v_phone
-      AND b.starts_at > now()
-      AND b.status = 'scheduled'
-  ) >= 3 THEN
-    RAISE EXCEPTION 'too many open bookings for this phone';
-  END IF;
-
-  -- upsert the client by (tenant, kind, phone), serialized by advisory lock
-  -- (kind is tenant-configured, so the customer-only partial index can't
-  -- arbitrate)
-  PERFORM pg_advisory_xact_lock(hashtextextended(p_tenant_id::text || ':' || v_phone, 1));
-
-  SELECT p.id INTO v_person_id
-  FROM people p
-  WHERE p.tenant_id = p_tenant_id AND p.kind = v_client_kind AND p.phone = v_phone
-  ORDER BY p.created_at
-  LIMIT 1;
-
-  IF v_person_id IS NOT NULL THEN
-    UPDATE people SET
-      name = trim(p_name),
-      email = COALESCE(p_email, people.email),
-      updated_at = now()
-    WHERE id = v_person_id;
-  ELSE
-    INSERT INTO people (tenant_id, kind, name, phone, email, metadata)
-    VALUES (p_tenant_id, v_client_kind, trim(p_name), v_phone, p_email,
-            jsonb_build_object('source', 'public_booking'))
-    RETURNING id INTO v_person_id;
-  END IF;
-
-  -- order + booking + order_item (statuses hardcoded — caller cannot set)
-  INSERT INTO orders (tenant_id, kind, status, party_id, assignee_id, subtotal, total, notes, metadata)
-  VALUES (p_tenant_id, 'appointment', 'scheduled', v_person_id, v_assignee,
-          v_service.price, v_service.price, v_notes,
-          jsonb_build_object('source', 'public_booking',
-                             'serviceNames', v_service.name,
-                             'contactName', trim(p_name)))
-  RETURNING id INTO v_order;
-
-  INSERT INTO appointments (tenant_id, kind, party_id, assignee_id, order_id,
-                        starts_at, ends_at, status, notes, metadata)
-  VALUES (p_tenant_id, 'appointment', v_person_id, v_assignee, v_order,
-          p_starts_at, v_ends, 'scheduled', v_notes,
-          jsonb_build_object('source', 'public_booking', 'serviceNames', v_service.name))
-  RETURNING id INTO v_booking;
-
-  INSERT INTO order_items (order_id, service_id, name, quantity, unit_price, total,
-                           sort_order, duration_minutes, assignee_id)
-  VALUES (v_order, v_service.id, v_service.name, 1, v_service.price, v_service.price,
-          0, v_service.duration_minutes, v_assignee);
-
-  RETURN QUERY SELECT v_booking, p_starts_at, v_ends;
-END;
-$function$;

package/src/migrations/012_drop_legacy_booking_overload.sql

@@ -1,29 +0,0 @@
--- plugin-agenda 012: retire the pre-assignee create_public_booking overload.
---
--- ⚠️  DO NOT APPLY UNTIL @fayz-ai/plugin-agenda IS REPUBLISHED *AND* EVERY LIVE
---     SITE HAS BEEN REDEPLOYED. Applying early breaks public booking on any
---     site still serving a bundle that calls the 7-argument signature — the
---     call stops resolving and every submission fails.
---
--- Some pools carry two overloads side by side:
---     create_public_booking(uuid,uuid,timestamptz,text,text,text,text)
---     create_public_booking(uuid,uuid,timestamptz,text,text,text,text,uuid)
---
--- Nothing errors when both exist, which is exactly the problem: a stale client
--- silently resolves to the 7-arg one, which cannot know which professional the
--- visitor was shown and falls back to "lowest assignee UUID". The site confirms
--- one name, the agenda records another, and no one finds out until someone
--- compares the two screens.
---
--- 011 makes that fallback survivable (tenant default). This makes it
--- impossible — but only once no caller needs the old signature.
---
--- Verify before running:
---   1. npm view @fayz-ai/plugin-agenda version   → the republished version
---   2. every deployed bundle greps for p_assignee_id:
---        curl -s https://<site>/assets/index-*.js | grep -c p_assignee_id
---      Each must be ≥ 2 (slots + booking). Zero means that site still needs it.
-
-DROP FUNCTION IF EXISTS public.create_public_booking(
-  uuid, uuid, timestamptz, text, text, text, text
-);

package/src/migrations/013_normalize_v_appointments.sql

@@ -1,199 +0,0 @@
--- plugin-agenda 013: one booking read model — v_appointments.
---
--- Three views described the same 34 rows:
---
---   v_bookings                 → thin alias over the legacy view (002 compat shim)
---   v_bookings_legacy_beauty   → the pre-pools shape, still feeding 5 rep_* views
---   v_appointments             → the canonical name, and the only one the SDK reads
---
--- The school pool already had only v_appointments; the salon pool carried all
--- three. Same data, three names, and reports quietly wired to the oldest one.
---
--- v_appointments was a strict SUBSET, so it could not simply absorb them. It
--- gains the 7 columns it lacked — most importantly `services`, the order_items
--- aggregate that 4 of the 5 reports depend on. That also retires a documented
--- N+1: getBookingById fetches order_items in a second round-trip precisely
--- because this view had no line items (see plugin-agenda/src/data/supabase.ts).
---
--- Deliberately NOT copied from the legacy view:
---   • total_duration_minutes — legacy sums order_items durations, the canonical
---     measures the slot. They disagree, no report reads it, and the SDK relies
---     on the canonical meaning. Kept as-is.
---   • client_name — the canonical COALESCEs with metadata->>'title' so blocks
---     and personal events show a label instead of NULL. Kept as-is (an
---     improvement the legacy shape never had).
-
--- 1. v_appointments becomes the superset. Columns are APPENDED: CREATE OR
---    REPLACE VIEW cannot reorder or drop, and the SDK selects '*'.
-CREATE OR REPLACE VIEW public.v_appointments
-WITH (security_invoker = true) AS
- SELECT b.id,
-    b.tenant_id,
-    b.kind,
-    b.starts_at,
-    b.ends_at,
-    b.status,
-    b.notes,
-    b.order_id,
-    b.location_id,
-    b.metadata,
-    b.created_at,
-    b.updated_at,
-    b.party_id AS client_id,
-    COALESCE(pc.name, (b.metadata ->> 'title'::text)) AS client_name,
-    pc.phone AS client_phone,
-    pc.email AS client_email,
-    pc.avatar_url AS client_avatar_url,
-    b.assignee_id AS professional_id,
-    ps.name AS professional_name,
-    ps.avatar_url AS professional_avatar_url,
-    l.name AS location_name,
-    o.total AS order_total,
-    o.status AS order_status,
-    ((EXTRACT(epoch FROM (COALESCE(b.ends_at, b.starts_at) - b.starts_at)))::integer / 60) AS total_duration_minutes,
-    -- appended:
-    o.reference_number,
-    o.status AS stage,
-    (o.metadata ->> 'direction'::text) AS direction,
-    ( SELECT json_agg(json_build_object('id', oi.id, 'serviceId', oi.service_id,
-                                        'name', oi.name, 'durationMinutes', oi.duration_minutes,
-                                        'price', oi.unit_price, 'assigneeId', oi.assignee_id)
-                      ORDER BY oi.sort_order)
-        FROM order_items oi
-       WHERE (oi.order_id = b.order_id)) AS services,
-    inv.status AS payment_status,
-    inv.paid AS order_paid,
-    inv.balance AS order_balance
-   FROM (((((appointments b
-     LEFT JOIN people pc ON ((pc.id = b.party_id)))
-     LEFT JOIN people ps ON ((ps.id = b.assignee_id)))
-     LEFT JOIN locations l ON ((l.id = b.location_id)))
-     LEFT JOIN orders o ON ((o.id = b.order_id)))
-     LEFT JOIN v_invoice_balances inv ON ((inv.invoice_id = b.order_id)));
-
--- 2. Repoint the reports off the legacy view. Bodies are unchanged
---    except for the source relation.
-
-CREATE OR REPLACE VIEW public.rep_appointments_by_period AS
-SELECT tenant_id,
-    id AS booking_id,
-    (starts_at)::date AS date,
-    starts_at,
-    client_id,
-    client_name,
-    professional_id,
-    professional_name,
-    COALESCE(((services -> 0) ->> 'name'::text), ((services -> 0) ->> 'serviceName'::text)) AS service_name,
-    status,
-    order_total AS revenue,
-    created_at,
-    updated_at
-   FROM v_appointments b;
-
--- legacy_pre_pools only exists on pools migrated from the pre-pool era; fresh
--- pools get the same shape with confirmation columns defaulting to pending/NULL.
-DO $$
-BEGIN
-  IF to_regclass('legacy_pre_pools.appointments') IS NOT NULL THEN
-    EXECUTE $v$
-      CREATE OR REPLACE VIEW public.rep_confirmation_queue AS
-      SELECT b.tenant_id,
-          b.id AS booking_id,
-          (b.starts_at)::date AS date,
-          b.starts_at,
-          b.client_id,
-          b.client_name,
-          b.professional_id,
-          b.professional_name,
-          COALESCE(((b.services -> 0) ->> 'name'::text), ((b.services -> 0) ->> 'serviceName'::text)) AS service_name,
-          COALESCE(a.confirmation_status, 'pending'::text) AS confirmation_status,
-          a.confirmation_channel,
-          a.confirmation_sent_at,
-          a.confirmed_at,
-          b.created_at,
-          b.updated_at
-         FROM (v_appointments b
-           LEFT JOIN legacy_pre_pools.appointments a ON ((a.booking_id = b.id)))
-        WHERE ((b.status <> ALL (ARRAY['cancelled'::text, 'no_show'::text])) AND (b.starts_at >= (now() - '1 day'::interval)))
-    $v$;
-  ELSE
-    EXECUTE $v$
-      CREATE OR REPLACE VIEW public.rep_confirmation_queue AS
-      SELECT b.tenant_id,
-          b.id AS booking_id,
-          (b.starts_at)::date AS date,
-          b.starts_at,
-          b.client_id,
-          b.client_name,
-          b.professional_id,
-          b.professional_name,
-          COALESCE(((b.services -> 0) ->> 'name'::text), ((b.services -> 0) ->> 'serviceName'::text)) AS service_name,
-          'pending'::text AS confirmation_status,
-          NULL::text AS confirmation_channel,
-          NULL::timestamptz AS confirmation_sent_at,
-          NULL::timestamptz AS confirmed_at,
-          b.created_at,
-          b.updated_at
-         FROM v_appointments b
-        WHERE ((b.status <> ALL (ARRAY['cancelled'::text, 'no_show'::text])) AND (b.starts_at >= (now() - '1 day'::interval)))
-    $v$;
-  END IF;
-END $$;
-
--- v_clients (beauty Ring-2 extension) may not exist on non-salon pools — the
--- report only makes sense where it does.
-DO $$
-BEGIN
-  IF to_regclass('public.v_clients') IS NULL THEN RETURN; END IF;
-  EXECUTE $v$
-    CREATE OR REPLACE VIEW public.rep_new_clients AS
-    SELECT c.tenant_id,
-        c.id AS client_id,
-        (c.created_at)::date AS date,
-        c.name AS client_name,
-        c.origin,
-        first_booking.service_name AS first_service,
-        c.created_at,
-        c.updated_at
-       FROM (v_clients c
-         LEFT JOIN LATERAL ( SELECT COALESCE(((b.services -> 0) ->> 'name'::text), ((b.services -> 0) ->> 'serviceName'::text)) AS service_name
-               FROM v_appointments b
-              WHERE (b.client_id = c.id)
-              ORDER BY b.starts_at
-             LIMIT 1) first_booking ON (true))
-  $v$;
-END $$;
-
-CREATE OR REPLACE VIEW public.rep_revenue_by_professional AS
-SELECT tenant_id,
-    (starts_at)::date AS date,
-    professional_id,
-    COALESCE(professional_name, 'Sem profissional'::text) AS professional_name,
-    (count(*))::integer AS appointment_count,
-    (COALESCE(sum(NULLIF(order_total, (0)::numeric)), (0)::numeric))::numeric(14,2) AS total_revenue,
-    (COALESCE(avg(NULLIF(order_total, (0)::numeric)), (0)::numeric))::numeric(14,2) AS avg_ticket,
-    (0)::numeric(14,2) AS commission,
-    max(updated_at) AS updated_at
-   FROM v_appointments b
-  WHERE (status <> ALL (ARRAY['cancelled'::text, 'no_show'::text]))
-  GROUP BY tenant_id, ((starts_at)::date), professional_id, COALESCE(professional_name, 'Sem profissional'::text);
-
-CREATE OR REPLACE VIEW public.rep_revenue_by_service AS
-SELECT b.tenant_id,
-    (b.starts_at)::date AS date,
-    NULLIF((service_item.value ->> 'serviceId'::text), ''::text) AS service_id,
-    COALESCE((service_item.value ->> 'name'::text), (service_item.value ->> 'serviceName'::text), 'Sem servico'::text) AS service_name,
-    (count(DISTINCT b.id))::integer AS quantity,
-    (COALESCE(sum((NULLIF((service_item.value ->> 'price'::text), ''::text))::numeric), (0)::numeric))::numeric(14,2) AS total_revenue,
-    (COALESCE(avg((NULLIF((service_item.value ->> 'price'::text), ''::text))::numeric), (0)::numeric))::numeric(14,2) AS avg_ticket,
-    max(b.updated_at) AS updated_at
-   FROM (v_appointments b
-     CROSS JOIN LATERAL jsonb_array_elements(COALESCE((b.services)::jsonb, '[]'::jsonb)) service_item(value))
-  WHERE (b.status <> ALL (ARRAY['cancelled'::text, 'no_show'::text]))
-  GROUP BY b.tenant_id, ((b.starts_at)::date), NULLIF((service_item.value ->> 'serviceId'::text), ''::text), COALESCE((service_item.value ->> 'name'::text), (service_item.value ->> 'serviceName'::text), 'Sem servico'::text);
-
--- 3. Retire the duplicates. v_bookings goes first: it reads the legacy view.
---    Nothing in the SDK references either name (checked: only migrations and a
---    README mention v_bookings).
-DROP VIEW IF EXISTS public.v_bookings;
-DROP VIEW IF EXISTS public.v_bookings_legacy_beauty;